🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1006105 Page: 182 / 10062 (100 per page) Showing: 18101-18200 Last Imported: 14/07/2026, 07:44:58
🇨🇳 483,673
🇺🇸 290,578
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 34.209.200.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 20:28:36 | 04/07/2026, 08:37:44 | No | No | - | - | 28/06/2026, 00:02:50 | - |
| 91.218.112.•••:443 | - | 🇷🇺 Russia | Yes | true | Clean | AS50867 | HOSTKEY B.V. | IT Basis LLC | 03/07/2026, 20:28:36 | 13/07/2026, 13:36:00 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 04/07/2026, 05:07:25 | - |
| 47.129.252.•••:443 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 20:28:36 | 04/07/2026, 15:03:28 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 04/07/2026, 05:07:26 | amazonaws.com, amazon.com |
| 44.247.146.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 20:28:36 | 04/07/2026, 15:03:27 | - | - | - | - | - | - |
| 54.255.234.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 03/07/2026, 20:26:48 | 04/07/2026, 11:26:53 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-29323, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 10:45:42 | - |
| 108.130.150.•••:18789 | - | 🇮🇪 Ireland | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Ireland | 03/07/2026, 20:26:48 | 04/07/2026, 02:53:23 | - | - | - | - | - | - |
| 47.129.229.•••:18789 | - | 🇸🇬 Singapore | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 20:26:48 | 04/07/2026, 18:35:35 | Yes | - | - | - | 04/07/2026, 12:11:10 | amazonaws.com, amazon.com |
| 103.236.54.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4816 | China Telecom (Group) | Shenzhen Yunshang Wuyou Network Technology | 03/07/2026, 20:26:47 | 13/07/2026, 04:58:20 | No | No | - | - | 01/07/2026, 12:24:05 | - |
| 123.123.25.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4808 | China Unicom Beijing Province Network | China Unicom Beijing | 03/07/2026, 20:26:47 | 09/07/2026, 19:37:18 | No | No | - | - | 30/06/2026, 21:20:01 | - |
| 147.90.13.•••:18789 | - | 🇫🇷 France | - | true | Clean | AS57043 | HOSTKEY B.V. | Hostkey | 03/07/2026, 20:26:47 | 13/07/2026, 06:23:47 | No | No | - | - | 28/06/2026, 10:46:02 | - |
| 47.115.129.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 03/07/2026, 20:26:45 | 12/07/2026, 09:41:07 | No | - | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 04/07/2026, 03:36:40 | - |
| 44.223.33.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 20:26:44 | 04/07/2026, 03:36:09 | - | - | - | - | - | - |
| 62.72.41.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS141995 | Contabo Asia Private Limited | Contabo | 03/07/2026, 20:26:44 | 13/07/2026, 13:33:33 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 03:36:50 | contabo.de, contabo.net |
| 3.37.94.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 03/07/2026, 20:26:43 | 04/07/2026, 03:36:09 | No | No | - | CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347 | 04/07/2026, 03:37:01 | - |
| 114.215.167.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 03/07/2026, 20:26:43 | 13/07/2026, 16:25:37 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 03:37:04 | aliyun.com |
| 64.177.118.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS20473 | The Constant Company, LLC | The Constant Company | 03/07/2026, 20:26:43 | 04/07/2026, 03:36:08 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 03:37:05 | constant.com |
| 8.137.185.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 03/07/2026, 20:26:43 | 12/07/2026, 19:00:18 | - | - | - | - | - | - |
| 34.209.200.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 20:26:43 | 04/07/2026, 05:01:53 | No | No | - | - | 28/06/2026, 03:37:08 | - |
| 91.218.112.•••:18789 | - | 🇷🇺 Russia | - | true | Clean | AS50867 | HOSTKEY B.V. | IT Basis LLC | 03/07/2026, 20:26:43 | 13/07/2026, 08:32:09 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 04/07/2026, 03:37:13 | - |
| 47.129.252.•••:18789 | - | 🇸🇬 Singapore | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 20:26:43 | 04/07/2026, 12:09:43 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 04/07/2026, 03:37:14 | amazonaws.com, amazon.com |
| 54.255.234.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 03/07/2026, 20:24:53 | 04/07/2026, 11:24:55 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-29323, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 01:27:19 | - |
| 108.130.150.•••:18789 | - | 🇮🇪 Ireland | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Ireland | 03/07/2026, 20:24:52 | 04/07/2026, 02:51:25 | - | - | - | - | - | - |
| 47.129.229.•••:18789 | - | 🇸🇬 Singapore | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 20:24:52 | 04/07/2026, 18:33:35 | Yes | - | - | - | 04/07/2026, 01:27:27 | amazonaws.com, amazon.com |
| 103.236.54.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4816 | China Telecom (Group) | Shenzhen Yunshang Wuyou Network Technology | 03/07/2026, 20:24:52 | 13/07/2026, 04:56:27 | No | No | - | - | 28/06/2026, 01:27:36 | - |
| 123.123.25.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4808 | China Unicom Beijing Province Network | China Unicom Beijing | 03/07/2026, 20:24:51 | 09/07/2026, 19:35:26 | No | No | - | - | 28/06/2026, 01:27:38 | - |
| 147.90.13.•••:18789 | - | 🇫🇷 France | - | true | Clean | AS57043 | HOSTKEY B.V. | Hostkey | 03/07/2026, 20:24:51 | 13/07/2026, 06:21:45 | No | No | - | - | 28/06/2026, 01:27:39 | - |
| 47.115.129.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 03/07/2026, 20:24:48 | 12/07/2026, 09:39:07 | No | - | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 04/07/2026, 01:28:01 | - |
| 44.223.33.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 20:24:47 | 04/07/2026, 03:34:14 | - | - | - | - | - | - |
| 62.72.41.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS141995 | Contabo Asia Private Limited | Contabo | 03/07/2026, 20:24:47 | 13/07/2026, 13:31:32 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 01:28:10 | contabo.de, contabo.net |
| 148.178.37.•••:18789 | - | 🇽🇽 XX | - | false | Clean | AS54801 | Zillion Network Inc. | Unknown | 03/07/2026, 20:24:47 | 05/07/2026, 12:23:39 | No | No | - | - | 28/06/2026, 01:28:15 | - |
| 3.37.94.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 03/07/2026, 20:24:46 | 04/07/2026, 03:34:13 | No | No | - | CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347 | 04/07/2026, 01:28:19 | - |
| 114.215.167.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 03/07/2026, 20:24:46 | 13/07/2026, 16:23:36 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 01:28:23 | aliyun.com |
| 64.177.118.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS20473 | The Constant Company, LLC | The Constant Company | 03/07/2026, 20:24:46 | 04/07/2026, 03:34:13 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 01:28:24 | constant.com |
| 54.179.58.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 20:22:50 | 05/07/2026, 15:12:31 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 03/07/2026, 21:51:17 | - |
| 51.132.233.•••:18789 | - | 🇬🇧 United Kingdom | - | true | Clean | AS8075 | Microsoft Corporation | Cloud | 03/07/2026, 20:22:50 | 14/07/2026, 03:47:36 | No | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 03/07/2026, 21:51:19 | - |
| 190.31.8.•••:18789 | - | 🇦🇷 Argentina | Yes | false | Leaked | AS7303 | Telecom Argentina S.A. | Apolo Gold Telecom Peru | 03/07/2026, 20:22:50 | 05/07/2026, 15:12:31 | Yes | No | - | - | 03/07/2026, 21:51:20 | flash.com.ar, nortelsa.com.ar, teco.com.ar, arnet.com.ar, personal.com.ar, telecom.com.ar, flow.com.ar, telecom.ar, cablevision.com.ar, cablevisionfibertel.com.ar, lcc.net.ar |
| 47.95.221.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 03/07/2026, 20:22:50 | 05/07/2026, 15:12:31 | No | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-21708, CVE-2021-36368, CVE-2021-41617, CVE-2022-31625, CVE-2022-31626, CVE-2022-31628, CVE-2022-31629, CVE-2022-31630, CVE-2022-37454, CVE-2022-41741, CVE-2022-41742, CVE-2022-4900, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-5458, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 21:51:21 | - |
| 54.255.234.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 03/07/2026, 20:22:50 | 05/07/2026, 15:12:31 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-29323, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 21:51:22 | - |
| 147.90.13.•••:18789 | - | 🇫🇷 France | - | true | Clean | AS57043 | HOSTKEY B.V. | Hostkey | 03/07/2026, 20:22:48 | 14/07/2026, 03:47:34 | No | No | - | - | 27/06/2026, 21:51:25 | - |
| 195.26.245.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS40021 | Contabo Inc. | Contabo | 03/07/2026, 20:22:48 | 05/07/2026, 15:55:21 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 21:51:28 | contaboserver.net, contabo.de, contabo.net |
| 3.37.94.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 03/07/2026, 20:22:48 | 05/07/2026, 15:55:20 | No | No | - | CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347 | 03/07/2026, 21:51:29 | - |
| 59.115.203.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 03/07/2026, 19:45:55 | 04/07/2026, 05:47:03 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 19:48:49 | chickenkiller.com, quickconnect.to, fastspeed.dk, myds.me, hinet.net, gfs-software.de |
| 95.142.41.•••:18789 | - | 🇳🇱 Netherlands | Yes | true | Leaked | AS216139 | Iron Hosting Centre LTD | Eurobyte | 03/07/2026, 19:45:55 | 12/07/2026, 09:00:19 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:48:51 | used-kayaks.com, mchost.ru, njbiomaterials.org, hisgames.org, clipart-library.com |
| 15.204.198.•••:10260 | - | 🇺🇸 United States | Yes | true | Leaked | AS16276 | OVH SAS | Maggie Infra | 03/07/2026, 19:45:54 | 12/07/2026, 21:11:05 | Yes | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:48:59 | ovhcloud.com |
| 120.40.60.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 19:45:54 | 07/07/2026, 03:45:52 | Yes | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 03/07/2026, 19:49:02 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 54.255.183.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 03/07/2026, 19:45:54 | 04/07/2026, 14:20:35 | Yes | No | - | - | 03/07/2026, 19:49:05 | takin.it |
| 160.30.160.•••:443 | - | 🇻🇳 Vietnam | Yes | true | Clean | AS152979 | Vietservice Technology Company Limited | Vietservice Technology Company Limited | 03/07/2026, 19:45:53 | 14/07/2026, 02:27:57 | No | - | - | - | 27/06/2026, 19:49:13 | - |
| 115.227.114.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Zhejiang | 03/07/2026, 19:45:52 | 04/07/2026, 05:47:00 | No | No | - | - | 27/06/2026, 19:49:20 | - |
| 178.104.53.•••:443 | - | 🇩🇪 Germany | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 03/07/2026, 19:45:52 | 13/07/2026, 17:54:00 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:49:21 | - |
| 123.11.5.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 03/07/2026, 19:45:52 | 04/07/2026, 05:47:00 | Yes | No | - | - | 03/07/2026, 19:49:22 | chinaunicom.cn |
| 2602:f7f8:3:13::a:5678 | - | 🇺🇸 United States | - | true | Clean | AS63018 | Dedicated.com | Extravm LLC | 03/07/2026, 19:45:52 | 13/07/2026, 06:26:01 | - | - | - | - | - | - |
| 15.235.147.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16276 | OVH SAS | OVH Singapore | 03/07/2026, 19:45:52 | 04/07/2026, 05:47:00 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 19:49:25 | ovh.ca |
| 27.74.102.•••:443 | - | 🇻🇳 Vietnam | Yes | false | Leaked | AS7552 | Viettel Group | Viettel | 03/07/2026, 19:45:52 | 04/07/2026, 14:20:33 | Yes | No | - | - | 03/07/2026, 19:49:30 | viettel.com.vn |
| 36.56.65.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Anhui | 03/07/2026, 19:45:51 | 06/07/2026, 22:44:14 | No | No | - | - | 27/06/2026, 19:49:40 | - |
| 8.218.83.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud Singapore | 03/07/2026, 19:45:51 | 04/07/2026, 06:29:41 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:49:43 | - |
| 39.106.103.•••:20021 | - | 🇽🇽 XX | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Unknown | 03/07/2026, 19:45:51 | 12/07/2026, 10:26:39 | Yes | No | - | - | 03/07/2026, 19:49:47 | aliyun.com |
| 120.48.57.•••:18789 | Assistant | 🇨🇳 China mainland | Yes | false | Leaked | AS38365 | Beijing Baidu Netcom Science and Technology Co., Ltd. | Baidu | 03/07/2026, 19:45:51 | 04/07/2026, 06:29:41 | Yes | Yes | APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 19:49:51 | baidu.com |
| 54.179.58.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 19:45:50 | 04/07/2026, 14:20:31 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 04/07/2026, 05:50:38 | - |
| 115.43.2.•••:18789 | - | 🇹🇼 Taiwan | Yes | true | Clean | AS9416 | KBT Co., LTD 4F., No.57, Dongxing Rd., Xinyi Dist., Taipei City 110, Taiwan (R.O.C.) | CNS Broadband | 03/07/2026, 19:45:50 | 13/07/2026, 18:37:14 | No | No | - | - | 28/06/2026, 05:06:12 | - |
| 3.137.20.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 19:45:50 | 09/07/2026, 11:46:00 | No | No | - | - | 28/06/2026, 05:06:13 | - |
| 27.190.25.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | ChinaNet Hebei | 03/07/2026, 19:44:01 | 10/07/2026, 03:27:53 | Yes | Yes | APT41 | CVE-2023-25136, CVE-2023-28531, CVE-2023-38408 | 03/07/2026, 23:23:10 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 120.40.25.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 19:44:00 | 04/07/2026, 02:10:37 | Yes | No | - | - | 03/07/2026, 23:23:13 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 59.115.203.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 03/07/2026, 19:44:00 | 04/07/2026, 02:10:36 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 23:23:15 | chickenkiller.com, quickconnect.to, fastspeed.dk, myds.me, hinet.net, gfs-software.de |
| 120.40.60.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 19:43:59 | 07/07/2026, 00:08:04 | Yes | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 06/07/2026, 21:19:38 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 54.255.183.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 03/07/2026, 19:43:59 | 04/07/2026, 10:43:59 | Yes | No | - | - | 04/07/2026, 10:44:31 | takin.it |
| 160.30.160.•••:18789 | - | 🇻🇳 Vietnam | - | true | Clean | AS152979 | Vietservice Technology Company Limited | Vietservice Technology Company Limited | 03/07/2026, 19:43:58 | 13/07/2026, 21:26:27 | No | - | - | - | 01/07/2026, 05:10:46 | - |
| 87.183.217.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS3320 | Internet service provider operations | Deutsche Telekom | 03/07/2026, 19:43:57 | 04/07/2026, 02:10:34 | - | - | - | - | - | - |
| 115.227.114.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Zhejiang | 03/07/2026, 19:43:57 | 04/07/2026, 02:10:34 | - | - | - | - | - | - |
| 178.104.53.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 03/07/2026, 19:43:57 | 13/07/2026, 13:33:32 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 10:44:46 | - |
| 123.11.5.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 03/07/2026, 19:43:57 | 04/07/2026, 02:10:34 | - | - | - | - | - | - |
| 2602:f7f8:3:13::a:18789 | - | 🇺🇸 United States | - | true | Clean | AS63018 | Dedicated.com | Extravm LLC | 03/07/2026, 19:43:57 | 13/07/2026, 02:07:44 | - | - | - | - | - | - |
| 15.235.147.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16276 | OVH SAS | OVH Singapore | 03/07/2026, 19:43:57 | 05/07/2026, 05:17:31 | - | - | - | - | - | - |
| 27.74.102.•••:18789 | - | 🇻🇳 Vietnam | - | false | Leaked | AS7552 | Viettel Group | Viettel | 03/07/2026, 19:43:57 | 04/07/2026, 10:43:58 | Yes | No | - | - | 04/07/2026, 10:44:53 | viettel.com.vn |
| 52.206.4.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 03/07/2026, 19:43:56 | 04/07/2026, 02:53:26 | - | - | - | - | - | - |
| 36.56.65.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Anhui | 03/07/2026, 19:43:56 | 06/07/2026, 19:50:17 | No | No | - | - | 30/06/2026, 14:51:48 | - |
| 8.218.83.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud Singapore | 03/07/2026, 19:43:56 | 04/07/2026, 02:53:26 | - | - | - | - | - | - |
| 59.57.182.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 19:43:56 | 04/07/2026, 02:53:26 | - | - | - | - | - | - |
| 120.48.57.•••:18789 | Assistant | 🇨🇳 China mainland | Yes | false | Clean | AS38365 | Beijing Baidu Netcom Science and Technology Co., Ltd. | Baidu | 03/07/2026, 19:43:54 | 04/07/2026, 02:53:25 | - | - | - | - | - | - |
| 54.179.58.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 19:43:54 | 04/07/2026, 10:43:55 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 04/07/2026, 10:45:30 | - |
| 115.43.2.•••:18789 | - | 🇹🇼 Taiwan | Yes | true | Clean | AS9416 | KBT Co., LTD 4F., No.57, Dongxing Rd., Xinyi Dist., Taipei City 110, Taiwan (R.O.C.) | CNS Broadband | 03/07/2026, 19:43:54 | 13/07/2026, 13:33:27 | No | No | - | - | 01/07/2026, 09:30:49 | - |
| 3.137.20.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 19:43:54 | 09/07/2026, 08:08:12 | No | No | - | - | 30/06/2026, 17:44:52 | - |
| 27.190.25.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | ChinaNet Hebei | 03/07/2026, 19:42:06 | 10/07/2026, 03:26:01 | Yes | Yes | APT41 | CVE-2023-25136, CVE-2023-28531, CVE-2023-38408 | 04/07/2026, 01:25:46 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 120.40.25.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 19:42:06 | 04/07/2026, 02:08:45 | Yes | No | - | - | 04/07/2026, 01:25:48 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 59.115.203.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 03/07/2026, 19:42:05 | 04/07/2026, 02:08:45 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 04/07/2026, 01:25:50 | chickenkiller.com, quickconnect.to, fastspeed.dk, myds.me, hinet.net, gfs-software.de |
| 120.40.60.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 19:42:04 | 07/07/2026, 00:06:08 | Yes | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 04/07/2026, 01:26:03 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 54.255.183.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 03/07/2026, 19:42:03 | 04/07/2026, 10:42:08 | Yes | No | - | - | 04/07/2026, 01:26:07 | takin.it |
| 160.30.160.•••:18789 | - | 🇻🇳 Vietnam | - | true | Clean | AS152979 | Vietservice Technology Company Limited | Vietservice Technology Company Limited | 03/07/2026, 19:42:03 | 13/07/2026, 21:24:31 | No | - | - | - | 28/06/2026, 01:26:14 | - |
| 87.183.217.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS3320 | Internet service provider operations | Deutsche Telekom | 03/07/2026, 19:42:02 | 04/07/2026, 02:08:42 | Yes | No | - | CVE-2024-6484, CVE-2024-6485 | 04/07/2026, 01:26:21 | macmadigan.com, myfritz.net, telekom.de, fritz.com, synology.me |
| 115.227.114.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Zhejiang | 03/07/2026, 19:42:02 | 04/07/2026, 02:08:42 | No | No | - | - | 28/06/2026, 01:26:22 | - |
| 178.104.53.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 03/07/2026, 19:42:02 | 13/07/2026, 13:31:31 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 01:26:23 | - |
| 123.11.5.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 03/07/2026, 19:42:02 | 04/07/2026, 02:08:42 | Yes | No | - | - | 04/07/2026, 01:26:24 | chinaunicom.cn |
| 2602:f7f8:3:13::a:18789 | - | 🇺🇸 United States | - | true | Clean | AS63018 | Dedicated.com | Extravm LLC | 03/07/2026, 19:42:02 | 13/07/2026, 02:05:49 | - | - | - | - | - | - |
| 15.235.147.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16276 | OVH SAS | OVH Singapore | 03/07/2026, 19:42:02 | 05/07/2026, 05:15:33 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 04/07/2026, 01:26:29 | ovh.ca |
| 27.74.102.•••:18789 | - | 🇻🇳 Vietnam | - | false | Leaked | AS7552 | Viettel Group | Viettel | 03/07/2026, 19:42:02 | 04/07/2026, 10:42:06 | Yes | No | - | - | 04/07/2026, 01:26:33 | viettel.com.vn |
| 52.206.4.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 03/07/2026, 19:42:00 | 04/07/2026, 02:51:29 | No | Yes | APT14, APT40, APT41, Gamaredon Group, Kimsuky, Lazarus Group, SharpPanda | CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436 | 04/07/2026, 01:26:42 | - |
| 36.56.65.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Anhui | 03/07/2026, 19:42:00 | 06/07/2026, 19:48:17 | No | No | - | - | 28/06/2026, 01:26:43 | - |
| 8.218.83.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud Singapore | 03/07/2026, 19:42:00 | 04/07/2026, 02:51:29 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 04/07/2026, 01:26:49 | - |
| 59.57.182.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 19:42:00 | 04/07/2026, 02:51:29 | Yes | No | - | CVE-2007-3107, CVE-2007-3642, CVE-2007-3740, CVE-2007-4567, CVE-2007-5501, CVE-2008-0001, CVE-2008-1514, CVE-2008-1675, CVE-2008-3276, CVE-2008-3833, CVE-2008-3915, CVE-2008-4113, CVE-2008-4210, CVE-2008-4302, CVE-2008-4307, CVE-2008-4445, CVE-2008-4554, CVE-2008-4576, CVE-2008-4618, CVE-2008-4933, CVE-2008-5025, CVE-2008-5029, CVE-2008-5079, CVE-2008-5134, CVE-2008-5182, CVE-2008-5700, CVE-2008-5702, CVE-2008-5713, CVE-2008-6107, CVE-2009-0024, CVE-2009-0028, CVE-2009-0031, CVE-2009-0065, CVE-2009-0269, CVE-2009-0605, CVE-2009-0675, CVE-2009-0676, CVE-2009-0778, CVE-2009-0935, CVE-2009-1184, CVE-2009-1192, CVE-2009-1336, CVE-2009-1337, CVE-2009-1338, CVE-2009-1360, CVE-2009-1385, CVE-2009-1389, CVE-2009-1439, CVE-2009-1914, CVE-2009-2406, CVE-2009-2407, CVE-2009-2695, CVE-2009-2846, CVE-2009-2849, CVE-2009-2909, CVE-2009-3043, CVE-2009-3238, CVE-2009-3613, CVE-2009-3620, CVE-2009-3623, CVE-2009-3624, CVE-2009-3638, CVE-2009-3640, CVE-2009-3722, CVE-2009-3726, CVE-2009-3888, CVE-2009-3889, CVE-2009-3939, CVE-2009-4005, CVE-2009-4021, CVE-2009-4026, CVE-2009-4027, CVE-2009-4131, CVE-2009-4138, CVE-2009-4306, CVE-2009-4307, CVE-2009-4308, CVE-2010-0008, CVE-2010-0437, CVE-2010-1083, CVE-2010-1084, CVE-2010-1088, CVE-2010-1173, CVE-2010-1437, CVE-2010-1643, CVE-2010-3015, CVE-2010-3066, CVE-2010-3086, CVE-2011-0726, CVE-2011-1090, CVE-2011-1170, CVE-2011-1171, CVE-2011-1172, CVE-2011-1494, CVE-2011-1495, CVE-2011-1577, CVE-2011-4325, CVE-2012-1583, CVE-2015-3214, CVE-2021-3640, CVE-2021-4197, CVE-2021-45868, CVE-2022-28356, CVE-2022-29968 | 04/07/2026, 01:26:50 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 120.48.57.•••:18789 | Assistant | 🇨🇳 China mainland | Yes | false | Leaked | AS38365 | Beijing Baidu Netcom Science and Technology Co., Ltd. | Baidu | 03/07/2026, 19:41:59 | 04/07/2026, 02:51:28 | Yes | Yes | APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 04/07/2026, 01:26:57 | baidu.com |
| 54.179.58.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 19:41:58 | 04/07/2026, 10:42:03 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 04/07/2026, 01:27:09 | - |