🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 1006105 Page: 1671 / 10062 (100 per page) Showing: 167001-167100 Last Imported: 14/07/2026, 07:44:58
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 1671 of 10062
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
136.115.142.•••:80 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle21/05/2026, 07:33:3121/05/2026, 16:05:22 No No --15/05/2026, 15:39:39-
219.73.52.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS4760HKT LimitedNetvigator21/05/2026, 07:33:3111/07/2026, 04:24:44 No No --15/05/2026, 15:39:40-
39.98.78.•••:50001 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft21/05/2026, 07:33:3103/06/2026, 04:56:54 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2015-5345, CVE-2015-5346, CVE-2015-5351, CVE-2016-0706, CVE-2016-0714, CVE-2016-0762, CVE-2016-0763, CVE-2016-20012, CVE-2016-3092, CVE-2016-5018, CVE-2016-5388, CVE-2016-6794, CVE-2016-6796, CVE-2016-6797, CVE-2016-6816, CVE-2016-8735, CVE-2016-8745, CVE-2017-12617, CVE-2017-15906, CVE-2017-5647, CVE-2017-5648, CVE-2017-5664, CVE-2017-7674, CVE-2018-1304, CVE-2018-1305, CVE-2018-1336, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2018-8014, CVE-2018-8034, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-3823, CVE-2023-3824, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-11233, CVE-2024-11234, CVE-2024-11236, CVE-2024-1874, CVE-2024-2408, CVE-2024-2756, CVE-2024-3096, CVE-2024-4577, CVE-2024-5458, CVE-2024-5585, CVE-2024-8925, CVE-2024-8926, CVE-2024-8927, CVE-2024-8929, CVE-2024-8932, CVE-2024-9026, CVE-2025-1217, CVE-2025-1219, CVE-2025-1220, CVE-2025-1734, CVE-2025-1735, CVE-2025-1736, CVE-2025-1861, CVE-2025-649121/05/2026, 15:39:41aliyun.com
162.222.203.•••:18789 - 🇺🇸 United States Yes true Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.1&1 Hosting21/05/2026, 07:33:3112/07/2026, 15:28:41 Yes Yes APT14, APT28, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:39:42ionos.com
154.210.55.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation21/05/2026, 07:33:3112/07/2026, 14:01:38 No No --15/05/2026, 15:39:43-
216.194.172.•••:10324 - 🇺🇸 United States Yes true Leaked AS22611InMotion Hosting, Inc.InMotion Hosting21/05/2026, 07:33:3114/07/2026, 03:53:42 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:39:46inmotionhosting.com
178.105.74.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner21/05/2026, 07:33:3104/07/2026, 05:04:13 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541403/07/2026, 19:47:01-
103.41.6.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS138415Yancy Limited111 Sports West21/05/2026, 07:33:3113/07/2026, 10:00:16 No Yes APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161721/05/2026, 15:39:48-
2409:8a15:2480:8e30:2d0:b4ff:fe01:9115:18789 - 🇨🇳 China mainland - false Clean AS56044China Mobile communications corporationChina Mobile21/05/2026, 07:33:3109/06/2026, 04:40:03 - - ----
154.210.51.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation21/05/2026, 07:33:3114/07/2026, 03:52:38 No - --15/05/2026, 15:39:50-
180.93.137.•••:18789 - 🇻🇳 Vietnam Yes true Leaked AS135951Webico Company LimitedSaigon Postel21/05/2026, 07:33:3014/07/2026, 03:53:43 Yes No -CVE-2023-44487, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:39:51spt.vn
103.39.16.•••:18789 - 🇺🇸 United States Yes true Clean AS138415Yancy LimitedRedLuff21/05/2026, 07:33:3012/07/2026, 02:32:17 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161721/05/2026, 15:39:53-
46.101.51.•••:18789 - 🇬🇧 United Kingdom Yes true Clean AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:33:3013/07/2026, 06:25:59 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:39:54cooneengroup.com
47.236.67.•••:9090 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud21/05/2026, 07:33:3028/06/2026, 20:16:59 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:39:56hichina.com, alibaba-inc.com
2a02:c207:2324:5801::1:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo21/05/2026, 07:33:3019/06/2026, 02:41:26 - - ----
143.110.186.•••:443 - 🇮🇳 India Yes true Leaked AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:33:3013/07/2026, 03:35:25 Yes Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2016-20012, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 15:39:59cprapid.com
139.226.28.•••:18789 - 🇨🇳 China mainland Yes true Clean AS17621China Unicom Shanghai networkChina Unicom Shanghai21/05/2026, 07:33:3013/07/2026, 11:26:38 Yes No -CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734721/05/2026, 15:44:06pp.ua
34.78.114.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle21/05/2026, 07:33:3021/05/2026, 16:05:21 No No -CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 15:44:10-
111.45.23.•••:20178 - 🇨🇳 China mainland Yes true Leaked AS9808China Mobile Communications Group Co., Ltd.China Mobile21/05/2026, 07:33:3012/07/2026, 15:28:36 Yes Yes Packrat-21/05/2026, 15:44:13chinamobile.com, chinamobile.cn
43.134.84.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay21/05/2026, 07:33:3029/06/2026, 11:12:50 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 15:44:16tencent.com
124.221.71.•••:9119 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud21/05/2026, 07:33:3009/07/2026, 23:56:55 Yes Yes APT37, El-Machete-21/05/2026, 15:44:17tencent.com
38.6.46.•••:443 - 🇨🇦 Canada Yes false Clean AS398993PEG TECH INCPolyethylene Glycol-Lipid Association21/05/2026, 07:33:3029/05/2026, 19:19:09 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161721/05/2026, 15:44:18-
54.251.18.•••:443 - 🇸🇬 Singapore Yes true Clean AS16509Amazon.com, Inc.Amazon21/05/2026, 07:33:3013/07/2026, 03:35:30 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 15:44:19-
34.186.173.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle21/05/2026, 07:33:3022/06/2026, 21:16:57 No No --15/05/2026, 15:44:20-
5.75.160.•••:18789 - 🇩🇪 Germany Yes true Leaked AS24940Hetzner Online GmbHHetzner Online21/05/2026, 07:33:3012/07/2026, 11:09:18 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:44:21healtheintent.com, purewellness.com, timmwunderlich.de, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, healtheatcerner.com, chickenkiller.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, dynalias.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, hetzner.com
47.92.89.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft21/05/2026, 07:33:3003/06/2026, 00:43:16 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 15:48:30-
2001:41d0:305:2100::b29c:18789 - 🇫🇷 France - false Clean AS16276OVH SASOVH21/05/2026, 07:33:3031/05/2026, 00:08:14 - - ----
3.110.252.•••:18789 - 🇮🇳 India Yes true Clean AS16509Amazon.com, Inc.Amazon Web Services21/05/2026, 07:33:3011/07/2026, 15:07:18 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 15:48:37-
154.210.49.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation21/05/2026, 07:33:3012/07/2026, 14:45:25 No - --15/05/2026, 15:48:38-
156.252.37.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation21/05/2026, 07:33:3029/06/2026, 07:39:40 No No --15/05/2026, 15:48:39-
2a02:4780:4:155c::1:8004 - 🇺🇸 United States - false Clean AS47583Hostinger International LimitedHostinger21/05/2026, 07:33:3014/07/2026, 01:02:12 - - ----
163.47.135.•••:18789 - 🇦🇺 Australia Yes true Clean AS35916MULTACOM CORPORATION5G Network Operations21/05/2026, 07:33:2912/07/2026, 09:43:35 Yes No --05/06/2026, 21:06:05intergrid.au, 5gnetworks.au, 5gn.com.au, 5gnetworks.com.au, hostworks.com.au
121.43.138.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft21/05/2026, 07:33:2920/06/2026, 14:39:32 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-3272821/05/2026, 15:53:04aliyun.com
86.48.5.•••:18789 - 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo21/05/2026, 07:33:2913/07/2026, 15:02:01 Yes Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2014-0128, CVE-2014-3609, CVE-2014-6270, CVE-2014-7141, CVE-2014-7142, CVE-2015-3455, CVE-2015-5400, CVE-2016-10002, CVE-2016-20012, CVE-2016-2390, CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-3947, CVE-2016-3948, CVE-2016-4051, CVE-2016-4052, CVE-2016-4053, CVE-2016-4054, CVE-2016-4553, CVE-2016-4554, CVE-2016-4555, CVE-2016-4556, CVE-2018-1000024, CVE-2018-1000027, CVE-2018-19131, CVE-2018-19132, CVE-2019-12519, CVE-2019-12520, CVE-2019-12521, CVE-2019-12522, CVE-2019-12523, CVE-2019-12524, CVE-2019-12526, CVE-2019-12528, CVE-2019-12529, CVE-2019-13345, CVE-2019-17567, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-18860, CVE-2020-11945, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13938, CVE-2020-13950, CVE-2020-14058, CVE-2020-14145, CVE-2020-15049, CVE-2020-15778, CVE-2020-15810, CVE-2020-15811, CVE-2020-1927, CVE-2020-1934, CVE-2020-24606, CVE-2020-25097, CVE-2020-35452, CVE-2020-8449, CVE-2020-8450, CVE-2020-8517, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-30641, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33193, CVE-2021-33620, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2021-46784, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41318, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-43622, CVE-2023-45802, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-24795, CVE-2024-25617, CVE-2024-27316, CVE-2024-33427, CVE-2024-36387, CVE-2024-37894, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:53:05contaboserver.net, contabo.de, contabo.net
192.81.210.•••:443 - 🇺🇸 United States Yes true Clean AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:33:2912/07/2026, 18:20:02 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-29323, CVE-2023-35784, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-6387, CVE-2024-734721/05/2026, 15:53:06-
193.124.15.•••:80 - 🇳🇱 Netherlands Yes false Leaked AS48207GLB Bulut Teknolojisi Limited SirketiABN AMRO Global Markets21/05/2026, 07:33:2905/07/2026, 03:54:16 Yes No -CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:53:08yandex.com
186.240.25.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS132839POWER LINE DATACENTERHK Powerline21/05/2026, 07:33:2930/05/2026, 03:45:39 No No --15/05/2026, 15:53:11-
103.39.18.•••:18789 - 🇺🇸 United States Yes true Clean AS138415Yancy LimitedRedLuff21/05/2026, 07:33:2913/07/2026, 18:37:14 No Yes APT28, APT40, Energetic Bear, Equation Group, Leafminer, Luckycat APTCVE-2010-1899, CVE-2010-2730, CVE-2010-397221/05/2026, 15:53:12-
47.239.29.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK21/05/2026, 07:33:2924/05/2026, 10:01:26 No No --15/05/2026, 15:59:22-
118.253.182.•••:443 - 🇨🇳 China mainland Yes true Leaked AS63835No.293,Wanbao AvenueChinaNet Hunan21/05/2026, 07:33:2913/07/2026, 17:53:59 Yes Yes APT15, APT28, APT31, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 15:59:23bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
217.154.172.•••:18789 - 🇩🇪 Germany Yes false Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.Ionos Cloud TXL21/05/2026, 07:33:2921/05/2026, 16:05:20 Yes No --21/05/2026, 15:59:24ionos.com
38.6.0.•••:18789 - 🇯🇵 Japan Yes false Clean AS398993PEG TECH INCPolyethylene Glycol-Lipid Association21/05/2026, 07:33:2921/05/2026, 16:05:20 No No --15/05/2026, 15:59:28-
43.156.181.•••:8100 - 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd21/05/2026, 07:33:2913/07/2026, 20:03:03 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2019-6470, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-8616, CVE-2020-8617, CVE-2020-8618, CVE-2020-8619, CVE-2020-8620, CVE-2020-8621, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-38178, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 16:01:56tencent.com
38.6.9.•••:443 - 🇯🇵 Japan Yes false Clean AS398993PEG TECH INCPolyethylene Glycol-Lipid Association21/05/2026, 07:33:2931/05/2026, 02:56:16 No Yes APT28, APT29, APT35, APT37, APT39, APT41, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2014-0160, CVE-2014-0224, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-10003, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-0777, CVE-2016-0778, CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161721/05/2026, 16:01:57-
178.62.245.•••:18789 - 🇳🇱 Netherlands Yes true Clean AS14061DigitalOcean, LLCDigitalOcean Amsterdam21/05/2026, 07:33:2912/07/2026, 06:06:57 No No -CVE-2013-4508, CVE-2013-4559, CVE-2013-4560, CVE-2014-2323, CVE-2014-2324, CVE-2015-3200, CVE-2016-20012, CVE-2018-19052, CVE-2019-11072, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 16:02:01-
52.50.85.•••:443 - 🇮🇪 Ireland Yes false Clean AS16509Amazon.com, Inc.Amazon Data Services Ireland21/05/2026, 07:33:2921/05/2026, 16:05:20 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138521/05/2026, 16:02:02-
123.245.88.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4134ChinanetJunQu221/05/2026, 07:33:2921/05/2026, 16:05:20 Yes No --21/05/2026, 16:02:03bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
186.240.24.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS132839POWER LINE DATACENTERHK Powerline21/05/2026, 07:33:2929/05/2026, 10:02:05 No No --15/05/2026, 16:08:45-
8.159.130.•••:443 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud21/05/2026, 07:33:2912/07/2026, 03:58:18 No No --15/05/2026, 16:08:49-
154.218.189.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS137951ASLINE LIMITEDArosscloud21/05/2026, 07:31:5008/06/2026, 04:36:19 No Yes Packrat-01/06/2026, 17:30:19-
168.76.210.•••:18789 - 🇿🇦 South Africa Yes true Clean AS137951ASLINE LIMITEDFree State Education Department21/05/2026, 07:31:5013/07/2026, 12:50:00 No No -CVE-2014-407824/05/2026, 00:54:50-
154.203.107.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation21/05/2026, 07:31:5013/07/2026, 17:08:15 No - --27/05/2026, 11:40:15-
172.235.191.•••:18789 - 🇳🇱 Netherlands Yes false Clean AS63949Akamai Connected CloudLinode21/05/2026, 07:31:5027/05/2026, 21:51:05 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198524/05/2026, 18:27:30-
115.191.3.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology21/05/2026, 07:31:4713/07/2026, 08:32:08 - - ----
35.185.155.•••:18789 - 🇺🇸 United States Yes true Clean AS396982Google LLCGoogle21/05/2026, 07:31:4714/07/2026, 03:51:15 No No --30/05/2026, 06:52:13-
47.92.240.•••:18789 - 🇨🇳 China mainland - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft21/05/2026, 07:31:4713/07/2026, 04:58:18 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, DarkHotel Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt TyphoonCVE-2014-0133, CVE-2014-3616, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-0742, CVE-2016-0746, CVE-2016-0747, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1247, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-4450, CVE-2016-6210, CVE-2016-6515, CVE-2017-15906, CVE-2017-20005, CVE-2017-7529, CVE-2018-15473, CVE-2018-15919, CVE-2018-16845, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138521/05/2026, 13:13:49-
8.135.60.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud21/05/2026, 07:31:4711/07/2026, 12:56:25 - - ----
157.245.59.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:31:4703/07/2026, 04:50:53 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MoustachedBouncer, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2007-4559, CVE-2013-0340, CVE-2015-20107, CVE-2016-20012, CVE-2016-3189, CVE-2018-1000024, CVE-2018-1172, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2018-25032, CVE-2019-12519, CVE-2019-12521, CVE-2019-12523, CVE-2019-12525, CVE-2019-12526, CVE-2019-12529, CVE-2019-12900, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-10735, CVE-2020-11945, CVE-2020-12062, CVE-2020-14058, CVE-2020-14145, CVE-2020-15049, CVE-2020-15778, CVE-2020-24606, CVE-2020-25097, CVE-2021-23017, CVE-2021-28041, CVE-2021-28651, CVE-2021-28652, CVE-2021-28861, CVE-2021-29921, CVE-2021-31807, CVE-2021-3618, CVE-2021-36368, CVE-2021-3737, CVE-2021-41617, CVE-2021-46784, CVE-2022-0391, CVE-2022-26488, CVE-2022-37454, CVE-2022-41741, CVE-2022-41742, CVE-2022-42919, CVE-2022-45061, CVE-2023-24329, CVE-2023-27043, CVE-2023-36632, CVE-2023-38408, CVE-2023-40217, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-31079, CVE-2024-3219, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-4032, CVE-2024-5642, CVE-2024-6387, CVE-2024-6923, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 13:13:53-
47.104.91.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft21/05/2026, 07:31:4701/07/2026, 00:33:20 No Yes APT15, APT28, APT29, APT31, APT34, APT37, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-52804, CVE-2025-26465, CVE-2025-32728, CVE-2025-47287, CVE-2025-61984, CVE-2025-61985, CVE-2025-67724, CVE-2025-67725, CVE-2025-6772621/05/2026, 13:13:54-
2a02:4780:7:2dc9::1:18789 - 🇫🇷 France - true Clean AS47583Hostinger International LimitedHostinger21/05/2026, 07:31:4711/07/2026, 13:39:18 - - ----
98.86.230.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon Web Services21/05/2026, 07:31:4721/05/2026, 13:12:14 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:13:58-
178.105.67.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner21/05/2026, 07:31:4712/07/2026, 16:52:01 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541403/07/2026, 08:27:09-
34.61.74.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle21/05/2026, 07:31:4721/05/2026, 13:12:14 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 13:14:01-
156.234.13.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS138415Yancy LimitedYancy Limited21/05/2026, 07:31:4714/07/2026, 03:51:30 No No --15/05/2026, 13:14:02-
103.39.18.•••:18789 - 🇺🇸 United States Yes true Clean AS138415Yancy LimitedRedLuff21/05/2026, 07:31:4713/07/2026, 17:08:08 No Yes APT28, APT40, Energetic Bear, Equation Group, Leafminer, Luckycat APTCVE-2010-1899, CVE-2010-2730, CVE-2010-397221/05/2026, 13:14:07-
38.6.0.•••:18789 - 🇯🇵 Japan Yes false Clean AS398993PEG TECH INCPolyethylene Glycol-Lipid Association21/05/2026, 07:31:4730/05/2026, 22:41:55 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161721/05/2026, 13:14:08-
78.47.168.•••:18789 - 🇩🇪 Germany - false Leaked AS24940Hetzner Online GmbHHetzner Online21/05/2026, 07:31:4723/05/2026, 10:54:05 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10735, CVE-2018-14040, CVE-2018-14042, CVE-2018-20676, CVE-2018-20677, CVE-2019-8331, CVE-2020-14145, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 13:14:09hetzner.com
24.199.85.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:31:4714/07/2026, 03:51:37 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272821/05/2026, 13:14:10-
18.224.44.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon21/05/2026, 07:31:4713/07/2026, 11:24:13 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:18-
38.49.55.•••:18789 - 🇺🇸 United States Yes false Clean AS8796FASTNET DATA INCKurun Cloud21/05/2026, 07:31:4716/06/2026, 08:23:25 No No --15/05/2026, 13:14:19-
188.81.240.•••:18789 - 🇵🇹 Portugal - false Leaked AS3243MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A.MEO Broadband21/05/2026, 07:31:4721/05/2026, 13:12:14 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:20maletazul.pt, neonisp.com, ddns.net
206.189.41.•••:18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:31:4714/07/2026, 03:51:33 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:21-
111.229.128.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud21/05/2026, 07:31:4713/07/2026, 14:59:46 Yes Yes APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-4448721/05/2026, 13:14:24tencent.com
113.173.78.•••:18789 - 🇻🇳 Vietnam Yes false Leaked AS45899VNPT CorpVNPT21/05/2026, 07:31:4708/06/2026, 20:53:31 Yes No --21/05/2026, 13:14:22vnpt.com.vn, vnpt.vn
137.74.46.•••:18789 - 🇫🇷 France Yes true Leaked AS16276OVH SASOVH21/05/2026, 07:31:4714/07/2026, 03:51:43 Yes No -CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 13:14:25ovh.net
35.189.51.•••:18789 Assistant 🇺🇸 United States Yes true Clean AS396982Google LLCGoogle21/05/2026, 07:31:4711/07/2026, 01:32:07 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, DragonFly, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272821/05/2026, 13:14:26-
114.219.154.•••:18789 - 🇨🇭 Switzerland Yes false Leaked AS140292CHINATELECOM Jiangsu province Suzhou 5G networkChinanet Jiangsu Province Network21/05/2026, 07:31:4721/05/2026, 13:12:13 Yes No --21/05/2026, 13:14:29bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
124.220.64.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud21/05/2026, 07:31:4727/05/2026, 02:06:11 Yes No --21/05/2026, 13:14:30tencent.com
103.102.228.•••:18789 - 🇳🇱 Netherlands Yes true Clean AS50053VDSka hosting[name redacted]21/05/2026, 07:31:4714/07/2026, 00:17:16 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:31-
203.161.47.•••:18789 - 🇺🇸 United States Yes true Leaked AS22612Namecheap, Inc.Namecheap21/05/2026, 07:31:4713/07/2026, 22:51:50 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 13:14:33namecheap.com
204.168.232.•••:18789 - 🇫🇮 Finland Yes false Leaked AS24940Hetzner Online GmbHHetzner Online21/05/2026, 07:31:4712/06/2026, 05:34:46 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 13:14:34hetzner.com
2407:3640:2323:4291::1:18789 - 🇸🇬 Singapore - false Clean AS141995Contabo Asia Private LimitedContabo Asia21/05/2026, 07:31:4703/07/2026, 05:33:19 - - ----
103.236.70.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS134768CHINANET SHAANXI province Cloud Base networkSichuan Xiaoteyun Technology21/05/2026, 07:31:4728/05/2026, 15:35:00 Yes No --21/05/2026, 13:14:43cnnic.cn
165.227.53.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:31:4713/07/2026, 22:51:47 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2017-15945, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-14145, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-44487, CVE-2024-6531, CVE-2024-7347, CVE-2025-2341921/05/2026, 13:14:45-
218.32.44.•••:18789 - 🇹🇼 Taiwan - false Leaked AS9919New Century InfoComm Tech Co., Ltd.New Century InfoComm Tech21/05/2026, 07:31:4728/06/2026, 06:00:48 Yes No -CVE-2014-4078, CVE-2024-6484, CVE-2024-648521/05/2026, 13:14:46chickenkiller.com, quickconnect.to, fastspeed.dk, fareastone.com.tw
37.53.85.•••:18789 - 🇺🇦 Ukraine - false Leaked AS6877JSC "Ukrtelecom"Ukrtelecom21/05/2026, 07:31:4721/05/2026, 13:12:13 Yes No --21/05/2026, 13:14:48opengw.net, cloudcorerouter.com, dvrdydns.com, crabdance.com, lovense.club
198.199.66.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean21/05/2026, 07:31:4712/07/2026, 16:52:01 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:49-
47.121.194.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft21/05/2026, 07:31:4710/06/2026, 04:41:24 No Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:50-
125.119.211.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hangzhou21/05/2026, 07:31:4721/05/2026, 13:12:13 No No --15/05/2026, 13:14:52-
38.6.0.•••:18789 - 🇯🇵 Japan Yes false Clean AS398993PEG TECH INCPolyethylene Glycol-Lipid Association21/05/2026, 07:31:4731/05/2026, 13:22:48 No No --15/05/2026, 13:14:54-
8.130.171.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud21/05/2026, 07:31:4705/07/2026, 15:59:05 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:55-
47.86.92.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK21/05/2026, 07:31:4712/07/2026, 16:09:07 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/05/2026, 13:14:56-
2a02:4780:75:dcca::1:18789 - 🇺🇸 United States - false Clean AS47583Hostinger International LimitedHostinger21/05/2026, 07:31:4721/05/2026, 13:12:13 - - ----
115.190.254.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology21/05/2026, 07:31:4702/06/2026, 22:34:52 - - ----
31.44.3.•••:18789 - 🇳🇱 Netherlands Yes true Clean AS208951ITGLOBAL.COMIT Global vStack21/05/2026, 07:31:4713/07/2026, 09:15:10 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161721/05/2026, 13:15:03-
2a02:c207:2322:571::1:18789 - 🇫🇷 France - true Clean AS51167Contabo GmbHContabo21/05/2026, 07:31:4713/07/2026, 15:42:35 - - ----
43.201.142.•••:18789 - 🇰🇷 South Korea - true Clean AS16509Amazon.com, Inc.Amazon21/05/2026, 07:31:4712/07/2026, 23:59:23 No No -CVE-2020-11724, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734721/05/2026, 13:15:10-
98.92.173.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services21/05/2026, 07:31:4613/07/2026, 22:09:08 No No --15/05/2026, 13:15:19-
193.112.175.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing21/05/2026, 07:31:4612/07/2026, 08:57:42 Yes Yes APT-C-23, APT36, Carbanak, Cobalt Group, DarkHotel Group, Equation Group, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2016-0742, CVE-2016-0746, CVE-2016-0747, CVE-2016-1247, CVE-2016-4450, CVE-2017-20005, CVE-2017-7529, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-4448721/05/2026, 13:15:23telstra.com.au, muru-d.com, ivision.com.au, medicaldirector.com, bigond.com, telstrainternationalgroup.com, telstra.com, telstra-global.com, bigpond.com, emerging.com.au, telstraglobal.com, telstrainternational.com, telstraglobal.net
47.107.185.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft21/05/2026, 07:31:4614/07/2026, 03:51:34 No No --15/05/2026, 13:15:24-