🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1006105 Page: 1802 / 10062 (100 per page) Showing: 180101-180200 Last Imported: 14/07/2026, 07:44:58
🇨🇳 483,673
🇺🇸 290,578
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 170.253.8.•••:18789 | - | 🇪🇸 Spain | - | false | Leaked | AS15704 | XTRA TELECOM S.A. | Munditelecom | 20/05/2026, 18:15:19 | 26/05/2026, 03:42:27 | Yes | Yes | APT10, APT28, Equation Group, Konni Group, Silence Hacker Group, The Shadow Brokers | CVE-2016-20012, CVE-2016-2124, CVE-2017-11103, CVE-2017-12150, CVE-2017-12151, CVE-2017-12163, CVE-2017-14746, CVE-2017-15275, CVE-2017-7494, CVE-2018-1050, CVE-2018-1057, CVE-2018-10858, CVE-2018-10919, CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2019-14833, CVE-2019-14847, CVE-2019-14861, CVE-2019-14870, CVE-2019-14902, CVE-2019-3880, CVE-2020-10704, CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-12062, CVE-2020-14145, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383, CVE-2020-15778, CVE-2020-17049, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25722, CVE-2020-27840, CVE-2021-20251, CVE-2021-20254, CVE-2021-20277, CVE-2021-28041, CVE-2021-36368, CVE-2021-3738, CVE-2021-41617, CVE-2022-0336, CVE-2022-32744, CVE-2022-32746, CVE-2022-3437, CVE-2023-0614, CVE-2023-0922 | 20/05/2026, 18:15:35 | masorange.es |
| 18.218.174.•••:8333 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:15:18 | 26/05/2026, 06:31:05 | No | No | - | - | 14/05/2026, 18:15:44 | - |
| 202.181.177.•••:19001 | - | 🇧🇿 Belize | - | false | Clean | AS210083 | Privex Inc. | Privex | 20/05/2026, 18:15:18 | 26/05/2026, 08:38:20 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:15:46 | - |
| 170.253.8.•••:443 | - | 🇪🇸 Spain | - | false | Leaked | AS15704 | XTRA TELECOM S.A. | Munditelecom | 20/05/2026, 18:15:18 | 26/05/2026, 13:32:25 | Yes | Yes | APT10, APT28, Equation Group, Konni Group, Silence Hacker Group, The Shadow Brokers | CVE-2016-20012, CVE-2016-2124, CVE-2017-11103, CVE-2017-12150, CVE-2017-12151, CVE-2017-12163, CVE-2017-14746, CVE-2017-15275, CVE-2017-7494, CVE-2018-1050, CVE-2018-1057, CVE-2018-10858, CVE-2018-10919, CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2019-14833, CVE-2019-14847, CVE-2019-14861, CVE-2019-14870, CVE-2019-14902, CVE-2019-3880, CVE-2020-10704, CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-12062, CVE-2020-14145, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383, CVE-2020-15778, CVE-2020-17049, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25722, CVE-2020-27840, CVE-2021-20251, CVE-2021-20254, CVE-2021-20277, CVE-2021-28041, CVE-2021-36368, CVE-2021-3738, CVE-2021-41617, CVE-2022-0336, CVE-2022-32744, CVE-2022-32746, CVE-2022-3437, CVE-2023-0614, CVE-2023-0922 | 20/05/2026, 18:15:56 | masorange.es |
| 14.103.99.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS137718 | Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group) | Beijing Volcano Engine Technology | 20/05/2026, 18:15:16 | 26/05/2026, 22:00:28 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:16:04 | bytedance.com |
| 78.13.64.•••:2021 | - | 🇲🇽 Mexico | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:15:16 | 27/05/2026, 00:06:25 | No | Yes | El-Machete, Gamaredon-Group, gozi | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/05/2026, 18:16:09 | - |
| 54.180.162.•••:55553 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 20/05/2026, 18:15:16 | 27/05/2026, 00:48:13 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 20/05/2026, 18:16:10 | - |
| 54.180.162.•••:18003 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 20/05/2026, 18:15:16 | 27/05/2026, 00:48:13 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 20/05/2026, 18:16:12 | - |
| 51.48.83.•••:50005 | - | 🇪🇸 Spain | - | false | Clean | AS16509 | Amazon.com, Inc. | Unknown | 20/05/2026, 18:15:14 | 27/05/2026, 11:17:54 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:16:26 | - |
| 51.48.83.•••:9005 | - | 🇪🇸 Spain | - | false | Clean | AS16509 | Amazon.com, Inc. | Unknown | 20/05/2026, 18:15:14 | 27/05/2026, 12:42:52 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:16:27 | - |
| 56.124.83.•••:54322 | - | 🇧🇷 Brazil | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon Web Services Brazil | 20/05/2026, 18:15:14 | 27/05/2026, 18:25:44 | Yes | No | - | - | 20/05/2026, 18:16:31 | usps.gov, shippingapis.com, parcelpostplus.com, uspostalservice.com, usps.com |
| 185.130.44.•••:19001 | - | 🇸🇪 Sweden | - | false | Clean | AS210083 | Privex Inc. | Privex Sweden | 20/05/2026, 18:15:13 | 28/05/2026, 00:48:42 | No | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:16:40 | - |
| 154.217.240.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS400619 | AROSSCLOUD INC. | Fastmos Co Limited | 20/05/2026, 18:15:13 | 28/05/2026, 05:01:53 | No | No | - | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-66200 | 20/05/2026, 18:16:46 | - |
| 51.17.120.•••:20192 | - | 🇮🇱 Israel | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 Row Inc | 20/05/2026, 18:15:12 | 28/05/2026, 06:26:41 | No | No | - | - | 14/05/2026, 18:16:47 | - |
| 3.79.210.•••:9088 | - | 🇩🇪 Germany | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 20/05/2026, 18:15:11 | 28/05/2026, 16:23:56 | No | - | - | CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:17:01 | - |
| 18.100.42.•••:41795 | - | 🇪🇸 Spain | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Spain | 20/05/2026, 18:15:11 | 28/05/2026, 17:07:09 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 20/05/2026, 18:17:03 | - |
| 115.57.232.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 20/05/2026, 18:15:11 | 28/05/2026, 19:59:22 | Yes | No | - | - | 20/05/2026, 18:17:09 | chinaunicom.cn |
| 47.98.240.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 20/05/2026, 18:15:10 | 29/05/2026, 03:01:28 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 20/05/2026, 18:17:15 | - |
| 170.253.12.•••:18789 | - | 🇪🇸 Spain | - | false | Leaked | AS15704 | XTRA TELECOM S.A. | Munditelecom | 20/05/2026, 18:15:09 | 29/05/2026, 05:08:37 | Yes | No | - | CVE-2022-22707 | 20/05/2026, 18:17:18 | masorange.es |
| 13.60.34.•••:11011 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Sweden | 20/05/2026, 18:15:08 | 29/05/2026, 12:55:48 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/05/2026, 18:17:21 | - |
| 34.124.214.•••:443 | - | 🇺🇸 United States | - | false | Clean | AS396982 | Google LLC | 20/05/2026, 18:15:07 | 29/05/2026, 18:40:28 | No | No | - | CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:15:49 | - | |
| 39.66.116.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 20/05/2026, 18:15:07 | 29/05/2026, 22:54:01 | No | No | - | - | 14/05/2026, 18:17:22 | - |
| 124.220.13.•••:80 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 20/05/2026, 18:15:07 | 30/05/2026, 01:00:01 | Yes | Yes | APT37, El-Machete | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:15:45 | tencent.com |
| 15.223.180.•••:80 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:05 | 30/05/2026, 12:58:36 | - | - | - | - | - | - |
| 15.223.180.•••:5280 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:05 | 30/05/2026, 12:58:36 | - | - | - | - | - | - |
| 15.223.180.•••:41930 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:05 | 30/05/2026, 13:40:48 | - | - | - | - | - | - |
| 15.223.180.•••:8180 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:05 | 30/05/2026, 13:40:48 | - | - | - | - | - | - |
| 170.253.12.•••:443 | - | 🇪🇸 Spain | - | false | Leaked | AS15704 | XTRA TELECOM S.A. | Munditelecom | 20/05/2026, 18:15:05 | 30/05/2026, 18:35:02 | Yes | No | - | CVE-2022-22707 | 20/05/2026, 18:16:25 | masorange.es |
| 40.176.51.•••:9036 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:03 | 31/05/2026, 07:12:27 | No | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:17:31 | - |
| 186.104.250.•••:18789 | - | 🇨🇱 Chile | - | false | Clean | AS7418 | TELEFÓNICA CHILE S.A. | Telefonica Chile | 20/05/2026, 18:15:03 | 31/05/2026, 09:59:40 | No | No | - | - | 14/05/2026, 18:17:32 | - |
| 120.245.49.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS56048 | China Mobile Communicaitons Corporation | China Mobile | 20/05/2026, 18:15:02 | 31/05/2026, 12:46:48 | Yes | Yes | Packrat | - | 20/05/2026, 18:16:32 | fastspeed.dk, chinamobile.com, chinamobile.cn |
| 51.17.79.•••:1687 | - | 🇮🇱 Israel | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 Row Inc | 20/05/2026, 18:15:02 | 31/05/2026, 14:10:22 | - | - | - | - | - | - |
| 221.14.36.•••:18789 | - | 🇽🇽 XX | - | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | Unknown | 20/05/2026, 18:15:02 | 31/05/2026, 14:10:22 | Yes | No | - | - | 20/05/2026, 18:17:34 | chinaunicom.cn |
| 186.241.95.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS400619 | AROSSCLOUD INC. | USCloud Inc | 20/05/2026, 18:15:02 | 31/05/2026, 14:10:22 | - | - | - | - | - | - |
| 81.70.214.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 20/05/2026, 18:15:02 | 31/05/2026, 15:33:53 | No | No | - | - | 14/05/2026, 18:17:36 | - |
| 40.176.51.•••:41086 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:02 | 31/05/2026, 18:21:51 | No | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:17:38 | - |
| 40.176.51.•••:2086 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:02 | 31/05/2026, 20:27:53 | No | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:17:39 | - |
| 40.176.51.•••:20386 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:15:01 | 31/05/2026, 22:34:10 | No | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:17:40 | - |
| 78.12.217.•••:4007 | - | 🇲🇽 Mexico | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:15:01 | 31/05/2026, 23:15:48 | No | No | - | - | 14/05/2026, 18:17:41 | - |
| 113.88.72.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 20/05/2026, 18:15:00 | 01/06/2026, 02:47:50 | Yes | No | - | - | 20/05/2026, 18:16:45 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 118.195.188.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Guangxi SeeHu Technology | 20/05/2026, 18:15:00 | 01/06/2026, 04:55:18 | Yes | Yes | APT37, El-Machete | - | 20/05/2026, 18:17:44 | tencent.com |
| 8.137.195.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 20/05/2026, 18:15:00 | 01/06/2026, 05:37:59 | - | - | - | - | - | - |
| 78.12.217.•••:32757 | - | 🇲🇽 Mexico | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:15:00 | 01/06/2026, 07:46:24 | No | No | - | - | 14/05/2026, 18:17:45 | - |
| 15.216.44.•••:20365 | - | 🇪🇸 Spain | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon Data Services Spain | 20/05/2026, 18:14:58 | 01/06/2026, 21:04:51 | Yes | No | - | - | 20/05/2026, 18:17:47 | bookworm.com, lovefilm.com, amazon.eu, amazaon.com, z-exp.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, com.be, amazonpay.com, rooftopmedia.net, vine.com, amazon.com.au, amazon-rings.com, amazonin.com, amzn.asia, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, endless.com, amazonlocal.com, amazonllc.com, media-imdb.com, amazon.com.tw, amazonaws.com, kivasystems.com, amzn.com, amazon.com, thinkboxsoftware.com |
| 13.214.199.•••:30091 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/05/2026, 18:14:58 | 01/06/2026, 21:04:51 | No | No | - | - | 14/05/2026, 18:17:48 | - |
| 20.249.49.•••:80 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 20/05/2026, 18:14:58 | 01/06/2026, 21:04:51 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2022-40468, CVE-2023-28531, CVE-2023-38408, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-46848, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-23638, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-6387 | 20/05/2026, 18:17:50 | - |
| 16.174.27.•••:48010 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:57 | 02/06/2026, 01:57:21 | - | - | - | - | - | - |
| 15.216.44.•••:9815 | - | 🇪🇸 Spain | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon Data Services Spain | 20/05/2026, 18:14:57 | 02/06/2026, 03:21:12 | Yes | No | - | - | 20/05/2026, 18:17:52 | bookworm.com, lovefilm.com, amazon.eu, amazaon.com, z-exp.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, com.be, amazonpay.com, rooftopmedia.net, vine.com, amazon.com.au, amazon-rings.com, amazonin.com, amzn.asia, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, endless.com, amazonlocal.com, amazonllc.com, media-imdb.com, amazon.com.tw, amazonaws.com, kivasystems.com, amzn.com, amazon.com, thinkboxsoftware.com |
| 78.12.184.•••:20260 | - | 🇲🇽 Mexico | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:14:56 | 02/06/2026, 15:27:18 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 20/05/2026, 18:17:56 | - |
| 78.12.184.•••:5060 | - | 🇲🇽 Mexico | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:14:56 | 02/06/2026, 19:49:47 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 20/05/2026, 18:17:57 | - |
| 78.12.184.•••:7710 | - | 🇲🇽 Mexico | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:14:55 | 03/06/2026, 04:18:08 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 20/05/2026, 18:17:58 | - |
| 18.140.239.•••:80 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:54 | 03/06/2026, 07:48:54 | No | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 20/05/2026, 18:16:29 | - |
| 124.220.64.•••:8002 | - | 🇨🇳 China mainland | - | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 20/05/2026, 18:14:53 | 03/06/2026, 22:04:01 | Yes | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28370, CVE-2023-28531, CVE-2023-38408, CVE-2023-40028, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-23724, CVE-2024-23725, CVE-2024-34448, CVE-2024-34451, CVE-2024-43409, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419 | 20/05/2026, 18:16:34 | tencent.com |
| 180.112.1.•••:8008 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | Chinanet Jiangsu Province Network | 20/05/2026, 18:14:52 | 03/06/2026, 23:29:44 | Yes | No | - | - | 20/05/2026, 18:16:36 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 16.26.105.•••:5300 | - | 🇦🇺 Australia | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/05/2026, 18:14:52 | 04/06/2026, 01:39:38 | - | - | - | - | - | - |
| 154.36.164.•••:18789 | - | 🇭🇰 Hong Kong | - | false | Clean | AS979 | NetLab Global | NetLab Global | 20/05/2026, 18:14:52 | 04/06/2026, 03:05:20 | No | No | - | CVE-2014-4078, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 20/05/2026, 18:18:03 | - |
| 16.26.105.•••:30000 | - | 🇦🇺 Australia | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/05/2026, 18:14:52 | 04/06/2026, 03:47:48 | - | - | - | - | - | - |
| 13.208.178.•••:2345 | - | 🇯🇵 Japan | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Osaka | 20/05/2026, 18:14:52 | 04/06/2026, 05:56:07 | No | No | - | - | 14/05/2026, 18:18:06 | - |
| 44.228.124.•••:443 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:52 | 04/06/2026, 05:56:07 | No | No | - | - | 14/05/2026, 18:17:59 | - |
| 18.234.89.•••:51000 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:51 | 04/06/2026, 07:21:57 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:18:08 | - |
| 54.20.47.•••:10027 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:51 | 04/06/2026, 10:54:40 | - | - | - | - | - | - |
| 54.20.47.•••:30027 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:51 | 04/06/2026, 11:36:53 | - | - | - | - | - | - |
| 13.246.201.•••:10044 | - | 🇿🇦 South Africa | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services | 20/05/2026, 18:14:50 | 04/06/2026, 18:47:40 | - | - | - | - | - | - |
| 54.162.250.•••:21028 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:50 | 04/06/2026, 19:40:17 | No | No | - | - | 14/05/2026, 18:18:13 | - |
| 3.15.179.•••:5102 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/05/2026, 18:14:49 | 04/06/2026, 23:12:18 | - | - | - | - | - | - |
| 78.13.214.•••:21307 | - | 🇲🇽 Mexico | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:14:49 | 05/06/2026, 01:19:11 | No | Yes | El-Machete, Gamaredon-Group, gozi | - | 20/05/2026, 18:18:16 | - |
| 51.92.24.•••:42336 | - | 🇪🇸 Spain | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 Row | 20/05/2026, 18:14:49 | 05/06/2026, 02:01:44 | - | - | - | - | - | - |
| 3.26.99.•••:20011 | - | 🇦🇺 Australia | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Corporate Services | 20/05/2026, 18:14:47 | 05/06/2026, 15:27:37 | - | - | - | - | - | - |
| 47.116.58.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 20/05/2026, 18:14:47 | 05/06/2026, 16:10:45 | - | - | - | - | - | - |
| 3.26.99.•••:32761 | - | 🇦🇺 Australia | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Corporate Services | 20/05/2026, 18:14:47 | 05/06/2026, 16:10:45 | - | - | - | - | - | - |
| 170.253.12.•••:18789 | - | 🇪🇸 Spain | - | false | Leaked | AS15704 | XTRA TELECOM S.A. | Munditelecom | 20/05/2026, 18:14:47 | 05/06/2026, 16:10:45 | Yes | Yes | APT28, GreyEnergy Group, SandCat | CVE-2017-9765, CVE-2019-7659 | 20/05/2026, 18:17:53 | masorange.es |
| 78.13.214.•••:10007 | - | 🇲🇽 Mexico | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:14:47 | 05/06/2026, 19:01:38 | No | Yes | El-Machete, Gamaredon-Group, gozi | - | 20/05/2026, 18:18:26 | - |
| 8.136.183.•••:80 | - | 🇸🇬 Singapore | - | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 20/05/2026, 18:14:47 | 05/06/2026, 19:44:13 | - | - | - | - | - | - |
| 78.14.9.•••:2762 | - | 🇲🇽 Mexico | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:14:47 | 05/06/2026, 19:44:13 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:18:28 | - |
| 78.13.214.•••:20457 | - | 🇲🇽 Mexico | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 20/05/2026, 18:14:47 | 05/06/2026, 20:26:51 | No | Yes | El-Machete, Gamaredon-Group, gozi | - | 20/05/2026, 18:18:29 | - |
| 46.225.18.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 20/05/2026, 18:14:47 | 05/06/2026, 23:59:49 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:16:01 | - |
| 211.101.245.•••:18789 | - | 🇽🇽 XX | - | false | Leaked | AS58519 | Cloud Computing Corporation | Unknown | 20/05/2026, 18:14:46 | 06/06/2026, 01:24:44 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:16:14 | cnnic.cn |
| 13.247.182.•••:7001 | - | 🇿🇦 South Africa | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services | 20/05/2026, 18:14:45 | 06/06/2026, 10:31:59 | - | - | - | - | - | - |
| 103.236.67.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4816 | China Telecom (Group) | Shenzhen Yunshang Wuyou Network Technology | 20/05/2026, 18:14:45 | 06/06/2026, 13:19:37 | No | No | - | - | 14/05/2026, 18:16:38 | - |
| 103.236.67.•••:80 | - | 🇨🇳 China mainland | - | false | Clean | AS4816 | China Telecom (Group) | Shenzhen Yunshang Wuyou Network Technology | 20/05/2026, 18:14:45 | 06/06/2026, 15:25:58 | No | No | - | - | 14/05/2026, 18:16:51 | - |
| 49.232.46.•••:18888 | - | 🇨🇳 China mainland | - | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 20/05/2026, 18:14:44 | 06/06/2026, 18:14:23 | Yes | Yes | APT37, El-Machete | - | 20/05/2026, 18:17:06 | tencent.com |
| 47.253.151.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud US | 20/05/2026, 18:14:44 | 14/07/2026, 03:57:50 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:18:00 | - |
| 180.113.75.•••:8008 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | Chinanet Jiangsu Province Network | 20/05/2026, 18:14:44 | 26/06/2026, 17:06:50 | Yes | No | - | - | 20/05/2026, 18:18:34 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 120.55.244.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 20/05/2026, 18:14:44 | 07/07/2026, 18:54:55 | Yes | No | - | - | 20/05/2026, 18:16:24 | aliyun.com |
| 106.14.38.•••:80 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 20/05/2026, 18:14:44 | 06/06/2026, 22:27:26 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:16:55 | aliyun.com |
| 121.40.41.•••:18789 | Assistant | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 20/05/2026, 18:14:44 | 14/07/2026, 03:57:50 | Yes | Yes | APT36, Carbanak, Cobalt Group, DarkHotel Group, Equation Group, Salt Typhoon | CVE-2011-4968, CVE-2013-0337, CVE-2013-2070, CVE-2013-4547, CVE-2014-3616, CVE-2016-0742, CVE-2016-0746, CVE-2016-0747, CVE-2016-1247, CVE-2016-20012, CVE-2017-15906, CVE-2017-20005, CVE-2017-7529, CVE-2018-15473, CVE-2018-15919, CVE-2018-16845, CVE-2018-20685, CVE-2019-16905, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-46118, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:16:54 | aliyun.com |
| 47.85.91.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 20/05/2026, 18:14:44 | 14/07/2026, 03:57:47 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:17:00 | hichina.com, alibaba-inc.com |
| 39.105.166.•••:8080 | - | 🇽🇽 XX | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Unknown | 20/05/2026, 18:14:44 | 14/07/2026, 03:57:47 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 20/05/2026, 18:17:14 | aliyun.com |
| 3.99.214.•••:21400 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 20/05/2026, 18:14:43 | 07/06/2026, 05:31:38 | No | No | - | - | 14/05/2026, 18:18:35 | - |
| 193.226.79.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS9009 | M247 Europe SRL | Virtono Networks | 20/05/2026, 18:14:43 | 14/07/2026, 03:57:48 | No | Yes | APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Salt Typhoon, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2013-1896, CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-10708, CVE-2016-20012, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-17199, CVE-2018-20685, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:16:30 | - |
| 1.95.222.•••:8080 | - | 🇨🇳 China mainland | Yes | true | Clean | AS55990 | Huawei Cloud Service data center | Beijing Teletron Telecom | 20/05/2026, 18:14:43 | 14/07/2026, 03:57:50 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/05/2026, 18:17:08 | drpeng.com.cn |
| 47.88.79.•••:18789 | Assistant | 🇨🇳 China mainland | Yes | true | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud US | 20/05/2026, 18:14:43 | 14/07/2026, 03:57:47 | No | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:16:21 | - |
| 16.51.161.•••:666 | - | 🇦🇺 Australia | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/05/2026, 18:14:43 | 07/06/2026, 10:27:07 | No | No | - | - | 14/05/2026, 18:18:36 | - |
| 13.201.16.•••:42203 | - | 🇮🇳 India | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/05/2026, 18:14:43 | 07/06/2026, 11:09:04 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:18:37 | - |
| 120.55.244.•••:443 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 20/05/2026, 18:14:43 | 20/06/2026, 19:39:22 | Yes | No | - | - | 20/05/2026, 18:15:31 | aliyun.com |
| 13.201.16.•••:2103 | - | 🇮🇳 India | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/05/2026, 18:14:42 | 07/06/2026, 13:15:09 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:18:38 | - |
| 170.253.12.•••:443 | - | 🇪🇸 Spain | - | false | Leaked | AS15704 | XTRA TELECOM S.A. | Munditelecom | 20/05/2026, 18:14:42 | 07/06/2026, 13:57:06 | Yes | Yes | APT28, GreyEnergy Group, SandCat | CVE-2017-9765, CVE-2019-7659 | 20/05/2026, 18:17:46 | masorange.es |
| 13.201.16.•••:32803 | - | 🇮🇳 India | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/05/2026, 18:14:42 | 07/06/2026, 15:21:34 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:18:40 | - |
| 23.92.19.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS63949 | Akamai Connected Cloud | Linode | 20/05/2026, 18:14:42 | 30/06/2026, 21:44:42 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/05/2026, 18:15:26 | - |
| 176.122.133.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS25820 | IT7 Networks Inc | IT7 Networks | 20/05/2026, 18:14:42 | 23/06/2026, 11:35:08 | Yes | No | - | CVE-2018-11784, CVE-2018-1304, CVE-2018-1305, CVE-2018-1336, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-8014, CVE-2018-8034, CVE-2018-8037, CVE-2019-0199, CVE-2019-0221, CVE-2019-0232, CVE-2019-10072, CVE-2019-12418, CVE-2019-17563, CVE-2019-20372, CVE-2019-2684, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13943, CVE-2020-17527, CVE-2020-1935, CVE-2020-1938, CVE-2020-8022, CVE-2020-9484, CVE-2021-23017, CVE-2021-24122, CVE-2021-25122, CVE-2021-25329, CVE-2021-30640, CVE-2021-33037, CVE-2021-3618, CVE-2021-41079, CVE-2021-43980, CVE-2022-25762, CVE-2022-41741, CVE-2022-41742, CVE-2022-42252, CVE-2023-28708, CVE-2023-41080, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648, CVE-2023-46589, CVE-2024-21733, CVE-2024-23672, CVE-2024-24549, CVE-2024-7347, CVE-2025-23419, CVE-2025-24813, CVE-2025-55752, CVE-2025-61795 | 20/05/2026, 18:18:05 | 16clouds.com |