🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 683295 Page: 2004 / 6833 (100 per page) Showing: 200301-200400 Last Imported: 19/04/2026, 08:41:00
🇨🇳 364,448
🇺🇸 188,265
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 65.21.176.•••:18789 | - | 🇫🇮 Finland | Yes | true | Leaked | AS24940 | Hetzner Online GmbH | Hetzner Online | 24/03/2026, 14:25:23 | 17/04/2026, 23:57:29 | Yes | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 14:17:45 | hetzner.com |
| 45.143.7.•••:80 | - | 🇧🇷 Brazil | Yes | true | Clean | AS268624 | Gamers Club Ltda | LuraHosting Datacenter | 24/03/2026, 14:25:23 | 15/04/2026, 13:30:29 | No | No | - | CVE-2006-20001, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-66200 | 05/04/2026, 14:20:47 | - |
| 111.229.194.•••:80 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 24/03/2026, 14:25:22 | 17/04/2026, 10:06:59 | Yes | - | - | - | 08/04/2026, 12:28:40 | tencent.com |
| 113.249.8.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4134 | Chinanet | Chinanet Chongqing | 24/03/2026, 14:25:22 | 24/03/2026, 15:55:51 | - | - | - | - | - | - |
| 219.155.56.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom | 24/03/2026, 14:25:22 | 24/03/2026, 15:55:51 | - | - | - | - | - | - |
| 23.22.240.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 24/03/2026, 14:25:22 | 24/03/2026, 15:55:51 | - | - | - | - | - | - |
| 47.92.133.•••:50001 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:25:22 | 17/04/2026, 07:07:09 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617 | 14/04/2026, 09:09:10 | dp.tech |
| 39.103.57.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:25:22 | 10/04/2026, 17:02:35 | Yes | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 30/03/2026, 07:53:05 | aliyun.com |
| 104.248.82.•••:80 | - | 🇳🇱 Netherlands | Yes | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 24/03/2026, 14:25:22 | 17/04/2026, 10:06:52 | No | Yes | APT-C-23, APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Earth Berberoka, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Turla APT Group, UNC2452, Volt Typhoon, WIRTE | CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-10708, CVE-2016-20012, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-17199, CVE-2018-20685, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-30522, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2024-6387, CVE-2024-7347 | 30/03/2026, 09:46:51 | - |
| 45.204.163.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Ares IDC Limited | 24/03/2026, 14:25:22 | 17/04/2026, 10:07:02 | No | No | - | - | 27/03/2026, 21:01:35 | - |
| 8.134.222.•••:80 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 24/03/2026, 14:25:22 | 16/04/2026, 01:22:30 | No | - | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 31/03/2026, 15:02:36 | - |
| 31.177.83.•••:18789 | - | 🇷🇺 Russia | Yes | true | Clean | AS44112 | SpaceWeb Ltd | SpaceWeb | 24/03/2026, 14:25:22 | 24/03/2026, 15:55:51 | - | - | - | - | - | - |
| 103.152.164.•••:443 | - | 🇻🇳 Vietnam | Yes | true | Clean | AS150895 | EZ TECHNOLOGY COMPANY LIMITED | Vietnam Cloud Technology | 24/03/2026, 14:25:22 | 24/03/2026, 15:55:51 | - | - | - | - | - | - |
| 39.98.172.•••:50001 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:25:21 | 31/03/2026, 06:46:11 | - | - | - | - | - | - |
| 103.236.94.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS134768 | CHINANET SHAANXI province Cloud Base network | Sichuan Xiaoteyun Technology | 24/03/2026, 14:25:21 | 24/03/2026, 15:55:50 | - | - | - | - | - | - |
| 154.83.239.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Ares IDC Limited | 24/03/2026, 14:25:21 | 15/04/2026, 13:31:49 | No | - | - | - | 30/03/2026, 18:04:42 | - |
| 129.153.70.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS31898 | Oracle Corporation | Oracle | 24/03/2026, 14:25:21 | 24/03/2026, 15:55:50 | - | - | - | - | - | - |
| 16.176.125.•••:443 | - | 🇦🇺 Australia | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Corporate Services | 24/03/2026, 14:25:21 | 31/03/2026, 00:45:54 | Yes | No | - | CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 25/03/2026, 06:13:12 | airnowdata.com, elasticbeanstalk.com |
| 51.102.188.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | A100 Row Inc | 24/03/2026, 14:25:21 | 17/04/2026, 10:06:24 | - | - | - | - | - | - |
| 106.53.184.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 24/03/2026, 14:25:21 | 24/03/2026, 15:55:49 | - | - | - | - | - | - |
| 194.32.141.•••:18789 | - | 🇰🇿 Kazakhstan | Yes | true | Clean | AS48716 | PS Internet Company LLP | PSKZ Hosting VPS | 24/03/2026, 14:25:21 | 24/03/2026, 15:55:49 | - | - | - | - | - | - |
| 101.43.123.•••:443 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 24/03/2026, 14:25:21 | 02/04/2026, 17:57:29 | Yes | Yes | APT37, El-Machete | - | 27/03/2026, 10:12:32 | tencent.com |
| 173.168.246.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS33363 | Charter Communications, Inc | Charter Communications | 24/03/2026, 14:25:21 | 02/04/2026, 20:12:32 | - | - | - | - | - | - |
| 39.98.75.•••:50001 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:25:21 | 17/04/2026, 03:21:48 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 01/04/2026, 17:12:44 | aliyun.com |
| 34.172.86.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 24/03/2026, 14:25:21 | 15/04/2026, 01:34:31 | No | Yes | APT15, APT28, APT31, APT36, Bitter APT, Bluenoroff, Callisto Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 09:48:10 | - | |
| 8.133.204.•••:443 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 24/03/2026, 14:25:21 | 25/03/2026, 11:03:59 | - | - | - | - | - | - |
| 35.164.19.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 24/03/2026, 14:25:21 | 24/03/2026, 15:55:48 | - | - | - | - | - | - |
| 18.227.52.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 24/03/2026, 14:25:21 | 24/03/2026, 15:55:48 | - | - | - | - | - | - |
| 92.205.179.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS21499 | Host Europe GmbH | GoDaddy | 24/03/2026, 14:25:20 | 27/03/2026, 10:12:38 | - | - | - | - | - | - |
| 171.104.82.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | ChinaNet Guangxi | 24/03/2026, 14:25:20 | 09/04/2026, 03:24:27 | Yes | No | - | - | 09/04/2026, 03:29:31 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 47.106.248.•••:8030 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:25:20 | 15/04/2026, 13:30:11 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-67724, CVE-2025-67725, CVE-2025-67726 | 30/03/2026, 18:21:23 | - |
| 39.107.125.•••:18081 | - | 🇽🇽 XX | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Unknown | 24/03/2026, 14:25:20 | 03/04/2026, 07:29:53 | Yes | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT32, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Careto APT, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Emennet Pasargad, Emennet Pasargard, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Turla APT Group, Volt Typhoon, WildCard APT | CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-0199, CVE-2019-0221, CVE-2019-0232, CVE-2019-10072, CVE-2019-12418, CVE-2019-17563, CVE-2019-2684, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13943, CVE-2020-14145, CVE-2020-15778, CVE-2020-17527, CVE-2020-1935, CVE-2020-1938, CVE-2020-8022, CVE-2020-9484, CVE-2021-24122, CVE-2021-25122, CVE-2021-25329, CVE-2021-30640, CVE-2021-33037, CVE-2021-36368, CVE-2021-41079, CVE-2021-41617, CVE-2021-43980, CVE-2022-25762, CVE-2022-42252, CVE-2023-28531, CVE-2023-28708, CVE-2023-29323, CVE-2023-35784, CVE-2023-38408, CVE-2023-41080, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648, CVE-2023-46589, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-21733, CVE-2024-6387 | 31/03/2026, 09:46:49 | aliyun.com, situdata.com |
| 51.79.145.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS16276 | OVH SAS | OVH Singapore | 24/03/2026, 14:25:20 | 24/03/2026, 15:55:48 | - | - | - | - | - | - |
| 178.104.94.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 24/03/2026, 14:25:20 | 27/03/2026, 10:11:24 | - | - | - | - | - | - |
| 23.147.172.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS152918 | Liberally Network LLC | Interconnected | 24/03/2026, 14:25:20 | 03/04/2026, 03:01:10 | No | No | - | CVE-2025-61984, CVE-2025-61985 | 02/04/2026, 22:30:58 | - |
| 39.102.125.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:25:20 | 15/04/2026, 01:35:19 | Yes | No | - | - | 05/04/2026, 11:04:40 | aliyun.com |
| 193.112.194.•••:8443 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 24/03/2026, 14:25:20 | 17/04/2026, 23:59:13 | Yes | No | - | - | 09/04/2026, 04:57:50 | telstra.com.au, muru-d.com, ivision.com.au, medicaldirector.com, bigond.com, telstrainternationalgroup.com, telstra.com, telstra-global.com, bigpond.com, emerging.com.au, telstraglobal.com, telstrainternational.com, telstraglobal.net |
| 14.225.1.•••:18789 | - | 🇻🇳 Vietnam | Yes | true | Clean | AS135905 | VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | VNPT | 24/03/2026, 14:25:20 | 24/03/2026, 15:55:47 | - | - | - | - | - | - |
| 8.168.23.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 24/03/2026, 14:25:19 | 15/04/2026, 01:34:37 | No | No | - | - | 21/03/2026, 06:30:03 | - |
| 8.147.56.•••:443 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 24/03/2026, 14:25:19 | 11/04/2026, 10:54:05 | - | - | - | - | - | - |
| 34.11.37.•••:18789 | Clawd (🦞) | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 24/03/2026, 14:25:19 | 15/04/2026, 13:31:58 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 05:14:59 | - | |
| 34.245.145.•••:18789 | - | 🇮🇪 Ireland | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Ireland | 24/03/2026, 14:25:19 | 24/03/2026, 15:55:47 | - | - | - | - | - | - |
| 106.75.21.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | UCloud | 24/03/2026, 14:25:19 | 24/03/2026, 15:55:47 | - | - | - | - | - | - |
| 115.214.56.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4134 | Chinanet | ChinaNet ZJ Ningbo | 24/03/2026, 14:25:19 | 11/04/2026, 21:50:05 | No | No | - | - | 24/03/2026, 19:30:49 | - |
| 121.43.242.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:25:18 | 24/03/2026, 15:55:46 | - | - | - | - | - | - |
| 47.129.126.•••:18789 | Assistant | 🇸🇬 Singapore | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 24/03/2026, 14:25:18 | 24/03/2026, 15:55:46 | - | - | - | - | - | - |
| 208.87.132.•••:443 | - | 🇸🇬 Singapore | Yes | true | Clean | AS29802 | HIVELOCITY, Inc. | Strasmore | 24/03/2026, 14:25:18 | 15/04/2026, 12:46:45 | No | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 18:15:55 | - |
| 185.197.74.•••:18789 | - | 🇸🇪 Sweden | Yes | true | Leaked | AS210644 | AEZA GROUP LLC | Aeza Group | 24/03/2026, 14:25:18 | 17/04/2026, 09:20:30 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 14/04/2026, 07:37:08 | redir.net, rwa10.ru |
| 159.89.22.•••:443 | - | 🇩🇪 Germany | Yes | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 24/03/2026, 14:25:18 | 08/04/2026, 00:20:27 | No | Yes | APT-C-23, APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Turla APT Group, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-3618, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41741, CVE-2022-41742, CVE-2023-25690, CVE-2023-27043, CVE-2023-27522, CVE-2023-28531, CVE-2023-36632, CVE-2023-38408, CVE-2023-40217, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-11168, CVE-2024-3219, CVE-2024-4030, CVE-2024-4032, CVE-2024-6232, CVE-2024-6387, CVE-2024-6923, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-26465, CVE-2025-32728 | 27/03/2026, 09:31:12 | - |
| 154.213.114.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 24/03/2026, 14:25:18 | 14/04/2026, 10:35:11 | No | Yes | APT1, APT28, APT32, APT35, APT37, APT38, APT39, Cobalt Group, DragonFly, El-Machete, FIN8, Gamaredon-Group, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow Brokers, gozi | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 31/03/2026, 06:46:29 | - |
| 52.65.129.•••:443 | - | 🇦🇺 Australia | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 24/03/2026, 14:25:17 | 24/03/2026, 15:55:45 | - | - | - | - | - | - |
| 171.213.146.•••:65535 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 24/03/2026, 14:25:17 | 24/03/2026, 15:55:45 | - | - | - | - | - | - |
| 104.192.80.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS398478 | PEG TECH INC | Dignitas Technology | 24/03/2026, 14:25:17 | 24/03/2026, 15:55:45 | - | - | - | - | - | - |
| 65.49.60.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS401742 | ServerOptima | Hurricane Nine | 24/03/2026, 14:25:17 | 02/04/2026, 17:57:36 | - | - | - | - | - | - |
| 43.155.106.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 24/03/2026, 14:25:17 | 24/03/2026, 15:55:45 | - | - | - | - | - | - |
| 47.82.162.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 24/03/2026, 14:25:17 | 15/04/2026, 01:34:51 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 00:48:46 | hichina.com, alibaba-inc.com |
| 108.59.84.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 24/03/2026, 14:25:17 | 24/03/2026, 15:55:45 | - | - | - | - | - | - | |
| 204.168.183.•••:18789 | - | 🇫🇮 Finland | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 24/03/2026, 14:25:17 | 17/04/2026, 10:06:53 | No | - | - | - | 30/03/2026, 11:18:32 | - |
| 118.25.78.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 24/03/2026, 14:23:16 | 24/03/2026, 15:53:45 | - | - | - | - | - | - |
| 43.163.97.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 24/03/2026, 14:23:16 | 27/03/2026, 10:09:55 | - | - | - | - | - | - |
| 31.220.93.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS51167 | Contabo GmbH | Contabo | 24/03/2026, 14:23:14 | 17/04/2026, 10:03:37 | Yes | Yes | APT-C-23, APT10, APT15, APT19, APT27, APT28, APT29, APT30, APT33, APT34, APT35, APT37, APT39, APT40, APT41, APT5, AQUATIC PANDA, Antlion APT, BRONZE ATLAS, Bluenoroff, Bronze Butler APT, Buhtrap Group, Carbanak, Cobalt Group, CopyKittens, DarkHydrus, DragonOK APT, Earth Berberoka, Energetic Bear, Equation Group, Gamaredon Group, Greenbug Group, Hafnium Group, Inception Framework, Konni Group, Lazarus Group, Moses Staff APT, MuddyWater Group, Orangeworm, Sandworm Team, Silence Hacker Group, TA505, The Shadow Brokers, Thrip APT, Triton APT, Tropic Trooper, Volatile Kitten | CVE-2014-3562, CVE-2014-4650, CVE-2015-3456, CVE-2015-5741, CVE-2015-6815, CVE-2016-2124, CVE-2016-2183, CVE-2016-6662, CVE-2017-1000376, CVE-2017-5645, CVE-2017-9953, CVE-2018-1059, CVE-2018-10869, CVE-2018-10892, CVE-2018-10926, CVE-2018-1111, CVE-2018-1128, CVE-2018-1129, CVE-2018-14462, CVE-2018-14463, CVE-2018-14465, CVE-2018-14469, CVE-2018-14622, CVE-2018-14645, CVE-2018-14879, CVE-2018-14882, CVE-2018-16229, CVE-2018-16540, CVE-2018-16871, CVE-2018-17456, CVE-2018-18311, CVE-2018-20615, CVE-2018-3665, CVE-2018-3760, CVE-2019-10196, CVE-2019-11038, CVE-2019-11048, CVE-2019-11477, CVE-2019-11478, CVE-2019-14813, CVE-2019-14816, CVE-2019-14907, CVE-2019-19906, CVE-2019-3459, CVE-2019-3880, CVE-2019-5798, CVE-2019-6974, CVE-2019-7221, CVE-2019-7317, CVE-2020-10696, CVE-2020-10711, CVE-2020-10749, CVE-2020-10756, CVE-2020-10763, CVE-2020-14318, CVE-2020-14355, CVE-2020-14364, CVE-2020-14370, CVE-2020-14394, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707, CVE-2020-1711, CVE-2020-25639, CVE-2020-25657, CVE-2020-25710, CVE-2020-25717, CVE-2020-25743, CVE-2020-27777, CVE-2020-27786, CVE-2020-27827, CVE-2020-35518, CVE-2020-35524, CVE-2020-7067, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2021-20179, CVE-2021-20188, CVE-2021-20229, CVE-2021-20236, CVE-2021-20270, CVE-2021-32027, CVE-2021-3516, CVE-2021-3532, CVE-2021-3533, CVE-2021-3537, CVE-2021-3621, CVE-2021-3669, CVE-2021-3737, CVE-2021-3752, CVE-2021-4104, CVE-2021-41817, CVE-2021-44142, CVE-2021-45417, CVE-2022-0711, CVE-2022-1011, CVE-2022-1227, CVE-2022-1708, CVE-2022-2132, CVE-2022-2393, CVE-2022-2850, CVE-2022-2989, CVE-2022-2990, CVE-2022-32545, CVE-2022-32546, CVE-2022-37454, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 14/04/2026, 18:47:22 | terratransit.de, contabo.de, contabo.net |
| 45.113.1.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS401701 | cognetcloud INC | Vapeliner Technology (HK) Limited | 24/03/2026, 14:23:08 | 15/04/2026, 13:28:32 | No | No | - | - | 27/03/2026, 20:10:37 | - |
| 38.239.30.•••:18789 | - | 🇭🇰 Hong Kong | - | true | Clean | AS134548 | DXTL Tseung Kwan O Service | Dxtl Service | 24/03/2026, 14:23:08 | 24/03/2026, 15:53:36 | - | - | - | - | - | - |
| 151.247.219.•••:18789 | - | 🇬🇧 United Kingdom | Yes | true | Clean | AS57043 | HOSTKEY B.V. | Hostkey | 24/03/2026, 14:23:08 | 17/04/2026, 10:03:21 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 08/04/2026, 06:18:35 | - |
| 194.163.145.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS51167 | Contabo GmbH | Contabo | 24/03/2026, 14:23:08 | 24/03/2026, 15:53:36 | - | - | - | - | - | - |
| 39.98.160.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:23:08 | 17/04/2026, 22:26:55 | - | - | - | - | - | - |
| 35.232.175.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 24/03/2026, 14:23:08 | 08/04/2026, 00:17:37 | No | Yes | APT14, APT15, APT28, APT31, APT35, APT36, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, DragonFly, Equation Group, Gamaredon Group, Gaza Cybergang, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Packrat, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2018-5740, CVE-2018-5741, CVE-2018-5743, CVE-2018-5744, CVE-2018-5745, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6465, CVE-2019-6470, CVE-2019-6471, CVE-2020-11993, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-8616, CVE-2020-8617, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2020-9490, CVE-2021-23017, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-33193, CVE-2021-34798, CVE-2021-3618, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-2795, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-38177, CVE-2022-38178, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 30/03/2026, 10:34:21 | - | |
| 39.98.79.•••:18789 | - | 🇨🇳 China mainland | - | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:23:07 | 17/04/2026, 21:42:03 | Yes | Yes | Packrat | - | 31/03/2026, 00:01:33 | aliyun.com |
| 122.51.234.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 24/03/2026, 14:23:07 | 24/03/2026, 15:53:35 | - | - | - | - | - | - |
| 58.35.79.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 24/03/2026, 14:23:07 | 24/03/2026, 15:53:35 | - | - | - | - | - | - |
| 180.171.35.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 24/03/2026, 14:23:07 | 24/03/2026, 15:53:35 | - | - | - | - | - | - |
| 8.130.9.•••:18789 | - | 🇸🇬 Singapore | - | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 24/03/2026, 14:23:07 | 15/04/2026, 11:58:50 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 30/03/2026, 22:27:25 | - |
| 51.79.121.•••:18789 | - | 🇨🇦 Canada | - | true | Clean | AS16276 | OVH SAS | OVH Dedicated | 24/03/2026, 14:23:07 | 27/03/2026, 09:25:11 | - | - | - | - | - | - |
| 192.3.15.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS36352 | HostPapa | RackNerd | 24/03/2026, 14:23:07 | 01/04/2026, 19:26:26 | - | - | - | - | - | - |
| 207.254.39.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS395337 | MacStadium, Inc. | MacStadium | 24/03/2026, 14:23:07 | 17/04/2026, 17:28:47 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 06/04/2026, 02:59:02 | macstadium.com |
| 185.23.239.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS57043 | HOSTKEY B.V. | Snowd Security OU | 24/03/2026, 14:23:06 | 16/04/2026, 22:48:21 | No | - | - | - | 08/04/2026, 01:33:46 | - |
| 8.141.93.•••:18789 | Assistant | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 24/03/2026, 14:23:06 | 03/04/2026, 11:55:28 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/04/2026, 10:28:48 | - |
| 2a02:4780:41:aa2a::1:18789 | - | 🇩🇪 Germany | - | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 24/03/2026, 14:23:06 | 24/03/2026, 15:53:34 | - | - | - | - | - | - |
| 34.160.1.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS396982 | Google LLC | 24/03/2026, 14:23:06 | 30/03/2026, 23:12:45 | Yes | No | - | - | 26/03/2026, 21:27:56 | nestlabs.com, googlegroup.com, guge.com, teracent.com, googlepay.com, ccaiplatform.com, google.fi, webcomponents.org, socratic.com, gmail.co, goolgle.com, google.cloud, googlee.com, atlantic-quantum.com, fabric.io, glasscollective.com, google.ie, google.com.ua, adometry.com, moodstocks.com, google.ac, measuremap.com, google2.com, google.us, googlepages.com, gmail.co.in, polymer-project.org, mdialog.com, gogole.com, comyoutube.com, freebase.com, chromium.org, business.site, invitemedia.com, qwiklabs.net, googlemaps.com, recaptcha.net, wearewild.us, decryptcryptolocker.com, saynow.com, titanaerospace.com, run.app, webpkgcache.com, googlevideo.com, admob.com, cdap.io, ggogle.com, googletemp.com, gexperiments3.com, glail.com, gooogle.com, gmale.com, siemplify.co, gexperiments1.com, googlete.com, youtube.org, google.cl, gmailnator.com, webmproject.org, google.com.ly, teracent.net, idx.dev, abcdefghij.com, googleads.com, googlecloudcommunity.com, schema.org, accountchooser.com, krom.com, postini.com, googlehangouts.com, pulse.io, quickoffice.com, chromiumapp.org, womentechmakers.com, ongcp.co, google.bj, android.com, getmdl.io, timeful.com, apollo-df.dev, dartpad.dev, gmail.cl, brightbytes.net, 1e100cdn.net, aimatter.com, ampproject.org, google.com.qa, nest.com, googles.com, urchin.com, googgle.com, googlegroups.com, google.com.sl, like.com, abc.xyz, bazel.build, getpunchd.com, gmodules.com, revolv.com, keyhole.com, eyefluence.com, ampproject.net, googleworkspace.com, firebaseio.com, yeoman.io, chromeos.dev, doubleclick.com, goooglemail.com, googlechrome.com, googel.com, fuchsia.dev, g-mail.com, tiltbrush.com, webpass.net, adwords.com, angular.dev, google.com.gi, madewithcode.com, disco.com, googler.com, mandiant.org, googlefi.com, google.co.in, gmaial.com, pub.dev, gerritcodereview.com, doubleclick.net, dataliberation.org, gngjd.com, joonix.net, area120.com, google.om, fab.by, googl.com, gppgle.com, googlemail.com, goooglee.com, gsuite.com, google.cat, googleadservices.com, fitbitlearn.com, beatthatquote.com, goolgool.com, goggle.com, famebit.com, globalweathercorp.com, on2.com, bynorth.com, barelydigital.com, gmaul.com, picasa.com, divide.com, yoututbe.com, getintra.org, 2mdn.net, mandiantinc.com, google.gg, simpler.co, enterproid.com, getoutline.org, rewsprojects.com, youtube.net, checkouttest.com, googlecloud.com, athenawave.com, material.io, google.org, mygbiz.com, gmsail.com, googleautosale.com, google-analytics.com, flutter.dev, cc-dt.com, google.xxx, perspectiveapi.com, google.rs, googsle.com, openhandsetalliance.com, stratozone.com, googleusercontent.com, respond-software.com, edgestatic.com, youtubeaccelerator.com, strivecdn.com, lookercdn.com, gexperiments4.com, test-google-a.com, ggoogle.com, gmail.io, abcdefghijkl.com, ipv6test.com, youtube.co, google.com.ng, googlr.com, mobiledgex.com, youtube.io, youttube.com, autodraw.com, channelintelligence.com, dysonics.com, google.by, velostrata.com, bandpage.com, googled.co, google.com.tw, looker.com, goo-gle.com, page.link, google.co, google.ru, firebase.com, google.com.pe, chrome.com, youtube.com, yt.com, botsociety.io, kubernetespodcast.com, gogle.com, mindset-media.com, google1.com, myenergy.com, pring.jp, hstspreload.org, scroobly.com, g.co, gmail.com, google.net, wgoogle.com, gmail.ua, androideval.com, intrinsic.ai, google.com.pr, 10youtube.com, barelypolitical.com, agnilux.com, simplemlforsheets.com, google-net.com, v8.dev, raterhub.com, chromecast.com, 1e100.net, youtube.om, psmtp.com, txvia.com, google.com.do, gmail.org, gfiber.com, dmtry.com, google.in, gtempaccount.com, googole.com | |
| 39.98.186.•••:18789 | - | 🇨🇳 China mainland | - | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:23:06 | 17/04/2026, 00:18:14 | Yes | No | - | - | 16/04/2026, 23:33:17 | aliyun.com |
| 5.78.178.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS212317 | Hetzner Online GmbH | Hetzner Online | 24/03/2026, 14:23:06 | 24/03/2026, 15:53:34 | - | - | - | - | - | - |
| 35.88.186.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 24/03/2026, 14:23:05 | 24/03/2026, 15:53:34 | - | - | - | - | - | - |
| 107.172.143.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS36352 | HostPapa | RackNerd | 24/03/2026, 14:23:05 | 15/04/2026, 13:27:55 | - | - | - | - | - | - |
| 86.95.195.•••:18789 | - | 🇳🇱 Netherlands | - | true | Clean | AS1136 | KPN National | KPN | 24/03/2026, 14:23:05 | 24/03/2026, 15:53:33 | - | - | - | - | - | - |
| 159.65.202.•••:18789 | - | 🇳🇱 Netherlands | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 24/03/2026, 14:23:05 | 17/04/2026, 19:25:46 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 02/04/2026, 11:09:49 | - |
| 54.173.67.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS14618 | Amazon.com, Inc. | Amazon | 24/03/2026, 14:23:05 | 24/03/2026, 15:53:33 | - | - | - | - | - | - |
| 123.60.170.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 24/03/2026, 14:23:05 | 24/03/2026, 15:53:33 | - | - | - | - | - | - |
| 38.180.152.•••:18789 | - | 🇮🇪 Ireland | Yes | true | Clean | AS9009 | M247 Europe SRL | 3NT Solutions LLP | 24/03/2026, 14:23:05 | 17/04/2026, 23:11:42 | No | Yes | Gamaredon Group | CVE-2016-20012, CVE-2017-8923, CVE-2019-11044, CVE-2019-11045, CVE-2019-11046, CVE-2019-11047, CVE-2019-11048, CVE-2019-11050, CVE-2020-7059, CVE-2020-7060, CVE-2020-7061, CVE-2020-7062, CVE-2020-7063, CVE-2020-7064, CVE-2020-7066, CVE-2020-7067, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-31628, CVE-2022-31629, CVE-2022-37454, CVE-2022-41741, CVE-2022-41742, CVE-2022-4900, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347 | 02/04/2026, 21:42:01 | - |
| 154.194.183.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 24/03/2026, 14:23:05 | 15/04/2026, 01:32:06 | No | No | - | - | 30/03/2026, 19:30:11 | - |
| 123.57.180.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:23:05 | 24/03/2026, 15:53:33 | - | - | - | - | - | - |
| 81.227.203.•••:18789 | - | 🇸🇪 Sweden | Yes | true | Clean | AS3301 | Telia Company | Telia Network Services | 24/03/2026, 14:23:04 | 24/03/2026, 15:53:32 | - | - | - | - | - | - |
| 3.68.166.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 24/03/2026, 14:23:04 | 15/04/2026, 13:28:00 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 09/04/2026, 22:10:37 | - |
| 43.99.93.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud Singapore | 24/03/2026, 14:23:04 | 29/03/2026, 22:14:31 | - | - | - | - | - | - |
| 87.106.160.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS8560 | This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE. | Ionos Cloud TXL | 24/03/2026, 14:23:04 | 06/04/2026, 05:11:29 | - | - | - | - | - | - |
| 3.138.178.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 24/03/2026, 14:23:04 | 17/04/2026, 10:04:24 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 30/03/2026, 10:34:51 | - |
| 47.243.19.•••:18789 | - | 🇭🇰 Hong Kong | - | true | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud HK | 24/03/2026, 14:23:04 | 24/03/2026, 15:53:32 | - | - | - | - | - | - |
| 172.67.163.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS13335 | Cloudflare, Inc. | Cloudflare | 24/03/2026, 14:23:04 | 24/03/2026, 15:53:32 | - | - | - | - | - | - |
| 43.160.216.•••:18789 | - | 🇸🇬 Singapore | - | true | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 24/03/2026, 14:23:04 | 24/03/2026, 15:53:32 | - | - | - | - | - | - |
| 34.58.192.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 24/03/2026, 14:23:04 | 15/04/2026, 13:28:25 | No | - | - | CVE-2024-39894, CVE-2024-6387 | 05/04/2026, 23:57:52 | - | |
| 139.196.221.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 24/03/2026, 14:23:04 | 27/03/2026, 10:09:59 | - | - | - | - | - | - |