ASTRA — Global Attack Surface Tracker

Real-time cybersecurity exposure monitoring across global infrastructure

---

Last Updated: 2026-05-17 19:03:56 UTC Data Sources: Shodan Pro • GreyNoise • VirusTotal Coverage: 50 Countries • 5 Organizations

---

📊 Executive Summary

🚨 CRITICAL ALERTS 2,270,561 Critical Vulnerabilities

🌐 EXPOSED SERVICES 113,529,236 Internet-Facing Assets

⚡ ACTIVE THREATS 13,189 Live Attack Attempts

🦠 MALWARE DOMAINS 1 Confirmed Malicious

---

🎯 Threat Intelligence Matrix

Risk Category	Count	Percentage	Trend	Source	Severity
Exposed Services	113,529,236	100.0%	📊	Shodan Pro	⚠️ HIGH
Critical Vulns	2,270,561	2.0%	📈	Shodan Pro	🔴 CRITICAL
Active Threats	13,189	0.0%	📈	GreyNoise	🔴 CRITICAL
Malicious Domains	1	0.1%	📊	VirusTotal	🔴 CRITICAL
Suspicious Domains	0	0.0%	📉	VirusTotal	⚠️ HIGH

---

🌎 Geographic Risk Distribution

🏆 TOP 10 COUNTRIES BY EXPOSURE (Click to expand)

Rank	Country	🌐 Exposed Services	🚨 Critical Vulns	⚡ Threat Activity	📊 Risk Score	📈 Trend
1	US	39,284,675	785,693	1,808	🟡 HIGH	📊
2	DE	9,446,725	188,934	848	🟡 HIGH	📊
3	CN	9,183,934	183,678	1,908	🟡 HIGH	📊
4	JP	4,761,211	95,224	1,022	🟡 HIGH	📊
5	GB	3,819,414	76,388	1,011	🟡 HIGH	📊
6	HK	3,785,172	75,703	0	🟢 MODERATE	📊
7	SG	3,390,820	67,816	0	🟢 MODERATE	📊
8	IN	3,352,510	67,050	0	🟢 MODERATE	📊
9	FR	3,230,558	64,611	1,271	🟡 HIGH	📊
10	NL	3,015,015	60,300	0	🟢 MODERATE	📊

📊 Country Exposure Distribution

Top 5 Countries (by exposed services):
==================================================
1. US  ██████████████████████████████  59.1% (39,284,675)
2. DE  ███████░░░░░░░░░░░░░░░░░░░░░░░  14.2% (9,446,725)
3. CN  ███████░░░░░░░░░░░░░░░░░░░░░░░  13.8% (9,183,934)
4. JP  ███░░░░░░░░░░░░░░░░░░░░░░░░░░░   7.2% (4,761,211)
5. GB  ██░░░░░░░░░░░░░░░░░░░░░░░░░░░░   5.7% (3,819,414)

🗺️ Global Threat Landscape

🌍 COMPLETE WORLD COVERAGE (Click to expand)

Country	Flag	🌐 Exposed Services	🚨 Critical Vulns	⚡ Threat Activity	📊 Risk Level	💯 Security Score
US	🇺🇸	39,284,675	785,693	1,808	🟢 LOW	99.8%
DE	🇩🇪	9,446,725	188,934	848	🟢 LOW	99.8%
CN	🇨🇳	9,183,934	183,678	1,908	🟢 LOW	99.8%
JP	🇯🇵	4,761,211	95,224	1,022	🟢 LOW	99.8%
GB	🇬🇧	3,819,414	76,388	1,011	🟢 LOW	99.8%
HK	🏳️	3,785,172	75,703	0	🟢 LOW	99.8%
SG	🏳️	3,390,820	67,816	0	🟢 LOW	99.8%
IN	🇮🇳	3,352,510	67,050	0	🟢 LOW	99.8%
FR	🇫🇷	3,230,558	64,611	1,271	🟢 LOW	99.8%
NL	🇳🇱	3,015,015	60,300	0	🟢 LOW	99.8%
BR	🇧🇷	2,409,400	48,188	0	🟢 LOW	99.8%
KR	🇰🇷	2,231,385	44,627	1,140	🟢 LOW	99.8%
IE	🏳️	2,075,841	41,516	0	🟢 LOW	99.8%
CA	🇨🇦	2,059,223	41,184	1,532	🟢 LOW	99.8%
AU	🇦🇺	1,938,043	38,760	1,200	🟢 LOW	99.8%
IT	🇮🇹	1,509,440	30,188	0	🟢 LOW	99.8%
TW	🏳️	1,207,106	24,142	0	🟢 LOW	99.8%
VN	🏳️	1,024,211	20,484	0	🟢 LOW	99.8%
ES	🇪🇸	1,006,937	20,138	0	🟢 LOW	99.8%
FI	🏳️	994,094	19,881	0	🟢 LOW	99.8%
SE	🇸🇪	972,018	19,440	0	🟢 LOW	99.8%
RU	🇷🇺	904,918	18,098	1,449	🟢 LOW	99.8%
PL	🇵🇱	859,931	17,198	0	🟢 LOW	99.8%
ID	🏳️	827,242	16,544	0	🟢 LOW	99.8%
MX	🏳️	730,085	14,601	0	🟢 LOW	99.8%
TH	🏳️	653,019	13,060	0	🟢 LOW	99.8%
CH	🇨🇭	636,592	12,731	0	🟢 LOW	99.8%
TR	🏳️	599,262	11,985	0	🟢 LOW	99.8%
ZA	🏳️	574,887	11,497	0	🟢 LOW	99.8%
AE	🏳️	498,003	9,960	0	🟢 LOW	99.8%
BE	🇧🇪	496,322	9,926	0	🟢 LOW	99.8%
RO	🏳️	470,181	9,403	0	🟢 LOW	99.8%
AR	🏳️	463,239	9,264	0	🟢 LOW	99.8%
VE	🏳️	439,488	8,789	0	🟢 LOW	99.8%
AT	🏳️	437,625	8,752	0	🟢 LOW	99.8%
CZ	🏳️	404,060	8,081	0	🟢 LOW	99.8%
MY	🏳️	397,073	7,941	0	🟢 LOW	99.8%
IL	🏳️	381,577	7,631	0	🟢 LOW	99.8%
UA	🏳️	375,952	7,519	0	🟢 LOW	99.8%
DK	🏳️	344,581	6,891	0	🟢 LOW	99.8%
CL	🏳️	289,193	5,783	0	🟢 LOW	99.8%
CO	🏳️	282,676	5,653	0	🟢 LOW	99.8%
BG	🏳️	282,330	5,646	0	🟢 LOW	99.8%
SA	🏳️	244,407	4,888	0	🟢 LOW	99.8%
PH	🏳️	232,163	4,643	0	🟢 LOW	99.8%
KZ	🏳️	215,118	4,302	0	🟢 LOW	99.8%
HU	🏳️	211,508	4,230	0	🟢 LOW	99.8%
TN	🏳️	206,466	4,129	0	🟢 LOW	99.8%
NO	🇳🇴	189,589	3,791	0	🟢 LOW	99.8%
EG	🏳️	184,017	3,680	0	🟢 LOW	99.8%

🗺️ Threat Tier Summary

Tier	Threshold	Countries
🔴 Critical	≥ 2000 threat activity	—
🟠 High	1000 – 1999	US · CN · JP · GB · FR · KR · CA · AU …
🟡 Medium	1 – 999	DE
🟢 Low	0	40 countries

🎯 Regional Threat Analysis

Region	Countries	Total Threats	Avg Security Score	Risk Level
🇺🇸 North America	2	3,340	99.8%	🟢 LOW
🇪🇺 Europe	11	3,130	99.8%	🟢 LOW
🇨🇳 Asia-Pacific	4	5,270	99.8%	🟢 LOW
🇷🇺 Eastern Europe	1	1,449	99.8%	🟢 LOW
🇧🇷 South America	1	0	99.8%	🟢 LOW
🇮🇳 South Asia	1	0	99.8%	🟢 LOW

---

🏢 Corporate Infrastructure Analysis

🎯 TOP 10 ORGANIZATIONS BY EXPOSURE (Click to expand)

Rank	Organization	🌐 Exposed Services	🚨 Critical Vulns	📊 Risk Level	🔒 Security Score
1	Amazon	19,902,680	298,540	🟢 LOW	98.5/100
2	Microsoft	7,563,254	113,448	🟢 LOW	98.5/100
3	Cloudflare	7,504,644	112,569	🟢 LOW	98.5/100
4	Google	6,608,795	99,131	🟢 LOW	98.5/100
5	DigitalOcean	6,079,569	91,193	🟢 LOW	98.5/100

📈 Organization Security Metrics

Security Score Distribution:
========================================
Amazon       ███████████████████░  98.5/100
Microsoft    ███████████████████░  98.5/100
Cloudflare   ███████████████████░  98.5/100
Google       ███████████████████░  98.5/100
DigitalOcean ███████████████████░  98.5/100

---

🔍 Data Sources & Intelligence Pipeline

🛡️ API Service	📊 Status	📈 Data Points	🎯 Purpose	⚡ Update Rate
Shodan Pro	🟢 Active	55	Device & Service Discovery	Real-time
GreyNoise	🟢 Active	13,189	Threat Intelligence	6 hours
VirusTotal	🟢 Active	1	Malware & Domain Analysis	6 hours

---

📋 Methodology & Data Processing

🔬 TECHNICAL IMPLEMENTATION (Click to expand)

Data Collection Pipeline

graph LR
    A[Shodan Pro API] --> D[Data Aggregator]
    B[GreyNoise API] --> D
    C[VirusTotal API] --> D
    D --> E[Risk Calculator]
    E --> F[README Generator]
    F --> G[GitHub Dashboard]

Loading

Risk Scoring Algorithm

• Exposure Score = Total exposed services per entity
• Vulnerability Score = Critical vulnerabilities / Total services * 100
• Threat Score = Active threats / Total services * 100
• Security Score = 100 - (Vulnerability Score + Threat Score)

Update Process

1. Data Fetch (Every 6 hours via GitHub Actions)
2. Risk Analysis (Automated scoring)
3. Dashboard Generation (README.md updated with live data)
4. Version Control (Automated commit with timestamp)

---

⚡ Quick Links

---

📁 Repository Structure

ASTRA/
├── data/
│   └── latest.json          # Live threat intelligence snapshot (updated every 6h)
├── frontend/
│   ├── index.html           # Dashboard entry point
│   ├── app.js               # Rendering logic (Chart.js + Leaflet)
│   └── styles.css           # Theming and layout
├── scripts/
│   ├── fetch_data.py        # API data collection
│   └── generate_enhanced_dashboard.py  # README generator
└── .github/workflows/
    ├── data-fetch.yml       # Runs every 6 hours — fetches data, updates README
    └── deploy-pages.yml     # Deploys frontend/ to GitHub Pages on push

---

ASTRA — Attack Surface Tracker & Risk Analyzer

Automated threat intelligence for cybersecurity professionals

⚠️ Disclaimer: This dashboard is for informational purposes only. Always verify findings with additional sources before taking action.

---

Generated automatically by ASTRA • 2026-05-17 19:03:56 UTC • Data refreshes every 6 hours