🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 816988 Page: 1336 / 8170 (100 per page) Showing: 133501-133600 Last Imported: 15/05/2026, 09:32:33
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 1336 of 8170
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
149.104.25.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS139659LUCIDACLOUD LIMITEDStarcloud Global01/04/2026, 02:01:4417/04/2026, 11:49:58 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 20:41:42-
178.18.252.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo01/04/2026, 02:01:4402/04/2026, 08:49:57 Yes Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 20:41:43contaboserver.net
54.198.160.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon Web Services01/04/2026, 02:01:4405/04/2026, 19:24:36 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 20:41:44-
15.237.60.•••:18789 - 🇫🇷 France - false Clean AS16509Amazon.com, Inc.Amazon Web Services01/04/2026, 02:01:4402/04/2026, 08:49:57 - - ----
57.128.226.•••:18789 - 🇵🇱 Poland Yes false Clean AS16276OVH SASOVH Poland01/04/2026, 02:01:4402/04/2026, 08:49:57 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 20:41:48-
204.168.206.•••:18789 - 🇫🇮 Finland - false Clean AS24940Hetzner Online GmbHHetzner01/04/2026, 02:01:4402/04/2026, 08:49:57 - - ----
193.180.212.•••:18789 - 🇩🇰 Denmark - false Clean AS44803Webdock.io ApSWebdock01/04/2026, 02:01:4402/04/2026, 18:35:17 No No --26/03/2026, 20:41:51-
132.145.93.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle Cloud01/04/2026, 02:01:4402/04/2026, 08:49:57 Yes Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, DragonFly, Earth Berberoka, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Packrat, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE, goziCVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-10708, CVE-2016-20012, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-17199, CVE-2018-20685, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 20:41:52healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
20.46.167.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4402/04/2026, 08:49:57 No No --26/03/2026, 10:16:02-
20.194.113.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4402/04/2026, 08:49:57 - - ----
40.64.122.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4402/04/2026, 08:49:57 - - ----
165.22.86.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 02:01:4402/04/2026, 08:49:57 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2014-0128, CVE-2014-3609, CVE-2014-6270, CVE-2014-7141, CVE-2014-7142, CVE-2015-3455, CVE-2015-5400, CVE-2016-10002, CVE-2016-20012, CVE-2016-2390, CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-3947, CVE-2016-3948, CVE-2016-4051, CVE-2016-4052, CVE-2016-4053, CVE-2016-4054, CVE-2016-4553, CVE-2016-4554, CVE-2016-4555, CVE-2016-4556, CVE-2018-1000024, CVE-2018-1000027, CVE-2018-15473, CVE-2018-15919, CVE-2018-19131, CVE-2018-19132, CVE-2018-20685, CVE-2019-12519, CVE-2019-12520, CVE-2019-12521, CVE-2019-12522, CVE-2019-12523, CVE-2019-12524, CVE-2019-12526, CVE-2019-12528, CVE-2019-12529, CVE-2019-13345, CVE-2019-16905, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-18860, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11945, CVE-2020-12062, CVE-2020-14058, CVE-2020-14145, CVE-2020-15049, CVE-2020-15778, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606, CVE-2020-25097, CVE-2020-8449, CVE-2020-8450, CVE-2020-8517, CVE-2021-23017, CVE-2021-28041, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2022-36760, CVE-2022-37436, CVE-2022-41318, CVE-2022-41741, CVE-2022-41742, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-45802, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-3272801/04/2026, 10:16:07-
20.204.42.•••:18789 - 🇺🇸 United States Yes false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4402/04/2026, 08:49:57 No No --26/03/2026, 10:16:08-
52.141.56.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4402/04/2026, 08:49:57 No No --26/03/2026, 10:16:09-
20.196.192.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4302/04/2026, 08:49:56 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5176701/04/2026, 10:16:10-
52.28.216.•••:18789 - 🇩🇪 Germany - false Clean AS16509Amazon.com, Inc.A100 ROW01/04/2026, 02:01:4308/04/2026, 12:16:00 No No --26/03/2026, 10:16:13-
20.214.177.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4302/04/2026, 09:34:57 No No --26/03/2026, 10:16:15-
20.89.229.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4302/04/2026, 09:34:57 - - ----
20.230.139.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4302/04/2026, 09:34:57 No No --26/03/2026, 10:16:17-
103.241.43.•••:18789 - 🇻🇳 Vietnam - false Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited01/04/2026, 02:01:4302/04/2026, 09:34:57 No No --26/03/2026, 10:16:18-
4.217.185.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4302/04/2026, 09:34:57 No No --26/03/2026, 10:16:20-
51.158.157.•••:18789 - 🇳🇱 Netherlands - false Leaked AS12876Scaleway SASScaleway Amsterdam01/04/2026, 02:01:4302/04/2026, 09:34:57 Yes No -CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272801/04/2026, 10:16:23online.fr, poneytelecom.eu, iliad-datacenter.fr, scaleway.com, online.net
20.196.84.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 02:01:4302/04/2026, 09:34:57 No No --26/03/2026, 10:16:25-
52.7.179.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon01/04/2026, 02:01:4317/04/2026, 04:44:32 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161701/04/2026, 10:16:32-
143.198.134.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 02:01:4302/04/2026, 09:34:57 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-638701/04/2026, 10:16:33-
99.79.52.•••:18789 - 🇨🇦 Canada - false Clean AS16509Amazon.com, Inc.Amazon Web Services Canada01/04/2026, 02:01:4316/04/2026, 15:54:56 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161701/04/2026, 10:16:34-
16.51.182.•••:30019 - 🇦🇺 Australia Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services01/04/2026, 01:29:0114/04/2026, 10:40:13 No No --26/03/2026, 01:34:10-
193.112.101.•••:18888 Assistant 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 01:29:0118/04/2026, 00:04:00 Yes Yes APT37, El-MacheteCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272801/04/2026, 01:34:11telstra.com.au, muru-d.com, ivision.com.au, medicaldirector.com, bigond.com, telstrainternationalgroup.com, telstra.com, telstra-global.com, bigpond.com, emerging.com.au, telstraglobal.com, telstrainternational.com, telstraglobal.net
65.2.139.•••:31593 - 🇮🇳 India Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services01/04/2026, 01:29:0014/04/2026, 21:52:18 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 01:34:12-
51.48.139.•••:8445 - 🇪🇸 Spain - false Clean AS16509Amazon.com, Inc.Unknown01/04/2026, 01:29:0014/04/2026, 21:52:18 - - ----
8.130.105.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud01/04/2026, 01:29:0018/04/2026, 00:04:00 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 01:34:15-
95.40.4.•••:8787 - 🇨🇳 China mainland - false Leaked AS16509Amazon.com, Inc.Amazon Web Services Hong Kong01/04/2026, 01:29:0015/04/2026, 00:09:41 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 01:34:16amazon.fr, bookworm.com, amazon.com.br, audible.com, amazon.eu, amazon.ca, amzaon.com, amazaon.com, audible.in, z-exp.com, amozon.com, aws-amazon.com, shopbop.com, accept.com, amazonn.com, amazon-adsystem.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, amazonaws.cm, com.be, amazonpay.com, rooftopmedia.net, vine.com, imdb.com, ssl-images-amazon.com, amazon.com.au, amazon-rings.com, assoc-amazon.com, amazonin.com, amzn.asia, annapurnalabs.com, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, amazon.ae, tenmarks.com, look.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, amazon-aws.com, endless.com, amazonlocal.com, amazonm.com, amazonllc.com, media-imdb.com, amazon.com.tw, createspace.com, amazonaws.com, bookdepository.com, amzn.com, amazon.com, goodreads.com, images-amazon.com, amazon.com.co
47.93.193.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:29:0015/04/2026, 00:09:41 - - ----
51.105.30.•••:18789 - 🇪🇺 European Union - false Clean AS8075Microsoft CorporationCloud01/04/2026, 01:26:4305/04/2026, 10:37:12 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 01:30:27-
44.215.103.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services01/04/2026, 01:26:4305/04/2026, 10:37:12 No No --26/03/2026, 01:30:28-
13.247.77.•••:18789 - 🇿🇦 South Africa - false Clean AS16509Amazon.com, Inc.Amazon Data Services01/04/2026, 01:26:4305/04/2026, 11:22:07 - - ----
35.152.97.•••:18789 - 🇮🇹 Italy - false Clean AS16509Amazon.com, Inc.Amazon Data Services Italy01/04/2026, 01:26:4105/04/2026, 12:51:30 No No --26/03/2026, 01:30:35-
40.176.250.•••:18789 - 🇨🇦 Canada - false Clean AS16509Amazon.com, Inc.Amazon Web Services Canada01/04/2026, 01:26:4105/04/2026, 13:36:12 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-734701/04/2026, 01:30:40-
4.231.216.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 01:26:4005/04/2026, 14:20:56 No No --27/03/2026, 19:37:19-
8.215.87.•••:18789 Assistant 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore01/04/2026, 01:26:4018/04/2026, 00:00:50 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 01:30:44-
16.62.137.•••:18789 - 🇨🇭 Switzerland - false Clean AS16509Amazon.com, Inc.Amazon Data Services01/04/2026, 01:26:4005/04/2026, 14:20:56 No No --26/03/2026, 01:30:45-
56.112.9.•••:18789 - 🇨🇦 Canada - false Clean AS16509Amazon.com, Inc.Amazon Web Services Canada01/04/2026, 01:26:3905/04/2026, 15:50:30 - - ----
3.235.253.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services01/04/2026, 01:26:3905/04/2026, 15:50:30 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 01:30:52-
51.85.5.•••:18789 - 🇮🇱 Israel - false Clean AS16509Amazon.com, Inc.A100 Row Inc01/04/2026, 01:26:3905/04/2026, 15:50:30 - - ----
13.62.52.•••:18789 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon Data Services Sweden01/04/2026, 01:26:3905/04/2026, 15:50:30 - - ----
54.86.252.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon01/04/2026, 01:26:3905/04/2026, 15:50:30 No No --26/03/2026, 01:30:56-
98.94.92.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services01/04/2026, 01:26:3705/04/2026, 18:04:37 - - ----
43.198.184.•••:18789 - 🇨🇳 China mainland - false Clean AS16509Amazon.com, Inc.Amazon01/04/2026, 01:26:3705/04/2026, 18:49:20 No - --26/03/2026, 01:31:07-
54.167.124.•••:80 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon01/04/2026, 01:24:0110/04/2026, 17:47:31 No No --29/03/2026, 14:43:10-
91.98.173.•••:443 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner01/04/2026, 01:24:0116/04/2026, 01:24:10 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/04/2026, 17:55:16-
39.98.50.•••:50001 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:24:0116/04/2026, 01:22:23 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138512/04/2026, 22:27:09aliyun.com
120.26.169.•••:443 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:24:0115/04/2026, 23:59:28 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138504/04/2026, 06:58:15aliyun.com
101.37.104.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:24:0109/04/2026, 14:37:09 Yes No --06/04/2026, 15:55:26aliyun.com
165.22.119.•••:443 - 🇬🇧 United Kingdom Yes false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 01:24:0115/04/2026, 13:32:11 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-10708, CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-638704/04/2026, 08:48:14-
178.104.140.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner Online01/04/2026, 01:24:0103/04/2026, 21:43:45 - - ----
197.45.121.•••:8008 Ibrahim (TBD) 🇪🇬 Egypt Yes false Clean AS8452TE-ASTE Data All-2101/04/2026, 01:24:0101/04/2026, 08:08:56 - - ----
116.230.67.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4812China Telecom (Group)ChinaNet Shanghai01/04/2026, 01:24:0116/04/2026, 01:22:26 Yes No --07/04/2026, 00:35:37bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
124.70.145.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud01/04/2026, 01:24:0112/04/2026, 23:55:39 Yes No --12/04/2026, 17:55:32smartcom.cc, huawei.com, huaweidevice.com
47.92.212.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:24:0116/04/2026, 10:44:42 No Yes APT28, APT41, Equation GroupCVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2016-0777, CVE-2017-20005, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734704/04/2026, 06:25:39-
119.3.217.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud01/04/2026, 01:24:0116/04/2026, 21:20:43 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198510/04/2026, 11:42:47smartcom.cc, huawei.com, huaweidevice.com, hdect.com.cn
46.225.190.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner01/04/2026, 01:24:0101/04/2026, 08:08:56 - - ----
34.132.16.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle01/04/2026, 01:24:0104/04/2026, 14:42:49 - - ----
15.222.1.•••:443 - 🇨🇦 Canada Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services Canada01/04/2026, 01:24:0101/04/2026, 08:08:56 - - ----
219.147.85.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137698Haerbing , Heilongjiang Province, P.R.China.ChinaNet Heilongjiang01/04/2026, 01:24:0016/04/2026, 01:22:53 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2006-20001, CVE-2008-0455, CVE-2010-0434, CVE-2010-1452, CVE-2011-0419, CVE-2011-3192, CVE-2011-3348, CVE-2011-3368, CVE-2011-3607, CVE-2011-3639, CVE-2011-4317, CVE-2011-4415, CVE-2012-0031, CVE-2012-0053, CVE-2012-0883, CVE-2012-2687, CVE-2012-3499, CVE-2012-4557, CVE-2012-4558, CVE-2013-1862, CVE-2013-1896, CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3523, CVE-2014-3581, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2020-11985, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-28625, CVE-2023-31122, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-38709, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-2352, CVE-2024-24768, CVE-2024-24795, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39907, CVE-2024-39911, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-56413, CVE-2025-61984, CVE-2025-61985, CVE-2025-66507, CVE-2025-6650804/04/2026, 06:07:37-
94.131.121.•••:18789 - 🇷🇺 Russia Yes false Clean AS33993UFO Hosting LLCUFO Hosting01/04/2026, 01:24:0012/04/2026, 17:11:21 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-10002, CVE-2016-10003, CVE-2016-20012, CVE-2018-1000024, CVE-2019-12519, CVE-2019-12521, CVE-2019-12523, CVE-2019-12525, CVE-2019-12526, CVE-2019-12529, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2020-11945, CVE-2020-14058, CVE-2020-15049, CVE-2020-24606, CVE-2020-25097, CVE-2021-28041, CVE-2021-28651, CVE-2021-28652, CVE-2021-31807, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138509/04/2026, 08:43:49-
47.92.216.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:24:0015/04/2026, 13:31:17 No Yes APT-C-23, APT28, APT35, APT36, APT37, APT39, Cobalt Group, Equation Group, Gamaredon Group, Ghostwriter, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2000-1210, CVE-2001-0590, CVE-2002-0493, CVE-2005-4838, CVE-2006-7196, CVE-2007-1358, CVE-2007-2449, CVE-2008-0128, CVE-2009-2696, CVE-2013-2185, CVE-2013-4286, CVE-2013-4322, CVE-2013-4444, CVE-2013-4590, CVE-2013-6357, CVE-2014-0075, CVE-2014-0096, CVE-2014-0099, CVE-2014-0119, CVE-2016-10708, CVE-2016-8735, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-8022, CVE-2021-23017, CVE-2021-3618, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341912/04/2026, 13:55:02-
8.163.22.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud01/04/2026, 01:24:0010/04/2026, 01:00:59 No No --03/04/2026, 22:12:20-
175.178.168.•••:18888 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 01:24:0001/04/2026, 08:08:56 - - ----
127.0.0.•••:18001 - 🇸🇬 Singapore - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd01/04/2026, 01:24:0016/04/2026, 01:23:53 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 14:58:53ovh.net
47.84.11.•••:443 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud01/04/2026, 01:24:0016/04/2026, 21:20:42 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 11:03:16hichina.com, alibaba-inc.com
154.194.183.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS139880OWGELS INTERNATIONAL CO., LIMITEDStarbow Ltd01/04/2026, 01:24:0016/04/2026, 01:22:17 Yes - --06/04/2026, 23:57:44ouyipharma.com
118.25.183.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 01:24:0016/04/2026, 21:20:44 Yes - --07/04/2026, 08:06:02tencent.com
79.116.70.•••:18789 - 🇪🇸 Spain Yes false Clean AS57269DIGI SPAIN TELECOM S.ADigi Spain Telecom01/04/2026, 01:24:0001/04/2026, 08:08:56 - - ----
112.74.172.•••:80 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:24:0012/04/2026, 23:54:14 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-2341904/04/2026, 16:16:22aliyun.com
111.229.37.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 01:24:0016/04/2026, 01:22:43 Yes - --09/04/2026, 11:44:43tencent.com
72.56.94.•••:18789 - 🇳🇱 Netherlands Yes false Clean AS210976Timeweb, LLPTaiwan Cloud01/04/2026, 01:24:0016/04/2026, 01:22:56 No No --31/03/2026, 23:55:48-
82.165.101.•••:443 - 🇩🇪 Germany Yes false Clean AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.IONOS01/04/2026, 01:24:0010/04/2026, 01:01:01 No Yes APT41CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-3840810/04/2026, 01:05:34-
43.139.133.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 01:24:0017/04/2026, 01:06:24 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138504/04/2026, 10:16:52tencent.com
47.236.92.•••:18789 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud01/04/2026, 01:24:0016/04/2026, 18:18:36 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 06:44:27hichina.com, alibaba-inc.com
178.104.23.•••:443 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner01/04/2026, 01:24:0017/04/2026, 23:57:44 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 04:19:39-
101.251.179.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS133775XiamenXiamen Kuaikuai Network Technology01/04/2026, 01:24:0004/04/2026, 16:57:05 Yes No --04/04/2026, 16:59:09kkidc.com
34.148.28.•••:18010 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle01/04/2026, 01:24:0016/04/2026, 12:15:32 - - ----
47.97.153.•••:80 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 01:24:0016/04/2026, 17:33:16 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-734704/04/2026, 10:57:49-
113.65.162.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetCHINANET Guangdong01/04/2026, 01:24:0004/04/2026, 18:26:33 - - ----
129.121.55.•••:443 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOGTIPS101/04/2026, 01:24:0017/04/2026, 09:22:12 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 04:33:43athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, duckdns.org, dotster.com, bluehost.com
188.120.233.•••:18789 - 🇷🇺 Russia Yes false Clean AS29182JSC IOTJoint Stock Company Internet of Things01/04/2026, 01:24:0010/04/2026, 17:46:51 No Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-10733, CVE-2020-14145, CVE-2020-14349, CVE-2020-14350, CVE-2020-1720, CVE-2020-25694, CVE-2020-25695, CVE-2020-25696, CVE-2021-23017, CVE-2021-23214, CVE-2021-23222, CVE-2021-32027, CVE-2021-32028, CVE-2021-32029, CVE-2021-3393, CVE-2021-3618, CVE-2021-3677, CVE-2021-41617, CVE-2021-43767, CVE-2022-1552, CVE-2022-2625, CVE-2022-3559, CVE-2022-3620, CVE-2022-37451, CVE-2022-41741, CVE-2022-41742, CVE-2022-41862, CVE-2023-2454, CVE-2023-2455, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-39417, CVE-2023-42114, CVE-2023-42115, CVE-2023-42116, CVE-2023-42117, CVE-2023-42119, CVE-2023-43622, CVE-2023-44487, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51766, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39929, CVE-2024-40898, CVE-2024-6387, CVE-2024-7347, CVE-2025-2341910/04/2026, 17:03:41-
120.48.170.•••:18789 - 🇺🇸 United States Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu01/04/2026, 01:23:5916/04/2026, 10:44:42 Yes Yes APT37, El-Machete, GoziCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 18:28:02baidu.com
149.88.65.•••:18789 - 🇭🇰 Hong Kong Yes false Leaked AS401696cognetcloud INCHong Kong Cloud Network Technology Co Ltd01/04/2026, 01:23:5916/04/2026, 00:38:35 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 08:47:02cogentco.com
220.158.20.•••:443 - 🇯🇵 Japan Yes false Clean AS131965Xserver Inc.XServer01/04/2026, 01:23:5916/04/2026, 14:31:26 Yes No -CVE-2006-20001, CVE-2021-23017, CVE-2021-3618, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41741, CVE-2022-41742, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2024-7347, CVE-2025-23048, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-6620010/04/2026, 11:01:46xserver.co.jp
82.156.193.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 01:23:5904/04/2026, 15:27:43 No Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161704/04/2026, 15:33:47-
156.238.233.•••:443 - 🇭🇰 Hong Kong Yes false Clean AS401701cognetcloud INCCognetCloud01/04/2026, 01:23:5801/04/2026, 08:08:54 - - ----
13.209.85.•••:443 - 🇰🇷 South Korea Yes false Clean AS16509Amazon.com, Inc.AWS Seoul Region01/04/2026, 01:23:5801/04/2026, 16:26:42 - - ----
106.12.61.•••:18789 芝士卷边 (🧀) 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu01/04/2026, 01:23:5812/04/2026, 23:55:30 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 09:35:07baidu.com
162.55.191.•••:18789 - 🇩🇪 Germany Yes false Leaked AS24940Hetzner Online GmbHHetzner Online01/04/2026, 01:23:5816/04/2026, 00:38:40 Yes Yes APT1 Comment Crew, APT15, APT27, APT28, APT29, APT31, APT34, APT35, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Earth Longzhi, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2015-9251, CVE-2015-9253, CVE-2016-20012, CVE-2017-7272, CVE-2017-7963, CVE-2017-8923, CVE-2017-9225, CVE-2017-9229, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-15132, CVE-2018-17082, CVE-2018-19395, CVE-2018-19396, CVE-2018-19518, CVE-2018-19520, CVE-2018-19935, CVE-2018-20783, CVE-2019-11358, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9023, CVE-2019-9024, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2020-11022, CVE-2020-11023, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-31628, CVE-2022-31629, CVE-2022-4900, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 10:10:17hetzner.com
27.16.175.•••:55555 - 🇨🇳 China mainland Yes false Leaked AS137266CHINATELECOM Hubei province Wuhan 5G networkChinaNet Hubei01/04/2026, 01:23:5806/04/2026, 14:19:30 Yes No --03/04/2026, 21:45:22bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
156.225.143.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS142286LUOGELANG (FRANCE) LIMITEDCloudFly Net Inc01/04/2026, 01:23:5812/04/2026, 23:54:01 No Yes El-MacheteCVE-2014-407807/04/2026, 17:10:14-
89.167.111.•••:18789 - 🇫🇮 Finland Yes false Clean AS24940Hetzner Online GmbHHetzner01/04/2026, 01:23:5816/04/2026, 14:31:24 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 02:51:39-
43.133.29.•••:18789 - 🇯🇵 Japan Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd01/04/2026, 01:23:5816/04/2026, 23:35:59 Yes Yes APT17, APT29, APT35, APT36, APT37, APT40, APT41, APT45, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, Patchwork, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 16:17:07tencent.com
159.75.184.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 01:23:5817/04/2026, 03:21:46 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2014-4078, CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-638704/04/2026, 06:36:23-
118.89.85.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 01:23:5817/04/2026, 10:05:56 Yes - --11/04/2026, 19:43:00tencent.com