🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 220 / 10768 (100 per page) Showing: 21901-22000 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 34.158.232.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 20/08/2026, 00:40:25 | 29/08/2026, 20:31:20 | No | No | - | - | 14/08/2026, 05:46:00 | - | |
| 69.169.108.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS19318 | Interserver, Inc | Interserver | 20/08/2026, 00:40:25 | 10/09/2026, 04:11:21 | Yes | No | - | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 05:46:04 | interserver.net |
| 222.172.21.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | Unknown | 20/08/2026, 00:40:23 | 20/08/2026, 07:09:54 | No | No | - | - | 14/08/2026, 05:46:11 | - |
| 52.204.229.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 20/08/2026, 00:38:37 | 20/08/2026, 07:51:18 | - | - | - | - | - | - |
| 109.172.39.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS198610 | Beget LLC | Beget LLC | 20/08/2026, 00:38:35 | 20/08/2026, 08:34:48 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 01:22:50 | beget.ru |
| 43.136.22.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 20/08/2026, 00:38:35 | 20/08/2026, 15:46:51 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617 | 20/08/2026, 01:22:51 | tencentcloud.com |
| 119.91.49.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 20/08/2026, 00:38:34 | 20/08/2026, 08:34:48 | Yes | - | - | - | 20/08/2026, 01:22:52 | tencentcloud.com |
| 34.158.232.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 20/08/2026, 00:38:34 | 29/08/2026, 21:53:43 | No | No | - | - | 14/08/2026, 01:22:57 | - | |
| 222.172.21.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | Unknown | 20/08/2026, 00:38:32 | 20/08/2026, 08:34:45 | No | No | - | - | 14/08/2026, 01:23:05 | - |
| 52.57.66.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 20/08/2026, 00:36:38 | 22/08/2026, 07:58:41 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 00:37:26 | - |
| 52.204.229.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 20/08/2026, 00:36:38 | 21/08/2026, 23:29:23 | - | - | - | - | - | - |
| 13.204.0.•••:18789 | - | 🇮🇳 India | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 20/08/2026, 00:36:37 | 04/09/2026, 03:19:17 | Yes | No | - | - | 20/08/2026, 00:37:30 | prempackaging.com |
| 109.172.39.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS198610 | Beget LLC | Beget LLC | 20/08/2026, 00:36:36 | 21/08/2026, 23:29:22 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 00:37:32 | beget.ru |
| 217.154.159.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS8560 | This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE. | Ionos Cloud TXL | 20/08/2026, 00:36:36 | 21/08/2026, 23:29:22 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 00:37:33 | ionos.com |
| 149.50.129.•••:18789 | - | 🇦🇷 Argentina | - | true | Leaked | AS27823 | Dattatec.com | Dattatec | 20/08/2026, 00:36:36 | 10/09/2026, 10:30:04 | Yes | - | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 20/08/2026, 00:37:34 | cogentco.com |
| 183.156.87.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 19/08/2026, 23:59:46 | 20/08/2026, 11:31:45 | No | No | - | - | 14/08/2026, 08:42:57 | - |
| 2409:8a1e:b0c4:da70:a00d:5dc8:46f2:1fb0:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS24400 | Shanghai Mobile Communications Co.,Ltd. | China Mobile | 19/08/2026, 23:59:45 | 23/08/2026, 10:12:22 | - | - | - | - | - | - |
| 43.139.61.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 19/08/2026, 23:59:45 | 23/08/2026, 04:32:40 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 08:43:05 | tencentcloud.com |
| 98.93.173.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 19/08/2026, 23:59:45 | 30/08/2026, 00:46:03 | No | No | - | - | 14/08/2026, 08:43:12 | - |
| 115.213.141.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Lishui Node | 19/08/2026, 23:59:44 | 23/08/2026, 10:12:22 | No | No | - | - | 14/08/2026, 08:43:15 | - |
| 60.163.250.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | CHINANET-ZJ | 19/08/2026, 23:59:44 | 23/08/2026, 09:29:54 | No | No | - | - | 14/08/2026, 06:28:34 | - |
| 172.93.167.•••:18789 | - | 🇨🇦 Canada | Yes | false | Clean | AS32489 | Amanah Tech Inc. | 365 Group | 19/08/2026, 23:59:44 | 20/08/2026, 12:14:48 | No | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-1322, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-54352 | 20/08/2026, 06:28:38 | - |
| 49.235.152.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 19/08/2026, 23:59:43 | 08/09/2026, 23:52:18 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 20/08/2026, 06:28:45 | tencentcloud.com |
| 52.43.189.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:59:42 | 20/08/2026, 12:14:47 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 06:28:49 | - |
| 18.116.15.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:59:42 | 08/09/2026, 12:23:38 | No | No | - | - | 29/08/2026, 09:07:36 | - |
| 52.57.66.•••:443 | - | 🇩🇪 Germany | Yes | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 19/08/2026, 23:59:42 | 20/08/2026, 20:07:23 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 05:02:16 | - |
| 16.147.90.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:59:42 | 20/08/2026, 12:14:46 | Yes | No | - | - | 20/08/2026, 05:02:17 | amazonaws.com, amazon.com |
| 113.44.181.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 19/08/2026, 23:57:55 | 20/08/2026, 05:43:47 | Yes | No | - | - | 20/08/2026, 00:44:57 | smartcom.cc, huawei.com, huaweidevice.com |
| 2409:8a1e:b0c4:da70:a00d:5dc8:46f2:1fb0:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS24400 | Shanghai Mobile Communications Co.,Ltd. | China Mobile | 19/08/2026, 23:57:55 | 23/08/2026, 05:13:05 | - | - | - | - | - | - |
| 43.139.61.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 19/08/2026, 23:57:55 | 22/08/2026, 23:34:00 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 05:44:39 | tencentcloud.com |
| 98.93.173.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 19/08/2026, 23:57:54 | 29/08/2026, 19:06:55 | No | No | - | - | 14/08/2026, 05:44:45 | - |
| 115.213.141.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Lishui Node | 19/08/2026, 23:57:53 | 23/08/2026, 05:13:04 | No | No | - | - | 14/08/2026, 05:44:50 | - |
| 60.163.250.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | CHINANET-ZJ | 19/08/2026, 23:57:53 | 23/08/2026, 04:30:47 | No | No | - | - | 14/08/2026, 05:44:57 | - |
| 172.93.167.•••:18789 | - | 🇨🇦 Canada | Yes | false | Clean | AS32489 | Amanah Tech Inc. | 365 Group | 19/08/2026, 23:57:52 | 20/08/2026, 06:26:52 | No | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-1322, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-54352 | 20/08/2026, 05:45:00 | - |
| 52.43.189.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:57:50 | 20/08/2026, 06:26:50 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 05:45:11 | - |
| 52.57.66.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 19/08/2026, 23:57:50 | 20/08/2026, 15:48:47 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 05:45:16 | - |
| 16.147.90.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:57:49 | 20/08/2026, 06:26:49 | Yes | No | - | - | 20/08/2026, 05:45:18 | amazonaws.com, amazon.com |
| 113.44.181.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 19/08/2026, 23:56:02 | 20/08/2026, 07:07:56 | Yes | No | - | - | 20/08/2026, 01:22:00 | smartcom.cc, huawei.com, huaweidevice.com |
| 2409:8a1e:b0c4:da70:a00d:5dc8:46f2:1fb0:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS24400 | Shanghai Mobile Communications Co.,Ltd. | China Mobile | 19/08/2026, 23:56:02 | 23/08/2026, 06:36:04 | - | - | - | - | - | - |
| 43.139.61.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 19/08/2026, 23:56:02 | 23/08/2026, 00:57:08 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 01:22:03 | tencentcloud.com |
| 98.93.173.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 19/08/2026, 23:56:01 | 29/08/2026, 20:29:31 | No | No | - | - | 14/08/2026, 01:22:10 | - |
| 60.163.250.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | CHINANET-ZJ | 19/08/2026, 23:55:59 | 23/08/2026, 05:53:37 | No | No | - | - | 14/08/2026, 01:22:19 | - |
| 52.43.189.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:55:58 | 20/08/2026, 07:51:19 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 20/08/2026, 01:22:29 | - |
| 18.116.15.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:55:57 | 08/09/2026, 09:27:36 | No | No | - | - | 29/08/2026, 06:13:58 | - |
| 16.147.90.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:55:57 | 20/08/2026, 07:51:18 | Yes | No | - | - | 20/08/2026, 01:22:34 | amazonaws.com, amazon.com |
| 94.227.253.•••:18789 | - | 🇧🇪 Belgium | - | false | Clean | AS6848 | Telenet BV | Telenet Residential | 19/08/2026, 23:53:55 | 21/08/2026, 22:46:57 | No | No | - | - | 14/08/2026, 00:37:21 | - |
| 45.92.159.•••:18789 | - | 🇯🇵 Japan | - | false | Clean | AS3258 | xTom Japan Corporation | 365 Group LLC | 19/08/2026, 23:53:55 | 21/08/2026, 23:29:23 | - | - | - | - | - | - |
| 18.116.15.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 23:53:55 | 09/09/2026, 17:28:52 | No | No | - | - | 27/08/2026, 18:46:29 | - |
| 84.31.157.•••:18789 | - | 🇳🇱 Netherlands | Yes | true | Clean | AS33915 | Vodafone Libertel B.V. | Ziggo | 19/08/2026, 23:17:00 | 10/09/2026, 02:05:52 | No | No | - | - | 14/08/2026, 08:42:21 | - |
| 35.241.249.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 19/08/2026, 23:16:59 | 26/08/2026, 07:47:22 | No | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 08:42:25 | - | |
| 180.173.155.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 19/08/2026, 23:16:59 | 20/08/2026, 10:48:44 | Yes | No | - | - | 20/08/2026, 08:42:26 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 157.137.234.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS31898 | Oracle Corporation | Oracle | 19/08/2026, 23:16:59 | 20/08/2026, 10:48:44 | - | - | - | - | - | - |
| 1.160.175.•••:443 | - | 🇹🇼 Taiwan | Yes | false | Clean | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 19/08/2026, 23:16:59 | 20/08/2026, 19:24:59 | No | No | - | - | 14/08/2026, 08:42:30 | - |
| 2a02:4780:79:988e::1:443 | - | 🇩🇪 Germany | - | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 19/08/2026, 23:16:58 | 09/09/2026, 23:14:09 | - | - | - | - | - | - |
| 240e:3b1:be13:d940:3c5c:5273:267e:a7fe:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 19/08/2026, 23:15:12 | 20/08/2026, 05:00:49 | - | - | - | - | - | - |
| 39.97.234.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 19/08/2026, 23:15:10 | 09/09/2026, 09:02:15 | Yes | Yes | Packrat | CVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 00:44:18 | aliyun.com |
| 84.31.157.•••:18789 | - | 🇳🇱 Netherlands | Yes | true | Clean | AS33915 | Vodafone Libertel B.V. | Ziggo | 19/08/2026, 23:15:10 | 09/09/2026, 21:03:26 | No | No | - | - | 14/08/2026, 00:44:19 | - |
| 35.241.249.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 19/08/2026, 23:15:09 | 26/08/2026, 01:23:07 | No | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 00:44:24 | - | |
| 180.173.155.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 19/08/2026, 23:15:09 | 20/08/2026, 05:43:52 | Yes | No | - | - | 20/08/2026, 00:44:25 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 157.137.234.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS31898 | Oracle Corporation | Oracle | 19/08/2026, 23:15:09 | 20/08/2026, 05:43:52 | - | - | - | - | - | - |
| 1.160.175.•••:18789 | - | 🇹🇼 Taiwan | - | false | Clean | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 19/08/2026, 23:15:09 | 20/08/2026, 13:38:54 | No | No | - | - | 14/08/2026, 00:44:29 | - |
| 2a02:4780:79:988e::1:18789 | - | 🇩🇪 Germany | - | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 19/08/2026, 23:15:07 | 09/09/2026, 18:57:12 | - | - | - | - | - | - |
| 111.229.129.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 19/08/2026, 23:13:16 | 06/09/2026, 17:21:03 | Yes | - | - | - | 20/08/2026, 01:21:25 | tencentcloud.com |
| 240e:3b1:be13:d940:3c5c:5273:267e:a7fe:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 19/08/2026, 23:13:16 | 20/08/2026, 06:24:50 | - | - | - | - | - | - |
| 35.241.249.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 19/08/2026, 23:13:13 | 26/08/2026, 02:45:58 | No | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 01:21:34 | - | |
| 1.160.175.•••:18789 | - | 🇹🇼 Taiwan | - | false | Clean | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 19/08/2026, 23:13:13 | 20/08/2026, 15:03:12 | No | No | - | - | 14/08/2026, 01:21:35 | - |
| 90.54.207.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS3215 | Orange S.A. | Pop Rei | 19/08/2026, 23:11:17 | 21/08/2026, 22:04:36 | Yes | No | - | - | 20/08/2026, 00:37:09 | duckdns.org |
| 5.161.44.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS213230 | Hetzner Online GmbH | Hetzner Online | 19/08/2026, 23:11:16 | 21/08/2026, 22:04:35 | Yes | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 00:37:12 | hetzner.com |
| 1.160.175.•••:18789 | - | 🇹🇼 Taiwan | - | false | Clean | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 19/08/2026, 23:11:16 | 21/08/2026, 22:46:57 | No | No | - | - | 14/08/2026, 00:37:14 | - |
| 69.5.20.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS150436 | Byteplus Pte. Ltd. | Byteplus | 19/08/2026, 22:34:44 | 08/09/2026, 12:23:37 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 19/08/2026, 22:37:02 | - |
| 54.212.10.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 22:34:43 | 20/08/2026, 10:05:37 | No | - | - | - | 13/08/2026, 22:37:07 | - |
| 31.56.78.•••:443 | - | 🇮🇩 Indonesia | Yes | false | Clean | AS211407 | PT Perwira Media Solusi | PT Perwira Media Solusi | 19/08/2026, 22:34:42 | 30/08/2026, 15:38:16 | No | No | - | CVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-11358, CVE-2019-17567, CVE-2019-9517, CVE-2020-11022, CVE-2020-11023, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-23064, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 19/08/2026, 22:37:14 | - |
| 92.60.36.•••:19008 | - | 🇩🇪 Germany | Yes | false | Leaked | AS197540 | netcup GmbH | Netcup | 19/08/2026, 22:34:42 | 30/08/2026, 00:03:45 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2013-4359, CVE-2013-5704, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-3583, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2015-3306, CVE-2016-0736, CVE-2016-2161, CVE-2016-3125, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-3169, CVE-2017-7418, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-18217, CVE-2019-19270, CVE-2019-19271, CVE-2019-19272, CVE-2020-11985, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9272, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2021-46854, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-28625, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 19/08/2026, 22:37:16 | netcup.de, megasrv.de |
| 35.238.13.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 19/08/2026, 22:34:42 | 27/08/2026, 05:47:37 | No | Yes | DragonFly, Packrat | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 19/08/2026, 22:37:21 | - | |
| 120.234.140.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 19/08/2026, 22:34:41 | 30/08/2026, 01:28:32 | No | No | - | - | 13/08/2026, 22:37:32 | - |
| 49.235.152.•••:443 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 19/08/2026, 22:34:41 | 10/09/2026, 12:00:16 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 19/08/2026, 22:37:36 | tencentcloud.com |
| 2408:824e:f04:aad0:9e50:7a9a:e7:e8be:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom | 19/08/2026, 22:34:41 | 25/08/2026, 15:27:44 | - | - | - | - | - | - |
| 111.229.129.•••:443 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 19/08/2026, 22:34:40 | 09/09/2026, 08:22:00 | Yes | - | - | - | 19/08/2026, 22:37:50 | tencentcloud.com |
| 240e:3b1:be13:d940:3c5c:5273:267e:a7fe:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 19/08/2026, 22:34:40 | 20/08/2026, 10:48:46 | - | - | - | - | - | - |
| 69.5.20.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS150436 | Byteplus Pte. Ltd. | Byteplus | 19/08/2026, 22:32:49 | 08/09/2026, 07:21:36 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 20/08/2026, 00:43:14 | - |
| 54.212.10.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 22:32:48 | 20/08/2026, 05:00:55 | No | - | - | - | 14/08/2026, 00:43:19 | - |
| 31.56.78.•••:18789 | - | 🇮🇩 Indonesia | - | false | Clean | AS211407 | PT Perwira Media Solusi | PT Perwira Media Solusi | 19/08/2026, 22:32:47 | 30/08/2026, 10:37:50 | No | No | - | CVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-11358, CVE-2019-17567, CVE-2019-9517, CVE-2020-11022, CVE-2020-11023, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-23064, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38709, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 20/08/2026, 00:43:26 | - |
| 92.60.36.•••:18789 | - | 🇩🇪 Germany | - | true | Leaked | AS197540 | netcup GmbH | Netcup | 19/08/2026, 22:32:47 | 08/09/2026, 12:21:21 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2013-4359, CVE-2013-5704, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-3583, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2015-3306, CVE-2016-0736, CVE-2016-2161, CVE-2016-3125, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-3169, CVE-2017-7418, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-18217, CVE-2019-19270, CVE-2019-19271, CVE-2019-19272, CVE-2020-11985, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9272, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2021-46854, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-28625, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 00:43:28 | netcup.de, megasrv.de |
| 35.238.13.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 19/08/2026, 22:32:46 | 28/08/2026, 03:35:12 | No | Yes | DragonFly, Packrat | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 20/08/2026, 00:43:32 | - | |
| 120.234.140.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 19/08/2026, 22:32:45 | 29/08/2026, 19:49:09 | No | No | - | - | 14/08/2026, 00:43:42 | - |
| 49.235.152.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 19/08/2026, 22:32:45 | 10/09/2026, 11:58:28 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 20/08/2026, 00:43:46 | tencentcloud.com |
| 2408:824e:f04:aad0:9e50:7a9a:e7:e8be:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom | 19/08/2026, 22:32:45 | 25/08/2026, 09:44:06 | - | - | - | - | - | - |
| 90.54.207.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS3215 | Orange S.A. | Pop Rei | 19/08/2026, 22:32:43 | 20/08/2026, 05:00:50 | Yes | No | - | - | 20/08/2026, 00:43:58 | duckdns.org |
| 111.229.129.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 19/08/2026, 22:32:43 | 09/09/2026, 04:05:23 | Yes | - | - | - | 20/08/2026, 00:44:04 | tencentcloud.com |
| 77.42.0.•••:18789 | - | 🇫🇮 Finland | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 19/08/2026, 22:32:43 | 20/08/2026, 05:00:49 | - | - | - | - | - | - |
| 54.212.10.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 22:30:51 | 20/08/2026, 05:41:55 | No | - | - | - | 13/08/2026, 23:17:45 | - |
| 92.60.36.•••:18789 | - | 🇩🇪 Germany | - | true | Leaked | AS197540 | netcup GmbH | Netcup | 19/08/2026, 22:30:51 | 08/09/2026, 14:30:08 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2013-4359, CVE-2013-5704, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-3583, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2015-3306, CVE-2016-0736, CVE-2016-2161, CVE-2016-3125, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-3169, CVE-2017-7418, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-18217, CVE-2019-19270, CVE-2019-19271, CVE-2019-19272, CVE-2020-11985, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9272, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2021-46854, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-28625, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 20/08/2026, 00:43:00 | netcup.de, megasrv.de |
| 35.238.13.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 19/08/2026, 22:30:50 | 28/08/2026, 04:58:09 | No | Yes | DragonFly, Packrat | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 20/08/2026, 00:43:03 | - | |
| 49.235.152.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 19/08/2026, 22:30:49 | 10/09/2026, 11:56:28 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 20/08/2026, 00:43:16 | tencentcloud.com |
| 2408:824e:f04:aad0:9e50:7a9a:e7:e8be:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom | 19/08/2026, 22:30:49 | 25/08/2026, 10:24:50 | - | - | - | - | - | - |
| 137.184.58.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 19/08/2026, 22:28:46 | 21/08/2026, 22:04:36 | Yes | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Earth Berberoka, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2013-1896, CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-10708, CVE-2016-20012, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-17199, CVE-2018-20685, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 20/08/2026, 00:37:04 | pinehurstcoins.com |
| 104.21.36.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS13335 | Cloudflare, Inc. | Cloudflare | 19/08/2026, 22:28:46 | 22/08/2026, 05:09:30 | Yes | No | - | - | 20/08/2026, 00:37:08 | oldtown1u.online, streamshop.com, vpnserver.com, epayplusng.com, shenji-titanium.com, fuyuanwj.com, co.nl, applications.com, cbdpetmunchys.com, educorp.com, assessoriagarvi.com, jxxlxj.com, scales.ai, raiolanetworks.com, tamtampercusion.com, catuan.net, contentmanager.com, cgmprecast.com, arturosanchez.com, telecomservices.com, byteboard.com, sdkyjt.net, luckyplastic.net, discordapp.com, poper.ai, tecnicasuloa.com, ics-line.com, hardinoptical.com, thecampamento.com, forumcorp.com, dataloop.com, alagasyrup.com, 51yuezhi.com, teijindupontfilms.jp, hzfeidi.com, oxigendc.com, melange.ai, filtraglass.com, soloepis.com, salonnews.com, energyservices.com, youthstream.com, cantierespicamar.com, printa-cal.com, jetreacare.com, rv.com, hbbygd88.com, fuhuake.com, cityfied.net, okibi.ai, artiversehub.ai, kanesolriver.com, playergroup.com, abpincorp.com, smartloop.com, nationalrvsupply.com, hvacdistributors.com, globalsolutions.com, rightwaytrading.net, hqpots.com, informationsystems.com, jw.ai, energypoints.com, qdyiyu.com, rngtechindia.com, dunlopgolf.com, billingcenter.com, eurospainconsulting.com, laravital.com, globalexchange.net, jxygcy.com, yac-agcc.com, tourservices.com, jekotrade.com, hmcxjc.com, originalsoulvegetarian.com, shsinotech.com, shczhsyy.com, northsidepizza.com.au, esipick.com, vbankph.com, elrafel.com, gipnutmeg.com, bopcon.com, resoto.com, jiuliproduce.com, jcommerce.com, vulcanizadosruiz.com, ytxweb.net, eurobank.com, bacalaorafols.com, alsuyar.net, graphicconnection.com, happylife.ai, xiaoshejia.com, igualiaformacion.com, crossolutions.com, campmgmt.com, ramcolab.com, itradeonline.com, mpls.org, vm.dk, apartamentosturisticostudela.com, explosystems.com, wecastnetworkinc.com, gdheyin.com, amber.ai, stewartsandlloyds.co.za, boyu-group.com, fiyanoventures.com, ekakitchen.com, carleaseusa.com, difrenos.com, savilerow.co.za, balochistan.gov.pk, refly.ai, jyskaiyue.com, lithiumconcrete.com, cloudflare.net, imatri-sistemas.com, eustaquiocanto.com, kralmuzik.com.tr, ceostream.com, channel.net, qd-baolian.com, csofam.com, handyman.com, elsoldeantequera.com, galleryconnection.com, jstream.com, machinesummit.com, globalventures.com, minnetonkaonline.us, lyricsintosong.ai, kidsbud.net, horizm.com, lifestreamatsuncity.com, julietlandau.com, hatfieldconsultingllc.com, govcoin.com, jxlingtong.com, elreflejo.com, namingsystem.com, ronglianjr.com, fourwayschiro.co.za, calsolfer.com, williamsfurnacerepair.com, ss-web.com, luxuryventures.com, bestrun.net, hc0798.com, referral.com, jiabinnu.com, globalpartners.com, promptster.ai, sciencesuite.com, bulgaria-offroad.com, investmentgroup.com, dynameet.ai, qzz.io, birminghamneograft.com, lendstream.com, pirineos.com, careagent.com, kfstock.com, gatsbylabs.com, gransierassociates.com, ibeslab.com, vbuilders.com, bonanzathai.com.au, bethesdagardensthornton.com, grupodelasheras.com, pacolopez.com, buzz.work, scribed.ai, interworkgroup.com, m-printone.com, fanoia.com, rivalcorp.com, cloudhq-mkt6.net, garyjackson.com, ruijisi.com, socialsuite.com, elightup.com, estanteriasjerez.com, cclvcr.com, usaledswholesale.com, timing-tech.com, wxkewei.com, globalassetsolutions.com, swiftfreightlogistics.com, anichemspeciality.com, klmymmyc.com, editorialnazari.com, riverrunplantation.com, chinasand.net, homemaintenance.com, residenciadeancianosensevilla.com, gydz.net, aquastorenw.com, gzfantai.net, maharaja-resto.fr, jalan.ai, evenlan.com, plumbingandheating.org, krohne.com, escudodigital.com, hibetw.com, xweiying.com, chunxinghejin.com, hopemission.com, sktind.com, hnbeixiang.com, mingstone.net, bluewaterglobalgroup.com, appliancesservices.com, vannuysair.com, leisonhk.com, gobsolucoes.com.br, belzuz.com, xjjingyoga.com, gpchain.com, dongfanggufen.net, sxgas.net, wakechem.com, coronde.net, klavis.ai, mieco.com.my, sasmtm.com, 1haojiyin.com, customerprofile.com, yitongqingjie.com, sinotransfj.com, uropathdiagnostics.com, mudanzaspt.com, aibituo.net, dzrjx.net, tjwipes.net, metaworks.ai, dgmiberoamerica.com, talleresvillegas.com, readystaffing.com, aptenonsjz.com, leadertread.co.za, ventureos.com, lifestreamliving.com, cofcohg.com, code-china.com, versarai.ai, malibupress.com, imobile.com, contrib.com, inmokeys.com, impactanalytics.ai, faempal.com, learningwire.com, tallerescodi.com, leixinfoods.net, detongwiremesh.com, goldplateck.com, tradingcorp.com, jlhhzy.com, eshares.com, sanhoos.com, gaithersburgflorist.com, gruposolvanto.com, dgclh.com, bamko.net, ausarabbusinesscouncil.com, dnnsoftware.com, hansecontrol.com, lstcarbon.com, bonitaspringsonline.us, cristaleriatori.com, it.com, hvacspareparts.com, briefy.ai, kitchenservices.com, ttstest.com, termoplasticosbenicarlo.com, china-ycgkjx.com, niftys.com, zt.ai, gaetanasnyc.com, lombardoslu.com, oukay.net, apo-led.com, cconsultor.com, irrigationsystems4u.com, socialpoint.com, smilelineclinic.com, sequoiaco.ca, bnw163.net, oremat.com, rcm-saga.fr, grupotegnair.com, yhjgkeji.com, aerovertol.com, cshczfz.com, realtydao.com, epckorealtd.com, getbodie.ai, dogsparesort.com, china-one.net, gzshengjie56.com, portcast.com, moonsift.com, daligem.com, alquilermaquinas.com, eu.org, bierte.com, investcentre.com, yangjiangshilimaoyi.com, jadzdjm.com, demosmith.ai, theenglishcorner.fr, pesasybalanzas.com, buildfolio.com, dreamacquisition.com, tailwindgroup.com, radicalgalaxy.com, com.de, iptunnel.com, ttyt360.com, bethesdagardensloveland.com, rayinmind.com, nexyad.net, bycast.com, shhctsy.com, leadstream.net, cristinaquerol.com, nunezhandles.com, suministrosalso.com, jz5288.com, kmark.com, specialtysportscars.net, taskmgmt.com, joylibros.com, redsun.co.za, kalaifashions.com, galvestononline.us, servicetech.com, atl-az.com, vidrologic.com, hygroup.net, venturepub.com, partyworld.com, zgkaite.com, turnoutservices.com, atmosx.ai, embutidosbierzo.com, stresshealthsolutions.com, pizzaxpress-coburg.com.au, zjdddl.com, curvedglassxxl.com, evision.hr, metropolis.ai, dvipcdn.com, dqkeyi.com, ranscustombuilders.com, aee.org, venturesystems.com, cadenpal.com, gaoyimall.net, business-services.com, linked.com, redmood-agency.com, nesp.com, dslawn.com, cancer.ie, pilz-france.fr, cvifasm.com, aircontrolcompany.com, proteologics.com, vnoc.com, ljgyp.net, fundchannel.com, szsbs.net, ludiana.com, oracle-ag.ch, iberoforwarders.com, rconecta.com, eyes-armour.com, zjhrbz.com, zhaowoo.net, jiangsufuji.com, fzfortune.net, bestirecorp.com, irishcancer.ie, itmanage.net, computerzone.com, haywardonline.us, cazcarra.com, eb5aig.net, airconditioningheating.net, reservationcenter.com, actuacee.com, einpl.com, sugarlandonline.us, bestwanhui.com, neumann-group.com, ruixingkuaiji.com, hkbolton.com, gruposdm.com, 869606.com, mark1airforce.com, btrueb.com, goldenstream.com, kawathai.ie, bain86.com, fxgowin.com, flatbyartis.com, caviton.com, strongvalve.com, curtidosjacobogomez.com, whitfieldfoods.com, zhujigema.net, restaurant323springvale.com.au, corachanmaxilofacial.com, interlan.com, automations.com, luckywaymall.com, washingtondconline.us, sankoreafrica.com, htinfo.ai, globalexport.com, taocimall.com, fedcomm.com, safety-network.org, enanzo.com, workers.dev, chaolipack.com, intriq.ai, dublincleaningservices.com, sportcivitas.com, whzn.net, texans.com, navissupply.com, newoceanfood.com, prnewswire.com, photochallenge.com, bjzthb.com, colourcraft.co.nz, dechuangjixie.com, reteck.net, talleractivo.com, coastresorts.com, marinehub.com, filmteck.com, tigerexpressfuel.com, buildcorp.com, megatecnologia.com, motossenda.com, demetrioyjavirentacar.com, 360-xj.com, smartremsolutions.com, aicomplutense.com, disdal.com, xjwfcj.com, datacasting.com, appservice.com, sglcfj.com, castillianfoods.com, hotelbasadre.com, helpstream.com, patentboard.com, constructionforum.com, pet-bottle.net, realtyconsultant.com, prbot.ai, rvtires.com, oaklandonline.us, importandexportspecializedequipmentandservicesinc.com, datacommunications.com, miamitelevision.com, cannabiscorp.com, impresosmonterrey.com, shworldbest.com, gemcats.com, zsnet.net, bigbrotherspizza.com.au, tdecu.org, medbrokers.com, dongguansenzi.com, stewartsandlloydspumps.co.za, kentacapital.com, parkeronline.us, galiciasea.com, graffitifood.ie, energystorage.com, carmaxbolivia.com, ckxoh.com, sdfengze.net, fyinn.net, china114.net, venturebuilder.com, lassocountry.com, propetchina.com, asseco-see.hr, tenetsecurity.ai, 1800ventures.com, hightech.net, bynavas.com, skyestaq.ai, houstmust.com, bethesdaseniorliving.com, northerncomforthvac.com, ecasal.com, filatsserena.com, germanpool-nb.com, xjhongshun.com, berempahmalaysian.com.au, rcm-organic.co, alquilerordenadores.com, robertogarrudo.com, rosso-berlin.com, converse.dk, cornerstaffing.com, sheffieldbuildings.com, food-machines.net, naturalstonefromspain.com, arohan.co.in, trespasosconsultores.com, shzhongyi.net |
| 35.162.241.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 19/08/2026, 21:51:38 | 20/08/2026, 09:22:38 | No | No | - | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 19/08/2026, 22:36:06 | - |
| 115.29.173.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 19/08/2026, 21:51:38 | 09/09/2026, 21:48:23 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 19/08/2026, 22:36:09 | aliyun.com |
| 152.136.170.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 19/08/2026, 21:51:38 | 10/09/2026, 12:00:06 | No | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 19/08/2026, 22:36:13 | - |