What this ranking shows
Open proxies relay traffic for unauthenticated users and can obscure the original source of scanning, credential attacks, spam, and other abuse. Aggregating these endpoints by ASN shows where the largest observed populations are hosted.
The ranking uses unique proxy IPs seen during a rolling 31-day window. Observation totals, country coverage, active days, and daily unique-IP timelines provide additional context for each network.
A network can contain vulnerable or misconfigured customer systems without the operator intentionally providing an abusive service. Use the ranking as investigation context and validate individual endpoints before taking action.