🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 211 / 10768 (100 per page) Showing: 21001-21100 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 222.140.9.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 20/08/2026, 20:46:41 | 26/08/2026, 07:02:53 | No | No | - | - | 15/08/2026, 00:22:22 | - |
| 2.29.11.•••:18789 | - | 🇫🇮 Finland | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 20/08/2026, 20:46:41 | 21/08/2026, 03:05:36 | No | No | - | - | 15/08/2026, 00:22:24 | - |
| 43.153.132.•••:18789 | - | 🇯🇵 Japan | - | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 20/08/2026, 20:46:40 | 21/08/2026, 03:05:35 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 21/08/2026, 00:22:26 | tencent.com |
| 35.87.14.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/08/2026, 20:46:38 | 21/08/2026, 03:05:33 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-25136, CVE-2023-28531 | 20/08/2026, 20:46:43 | - |
| 207.180.243.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS51167 | Contabo GmbH | Contabo | 20/08/2026, 20:46:38 | 21/08/2026, 08:00:06 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 20:46:45 | contaboserver.net, contabo.de, contabo.net |
| 100.59.140.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS14618 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 20:46:37 | 02/09/2026, 01:46:45 | Yes | No | - | - | 20/08/2026, 20:46:46 | amazonaws.com, amazon.com |
| 101.64.42.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | Unicom Zhejiang Province Network | 20/08/2026, 20:44:49 | 21/08/2026, 04:28:27 | Yes | No | - | - | 20/08/2026, 22:51:36 | chinaunicom.cn |
| 222.140.9.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 20/08/2026, 20:44:47 | 26/08/2026, 08:26:01 | No | No | - | - | 14/08/2026, 22:51:46 | - |
| 100.59.140.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS14618 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 20:44:44 | 02/09/2026, 03:09:57 | Yes | No | - | - | 20/08/2026, 22:51:59 | amazonaws.com, amazon.com |
| 160.187.147.•••:18789 | - | 🇻🇳 Vietnam | Yes | false | Clean | AS151858 | INTERDIGI JOINT STOCK COMPANY | Fastvm Company Limited | 20/08/2026, 20:42:46 | 22/08/2026, 19:58:54 | No | No | - | CVE-2018-5741, CVE-2018-5743, CVE-2018-5744, CVE-2019-6471, CVE-2020-8616, CVE-2020-8617, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2022-2795, CVE-2022-3559, CVE-2022-3620, CVE-2022-37451, CVE-2022-38177, CVE-2022-38178, CVE-2023-2828, CVE-2023-3341, CVE-2023-42114, CVE-2023-42115, CVE-2023-42116, CVE-2023-42117, CVE-2023-42119, CVE-2023-4408, CVE-2023-50387, CVE-2023-50868, CVE-2023-51766, CVE-2024-11187, CVE-2024-1737, CVE-2024-1975, CVE-2024-39929, CVE-2025-67896, CVE-2026-40684, CVE-2026-40685, CVE-2026-40686, CVE-2026-40687, CVE-2026-48840 | 20/08/2026, 21:29:09 | - |
| 172.67.153.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS13335 | Cloudflare, Inc. | Cloudflare | 20/08/2026, 20:42:46 | 22/08/2026, 19:58:54 | Yes | No | - | - | 20/08/2026, 21:29:10 | viagra26.us, giantoakpower.com, streamshop.com, vpnserver.com, associachicagoland.com, shenji-titanium.com, fuyuanwj.com, mandysrestaurant.com.au, applications.com, educorp.com, sh-hibo.com, jxxlxj.com, munchterrace.com.au, visionlogistic.com.ar, convoy.co.uk, bangormotorsports.net, catuan.net, cialis734.us, contentmanager.com, cgmprecast.com, mbarquitectura.com.ar, emeingenieria.com.ar, greenerespiratory.com, uch.co.uk, telecomservices.com, docksidemobilemarine.com, sensormatic.com.ar, tshlkj.net, byteboard.com, sdkyjt.net, luckyplastic.net, icpolaris.com, molinosagro.com.ar, forumcorp.com, dataloop.com, nimsinc.us, 51yuezhi.com, acyclovir22.us, bunasta.eu, hzfeidi.com, horizonoutdoor.net, willsdumpling.com.au, lhrpros.com, mammalous.com.au, coachingtosea.com, associamidatlantic.com, salonnews.com, energyservices.com, sz-jl.com, hoyavision.com.ar, kilpa8canteen.com.au, goldapple-alu.com, youthstream.com, sidus.com.ar, mmmowers.com, msfconstructora.com.ar, redargentina.com.ar, tinsa.com.ar, samsa-acopio.com.ar, slbolt.com, legumnorman.com, fuhuake.com, cityfied.net, hrw.net, emcottawa.com, docksidemobile.com, playergroup.com, abpincorp.com, winaros.co.id, smartloop.com, globalsolutions.com, rightwaytrading.net, wenchyuan.com, informationsystems.com, buritec.com.ar, energypoints.com, billingcenter.com, anlink.net, globalexchange.net, thurgoonadine-intakeaway.com.au, jxygcy.com, pxc.co.uk, xl-flex.com, yac-agcc.com, thepathtowell-being.com, tourservices.com, jekotrade.com, 33rdcompany.com, hmcxjc.com, originalsoulvegetarian.com, keysofbetterlifecounselingpllc.com, shsinotech.com, vbankph.com, asiankitchenpeatsridge.com.au, xjhhcm.com, bopcon.com, dhl.com.ar, jck.co.uk, jiuliproduce.com, jcommerce.com, helmcrop.ar, ytxweb.net, jennifermorehousemft.com, wfsystems.com.ar, eurobank.com, graphicconnection.com, discountcarpet-sby.com, xiaoshejia.com, campmgmt.com, vccms.com, itradeonline.com, mpls.org, houcomm.com, pmghouston.com, wecastnetworkinc.com, etz.co.uk, gdheyin.com, mccarthysmarine.com, chinasyh.net, boyu-group.com, fiyanoventures.com, tradebrite.eu, ekakitchen.com, freshdirect.com.sg, carleaseusa.com, theinnotech.net, jyskaiyue.com, retificioribola.eu, wisehousetech.com, kebabexpresspizza.com.au, metrocentre.co.uk, cloudflare.net, cyclecitycorp.com, chinahongkun.com, dansmotorsports.com, vur.co.uk, ceostream.com, channel.net, hospitalar.com, qd-baolian.com, leatherpoint.eu, csofam.com, indiantandoorialbury.com.au, handyman.com, co.com, colonialbus.com, galleryconnection.com, jstream.com, dougsrepairllc.com, claropay.com.ar, ebras.com.ar, machinesummit.com, globalventures.com, richeyandclapper.com, adeysteelgroup.co.uk, kidsbud.net, longrentalproperties.com, tricountysupply.biz, thefishshoploganvillage.com.au, caff.com.ar, chicpartydress.com, cognitivetherapyandtrainingcenter.com, govcoin.com, jxlingtong.com, adviplast.eu, manuellajara.com.ar, fpk.co.uk, namingsystem.com, clevelandcityforge.com, zbhonghe.com, allseasonsequipinc.com, verisure.com.ar, wellead.net, windwardboats.com, carterpowersports.com, ss-web.com, baselinewoods.com, poisesoft.net, luxuryventures.com, ankarakebabs.com.au, amorsui.com, jte.co.uk, cmc-management.com, associans.com, referral.com, jiabinnu.com, allpowereq.com, sciencesuite.com, gylenterprise.com.ar, bulgaria-offroad.com, spreadsheet.co.uk, dowdatractor.com, investmentgroup.com, platinumtitlepartners.com, qzz.io, birminghamneograft.com, angelesromero.com.ar, americanmarineny.com, myarison.com, lendstream.com, antoniettimarine.com, bigironequipment.com, pantexinternational.it, careagent.com, oceansbasketbucasia.com.au, kfstock.com, pym.co.uk, vbuilders.com, kinetika.cn, gaesargentina.com.ar, softersuccess.com, brownsprinting.com, bluevalleytractor.com, schmidtspower.com, brightpathfamilytherapy.com, lakelandlawneq.com, tastytibetantreats.com.au, rivalcorp.com, cloudhq-mkt6.net, integritylawnservice.net, valenciamoldremediation.us, associabc.ca, socialsuite.com, forwardwirecloth.net, fgb.co.uk, forestpowersports.com, adhoc.ar, canyonstatebus.com, overbymarine.com, cclvcr.com, wxkewei.com, anichemspeciality.com, klmymmyc.com, aeschliman.com, tienda-spar.com.ar, homemaintenance.com, gydz.net, aureoarquitectura.com.ar, shorewindowcleaning.com, lynnswestsidemarine.com, cedarlakesales.com, gzfantai.net, adsargentina.com.ar, toyotatransport.com.ar, carsonbrostractor.com, jefferys.co.uk, rpmanagement.com, etsportspolaris.com, hibetw.com, xweiying.com, tcl.eu, luckystartakeaway.com.au, mrtkebab.com.au, pp.ua, hnbeixiang.com, mingstone.net, associanortherncalifornia.com, everymantherapy.com, dellatoffola.com.ar, refee.net, cyric.eu, americanexpedition.us, funcentercycles.com, sunwahasiancuisine.com.au, xjzljt.net, xjjingyoga.com, gpchain.com, dongfanggufen.net, sxgas.net, landarc.com, coronde.net, jialilace.com, lambonbrunswickonline.com.au, gracefamilyhealth.net, trazaweb.com.ar, wertzpowerequipment.com, 1haojiyin.com, customerprofile.com, phogerliciousonline.com.au, tradeit.com.ar, aibituo.net, apmofil.com, dzrjx.net, tjwipes.net, sicesrl.eu, olc.com.ar, rentbuilderpropertymanagement.com, kimberly-clark.co.za, readystaffing.com, eurosteelsrl.eu, ventureos.com, associahawaii.com, cofcohg.com, malibupress.com, urbanisma.com.ar, imobile.com, devonlane.com, contrib.com, mederi.com.ar, jkorcounseling.com, guidomogetta.com.ar, plasmacontrol.com.ar, learningwire.com, fundicionpalazzo.com.ar, iriswellnessservices.com, leixinfoods.net, detongwiremesh.com, goldplateck.com, amv.com.ar, andersonequipment.net, communityservices.com, marksasvary.com, kallanda.com, tradingcorp.com, eshares.com, sanhoos.com, highwaykebabsonline.com.au, levitra25.us, dgclh.com, zithromax22.us, bamko.net, ausarabbusinesscouncil.com, lusbyhardware.com, tcstk.com, hansecontrol.com, lstcarbon.com, it.com, explosive.co.uk, jingyucn.net, touchstoneproperties-hawaii.com, decongroup.com.ar, kitchenservices.com, ttstest.com, endeavorsuite.com, pergamitaly.eu, bridgestone.com.ar, cajunoutboards.com, gaetanasnyc.com, oukay.net, associahawaiirentalsandsales.com, infiniteobjects.com, golfcartpc.com, apo-led.com, dqbxg.com, irrigationsystems4u.com, nutrienagsolutions.com.ar, moreno-infoweb.com.ar, flamcounseling.com, associaflorida.com, socialpoint.com, bnw163.net, igistec.com, jandjoutdoorpower.com, yhjgkeji.com, ebonyshemalevideos.com, emasrl.com.ar, cqsl.com.cn, parexklaukol.com.ar, hoabusinesssolutions.com, ctcrabogados.ar, cshczfz.com, realtydao.com, embmanagement.com, epckorealtd.com, hmcoptical.com, elpampeanogomeria.com.ar, pertuttiecommerce.com.ar, mql.co.uk, eadshardware.com, hkmodesto.com, dogsparesort.com, allen-bg.eu, indianhomediner.com.au, xeraliving.fi, china-one.net, gzshengjie56.com, zhejiangzg.com, armstrongtruckandtractor.com, portcast.com, kingdisplay.net, basel.com.ar, eu.org, rdmsrl.com.ar, bierte.com, investcentre.com, yangjiangshilimaoyi.com, jadzdjm.com, wlm.co.uk, pesasybalanzas.com, buildfolio.com, farmacias.com.ar, camsizer.cn, elkinsmotorsports.net, uhg.co.uk, gungahlinkebabandpizza.com.au, tailwindgroup.com, com.de, iptunnel.com, roche.com, ttyt360.com, rgcinversiones.com.ar, innerarrowcounseling.com, casperpeaceofmind.com, rayinmind.com, bycast.com, leadstream.net, grupoakua.com.ar, principal-mgmt.com, alphaquimica.com.ar, midatlanticheatair.com, myi.co.uk, elaflex.com.ar, mckaymanagement.com, jz5288.com, spiceonwheels.com.au, battlefieldcounselingcenters.com, bayviewhomecare.com, jyb.co.uk, taskmgmt.com, postacred.com.ar, centralpowerequipment.com, harting.it, bonnerturkishkebab.com.au, kalaifashions.com, countryequipmentservice.com, winghouse.dk, hullygully.com, priligy33.us, cymbalta20.us, servicetech.com, realpropertymanagement.com, hygroup.net, bparsa.com.ar, scs-management.com, arniespowersports.com, venturepub.com, partyworld.com, basis.org, woodlandhillsurgentcarecenter.com, zgkaite.com, turnoutservices.com, genesisoxygen.com, akseker.com, achernar.ar, northstarind.com, storage.co.uk, kramertriad.com, zjdddl.com, gngonzales.com, brandformance.com.ar, ranscustombuilders.com, invoice.co.uk, markmillermarine.com, pricolodental.com.ar, venturesystems.com, huadewood.com, cmcjaxfla.com, institutocardiovascularsanluis.com.ar, allegribriganti.it, gaoyimall.net, business-services.com, linked.com, associa.us, inacom-sby.com, indisindianrestaurantonline.com.au, associasn.com, mccarthys-sales.com, shishshawarmagrill.com.au, trelo.eu, wisetechglobal.com.ar, vwr.co.uk, donaldholmconstruction.com, balawn.com, proteologics.com, vnoc.com, harting.com, pavimental.it, erythromycin22.us, ljgyp.net, fundchannel.com, bryantpolaris.com, gjn.co.uk, szsbs.net, agromarketing.com.ar, oracle-ag.ch, boonespowerequipment.com, comsource.com, tsquareproperties.net, ksanawines.com.ar, zjhrbz.com, zhaowoo.net, conceptocreativo.com.ar, fzfortune.net, burgmanagement.com, jescoboatingcenter.com, itmanage.net, mrz.co.uk, driggerssmallengine.com, single-pair-ethernet.com, thetowersonparklane.com, eb5aig.net, reservationcenter.com, motioncycleofderidder.com, charicenoodlebarnewport.com.au, constro.eu, chicomotorsports.com, lightkep.com, vzn.co.uk, yerxaspowerequipment.com, bestwanhui.com, newgoldensaffrononline.com.au, jbw.co.uk, thecalmingroom.net, hkbolton.com, gulfcoastrehabservices.com, retrospectcounseling.com, centrolinux.com.ar, 869606.com, mark1airforce.com, evergreenmgt.com, goldenstream.com, transcendsoftware.net, bain86.com, prescottmgt.com, fodelpa.com.ar, hsn.com.br, patagoniabioenergia.com.ar, strongvalve.com, therapyatsonder.com, goldtreecounseling.com, zhujigema.net, marquishoa.com, interlan.com, kao.co.uk, parker-brown.com, automations.com, willeysmarine.com, yoshikawa-h.com, copraibera.com.ar, globalexport.com, hmimgmt.com, santillana.com.ar, aquaproswimmingpools.com, taocimall.com, broasterchickenwetherillpark.com.au, jetcost.com, counseling-connections.com, fedcomm.com, cle.ar, mid-ohio.com, yijia-audio.com, northparkcafe.com.au, workers.dev, incoagro.com, whzn.net, ipmhoa.com, yanglichina.com, texans.com, ghr-ec.com, extremepowersports.net, photochallenge.com, vdx.co.uk, reteck.net, associacares.org, grangersllc.com, nqtrader.us, drminternet.com, artslawnmowershop.com, corasa.com.ar, marinehub.com, filmteck.com, tigerexpressfuel.com, endeavorfc.com, buildcorp.com, kimberly-clark.ru, roche.it, dolciariavaldenza.it, 360-xj.com, citiesmanagement.com, jordanstk.com, xjwfcj.com, co.zm, datacasting.com, appservice.com, sglcfj.com, bluemountaincommunity.com, cgres.com, helpstream.com, patentboard.com, constructionforum.com, leitermanagement.com, cerapm.com, pet-bottle.net, realtyconsultant.com, acterim.eu, jcrefrigeracion.com.ar, whole-health-wellness.com, actionps.com, kaidumpling.com.au, importandexportspecializedequipmentandservicesinc.com, associaonline.com, emerckupdates.com.ar, datacommunications.com, fundacionsiemens.com.ar, miamitelevision.com, cannabiscorp.com, mcgavicoutdoorpower.com, impresosmonterrey.com, shworldbest.com, bairnsdalechickenland.com.au, aumax.com.ar, zsnet.net, aaoceanfront.com, ladysmithmotorsports.com, aspirewy.com, medbrokers.com, wilsonstreetstore.com.au, dongguansenzi.com, argentino.com.ar, cspnet.it, homesideproperties.com, rokisoft.com.ar, associamexico.com, energystorage.com, carmaxbolivia.com, ckxoh.com, sdfengze.net, barefootdreams.net, cheyennemotorsports.com, fyinn.net, stoltzfusinc.com, china114.net, venturebuilder.com, stormlawnandgarden.com, lassocountry.com, propetchina.com, gallatinrec.com, qyfxs.cn, shopeagleeye.com, 1800ventures.com, hightech.net, vma-murano.it, rockmanfamilycounseling.com, mendozaexports.com.ar, musgos.ar, techxp.eu, hy189.net, associacolorado.com, cialis23.us, northerncomforthvac.com, plainfieldequipment.com, excelon.com, nnj.com, 50below.com, abelectricians.com.au, xjhongshun.com, renova.com.ar, kibointernational.eu, gur-is.eu, kimberlyclark.com, konfetki.ru, livehcm.com, neighborhoodsplus.com, cornerstaffing.com, associahillcountry.com, chimneycornerlawnmower.com, geochem.org, tomoloo.cn, micks.co.uk, australianevents.com.au, allseasonshonda.net, dmln.net, shzhongyi.net, cartons.co.uk |
| 2.29.11.•••:18789 | - | 🇫🇮 Finland | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 20/08/2026, 20:42:46 | 22/08/2026, 19:58:54 | No | No | - | - | 14/08/2026, 21:29:12 | - |
| 54.20.66.•••:6503 | - | 🇺🇸 United States | - | true | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 20/08/2026, 20:09:55 | 10/09/2026, 12:04:36 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 20:12:36 | amazonaws.com, amazon.com |
| 14.220.192.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 20/08/2026, 20:06:05 | 21/08/2026, 07:19:36 | Yes | No | - | - | 20/08/2026, 22:16:03 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 134.209.163.•••:9197 | - | 🇺🇸 United States | Yes | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 20/08/2026, 20:06:05 | 08/09/2026, 13:07:58 | No | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 22:16:09 | - |
| 18.169.55.•••:443 | - | 🇬🇧 United Kingdom | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 20:06:05 | 21/08/2026, 07:19:35 | No | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 20/08/2026, 22:16:10 | - |
| 171.213.198.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 20/08/2026, 20:06:04 | 21/08/2026, 07:19:35 | No | No | - | - | 14/08/2026, 22:16:14 | - |
| 222.95.252.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | ChinaNet Jiangsu | 20/08/2026, 20:06:04 | 07/09/2026, 08:25:38 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 22:16:18 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 198.46.189.•••:10020 | - | 🇺🇸 United States | Yes | true | Leaked | AS36352 | HostPapa | RackNerd | 20/08/2026, 20:06:03 | 10/09/2026, 12:01:10 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 22:16:21 | racknerd.com |
| 183.156.208.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 20/08/2026, 20:06:03 | 23/08/2026, 23:38:28 | No | No | - | - | 14/08/2026, 22:16:29 | - |
| 47.84.56.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 20/08/2026, 20:06:02 | 10/09/2026, 02:48:23 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 22:16:36 | hichina.com, alibaba-inc.com |
| 169.58.186.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS51167 | Contabo GmbH | Contabo | 20/08/2026, 20:06:01 | 05/09/2026, 06:29:11 | Yes | No | - | - | 05/09/2026, 03:44:35 | contaboserver.net, contabo.de, contabo.net |
| 117.84.131.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Jiangsu | 20/08/2026, 20:04:23 | 21/08/2026, 01:41:44 | Yes | No | - | - | 21/08/2026, 00:20:28 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 14.220.192.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 20/08/2026, 20:04:16 | 21/08/2026, 02:23:47 | Yes | No | - | - | 21/08/2026, 00:21:17 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 134.209.163.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 20/08/2026, 20:04:16 | 08/09/2026, 08:04:30 | No | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 21/08/2026, 00:21:23 | - |
| 18.169.55.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 20:04:16 | 21/08/2026, 02:23:47 | No | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 21/08/2026, 00:21:24 | - |
| 171.213.198.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 20/08/2026, 20:04:15 | 21/08/2026, 02:23:46 | No | No | - | - | 15/08/2026, 00:21:26 | - |
| 222.95.252.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | ChinaNet Jiangsu | 20/08/2026, 20:04:14 | 07/09/2026, 04:03:12 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 21/08/2026, 00:21:33 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 183.156.208.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 20/08/2026, 20:04:12 | 23/08/2026, 18:39:34 | No | No | - | - | 15/08/2026, 00:21:42 | - |
| 47.84.56.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 20/08/2026, 20:04:11 | 09/09/2026, 21:46:23 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 21/08/2026, 00:21:48 | hichina.com, alibaba-inc.com |
| 169.58.186.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS51167 | Contabo GmbH | Contabo | 20/08/2026, 20:04:11 | 05/09/2026, 02:07:56 | Yes | No | - | - | 04/09/2026, 19:44:54 | contaboserver.net, contabo.de, contabo.net |
| 134.209.163.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 20/08/2026, 20:02:27 | 08/09/2026, 10:10:32 | No | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 20:06:12 | - |
| 171.213.198.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 20/08/2026, 20:02:27 | 21/08/2026, 03:46:11 | No | No | - | - | 14/08/2026, 20:06:15 | - |
| 222.95.252.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | ChinaNet Jiangsu | 20/08/2026, 20:02:26 | 07/09/2026, 06:10:29 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 20:06:19 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 198.46.189.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS36352 | HostPapa | RackNerd | 20/08/2026, 20:02:26 | 10/09/2026, 09:50:09 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 20:06:21 | racknerd.com |
| 183.156.208.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 20/08/2026, 20:02:24 | 23/08/2026, 19:19:46 | No | No | - | - | 14/08/2026, 20:06:27 | - |
| 47.84.56.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 20/08/2026, 20:02:23 | 09/09/2026, 23:53:00 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 20:06:33 | hichina.com, alibaba-inc.com |
| 206.189.225.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 20/08/2026, 20:00:28 | 03/09/2026, 13:48:09 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 21:28:58 | - |
| 77.67.23.•••:18789 | - | 🇳🇱 Netherlands | - | false | Clean | AS57043 | HOSTKEY B.V. | Hostkey | 20/08/2026, 20:00:28 | 22/08/2026, 19:16:26 | - | - | - | - | - | - |
| 134.209.163.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 20/08/2026, 20:00:28 | 10/09/2026, 04:07:29 | No | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 21:29:01 | - |
| 18.169.55.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 20:00:28 | 22/08/2026, 19:16:26 | No | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 20/08/2026, 21:29:03 | - |
| 118.21.39.•••:18789 | - | 🇯🇵 Japan | - | false | Clean | AS4713 | NTT DOCOMO BUSINESS,Inc. | NTT Docomo Business | 20/08/2026, 20:00:27 | 22/08/2026, 19:58:54 | - | - | - | - | - | - |
| 13.209.10.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 20/08/2026, 20:00:27 | 29/08/2026, 09:55:31 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 20/08/2026, 21:29:07 | - |
| 137.184.104.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 20/08/2026, 19:25:44 | 26/08/2026, 22:06:34 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2016-0777, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 19:29:00 | takin.it |
| 117.84.131.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Jiangsu | 20/08/2026, 19:23:53 | 21/08/2026, 06:37:58 | Yes | No | - | - | 20/08/2026, 22:15:15 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 35.236.163.•••:18789 | Assistant | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 20/08/2026, 19:23:52 | 03/09/2026, 13:11:05 | No | No | - | - | 14/08/2026, 22:15:20 | - | |
| 39.73.233.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 20/08/2026, 19:23:52 | 07/09/2026, 21:26:37 | No | No | - | - | 14/08/2026, 22:15:25 | - |
| 152.136.204.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 20/08/2026, 19:23:51 | 21/08/2026, 07:19:39 | No | Yes | APT-C-50, APT35, APT36, APT37, Carbanak, Cobalt Group, DarkHotel Group, Domestic Kitten, El-Machete, Equation Group, Hafnium Group, MuddyWater Group, TA428 | CVE-2006-7243, CVE-2010-2531, CVE-2010-2950, CVE-2010-3436, CVE-2010-3709, CVE-2010-3710, CVE-2010-3870, CVE-2010-4150, CVE-2010-4409, CVE-2010-4645, CVE-2010-4657, CVE-2010-4697, CVE-2010-4698, CVE-2010-4699, CVE-2010-4700, CVE-2011-0421, CVE-2011-0708, CVE-2011-0753, CVE-2011-0754, CVE-2011-0755, CVE-2011-1092, CVE-2011-1148, CVE-2011-1153, CVE-2011-1398, CVE-2011-1464, CVE-2011-1466, CVE-2011-1467, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470, CVE-2011-1471, CVE-2011-1938, CVE-2011-1939, CVE-2011-2202, CVE-2011-2483, CVE-2011-3182, CVE-2011-3267, CVE-2011-3268, CVE-2011-3336, CVE-2011-4566, CVE-2011-4718, CVE-2011-4885, CVE-2012-0057, CVE-2012-0788, CVE-2012-0789, CVE-2012-0831, CVE-2012-1171, CVE-2012-1172, CVE-2012-1823, CVE-2012-2143, CVE-2012-2311, CVE-2012-2336, CVE-2012-2376, CVE-2012-2386, CVE-2012-2688, CVE-2012-3365, CVE-2012-3450, CVE-2012-4388, CVE-2013-1635, CVE-2013-1643, CVE-2013-1824, CVE-2013-2110, CVE-2013-3735, CVE-2013-4113, CVE-2013-4248, CVE-2013-4635, CVE-2013-6420, CVE-2013-6501, CVE-2013-6712, CVE-2013-7327, CVE-2014-0185, CVE-2014-0207, CVE-2014-0236, CVE-2014-0237, CVE-2014-0238, CVE-2014-2020, CVE-2014-2270, CVE-2014-2497, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-3515, CVE-2014-3587, CVE-2014-3597, CVE-2014-3668, CVE-2014-3669, CVE-2014-3670, CVE-2014-3981, CVE-2014-4049, CVE-2014-4670, CVE-2014-4721, CVE-2014-5459, CVE-2014-8142, CVE-2014-9425, CVE-2014-9426, CVE-2014-9427, CVE-2014-9652, CVE-2014-9653, CVE-2014-9705, CVE-2014-9767, CVE-2014-9912, CVE-2015-0231, CVE-2015-0232, CVE-2015-0273, CVE-2015-1351, CVE-2015-1352, CVE-2015-2331, CVE-2015-2348, CVE-2015-2783, CVE-2015-2787, CVE-2015-3307, CVE-2015-3329, CVE-2015-3330, CVE-2015-3411, CVE-2015-3412, CVE-2015-4021, CVE-2015-4022, CVE-2015-4024, CVE-2015-4025, CVE-2015-4026, CVE-2015-4116, CVE-2015-4147, CVE-2015-4148, CVE-2015-4598, CVE-2015-4599, CVE-2015-4600, CVE-2015-4601, CVE-2015-4602, CVE-2015-4603, CVE-2015-4604, CVE-2015-4605, CVE-2015-4642, CVE-2015-4643, CVE-2015-4644, CVE-2015-5589, CVE-2015-5590, CVE-2015-6831, CVE-2015-6832, CVE-2015-6833, CVE-2015-6834, CVE-2015-6835, CVE-2015-6836, CVE-2015-6837, CVE-2015-6838, CVE-2015-7803, CVE-2015-7804, CVE-2015-8835, CVE-2015-8838, CVE-2015-8865, CVE-2015-8873, CVE-2015-8874, CVE-2015-8877, CVE-2015-8879, CVE-2015-8935, CVE-2015-8994, CVE-2015-9253, CVE-2016-0742, CVE-2016-0746, CVE-2016-0747, CVE-2016-10158, CVE-2016-10159, CVE-2016-10161, CVE-2016-10397, CVE-2016-10712, CVE-2016-1247, CVE-2016-1903, CVE-2016-2554, CVE-2016-3141, CVE-2016-3142, CVE-2016-3185, CVE-2016-4070, CVE-2016-4342, CVE-2016-4343, CVE-2016-4450, CVE-2016-4537, CVE-2016-4538, CVE-2016-4539, CVE-2016-4540, CVE-2016-4541, CVE-2016-4542, CVE-2016-4543, CVE-2016-5093, CVE-2016-5094, CVE-2016-5095, CVE-2016-5096, CVE-2016-5114, CVE-2016-5399, CVE-2016-5768, CVE-2016-5769, CVE-2016-5770, CVE-2016-5771, CVE-2016-5772, CVE-2016-5773, CVE-2016-6174, CVE-2016-6288, CVE-2016-6289, CVE-2016-6290, CVE-2016-6291, CVE-2016-6292, CVE-2016-6294, CVE-2016-6295, CVE-2016-6296, CVE-2016-6297, CVE-2016-7124, CVE-2016-7125, CVE-2016-7126, CVE-2016-7127, CVE-2016-7128, CVE-2016-7129, CVE-2016-7130, CVE-2016-7131, CVE-2016-7132, CVE-2016-7411, CVE-2016-7412, CVE-2016-7413, CVE-2016-7414, CVE-2016-7416, CVE-2016-7417, CVE-2016-7418, CVE-2016-7478, CVE-2016-9137, CVE-2016-9138, CVE-2016-9934, CVE-2016-9935, CVE-2017-11142, CVE-2017-11143, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11628, CVE-2017-12933, CVE-2017-16642, CVE-2017-20005, CVE-2017-7272, CVE-2017-7529, CVE-2017-7890, CVE-2017-7963, CVE-2017-8923, CVE-2017-9067, CVE-2017-9224, CVE-2017-9225, CVE-2017-9226, CVE-2017-9229, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-15132, CVE-2018-16845, CVE-2018-17082, CVE-2018-19395, CVE-2018-19396, CVE-2018-19520, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-20372, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9023, CVE-2019-9024, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2021-23017, CVE-2021-3618, CVE-2022-31628, CVE-2022-31629, CVE-2022-41741, CVE-2022-41742 | 20/08/2026, 22:15:32 | - |
| 14.155.201.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 20/08/2026, 19:23:51 | 21/08/2026, 07:19:38 | Yes | No | - | CVE-2023-44487, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 22:15:43 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, asuscomm.com, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 191.193.82.•••:18789 | - | 🇧🇷 Brazil | Yes | false | Leaked | AS27699 | TELEFÔNICA BRASIL S.A | Telefonica Brasil | 20/08/2026, 19:23:49 | 21/08/2026, 07:19:37 | Yes | No | - | - | 20/08/2026, 22:15:52 | vidav.com.br, vivo.com.br, telefonicacelular.com.br, telefonica.com, telefonica.com.br, ajato.com.br, vivae.com.br, gvt.com.br, vivoplataformadigital.com.br |
| 52.62.151.•••:443 | - | 🇦🇺 Australia | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/08/2026, 19:23:49 | 10/09/2026, 10:36:08 | No | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 20/08/2026, 22:15:58 | - |
| 2a02:4780:41:9e1b::1:18789 | - | 🇩🇪 Germany | - | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 20/08/2026, 19:22:10 | 07/09/2026, 22:49:45 | - | - | - | - | - | - |
| 221.237.9.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 20/08/2026, 19:22:07 | 21/08/2026, 00:59:40 | No | No | - | - | 15/08/2026, 00:20:19 | - |
| 35.190.175.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 20/08/2026, 19:22:06 | 03/09/2026, 01:51:13 | No | - | - | - | 15/08/2026, 00:20:25 | - | |
| 113.128.105.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Shandong | 20/08/2026, 19:22:06 | 23/08/2026, 15:49:30 | Yes | No | - | - | 21/08/2026, 00:20:26 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 35.236.163.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 20/08/2026, 19:22:04 | 03/09/2026, 08:11:46 | No | No | - | - | 15/08/2026, 00:20:34 | - | |
| 39.73.233.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 20/08/2026, 19:22:04 | 07/09/2026, 16:21:34 | No | No | - | - | 15/08/2026, 00:20:37 | - |
| 191.193.82.•••:18789 | - | 🇧🇷 Brazil | Yes | false | Leaked | AS27699 | TELEFÔNICA BRASIL S.A | Telefonica Brasil | 20/08/2026, 19:21:59 | 21/08/2026, 01:41:39 | Yes | No | - | - | 21/08/2026, 00:21:07 | vidav.com.br, vivo.com.br, telefonicacelular.com.br, telefonica.com, telefonica.com.br, ajato.com.br, vivae.com.br, gvt.com.br, vivoplataformadigital.com.br |
| 35.190.175.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 20/08/2026, 19:20:12 | 03/09/2026, 03:13:40 | No | - | - | - | 14/08/2026, 20:05:41 | - | |
| 117.84.131.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Jiangsu | 20/08/2026, 19:20:12 | 21/08/2026, 02:21:51 | Yes | No | - | - | 20/08/2026, 20:05:42 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 35.236.163.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 20/08/2026, 19:20:10 | 03/09/2026, 09:34:40 | No | No | - | - | 14/08/2026, 20:05:46 | - | |
| 39.73.233.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 20/08/2026, 19:20:10 | 07/09/2026, 17:46:28 | No | No | - | - | 14/08/2026, 20:05:50 | - |
| 137.184.104.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 20/08/2026, 19:18:12 | 22/08/2026, 18:33:39 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2016-0777, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 21:28:56 | takin.it |
| 15.228.127.•••:15432 | - | 🇧🇷 Brazil | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Brazil | 20/08/2026, 18:45:22 | 10/09/2026, 12:04:36 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 20/08/2026, 18:49:20 | - |
| 54.188.251.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/08/2026, 18:41:35 | 21/08/2026, 05:56:08 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 22:14:29 | - |
| 222.79.193.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 20/08/2026, 18:41:34 | 24/08/2026, 04:35:59 | Yes | No | - | - | 20/08/2026, 22:14:32 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 2a02:4780:41:9e1b::1:18789 | - | 🇩🇪 Germany | - | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 20/08/2026, 18:41:34 | 08/09/2026, 03:50:27 | - | - | - | - | - | - |
| 15.204.108.•••:10125 | - | 🇺🇸 United States | Yes | true | Leaked | AS16276 | OVH SAS | Sd One Network | 20/08/2026, 18:41:33 | 09/09/2026, 18:17:00 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 22:14:46 | ovhcloud.com |
| 47.99.240.•••:8443 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 20/08/2026, 18:41:33 | 21/08/2026, 06:38:01 | No | No | - | - | 14/08/2026, 22:14:49 | - |
| 34.174.184.•••:18789 | Assistant | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 20/08/2026, 18:41:32 | 05/09/2026, 01:27:26 | No | No | - | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 22:14:54 | - | |
| 3.81.216.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 18:41:32 | 08/09/2026, 21:44:12 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 22:14:55 | - |
| 221.237.9.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 20/08/2026, 18:41:32 | 21/08/2026, 06:37:59 | No | No | - | - | 14/08/2026, 22:15:02 | - |
| 89.169.97.•••:18789 | - | 🇫🇮 Finland | Yes | false | Clean | AS213291 | Nebius B.V. | Nebius DC | 20/08/2026, 18:41:31 | 24/08/2026, 14:35:18 | No | Yes | Salt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 22:15:06 | - |
| 125.47.63.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 20/08/2026, 18:41:31 | 21/08/2026, 06:37:59 | Yes | No | - | - | 20/08/2026, 22:15:07 | chinaunicom.cn |
| 169.58.122.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS51167 | Contabo GmbH | Contabo | 20/08/2026, 18:41:31 | 10/09/2026, 12:00:02 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002, CVE-2026-73281, CVE-2026-73282, CVE-2026-73283 | 04/09/2026, 14:09:05 | contabo.de, contabo.net, sl-reverse.com |
| 171.213.195.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 20/08/2026, 18:41:31 | 24/08/2026, 08:10:06 | No | No | - | - | 14/08/2026, 22:15:09 | - |
| 18.184.3.•••:8443 | - | 🇩🇪 Germany | Yes | true | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 20/08/2026, 18:41:31 | 10/09/2026, 08:29:10 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 22:15:10 | - |
| 35.190.175.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 20/08/2026, 18:41:31 | 03/09/2026, 06:07:07 | No | - | - | - | 15/08/2026, 03:12:18 | - | |
| 113.128.105.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Shandong | 20/08/2026, 18:41:31 | 23/08/2026, 21:30:47 | Yes | No | - | - | 20/08/2026, 22:15:12 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 103.63.111.•••:18789 | - | 🇻🇳 Vietnam | - | true | Clean | AS45903 | CMC Telecom Infrastructure Company | CMC Telecommunication Infrastructure Corporation | 20/08/2026, 18:39:45 | 10/09/2026, 11:16:59 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2005-0004, CVE-2012-0540, CVE-2012-0572, CVE-2012-0574, CVE-2012-0578, CVE-2012-1688, CVE-2012-1689, CVE-2012-1690, CVE-2012-1697, CVE-2012-1702, CVE-2012-1703, CVE-2012-1705, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757, CVE-2012-2750, CVE-2012-3150, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163, CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2012-5096, CVE-2012-5612, CVE-2012-5614, CVE-2012-5627, CVE-2013-0367, CVE-2013-0368, CVE-2013-0371, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0386, CVE-2013-0389, CVE-2013-1502, CVE-2013-1506, CVE-2013-1511, CVE-2013-1512, CVE-2013-1521, CVE-2013-1523, CVE-2013-1526, CVE-2013-1531, CVE-2013-1532, CVE-2013-1544, CVE-2013-1548, CVE-2013-1552, CVE-2013-1555, CVE-2013-1861, CVE-2013-2375, CVE-2013-2376, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3783, CVE-2013-3793, CVE-2013-3794, CVE-2013-3801, CVE-2013-3802, CVE-2013-3804, CVE-2013-3805, CVE-2013-3808, CVE-2013-3809, CVE-2013-3812, CVE-2013-3839, CVE-2013-5807, CVE-2013-5891, CVE-2013-5908, CVE-2014-0001, CVE-2014-0384, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0420, CVE-2014-0437, CVE-2014-2419, CVE-2014-2430, CVE-2014-2431, CVE-2014-2432, CVE-2014-2436, CVE-2014-2438, CVE-2014-2440, CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484, CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496, CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559, CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2325, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-3152, CVE-2015-4752, CVE-2015-4757, CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2015-7744, CVE-2016-0502, CVE-2016-0610, CVE-2016-0616, CVE-2016-0642, CVE-2016-0651, CVE-2016-10735, CVE-2016-20012, CVE-2016-3471, CVE-2016-3492, CVE-2016-5584, CVE-2016-5612, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-6664, CVE-2016-7440, CVE-2016-9843, CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-15365, CVE-2017-15945, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3302, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3600, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2018-14040, CVE-2018-14042, CVE-2018-15473, CVE-2018-15919, CVE-2018-20676, CVE-2018-20677, CVE-2018-20685, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819, CVE-2018-3058, CVE-2018-3063, CVE-2018-3066, CVE-2018-3081, CVE-2018-3133, CVE-2018-3174, CVE-2018-3282, CVE-2019-2455, CVE-2019-2481, CVE-2019-2503, CVE-2019-2529, CVE-2019-2614, CVE-2019-2627, CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805, CVE-2019-2974, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-8331, CVE-2020-14145, CVE-2020-14550, CVE-2020-15778, CVE-2020-2574, CVE-2020-2752, CVE-2020-2780, CVE-2020-2812, CVE-2020-28912, CVE-2020-2922, CVE-2021-2007, CVE-2021-2011, CVE-2021-2144, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2021-46659, CVE-2021-46666, CVE-2021-46667, CVE-2021-46669, CVE-2022-27385, CVE-2022-27449, CVE-2022-31621, CVE-2022-31622, CVE-2022-31623, CVE-2022-31624, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5157, CVE-2024-6484, CVE-2024-6485, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-23918, CVE-2026-24072, CVE-2026-28780, CVE-2026-29168, CVE-2026-29169, CVE-2026-33006, CVE-2026-33007, CVE-2026-33523, CVE-2026-33857, CVE-2026-34032, CVE-2026-34059 | 20/08/2026, 18:40:53 | cmcti.vn |
| 54.188.251.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/08/2026, 18:39:45 | 21/08/2026, 00:59:45 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 18:40:57 | - |
| 222.79.193.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 20/08/2026, 18:39:45 | 23/08/2026, 22:53:45 | Yes | No | - | - | 20/08/2026, 18:41:00 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 38.55.199.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS139659 | LUCIDACLOUD LIMITED | PEG Technology | 20/08/2026, 18:39:44 | 21/08/2026, 08:42:39 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-31908, CVE-2026-31923, CVE-2026-31924, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 18:41:04 | - |
| 34.174.184.•••:18789 | Assistant | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 20/08/2026, 18:39:42 | 04/09/2026, 20:25:17 | No | No | - | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 18:41:19 | - | |
| 3.81.216.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 18:39:41 | 08/09/2026, 15:57:49 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 18:41:20 | - |
| 89.169.97.•••:18789 | - | 🇫🇮 Finland | Yes | false | Clean | AS213291 | Nebius B.V. | Nebius DC | 20/08/2026, 18:39:40 | 24/08/2026, 08:51:02 | No | Yes | Salt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 18:41:30 | - |
| 125.47.63.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 20/08/2026, 18:39:40 | 22/08/2026, 17:12:16 | Yes | No | - | - | 20/08/2026, 18:41:31 | chinaunicom.cn |
| 169.58.122.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS51167 | Contabo GmbH | Contabo | 20/08/2026, 18:39:40 | 07/09/2026, 19:15:04 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002, CVE-2026-73281, CVE-2026-73282, CVE-2026-73283 | 04/09/2026, 15:33:44 | contabo.de, contabo.net, sl-reverse.com |
| 171.213.195.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 20/08/2026, 18:39:39 | 24/08/2026, 03:08:51 | No | No | - | - | 14/08/2026, 18:41:34 | - |
| 18.184.3.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 20/08/2026, 18:39:39 | 10/09/2026, 03:28:41 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 18:41:35 | - |
| 2a02:4780:f:c280::1:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS47583 | Hostinger International Limited | Hostinger | 20/08/2026, 18:37:46 | 21/08/2026, 01:39:44 | - | - | - | - | - | - |
| 54.188.251.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/08/2026, 18:37:45 | 21/08/2026, 01:39:44 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 20:05:17 | - |
| 34.174.184.•••:18789 | Assistant | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 20/08/2026, 18:37:41 | 04/09/2026, 22:34:40 | No | No | - | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 20:05:30 | - | |
| 3.81.216.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 20/08/2026, 18:37:41 | 08/09/2026, 18:48:22 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 20:05:32 | - |
| 125.47.63.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 20/08/2026, 18:37:39 | 22/08/2026, 18:35:33 | Yes | No | - | - | 20/08/2026, 20:05:38 | chinaunicom.cn |
| 38.55.199.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS139659 | LUCIDACLOUD LIMITED | PEG Technology | 20/08/2026, 18:35:42 | 22/08/2026, 17:50:56 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-31908, CVE-2026-31923, CVE-2026-31924, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 21:28:49 | - |
| 208.116.19.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS209341 | WHG Hosting Services Ltd | WHG Hosting Services | 20/08/2026, 17:59:22 | 08/09/2026, 15:17:17 | Yes | No | - | - | 20/08/2026, 22:13:37 | worldhost.group |
| 62.238.121.•••:18789 | - | 🇫🇮 Finland | Yes | false | Leaked | AS24940 | Hetzner Online GmbH | Hetzner | 20/08/2026, 17:59:22 | 21/08/2026, 05:14:06 | Yes | - | - | - | 20/08/2026, 22:13:38 | hetzner.com |
| 106.81.203.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | Chinanet Chongqing | 20/08/2026, 17:59:20 | 24/08/2026, 11:44:15 | No | No | - | - | 14/08/2026, 22:13:53 | - |
| 82.39.205.•••:18789 | - | 🇬🇧 United Kingdom | Yes | true | Leaked | AS199129 | Direct Connect (ISP) Ltd | Direct Connect Wales | 20/08/2026, 17:59:19 | 08/09/2026, 16:42:32 | Yes | No | - | - | 20/08/2026, 22:14:04 | virginm.net |