🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 816988 Page: 1645 / 8170 (100 per page) Showing: 164401-164500 Last Imported: 03/05/2026, 10:53:53
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 1645 of 8170
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
2001:df1:7880:1::79:18789 - 🇭🇰 Hong Kong - false Clean AS139659LUCIDACLOUD LIMITEDLucidacloud Limited30/03/2026, 07:44:0216/04/2026, 16:47:55 - - ----
122.191.196.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneUnicom Hubei30/03/2026, 07:44:0230/03/2026, 11:18:12 - - ----
139.159.236.•••:18789 - 🇨🇳 China mainland Yes false Clean AS55990Huawei Cloud Service data centerHuawei Public Cloud30/03/2026, 07:44:0217/04/2026, 06:22:02 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 18:45:32-
115.190.173.•••:30060 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology30/03/2026, 07:44:0215/04/2026, 13:31:55 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 00:04:02gwbn.net.cn
34.139.252.•••:443 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle30/03/2026, 07:44:0217/04/2026, 18:49:30 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 20:20:47-
178.156.189.•••:3008 - 🇺🇸 United States Yes false Leaked AS213230Hetzner Online GmbHHetzner30/03/2026, 07:44:0115/04/2026, 12:46:46 Yes No -CVE-2023-44487, CVE-2024-7347, CVE-2025-2341902/04/2026, 11:56:25hetzner.com
2001:fb1:41:6ac9:211:32ff:fee4:b4af:8443 - 🇭🇰 Hong Kong - false Clean AS17552True OnlineTrue Internet30/03/2026, 07:44:0130/03/2026, 11:18:11 - - ----
47.92.80.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:44:0117/04/2026, 04:06:42 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161707/04/2026, 17:20:43-
39.107.137.•••:18789 - 🇽🇽 XX Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Unknown30/03/2026, 07:44:0115/04/2026, 01:34:18 - - ----
113.66.113.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetCHINANET Guangdong30/03/2026, 07:44:0130/03/2026, 11:18:11 - - ----
101.200.49.•••:443 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:44:0102/04/2026, 13:26:37 - - ----
47.92.108.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:44:0116/04/2026, 21:20:40 No No --30/03/2026, 03:39:27-
115.190.50.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology30/03/2026, 07:44:0102/04/2026, 04:28:21 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 02:15:12-
46.224.162.•••:80 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner30/03/2026, 07:44:0008/04/2026, 13:08:02 - - ----
24.233.1.•••:18789 - 🇺🇸 United States Yes false Clean AS55933Cloudie LimitedCentury Communications30/03/2026, 07:44:0015/04/2026, 13:31:39 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 00:36:22-
47.92.106.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:44:0014/04/2026, 22:34:20 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-29323, CVE-2023-35784, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138502/04/2026, 01:54:24-
63.176.145.•••:443 - 🇩🇪 Germany Yes false Clean AS16509Amazon.com, Inc.A100 ROW30/03/2026, 07:44:0030/03/2026, 21:00:02 - - ----
118.31.49.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:44:0030/03/2026, 11:18:10 - - ----
188.245.123.•••:18789 - 🇩🇪 Germany Yes false Leaked AS24940Hetzner Online GmbHHetzner Online30/03/2026, 07:44:0017/04/2026, 10:06:51 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2019-25161, CVE-2019-3016, CVE-2019-3819, CVE-2019-3887, CVE-2020-27815, CVE-2021-20194, CVE-2021-3564, CVE-2021-3618, CVE-2021-46907, CVE-2021-46914, CVE-2021-47084, CVE-2021-47085, CVE-2021-47188, CVE-2021-47205, CVE-2021-47219, CVE-2021-47229, CVE-2021-47234, CVE-2021-47246, CVE-2021-47248, CVE-2021-47256, CVE-2021-47258, CVE-2021-47294, CVE-2021-47335, CVE-2021-47336, CVE-2021-47340, CVE-2021-47343, CVE-2021-47351, CVE-2021-47352, CVE-2021-47374, CVE-2021-47377, CVE-2021-47383, CVE-2021-47396, CVE-2021-47407, CVE-2021-47410, CVE-2021-47411, CVE-2021-47428, CVE-2021-47429, CVE-2021-47430, CVE-2021-47431, CVE-2021-47434, CVE-2021-47448, CVE-2021-47458, CVE-2021-47460, CVE-2021-47472, CVE-2021-47480, CVE-2021-47488, CVE-2021-47493, CVE-2021-47494, CVE-2021-47495, CVE-2021-47504, CVE-2021-47507, CVE-2021-47508, CVE-2021-47515, CVE-2021-47553, CVE-2021-47561, CVE-2022-2785, CVE-2022-38096, CVE-2022-41741, CVE-2022-41742, CVE-2022-48631, CVE-2022-48633, CVE-2022-48665, CVE-2022-48704, CVE-2022-48705, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-52521, CVE-2023-52575, CVE-2023-52579, CVE-2023-52592, CVE-2023-52605, CVE-2023-52654, CVE-2023-52655, CVE-2023-52659, CVE-2023-52660, CVE-2023-52661, CVE-2023-52665, CVE-2023-52666, CVE-2023-52671, CVE-2023-52676, CVE-2023-52682, CVE-2023-52688, CVE-2023-52701, CVE-2023-52732, CVE-2023-52734, CVE-2023-52736, CVE-2023-52748, CVE-2023-52750, CVE-2023-52756, CVE-2023-52762, CVE-2023-52763, CVE-2023-52764, CVE-2023-52778, CVE-2023-52792, CVE-2023-52796, CVE-2023-52804, CVE-2023-52813, CVE-2023-52816, CVE-2023-52822, CVE-2023-52830, CVE-2023-52831, CVE-2023-52835, CVE-2023-52867, CVE-2023-52874, CVE-2024-26628, CVE-2024-26819, CVE-2024-26821, CVE-2024-26858, CVE-2024-26867, CVE-2024-26869, CVE-2024-26905, CVE-2024-26914, CVE-2024-26916, CVE-2024-26936, CVE-2024-26938, CVE-2024-26948, CVE-2024-27034, CVE-2024-27035, CVE-2024-27039, CVE-2024-27057, CVE-2024-27067, CVE-2024-27415, CVE-2024-27420, CVE-2024-27421, CVE-2024-27423, CVE-2024-27424, CVE-2024-27425, CVE-2024-27426, CVE-2024-27429, CVE-2024-27430, CVE-2024-27434, CVE-2024-35790, CVE-2024-35802, CVE-2024-35804, CVE-2024-35816, CVE-2024-35818, CVE-2024-35826, CVE-2024-35832, CVE-2024-35842, CVE-2024-35860, CVE-2024-35875, CVE-2024-35876, CVE-2024-35890, CVE-2024-35901, CVE-2024-35906, CVE-2024-35908, CVE-2024-35923, CVE-2024-35926, CVE-2024-35928, CVE-2024-35931, CVE-2024-35938, CVE-2024-35939, CVE-2024-35941, CVE-2024-35942, CVE-2024-35959, CVE-2024-36014, CVE-2024-36022, CVE-2024-36024, CVE-2024-36026, CVE-2024-36885, CVE-2024-36887, CVE-2024-36890, CVE-2024-36895, CVE-2024-36909, CVE-2024-36911, CVE-2024-36918, CVE-2024-36920, CVE-2024-36921, CVE-2024-36922, CVE-2024-36948, CVE-2024-36949, CVE-2024-36952, CVE-2024-36961, CVE-2024-36966, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 17:57:21hetzner.com
38.14.196.•••:18443 - 🇺🇸 United States Yes false Clean AS54600PEG TECH INCPEG Technology30/03/2026, 07:44:0015/04/2026, 12:01:35 No - -CVE-2025-61984, CVE-2025-6198502/04/2026, 16:30:21-
47.92.228.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:44:0017/04/2026, 23:58:05 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138502/04/2026, 12:41:34-
47.238.136.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK30/03/2026, 07:44:0016/04/2026, 01:22:44 No - -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 07:28:32-
2a02:c207:2315:7884::1:20102 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo30/03/2026, 07:44:0005/04/2026, 23:16:27 - - ----
116.62.81.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:44:0009/04/2026, 14:38:02 Yes No --02/04/2026, 16:28:25aliyun.com
36.137.120.•••:18789 - 🇨🇳 China mainland Yes false Clean AS9808China Mobile Communications Group Co., Ltd.China Mobile30/03/2026, 07:44:0030/03/2026, 10:33:03 - - ----
18.118.137.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon30/03/2026, 07:44:0017/04/2026, 23:58:22 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341905/04/2026, 14:20:12-
47.92.31.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5917/04/2026, 07:07:09 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-31008, CVE-2023-38408, CVE-2023-46118, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138502/04/2026, 18:42:25-
2a02:4780:4:fb6::1:18789 - 🇺🇸 United States - false Clean AS47583Hostinger International LimitedHostinger30/03/2026, 07:43:5917/04/2026, 06:22:00 - - ----
35.224.39.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle30/03/2026, 07:43:5913/04/2026, 23:17:50 No - -CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 09:43:43-
120.46.68.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud30/03/2026, 07:43:5917/04/2026, 10:05:32 Yes Yes APT-C-23, APT40, APT41, Donot Team, Lazarus Group, MuddyWater Group, TA428, Volt TyphoonCVE-2013-6501, CVE-2014-5459, CVE-2014-9426, CVE-2015-4601, CVE-2015-8874, CVE-2015-8877, CVE-2015-8994, CVE-2015-9253, CVE-2016-10158, CVE-2016-10159, CVE-2016-10161, CVE-2016-10397, CVE-2016-20012, CVE-2016-7124, CVE-2016-7125, CVE-2016-7126, CVE-2016-7127, CVE-2016-7128, CVE-2016-7129, CVE-2016-7130, CVE-2016-7131, CVE-2016-7132, CVE-2016-7411, CVE-2016-7412, CVE-2016-7413, CVE-2016-7414, CVE-2016-7416, CVE-2016-7417, CVE-2016-7418, CVE-2016-9137, CVE-2016-9138, CVE-2016-9934, CVE-2016-9935, CVE-2017-11142, CVE-2017-11143, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11628, CVE-2017-12933, CVE-2017-15906, CVE-2017-16642, CVE-2017-7272, CVE-2017-7890, CVE-2017-7963, CVE-2017-8923, CVE-2017-9120, CVE-2017-9224, CVE-2017-9225, CVE-2017-9226, CVE-2017-9229, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-15132, CVE-2018-15473, CVE-2018-15919, CVE-2018-17082, CVE-2018-19395, CVE-2018-19396, CVE-2018-19520, CVE-2018-20685, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9022, CVE-2019-9023, CVE-2019-9024, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2019-9675, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-31628, CVE-2022-31629, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-4577, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 04:56:11smartcom.cc, huawei.com, huaweidevice.com
123.57.77.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5907/04/2026, 20:34:39 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2025-1220, CVE-2025-14177, CVE-2025-14178, CVE-2025-14180, CVE-2025-1735, CVE-2025-649102/04/2026, 01:46:08aliyun.com
8.211.158.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore30/03/2026, 07:43:5909/04/2026, 10:53:22 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 00:47:37-
47.92.153.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5916/04/2026, 23:35:57 No No --27/03/2026, 08:57:02-
106.53.121.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 07:43:5917/04/2026, 20:59:08 Yes Yes APT37, El-Machete-14/04/2026, 04:35:48tencent.com
47.100.185.•••:443 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5930/03/2026, 11:18:07 - - ----
74.208.13.•••:443 - 🇺🇸 United States Yes false Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.1&1 Ionos30/03/2026, 07:43:5917/04/2026, 23:57:40 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 12:42:26queencityplumbingcharlotte.com, hardwoodfloorscharlotte.com, ionos.com
116.30.197.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetCHINANET Guangdong30/03/2026, 07:43:5730/03/2026, 11:18:07 - - ----
38.207.177.•••:3000 - 🇭🇰 Hong Kong Yes false Clean AS139659LUCIDACLOUD LIMITEDLucidacloud Limited30/03/2026, 07:43:5702/04/2026, 17:12:44 - - ----
146.190.116.•••:443 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 07:43:5730/03/2026, 20:59:59 - - ----
104.131.182.•••:443 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 07:43:5706/04/2026, 05:15:16 No Yes APT17, APT29, APT35, APT36, APT37, APT40, APT41, APT45, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, Patchwork, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 16:29:23-
60.205.218.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5716/04/2026, 14:31:24 Yes No --05/04/2026, 17:19:07aliyun.com
101.34.71.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 07:43:5715/04/2026, 01:34:07 Yes Yes APT37, El-Machete-08/04/2026, 20:22:41tencent.com
44.250.33.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon30/03/2026, 07:43:5717/04/2026, 23:58:08 - - ----
83.7.135.•••:18789 - 🇵🇱 Poland Yes false Clean AS5617Orange Polska Spolka AkcyjnaOrange Swiatlowod30/03/2026, 07:43:5706/04/2026, 15:48:20 No No --31/03/2026, 15:06:24-
178.128.122.•••:443 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 07:43:5730/03/2026, 11:18:06 - - ----
34.69.163.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle30/03/2026, 07:43:5617/04/2026, 10:05:53 No Yes DragonFly, Packrat-05/04/2026, 14:19:30-
39.98.56.•••:50001 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5617/04/2026, 05:37:00 Yes Yes APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-34305, CVE-2022-42252, CVE-2023-28708, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138511/04/2026, 00:07:47aliyun.com
136.244.112.•••:18789 - 🇫🇷 France Yes false Leaked AS20473The Constant Company, LLCVultr Holdings30/03/2026, 07:43:5614/04/2026, 23:19:53 Yes Yes DragonFlyCVE-2011-2262, CVE-2012-0553, CVE-2012-0572, CVE-2012-0574, CVE-2012-1702, CVE-2012-1705, CVE-2012-3150, CVE-2012-3158, CVE-2012-3163, CVE-2012-3173, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0389, CVE-2013-1492, CVE-2013-1506, CVE-2013-1521, CVE-2013-1552, CVE-2013-1555, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3802, CVE-2013-3804, CVE-2013-3808, CVE-2013-5908, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0437, CVE-2014-407802/04/2026, 16:31:52vultr.com
167.172.181.•••:443 - 🇩🇪 Germany Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 07:43:5630/03/2026, 11:18:06 - - ----
178.104.106.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner30/03/2026, 07:43:5617/04/2026, 23:58:52 - - ----
13.55.11.•••:18789 - 🇦🇺 Australia Yes false Clean AS16509Amazon.com, Inc.Amazon Corporate Services30/03/2026, 07:43:5617/04/2026, 23:57:36 No No --03/04/2026, 00:22:27-
140.245.101.•••:18789 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationOracle30/03/2026, 07:43:5630/03/2026, 11:18:06 - - ----
3.10.221.•••:443 - 🇬🇧 United Kingdom Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services30/03/2026, 07:43:5617/04/2026, 23:57:57 No Yes APT15, APT28, APT31, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APTCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 20:20:08-
47.88.56.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud US30/03/2026, 07:43:5530/03/2026, 11:18:05 - - ----
47.108.27.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5517/04/2026, 08:37:18 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161711/04/2026, 06:29:36-
35.93.10.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon30/03/2026, 07:43:5517/04/2026, 06:22:00 - - ----
3.0.56.•••:443 - 🇸🇬 Singapore Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services30/03/2026, 07:43:5530/03/2026, 11:18:05 - - ----
60.205.2.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5502/04/2026, 07:27:46 Yes No --02/04/2026, 07:31:17aliyun.com
191.252.210.•••:443 - 🇧🇷 Brazil Yes false Leaked AS27715Locaweb Serviços de Internet S/ALocaweb30/03/2026, 07:43:5517/04/2026, 10:07:16 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2005-0004, CVE-2012-0540, CVE-2012-0572, CVE-2012-0574, CVE-2012-0578, CVE-2012-1688, CVE-2012-1689, CVE-2012-1690, CVE-2012-1697, CVE-2012-1702, CVE-2012-1703, CVE-2012-1705, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757, CVE-2012-2750, CVE-2012-3150, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163, CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2012-5096, CVE-2012-5612, CVE-2012-5614, CVE-2012-5627, CVE-2013-0367, CVE-2013-0368, CVE-2013-0371, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0386, CVE-2013-0389, CVE-2013-1502, CVE-2013-1506, CVE-2013-1511, CVE-2013-1512, CVE-2013-1521, CVE-2013-1523, CVE-2013-1526, CVE-2013-1531, CVE-2013-1532, CVE-2013-1544, CVE-2013-1548, CVE-2013-1552, CVE-2013-1555, CVE-2013-1861, CVE-2013-2375, CVE-2013-2376, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3783, CVE-2013-3793, CVE-2013-3794, CVE-2013-3801, CVE-2013-3802, CVE-2013-3804, CVE-2013-3805, CVE-2013-3808, CVE-2013-3809, CVE-2013-3812, CVE-2013-3839, CVE-2013-5807, CVE-2013-5891, CVE-2013-5908, CVE-2014-0001, CVE-2014-0384, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0420, CVE-2014-0437, CVE-2014-2419, CVE-2014-2430, CVE-2014-2431, CVE-2014-2432, CVE-2014-2436, CVE-2014-2438, CVE-2014-2440, CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484, CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496, CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559, CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2325, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-3152, CVE-2015-4752, CVE-2015-4757, CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2015-7744, CVE-2016-0502, CVE-2016-0610, CVE-2016-0616, CVE-2016-0642, CVE-2016-0651, CVE-2016-3471, CVE-2016-3492, CVE-2016-5584, CVE-2016-5612, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-6664, CVE-2016-7440, CVE-2016-9843, CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-15365, CVE-2017-15945, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3302, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3600, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819, CVE-2018-3058, CVE-2018-3063, CVE-2018-3066, CVE-2018-3081, CVE-2018-3133, CVE-2018-3174, CVE-2018-3282, CVE-2019-2455, CVE-2019-2481, CVE-2019-2503, CVE-2019-2529, CVE-2019-2614, CVE-2019-2627, CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805, CVE-2019-2974, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-14550, CVE-2020-2574, CVE-2020-2752, CVE-2020-2780, CVE-2020-2812, CVE-2020-28912, CVE-2020-2922, CVE-2021-2007, CVE-2021-2011, CVE-2021-2144, CVE-2021-41617, CVE-2021-46659, CVE-2021-46666, CVE-2021-46667, CVE-2021-46669, CVE-2022-27385, CVE-2022-27449, CVE-2022-31621, CVE-2022-31622, CVE-2022-31623, CVE-2022-31624, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5157, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 13:37:34locaweb.com.br
162.216.18.•••:18789 - 🇺🇸 United States - false Clean AS63949Akamai Connected CloudLinode30/03/2026, 07:43:5501/04/2026, 19:28:17 - - ----
50.62.180.•••:443 - 🇺🇸 United States Yes false Leaked AS26496GoDaddy.com, LLCGoDaddy30/03/2026, 07:43:5517/04/2026, 23:58:34 Yes Yes APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, FIN8, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-2731602/04/2026, 22:32:40secureserver.net, godaddy.com
27.65.111.•••:443 - 🇻🇳 Vietnam Yes false Clean AS7552Viettel GroupViettel30/03/2026, 07:43:5517/04/2026, 23:58:54 No No --12/04/2026, 00:00:25-
39.98.54.•••:50001 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5516/04/2026, 18:18:36 Yes No --05/04/2026, 04:10:21aliyun.com
81.69.219.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 07:43:5515/04/2026, 12:01:38 No Yes APT37, El-Machete-02/04/2026, 19:31:36-
101.96.193.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology30/03/2026, 07:43:5406/04/2026, 03:46:00 - - ----
3.239.80.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon Web Services30/03/2026, 07:43:5430/03/2026, 11:18:04 - - ----
136.112.166.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle30/03/2026, 07:43:5416/04/2026, 16:02:32 - - ----
204.168.197.•••:18789 - 🇫🇮 Finland Yes false Clean AS24940Hetzner Online GmbHHetzner30/03/2026, 07:43:5417/04/2026, 20:13:43 No - --05/04/2026, 10:11:04-
2407:3640:2315:6795::1:18789 - 🇸🇬 Singapore - false Clean AS141995Contabo Asia Private LimitedContabo Asia30/03/2026, 07:43:5417/04/2026, 23:58:49 - - ----
123.207.14.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 07:43:5417/04/2026, 10:06:34 - - ----
165.232.176.•••:18789 - 🇮🇳 India Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 07:43:5417/04/2026, 04:06:48 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, WIRTECVE-2006-20001, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-20012, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2020-11985, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-2569008/04/2026, 06:23:00-
178.104.33.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner30/03/2026, 07:43:5411/04/2026, 10:54:05 - - ----
47.79.32.•••:18789 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud30/03/2026, 07:43:5414/04/2026, 06:04:57 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Salt Typhoon, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10002, CVE-2016-10003, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-2390, CVE-2016-3115, CVE-2016-3947, CVE-2016-3948, CVE-2016-4051, CVE-2016-4052, CVE-2016-4053, CVE-2016-4054, CVE-2016-4553, CVE-2016-4554, CVE-2016-4555, CVE-2016-4556, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-1000024, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-12519, CVE-2019-12521, CVE-2019-12523, CVE-2019-12525, CVE-2019-12526, CVE-2019-12529, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11945, CVE-2020-14058, CVE-2020-14145, CVE-2020-15049, CVE-2020-24606, CVE-2020-25097, CVE-2021-28651, CVE-2021-28652, CVE-2021-31807, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 00:04:19hichina.com, alibaba-inc.com
39.101.129.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 07:43:5430/03/2026, 11:18:03 - - ----
173.249.10.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo30/03/2026, 07:43:5317/04/2026, 07:52:19 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2005-0004, CVE-2012-0540, CVE-2012-0572, CVE-2012-0574, CVE-2012-0578, CVE-2012-1688, CVE-2012-1689, CVE-2012-1690, CVE-2012-1697, CVE-2012-1702, CVE-2012-1703, CVE-2012-1705, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757, CVE-2012-2750, CVE-2012-3150, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163, CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2012-5096, CVE-2012-5612, CVE-2012-5614, CVE-2012-5627, CVE-2013-0367, CVE-2013-0368, CVE-2013-0371, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0386, CVE-2013-0389, CVE-2013-1502, CVE-2013-1506, CVE-2013-1511, CVE-2013-1512, CVE-2013-1521, CVE-2013-1523, CVE-2013-1526, CVE-2013-1531, CVE-2013-1532, CVE-2013-1544, CVE-2013-1548, CVE-2013-1552, CVE-2013-1555, CVE-2013-1861, CVE-2013-2375, CVE-2013-2376, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3783, CVE-2013-3793, CVE-2013-3794, CVE-2013-3801, CVE-2013-3802, CVE-2013-3804, CVE-2013-3805, CVE-2013-3808, CVE-2013-3809, CVE-2013-3812, CVE-2013-3839, CVE-2013-5807, CVE-2013-5891, CVE-2013-5908, CVE-2014-0001, CVE-2014-0384, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0420, CVE-2014-0437, CVE-2014-2419, CVE-2014-2430, CVE-2014-2431, CVE-2014-2432, CVE-2014-2436, CVE-2014-2438, CVE-2014-2440, CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484, CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496, CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559, CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2325, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-3152, CVE-2015-4752, CVE-2015-4757, CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2015-7744, CVE-2016-0502, CVE-2016-0610, CVE-2016-0616, CVE-2016-0642, CVE-2016-0651, CVE-2016-3471, CVE-2016-3492, CVE-2016-5584, CVE-2016-5612, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-6664, CVE-2016-7440, CVE-2016-9843, CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-15365, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3302, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3600, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819, CVE-2018-3058, CVE-2018-3063, CVE-2018-3066, CVE-2018-3081, CVE-2018-3133, CVE-2018-3174, CVE-2018-3282, CVE-2019-2455, CVE-2019-2481, CVE-2019-2503, CVE-2019-2529, CVE-2019-2614, CVE-2019-2627, CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805, CVE-2019-2974, CVE-2020-14550, CVE-2020-2574, CVE-2020-2752, CVE-2020-2780, CVE-2020-2812, CVE-2020-28912, CVE-2020-2922, CVE-2021-2007, CVE-2021-2011, CVE-2021-2144, CVE-2021-23017, CVE-2021-3618, CVE-2021-46659, CVE-2021-46666, CVE-2021-46667, CVE-2021-46669, CVE-2022-27385, CVE-2022-27449, CVE-2022-31621, CVE-2022-31622, CVE-2022-31623, CVE-2022-31624, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5157, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272804/04/2026, 19:16:48contaboserver.net, contabo.de, contabo.net
18.188.49.•••:18789 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon30/03/2026, 07:43:5307/04/2026, 02:04:26 No No --31/03/2026, 23:55:01-
165.245.167.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 07:43:5312/04/2026, 17:56:20 - - ----
38.76.213.•••:18789 - 🇺🇸 United States Yes false Leaked AS401701cognetcloud INCFOJ IP Technology30/03/2026, 07:43:5317/04/2026, 23:14:26 Yes - --02/04/2026, 01:45:47cogentco.com
18.143.145.•••:443 - 🇸🇬 Singapore Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services30/03/2026, 07:43:5302/04/2026, 11:56:42 No No --27/03/2026, 09:43:25-
43.228.79.•••:18789 - 🇨🇳 China mainland Yes false Clean AS134765CHINANET Yunnan province IDC1 networkYunnan Landui Network Technology30/03/2026, 07:43:5307/04/2026, 02:04:23 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161706/04/2026, 23:15:41-
8.146.237.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud30/03/2026, 07:43:5305/04/2026, 12:49:05 - - ----
150.158.139.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 07:43:5215/04/2026, 01:35:47 - - ----
175.41.170.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon EC2 Security Group30/03/2026, 07:43:5230/03/2026, 11:18:02 - - ----
18.209.112.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon30/03/2026, 07:43:5211/04/2026, 10:55:24 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272802/04/2026, 01:48:43-
182.84.82.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Jiangxi30/03/2026, 07:43:5230/03/2026, 11:18:02 - - ----
116.21.124.•••:8001 - 🇨🇳 China mainland - false Clean AS4134ChinanetCHINANET Guangdong30/03/2026, 07:43:5230/03/2026, 11:18:02 - - ----
213.35.113.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle Sweden30/03/2026, 07:43:5108/04/2026, 22:08:09 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 10:38:04healtheintent.com, purewellness.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com
62.171.180.•••:18789 - 🇫🇷 France Yes false Leaked AS51167Contabo GmbHContabo30/03/2026, 07:43:5102/04/2026, 22:31:20 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272802/04/2026, 17:59:41contabo.de, contabo.net
60.24.98.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom Tianjin30/03/2026, 07:43:5102/04/2026, 18:42:37 Yes Yes Packrat-02/04/2026, 12:40:15chinaunicom.cn
1.12.248.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 07:43:5130/03/2026, 11:18:01 - - ----
125.76.110.•••:30058 Assistant 🇨🇳 China mainland Yes false Leaked AS147038China TelecomCHINANET Gansu30/03/2026, 07:43:5117/04/2026, 07:07:05 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24990, CVE-2024-39894, CVE-2024-638710/04/2026, 17:46:45bj189.cn, 118114.cn, ctwing.cn, pimax.com, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
142.198.68.•••:20000 - 🇨🇦 Canada Yes false Clean AS577Bell CanadaHealth and Safety Executive30/03/2026, 07:43:5106/04/2026, 05:15:26 - - ----
124.71.219.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud30/03/2026, 07:43:5116/04/2026, 22:05:57 Yes Yes APT-C-23, APT1 Comment Crew, APT15, APT27, APT28, APT29, APT31, APT32, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Careto APT, Cobalt Group, DarkHotel Group, Donot Team, Earth Longzhi, Emennet Pasargad, Emennet Pasargard, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon, WildCard APTCVE-2015-9251, CVE-2016-0742, CVE-2016-0746, CVE-2016-0747, CVE-2016-10708, CVE-2016-1247, CVE-2016-20012, CVE-2016-4450, CVE-2017-15906, CVE-2017-20005, CVE-2017-7529, CVE-2018-15473, CVE-2018-15919, CVE-2018-16845, CVE-2018-20685, CVE-2019-0221, CVE-2019-0232, CVE-2019-10072, CVE-2019-11358, CVE-2019-12418, CVE-2019-17563, CVE-2019-20372, CVE-2019-2684, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11022, CVE-2020-11023, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13943, CVE-2020-14145, CVE-2020-15778, CVE-2020-17527, CVE-2020-1935, CVE-2020-1938, CVE-2020-23064, CVE-2020-8022, CVE-2020-9484, CVE-2021-23017, CVE-2021-24122, CVE-2021-25122, CVE-2021-25329, CVE-2021-30640, CVE-2021-33037, CVE-2021-3618, CVE-2021-36368, CVE-2021-41079, CVE-2021-41617, CVE-2021-43980, CVE-2022-25762, CVE-2022-29885, CVE-2022-41741, CVE-2022-41742, CVE-2022-42252, CVE-2023-28708, CVE-2023-38408, CVE-2023-41080, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648, CVE-2023-46589, CVE-2023-48795, CVE-2023-51385, CVE-2024-21733, CVE-2024-23672, CVE-2024-24549, CVE-2024-3475005/04/2026, 08:25:03smartcom.cc, huawei.com, huaweidevice.com
118.195.137.•••:18888 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedSeeHuNET30/03/2026, 07:43:5108/04/2026, 22:07:57 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198508/04/2026, 20:53:56tencent.com
149.28.186.•••:443 - 🇦🇺 Australia Yes false Leaked AS20473The Constant Company, LLCVultr Holdings30/03/2026, 07:43:5108/04/2026, 00:20:29 Yes Yes DragonFlyCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-638704/04/2026, 19:12:24vultr.com
18.215.225.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon30/03/2026, 07:43:5116/04/2026, 19:50:08 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 05:15:08-
1.175.132.•••:18789 - 🇹🇼 Taiwan Yes false Clean AS3462Data Communication Business GroupChunghwa Telecom30/03/2026, 07:43:5130/03/2026, 11:18:01 - - ----
138.197.45.•••:443 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 07:43:5002/04/2026, 19:27:34 No Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 19:32:06-
2a02:4780:5e:b927::1:18789 - 🇲🇾 Malaysia - false Clean AS47583Hostinger International LimitedHostinger30/03/2026, 07:43:5016/04/2026, 01:23:03 - - ----
173.249.21.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo30/03/2026, 07:43:5008/04/2026, 13:07:30 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 20:59:35contabo.de, contabo.net