🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 994071 Page: 2005 / 9941 (100 per page) Showing: 200401-200500 Last Imported: 07/07/2026, 11:27:53
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 2005 of 9941
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
85.113.70.•••:18789 - 🇯🇵 Japan Yes false Clean AS3258xTom Japan Corporation365 Group LLC14/04/2026, 16:52:1806/07/2026, 13:25:12 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 23:56:39-
34.78.182.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle14/04/2026, 16:52:1817/04/2026, 23:58:23 - - ----
164.68.105.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo14/04/2026, 16:52:1730/05/2026, 08:42:39 Yes Yes APT-C-23, APT1 Comment Crew, APT10, APT15, APT19, APT27, APT28, APT29, APT30, APT33, APT34, APT35, APT37, APT39, APT40, APT41, APT5, AQUATIC PANDA, Antlion APT, BRONZE ATLAS, Bluenoroff, Bronze Butler APT, Buhtrap Group, Calypso APT, Carbanak, Cobalt Group, CopyKittens, DarkHydrus, DragonOK APT, Earth Berberoka, Energetic Bear, Equation Group, FIN6, Gamaredon Group, Greenbug Group, Hafnium Group, Inception Framework, Konni Group, Lazarus Group, Moses Staff APT, MuddyWater Group, Orangeworm, Pirate Panda, Sandworm Team, Silence Hacker Group, TA505, The Shadow Brokers, Thrip APT, Triton APT, Tropic Trooper, Volatile Kitten, Winnti GroupCVE-2013-0179, CVE-2013-7239, CVE-2013-7290, CVE-2013-7291, CVE-2014-3562, CVE-2014-4650, CVE-2015-3456, CVE-2015-5741, CVE-2015-6815, CVE-2016-20012, CVE-2016-2124, CVE-2016-2183, CVE-2016-6662, CVE-2016-8704, CVE-2016-8705, CVE-2016-8706, CVE-2017-1000376, CVE-2017-5645, CVE-2017-9951, CVE-2017-9953, CVE-2018-1000127, CVE-2018-1059, CVE-2018-10869, CVE-2018-10892, CVE-2018-10926, CVE-2018-1111, CVE-2018-1128, CVE-2018-1129, CVE-2018-14462, CVE-2018-14463, CVE-2018-14465, CVE-2018-14469, CVE-2018-14622, CVE-2018-14645, CVE-2018-14879, CVE-2018-14882, CVE-2018-16229, CVE-2018-16540, CVE-2018-16871, CVE-2018-17456, CVE-2018-18311, CVE-2018-20615, CVE-2018-3665, CVE-2018-3760, CVE-2019-10196, CVE-2019-11038, CVE-2019-11477, CVE-2019-11478, CVE-2019-14813, CVE-2019-14816, CVE-2019-14907, CVE-2019-16905, CVE-2019-19906, CVE-2019-3459, CVE-2019-3880, CVE-2019-6974, CVE-2019-7221, CVE-2019-7317, CVE-2020-10696, CVE-2020-10711, CVE-2020-10749, CVE-2020-10756, CVE-2020-10763, CVE-2020-14145, CVE-2020-14318, CVE-2020-14355, CVE-2020-14364, CVE-2020-14370, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707, CVE-2020-15778, CVE-2020-1711, CVE-2020-25639, CVE-2020-25657, CVE-2020-25710, CVE-2020-25717, CVE-2020-25743, CVE-2020-27777, CVE-2020-27786, CVE-2020-27827, CVE-2020-35518, CVE-2021-20179, CVE-2021-20188, CVE-2021-20229, CVE-2021-20236, CVE-2021-20270, CVE-2021-32027, CVE-2021-3516, CVE-2021-3532, CVE-2021-3533, CVE-2021-3537, CVE-2021-3578, CVE-2021-3621, CVE-2021-36368, CVE-2021-3737, CVE-2021-3752, CVE-2021-4104, CVE-2021-41617, CVE-2021-41817, CVE-2021-44142, CVE-2021-45417, CVE-2022-0711, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272817/04/2026, 09:26:46contabo.de, contabo.net
178.105.4.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner Online14/04/2026, 16:52:1717/04/2026, 23:59:14 - - ----
240e:332:34c0:5800:9209:d0ff:fe2a:4997:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChina Telecom IPv6 Broadband Address14/04/2026, 16:52:1704/06/2026, 10:08:35 - - ----
47.92.219.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 16:52:1604/06/2026, 02:18:48 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138520/05/2026, 21:11:27-
114.250.81.•••:8085 - 🇨🇳 China mainland Yes false Clean AS4808China Unicom Beijing Province NetworkChina Unicom Beijing14/04/2026, 16:52:1614/04/2026, 21:47:34 - - ----
178.104.173.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 16:52:1614/04/2026, 21:47:33 - - ----
187.169.62.•••:18789 - 🇲🇽 Mexico Yes false Clean AS8151UNINETUninet14/04/2026, 16:52:1617/04/2026, 10:07:02 - - ----
8.134.52.•••:443 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud14/04/2026, 16:52:1607/07/2026, 07:20:26 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138517/04/2026, 18:48:11-
240e:33f:1b40:eb00::10b4:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChina Telecom IPv6 Broadband Address14/04/2026, 16:52:1614/04/2026, 21:47:33 - - ----
118.89.67.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 16:52:1517/04/2026, 20:13:44 Yes Yes APT37, El-Machete-17/04/2026, 17:41:35tencent.com
77.42.88.•••:18789 - 🇫🇮 Finland - false Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 16:52:1514/04/2026, 21:47:32 - - ----
161.35.161.•••:443 - 🇬🇧 United Kingdom Yes false Clean AS14061DigitalOcean, LLCDigitalOcean14/04/2026, 16:52:1515/04/2026, 01:34:48 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1546, CVE-2016-20012, CVE-2016-3115, CVE-2016-4975, CVE-2016-4979, CVE-2016-5387, CVE-2016-6210, CVE-2016-6515, CVE-2016-8612, CVE-2016-8740, CVE-2016-8743, CVE-2016-8858, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-3181314/04/2026, 22:34:34-
165.245.221.•••:443 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean14/04/2026, 16:52:1514/04/2026, 22:34:29 - - ----
38.226.195.•••:18789 - 🇯🇵 Japan Yes false Leaked AS154438Superstify Technology Pte LtdQiniu Limited14/04/2026, 16:52:1307/07/2026, 07:20:21 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 22:34:41cogentco.com
31.58.87.•••:443 - 🇺🇸 United States Yes false Clean AS56971AS56971 CloudCGI Global Limited14/04/2026, 16:52:1314/04/2026, 22:34:29 No No -CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 22:34:43-
59.175.10.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4134ChinanetChinaNet Hubei14/04/2026, 16:52:1317/04/2026, 10:05:54 Yes No --14/04/2026, 22:34:46bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
13.124.244.•••:443 - 🇰🇷 South Korea Yes false Clean AS16509Amazon.com, Inc.AWS Seoul Region14/04/2026, 16:52:1307/07/2026, 03:45:51 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161714/04/2026, 22:34:48-
115.56.30.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Henan14/04/2026, 16:52:1314/04/2026, 22:34:27 No No --08/04/2026, 22:34:49-
98.126.102.•••:10061 - 🇺🇸 United States Yes false Clean AS4213Krypt TechnologiesKrypt Technologies14/04/2026, 16:52:1314/06/2026, 20:58:35 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 22:34:50vpls.net, vpls.com
178.104.158.•••:443 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 16:52:1315/04/2026, 01:34:47 - - ----
154.205.38.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 16:52:1206/07/2026, 14:51:18 No No --08/04/2026, 22:34:59-
124.222.21.•••:443 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 16:52:1214/04/2026, 22:34:27 Yes Yes APT37, El-Machete-14/04/2026, 22:35:04tencent.com
154.219.121.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS8796FASTNET DATA INCCloud Innovation14/04/2026, 16:52:1228/05/2026, 05:40:41 No Yes Packrat-14/04/2026, 22:35:05-
136.244.64.•••:18789 - 🇬🇧 United Kingdom Yes false Leaked AS20473The Constant Company, LLCVultr Holdings14/04/2026, 16:52:1217/04/2026, 10:06:48 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 22:35:06vultr.com
3.144.11.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon14/04/2026, 16:52:1214/04/2026, 22:34:26 - - ----
129.121.77.•••:80 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOGTIPS114/04/2026, 16:52:1117/04/2026, 20:59:11 Yes Yes Sandworm TeamCVE-2016-20012, CVE-2020-12783, CVE-2020-28007, CVE-2020-28008, CVE-2020-28009, CVE-2020-28010, CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014, CVE-2020-28015, CVE-2020-28016, CVE-2020-28018, CVE-2020-28019, CVE-2020-28021, CVE-2020-28022, CVE-2020-28023, CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2021-27216, CVE-2021-36368, CVE-2021-38371, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 22:35:14athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com
154.205.36.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 16:52:1104/07/2026, 20:03:34 No No --08/04/2026, 22:35:17-
154.193.248.•••:18789 - 🇺🇸 United States Yes false Clean AS21859Zenlayer IncFastmos Co Limited14/04/2026, 16:52:1114/04/2026, 22:34:26 - - ----
207.246.75.•••:3007 - 🇺🇸 United States Yes false Leaked AS20473The Constant Company, LLCVultr Holdings14/04/2026, 16:52:1017/04/2026, 10:06:40 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, DragonFly, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 22:35:27vultr.com
207.180.194.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo14/04/2026, 16:52:1014/04/2026, 22:34:25 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-2646614/04/2026, 22:35:31contabo.de, contabo.net
110.185.100.•••:443 - 🇨🇳 China mainland Yes false Leaked AS38283CHINANET SiChuan Telecom Internet Data CenterChinaNet Sichuan14/04/2026, 16:52:1017/04/2026, 10:06:15 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-2341914/04/2026, 22:35:35bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
47.236.9.•••:443 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud14/04/2026, 16:52:1014/04/2026, 22:34:25 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138514/04/2026, 22:37:02hichina.com, alibaba-inc.com
175.178.74.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 16:52:1017/04/2026, 10:06:09 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138514/04/2026, 22:37:03tencent.com
114.220.70.•••:8443 - 🇨🇳 China mainland Yes false Leaked AS140292CHINATELECOM Jiangsu province Suzhou 5G networkChinanet Jiangsu Province Network14/04/2026, 16:52:1014/04/2026, 22:34:23 Yes No --14/04/2026, 22:37:08bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
106.15.183.•••:443 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 16:52:0806/07/2026, 02:42:14 Yes Yes APT-C-23, APT10, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, BadMagic APT, Bitter APT, Blackwood APT, Bluenoroff, Bronze Butler APT, Callisto Group, Cobalt Group, Daggerfly APT, DarkHotel Group, Donot Team, Earth Krahang, Equation Group, Gallium APT, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Nobelium, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Triton APT, Turla APT Group, UAC-0114, Volt Typhoon, Winter VivernCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-2048, CVE-2022-34170, CVE-2022-34171, CVE-2022-34172, CVE-2022-34173, CVE-2022-34174, CVE-2022-34175, CVE-2022-41741, CVE-2022-41742, CVE-2023-27898, CVE-2023-27899, CVE-2023-27900, CVE-2023-27901, CVE-2023-27902, CVE-2023-27903, CVE-2023-27904, CVE-2023-35141, CVE-2023-36478, CVE-2023-38408, CVE-2023-39151, CVE-2023-43494, CVE-2023-43495, CVE-2023-43496, CVE-2023-43497, CVE-2023-43498, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-23897, CVE-2024-23898, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272814/04/2026, 22:37:16aliyun.com
113.218.176.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hunan Province Network14/04/2026, 16:52:0814/04/2026, 22:34:23 No No --08/04/2026, 22:37:17-
240e:358:94a:7000:48ef:6159:c040:4:443 - 🇨🇳 China mainland - false Clean AS4134ChinanetChina Telecom IPv6 Broadband Address14/04/2026, 16:52:0814/04/2026, 22:34:23 - - ----
47.92.201.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 16:52:0817/04/2026, 19:28:35 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-734714/04/2026, 21:47:30-
39.76.152.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Shandong14/04/2026, 16:52:0814/04/2026, 22:34:22 - - ----
18.189.194.•••:443 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon14/04/2026, 16:52:0814/04/2026, 22:34:22 No No --08/04/2026, 21:47:33-
178.128.227.•••:18789 - 🇨🇦 Canada Yes false Clean AS14061DigitalOcean, LLCDigitalOcean14/04/2026, 16:52:0806/07/2026, 19:09:39 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 21:47:38-
216.195.219.•••:80 - 🇭🇰 Hong Kong Yes false Clean AS21859Zenlayer IncCaelus Technology14/04/2026, 16:52:0817/04/2026, 10:06:57 - - ----
49.235.64.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 16:52:0814/04/2026, 22:34:22 Yes Yes APT37, El-MacheteCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 21:47:40tencent.com
82.157.178.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 16:52:0817/04/2026, 19:28:35 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT37, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138514/04/2026, 21:47:41-
152.136.233.•••:18888 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 16:52:0714/04/2026, 22:34:22 No Yes APT28, APT35, APT36, APT37, APT39, Cobalt Group, El-Machete, Equation Group, Hafnium Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-30639, CVE-2021-30640, CVE-2021-33037, CVE-2021-41079, CVE-2021-41617, CVE-2021-42340, CVE-2021-43980, CVE-2022-23181, CVE-2022-25762, CVE-2022-29885, CVE-2022-3430514/04/2026, 16:52:10-
49.235.105.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 16:52:0706/07/2026, 22:44:19 Yes Yes APT37, El-Machete-14/04/2026, 16:52:19tencent.com
18.117.217.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon14/04/2026, 16:52:0717/04/2026, 20:13:49 No No --08/04/2026, 16:52:21-
87.106.169.•••:443 - 🇩🇪 Germany Yes false Clean AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.IONOS14/04/2026, 16:52:0714/04/2026, 22:34:20 No Yes APT15, APT17, APT28, APT31, APT35, APT36, APT37, APT39, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-638714/04/2026, 16:52:23-
4.155.212.•••:18789 - 🇺🇸 United States Yes false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 16:52:0714/04/2026, 22:34:20 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:52:24-
15.204.106.•••:10025 - 🇺🇸 United States Yes false Leaked AS16276OVH SASSd One Network14/04/2026, 16:52:0630/05/2026, 20:37:33 Yes No -CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341914/04/2026, 16:52:36pebblehost.com, ovhcloud.com
154.12.30.•••:443 - 🇺🇸 United States Yes false Leaked AS401696cognetcloud INCFOJ IP Technology14/04/2026, 16:52:0617/04/2026, 23:14:31 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-26691, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:52:40cogentco.com
170.64.230.•••:443 - 🇦🇺 Australia Yes false Clean AS14061DigitalOcean, LLCDigitalOcean14/04/2026, 16:52:0617/04/2026, 10:06:16 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-31650, CVE-2025-31651, CVE-2025-32728, CVE-2025-46701, CVE-2025-48988, CVE-2025-48989, CVE-2025-49124, CVE-2025-49125, CVE-2025-52520, CVE-2025-53506, CVE-2025-55668, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:52:52-
113.218.243.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4134ChinanetChinaNet Hunan Province Network14/04/2026, 16:52:0514/04/2026, 22:34:18 Yes No --14/04/2026, 16:52:59bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
47.114.114.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 16:52:0526/06/2026, 07:43:51 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161714/04/2026, 16:53:01-
159.75.37.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 16:52:0507/07/2026, 07:21:46 No Yes APT37, El-Machete-14/04/2026, 16:53:07-
45.55.93.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean14/04/2026, 16:52:0506/07/2026, 04:07:51 No No --08/04/2026, 16:53:12-
54.116.4.•••:443 - 🇰🇷 South Korea Yes false Leaked AS16509Amazon.com, Inc.Amazon14/04/2026, 16:52:0526/05/2026, 10:40:46 Yes No --14/04/2026, 16:53:13amazon.fr, bookworm.com, amazon.com.br, audible.com, lovefilm.com, amazon.eu, amzaon.com, amazaon.com, audible.in, z-exp.com, amozon.com, aws-amazon.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, amazonaws.cm, com.be, amazonpay.com, rooftopmedia.net, vine.com, imdb.com, ssl-images-amazon.com, amazon.com.au, amazon-rings.com, assoc-amazon.com, amazonin.com, amzn.asia, annapurnalabs.com, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, amazon.ae, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, amazon-aws.com, endless.com, amazonlocal.com, amazonm.com, amazonllc.com, media-imdb.com, amazon.com.tw, createspace.com, amazonaws.com, amzn.com, amazon.com, images-amazon.com, amazon.com.co
45.197.37.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 16:52:0507/07/2026, 07:21:14 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:53:14-
207.180.219.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo14/04/2026, 16:52:0517/04/2026, 19:28:31 Yes No -CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-6620014/04/2026, 16:53:16contabo.de, contabo.net
178.105.1.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner Online14/04/2026, 16:52:0514/04/2026, 22:34:17 - - ----
3.230.1.•••:443 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon Web Services14/04/2026, 16:52:0407/07/2026, 07:20:17 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:53:25-
43.156.218.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd14/04/2026, 16:52:0414/04/2026, 22:34:17 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2022-40468, CVE-2023-28531, CVE-2023-38408, CVE-2023-40533, CVE-2023-48795, CVE-2023-49606, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:53:28tencent.com
171.223.107.•••:2000 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Sichuan14/04/2026, 16:52:0417/04/2026, 20:13:45 No No --08/04/2026, 16:53:30-
101.96.206.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology14/04/2026, 16:52:0407/07/2026, 07:20:38 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541404/06/2026, 07:21:40bytedance.com
2a02:c207:2318:6079::1:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo14/04/2026, 16:52:0417/04/2026, 23:58:01 - - ----
185.195.13.•••:80 - 🇺🇸 United States - false Clean AS31898Oracle CorporationNewfold Digital14/04/2026, 16:52:0414/04/2026, 22:34:17 Yes Yes APT28, APT37, Carbanak, Cobalt Group, DragonFly, El-Machete, Lazarus Group, RomCom GroupCVE-2012-2552, CVE-2014-1820, CVE-2014-4061, CVE-2015-1761, CVE-2015-1762, CVE-2015-1763, CVE-2016-7253, CVE-2016-7254, CVE-2017-8516, CVE-2020-0618, CVE-2021-163614/04/2026, 16:53:35publicdomainregistry.com
18.159.251.•••:443 - 🇩🇪 Germany Yes false Clean AS16509Amazon.com, Inc.A100 ROW14/04/2026, 16:52:0214/04/2026, 23:19:54 No No --08/04/2026, 16:53:44-
167.86.115.•••:20004 - 🇫🇷 France Yes false Leaked AS51167Contabo GmbHContabo14/04/2026, 16:52:0205/07/2026, 14:36:03 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:53:45contaboserver.net
136.243.39.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner Online GmbH14/04/2026, 16:52:0214/04/2026, 23:19:54 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-734714/04/2026, 16:53:47-
43.110.37.•••:443 - 🇸🇬 Singapore Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore14/04/2026, 16:52:0215/04/2026, 01:34:35 Yes No --14/04/2026, 16:53:53alibabacloud.com
154.205.38.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 16:52:0206/07/2026, 22:44:17 No No --08/04/2026, 16:53:56-
47.122.121.•••:80 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 16:52:0214/04/2026, 23:19:54 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272814/04/2026, 16:53:58-
43.156.161.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd14/04/2026, 16:52:0214/04/2026, 23:19:54 Yes - -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:54:00tencent.com
18.205.16.•••:80 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 16:52:0217/04/2026, 22:29:49 No No -CVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-3169, CVE-2017-7659, CVE-2017-7668, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-49812, CVE-2025-53020, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620014/04/2026, 16:54:05-
154.205.36.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 16:52:0105/07/2026, 18:09:32 No No --08/04/2026, 16:54:17-
47.237.87.•••:18789 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud14/04/2026, 16:52:0117/04/2026, 10:05:42 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:54:23hichina.com, alibaba-inc.com
2a02:4780:79:4c80::1:18789 - 🇩🇪 Germany - false Clean AS47583Hostinger International LimitedHostinger14/04/2026, 16:52:0007/07/2026, 04:28:54 - - ----
79.72.63.•••:18789 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationOracle Sweden14/04/2026, 16:52:0017/04/2026, 20:13:43 - - ----
185.195.13.•••:80 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationNewfold Digital14/04/2026, 16:52:0002/06/2026, 17:34:42 Yes Yes APT28, APT37, Carbanak, Cobalt Group, DragonFly, El-Machete, Lazarus Group, RomCom GroupCVE-2012-2552, CVE-2014-1820, CVE-2014-4061, CVE-2015-1761, CVE-2015-1762, CVE-2015-1763, CVE-2016-7253, CVE-2016-7254, CVE-2017-8516, CVE-2020-0618, CVE-2021-163614/04/2026, 16:54:37publicdomainregistry.com
109.199.127.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo14/04/2026, 16:52:0017/04/2026, 21:44:45 Yes Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:54:43contaboserver.net, contabo.de, contabo.net
47.92.251.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 16:52:0004/06/2026, 23:08:40 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11724, CVE-2020-14145, CVE-2020-7069, CVE-2020-7070, CVE-2020-7071, CVE-2021-21702, CVE-2021-21703, CVE-2021-21704, CVE-2021-21705, CVE-2021-21707, CVE-2021-41617, CVE-2022-3745414/04/2026, 16:54:48-
18.216.186.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon14/04/2026, 16:52:0006/07/2026, 00:33:45 No - --08/04/2026, 16:54:53-
98.126.102.•••:10073 - 🇺🇸 United States Yes false Clean AS4213Krypt TechnologiesKrypt Technologies14/04/2026, 16:52:0013/06/2026, 22:27:46 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:54:54vpls.net, vpls.com
98.126.102.•••:10038 - 🇺🇸 United States Yes false Clean AS4213Krypt TechnologiesKrypt Technologies14/04/2026, 16:52:0013/06/2026, 06:17:30 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:54:55vpls.net, vpls.com
178.156.238.•••:3001 - 🇺🇸 United States Yes false Leaked AS213230Hetzner Online GmbHHetzner14/04/2026, 16:51:5925/06/2026, 19:31:32 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:54:57hetzner.com
183.159.206.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hangzhou14/04/2026, 16:51:5917/04/2026, 20:13:40 No No --08/04/2026, 16:54:58-
47.236.27.•••:80 - 🇺🇸 United States - false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud14/04/2026, 16:51:5914/04/2026, 23:19:51 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:54:59hichina.com, alibaba-inc.com
176.108.244.•••:18789 - 🇷🇺 Russia Yes false Leaked AS208677"Cloud Technologies" LLC trading as Cloud.ruCloud.ru14/04/2026, 16:51:5917/04/2026, 10:06:03 Yes No -CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:55:01bk.ru, youla.ru, imgsmail.ru, cloudtech.ie, icq.net, mail.ru, smailru.net, icq.com
104.237.151.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode14/04/2026, 16:51:5905/07/2026, 16:44:12 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:55:03-
35.88.170.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon14/04/2026, 16:51:5907/07/2026, 07:21:44 No No --08/04/2026, 16:55:05-
161.35.57.•••:80 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean14/04/2026, 16:51:5917/04/2026, 23:58:14 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161714/04/2026, 16:55:09-
43.165.177.•••:18789 - 🇯🇵 Japan Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd14/04/2026, 16:51:5917/04/2026, 23:59:12 - - ----
82.157.39.•••:18888 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 16:51:5814/04/2026, 23:19:49 No Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161714/04/2026, 16:55:18-
24.77.30.•••:18789 - 🇨🇦 Canada Yes false Leaked AS6327Shaw CommunicationsShaw Communications14/04/2026, 16:51:5806/07/2026, 06:16:29 Yes No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-66200, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541421/05/2026, 20:23:24rogersondemand.com, rogers.ca, rogerstelecom.com, rogers.com, rogerssportsandmedia.com, rogerscentre.com
194.37.82.•••:443 - 🇬🇧 United Kingdom Yes false Clean AS210329Kamatera IncVPSServer.com London UK14/04/2026, 16:51:5817/04/2026, 23:57:26 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2017-8923, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-21703, CVE-2021-21704, CVE-2021-21705, CVE-2021-21706, CVE-2021-21707, CVE-2021-31618, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31628, CVE-2022-31629, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-37454, CVE-2022-4900, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-5458, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:55:28-
178.104.143.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 16:51:5817/04/2026, 19:28:42 - - ----
49.234.58.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 16:51:5807/07/2026, 01:36:18 Yes Yes APT37, El-Machete-14/04/2026, 16:55:30tencent.com
146.56.128.•••:18789 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationUnknown14/04/2026, 16:51:5804/07/2026, 22:12:36 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 16:55:35eu.org