🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 816988 Page: 1772 / 8170 (100 per page) Showing: 177101-177200 Last Imported: 15/05/2026, 09:32:33
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 1772 of 8170
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
15.206.159.•••:18789 - 🇮🇳 India Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 06:42:2228/03/2026, 09:17:39 - - ----
42.194.204.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud28/03/2026, 06:42:2228/03/2026, 09:17:39 - - ----
18.118.19.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 06:42:2216/04/2026, 14:23:56 No - --25/03/2026, 18:27:24-
47.86.4.•••:18789 - 🇭🇰 Hong Kong - false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK28/03/2026, 06:42:2228/03/2026, 09:17:39 - - ----
207.153.40.•••:18789 - 🇺🇸 United States - false Clean AS10242US Internet CorpUS Internet Corporation28/03/2026, 06:11:2528/03/2026, 09:17:41 - - ----
167.172.154.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 06:11:2512/04/2026, 17:49:02 Yes Yes APT-C-23, APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Turla APT Group, Volt Typhoon, WIRTECVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-14145, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-38408, CVE-2023-38709, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272831/03/2026, 17:58:00duckdns.org
43.167.244.•••:18789 - 🇸🇬 Singapore - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 06:11:2503/04/2026, 20:06:11 Yes Yes APT15, APT17, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 20:50:01tencent.com
67.205.179.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 06:11:2518/04/2026, 00:36:31 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272831/03/2026, 02:53:33-
34.118.98.•••:18789 - 🇺🇸 United States - false Clean AS396982Google LLCGoogle28/03/2026, 06:11:2528/03/2026, 09:17:41 - - ----
52.24.226.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 06:11:2528/03/2026, 09:17:41 - - ----
3.10.221.•••:18789 - 🇬🇧 United Kingdom - false Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 06:11:2518/04/2026, 00:36:30 No No --25/03/2026, 19:31:56-
73.81.248.•••:18789 - 🇺🇸 United States - false Clean AS7922Comcast Cable Communications, LLCComcast IP Services28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
50.62.183.•••:18789 - 🇺🇸 United States - false Leaked AS26496GoDaddy.com, LLCGoDaddy28/03/2026, 06:11:2417/04/2026, 07:45:04 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, FIN8, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-4089829/03/2026, 21:27:59secureserver.net, godaddy.com
122.51.67.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
172.215.220.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationCloud28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
65.109.65.•••:18789 - 🇫🇮 Finland Yes false Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
144.24.5.•••:18789 - 🇬🇧 United Kingdom - false Clean AS31898Oracle CorporationOracle UK28/03/2026, 06:11:2428/03/2026, 09:17:41 - - ----
92.205.28.•••:18789 - 🇩🇪 Germany - false Leaked AS21499Host Europe GmbHGoDaddy28/03/2026, 06:11:2417/04/2026, 16:16:10 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, FIN8, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 15:15:58secureserver.net, hosteurope.de, godaddy.com, velia.net
154.8.201.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
8.133.195.•••:18789 - 🇸🇬 Singapore - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud28/03/2026, 06:11:2418/04/2026, 00:36:47 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/03/2026, 09:49:53-
34.47.160.•••:18789 - 🇺🇸 United States - false Clean AS396982Google LLCGoogle28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
46.101.173.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
52.148.5.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
172.67.150.•••:18789 - 🇺🇸 United States - false Leaked AS13335Cloudflare, Inc.Cloudflare28/03/2026, 06:11:2429/03/2026, 19:55:14 Yes No --28/03/2026, 12:22:08assessoriagarvi.com, modernpestservices.com, encinitasanimalhospital.com, styled.fr, raiolanetworks.com, naminc.org, edonconnect.tech, ashley.fr, classicelectricomaha.com, tenxtenx.com, dignityhealthstg.org, cwsse.com.cn, leap.fr, impact.ps, namiillinois.org, hzfeidi.com, ligneblanche.fr, oxigendc.com, erbium.fr, hopestreetfamilycenter.org, soloepis.com, fricksfashion.com, daso.fr, mobeus.com, bianchi.fr, printa-cal.com, technologybuyersguide.com, cityfied.net, xintec.hk, factotum.fr, arizonaacservice.com, fujiyama.fr, meter.ln.cn, namicgm.org, shotsnapp.com, eurospainconsulting.com, anlink.net, supportsierranevada.org, laravital.com, nitro.fr, hmcxjc.com, namimn.org, namikansas.org, shsinotech.com, vbankph.com, elrafel.com, lesmouettes.fr, fullerfoods.com, dicksporting.com, allenparishclerk.org, bacalaorafols.com, paolino.fr, woodlandhealthcare.com, igualiaformacion.com, crossolutions.com, aurus.fr, cayman.fr, audiencegain.net, lateteailleurs.fr, leonne.fr, ekakitchen.com, apropos.fr, wisehousetech.com, lithiumconcrete.com, adminremix.com, sexsingles.com, cloudflare.net, eustaquiocanto.com, pontoon.fr, ohe.fr, namiohio.org, gatorchucks.cn, stlukeslakeside.com, activ.fr, hardywines.com.au, namimarin.org, kidsbud.net, horizm.com, lebistrotduport.fr, sherry.fr, identitymso.com, innfos.cn, jxlingtong.com, dignityhealth.org, usebubbles.com, revacomm.com, calsolfer.com, baselinewoods.com, precision.fr, yin.fr, caffey-inc.com, namilancopa.org, devil.fr, codification.com, alghanitex.com, christen.fr, qzz.io, managedcaresystems.com, isotope.fr, precision-petroleum.com, photo-video-aerienne.fr, dehuiguangchang.cn, incidence.fr, xjgudao.com, telos.fr, nscbiomed.com, chistfrancishealth.org, namimiami.org, cob.org.br, brownsprinting.com, oceans.fr, grupodelasheras.com, pacolopez.com, phutho.work, xxglasses.net, hometown-industries.com, zach.fr, cloudhq-mkt6.net, storia.fr, atis.com, forwardwirecloth.net, naminebraska.org, estanteriasjerez.com, lepicier.fr, rumpl.at, noon.fr, residenciadeancianosensevilla.com, efi.fr, muabanten.com, woodworksrefinish.com, smartcampusosu.com, mondi.fr, turlututu.fr, flaneur.fr, teppanyaki.fr, avc.fr, cresa.ec, strategicinvestment.eu, refee.net, xjzljt.net, sxgas.net, goin-vn.com, wakechem.com, zenna.fr, delco-construction.com, vsun-solar.com, amedee.fr, hansel.fr, cyberlotus.com, plasto.fr, serio.fr, dgmiberoamerica.com, valleycareipa.com, talleresvillegas.com, nada.fr, inmokeys.com, athenee.fr, akina.fr, tallerescodi.com, umberto.fr, essex.fr, sildenafilehkl.com, hardi.fr, sanhoos.com, dldianfeng.cn, grantburgewines.com.au, bamko.net, ausarabbusinesscouncil.com, inventaire.fr, it.com, termoplasticosbenicarlo.com, itb.fr, pumpkin.fr, lombardoslu.com, oukay.net, namisonomacounty.org, oaklanddentalfl.com, irrigationsystems4u.com, cuacuonanbinh.com, wekachecker.com, oremat.com, nami-lv.org, splendid-hotel.fr, aerovertol.com, ambit.co, beiyuecheng.com, payerset.com, namilane.org, sym.fr, china-one.net, kingdisplay.net, chuyenphatnhanhgiare.net, eu.org, amilcar.fr, mero.fr, naminj.org, mydhaga.com, ceramic.fr, namiwesternnevada.org, joylibros.com, villaencantodallas.com, access4.com, jason.fr, nami-northernvirginia.org, embutidosbierzo.com, aldente.fr, szlis.com.cn, curvedglassxxl.com, namisc.org, ranscustombuilders.com, cheers.fr, mirror.fr, redmood-agency.com, oneway.fr, calcasieuassessor.org, casablanca.fr, sequoiahospitalfoundation.org, ludiana.com, oracle-ag.ch, rconecta.com, zhaowoo.net, arista.fr, davishospital.org, cazcarra.com, grandplace.fr, namiidaho.org, bestwanhui.com, natasaspa.com, supportcaliforniahospital.org, frogs.fr, comestibles.fr, jacksonassessor.org, electrode.fr, namimaryvilleblount.org, dn-agrar.eu, btrueb.com, ahlia.ps, khinternational.com, nash.fr, freda.fr, corachanmaxilofacial.com, handy.fr, sankoreafrica.com, aiglon.fr, getcreative.com, enanzo.com, aout.fr, cariboo.fr, workers.dev, program-productions.com, reva.fr, cnkejie.com, quadrupleindia.com, talleractivo.com, coastresorts.com, technos.fr, namiccny.org, 8189330.cn, tigerexpressfuel.com, audito.fr, anmacvietnam.com, proximus.fr, cpgagency.com, petitspois.fr, dignityhealthmember.org, 360-xj.com, smartremsolutions.com, aicomplutense.com, disdal.com, xjwfcj.com, piqueassiette.fr, namiwindhamct.org, disa.fr, trinityhealth.com, liyubelt.net.cn, zsnet.net, gaolongan.com, wadleyhealth.com, kentacapital.com, galiciasea.com, carmaxbolivia.com, monreve.fr, namitn.org, china114.net, mariano.fr, exceptions.fr, fifelake.com, hy189.net, filatsserena.com, namimontgomery.org, ike.fr, reynoldscontractingva.com, xjhongshun.com, isofh.com, robertogarrudo.com, lecottage.fr, mercybakersfield.org, jilyphukhai.com, geochem.org, naturalstonefromspain.com, greenviet.net, trespasosconsultores.com, equinaceaprodutosnaturais.com, alptech.fr, chothuemaylamda.com, dmln.net
4.255.150.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
54.229.97.•••:18789 - 🇮🇪 Ireland - false Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 06:11:2428/03/2026, 09:17:40 - - ----
47.82.241.•••:18789 - 🇺🇸 United States - false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud28/03/2026, 05:40:3218/04/2026, 00:35:31 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 00:39:14hichina.com, alibaba-inc.com
91.98.93.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
170.106.73.•••:18789 - 🇺🇸 United States - false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
178.66.50.•••:18789 - 🇷🇺 Russia - false Clean AS12389PJSC "Rostelecom". Technical TeamRostelecom North-West28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
91.98.28.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
20.196.194.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
172.67.156.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
148.113.205.•••:18789 - 🇨🇦 Canada - false Leaked AS16276OVH SASOVH Hosting28/03/2026, 05:40:3230/03/2026, 04:49:37 Yes Yes APT15, APT17, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Salt Typhoon, SideWinder APTCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/03/2026, 12:22:14ovh.net
4.154.186.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
109.199.114.•••:18789 - 🇩🇪 Germany Yes false Clean AS51167Contabo GmbHContabo28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
91.98.203.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3228/03/2026, 09:17:42 - - ----
72.56.19.•••:18789 - 🇳🇱 Netherlands - false Clean AS210976Timeweb, LLPTaiwan Cloud28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
3.228.149.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services28/03/2026, 05:40:3107/04/2026, 07:56:21 No No --25/03/2026, 02:53:22-
178.104.92.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
52.63.2.•••:18789 - 🇦🇺 Australia - false Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 05:40:3116/04/2026, 12:53:26 Yes No --30/03/2026, 11:13:40-
188.166.218.•••:18789 - 🇸🇬 Singapore Yes false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:40:3116/04/2026, 23:28:36 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-6387, CVE-2024-734731/03/2026, 18:26:52-
52.253.98.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
43.156.15.•••:18789 - 🇸🇬 Singapore - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:40:3103/04/2026, 08:07:16 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198529/03/2026, 20:40:53tencent.com
147.45.213.•••:18789 - 🇷🇺 Russia - false Clean AS9123JSC "TIMEWEB"Taiwan Cloud28/03/2026, 05:40:3128/03/2026, 09:17:42 - - ----
46.101.174.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:40:3116/04/2026, 12:08:07 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161730/03/2026, 20:52:25-
109.107.137.•••:18789 - 🇯🇵 Japan - false Clean AS3258xTom Japan CorporationXTom28/03/2026, 05:40:3117/04/2026, 09:14:52 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 15:14:06xtom.com
149.118.146.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationOracle28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
104.21.83.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
124.156.212.•••:18789 - 🇯🇵 Japan - false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
20.125.59.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
103.241.43.•••:18789 - 🇻🇳 Vietnam - false Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
8.163.33.•••:18789 - 🇸🇬 Singapore - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud28/03/2026, 05:40:3118/04/2026, 00:35:36 - - ----
129.121.86.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationOGTIPS128/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
18.221.49.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 05:40:3128/03/2026, 09:17:41 - - ----
164.92.76.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:40:3028/03/2026, 09:17:41 - - ----
34.35.172.•••:18789 - 🇺🇸 United States - false Clean AS396982Google LLCGoogle28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
39.108.91.•••:18789 - 🇽🇽 XX Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Unknown28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
15.157.195.•••:18789 - 🇨🇦 Canada - false Clean AS16509Amazon.com, Inc.Amazon Web Services Canada28/03/2026, 05:09:3816/04/2026, 15:54:57 No No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620003/04/2026, 11:06:19-
13.218.95.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services28/03/2026, 05:09:3805/04/2026, 03:11:29 - - ----
165.245.186.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:09:3801/04/2026, 04:17:46 No No -CVE-2025-61984, CVE-2025-6198531/03/2026, 00:40:41-
101.96.199.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology28/03/2026, 05:09:3801/04/2026, 20:07:37 - - ----
178.62.207.•••:18789 - 🇳🇱 Netherlands - false Clean AS14061DigitalOcean, LLCDigitalOcean Amsterdam28/03/2026, 05:09:3818/04/2026, 00:35:40 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138531/03/2026, 18:27:38-
146.190.151.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
8.219.243.•••:18789 - 🇸🇬 Singapore - false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore28/03/2026, 05:09:3828/03/2026, 09:17:44 - - ----
103.241.43.•••:18789 - 🇻🇳 Vietnam - false Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
34.216.144.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
50.62.181.•••:18789 - 🇺🇸 United States - false Leaked AS26496GoDaddy.com, LLCGoDaddy28/03/2026, 05:09:3718/04/2026, 00:36:04 Yes Yes APT15, APT28, APT31, APT35, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, FIN8, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138530/03/2026, 02:05:41secureserver.net, godaddy.com
167.17.184.•••:18789 - 🇦🇱 Albania - false Clean AS26383Baxet Group Inc.Baxet Group28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
20.112.2.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
43.167.221.•••:18789 - 🇸🇬 Singapore - false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
167.172.181.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
2a02:4780:79:dbf7::1:18789 - 🇩🇪 Germany - false Clean AS47583Hostinger International LimitedHostinger28/03/2026, 05:09:3718/04/2026, 00:36:06 - - ----
18.159.37.•••:18789 - 🇩🇪 Germany - false Clean AS16509Amazon.com, Inc.A100 ROW28/03/2026, 05:09:3716/04/2026, 07:32:39 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 02:50:33-
20.222.20.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
97.107.137.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode28/03/2026, 05:09:3728/03/2026, 09:17:43 - - ----
20.200.209.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:38:4828/03/2026, 09:17:46 - - ----
161.35.46.•••:18789 - 🇬🇧 United Kingdom - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 04:38:4831/03/2026, 05:53:46 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 11:12:51-
49.51.33.•••:18789 - 🇫🇮 Finland Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueTencent Cloud28/03/2026, 04:38:4828/03/2026, 09:17:45 - - ----
20.214.153.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:38:4828/03/2026, 09:17:45 - - ----
134.199.172.•••:18789 - 🇦🇺 Australia - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 04:38:4817/04/2026, 10:00:01 No No --26/03/2026, 02:49:47-
34.121.109.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle28/03/2026, 04:38:4817/04/2026, 00:58:51 No Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/03/2026, 21:59:28-
104.21.38.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 04:38:4828/03/2026, 09:17:45 - - ----
20.112.3.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
5.78.71.•••:18789 - 🇺🇸 United States - false Clean AS212317Hetzner Online GmbHHetzner Online28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
54.209.69.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
104.21.4.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
13.212.208.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
77.235.60.•••:18789 - 🇳🇱 Netherlands - false Clean AS60781NetherlandsEuclid Services NL28/03/2026, 04:38:4728/03/2026, 09:17:45 - - ----
46.224.161.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner28/03/2026, 04:38:4728/03/2026, 09:17:44 - - ----
207.121.63.•••:18789 - 🇺🇸 United States - false Clean AS3356Level 3 Parent, LLCLevel 3 Parent LLC28/03/2026, 04:38:4728/03/2026, 09:17:44 - - ----
84.247.175.•••:18789 - 🇩🇪 Germany Yes false Clean AS51167Contabo GmbHContabo28/03/2026, 04:38:4728/03/2026, 09:17:44 - - ----
43.156.129.•••:18789 - 🇸🇬 Singapore - false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
20.196.201.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
172.67.148.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
68.64.182.•••:18789 - 🇭🇰 Hong Kong - false Clean AS139659LUCIDACLOUD LIMITEDLucidCloud28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
13.212.34.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services28/03/2026, 04:08:0028/03/2026, 09:17:47 - - ----
51.91.125.•••:18789 - 🇫🇷 France - false Leaked AS16276OVH SASOVH28/03/2026, 04:07:5910/04/2026, 16:54:47 Yes No -CVE-2025-61984, CVE-2025-6198502/04/2026, 20:52:16ovh.net
165.245.179.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean28/03/2026, 04:07:5928/03/2026, 09:17:46 - - ----
20.59.18.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft28/03/2026, 04:07:5928/03/2026, 09:17:46 - - ----