According to a new Censys report, the internet's attack surface is changing at very different speeds. AI-related software exposed to the public internet grew 63% in nine months, from 164,088 IP addresses in October 2025 to 267,915 by July 2026. The growth spans 44 products, with n8n accounting for 113,926 hosts; 76.1% of n8n servers that report a version run a release affected by a vulnerability scored 9.0 or higher. OpenClaw, a self-hosted AI agent, went from two exposed control panels in January 2026 to 85,478 by April.
Meanwhile, older systems are not going away. Censys tracked Telerik Report Server, Jenkins, Cleo MFT, and Microsoft SharePoint Server from January 2024 to May 2026 and found the oldest version group changed its share by about one percentage point or less. Cleo MFT hosts upgraded slowly until two critical flaws were added to CISA's catalog and Cl0p ransomware gang claimed attacks; by January 2025, 63% of returning Cleo hosts had moved to a newer version. Jenkins hosts upgraded at 5% to 9% per month regardless of vulnerability disclosures.
Industrial control systems remain a concern. Censys counted about 134,000 exposed ICS hosts in early 2026, up from 129,000 in 2024, with roughly 70% sitting on consumer and mobile networks where registration records point to carriers rather than operators. More than 80% of ICS hosts also run an ordinary IT service such as HTTP or SSH, giving attackers a familiar entry point. Threat infrastructure also splits by type: China hosted 36.5% of host-based threats like C2 servers, while the U.S. hosted 45.5% of web-based threats like phishing pages.