Shadowserver-foundation uses 27 IP ranges covering a total of 8,704 IP addresses. The IPs span 7 countries, including United States, United Arab Emirates, and South Africa. We identified 5 cities across 5 regions—for example Ashburn, Chicago, and San Francisco.