🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 683295 Page: 1772 / 6833 (100 per page) Showing: 177101-177200 Last Imported: 19/04/2026, 08:41:00
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 1772 of 6833
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
15.206.159.•••:18789 - 🇮🇳 India Yes true Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 06:42:2228/03/2026, 09:17:39 - - ----
42.194.204.•••:18789 - 🇨🇳 China mainland - true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud28/03/2026, 06:42:2228/03/2026, 09:17:39 - - ----
18.118.19.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 06:42:2216/04/2026, 14:23:56 No - --25/03/2026, 18:27:24-
47.86.4.•••:18789 - 🇭🇰 Hong Kong - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK28/03/2026, 06:42:2228/03/2026, 09:17:39 - - ----
207.153.40.•••:18789 - 🇺🇸 United States - true Clean AS10242US Internet CorpUS Internet Corporation28/03/2026, 06:11:2528/03/2026, 09:17:41 - - ----
167.172.154.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 06:11:2512/04/2026, 17:49:02 Yes Yes APT-C-23, APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Turla APT Group, Volt Typhoon, WIRTECVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-14145, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-38408, CVE-2023-38709, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272831/03/2026, 17:58:00duckdns.org
43.167.244.•••:18789 - 🇸🇬 Singapore - true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 06:11:2503/04/2026, 20:06:11 Yes Yes APT15, APT17, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 20:50:01tencent.com
67.205.179.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 06:11:2518/04/2026, 00:36:31 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272831/03/2026, 02:53:33-
34.118.98.•••:18789 - 🇺🇸 United States - true Clean AS396982Google LLCGoogle28/03/2026, 06:11:2528/03/2026, 09:17:41 - - ----
52.24.226.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 06:11:2528/03/2026, 09:17:41 - - ----
3.10.221.•••:18789 - 🇬🇧 United Kingdom - true Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 06:11:2518/04/2026, 00:36:30 No No --25/03/2026, 19:31:56-
73.81.248.•••:18789 - 🇺🇸 United States - true Clean AS7922Comcast Cable Communications, LLCComcast IP Services28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
50.62.183.•••:18789 - 🇺🇸 United States - true Leaked AS26496GoDaddy.com, LLCGoDaddy28/03/2026, 06:11:2417/04/2026, 07:45:04 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, FIN8, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-4089829/03/2026, 21:27:59secureserver.net, godaddy.com
122.51.67.•••:18789 - 🇨🇳 China mainland - true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
172.215.220.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationCloud28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
65.109.65.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
144.24.5.•••:18789 - 🇬🇧 United Kingdom - true Clean AS31898Oracle CorporationOracle UK28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
92.205.28.•••:18789 - 🇩🇪 Germany - true Leaked AS21499Host Europe GmbHGoDaddy28/03/2026, 06:11:2417/04/2026, 16:16:10 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, FIN8, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 15:15:58secureserver.net, hosteurope.de, godaddy.com, velia.net
154.8.201.•••:18789 - 🇨🇳 China mainland - true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
8.133.195.•••:18789 - 🇸🇬 Singapore - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud28/03/2026, 06:11:2418/04/2026, 00:36:47 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/03/2026, 09:49:53-
34.47.160.•••:18789 - 🇺🇸 United States - true Clean AS396982Google LLCGoogle28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
46.101.173.•••:18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
52.148.5.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
172.67.150.•••:18789 - 🇺🇸 United States - true Leaked AS13335Cloudflare, Inc.Cloudflare28/03/2026, 06:11:2429/03/2026, 19:55:14 Yes No --28/03/2026, 12:22:08assessoriagarvi.com, modernpestservices.com, encinitasanimalhospital.com, styled.fr, raiolanetworks.com, naminc.org, edonconnect.tech, ashley.fr, classicelectricomaha.com, tenxtenx.com, dignityhealthstg.org, cwsse.com.cn, leap.fr, impact.ps, namiillinois.org, hzfeidi.com, ligneblanche.fr, oxigendc.com, erbium.fr, hopestreetfamilycenter.org, soloepis.com, fricksfashion.com, daso.fr, mobeus.com, bianchi.fr, printa-cal.com, technologybuyersguide.com, cityfied.net, xintec.hk, factotum.fr, arizonaacservice.com, fujiyama.fr, meter.ln.cn, namicgm.org, shotsnapp.com, eurospainconsulting.com, anlink.net, supportsierranevada.org, laravital.com, nitro.fr, hmcxjc.com, namimn.org, namikansas.org, shsinotech.com, vbankph.com, elrafel.com, lesmouettes.fr, fullerfoods.com, dicksporting.com, allenparishclerk.org, bacalaorafols.com, paolino.fr, woodlandhealthcare.com, igualiaformacion.com, crossolutions.com, aurus.fr, cayman.fr, audiencegain.net, lateteailleurs.fr, leonne.fr, ekakitchen.com, apropos.fr, wisehousetech.com, lithiumconcrete.com, adminremix.com, sexsingles.com, cloudflare.net, eustaquiocanto.com, pontoon.fr, ohe.fr, namiohio.org, gatorchucks.cn, stlukeslakeside.com, activ.fr, hardywines.com.au, namimarin.org, kidsbud.net, horizm.com, lebistrotduport.fr, sherry.fr, identitymso.com, innfos.cn, jxlingtong.com, dignityhealth.org, usebubbles.com, revacomm.com, calsolfer.com, baselinewoods.com, precision.fr, yin.fr, caffey-inc.com, namilancopa.org, devil.fr, codification.com, alghanitex.com, christen.fr, qzz.io, managedcaresystems.com, isotope.fr, precision-petroleum.com, photo-video-aerienne.fr, dehuiguangchang.cn, incidence.fr, xjgudao.com, telos.fr, nscbiomed.com, chistfrancishealth.org, namimiami.org, cob.org.br, brownsprinting.com, oceans.fr, grupodelasheras.com, pacolopez.com, phutho.work, xxglasses.net, hometown-industries.com, zach.fr, cloudhq-mkt6.net, storia.fr, atis.com, forwardwirecloth.net, naminebraska.org, estanteriasjerez.com, lepicier.fr, rumpl.at, noon.fr, residenciadeancianosensevilla.com, efi.fr, muabanten.com, woodworksrefinish.com, smartcampusosu.com, mondi.fr, turlututu.fr, flaneur.fr, teppanyaki.fr, avc.fr, cresa.ec, strategicinvestment.eu, refee.net, xjzljt.net, sxgas.net, goin-vn.com, wakechem.com, zenna.fr, delco-construction.com, vsun-solar.com, amedee.fr, hansel.fr, cyberlotus.com, plasto.fr, serio.fr, dgmiberoamerica.com, valleycareipa.com, talleresvillegas.com, nada.fr, inmokeys.com, athenee.fr, akina.fr, tallerescodi.com, umberto.fr, essex.fr, sildenafilehkl.com, hardi.fr, sanhoos.com, dldianfeng.cn, grantburgewines.com.au, bamko.net, ausarabbusinesscouncil.com, inventaire.fr, it.com, termoplasticosbenicarlo.com, itb.fr, pumpkin.fr, lombardoslu.com, oukay.net, namisonomacounty.org, oaklanddentalfl.com, irrigationsystems4u.com, cuacuonanbinh.com, wekachecker.com, oremat.com, nami-lv.org, splendid-hotel.fr, aerovertol.com, ambit.co, beiyuecheng.com, payerset.com, namilane.org, sym.fr, china-one.net, kingdisplay.net, chuyenphatnhanhgiare.net, eu.org, amilcar.fr, mero.fr, naminj.org, mydhaga.com, ceramic.fr, namiwesternnevada.org, joylibros.com, villaencantodallas.com, access4.com, jason.fr, nami-northernvirginia.org, embutidosbierzo.com, aldente.fr, szlis.com.cn, curvedglassxxl.com, namisc.org, ranscustombuilders.com, cheers.fr, mirror.fr, redmood-agency.com, oneway.fr, calcasieuassessor.org, casablanca.fr, sequoiahospitalfoundation.org, ludiana.com, oracle-ag.ch, rconecta.com, zhaowoo.net, arista.fr, davishospital.org, cazcarra.com, grandplace.fr, namiidaho.org, bestwanhui.com, natasaspa.com, supportcaliforniahospital.org, frogs.fr, comestibles.fr, jacksonassessor.org, electrode.fr, namimaryvilleblount.org, dn-agrar.eu, btrueb.com, ahlia.ps, khinternational.com, nash.fr, freda.fr, corachanmaxilofacial.com, handy.fr, sankoreafrica.com, aiglon.fr, getcreative.com, enanzo.com, aout.fr, cariboo.fr, workers.dev, program-productions.com, reva.fr, cnkejie.com, quadrupleindia.com, talleractivo.com, coastresorts.com, technos.fr, namiccny.org, 8189330.cn, tigerexpressfuel.com, audito.fr, anmacvietnam.com, proximus.fr, cpgagency.com, petitspois.fr, dignityhealthmember.org, 360-xj.com, smartremsolutions.com, aicomplutense.com, disdal.com, xjwfcj.com, piqueassiette.fr, namiwindhamct.org, disa.fr, trinityhealth.com, liyubelt.net.cn, zsnet.net, gaolongan.com, wadleyhealth.com, kentacapital.com, galiciasea.com, carmaxbolivia.com, monreve.fr, namitn.org, china114.net, mariano.fr, exceptions.fr, fifelake.com, hy189.net, filatsserena.com, namimontgomery.org, ike.fr, reynoldscontractingva.com, xjhongshun.com, isofh.com, robertogarrudo.com, lecottage.fr, mercybakersfield.org, jilyphukhai.com, geochem.org, naturalstonefromspain.com, greenviet.net, trespasosconsultores.com, equinaceaprodutosnaturais.com, alptech.fr, chothuemaylamda.com, dmln.net
4.255.150.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
54.229.97.•••:18789 - 🇮🇪 Ireland - true Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
47.82.241.•••:18789 - 🇺🇸 United States - true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud28/03/2026, 05:40:3218/04/2026, 00:35:31 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 00:39:14hichina.com, alibaba-inc.com
91.98.93.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
170.106.73.•••:18789 - 🇺🇸 United States - true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
178.66.50.•••:18789 - 🇷🇺 Russia - true Clean AS12389PJSC "Rostelecom". Technical TeamRostelecom North-West28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
91.98.28.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
20.196.194.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
172.67.156.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
148.113.205.•••:18789 - 🇨🇦 Canada - true Leaked AS16276OVH SASOVH Hosting28/03/2026, 05:40:3230/03/2026, 04:49:37 Yes Yes APT15, APT17, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Salt Typhoon, SideWinder APTCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/03/2026, 12:22:14ovh.net
4.154.186.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
109.199.114.•••:18789 - 🇩🇪 Germany Yes true Clean AS51167Contabo GmbHContabo28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
91.98.203.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
72.56.19.•••:18789 - 🇳🇱 Netherlands - true Clean AS210976Timeweb, LLPTaiwan Cloud28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
3.228.149.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services28/03/2026, 05:40:3107/04/2026, 07:56:21 No No --25/03/2026, 02:53:22-
178.104.92.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
52.63.2.•••:18789 - 🇦🇺 Australia - true Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 05:40:3116/04/2026, 12:53:26 Yes No --30/03/2026, 11:13:40-
188.166.218.•••:18789 - 🇸🇬 Singapore Yes true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:40:3116/04/2026, 23:28:36 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-6387, CVE-2024-734731/03/2026, 18:26:52-
52.253.98.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
43.156.15.•••:18789 - 🇸🇬 Singapore - true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:40:3103/04/2026, 08:07:16 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198529/03/2026, 20:40:53tencent.com
147.45.213.•••:18789 - 🇷🇺 Russia - true Clean AS9123JSC "TIMEWEB"Taiwan Cloud28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
46.101.174.•••:18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:40:3116/04/2026, 12:08:07 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161730/03/2026, 20:52:25-
109.107.137.•••:18789 - 🇯🇵 Japan - true Clean AS3258xTom Japan CorporationXTom28/03/2026, 05:40:3117/04/2026, 09:14:52 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 15:14:06xtom.com
149.118.146.•••:18789 - 🇺🇸 United States - true Clean AS31898Oracle CorporationOracle28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
104.21.83.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
124.156.212.•••:18789 - 🇯🇵 Japan - true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
20.125.59.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
103.241.43.•••:18789 - 🇻🇳 Vietnam - true Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
8.163.33.•••:18789 - 🇸🇬 Singapore - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud28/03/2026, 05:40:3118/04/2026, 00:35:36 - - ----
129.121.86.•••:18789 - 🇺🇸 United States - true Clean AS31898Oracle CorporationOGTIPS128/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
18.221.49.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
164.92.76.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:40:3028/03/2026, 09:17:41 - - ----
34.35.172.•••:18789 - 🇺🇸 United States - true Clean AS396982Google LLCGoogle28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
39.108.91.•••:18789 - 🇽🇽 XX Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Unknown28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
15.157.195.•••:18789 - 🇨🇦 Canada - true Clean AS16509Amazon.com, Inc.Amazon Web Services Canada28/03/2026, 05:09:3816/04/2026, 15:54:57 No No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620003/04/2026, 11:06:19-
13.218.95.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services28/03/2026, 05:09:3805/04/2026, 03:11:29 - - ----
165.245.186.•••:18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:09:3801/04/2026, 04:17:46 No No -CVE-2025-61984, CVE-2025-6198531/03/2026, 00:40:41-
101.96.199.•••:18789 - 🇨🇳 China mainland Yes true Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology28/03/2026, 05:09:3801/04/2026, 20:07:37 - - ----
178.62.207.•••:18789 - 🇳🇱 Netherlands - true Clean AS14061DigitalOcean, LLCDigitalOcean Amsterdam28/03/2026, 05:09:3818/04/2026, 00:35:40 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138531/03/2026, 18:27:38-
146.190.151.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
8.219.243.•••:18789 - 🇸🇬 Singapore - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
103.241.43.•••:18789 - 🇻🇳 Vietnam - true Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
34.216.144.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
50.62.181.•••:18789 - 🇺🇸 United States - true Leaked AS26496GoDaddy.com, LLCGoDaddy28/03/2026, 05:09:3718/04/2026, 00:36:04 Yes Yes APT15, APT28, APT31, APT35, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, FIN8, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138530/03/2026, 02:05:41secureserver.net, godaddy.com
167.17.184.•••:18789 - 🇦🇱 Albania - true Clean AS26383Baxet Group Inc.Baxet Group28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
20.112.2.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
43.167.221.•••:18789 - 🇸🇬 Singapore - true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
167.172.181.•••:18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
2a02:4780:79:dbf7::1:18789 - 🇩🇪 Germany - true Clean AS47583Hostinger International LimitedHostinger28/03/2026, 05:09:3718/04/2026, 00:36:06 - - ----
18.159.37.•••:18789 - 🇩🇪 Germany - true Clean AS16509Amazon.com, Inc.A100 ROW28/03/2026, 05:09:3716/04/2026, 07:32:39 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 02:50:33-
20.222.20.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
97.107.137.•••:18789 - 🇺🇸 United States Yes true Clean AS63949Akamai Connected CloudLinode28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
20.200.209.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:38:4828/03/2026, 09:17:46 - - ----
161.35.46.•••:18789 - 🇬🇧 United Kingdom - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 04:38:4831/03/2026, 05:53:46 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 11:12:51-
49.51.33.•••:18789 - 🇫🇮 Finland Yes true Clean AS132203Tencent Building, Kejizhongyi AvenueTencent Cloud28/03/2026, 04:38:4828/03/2026, 09:17:45 - - ----
20.214.153.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:38:4828/03/2026, 09:17:45 - - ----
134.199.172.•••:18789 - 🇦🇺 Australia - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 04:38:4817/04/2026, 10:00:01 No No --26/03/2026, 02:49:47-
34.121.109.•••:18789 - 🇺🇸 United States Yes true Clean AS396982Google LLCGoogle28/03/2026, 04:38:4817/04/2026, 00:58:51 No Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/03/2026, 21:59:28-
104.21.38.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 04:38:4828/03/2026, 09:17:45 - - ----
20.112.3.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
5.78.71.•••:18789 - 🇺🇸 United States - true Clean AS212317Hetzner Online GmbHHetzner Online28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
54.209.69.•••:18789 - 🇺🇸 United States Yes true Clean AS14618Amazon.com, Inc.Amazon28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
104.21.4.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
13.212.208.•••:18789 - 🇸🇬 Singapore - true Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
77.235.60.•••:18789 - 🇳🇱 Netherlands - true Clean AS60781NetherlandsEuclid Services NL28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
46.224.161.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 04:38:4728/03/2026, 09:17:44 - - ----
207.121.63.•••:18789 - 🇺🇸 United States - true Clean AS3356Level 3 Parent, LLCLevel 3 Parent LLC28/03/2026, 04:38:4728/03/2026, 09:17:44 - - ----
84.247.175.•••:18789 - 🇩🇪 Germany Yes true Clean AS51167Contabo GmbHContabo28/03/2026, 04:38:4728/03/2026, 09:17:44 - - ----
43.156.129.•••:18789 - 🇸🇬 Singapore - true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
20.196.201.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
172.67.148.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
68.64.182.•••:18789 - 🇭🇰 Hong Kong - true Clean AS139659LUCIDACLOUD LIMITEDLucidCloud28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
13.212.34.•••:18789 - 🇸🇬 Singapore - true Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
51.91.125.•••:18789 - 🇫🇷 France - true Leaked AS16276OVH SASOVH28/03/2026, 04:07:5910/04/2026, 16:54:47 Yes No -CVE-2025-61984, CVE-2025-6198502/04/2026, 20:52:16ovh.net
165.245.179.•••:18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 04:07:5928/03/2026, 09:17:46 - - ----
20.59.18.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:07:5928/03/2026, 09:17:46 - - ----