🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 816988 Page: 1119 / 8170 (100 per page) Showing: 111801-111900 Last Imported: 15/05/2026, 09:32:33
🇨🇳 425,761
🇺🇸 231,518
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 185.200.177.•••:443 | - | 🇳🇱 Netherlands | Yes | false | Leaked | AS216154 | CLODO CLOUD SERVICE CO. L.L.C | Clodo Cloud Service | 02/04/2026, 19:25:49 | 15/04/2026, 01:35:30 | Yes | Yes | APT28, APT41, Equation Group | CVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2016-0777, CVE-2016-10002, CVE-2017-15906, CVE-2018-1000024, CVE-2019-12519, CVE-2019-12521, CVE-2019-12523, CVE-2019-12526, CVE-2019-12529, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2020-11945, CVE-2020-14058, CVE-2020-15049, CVE-2020-24606, CVE-2020-25097, CVE-2021-28651, CVE-2021-28652, CVE-2021-31807, CVE-2021-46784, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 02:23:22 | fvds.ru |
| 43.156.105.•••:80 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 02/04/2026, 19:25:48 | 09/04/2026, 01:54:46 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 02:22:40 | tencent.com |
| 52.79.85.•••:18789 | - | 🇰🇷 South Korea | Yes | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 02/04/2026, 19:25:48 | 12/04/2026, 23:54:12 | - | - | - | - | - | - |
| 51.195.117.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS16276 | OVH SAS | OVH Germany | 02/04/2026, 19:25:47 | 05/04/2026, 15:48:00 | - | - | - | - | - | - |
| 2a02:4780:41:1ab9::1:18789 | - | 🇩🇪 Germany | - | false | Clean | AS47583 | Hostinger International Limited | Hostinger | 02/04/2026, 19:25:47 | 03/04/2026, 02:16:21 | - | - | - | - | - | - |
| 47.115.171.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 02/04/2026, 19:25:47 | 15/04/2026, 13:31:33 | No | No | - | CVE-2014-4078, CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 12:06:20 | - |
| 46.225.119.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 02/04/2026, 19:25:47 | 14/04/2026, 23:19:44 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 09/04/2026, 01:09:45 | - |
| 108.165.135.•••:30114 | - | 🇺🇸 United States | Yes | false | Leaked | AS20068 | Hawk Host Inc. | Netutils | 02/04/2026, 19:25:46 | 17/04/2026, 10:07:25 | Yes | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 05/04/2026, 15:09:48 | arandomserver.com, hawkhost.com, ipxo.com, cyberassets.ae |
| 54.180.201.•••:443 | - | 🇰🇷 South Korea | Yes | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 02/04/2026, 19:25:46 | 03/04/2026, 10:28:53 | No | No | - | - | 28/03/2026, 10:34:05 | - |
| 101.96.203.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS137718 | Beijing Volcano Engine Technology Co., Ltd. | Beijing Volcano Engine Technology | 02/04/2026, 19:25:46 | 06/04/2026, 04:30:42 | - | - | - | - | - | - |
| 194.163.148.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS51167 | Contabo GmbH | Contabo | 02/04/2026, 19:25:46 | 17/04/2026, 10:06:38 | Yes | No | - | - | 11/04/2026, 17:59:39 | contaboserver.net |
| 47.129.182.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 02/04/2026, 19:25:46 | 06/04/2026, 05:15:10 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 04:32:58 | - |
| 107.148.1.•••:18789 | - | 🇯🇵 Japan | Yes | false | Clean | AS398993 | PEG TECH INC | Peg Tech Inc | 02/04/2026, 19:25:46 | 14/04/2026, 18:50:23 | No | No | - | - | 30/03/2026, 14:18:24 | - |
| 120.72.98.•••:19001 | Assistant | 🇻🇳 Vietnam | Yes | false | Clean | AS24085 | Quang Trung Software City Development Company | Quang Trung Software City | 02/04/2026, 19:25:46 | 05/04/2026, 16:32:56 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 11:21:56 | - |
| 34.135.119.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 02/04/2026, 19:25:46 | 15/04/2026, 13:30:17 | No | Yes | DragonFly, Packrat | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 19:36:23 | - | |
| 64.23.245.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 02/04/2026, 19:25:46 | 15/04/2026, 13:31:36 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387 | 05/04/2026, 15:03:55 | - |
| 158.220.123.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS51167 | Contabo GmbH | Contabo | 02/04/2026, 19:25:46 | 15/04/2026, 13:32:12 | Yes | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 09/04/2026, 07:59:04 | contabo.de, contabo.net |
| 100.51.86.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS14618 | Amazon.com, Inc. | Amazon Web Services | 02/04/2026, 19:25:45 | 11/04/2026, 23:20:17 | Yes | No | - | - | 09/04/2026, 06:22:53 | amazon.fr, bookworm.com, amazon.com.br, audible.com, lovefilm.com, amazon.eu, amzaon.com, amazaon.com, audible.in, z-exp.com, amozon.com, aws-amazon.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, amazonaws.cm, com.be, amazonpay.com, rooftopmedia.net, vine.com, imdb.com, ssl-images-amazon.com, amazon.com.au, amazon-rings.com, assoc-amazon.com, amazonin.com, amzn.asia, annapurnalabs.com, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, amazon.ae, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, amazon-aws.com, endless.com, amazonlocal.com, amazonm.com, amazonllc.com, media-imdb.com, amazon.com.tw, createspace.com, amazonaws.com, amzn.com, amazon.com, images-amazon.com, amazon.com.co |
| 39.98.86.•••:50001 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 02/04/2026, 19:25:45 | 17/04/2026, 07:52:22 | Yes | - | - | - | 06/04/2026, 04:32:56 | aliyun.com |
| 150.158.1.•••:18188 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 02/04/2026, 19:25:45 | 17/04/2026, 23:58:33 | Yes | Yes | APT37, El-Machete | CVE-2015-8866, CVE-2015-8994, CVE-2016-10158, CVE-2016-10159, CVE-2016-10160, CVE-2016-10161, CVE-2016-10162, CVE-2016-10397, CVE-2016-1283, CVE-2016-7478, CVE-2016-7479, CVE-2016-9138, CVE-2016-9934, CVE-2016-9935, CVE-2016-9936, CVE-2017-11142, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11362, CVE-2017-11628, CVE-2017-12932, CVE-2017-12933, CVE-2017-12934, CVE-2017-16642, CVE-2017-5340, CVE-2017-7189, CVE-2017-7890, CVE-2017-9120, CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-14884, CVE-2018-15132, CVE-2018-17082, CVE-2018-19395, CVE-2018-19396, CVE-2018-19518, CVE-2018-19935, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9022, CVE-2019-9023, CVE-2019-9024, CVE-2019-9675 | 11/04/2026, 01:23:24 | tencent.com |
| 8.208.82.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 02/04/2026, 19:25:45 | 16/04/2026, 01:24:03 | No | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 12:07:08 | - |
| 38.6.41.•••:18789 | - | 🇨🇦 Canada | Yes | false | Clean | AS398993 | PEG TECH INC | Polyethylene Glycol-Lipid Association | 02/04/2026, 19:25:45 | 15/04/2026, 01:34:53 | No | No | - | - | 30/03/2026, 21:47:04 | - |
| 42.193.214.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 02/04/2026, 19:25:44 | 17/04/2026, 23:59:15 | Yes | Yes | APT37, El-Machete | - | 09/04/2026, 11:44:24 | tencent.com |
| 3.221.167.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 02/04/2026, 19:25:43 | 17/04/2026, 07:07:10 | No | No | - | - | 31/03/2026, 03:47:04 | - |
| 103.118.41.•••:443 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS976 | CoreNET Inc. | NetPilot | 02/04/2026, 19:25:43 | 03/04/2026, 05:15:36 | - | - | - | - | - | - |
| 87.99.138.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS213230 | Hetzner Online GmbH | Hetzner | 02/04/2026, 19:25:43 | 09/04/2026, 12:23:00 | - | - | - | - | - | - |
| 178.104.128.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 02/04/2026, 19:25:42 | 06/04/2026, 05:14:31 | - | - | - | - | - | - |
| 8.130.123.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 02/04/2026, 19:25:42 | 09/04/2026, 01:54:53 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 02:22:21 | - |
| 120.24.175.•••:443 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 02/04/2026, 19:25:42 | 15/04/2026, 01:35:14 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419 | 05/04/2026, 21:45:46 | aliyun.com |
| 81.68.218.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 02/04/2026, 19:25:42 | 15/04/2026, 01:35:26 | No | Yes | APT37, El-Machete | - | 05/04/2026, 18:52:32 | - |
| 60.205.140.•••:789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 02/04/2026, 19:25:42 | 15/04/2026, 01:34:05 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 06/04/2026, 04:31:38 | aliyun.com |
| 152.44.45.•••:8080 | - | 🇺🇸 United States | Yes | false | Clean | AS25697 | UpCloud USA Inc | Upcloud US SJO1 Network 2 | 02/04/2026, 19:25:42 | 03/04/2026, 02:16:16 | - | - | - | - | - | - |
| 45.55.153.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 02/04/2026, 19:25:42 | 16/04/2026, 01:23:40 | - | - | - | - | - | - |
| 49.51.36.•••:16881 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Tencent Cloud | 02/04/2026, 19:25:42 | 15/04/2026, 13:32:14 | Yes | Yes | APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 03:46:58 | tencent.com |
| 49.234.54.•••:443 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 02/04/2026, 19:25:42 | 03/04/2026, 02:16:15 | - | - | - | - | - | - |
| 43.162.84.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 02/04/2026, 19:25:42 | 17/04/2026, 06:22:03 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/04/2026, 23:19:10 | tencent.com |
| 2a02:4780:5e:2b0b::1:18789 | - | 🇲🇾 Malaysia | - | false | Clean | AS47583 | Hostinger International Limited | Hostinger | 02/04/2026, 19:25:41 | 15/04/2026, 01:34:51 | - | - | - | - | - | - |
| 34.41.148.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 02/04/2026, 19:25:41 | 17/04/2026, 08:37:17 | No | Yes | APT17, APT29, APT35, APT36, APT37, APT40, APT41, APT45, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, Patchwork, Salt Typhoon, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387 | 05/04/2026, 22:36:54 | - | |
| 54.202.216.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 02/04/2026, 19:25:41 | 17/04/2026, 21:44:45 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 05:16:04 | - |
| 218.11.5.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Hebei | 02/04/2026, 19:25:41 | 17/04/2026, 23:58:54 | Yes | - | - | - | 06/04/2026, 00:45:50 | chinaunicom.cn |
| 23.94.227.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS36352 | HostPapa | RackNerd | 02/04/2026, 19:25:40 | 15/04/2026, 01:35:59 | Yes | Yes | APT1 Comment Crew, Donot Team | CVE-2015-9251, CVE-2016-10002, CVE-2016-10003, CVE-2018-1000024, CVE-2018-1000027, CVE-2018-19131, CVE-2018-19132, CVE-2019-11358, CVE-2019-12519, CVE-2019-12520, CVE-2019-12521, CVE-2019-12522, CVE-2019-12523, CVE-2019-12524, CVE-2019-12525, CVE-2019-12526, CVE-2019-12528, CVE-2019-12529, CVE-2019-13345, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-18860, CVE-2020-11022, CVE-2020-11023, CVE-2020-11945, CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-23064, CVE-2020-24606, CVE-2020-25097, CVE-2020-8449, CVE-2020-8450, CVE-2020-8517, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-38408, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-39894, CVE-2024-45802, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 16:35:09 | racknerd.com |
| 183.58.191.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | CHINANET Guangdong | 02/04/2026, 19:25:40 | 06/04/2026, 05:14:40 | - | - | - | - | - | - |
| 54.255.136.•••:3333 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 02/04/2026, 19:25:40 | 11/04/2026, 21:05:24 | No | No | - | CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 05/04/2026, 14:21:00 | - |
| 120.46.157.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 02/04/2026, 19:25:40 | 15/04/2026, 01:34:41 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 18:52:51 | smartcom.cc, huawei.com, huaweidevice.com |
| 34.55.249.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 02/04/2026, 19:25:39 | 05/04/2026, 18:46:57 | - | - | - | - | - | - | |
| 50.62.182.•••:443 | - | 🇺🇸 United States | Yes | false | Leaked | AS26496 | GoDaddy.com, LLC | GoDaddy | 02/04/2026, 19:25:39 | 17/04/2026, 23:59:08 | Yes | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, FIN8, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 05:17:22 | secureserver.net, godaddy.com |
| 13.114.220.•••:443 | - | 🇯🇵 Japan | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 02/04/2026, 19:25:39 | 06/04/2026, 15:49:56 | No | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 03/04/2026, 05:17:00 | - |
| 120.69.102.•••:88 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Xinjiang | 02/04/2026, 19:25:39 | 03/04/2026, 02:16:12 | - | - | - | - | - | - |
| 101.126.81.•••:443 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS137718 | Beijing Volcano Engine Technology Co., Ltd. | Beijing Volcano Engine Technology | 02/04/2026, 19:25:39 | 17/04/2026, 21:44:50 | Yes | - | - | - | 05/04/2026, 21:45:47 | bytedance.com |
| 42.194.210.•••:18888 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 02/04/2026, 19:25:39 | 17/04/2026, 23:58:33 | Yes | Yes | APT37, El-Machete | - | 05/04/2026, 21:49:26 | tencent.com |
| 125.108.78.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Wenzhou Node Network | 02/04/2026, 19:25:39 | 03/04/2026, 02:16:12 | - | - | - | - | - | - |
| 217.142.189.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle Sweden | 02/04/2026, 19:25:39 | 17/04/2026, 23:57:50 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 09/04/2026, 01:57:18 | healtheintent.com, purewellness.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com |
| 34.155.182.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 02/04/2026, 19:25:39 | 12/04/2026, 23:55:03 | - | - | - | - | - | - | |
| 123.59.6.•••:443 | - | 🇨🇳 China mainland | Yes | false | Clean | AS23724 | IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province Network | CloudVsp | 02/04/2026, 19:25:39 | 06/04/2026, 05:15:22 | - | - | - | - | - | - |
| 38.76.217.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS401701 | cognetcloud INC | FOJ IP Technology | 02/04/2026, 19:25:39 | 12/04/2026, 00:50:00 | Yes | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 03:04:28 | cogentco.com |
| 184.168.121.•••:443 | - | 🇺🇸 United States | Yes | false | Leaked | AS26496 | GoDaddy.com, LLC | GoDaddy | 02/04/2026, 19:25:39 | 17/04/2026, 23:14:05 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, FIN8, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-38709, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2024-7347, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-66200 | 03/04/2026, 03:04:36 | secureserver.net, godaddy.com |
| 134.199.143.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 02/04/2026, 19:25:38 | 15/04/2026, 01:34:18 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 03/04/2026, 03:04:48 | - |
| 89.125.39.•••:18789 | - | 🇫🇮 Finland | Yes | false | Clean | AS213459 | Snowd Security OU | Snowd Security | 02/04/2026, 19:25:38 | 17/04/2026, 23:58:25 | No | No | - | - | 28/03/2026, 03:05:17 | - |
| 20.246.191.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS8075 | Microsoft Corporation | Microsoft | 02/04/2026, 19:25:38 | 03/04/2026, 03:01:12 | Yes | - | - | - | 03/04/2026, 03:05:24 | oktacdn.com, oktapreview.com, stormpath.com, oauth.com, auth0app.com, okta1.com, oktane15.com, auth.io, fleet-okta.com, okta-gov.com, okta-emea.com, jwt.io, openidconnect.net, badpackets.net, oktaevents.com |
| 132.145.66.•••:9001 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle Cloud | 02/04/2026, 19:25:37 | 17/04/2026, 23:57:57 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MoustachedBouncer, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon, gozi | CVE-2007-4559, CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-24329, CVE-2023-27043, CVE-2023-28531, CVE-2023-36632, CVE-2023-38408, CVE-2023-40217, CVE-2023-41105, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-12254, CVE-2024-3219, CVE-2024-4030, CVE-2024-4032, CVE-2024-6232, CVE-2024-6387, CVE-2024-6923, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 03:05:37 | healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 88.218.171.•••:18789 | - | 🇳🇱 Netherlands | Yes | false | Leaked | AS210976 | Timeweb, LLP | Taiwan Cloud | 02/04/2026, 19:25:36 | 03/04/2026, 03:01:12 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26618, CVE-2025-30211, CVE-2025-32433, CVE-2025-32728, CVE-2025-46712, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 03:05:52 | redir.net, rwa10.ru |
| 8.162.15.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 02/04/2026, 19:25:36 | 17/04/2026, 23:58:32 | - | - | - | - | - | - |
| 130.61.144.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle Cloud | 02/04/2026, 19:25:36 | 17/04/2026, 23:57:26 | Yes | Yes | APT-C-23, APT15, APT28, APT31, APT36, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, DragonFly, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Packrat, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, TA428, Volt Typhoon, gozi | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-2408, CVE-2024-39894, CVE-2024-4577, CVE-2024-5458, CVE-2024-5585, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 03:06:00 | healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 39.98.92.•••:50001 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 02/04/2026, 19:25:36 | 17/04/2026, 10:05:44 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 03/04/2026, 03:06:02 | aliyun.com |
| 57.131.25.•••:80 | - | 🇮🇹 Italy | Yes | false | Clean | AS16276 | OVH SAS | VPS EU South Mil 1 | 02/04/2026, 19:25:36 | 09/04/2026, 10:53:22 | No | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 03:06:06 | - |
| 91.196.33.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS207957 | SERV.HOST GROUP LTD | Utah, United States | 02/04/2026, 19:25:36 | 06/04/2026, 12:49:55 | No | No | - | CVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 03:06:21 | - |
| 58.41.24.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 02/04/2026, 19:25:36 | 03/04/2026, 03:01:11 | Yes | No | - | - | 03/04/2026, 03:06:24 | online.sh.cn |
| 4.216.52.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 02/04/2026, 19:23:37 | 02/04/2026, 23:58:32 | - | - | - | - | - | - |
| 18.171.59.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 02/04/2026, 19:23:37 | 17/04/2026, 10:04:08 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 17/04/2026, 07:50:09 | - |
| 175.178.59.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 02/04/2026, 19:23:29 | 15/04/2026, 01:31:48 | - | - | - | - | - | - |
| 84.235.238.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle Sweden | 02/04/2026, 19:23:29 | 15/04/2026, 13:28:16 | Yes | No | - | - | 09/04/2026, 03:25:58 | healtheintent.com, purewellness.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, duckdns.org, dyndns.com, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com |
| 64.23.164.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 02/04/2026, 19:23:29 | 02/04/2026, 23:58:23 | - | - | - | - | - | - |
| 157.245.211.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 02/04/2026, 19:23:28 | 02/04/2026, 23:58:23 | - | - | - | - | - | - |
| 20.214.187.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 02/04/2026, 19:23:28 | 02/04/2026, 23:58:23 | - | - | - | - | - | - |
| 20.46.161.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 02/04/2026, 19:23:28 | 02/04/2026, 23:58:23 | - | - | - | - | - | - |
| 40.70.23.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 02/04/2026, 19:23:28 | 02/04/2026, 23:58:23 | - | - | - | - | - | - |
| 154.50.110.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS46783 | EASY LINK LLC | Easy Link | 02/04/2026, 19:23:28 | 02/04/2026, 23:58:23 | - | - | - | - | - | - |
| 54.151.185.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 02/04/2026, 19:23:28 | 04/04/2026, 07:56:59 | - | - | - | - | - | - |
| 43.156.105.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 02/04/2026, 19:23:28 | 09/04/2026, 00:19:52 | - | - | - | - | - | - |
| 20.222.204.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 02/04/2026, 19:23:27 | 02/04/2026, 23:58:22 | - | - | - | - | - | - |
| 49.13.16.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner Online | 02/04/2026, 19:23:27 | 02/04/2026, 23:58:22 | - | - | - | - | - | - |
| 64.181.230.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle | 02/04/2026, 19:23:27 | 09/04/2026, 04:51:20 | Yes | Yes | Salt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 09/04/2026, 01:50:48 | healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 172.192.5.•••:18789 | - | 🇯🇵 Japan | - | false | Clean | AS18747 | IFX Corporation | Cloud | 02/04/2026, 19:23:27 | 02/04/2026, 23:58:22 | - | - | - | - | - | - |
| 51.195.117.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS16276 | OVH SAS | OVH Germany | 02/04/2026, 19:23:27 | 05/04/2026, 14:15:48 | - | - | - | - | - | - |
| 2a02:4780:41:1ab9::1:18789 | - | 🇩🇪 Germany | - | false | Clean | AS47583 | Hostinger International Limited | Hostinger | 02/04/2026, 19:23:27 | 02/04/2026, 23:58:21 | - | - | - | - | - | - |
| 172.67.183.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS13335 | Cloudflare, Inc. | Cloudflare | 02/04/2026, 19:23:27 | 02/04/2026, 23:58:21 | - | - | - | - | - | - |
| 47.115.171.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 02/04/2026, 19:23:27 | 15/04/2026, 13:29:14 | No | No | - | CVE-2014-4078, CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/04/2026, 12:55:56 | - |
| 46.225.119.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 02/04/2026, 19:23:27 | 14/04/2026, 21:44:51 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 19:31:37 | - |
| 20.125.34.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 02/04/2026, 19:23:27 | 02/04/2026, 23:58:21 | - | - | - | - | - | - |
| 108.165.135.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS20068 | Hawk Host Inc. | Netutils | 02/04/2026, 19:23:26 | 17/04/2026, 07:49:40 | - | - | - | - | - | - |
| 54.180.201.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 02/04/2026, 19:23:26 | 03/04/2026, 08:56:38 | - | - | - | - | - | - |
| 101.96.203.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS137718 | Beijing Volcano Engine Technology Co., Ltd. | Beijing Volcano Engine Technology | 02/04/2026, 19:23:26 | 06/04/2026, 02:13:11 | - | - | - | - | - | - |
| 194.163.148.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS51167 | Contabo GmbH | Contabo | 02/04/2026, 19:23:26 | 17/04/2026, 10:04:21 | - | - | - | - | - | - |
| 107.148.1.•••:18789 | - | 🇯🇵 Japan | Yes | false | Clean | AS398993 | PEG TECH INC | Peg Tech Inc | 02/04/2026, 19:23:26 | 14/04/2026, 16:50:40 | - | - | - | - | - | - |
| 194.58.95.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS197695 | "Domain names registrar REG.RU", Ltd | Reg.ru | 02/04/2026, 19:23:26 | 12/04/2026, 00:46:38 | - | - | - | - | - | - |
| 104.221.128.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS22552 | eSited Solutions | ESited Solutions | 02/04/2026, 19:23:26 | 05/04/2026, 06:03:18 | - | - | - | - | - | - |
| 120.72.98.•••:18789 | - | 🇻🇳 Vietnam | Yes | false | Clean | AS24085 | Quang Trung Software City Development Company | Quang Trung Software City | 02/04/2026, 19:23:26 | 05/04/2026, 15:00:43 | - | - | - | - | - | - |
| 64.23.245.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 02/04/2026, 19:23:25 | 15/04/2026, 13:29:17 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387 | 12/04/2026, 14:25:23 | - |
| 158.220.123.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS51167 | Contabo GmbH | Contabo | 02/04/2026, 19:23:25 | 18/04/2026, 00:40:19 | - | - | - | - | - | - |
| 39.98.86.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 02/04/2026, 19:23:25 | 17/04/2026, 05:34:06 | Yes | - | - | - | 17/04/2026, 00:20:17 | aliyun.com |