🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1006105 Page: 1177 / 10062 (100 per page) Showing: 117601-117700 Last Imported: 14/07/2026, 07:44:58
🇨🇳 483,673
🇺🇸 290,578
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 79.177.175.•••:18789 | - | 🇮🇱 Israel | Yes | false | Clean | AS6810 | "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD. | yesDBS | 25/05/2026, 22:43:01 | 26/05/2026, 07:09:44 | No | No | - | - | 20/05/2026, 06:32:48 | - |
| 45.207.205.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS8796 | FASTNET DATA INC | Vapeline Technology | 25/05/2026, 22:43:01 | 13/06/2026, 02:03:59 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 26/05/2026, 06:32:55 | - |
| 47.96.104.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 25/05/2026, 22:43:01 | 16/06/2026, 11:58:56 | No | No | - | CVE-2014-4078 | 26/05/2026, 06:32:56 | - |
| 104.194.156.•••:3456 | - | 🇩🇪 Germany | Yes | false | Leaked | AS14956 | RouterHosting LLC | Router Hosting | 25/05/2026, 22:43:00 | 26/05/2026, 07:09:42 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/05/2026, 06:33:04 | duckdns.org, cloudzy.com |
| 136.111.46.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 25/05/2026, 22:43:00 | 26/05/2026, 07:09:42 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/05/2026, 06:33:07 | - | |
| 38.76.174.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Leaked | AS401696 | cognetcloud INC | Hong Kong Cloud Network Technology Co Ltd | 25/05/2026, 22:43:00 | 10/06/2026, 16:03:38 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/05/2026, 06:33:08 | cogentco.com |
| 189.1.138.•••:443 | - | 🇧🇷 Brazil | - | false | Clean | AS28665 | Predlink Rede de Telecomunicções Ltda | Predlink Telecom | 25/05/2026, 22:43:00 | 29/05/2026, 03:40:02 | Yes | No | - | - | 26/05/2026, 06:33:11 | predialnet.com.br |
| 171.213.202.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 25/05/2026, 22:43:00 | 26/05/2026, 07:09:42 | No | No | - | - | 20/05/2026, 06:33:13 | - |
| 98.92.236.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 25/05/2026, 22:41:15 | 26/05/2026, 05:00:38 | - | - | - | - | - | - |
| 240e:3b5:1044:1e90:211:32ff:fe69:bf43:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 25/05/2026, 22:41:14 | 26/05/2026, 05:00:38 | - | - | - | - | - | - |
| 3.238.148.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 25/05/2026, 22:41:13 | 26/05/2026, 05:00:37 | - | - | - | - | - | - |
| 120.55.61.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 25/05/2026, 22:41:13 | 12/06/2026, 15:27:30 | Yes | Yes | APT14, APT28, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2006-20001, CVE-2014-9767, CVE-2015-3152, CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-4116, CVE-2015-4598, CVE-2015-4642, CVE-2015-4643, CVE-2015-4644, CVE-2015-5589, CVE-2015-5590, CVE-2015-6831, CVE-2015-6832, CVE-2015-6833, CVE-2015-6834, CVE-2015-6835, CVE-2015-6836, CVE-2015-6837, CVE-2015-6838, CVE-2015-7803, CVE-2015-7804, CVE-2015-8383, CVE-2015-8386, CVE-2015-8387, CVE-2015-8389, CVE-2015-8390, CVE-2015-8391, CVE-2015-8393, CVE-2015-8394, CVE-2015-8835, CVE-2015-8838, CVE-2015-8865, CVE-2015-8867, CVE-2015-8873, CVE-2015-8874, CVE-2015-8876, CVE-2015-8877, CVE-2015-8878, CVE-2015-8879, CVE-2015-8994, CVE-2015-9253, CVE-2016-10158, CVE-2016-10159, CVE-2016-10160, CVE-2016-10161, CVE-2016-10397, CVE-2016-10712, CVE-2016-1283, CVE-2016-1903, CVE-2016-2554, CVE-2016-3074, CVE-2016-3141, CVE-2016-3142, CVE-2016-3185, CVE-2016-4070, CVE-2016-4071, CVE-2016-4072, CVE-2016-4073, CVE-2016-4342, CVE-2016-4343, CVE-2016-4473, CVE-2016-4537, CVE-2016-4538, CVE-2016-4539, CVE-2016-4540, CVE-2016-4541, CVE-2016-4542, CVE-2016-4543, CVE-2016-4544, CVE-2016-5093, CVE-2016-5094, CVE-2016-5095, CVE-2016-5096, CVE-2016-5114, CVE-2016-5385, CVE-2016-5399, CVE-2016-5768, CVE-2016-5769, CVE-2016-5770, CVE-2016-5771, CVE-2016-5772, CVE-2016-5773, CVE-2016-6207, CVE-2016-6289, CVE-2016-6290, CVE-2016-6291, CVE-2016-6292, CVE-2016-6294, CVE-2016-6295, CVE-2016-6296, CVE-2016-6297, CVE-2016-7124, CVE-2016-7125, CVE-2016-7126, CVE-2016-7127, CVE-2016-7128, CVE-2016-7129, CVE-2016-7130, CVE-2016-7131, CVE-2016-7132, CVE-2016-7411, CVE-2016-7412, CVE-2016-7413, CVE-2016-7414, CVE-2016-7416, CVE-2016-7417, CVE-2016-7418, CVE-2016-7568, CVE-2016-9137, CVE-2016-9138, CVE-2016-9934, CVE-2016-9935, CVE-2017-11142, CVE-2017-11143, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11628, CVE-2017-12933, CVE-2017-16642, CVE-2017-7272, CVE-2017-7890, CVE-2017-7963, CVE-2017-8923, CVE-2017-9224, CVE-2017-9225, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-15132, CVE-2018-17082, CVE-2018-19395, CVE-2018-19396, CVE-2018-19518, CVE-2018-19520, CVE-2018-19935, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9023, CVE-2019-9024, CVE-2019-9517, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31628, CVE-2022-31629, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 01/06/2026, 06:18:56 | aliyun.com |
| 172.202.192.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Cloud | 25/05/2026, 22:41:13 | 26/06/2026, 11:59:09 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/06/2026, 10:36:35 | - |
| 2402:1f00:8000:800::47c6:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16276 | OVH SAS | OVH Singapore Data Center | 25/05/2026, 22:41:13 | 16/06/2026, 14:47:40 | - | - | - | - | - | - |
| 2409:8a62:a24:aa71:be24:11ff:fe72:5576:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 25/05/2026, 22:41:12 | 29/05/2026, 12:07:03 | - | - | - | - | - | - |
| 79.177.175.•••:18789 | - | 🇮🇱 Israel | Yes | false | Clean | AS6810 | "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD. | yesDBS | 25/05/2026, 22:41:11 | 26/05/2026, 05:43:05 | - | - | - | - | - | - |
| 20.45.54.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 22:41:11 | 26/05/2026, 05:43:05 | - | - | - | - | - | - |
| 45.207.205.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS8796 | FASTNET DATA INC | Vapeline Technology | 25/05/2026, 22:41:11 | 13/06/2026, 04:50:43 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 27/05/2026, 22:37:02 | - |
| 47.96.104.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 25/05/2026, 22:41:11 | 16/06/2026, 07:40:32 | No | No | - | CVE-2014-4078 | 01/06/2026, 02:03:02 | - |
| 104.194.156.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS14956 | RouterHosting LLC | Router Hosting | 25/05/2026, 22:41:10 | 26/05/2026, 05:43:04 | - | - | - | - | - | - |
| 136.111.46.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 25/05/2026, 22:41:10 | 26/05/2026, 05:43:04 | - | - | - | - | - | - | |
| 189.1.138.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS28665 | Predlink Rede de Telecomunicções Ltda | Predlink Telecom | 25/05/2026, 22:41:10 | 29/05/2026, 01:30:57 | Yes | No | - | - | 29/05/2026, 01:34:51 | predialnet.com.br |
| 171.213.202.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 25/05/2026, 22:41:10 | 26/05/2026, 05:43:03 | - | - | - | - | - | - |
| 20.196.219.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 22:41:09 | 26/05/2026, 05:43:03 | - | - | - | - | - | - |
| 163.7.9.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Leaked | AS150436 | Byteplus Pte. Ltd. | Byteplus | 25/05/2026, 22:39:22 | 12/07/2026, 12:30:36 | Yes | No | - | - | 03/06/2026, 04:14:06 | bytedance.com |
| 2408:8256:a281:9d4:1df0:12be:bcff:e1f5:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS17816 | China Unicom IP network China169 Guangdong province | China Unicom | 25/05/2026, 22:39:22 | 04/06/2026, 12:11:18 | - | - | - | - | - | - |
| 39.106.32.•••:18789 | - | 🇽🇽 XX | - | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Unknown | 25/05/2026, 22:39:22 | 12/07/2026, 16:50:11 | Yes | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347 | 26/05/2026, 02:12:56 | alicloudapi.com, aliyun.com |
| 178.105.95.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 25/05/2026, 22:39:21 | 27/05/2026, 09:04:15 | - | - | - | - | - | - |
| 98.92.236.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 25/05/2026, 22:39:21 | 26/05/2026, 04:58:53 | - | - | - | - | - | - |
| 240e:3b5:1044:1e90:211:32ff:fe69:bf43:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 25/05/2026, 22:39:21 | 26/05/2026, 04:58:53 | - | - | - | - | - | - |
| 3.238.148.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 25/05/2026, 22:39:20 | 26/05/2026, 05:41:12 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 26/05/2026, 02:13:55 | - |
| 120.55.61.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 25/05/2026, 22:39:19 | 12/06/2026, 16:08:02 | Yes | Yes | APT14, APT28, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2006-20001, CVE-2014-9767, CVE-2015-3152, CVE-2015-3414, CVE-2015-3415, CVE-2015-3416, CVE-2015-4116, CVE-2015-4598, CVE-2015-4642, CVE-2015-4643, CVE-2015-4644, CVE-2015-5589, CVE-2015-5590, CVE-2015-6831, CVE-2015-6832, CVE-2015-6833, CVE-2015-6834, CVE-2015-6835, CVE-2015-6836, CVE-2015-6837, CVE-2015-6838, CVE-2015-7803, CVE-2015-7804, CVE-2015-8383, CVE-2015-8386, CVE-2015-8387, CVE-2015-8389, CVE-2015-8390, CVE-2015-8391, CVE-2015-8393, CVE-2015-8394, CVE-2015-8835, CVE-2015-8838, CVE-2015-8865, CVE-2015-8867, CVE-2015-8873, CVE-2015-8874, CVE-2015-8876, CVE-2015-8877, CVE-2015-8878, CVE-2015-8879, CVE-2015-8994, CVE-2015-9253, CVE-2016-10158, CVE-2016-10159, CVE-2016-10160, CVE-2016-10161, CVE-2016-10397, CVE-2016-10712, CVE-2016-1283, CVE-2016-1903, CVE-2016-2554, CVE-2016-3074, CVE-2016-3141, CVE-2016-3142, CVE-2016-3185, CVE-2016-4070, CVE-2016-4071, CVE-2016-4072, CVE-2016-4073, CVE-2016-4342, CVE-2016-4343, CVE-2016-4473, CVE-2016-4537, CVE-2016-4538, CVE-2016-4539, CVE-2016-4540, CVE-2016-4541, CVE-2016-4542, CVE-2016-4543, CVE-2016-4544, CVE-2016-5093, CVE-2016-5094, CVE-2016-5095, CVE-2016-5096, CVE-2016-5114, CVE-2016-5385, CVE-2016-5399, CVE-2016-5768, CVE-2016-5769, CVE-2016-5770, CVE-2016-5771, CVE-2016-5772, CVE-2016-5773, CVE-2016-6207, CVE-2016-6289, CVE-2016-6290, CVE-2016-6291, CVE-2016-6292, CVE-2016-6294, CVE-2016-6295, CVE-2016-6296, CVE-2016-6297, CVE-2016-7124, CVE-2016-7125, CVE-2016-7126, CVE-2016-7127, CVE-2016-7128, CVE-2016-7129, CVE-2016-7130, CVE-2016-7131, CVE-2016-7132, CVE-2016-7411, CVE-2016-7412, CVE-2016-7413, CVE-2016-7414, CVE-2016-7416, CVE-2016-7417, CVE-2016-7418, CVE-2016-7568, CVE-2016-9137, CVE-2016-9138, CVE-2016-9934, CVE-2016-9935, CVE-2017-11142, CVE-2017-11143, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11628, CVE-2017-12933, CVE-2017-16642, CVE-2017-7272, CVE-2017-7890, CVE-2017-7963, CVE-2017-8923, CVE-2017-9224, CVE-2017-9225, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-15132, CVE-2018-17082, CVE-2018-19395, CVE-2018-19396, CVE-2018-19518, CVE-2018-19520, CVE-2018-19935, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9023, CVE-2019-9024, CVE-2019-9517, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31628, CVE-2022-31629, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 25/05/2026, 22:39:41 | aliyun.com |
| 172.202.192.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Cloud | 25/05/2026, 22:39:19 | 26/06/2026, 11:57:19 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 25/05/2026, 22:39:53 | - |
| 2402:1f00:8000:800::47c6:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16276 | OVH SAS | OVH Singapore Data Center | 25/05/2026, 22:39:19 | 16/06/2026, 14:45:47 | - | - | - | - | - | - |
| 2409:8a62:a24:aa71:be24:11ff:fe72:5576:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 25/05/2026, 22:39:18 | 29/05/2026, 12:05:11 | - | - | - | - | - | - |
| 79.177.175.•••:18789 | - | 🇮🇱 Israel | Yes | false | Clean | AS6810 | "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD. | yesDBS | 25/05/2026, 22:39:17 | 26/05/2026, 05:41:10 | No | No | - | - | 19/05/2026, 22:40:52 | - |
| 20.45.54.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 22:39:17 | 26/05/2026, 05:41:09 | - | - | - | - | - | - |
| 45.207.205.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS8796 | FASTNET DATA INC | Vapeline Technology | 25/05/2026, 22:39:17 | 13/06/2026, 04:48:55 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 25/05/2026, 22:41:12 | - |
| 47.96.104.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 25/05/2026, 22:39:16 | 16/06/2026, 08:21:30 | No | No | - | CVE-2014-4078 | 25/05/2026, 22:41:14 | - |
| 136.111.46.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 25/05/2026, 22:39:16 | 26/05/2026, 05:41:08 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 25/05/2026, 22:41:39 | - | |
| 189.1.138.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS28665 | Predlink Rede de Telecomunicções Ltda | Predlink Telecom | 25/05/2026, 22:39:16 | 29/05/2026, 01:29:08 | Yes | No | - | - | 25/05/2026, 22:41:53 | predialnet.com.br |
| 171.213.202.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 25/05/2026, 22:39:16 | 26/05/2026, 05:41:08 | No | No | - | - | 19/05/2026, 22:41:55 | - |
| 129.121.45.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS31898 | Oracle Corporation | OGTIPS1 | 25/05/2026, 22:37:19 | 27/05/2026, 11:08:21 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/05/2026, 06:22:29 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 172.202.192.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Cloud | 25/05/2026, 22:37:19 | 28/06/2026, 00:15:20 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/05/2026, 06:22:32 | - |
| 76.13.219.•••:18789 | - | 🇲🇾 Malaysia | - | false | Leaked | AS47583 | Hostinger International Limited | Hostinger | 25/05/2026, 22:37:18 | 27/05/2026, 11:08:21 | Yes | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 26/05/2026, 06:22:34 | hstgr.cloud |
| 129.121.100.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS31898 | Oracle Corporation | OGTIPS1 | 25/05/2026, 22:37:18 | 27/05/2026, 11:08:21 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/05/2026, 06:22:35 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, mybluehost.me, dotster.com, bluehost.com |
| 20.45.54.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 22:37:18 | 27/05/2026, 11:08:21 | - | - | - | - | - | - |
| 89.167.103.•••:18789 | - | 🇫🇮 Finland | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 25/05/2026, 22:37:18 | 27/06/2026, 12:50:03 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/05/2026, 06:22:42 | - |
| 5.78.203.•••:443 | - | 🇺🇸 United States | Yes | false | Leaked | AS212317 | Hetzner Online GmbH | Hetzner | 25/05/2026, 22:01:06 | 04/06/2026, 14:22:50 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/06/2026, 12:19:25 | hetzner.com |
| 167.71.73.•••:443 | - | 🇳🇱 Netherlands | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 25/05/2026, 22:01:06 | 26/05/2026, 06:27:28 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 26/05/2026, 00:10:39 | - |
| 62.238.43.•••:18002 | - | 🇫🇮 Finland | Yes | true | Leaked | AS24940 | Hetzner Online GmbH | Hetzner Online | 25/05/2026, 22:01:05 | 13/07/2026, 04:17:58 | Yes | No | - | CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/06/2026, 20:36:29 | hetzner.com |
| 85.239.248.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS40021 | Contabo Inc. | Contabo | 25/05/2026, 22:01:05 | 29/05/2026, 14:17:36 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/05/2026, 00:10:50 | terratransit.de, contabo.de, contabo.net |
| 38.6.0.•••:18789 | - | 🇯🇵 Japan | Yes | false | Clean | AS398993 | PEG TECH INC | Polyethylene Glycol-Lipid Association | 25/05/2026, 22:01:05 | 29/05/2026, 10:02:08 | No | No | - | - | 20/05/2026, 00:10:58 | - |
| 178.104.210.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 25/05/2026, 22:01:05 | 13/07/2026, 09:17:35 | No | No | - | CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:31:56 | - |
| 178.105.170.•••:80 | - | 🇩🇪 Germany | Yes | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner Online | 25/05/2026, 22:01:04 | 26/05/2026, 06:27:26 | - | - | - | - | - | - |
| 171.37.125.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Guangxi | 25/05/2026, 22:01:04 | 06/06/2026, 21:41:24 | Yes | No | - | - | 26/05/2026, 00:11:10 | chinaunicom.cn |
| 13.206.118.•••:18789 | - | 🇮🇳 India | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 25/05/2026, 22:01:04 | 29/05/2026, 16:28:02 | No | No | - | - | 20/05/2026, 00:11:11 | - |
| 156.250.200.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 25/05/2026, 22:01:04 | 01/07/2026, 02:44:49 | No | Yes | APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Energetic Bear, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, Leafminer, Luckycat APT, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2006-20001, CVE-2010-1899, CVE-2010-2730, CVE-2010-3972, CVE-2017-15710, CVE-2017-15715, CVE-2017-9798, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 26/05/2026, 00:11:15 | - |
| 156.250.146.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 25/05/2026, 22:01:04 | 27/06/2026, 08:42:08 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322 | 26/05/2026, 00:11:17 | - |
| 38.6.9.•••:18789 | - | 🇯🇵 Japan | Yes | false | Clean | AS398993 | PEG TECH INC | Polyethylene Glycol-Lipid Association | 25/05/2026, 22:01:04 | 29/05/2026, 04:22:31 | No | Yes | APT28, APT29, APT35, APT37, APT39, APT41, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2014-0160, CVE-2014-0224, CVE-2015-10003, CVE-2016-0777, CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 26/05/2026, 00:11:19 | - |
| 38.6.18.•••:18789 | - | 🇯🇵 Japan | Yes | false | Clean | AS398993 | PEG TECH INC | Polyethylene Glycol-Lipid Association | 25/05/2026, 22:01:04 | 29/05/2026, 16:28:09 | No | No | - | - | 20/05/2026, 00:11:20 | - |
| 104.233.183.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS54600 | PEG TECH INC | Peg Tech Inc | 25/05/2026, 22:01:04 | 11/07/2026, 12:58:42 | No | No | - | - | 20/05/2026, 00:11:22 | - |
| 54.251.13.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 25/05/2026, 22:01:04 | 26/05/2026, 06:27:25 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/05/2026, 00:11:26 | danca.tv, naseni.gov.ng, judgeyachts.com, gloriouscolor.com, tennis-florida.com, eurostampiparma.it, sicmi.com, otisa.com, doradver.ru, mediterranealg.it, mallyas.com |
| 125.82.119.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Chongqing | 25/05/2026, 22:01:04 | 26/05/2026, 06:27:25 | No | No | - | - | 20/05/2026, 00:11:29 | - |
| 35.182.243.•••:443 | - | 🇨🇦 Canada | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 25/05/2026, 22:01:04 | 26/05/2026, 14:52:49 | No | No | - | - | 20/05/2026, 00:11:30 | - |
| 43.173.30.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 25/05/2026, 22:01:03 | 13/07/2026, 19:20:14 | Yes | No | - | CVE-2014-4078 | 26/05/2026, 05:47:57 | tencent.com |
| 8.141.99.•••:8080 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 25/05/2026, 22:01:03 | 26/05/2026, 06:27:25 | - | - | - | - | - | - |
| 123.26.226.•••:18789 | - | 🇻🇳 Vietnam | Yes | false | Leaked | AS45899 | VNPT Corp | VNPT | 25/05/2026, 22:01:03 | 22/06/2026, 06:15:54 | Yes | No | - | CVE-2016-2124, CVE-2017-11103, CVE-2017-12150, CVE-2017-12151, CVE-2017-12163, CVE-2017-14746, CVE-2017-15275, CVE-2017-7494, CVE-2018-1050, CVE-2018-1057, CVE-2018-10858, CVE-2018-10919, CVE-2018-14628, CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2019-10218, CVE-2019-14833, CVE-2019-14847, CVE-2019-14861, CVE-2019-14870, CVE-2019-14902, CVE-2019-3824, CVE-2019-3880, CVE-2020-10704, CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383, CVE-2020-1472, CVE-2020-17049, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25722, CVE-2020-27840, CVE-2021-20251, CVE-2021-20254, CVE-2021-20277, CVE-2021-20316, CVE-2021-3670, CVE-2021-3671, CVE-2021-3738, CVE-2021-43566, CVE-2021-44141, CVE-2021-44142, CVE-2022-0336, CVE-2022-1615, CVE-2022-2031, CVE-2022-32742, CVE-2022-32743, CVE-2022-32744, CVE-2022-32746, CVE-2022-3437, CVE-2022-37966, CVE-2022-37967, CVE-2022-38023, CVE-2022-42898, CVE-2022-45141, CVE-2023-0614, CVE-2023-0922, CVE-2023-28531, CVE-2023-34966, CVE-2023-34967, CVE-2023-34968, CVE-2023-38408, CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669, CVE-2023-42670, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5568, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 26/05/2026, 05:48:05 | vnpt.com.vn, vnpt.vn |
| 20.80.107.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 22:01:02 | 09/06/2026, 23:05:54 | No | No | - | - | 20/05/2026, 05:48:15 | - |
| 165.245.236.•••:443 | - | 🇨🇦 Canada | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 25/05/2026, 22:01:02 | 04/06/2026, 21:44:21 | - | - | - | - | - | - |
| 163.7.9.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Leaked | AS150436 | Byteplus Pte. Ltd. | Byteplus | 25/05/2026, 22:01:02 | 12/07/2026, 16:54:21 | Yes | No | - | - | 03/06/2026, 06:28:07 | bytedance.com |
| 2408:8256:a281:9d4:1df0:12be:bcff:e1f5:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS17816 | China Unicom IP network China169 Guangdong province | China Unicom | 25/05/2026, 22:01:02 | 04/06/2026, 15:05:42 | - | - | - | - | - | - |
| 39.106.32.•••:443 | - | 🇽🇽 XX | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Unknown | 25/05/2026, 22:01:02 | 12/07/2026, 21:11:03 | Yes | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347 | 26/05/2026, 05:48:26 | alicloudapi.com, aliyun.com |
| 178.105.95.•••:443 | - | 🇩🇪 Germany | Yes | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 25/05/2026, 22:01:02 | 26/05/2026, 07:09:48 | - | - | - | - | - | - |
| 98.92.236.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 25/05/2026, 22:01:02 | 26/05/2026, 07:09:48 | - | - | - | - | - | - |
| 100.48.205.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS14618 | Amazon.com, Inc. | Amazon Web Services | 25/05/2026, 21:59:19 | 11/07/2026, 17:56:26 | Yes | No | - | CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2026-24072, CVE-2026-28780, CVE-2026-29167, CVE-2026-29168, CVE-2026-29169, CVE-2026-29170, CVE-2026-33006, CVE-2026-33007, CVE-2026-33523, CVE-2026-33857, CVE-2026-34032, CVE-2026-34059, CVE-2026-34355, CVE-2026-34356, CVE-2026-42535, CVE-2026-42536, CVE-2026-43951, CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631, CVE-2026-48913, CVE-2026-49975 | 02/07/2026, 19:31:36 | amazonaws.com, amazon.com |
| 5.78.203.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS212317 | Hetzner Online GmbH | Hetzner | 25/05/2026, 21:59:18 | 04/06/2026, 12:13:15 | - | - | - | - | - | - |
| 167.71.73.•••:18789 | - | 🇳🇱 Netherlands | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 25/05/2026, 21:59:18 | 26/05/2026, 05:00:42 | - | - | - | - | - | - |
| 85.239.248.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS40021 | Contabo Inc. | Contabo | 25/05/2026, 21:59:17 | 29/05/2026, 12:49:49 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 29/05/2026, 12:50:54 | terratransit.de, contabo.de, contabo.net |
| 178.104.210.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 25/05/2026, 21:59:17 | 13/07/2026, 20:43:31 | No | No | - | CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 06/07/2026, 14:48:39 | - |
| 52.155.106.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 21:59:17 | 26/05/2026, 05:00:41 | - | - | - | - | - | - |
| 5.181.94.•••:18789 | - | 🇨🇿 Czechia | - | false | Clean | AS50825 | UVT Internet s.r.o. | Broadband PPPOE 2 | 25/05/2026, 21:59:17 | 04/07/2026, 17:52:46 | No | - | - | CVE-2024-6484, CVE-2024-6485 | 04/07/2026, 11:25:51 | - |
| 51.75.69.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS16276 | OVH SAS | OVH Germany | 25/05/2026, 21:59:16 | 26/06/2026, 08:24:22 | Yes | No | - | CVE-2025-14177, CVE-2025-14178, CVE-2025-14180, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-66200 | 26/05/2026, 06:27:48 | ovh.net |
| 178.105.170.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner Online | 25/05/2026, 21:59:16 | 26/05/2026, 05:00:41 | - | - | - | - | - | - |
| 171.37.125.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Guangxi | 25/05/2026, 21:59:16 | 06/06/2026, 18:50:48 | Yes | No | - | - | 31/05/2026, 20:22:10 | chinaunicom.cn |
| 13.206.118.•••:18789 | - | 🇮🇳 India | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 25/05/2026, 21:59:16 | 29/05/2026, 14:58:26 | No | No | - | - | 23/05/2026, 14:15:15 | - |
| 156.250.200.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 25/05/2026, 21:59:16 | 30/06/2026, 22:21:33 | No | Yes | APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Energetic Bear, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, Leafminer, Luckycat APT, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2006-20001, CVE-2010-1899, CVE-2010-2730, CVE-2010-3972, CVE-2017-15710, CVE-2017-15715, CVE-2017-9798, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 03/06/2026, 03:32:54 | - |
| 156.250.146.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 25/05/2026, 21:59:16 | 27/06/2026, 04:24:48 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322 | 01/06/2026, 23:07:52 | - |
| 104.233.183.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS54600 | PEG TECH INC | Peg Tech Inc | 25/05/2026, 21:59:16 | 11/07/2026, 09:23:05 | No | No | - | - | 22/05/2026, 18:29:21 | - |
| 20.230.128.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 21:59:16 | 26/06/2026, 04:07:07 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 25/06/2026, 21:40:23 | - |
| 54.251.13.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 25/05/2026, 21:59:15 | 26/05/2026, 05:00:40 | - | - | - | - | - | - |
| 125.82.119.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Chongqing | 25/05/2026, 21:59:15 | 26/05/2026, 05:00:40 | - | - | - | - | - | - |
| 35.182.243.•••:18789 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 25/05/2026, 21:59:15 | 26/05/2026, 12:44:41 | - | - | - | - | - | - |
| 8.141.99.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 25/05/2026, 21:59:15 | 13/07/2026, 09:58:00 | - | - | - | - | - | - |
| 123.26.226.•••:18789 | - | 🇻🇳 Vietnam | Yes | false | Leaked | AS45899 | VNPT Corp | VNPT | 25/05/2026, 21:59:15 | 22/06/2026, 02:40:59 | Yes | No | - | CVE-2016-2124, CVE-2017-11103, CVE-2017-12150, CVE-2017-12151, CVE-2017-12163, CVE-2017-14746, CVE-2017-15275, CVE-2017-7494, CVE-2018-1050, CVE-2018-1057, CVE-2018-10858, CVE-2018-10919, CVE-2018-14628, CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2019-10218, CVE-2019-14833, CVE-2019-14847, CVE-2019-14861, CVE-2019-14870, CVE-2019-14902, CVE-2019-3824, CVE-2019-3880, CVE-2020-10704, CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383, CVE-2020-1472, CVE-2020-17049, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25722, CVE-2020-27840, CVE-2021-20251, CVE-2021-20254, CVE-2021-20277, CVE-2021-20316, CVE-2021-3670, CVE-2021-3671, CVE-2021-3738, CVE-2021-43566, CVE-2021-44141, CVE-2021-44142, CVE-2022-0336, CVE-2022-1615, CVE-2022-2031, CVE-2022-32742, CVE-2022-32743, CVE-2022-32744, CVE-2022-32746, CVE-2022-3437, CVE-2022-37966, CVE-2022-37967, CVE-2022-38023, CVE-2022-42898, CVE-2022-45141, CVE-2023-0614, CVE-2023-0922, CVE-2023-28531, CVE-2023-34966, CVE-2023-34967, CVE-2023-34968, CVE-2023-38408, CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669, CVE-2023-42670, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5568, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 28/05/2026, 17:46:55 | vnpt.com.vn, vnpt.vn |
| 46.224.38.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 25/05/2026, 21:59:14 | 07/06/2026, 22:59:28 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 07/06/2026, 18:04:20 | - |
| 20.80.107.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 25/05/2026, 21:59:14 | 09/06/2026, 19:31:55 | No | No | - | - | 26/05/2026, 02:01:22 | - |
| 165.245.236.•••:18789 | - | 🇨🇦 Canada | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 25/05/2026, 21:59:14 | 04/06/2026, 20:16:47 | - | - | - | - | - | - |
| 163.7.9.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Leaked | AS150436 | Byteplus Pte. Ltd. | Byteplus | 25/05/2026, 21:59:13 | 12/07/2026, 11:49:40 | Yes | No | - | - | 06/06/2026, 14:39:45 | bytedance.com |
| 2408:8256:a281:9d4:1df0:12be:bcff:e1f5:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS17816 | China Unicom IP network China169 Guangdong province | China Unicom | 25/05/2026, 21:59:13 | 04/06/2026, 12:13:11 | - | - | - | - | - | - |