🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 816988 Page: 2112 / 8170 (100 per page) Showing: 211101-211200 Last Imported: 15/05/2026, 09:32:33
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 2112 of 8170
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
122.51.212.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4516/04/2026, 10:02:40 Yes - --01/04/2026, 05:08:03tencent.com
154.194.183.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS139880OWGELS INTERNATIONAL CO., LIMITEDStarbow Ltd22/03/2026, 14:32:4516/04/2026, 13:43:24 - - ----
2a01:4f8:1c1e:4123::1:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner Online22/03/2026, 14:32:4516/04/2026, 22:48:24 - - ----
50.116.49.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode22/03/2026, 14:32:4517/04/2026, 08:34:34 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-6470, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-8616, CVE-2020-8617, CVE-2020-8618, CVE-2020-8619, CVE-2020-8620, CVE-2020-8621, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-2795, CVE-2022-3094, CVE-2022-38177, CVE-2022-38178, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/04/2026, 07:07:02-
117.72.10.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com22/03/2026, 14:32:4522/03/2026, 15:17:47 - - ----
104.21.30.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare22/03/2026, 14:32:4522/03/2026, 15:17:51 - - ----
111.231.132.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4417/04/2026, 00:18:18 Yes - --10/04/2026, 04:14:18tencent.com
115.44.2.•••:18789 - 🇨🇳 China mainland Yes false Clean AS17962ShenZhen Topway Video Communication Co. LtdShenzhen Topway Video Communication22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
187.230.146.•••:18789 - 🇲🇽 Mexico Yes false Clean AS8151UNINETUninet22/03/2026, 14:32:4404/04/2026, 16:09:41 - - ----
81.69.248.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing22/03/2026, 14:32:4412/04/2026, 23:51:45 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138509/04/2026, 18:26:29-
193.187.129.•••:18789 - 🇫🇷 France Yes false Leaked AS51167Contabo GmbHContabo22/03/2026, 14:32:4417/04/2026, 07:04:17 Yes Yes APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/04/2026, 06:22:30contabo.de, contabo.net
43.153.171.•••:18789 - 🇯🇵 Japan - false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
69.164.244.•••:18789 - 🇯🇵 Japan - false Clean AS19318Interserver, IncWorld ISP Network22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
147.161.70.•••:18789 - 🇪🇸 Spain - false Clean AS35699Adamo Telecom Iberia S.A.Adamo Telecom22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
49.51.73.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueTencent Cloud22/03/2026, 14:32:4415/04/2026, 23:17:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 18:16:07tencent.com
62.72.47.•••:18789 - 🇩🇪 Germany Yes false Clean AS141995Contabo Asia Private LimitedContabo22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
159.75.96.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing22/03/2026, 14:32:4416/04/2026, 01:21:05 - - ----
111.229.163.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4416/04/2026, 19:47:11 - - ----
49.233.198.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
38.55.133.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.PEG Technology22/03/2026, 14:32:4409/04/2026, 06:21:01 No Yes APT28, APT40, Energetic Bear, Equation Group, Leafminer, Luckycat APTCVE-2010-1899, CVE-2010-2730, CVE-2010-3972, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 04:08:18-
104.21.56.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
113.45.219.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud22/03/2026, 14:32:4412/04/2026, 17:08:36 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 20:10:47smartcom.cc, huawei.com, huaweidevice.com
1.14.200.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4417/04/2026, 07:04:23 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161711/04/2026, 00:04:50tencent.com
165.245.179.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean22/03/2026, 14:32:4422/03/2026, 15:17:47 - - ----
8.215.81.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore22/03/2026, 14:32:4415/04/2026, 11:58:41 - - ----
118.196.127.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology22/03/2026, 14:32:4425/03/2026, 09:31:56 - - ----
119.91.54.•••:18789 - 🇨🇳 China mainland - false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4416/04/2026, 23:33:19 Yes - -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 22:52:20tencent.com
43.160.219.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/03/2026, 14:32:4307/04/2026, 04:16:38 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 20:12:38tencent.com
120.48.11.•••:18789 - 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu22/03/2026, 14:32:4317/04/2026, 10:03:48 - - ----
18.175.89.•••:18789 - 🇬🇧 United Kingdom - false Clean AS16509Amazon.com, Inc.Amazon Web Services22/03/2026, 14:32:4316/04/2026, 17:30:29 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 22:11:03-
43.160.231.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/03/2026, 14:32:4318/04/2026, 00:40:17 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 18:06:27tencent.com
119.246.233.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9269Hong Kong Broadband Network Ltd.Hong Kong Broadband Network22/03/2026, 14:32:4303/04/2026, 12:40:31 - - ----
106.13.161.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu22/03/2026, 14:32:4313/04/2026, 14:56:56 - - ----
47.92.242.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/03/2026, 14:32:4316/04/2026, 19:47:16 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 23:12:07-
148.253.213.•••:18789 - 🇳🇱 Netherlands - false Clean AS216129SEBEK sp. z o.oGuard Network22/03/2026, 14:32:4301/04/2026, 10:21:50 - - ----
38.162.118.•••:18789 - 🇺🇸 United States - false Clean AS8796FASTNET DATA INCKurun Cloud22/03/2026, 14:32:4322/03/2026, 15:17:46 - - ----
43.165.7.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/03/2026, 14:32:4301/04/2026, 00:44:08 - - ----
64.188.56.•••:18789 - 🇩🇪 Germany Yes false Clean AS210976Timeweb, LLPTaiwan Cloud22/03/2026, 14:32:4315/04/2026, 13:28:32 - - ----
8.219.91.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore22/03/2026, 14:32:4322/03/2026, 15:17:46 - - ----
89.167.65.•••:18789 - 🇫🇮 Finland - false Clean AS24940Hetzner Online GmbHHetzner22/03/2026, 14:32:4222/03/2026, 15:17:46 - - ----
52.162.234.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft22/03/2026, 14:32:4217/04/2026, 03:19:02 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:31:25-
94.72.96.•••:18789 - 🇩🇪 Germany - false Leaked AS51167Contabo GmbHContabo22/03/2026, 14:32:4215/04/2026, 11:19:36 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 10:07:27contaboserver.net, contabo.de, contabo.net
36.138.159.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS9808China Mobile Communications Group Co., Ltd.China Mobile22/03/2026, 14:32:4210/04/2026, 09:29:58 Yes - --10/04/2026, 03:59:56chinamobile.com, chinamobile.cn
43.99.55.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore22/03/2026, 14:32:4213/04/2026, 14:57:03 - - ----
123.146.33.•••:18789 - 🇨🇳 China mainland - false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Chongqing22/03/2026, 14:32:4222/03/2026, 15:17:45 - - ----
111.229.151.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4218/04/2026, 00:41:08 Yes - -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161703/05/2026, 06:11:23tencent.com
43.156.132.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/03/2026, 14:32:4222/03/2026, 15:17:45 - - ----
159.223.162.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean22/03/2026, 14:32:4214/04/2026, 10:32:57 - - ----
47.92.234.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/03/2026, 14:32:4216/04/2026, 01:20:00 - - ----
103.142.25.•••:18789 - 🇻🇳 Vietnam - false Clean AS135951Webico Company LimitedTino Group22/03/2026, 14:32:4222/03/2026, 15:17:45 - - ----
122.51.100.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4201/04/2026, 13:22:32 - - ----
47.92.166.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/03/2026, 14:32:4217/04/2026, 23:56:37 - - ----
223.83.120.•••:18789 - 🇨🇳 China mainland Yes false Clean AS56045China Mobile communications corporationChina Mobile22/03/2026, 14:32:4222/03/2026, 15:17:45 - - ----
152.42.192.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean22/03/2026, 14:32:4222/03/2026, 15:17:45 - - ----
8.209.226.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Japan22/03/2026, 14:32:4211/04/2026, 03:23:47 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198524/03/2026, 11:26:39-
119.29.148.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4117/04/2026, 04:49:10 Yes No --07/04/2026, 18:16:35tencent.com
194.127.179.•••:18789 - 🇳🇱 Netherlands Yes false Clean AS62240Clouvider - Global ASNClouvider Virtual Machines22/03/2026, 14:32:4112/04/2026, 23:52:04 - - ----
117.72.47.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com22/03/2026, 14:32:4122/03/2026, 15:17:45 - - ----
167.172.238.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean22/03/2026, 14:32:4117/04/2026, 05:34:11 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 12:28:04-
117.72.77.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com22/03/2026, 14:32:4113/04/2026, 12:53:19 - - ----
111.229.31.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4125/03/2026, 08:46:47 - - ----
82.156.236.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing22/03/2026, 14:32:4112/04/2026, 13:42:29 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138512/04/2026, 13:45:37-
18.225.76.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon22/03/2026, 14:32:4018/04/2026, 00:40:59 No No -CVE-2006-20001, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620003/04/2026, 14:12:17-
154.206.189.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS139880OWGELS INTERNATIONAL CO., LIMITEDStarbow Ltd22/03/2026, 14:32:4016/04/2026, 01:21:17 No No --10/04/2026, 00:37:08-
115.120.10.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud22/03/2026, 14:32:4009/04/2026, 21:30:45 Yes No -CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341909/04/2026, 18:13:56smartcom.cc, huawei.com, huaweidevice.com
129.150.42.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationOracle22/03/2026, 14:32:4015/04/2026, 11:19:45 Yes Yes DragonFly, Packrat, goziCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 00:44:27healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
122.51.144.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:4022/03/2026, 15:17:44 - - ----
2a02:4780:4:72e8::1:18789 - 🇺🇸 United States - false Clean AS47583Hostinger International LimitedHostinger22/03/2026, 14:32:4014/04/2026, 19:26:56 - - ----
13.48.248.•••:18789 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon Data Services Sweden22/03/2026, 14:32:4010/04/2026, 03:52:17 - - ----
8.213.228.•••:18789 - 🇸🇬 Singapore - false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore22/03/2026, 14:32:4022/03/2026, 15:17:43 - - ----
43.157.204.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/03/2026, 14:32:4022/03/2026, 15:17:43 - - ----
111.228.55.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters22/03/2026, 14:32:4010/04/2026, 17:43:15 - - ----
104.21.63.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare22/03/2026, 14:32:4022/03/2026, 15:17:43 - - ----
120.48.57.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu22/03/2026, 14:32:4006/04/2026, 05:11:54 - - ----
47.92.109.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/03/2026, 14:32:4015/04/2026, 10:01:59 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161731/03/2026, 11:14:00-
2001:41d0:305:2100::c445:18789 - 🇫🇷 France - false Clean AS16276OVH SASOVH22/03/2026, 14:32:4018/04/2026, 00:40:22 - - ----
38.76.219.•••:18789 - 🇺🇸 United States Yes false Clean AS401701cognetcloud INCFOJ IP Technology22/03/2026, 14:32:4005/04/2026, 10:32:10 - - ----
15.156.247.•••:18789 - 🇨🇦 Canada - false Clean AS16509Amazon.com, Inc.Amazon Web Services Canada22/03/2026, 14:32:4017/04/2026, 22:26:54 No No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620003/04/2026, 00:44:45-
8.148.20.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud22/03/2026, 14:32:3916/04/2026, 22:48:16 No - -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138502/04/2026, 05:15:11-
81.70.102.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing22/03/2026, 14:32:3922/03/2026, 15:17:43 - - ----
165.22.43.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean22/03/2026, 14:32:3915/04/2026, 13:28:50 - - ----
106.53.112.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/03/2026, 14:32:3916/04/2026, 01:21:17 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2014-4078, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161709/04/2026, 18:18:28tencent.com
54.37.252.•••:18789 - 🇫🇷 France - false Clean AS16276OVH SASOVH22/03/2026, 14:32:3922/03/2026, 15:17:42 - - ----
104.21.39.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare22/03/2026, 14:32:3922/03/2026, 15:17:42 - - ----
18.143.182.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services22/03/2026, 14:32:3916/04/2026, 14:28:28 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198531/03/2026, 00:43:24-
152.53.128.•••:18789 - 🇩🇪 Germany - false Clean AS197540netcup GmbHAT ANX Holding 222/03/2026, 14:32:3922/03/2026, 15:17:42 - - ----
49.51.178.•••:18789 - 🇨🇳 China mainland - false Clean AS132203Tencent Building, Kejizhongyi AvenueTencent Cloud22/03/2026, 14:32:3908/04/2026, 12:19:51 - - ----
47.86.45.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK22/03/2026, 14:32:3917/04/2026, 22:26:53 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 16:33:15-
39.98.45.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/03/2026, 14:32:3915/04/2026, 13:29:00 - - ----
134.122.10.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean22/03/2026, 14:32:3925/03/2026, 10:17:06 - - ----
49.51.250.•••:18789 - 🇨🇳 China mainland Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueTencent Cloud22/03/2026, 14:32:3922/03/2026, 15:17:42 - - ----
43.99.83.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore22/03/2026, 14:32:3918/04/2026, 00:41:12 Yes No --15/04/2026, 00:47:33alibabacloud.com
39.107.105.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/03/2026, 14:32:3816/04/2026, 01:20:25 - - ----
3.248.190.•••:18789 - 🇮🇪 Ireland - false Clean AS16509Amazon.com, Inc.Amazon Data Services Ireland22/03/2026, 14:32:3825/03/2026, 11:00:53 - - ----
154.194.176.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS139880OWGELS INTERNATIONAL CO., LIMITEDStarbow Ltd22/03/2026, 14:32:3818/04/2026, 00:41:17 No - --03/04/2026, 09:22:46-
178.104.54.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner22/03/2026, 14:32:3815/04/2026, 13:29:02 - - ----
52.78.26.•••:18789 - 🇰🇷 South Korea - false Clean AS16509Amazon.com, Inc.AWS Seoul Region22/03/2026, 14:32:3816/04/2026, 17:30:32 Yes No -CVE-2006-20001, CVE-2017-8923, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-13950, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31628, CVE-2022-31629, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-4900, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-7347, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620007/04/2026, 09:32:37xn--220b31d95hq8o.xn--3e0b707e
206.189.61.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean22/03/2026, 14:32:3822/03/2026, 15:17:42 - - ----
150.158.105.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing22/03/2026, 14:32:3822/03/2026, 15:17:42 - - ----
47.108.82.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft22/03/2026, 14:32:3816/04/2026, 10:02:40 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-1414527/03/2026, 05:39:51-