🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 994071 Page: 1016 / 9941 (100 per page) Showing: 101501-101600 Last Imported: 07/07/2026, 11:27:53
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 1016 of 9941
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
156.234.43.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS138415Yancy LimitedYancy Limited27/05/2026, 02:05:1324/06/2026, 19:46:21 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272827/05/2026, 08:27:03-
43.131.253.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd27/05/2026, 02:05:1327/05/2026, 08:23:55 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-27043, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-12254, CVE-2024-12718, CVE-2024-3219, CVE-2024-39894, CVE-2024-4032, CVE-2024-6232, CVE-2024-6387, CVE-2024-6923, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-12084, CVE-2025-12781, CVE-2025-13836, CVE-2025-13837, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-451927/05/2026, 08:27:13tencent.com
4.151.167.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:05:1327/05/2026, 08:23:55 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 08:27:15-
20.45.48.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:05:1327/05/2026, 08:23:54 - - ----
16.176.171.•••:18789 - 🇦🇺 Australia - true Clean AS16509Amazon.com, Inc.Amazon Corporate Services27/05/2026, 02:05:1307/07/2026, 07:18:47 No No --21/05/2026, 08:27:26-
159.194.200.•••:18789 - 🇷🇺 Russia - false Clean AS198610Beget LLCBeget LLC27/05/2026, 02:05:1330/05/2026, 19:53:22 - - ----
44.197.182.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services27/05/2026, 02:05:1306/07/2026, 06:56:54 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 08:27:33-
173.255.227.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode27/05/2026, 02:05:1327/05/2026, 08:23:54 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 08:27:41-
8.148.194.•••:18789 - 🇸🇬 Singapore - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud27/05/2026, 02:05:1306/07/2026, 21:16:32 No No -CVE-2025-59362, CVE-2025-6216827/05/2026, 08:27:53-
2a02:4780:5e:5aed::1:18789 - 🇲🇾 Malaysia - false Clean AS47583Hostinger International LimitedHostinger27/05/2026, 02:05:1327/05/2026, 08:23:53 - - ----
180.104.184.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinanet Jiangsu Province Network27/05/2026, 02:05:1327/05/2026, 08:23:53 No No --21/05/2026, 08:27:58-
98.84.191.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services27/05/2026, 02:05:1327/05/2026, 08:23:53 - - ----
2806:2f0:6141:f691:e2d5:5eff:fe8c:5b8:18789 - 🇲🇽 Mexico - false Clean AS17072TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.Total Play Telecomunicaciones27/05/2026, 02:05:1227/05/2026, 08:23:53 - - ----
185.239.3.•••:18789 - 🇮🇷 Iran Yes true Clean AS60631Vandad Vira Hooman LLCPadidar Technology27/05/2026, 02:05:1206/07/2026, 02:39:52 Yes - -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161727/05/2026, 08:28:23eu.org
149.50.35.•••:18789 - 🇩🇪 Germany - false Clean AS198967-> IP Transit Customer AS33873 <-BITel27/05/2026, 02:05:1227/05/2026, 08:23:53 - - ----
167.99.151.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean27/05/2026, 02:05:1227/05/2026, 16:55:34 No Yes APT15, APT28, APT31, APT35, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 16:58:12-
54.196.51.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon27/05/2026, 02:05:1127/05/2026, 09:06:07 - - ----
162.253.237.•••:18789 - 🇺🇸 United States - false Clean AS27005Pinpoint Communications, Inc.Pinpoint27/05/2026, 02:05:1127/06/2026, 20:44:41 Yes No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620027/06/2026, 15:04:02warecap.com, pnpt.com, fiberlinknow.com, swnebr.net
124.222.31.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud27/05/2026, 02:05:1005/06/2026, 22:28:32 Yes Yes APT37, El-Machete-30/05/2026, 01:39:23tencent.com
154.86.136.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS134548DXTL Tseung Kwan O ServiceDingFeng XinHui HK Technology Limited27/05/2026, 02:05:1013/06/2026, 04:08:27 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi-30/05/2026, 00:15:14-
20.225.171.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:05:1027/05/2026, 09:06:06 - - ----
34.47.253.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle27/05/2026, 02:05:1006/07/2026, 00:31:27 No No --24/05/2026, 01:40:19-
60.220.163.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChangzhi Lichengju IP Pool27/05/2026, 02:05:1027/05/2026, 09:06:05 - - ----
45.82.120.•••:18789 - 🇩🇪 Germany - false Clean AS44486synlinq.deRöthunbeck27/05/2026, 02:03:2510/06/2026, 03:57:22 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2010-5107, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-0777, CVE-2016-0778, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:19:06-
44.205.167.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services27/05/2026, 02:03:2527/05/2026, 08:22:07 No No -CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:19:07-
154.86.136.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS134548DXTL Tseung Kwan O ServiceDingFeng XinHui HK Technology Limited27/05/2026, 02:03:2411/06/2026, 21:46:30 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi-27/05/2026, 06:19:12-
88.199.196.•••:18789 - 🇵🇱 Poland - false Clean AS20960TK Telekom sp. z o.o.WrocNet27/05/2026, 02:03:2429/06/2026, 08:18:08 No No --21/05/2026, 06:19:16-
39.96.88.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft27/05/2026, 02:03:2405/07/2026, 08:06:25 Yes No -CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541404/07/2026, 01:28:48aliyun.com
47.84.67.•••:18789 - 🇺🇸 United States Yes true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud27/05/2026, 02:03:2406/07/2026, 19:48:13 Yes Yes APT15, APT31, Bitter APT, Bluenoroff, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Salt Typhoon, SideWinder APTCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138527/05/2026, 06:19:26hichina.com, alibaba-inc.com
111.170.14.•••:18789 - 🇨🇳 China mainland - false Leaked AS151185China TelecomChinaNet Hubei27/05/2026, 02:03:2430/05/2026, 19:09:24 Yes - --27/05/2026, 06:19:28bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
154.86.147.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS134548DXTL Tseung Kwan O ServiceDingfeng Network27/05/2026, 02:03:2412/06/2026, 21:46:02 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, goziCVE-2014-407827/05/2026, 06:19:33-
117.72.107.•••:18789 - 🇨🇳 China mainland - false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com27/05/2026, 02:03:2320/06/2026, 02:37:10 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 06:19:34jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
65.108.196.•••:18789 - 🇫🇮 Finland Yes false Leaked AS24940Hetzner Online GmbHHetzner27/05/2026, 02:03:2305/06/2026, 13:11:22 Yes - --27/05/2026, 06:19:43hetzner.com
3.80.200.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon Web Services27/05/2026, 02:03:2310/06/2026, 11:44:17 No No --21/05/2026, 06:19:49-
38.78.169.•••:18789 - 🇺🇸 United States - false Clean AS400391Pacific Wyyerd LLCWyyerd Group27/05/2026, 02:03:2327/05/2026, 08:22:05 - - ----
45.14.194.•••:18789 - 🇫🇷 France Yes false Leaked AS51167Contabo GmbHContabo27/05/2026, 02:03:2225/06/2026, 18:44:08 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 06:20:02contabo.de, contabo.net
156.234.43.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS138415Yancy LimitedYancy Limited27/05/2026, 02:03:2224/06/2026, 19:44:24 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272827/05/2026, 06:20:05-
43.131.253.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd27/05/2026, 02:03:2227/05/2026, 08:22:04 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-27043, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-12254, CVE-2024-12718, CVE-2024-3219, CVE-2024-39894, CVE-2024-4032, CVE-2024-6232, CVE-2024-6387, CVE-2024-6923, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-12084, CVE-2025-12781, CVE-2025-13836, CVE-2025-13837, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-451927/05/2026, 06:20:10tencent.com
4.151.167.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:03:2227/05/2026, 08:22:04 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 06:20:11-
20.45.48.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:03:2227/05/2026, 08:22:04 - - ----
16.176.171.•••:18789 - 🇦🇺 Australia - true Clean AS16509Amazon.com, Inc.Amazon Corporate Services27/05/2026, 02:03:2207/07/2026, 07:16:54 No No --21/05/2026, 07:42:02-
159.194.200.•••:18789 - 🇷🇺 Russia - false Clean AS198610Beget LLCBeget LLC27/05/2026, 02:03:2230/05/2026, 19:51:32 - - ----
44.197.182.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services27/05/2026, 02:03:2206/07/2026, 06:11:57 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 07:42:05-
173.255.227.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode27/05/2026, 02:03:2227/05/2026, 08:22:03 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 07:42:11-
8.148.194.•••:18789 - 🇸🇬 Singapore - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud27/05/2026, 02:03:2106/07/2026, 21:14:39 No No -CVE-2025-59362, CVE-2025-6216827/05/2026, 07:42:20-
2a02:4780:5e:5aed::1:18789 - 🇲🇾 Malaysia - false Clean AS47583Hostinger International LimitedHostinger27/05/2026, 02:03:2127/05/2026, 08:22:03 - - ----
180.104.184.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinanet Jiangsu Province Network27/05/2026, 02:03:2127/05/2026, 08:22:03 No No --21/05/2026, 07:42:24-
98.84.191.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services27/05/2026, 02:03:2127/05/2026, 08:22:03 - - ----
2806:2f0:6141:f691:e2d5:5eff:fe8c:5b8:18789 - 🇲🇽 Mexico - false Clean AS17072TOTAL PLAY TELECOMUNICACIONES, S.A.P.I. DE C.V.Total Play Telecomunicaciones27/05/2026, 02:03:2127/05/2026, 08:22:03 - - ----
185.239.3.•••:18789 - 🇮🇷 Iran Yes true Clean AS60631Vandad Vira Hooman LLCPadidar Technology27/05/2026, 02:03:2006/07/2026, 02:37:55 Yes - -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161727/05/2026, 07:42:45eu.org
149.50.35.•••:18789 - 🇩🇪 Germany - false Clean AS198967-> IP Transit Customer AS33873 <-BITel27/05/2026, 02:03:2027/05/2026, 08:22:02 - - ----
167.99.151.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean27/05/2026, 02:03:2027/05/2026, 16:53:42 No Yes APT15, APT28, APT31, APT35, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 13:19:51-
54.196.51.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon27/05/2026, 02:03:2027/05/2026, 09:04:18 No No --21/05/2026, 07:43:03-
162.253.237.•••:18789 - 🇺🇸 United States - false Clean AS27005Pinpoint Communications, Inc.Pinpoint27/05/2026, 02:03:1927/06/2026, 20:42:46 Yes No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620027/05/2026, 07:43:05warecap.com, pnpt.com, fiberlinknow.com, swnebr.net, cityofglenwood.org
124.222.31.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud27/05/2026, 02:03:1905/06/2026, 22:26:41 Yes Yes APT37, El-Machete-27/05/2026, 07:43:20tencent.com
154.86.136.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS134548DXTL Tseung Kwan O ServiceDingFeng XinHui HK Technology Limited27/05/2026, 02:03:1813/06/2026, 04:06:38 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi-27/05/2026, 07:43:26-
20.225.171.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:03:1827/05/2026, 09:04:17 No No --21/05/2026, 07:43:29-
34.47.253.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle27/05/2026, 02:03:1806/07/2026, 00:29:29 No No --21/05/2026, 07:43:37-
164.90.217.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean27/05/2026, 02:01:2803/07/2026, 23:15:08 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MoustachedBouncer, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2013-0340, CVE-2015-20107, CVE-2016-20012, CVE-2016-3189, CVE-2018-25032, CVE-2019-12900, CVE-2020-10735, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-28861, CVE-2021-29921, CVE-2021-36368, CVE-2021-3733, CVE-2021-3737, CVE-2021-41617, CVE-2022-0391, CVE-2022-37454, CVE-2022-42919, CVE-2022-45061, CVE-2023-24329, CVE-2023-27043, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:56:43sherpaswealth.com
45.82.120.•••:18789 - 🇩🇪 Germany - false Clean AS44486synlinq.deRöthunbeck27/05/2026, 02:01:2809/06/2026, 18:46:11 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2010-5107, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-0777, CVE-2016-0778, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:56:45-
35.171.192.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon27/05/2026, 02:01:2828/05/2026, 14:48:00 - - ----
39.96.88.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft27/05/2026, 02:01:2829/06/2026, 16:50:41 - - ----
159.195.104.•••:18789 - 🇩🇪 Germany - false Clean AS197540netcup GmbHNetcup27/05/2026, 02:01:2828/05/2026, 14:48:00 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:56:49-
129.121.99.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationOGTIPS127/05/2026, 02:01:2828/05/2026, 14:48:00 Yes No --27/05/2026, 06:56:50athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com
172.104.214.•••:18789 - 🇺🇸 United States Yes false Leaked AS63949Akamai Connected CloudLinode27/05/2026, 02:01:2828/05/2026, 15:30:58 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-59362, CVE-2025-61984, CVE-2025-61985, CVE-2025-62168, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 06:56:54akasripcn.net, edgekey-staging.net, akamaitechnologies.com, akamai.ae, edgekey.net, simplicita.com, inscname.net, edgesuite.net, akamaitech.net, cotendo.com, bubblewrapp.com, chameleonx.com, akamai-staging.net, cformanalytics.com, janrainbackplane.com, verivue.com, akamaized-staging.net, nominum.com, akadns.net, akamaized.net, akamai.net, akamaistream.net, d4p.net, akamaihd.net, instart.com, akamai.dk, edgefcs.net, linodeusercontent.com, akamaihd-staging.net, cotssl.net, akafms.net, akami.com, lognormal.net, octoshape.net, akamai-access.com, instartlogic.com, limelightnetworks.com, akamaiapis.net
207.180.234.•••:18789 - 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo27/05/2026, 02:01:2807/07/2026, 07:15:33 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2005-0004, CVE-2012-0540, CVE-2012-0572, CVE-2012-0574, CVE-2012-0578, CVE-2012-1688, CVE-2012-1689, CVE-2012-1690, CVE-2012-1697, CVE-2012-1702, CVE-2012-1703, CVE-2012-1705, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757, CVE-2012-2750, CVE-2012-3150, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163, CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2012-5096, CVE-2012-5612, CVE-2012-5614, CVE-2012-5627, CVE-2013-0367, CVE-2013-0368, CVE-2013-0371, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0386, CVE-2013-0389, CVE-2013-1502, CVE-2013-1506, CVE-2013-1511, CVE-2013-1512, CVE-2013-1521, CVE-2013-1523, CVE-2013-1526, CVE-2013-1531, CVE-2013-1532, CVE-2013-1544, CVE-2013-1548, CVE-2013-1552, CVE-2013-1555, CVE-2013-1861, CVE-2013-2375, CVE-2013-2376, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3783, CVE-2013-3793, CVE-2013-3794, CVE-2013-3801, CVE-2013-3802, CVE-2013-3804, CVE-2013-3805, CVE-2013-3808, CVE-2013-3809, CVE-2013-3812, CVE-2013-3839, CVE-2013-5807, CVE-2013-5891, CVE-2013-5908, CVE-2014-0001, CVE-2014-0384, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0420, CVE-2014-0437, CVE-2014-2419, CVE-2014-2430, CVE-2014-2431, CVE-2014-2432, CVE-2014-2436, CVE-2014-2438, CVE-2014-2440, CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484, CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496, CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559, CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2325, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-3152, CVE-2015-4752, CVE-2015-4757, CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2015-7744, CVE-2016-0502, CVE-2016-0610, CVE-2016-0616, CVE-2016-0642, CVE-2016-0651, CVE-2016-10708, CVE-2016-3471, CVE-2016-3492, CVE-2016-5584, CVE-2016-5612, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-6664, CVE-2016-7440, CVE-2016-9843, CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-15365, CVE-2017-15906, CVE-2017-15945, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3302, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3600, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819, CVE-2018-3058, CVE-2018-3063, CVE-2018-3066, CVE-2018-3081, CVE-2018-3133, CVE-2018-3174, CVE-2018-3282, CVE-2019-2455, CVE-2019-2481, CVE-2019-2503, CVE-2019-2529, CVE-2019-2614, CVE-2019-2627, CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805, CVE-2019-2974, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-14550, CVE-2020-2574, CVE-2020-2752, CVE-2020-2780, CVE-2020-2812, CVE-2020-28912, CVE-2020-2922, CVE-2021-2007, CVE-2021-2011, CVE-2021-2144, CVE-2021-41617, CVE-2021-46659, CVE-2021-46666, CVE-2021-46667, CVE-2021-46669, CVE-2022-27385, CVE-2022-27449, CVE-2022-31621, CVE-2022-31622, CVE-2022-31623, CVE-2022-31624, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5157, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-3272827/05/2026, 06:56:55contaboserver.net, contabo.de, contabo.net
34.242.87.•••:18789 - 🇮🇪 Ireland - true Clean AS16509Amazon.com, Inc.Amazon Data Services Ireland27/05/2026, 02:01:2806/07/2026, 16:11:12 No No --21/05/2026, 06:56:56-
4.151.167.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:01:2828/05/2026, 15:30:58 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 06:56:58-
20.45.48.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:01:2828/05/2026, 15:30:58 - - ----
44.197.182.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services27/05/2026, 02:01:2806/07/2026, 05:27:34 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:57:00-
124.156.166.•••:18789 - 🇸🇬 Singapore - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd27/05/2026, 02:01:2714/06/2026, 11:00:31 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:57:01tencent.com
66.94.110.•••:18789 - 🇺🇸 United States - false Leaked AS40021Contabo Inc.Contabo27/05/2026, 02:01:2706/07/2026, 14:45:03 Yes No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 06:57:02contaboserver.net, contabo.com, duckdns.org, contabo.net
149.50.35.•••:18789 - 🇩🇪 Germany - false Leaked AS198967-> IP Transit Customer AS33873 <-BITel27/05/2026, 02:01:2728/05/2026, 15:30:58 Yes - --27/05/2026, 06:57:06chickenkiller.com, quickconnect.to, fastspeed.dk, myfritz.net, fritz.com
167.99.151.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean27/05/2026, 02:01:2728/05/2026, 15:30:58 No Yes APT15, APT28, APT31, APT35, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:57:07-
162.253.237.•••:18789 - 🇺🇸 United States - false Clean AS27005Pinpoint Communications, Inc.Pinpoint27/05/2026, 02:01:2730/06/2026, 00:02:06 Yes No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620027/05/2026, 06:57:09warecap.com, pnpt.com, fiberlinknow.com, swnebr.net, cityofglenwood.org
140.245.46.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationOracle27/05/2026, 02:01:2716/06/2026, 14:44:00 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 06:57:10healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
43.133.199.•••:18789 - 🇯🇵 Japan - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd27/05/2026, 02:01:2728/05/2026, 15:30:57 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 06:57:12tencent.com
20.225.171.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 02:01:2728/05/2026, 15:30:57 No No --21/05/2026, 06:57:13-
52.47.160.•••:1416 - 🇫🇷 France Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services27/05/2026, 01:29:1317/06/2026, 00:52:50 - - ----
18.216.57.•••:12001 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon27/05/2026, 01:29:1317/06/2026, 01:35:51 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 01:32:38-
103.186.1.•••:18789 - 🇮🇩 Indonesia Yes true Clean AS136052PT Cloud Hosting IndonesiaAnsa Project27/05/2026, 01:25:1604/07/2026, 08:37:42 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1546, CVE-2016-3115, CVE-2016-4975, CVE-2016-4979, CVE-2016-5387, CVE-2016-6210, CVE-2016-6515, CVE-2016-8612, CVE-2016-8740, CVE-2016-8743, CVE-2016-8858, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-14145, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-29323, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 04:14:00-
52.23.199.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon27/05/2026, 01:25:1627/05/2026, 09:08:16 - - ----
154.86.147.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS134548DXTL Tseung Kwan O ServiceDingfeng Network27/05/2026, 01:25:1530/05/2026, 17:07:31 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, goziCVE-2014-407827/05/2026, 04:14:06-
98.126.102.•••:10129 - 🇺🇸 United States Yes false Clean AS4213Krypt TechnologiesKrypt Technologies27/05/2026, 01:25:1514/06/2026, 00:34:05 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 04:14:09vpls.net, vpls.com
2a0e:6a80:3:681:::443 - 🇩🇪 Germany - false Clean AS44486synlinq.deRöthunbeck27/05/2026, 01:25:1509/06/2026, 01:51:19 - - ----
125.45.90.•••:18443 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Henan27/05/2026, 01:25:1427/05/2026, 09:50:22 No No --21/05/2026, 04:14:20-
188.124.201.•••:8888 - 🇧🇦 Bosnia & Herzegovina Yes false Clean AS21107Blicnet d.o.o. Banja LukaElta Kabel27/05/2026, 01:25:1410/06/2026, 16:03:37 No No --21/05/2026, 04:14:23-
117.29.141.•••:50000 - 🇨🇳 China mainland Yes false Leaked AS4134ChinanetCHINANET Fujian27/05/2026, 01:25:1427/05/2026, 09:50:22 Yes No -CVE-2006-20001, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620027/05/2026, 04:14:26bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
154.217.234.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS402169Uscloud IncFastmos Co Limited27/05/2026, 01:25:1430/06/2026, 11:37:57 - - ----
191.252.209.•••:443 - 🇧🇷 Brazil Yes true Leaked AS27715Locaweb Serviços de Internet S/ALocaweb27/05/2026, 01:25:1305/07/2026, 13:10:40 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541403/06/2026, 04:14:01locaweb.com.br
47.101.45.•••:30014 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft27/05/2026, 01:25:1127/05/2026, 09:50:19 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161727/05/2026, 04:14:57-
168.119.166.•••:80 - 🇩🇪 Germany Yes false Leaked AS24940Hetzner Online GmbHHetzner Online27/05/2026, 01:25:1122/06/2026, 13:24:25 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 04:14:58hetzner.com
192.240.202.•••:20104 - 🇺🇸 United States Yes true Leaked AS20454SECURED SERVERS LLCBMC Reserved IP27/05/2026, 01:25:1107/07/2026, 00:10:21 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541427/05/2026, 04:14:59phoenixnap.com, securedservers.com
78.47.83.•••:80 - 🇩🇪 Germany Yes false Leaked AS24940Hetzner Online GmbHHetzner Online27/05/2026, 01:25:1119/06/2026, 13:15:33 Yes No --27/05/2026, 04:15:01hetzner.com
2409:8a55:a632:4fb1:1443:49ff:fe5c:22c:18789 - 🇨🇳 China mainland - false Clean AS9808China Mobile Communications Group Co., Ltd.China Mobile27/05/2026, 01:25:1127/05/2026, 09:50:18 - - ----
161.118.194.•••:443 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationOracle27/05/2026, 01:25:1109/06/2026, 08:55:50 - - ----
45.82.120.•••:443 - 🇩🇪 Germany Yes false Clean AS44486synlinq.deRöthunbeck27/05/2026, 01:25:1110/06/2026, 07:33:18 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2010-5107, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-0777, CVE-2016-0778, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/05/2026, 04:15:14-
154.86.136.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS134548DXTL Tseung Kwan O ServiceDingFeng XinHui HK Technology Limited27/05/2026, 01:25:1130/05/2026, 00:56:24 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi-27/05/2026, 04:15:16-
52.252.115.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft27/05/2026, 01:23:2827/06/2026, 00:51:42 - - ----
103.186.1.•••:18789 - 🇮🇩 Indonesia Yes true Clean AS136052PT Cloud Hosting IndonesiaAnsa Project27/05/2026, 01:23:2807/07/2026, 07:18:25 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1546, CVE-2016-3115, CVE-2016-4975, CVE-2016-4979, CVE-2016-5387, CVE-2016-6210, CVE-2016-6515, CVE-2016-8612, CVE-2016-8740, CVE-2016-8743, CVE-2016-8858, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-14145, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-29323, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/05/2026, 08:30:16-