🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 1006105 Page: 1427 / 10062 (100 per page) Showing: 142601-142700 Last Imported: 14/07/2026, 07:44:58
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 1427 of 10062
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
209.38.90.•••:18789 - 🇦🇺 Australia - false Clean AS14061DigitalOcean, LLCDigitalOcean22/05/2026, 13:10:5828/05/2026, 21:18:09 No No -CVE-2024-39894, CVE-2024-638725/05/2026, 07:48:27-
34.56.18.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle22/05/2026, 13:10:5813/07/2026, 16:25:40 No - -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/06/2026, 07:43:46-
16.144.36.•••:18789 - 🇺🇸 United States - false Leaked AS16509Amazon.com, Inc.Amazon22/05/2026, 13:10:5825/05/2026, 22:42:13 Yes No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620025/05/2026, 13:29:22bookworm.com, lovefilm.com, amazon.eu, amazaon.com, z-exp.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, com.be, amazonpay.com, rooftopmedia.net, vine.com, amazon.com.au, amazon-rings.com, amazonin.com, amzn.asia, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, endless.com, amazonlocal.com, amazonllc.com, media-imdb.com, amazon.com.tw, amazonaws.com, kivasystems.com, amzn.com, amazon.com, thinkboxsoftware.com
183.245.159.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS56041China Mobile communications corporationChina Mobile22/05/2026, 13:10:5813/07/2026, 20:00:45 Yes Yes Packrat-03/06/2026, 02:50:01chinamobile.com, chinamobile.cn
44.204.119.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services22/05/2026, 13:10:5713/07/2026, 07:49:12 No No --29/05/2026, 10:50:58-
87.99.131.•••:18789 - 🇺🇸 United States Yes false Clean AS213230Hetzner Online GmbHHetzner22/05/2026, 13:10:5722/05/2026, 19:30:57 - - ----
156.247.105.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Octopus Web Solution Inc22/05/2026, 13:10:5713/07/2026, 04:15:40 No No -CVE-2023-44487, CVE-2024-7347, CVE-2025-2341909/06/2026, 03:15:54-
39.105.173.•••:18789 - 🇽🇽 XX Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Unknown22/05/2026, 13:10:5714/07/2026, 03:50:58 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/06/2026, 17:29:32aliyun.com
47.236.195.•••:18789 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud22/05/2026, 13:10:5721/06/2026, 18:10:51 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272825/05/2026, 14:56:30hichina.com, alibaba-inc.com
111.229.168.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/05/2026, 13:10:5712/06/2026, 01:22:15 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138528/05/2026, 08:30:29tencent.com
20.75.94.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft22/05/2026, 13:10:5722/05/2026, 19:30:57 - - ----
140.143.193.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/05/2026, 13:10:5730/06/2026, 23:06:16 - - ----
5.189.154.•••:18789 - 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo22/05/2026, 13:10:5712/07/2026, 21:08:39 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272824/05/2026, 05:46:44contabo.de, giga-hosting.biz, contabo.net
54.250.211.•••:18789 - 🇯🇵 Japan - false Clean AS16509Amazon.com, Inc.Amazon22/05/2026, 13:10:5701/06/2026, 19:34:45 No Yes APT14, APT40, APT41, Kimsuky, Lazarus Group, SharpPandaCVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-3181326/05/2026, 06:28:45-
123.16.54.•••:18789 - 🇻🇳 Vietnam Yes true Leaked AS45899VNPT CorpVNPT22/05/2026, 13:09:0011/07/2026, 12:54:37 Yes No -CVE-2005-0004, CVE-2012-0540, CVE-2012-0572, CVE-2012-0574, CVE-2012-0578, CVE-2012-1688, CVE-2012-1689, CVE-2012-1690, CVE-2012-1697, CVE-2012-1702, CVE-2012-1703, CVE-2012-1705, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757, CVE-2012-2750, CVE-2012-3150, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163, CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2012-5096, CVE-2012-5612, CVE-2012-5614, CVE-2012-5627, CVE-2013-0367, CVE-2013-0368, CVE-2013-0371, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0386, CVE-2013-0389, CVE-2013-1502, CVE-2013-1506, CVE-2013-1511, CVE-2013-1512, CVE-2013-1521, CVE-2013-1523, CVE-2013-1526, CVE-2013-1531, CVE-2013-1532, CVE-2013-1544, CVE-2013-1548, CVE-2013-1552, CVE-2013-1555, CVE-2013-1861, CVE-2013-2375, CVE-2013-2376, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3783, CVE-2013-3793, CVE-2013-3794, CVE-2013-3801, CVE-2013-3802, CVE-2013-3804, CVE-2013-3805, CVE-2013-3808, CVE-2013-3809, CVE-2013-3812, CVE-2013-3839, CVE-2013-5807, CVE-2013-5891, CVE-2013-5908, CVE-2014-0001, CVE-2014-0384, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0420, CVE-2014-0437, CVE-2014-2419, CVE-2014-2430, CVE-2014-2431, CVE-2014-2432, CVE-2014-2436, CVE-2014-2438, CVE-2014-2440, CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484, CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496, CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559, CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2325, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-3152, CVE-2015-4752, CVE-2015-4757, CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2015-7744, CVE-2016-0502, CVE-2016-0610, CVE-2016-0616, CVE-2016-0642, CVE-2016-0651, CVE-2016-3471, CVE-2016-3492, CVE-2016-5584, CVE-2016-5612, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-6664, CVE-2016-7440, CVE-2016-9843, CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-15365, CVE-2017-15945, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3302, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3600, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819, CVE-2018-3058, CVE-2018-3063, CVE-2018-3066, CVE-2018-3081, CVE-2018-3133, CVE-2018-3174, CVE-2018-3282, CVE-2019-2455, CVE-2019-2481, CVE-2019-2503, CVE-2019-2529, CVE-2019-2614, CVE-2019-2627, CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805, CVE-2019-2974, CVE-2020-14550, CVE-2020-2574, CVE-2020-2752, CVE-2020-2780, CVE-2020-2812, CVE-2020-28912, CVE-2020-2922, CVE-2021-2007, CVE-2021-2011, CVE-2021-2144, CVE-2021-46659, CVE-2021-46666, CVE-2021-46667, CVE-2021-46669, CVE-2022-27385, CVE-2022-27449, CVE-2022-31621, CVE-2022-31622, CVE-2022-31623, CVE-2022-31624, CVE-2023-515728/05/2026, 17:02:02vnpt.com.vn, vnpt.vn
8.137.94.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud22/05/2026, 13:09:0013/07/2026, 03:31:18 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272825/05/2026, 11:59:08-
44.200.254.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services22/05/2026, 13:09:0013/07/2026, 00:40:21 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161727/05/2026, 07:43:59-
223.109.140.•••:18789 - 🇽🇽 XX Yes false Leaked AS56046China Mobile communications corporationUnknown22/05/2026, 13:09:0020/06/2026, 16:00:05 Yes No --27/05/2026, 23:58:39chinamobile.com, chinamobile.cn
47.92.125.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 13:09:0011/07/2026, 05:03:34 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198525/05/2026, 19:12:49-
1.14.206.•••:18789 - 🇨🇳 China mainland - false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/05/2026, 13:09:0013/07/2026, 09:56:09 Yes - --06/06/2026, 16:02:57tencent.com, tencentcloud.com
2a02:4780:5e:fbe1::1:18789 - 🇲🇾 Malaysia - false Clean AS47583Hostinger International LimitedHostinger22/05/2026, 13:09:0012/06/2026, 18:14:36 - - ----
47.92.250.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 13:09:0004/06/2026, 15:01:22 No No --29/05/2026, 14:20:55-
213.250.145.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS136907HUAWEI CLOUDSHuawei Cloud TR22/05/2026, 13:09:0018/06/2026, 11:41:12 Yes No --06/06/2026, 16:02:50nestlabs.com, googlegroup.com, guge.com, teracent.com, googlepay.com, ccaiplatform.com, google.fi, webcomponents.org, socratic.com, gmail.co, goolgle.com, google.cloud, googlee.com, atlantic-quantum.com, fabric.io, glasscollective.com, google.ie, google.com.ua, adometry.com, moodstocks.com, google.ac, measuremap.com, google2.com, google.us, googlepages.com, gmail.co.in, polymer-project.org, mdialog.com, gogole.com, comyoutube.com, freebase.com, chromium.org, business.site, adwordize.at, invitemedia.com, qwiklabs.net, googlemaps.com, recaptcha.net, crr.com, wearewild.us, decryptcryptolocker.com, saynow.com, titanaerospace.com, run.app, webpkgcache.com, googlevideo.com, admob.com, cdap.io, ggogle.com, googletemp.com, gexperiments3.com, glail.com, gooogle.com, gmale.com, siemplify.co, gexperiments1.com, googlete.com, youtube.org, google.cl, gmailnator.com, webmproject.org, google.com.ly, teracent.net, idx.dev, abcdefghij.com, protobuf.dev, intechsafety.com, googleads.com, googlecloudcommunity.com, schema.org, accountchooser.com, krom.com, postini.com, googlehangouts.com, pulse.io, quickoffice.com, chromiumapp.org, womentechmakers.com, ongcp.co, geminicli.com, google.bj, android.com, getmdl.io, timeful.com, apollo-df.dev, dartpad.dev, gmail.cl, brightbytes.net, 1e100cdn.net, aimatter.com, ampproject.org, google.com.qa, nest.com, googles.com, urchin.com, googgle.com, googlegroups.com, googlefiber.com, google.com.sl, like.com, abc.xyz, google.jp, bazel.build, getpunchd.com, gmodules.com, revolv.com, keyhole.com, eyefluence.com, ampproject.net, googleworkspace.com, firebaseio.com, yeoman.io, android-usa.com, chromeos.dev, doubleclick.com, goooglemail.com, googlechrome.com, googel.com, fuchsia.dev, g-mail.com, tiltbrush.com, webpass.net, adwords.com, angular.dev, google.com.gi, madewithcode.com, disco.com, googler.com, mandiant.org, googlefi.com, google.co.in, gmaial.com, pub.dev, gerritcodereview.com, doubleclick.net, dataliberation.org, gngjd.com, joonix.net, area120.com, google.om, screenwisepanel.com, ebooktechnologies.com, fab.by, googl.com, gppgle.com, googlemail.com, goooglee.com, gsuite.com, google.cat, googleadservices.com, spp.com, fitbitlearn.com, beatthatquote.com, goolgool.com, goggle.com, famebit.com, globalweathercorp.com, on2.com, bynorth.com, barelydigital.com, gmaul.com, picasa.com, divide.com, yoututbe.com, getintra.org, 2mdn.net, mandiantinc.com, google.gg, simpler.co, enterproid.com, getoutline.org, rewsprojects.com, youtube.net, checkouttest.com, athenawave.com, material.io, google.org, mygbiz.com, gmsail.com, googleautosale.com, google-analytics.com, flutter.dev, cc-dt.com, google.xxx, perspectiveapi.com, google.rs, googsle.com, openhandsetalliance.com, stratozone.com, googleusercontent.com, respond-software.com, pittpatt.com, edgestatic.com, youtubeaccelerator.com, strivecdn.com, lookercdn.com, gexperiments4.com, test-google-a.com, ggoogle.com, gmail.io, abcdefghijkl.com, ipv6test.com, youtube.co, google.com.ng, googlr.com, mobiledgex.com, youtube.io, youttube.com, autodraw.com, channelintelligence.com, dysonics.com, google.by, velostrata.com, bandpage.com, gvt2.com, postrank.com, google.co.ke, googled.co, google.com.tw, looker.com, goo-gle.com, page.link, google.co, google.ru, firebase.com, google.com.pe, chrome.com, youtube.com, yt.com, botsociety.io, kubernetespodcast.com, gogle.com, mindset-media.com, google1.com, myenergy.com, pring.jp, meebo.com, hstspreload.org, scroobly.com, g.co, gmail.com, google.net, wgoogle.com, gmail.ua, androideval.com, mekabot.com, intrinsic.ai, google.com.pr, 10youtube.com, barelypolitical.com, agnilux.com, app-analytics-services.com, simplemlforsheets.com, google-net.com, v8.dev, kbo.co.ke, raterhub.com, chromecast.com, 1e100.net, youtube.om, psmtp.com, txvia.com, merlintechcorp.com, google.com.do, gmail.org, angstro.com, gfiber.com, dmtry.com, gong1chuang1.com, google.in, gtempaccount.com, googole.com
54.252.144.•••:18789 - 🇦🇺 Australia - false Clean AS16509Amazon.com, Inc.Amazon22/05/2026, 13:08:5922/05/2026, 18:04:57 - - ----
112.27.200.•••:18789 - 🇨🇳 China mainland Yes false Clean AS9808China Mobile Communications Group Co., Ltd.China Mobile22/05/2026, 13:08:5922/05/2026, 18:47:04 - - ----
217.9.14.•••:18789 - 🇧🇷 Brazil Yes true Leaked AS268624Gamers Club LtdaLuraHosting22/05/2026, 13:08:5913/07/2026, 05:39:05 Yes No --03/06/2026, 09:50:20nestlabs.com, googlegroup.com, guge.com, teracent.com, googlepay.com, ccaiplatform.com, google.fi, webcomponents.org, socratic.com, gmail.co, goolgle.com, google.cloud, googlee.com, atlantic-quantum.com, fabric.io, glasscollective.com, google.ie, google.com.ua, adometry.com, moodstocks.com, google.ac, measuremap.com, google2.com, google.us, googlepages.com, gmail.co.in, polymer-project.org, mdialog.com, gogole.com, comyoutube.com, freebase.com, chromium.org, business.site, adwordize.at, invitemedia.com, qwiklabs.net, googlemaps.com, recaptcha.net, crr.com, wearewild.us, decryptcryptolocker.com, saynow.com, titanaerospace.com, run.app, webpkgcache.com, googlevideo.com, admob.com, cdap.io, ggogle.com, googletemp.com, gexperiments3.com, glail.com, gooogle.com, gmale.com, siemplify.co, gexperiments1.com, googlete.com, youtube.org, google.cl, gmailnator.com, webmproject.org, google.com.ly, teracent.net, idx.dev, abcdefghij.com, protobuf.dev, intechsafety.com, googleads.com, googlecloudcommunity.com, schema.org, accountchooser.com, krom.com, postini.com, googlehangouts.com, pulse.io, quickoffice.com, chromiumapp.org, womentechmakers.com, ongcp.co, geminicli.com, google.bj, android.com, getmdl.io, timeful.com, apollo-df.dev, dartpad.dev, gmail.cl, brightbytes.net, 1e100cdn.net, aimatter.com, ampproject.org, google.com.qa, nest.com, googles.com, urchin.com, googgle.com, googlegroups.com, googlefiber.com, google.com.sl, like.com, abc.xyz, google.jp, bazel.build, getpunchd.com, gmodules.com, revolv.com, keyhole.com, eyefluence.com, ampproject.net, googleworkspace.com, firebaseio.com, yeoman.io, android-usa.com, chromeos.dev, doubleclick.com, goooglemail.com, googlechrome.com, googel.com, fuchsia.dev, g-mail.com, tiltbrush.com, webpass.net, adwords.com, angular.dev, google.com.gi, madewithcode.com, disco.com, googler.com, mandiant.org, googlefi.com, google.co.in, gmaial.com, pub.dev, gerritcodereview.com, doubleclick.net, dataliberation.org, gngjd.com, joonix.net, area120.com, google.om, screenwisepanel.com, ebooktechnologies.com, fab.by, googl.com, gppgle.com, googlemail.com, goooglee.com, gsuite.com, google.cat, googleadservices.com, spp.com, fitbitlearn.com, beatthatquote.com, goolgool.com, goggle.com, famebit.com, globalweathercorp.com, on2.com, bynorth.com, barelydigital.com, gmaul.com, picasa.com, divide.com, yoututbe.com, getintra.org, 2mdn.net, mandiantinc.com, google.gg, simpler.co, enterproid.com, getoutline.org, rewsprojects.com, youtube.net, checkouttest.com, athenawave.com, material.io, google.org, mygbiz.com, gmsail.com, googleautosale.com, google-analytics.com, flutter.dev, cc-dt.com, google.xxx, perspectiveapi.com, google.rs, googsle.com, openhandsetalliance.com, stratozone.com, googleusercontent.com, respond-software.com, pittpatt.com, edgestatic.com, youtubeaccelerator.com, strivecdn.com, lookercdn.com, gexperiments4.com, test-google-a.com, ggoogle.com, gmail.io, abcdefghijkl.com, ipv6test.com, youtube.co, google.com.ng, googlr.com, mobiledgex.com, youtube.io, youttube.com, autodraw.com, channelintelligence.com, dysonics.com, google.by, velostrata.com, bandpage.com, gvt2.com, postrank.com, google.co.ke, googled.co, google.com.tw, looker.com, goo-gle.com, page.link, google.co, google.ru, firebase.com, google.com.pe, chrome.com, youtube.com, yt.com, botsociety.io, kubernetespodcast.com, gogle.com, mindset-media.com, google1.com, myenergy.com, pring.jp, meebo.com, hstspreload.org, scroobly.com, g.co, gmail.com, google.net, wgoogle.com, gmail.ua, androideval.com, mekabot.com, intrinsic.ai, google.com.pr, 10youtube.com, barelypolitical.com, agnilux.com, app-analytics-services.com, simplemlforsheets.com, google-net.com, v8.dev, kbo.co.ke, raterhub.com, chromecast.com, 1e100.net, youtube.om, psmtp.com, txvia.com, merlintechcorp.com, google.com.do, gmail.org, angstro.com, gfiber.com, dmtry.com, gong1chuang1.com, google.in, gtempaccount.com, googole.com
13.213.37.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services22/05/2026, 13:08:5922/06/2026, 09:02:12 No No -CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541425/05/2026, 19:11:22-
117.72.26.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com22/05/2026, 13:08:5926/05/2026, 07:05:36 - - ----
114.132.78.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/05/2026, 13:08:5904/06/2026, 07:13:42 Yes Yes APT37, El-Machete-25/05/2026, 22:39:28tencent.com
42.193.184.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/05/2026, 13:08:5911/07/2026, 15:45:39 Yes No --28/05/2026, 09:12:08tencent.com
18.190.105.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon22/05/2026, 13:08:5912/07/2026, 08:55:31 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161723/05/2026, 01:46:51-
178.104.110.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner22/05/2026, 13:08:5912/06/2026, 06:15:12 No No --31/05/2026, 11:07:32-
170.0.60.•••:18789 - 🇧🇷 Brazil Yes false Clean AS265008T F DA SILVA RAMOS TELECOMUNICAÇÕES E SISTEMA EPPT F Da Silva Ramos Telecomunicacoes22/05/2026, 13:08:5903/06/2026, 08:23:22 No No --19/05/2026, 16:18:51-
43.156.188.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/05/2026, 13:08:5906/06/2026, 16:42:28 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2022-40468, CVE-2023-28531, CVE-2023-38408, CVE-2023-40533, CVE-2023-48795, CVE-2023-49606, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541401/06/2026, 03:23:50tencent.com
2408:8248:427:67a4:c5e2:9af9:531a:3d8f:18789 - 🇨🇳 China mainland - false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom22/05/2026, 13:08:5923/06/2026, 07:11:25 - - ----
35.243.248.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle22/05/2026, 13:08:5904/06/2026, 07:56:50 No Yes DragonFly, PackratCVE-2025-61984, CVE-2025-6198525/05/2026, 17:46:29-
101.47.44.•••:18789 - 🇸🇬 Singapore - true Leaked AS150436Byteplus Pte. Ltd.Byteplus22/05/2026, 13:08:5913/07/2026, 20:41:43 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272825/05/2026, 08:26:10bytedance.com
106.52.102.•••:18789 - 🇨🇳 China mainland - true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/05/2026, 13:08:5913/07/2026, 13:31:29 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138501/06/2026, 04:47:43tencent.com
5.189.136.•••:18789 - 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo22/05/2026, 13:08:5912/07/2026, 18:58:20 Yes Yes APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541425/05/2026, 23:26:01contabo.de, contabo.net
20.97.2.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft22/05/2026, 13:08:5922/05/2026, 18:47:03 - - ----
51.77.201.•••:18789 - 🇫🇷 France Yes true Leaked AS16276OVH SASOVH22/05/2026, 13:08:5913/07/2026, 12:05:19 Yes Yes APT15, APT28, APT29, APT31, APT34, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-43622, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-27316, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541404/06/2026, 14:21:04ovh.net
47.253.163.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud US22/05/2026, 13:08:5901/06/2026, 07:38:44 No - -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/05/2026, 20:33:46-
154.203.127.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation22/05/2026, 13:08:5914/07/2026, 03:06:42 No No --19/05/2026, 17:47:09-
168.76.210.•••:18789 - 🇿🇦 South Africa Yes true Clean AS137951ASLINE LIMITEDFree State Education Department22/05/2026, 13:08:5912/07/2026, 07:28:27 No No -CVE-2014-407826/05/2026, 02:13:20-
156.252.34.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation22/05/2026, 13:08:5901/07/2026, 01:14:38 No No --19/05/2026, 22:41:42-
2a02:c207:2324:4583::1:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo22/05/2026, 13:08:5801/07/2026, 10:32:06 - - ----
194.147.33.•••:18789 - 🇳🇱 Netherlands Yes false Clean AS41745Hosting servicesIlya Baykov22/05/2026, 13:08:5825/05/2026, 19:51:54 - - ----
47.92.93.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 13:08:5804/06/2026, 15:44:01 Yes Yes APT-C-23, APT36, Cobalt Group, Equation Group, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734701/06/2026, 13:17:42youyoufood.com
3.235.121.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services22/05/2026, 13:08:5807/07/2026, 07:17:29 No No --25/05/2026, 23:08:25-
74.208.167.•••:18789 - 🇺🇸 United States - true Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.1&1 Ionos22/05/2026, 13:08:5814/07/2026, 03:06:40 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541429/05/2026, 04:21:37ionos.com
47.92.225.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 13:08:5803/06/2026, 17:35:33 No No --19/05/2026, 17:46:16-
3.70.45.•••:18789 - 🇩🇪 Germany - true Clean AS16509Amazon.com, Inc.A100 ROW22/05/2026, 13:08:5812/07/2026, 22:32:02 Yes Yes APT28, APT35, APT36, APT37, APT39, Cobalt Group, Gamaredon Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2017-8923, CVE-2018-15473, CVE-2018-15919, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-20685, CVE-2019-11044, CVE-2019-11045, CVE-2019-11046, CVE-2019-11047, CVE-2019-11048, CVE-2019-11050, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-14145, CVE-2020-7059, CVE-2020-7060, CVE-2020-7061, CVE-2020-7062, CVE-2020-7063, CVE-2020-7064, CVE-2020-7066, CVE-2020-7067, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2021-23017, CVE-2021-3618, CVE-2021-41617, CVE-2022-31628, CVE-2022-31629, CVE-2022-37454, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-4577, CVE-2024-734725/05/2026, 16:21:48escs.io
8.136.223.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud22/05/2026, 13:08:5805/06/2026, 23:09:06 No Yes APT28, APT35, APT36, APT37, APT39, Cobalt Group, Equation Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2021-42340, CVE-2021-43980, CVE-2022-23181, CVE-2022-29885, CVE-2022-34305, CVE-2022-4225203/06/2026, 04:12:17-
23.140.244.•••:18789 - 🇺🇸 United States Yes false Clean AS35876VoltNet incSkyvoro Inc V422/05/2026, 13:08:5813/06/2026, 19:34:59 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198526/05/2026, 02:11:45-
54.238.195.•••:18789 - 🇯🇵 Japan Yes true Clean AS16509Amazon.com, Inc.Amazon Web Services Japan22/05/2026, 13:08:5813/07/2026, 04:13:52 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10002, CVE-2016-10003, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-1000024, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-12519, CVE-2019-12521, CVE-2019-12523, CVE-2019-12525, CVE-2019-12526, CVE-2019-12529, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11945, CVE-2020-14058, CVE-2020-14145, CVE-2020-15049, CVE-2020-15778, CVE-2020-24606, CVE-2020-25097, CVE-2021-28651, CVE-2021-28652, CVE-2021-31807, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198525/05/2026, 19:12:29-
178.104.134.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner22/05/2026, 13:08:5820/06/2026, 01:12:14 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541403/06/2026, 22:43:12-
135.125.254.•••:18789 - 🇩🇪 Germany Yes true Leaked AS16276OVH SASOVH Germany22/05/2026, 13:08:5812/07/2026, 06:45:32 Yes Yes APT14, APT40, APT41, Cobalt Group, Gamaredon Group, Kimsuky, Lazarus Group, SharpPandaCVE-2006-20001, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-21707, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-26691, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-37454, CVE-2023-25690, CVE-2023-27522, CVE-2024-31227, CVE-2024-31228, CVE-2024-31449, CVE-2024-46981, CVE-2024-51741, CVE-2025-21605, CVE-2025-26466, CVE-2025-27151, CVE-2025-32023, CVE-2025-32728, CVE-2025-46686, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819, CVE-2025-48367, CVE-2025-49844, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541428/05/2026, 20:34:04ovh.net
39.98.36.•••:18789 - 🇨🇳 China mainland - false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 13:08:5803/06/2026, 21:13:17 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138528/05/2026, 02:48:58aliyun.com
38.6.9.•••:18789 - 🇯🇵 Japan Yes false Clean AS398993PEG TECH INCPolyethylene Glycol-Lipid Association22/05/2026, 13:08:5731/05/2026, 12:39:16 No Yes APT28, APT29, APT35, APT37, APT39, APT41, Cobalt Group, Equation Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2014-0160, CVE-2014-0224, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-10003, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-0777, CVE-2016-0778, CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161729/05/2026, 04:20:26-
47.92.77.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 13:08:5703/06/2026, 22:39:07 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198525/05/2026, 17:47:01-
39.96.210.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 13:08:5712/07/2026, 04:37:08 Yes No -CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341929/05/2026, 13:33:44aliyun.com
168.76.213.•••:18789 - 🇿🇦 South Africa Yes true Clean AS137951ASLINE LIMITEDFree State Education Department22/05/2026, 13:08:5712/07/2026, 06:02:39 No No -CVE-2014-407825/05/2026, 12:00:42-
183.141.184.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Zhejiang Jiaxing22/05/2026, 13:08:5706/06/2026, 11:06:18 No No --22/05/2026, 16:18:13-
186.240.23.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS132839POWER LINE DATACENTERHK Powerline22/05/2026, 13:08:5731/05/2026, 14:44:22 No No --19/05/2026, 08:26:37-
168.76.210.•••:18789 - 🇿🇦 South Africa Yes true Clean AS137951ASLINE LIMITEDFree State Education Department22/05/2026, 13:08:5713/07/2026, 09:56:03 No No -CVE-2014-407803/06/2026, 19:46:33-
14.103.73.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology22/05/2026, 13:08:5712/07/2026, 23:14:53 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138528/05/2026, 21:17:18bytedance.com
194.233.87.•••:18789 - 🇸🇬 Singapore - true Leaked AS141995Contabo Asia Private LimitedContabo Asia Private Limited22/05/2026, 13:08:5713/07/2026, 02:48:29 Yes Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Callisto Group, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, MoustachedBouncer, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2015-20107, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-10735, CVE-2020-11984, CVE-2020-11993, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28861, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-37454, CVE-2022-42919, CVE-2022-45061, CVE-2023-24329, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541423/05/2026, 07:27:50contaboserver.net
2409:8a1e:4d22:6dd0::23f:18789 - 🇨🇳 China mainland - false Clean AS24400Shanghai Mobile Communications Co.,Ltd.China Mobile22/05/2026, 13:08:5722/05/2026, 19:29:08 - - ----
168.144.82.•••:18789 - 🇮🇳 India - false Clean AS14061DigitalOcean, LLCDigitalOcean22/05/2026, 13:08:5726/05/2026, 10:36:44 - - ----
47.80.18.•••:18789 - 🇺🇸 United States - true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud22/05/2026, 13:08:5712/07/2026, 23:14:50 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541426/05/2026, 00:47:50hichina.com, alibaba-inc.com
219.157.142.•••:18789 - 🇽🇽 XX Yes false Leaked AS4837CHINA UNICOM China169 BackboneUnknown22/05/2026, 13:08:5703/06/2026, 10:30:18 Yes Yes Packrat-28/05/2026, 21:19:05chinaunicom.cn
191.252.202.•••:18789 - 🇧🇷 Brazil - true Leaked AS27715Locaweb Serviços de Internet S/ALocaweb22/05/2026, 13:08:5712/07/2026, 04:37:11 Yes Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-10708, CVE-2016-20012, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-17199, CVE-2018-20685, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541425/05/2026, 23:23:08locaweb.com.br
44.243.84.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon22/05/2026, 13:08:5702/06/2026, 16:45:57 - - ----
54.215.187.•••:18789 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon22/05/2026, 13:08:5730/06/2026, 02:55:16 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161705/06/2026, 13:55:31-
144.91.68.•••:18789 - 🇩🇪 Germany - false Leaked AS51167Contabo GmbHContabo22/05/2026, 13:08:5729/05/2026, 00:05:03 Yes Yes APT14, APT15, APT28, APT29, APT31, APT34, APT37, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13950, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/05/2026, 20:36:06contaboserver.net, contabo.de, contabo.net
62.238.19.•••:18789 - 🇫🇮 Finland Yes true Leaked AS24940Hetzner Online GmbHHetzner Online22/05/2026, 13:08:5713/07/2026, 11:22:26 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541428/05/2026, 19:08:46hetzner.com
209.38.90.•••:18789 - 🇦🇺 Australia - false Clean AS14061DigitalOcean, LLCDigitalOcean22/05/2026, 13:08:5728/05/2026, 21:16:18 No No -CVE-2024-39894, CVE-2024-638725/05/2026, 12:46:10-
34.56.18.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle22/05/2026, 13:08:5713/07/2026, 16:23:39 No - -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/06/2026, 09:07:46-
16.144.36.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon22/05/2026, 13:08:5725/05/2026, 22:40:23 - - ----
164.92.217.•••:18789 - 🇳🇱 Netherlands - true Clean AS14061DigitalOcean, LLCDigitalOcean22/05/2026, 13:06:5413/07/2026, 09:54:10 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541422/05/2026, 13:09:38-
54.252.144.•••:18789 - 🇦🇺 Australia - false Clean AS16509Amazon.com, Inc.Amazon22/05/2026, 13:06:5424/05/2026, 01:31:18 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198522/05/2026, 13:09:40-
101.47.44.•••:18789 - 🇸🇬 Singapore - true Leaked AS150436Byteplus Pte. Ltd.Byteplus22/05/2026, 13:06:5414/07/2026, 03:47:12 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272822/05/2026, 13:09:45bytedance.com
20.97.2.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft22/05/2026, 13:06:5424/05/2026, 01:31:18 - - ----
95.81.102.•••:18789 - 🇳🇱 Netherlands - false Leaked AS216154CLODO CLOUD SERVICE CO. L.L.CJoint Stock Company Internet of Things22/05/2026, 13:06:5424/05/2026, 01:31:18 Yes No -CVE-2023-51766, CVE-2024-39894, CVE-2024-39929, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-30232, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2025-6789622/05/2026, 13:09:48fvds.ru
137.184.171.•••:18789 - 🇨🇦 Canada Yes false Clean AS14061DigitalOcean, LLCDigitalOcean22/05/2026, 12:30:3003/06/2026, 16:14:30 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541422/05/2026, 20:27:05-
39.98.81.•••:50001 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 12:30:2803/06/2026, 05:38:54 Yes No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161722/05/2026, 20:39:57aliyun.com
39.107.105.•••:20260 - 🇽🇽 XX Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Unknown22/05/2026, 12:30:2807/06/2026, 20:55:31 Yes Yes PackratCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272822/05/2026, 20:39:58aliyun.com
136.109.168.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle22/05/2026, 12:30:2822/06/2026, 19:09:10 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541422/05/2026, 20:39:59-
178.238.236.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo22/05/2026, 12:30:2825/05/2026, 14:56:30 Yes No --22/05/2026, 20:40:00contabo.de, contabo.net
192.240.202.•••:20192 - 🇺🇸 United States Yes true Leaked AS20454SECURED SERVERS LLCBMC Reserved IP22/05/2026, 12:30:2811/07/2026, 23:41:08 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541422/05/2026, 20:40:04phoenixnap.com, securedservers.com
66.228.40.•••:18789 - 🇺🇸 United States Yes false Leaked AS63949Akamai Connected CloudLinode22/05/2026, 12:30:2816/06/2026, 02:01:55 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541422/05/2026, 20:40:05akasripcn.net, edgekey-staging.net, akamaitechnologies.com, akamai.ae, edgekey.net, simplicita.com, inscname.net, edgesuite.net, akamaitech.net, cotendo.com, bubblewrapp.com, chameleonx.com, akamai-staging.net, cformanalytics.com, janrainbackplane.com, verivue.com, akamaized-staging.net, nominum.com, akadns.net, akamaized.net, akamai.net, akamaistream.net, d4p.net, akamaihd.net, instart.com, akamai.dk, edgefcs.net, linodeusercontent.com, akamaihd-staging.net, cotssl.net, akafms.net, akami.com, lognormal.net, octoshape.net, akamai-access.com, instartlogic.com, limelightnetworks.com, akamaiapis.net
14.103.24.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology22/05/2026, 12:30:2812/07/2026, 11:51:59 Yes - -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198522/05/2026, 20:40:08bytedance.com
157.255.62.•••:20194 - 🇨🇳 China mainland Yes true Clean AS136958China Unicom Guangdong IP networkChina Unicom Guangdong22/05/2026, 12:30:2813/07/2026, 06:26:04 - - ----
156.247.106.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Octopus Web Solution Inc22/05/2026, 12:30:2713/07/2026, 22:11:25 No No -CVE-2023-44487, CVE-2024-7347, CVE-2025-2341922/05/2026, 20:59:30-
168.76.212.•••:18789 - 🇿🇦 South Africa Yes true Clean AS137951ASLINE LIMITEDFree State Education Department22/05/2026, 12:30:2713/07/2026, 02:52:43 No No -CVE-2014-407822/05/2026, 20:40:12-
106.53.190.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/05/2026, 12:30:2713/07/2026, 05:00:46 - - ----
103.41.6.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS138415Yancy Limited111 Sports West22/05/2026, 12:30:2712/07/2026, 20:28:13 No Yes APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161722/05/2026, 20:40:15-
57.129.4.•••:18789 - 🇩🇪 Germany Yes true Leaked AS16276OVH SASOVH Germany22/05/2026, 12:30:2712/07/2026, 04:41:21 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272822/05/2026, 20:40:16ovh.net
121.40.143.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/05/2026, 12:30:2713/07/2026, 08:34:32 Yes No --22/05/2026, 20:44:14aliyun.com
8.136.7.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud22/05/2026, 12:30:2711/07/2026, 22:58:29 No No --16/05/2026, 20:44:17-