Censys, a company that scans the internet, counted 267,915 IP addresses running AI-related software that anyone online can reach in July 2026, Help Net Security reported on 15 October. In October 2025 the count was 164,088, so it rose 63% across 44 products combined. One of them, n8n, links AI agents to other services and accounts for 113,926 hosts. Censys saw exposed industrial control systems grow only about 4% in two and a half years.
Censys found that 76.1% of n8n servers that show their version run a release affected by at least one flaw rated 9.0 or higher. The report adds that these servers keep the logins for the services their workflows connect to. It gives no n8n growth figure and does not say whether attackers have hit any of these servers. For OpenClaw, a self-hosted AI agent, Censys saw two exposed control panels six days after the January 5 release. By April 7 it saw 85,478.
Our reading: a workflow server that holds logins for other systems is only as safe as the server itself. Buyers and operators can ask which such servers the internet can reach, which logins they hold, and who is responsible for upgrading them.