🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 250586 Page: 2494 / 2506 (100 per page) Showing: 249301-249400 Last Imported: 04/03/2026, 13:03:07
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 2494 of 2506
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
5.75.171.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner Online23/02/2026, 01:46:1123/02/2026, 15:09:54 - - ----
149.28.164.•••:18789 - 🇦🇺 Australia Yes true Leaked AS20473The Constant Company, LLCVultr Holdings19/02/2026, 17:53:2023/02/2026, 15:09:54 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, DragonFly, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198519/02/2026, 22:24:22getzhealthcare.com, vultr.com
8.148.220.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud16/02/2026, 01:44:0723/02/2026, 15:09:54 No No --14/02/2026, 19:13:16-
88.172.160.•••:18789 - 🇫🇷 France Yes true Clean AS12322Free SASFree SAS21/02/2026, 09:24:1923/02/2026, 15:09:53 - - ----
81.71.103.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing11/02/2026, 05:47:1023/02/2026, 15:09:53 No No -CVE-2022-4900, CVE-2024-545811/02/2026, 20:29:07-
120.48.20.•••:18789 Assistant 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 01:46:1023/02/2026, 15:09:53 - - ----
101.126.85.•••:18789 Assistant 🇨🇳 China mainland Yes true Leaked AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology10/02/2026, 19:16:3223/02/2026, 15:09:53 Yes - -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-59474, CVE-2025-59475, CVE-2025-59476, CVE-2025-61984, CVE-2025-6198511/02/2026, 13:53:50optage.co.jp, bytedance.com
43.165.7.•••:18789 - 🇸🇬 Singapore Yes true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd23/02/2026, 01:46:1023/02/2026, 15:09:53 - - ----
155.138.220.•••:18789 - 🇺🇸 United States Yes true Leaked AS20473The Constant Company, LLCVultr Holdings03/02/2026, 22:39:0123/02/2026, 15:09:53 Yes Yes APT17, APT36, APT37, APT41, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2023-28531, CVE-2023-38408, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/02/2026, 11:33:33vultr.com
47.112.30.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft07/02/2026, 11:42:4523/02/2026, 15:09:53 No No --07/02/2026, 11:44:18-
156.226.28.•••:18789 Assistant 🇭🇰 Hong Kong Yes true Clean AS142286LUOGELANG (FRANCE) LIMITEDCloudFly Net Inc23/02/2026, 01:46:1023/02/2026, 15:09:53 - - ----
178.128.13.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean19/02/2026, 20:52:0423/02/2026, 15:09:53 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-2646620/02/2026, 04:23:59-
120.48.28.•••:18789 Wit (📊) 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 01:46:1023/02/2026, 15:09:53 - - ----
102.117.19.•••:18789 - 🇲🇺 Mauritius Yes true Clean AS23889MAURITIUS TELECOMMauritius Telecom23/02/2026, 01:46:1023/02/2026, 15:09:53 - - ----
95.143.236.•••:18789 - 🇦🇹 Austria - true Clean AS8339kabelplus GmbHKabelplus21/02/2026, 16:55:0523/02/2026, 15:09:53 Yes Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-6620022/02/2026, 05:42:24myfritz.net, fritz.com
2402:1f00:8000:800::4234:18789 - 🇸🇬 Singapore - true Clean AS16276OVH SASOVH Singapore Data Center20/02/2026, 10:16:4323/02/2026, 15:09:53 - - ----
120.48.69.•••:18789 Assistant 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 02:31:0023/02/2026, 15:09:52 - - ----
77.42.92.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner23/02/2026, 02:31:0023/02/2026, 15:09:52 - - ----
120.48.63.•••:18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu20/02/2026, 11:01:1023/02/2026, 15:09:52 Yes Yes APT15, APT17, APT28, APT31, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Donot Team, DragonFly, El-Machete, Gamaredon Group, Gaza Cybergang, Gozi, Inception Framework, Kimsuky, MuddyWater Group, Packrat, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138520/02/2026, 22:57:45chinamobile.com, chinamobile.cn, baidu.com
16.171.197.•••:18789 - 🇺🇸 United States Yes true Clean AS16509Amazon.com, Inc.Amazon Data Services Sweden23/02/2026, 02:31:0023/02/2026, 15:09:52 - - ----
43.134.3.•••:18789 Assistant 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay09/02/2026, 10:14:1123/02/2026, 15:09:52 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2014-4078, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/02/2026, 15:49:16tencent.com
116.203.73.•••:18789 - 🇩🇪 Germany Yes true Leaked AS24940Hetzner Online GmbHHetzner Online19/02/2026, 20:07:2923/02/2026, 15:09:52 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-43622, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198519/02/2026, 23:06:41hetzner.de, hetzner.com
43.106.8.•••:18789 - 🇸🇬 Singapore - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore13/02/2026, 04:03:5423/02/2026, 15:09:52 - - ----
85.192.37.•••:18789 Алексей (Леха, Alex) 🇫🇮 Finland Yes true Clean AS210644AEZA INTERNATIONAL LTDAeza International13/02/2026, 20:18:5423/02/2026, 15:09:52 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/02/2026, 06:20:26duckdns.org
47.236.99.•••:18789 - 🇺🇸 United States - true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud17/02/2026, 01:05:2323/02/2026, 15:09:52 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/02/2026, 10:46:55hichina.com, alibaba-inc.com
120.48.78.•••:18789 OpenClaw助手 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu20/02/2026, 07:18:0223/02/2026, 15:09:52 - - ----
180.76.119.•••:18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 02:31:0023/02/2026, 15:09:52 - - ----
194.233.90.•••:18789 - 🇸🇬 Singapore - true Clean AS141995Contabo Asia Private LimitedContabo Asia Private Limited22/02/2026, 11:36:0723/02/2026, 15:09:52 - - ----
45.87.92.•••:18789 - 🇸🇬 Singapore - true Clean AS8888xTom Pty LtdXTom22/02/2026, 16:05:4023/02/2026, 15:09:52 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161723/02/2026, 06:16:36-
163.44.127.•••:18789 - 🇯🇵 Japan - true Clean AS58791GMO Internet Group, Inc.GMO InterQ19/02/2026, 21:36:3923/02/2026, 15:09:51 No Yes Salt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198520/02/2026, 11:49:38-
46.101.195.•••:18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean19/02/2026, 23:05:3423/02/2026, 15:09:51 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272820/02/2026, 07:21:00-
106.12.159.•••:18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 02:30:5923/02/2026, 15:09:51 - - ----
77.42.44.•••:18789 Lucy (🦾) 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner07/02/2026, 16:06:0723/02/2026, 15:09:51 - - --07/02/2026, 16:22:20-
218.19.109.•••:18789 卖菜 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Guangdong23/02/2026, 02:30:5923/02/2026, 15:09:51 - - ----
188.208.197.•••:18789 - 🇳🇱 Netherlands Yes true Clean AS203466INTROSERV d.o.oIntroServ03/02/2026, 22:39:1023/02/2026, 15:09:51 No No -CVE-2024-39894, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/02/2026, 23:32:27-
120.48.169.•••:18789 Assistant 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 02:30:5923/02/2026, 15:09:51 - - ----
89.167.87.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner23/02/2026, 02:30:5823/02/2026, 15:09:50 - - ----
89.167.73.•••:18789 - 🇫🇮 Finland - true Clean AS24940Hetzner Online GmbHHetzner23/02/2026, 02:30:5823/02/2026, 15:09:50 - - ----
43.163.218.•••:18789 Assistant 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd13/02/2026, 22:30:5323/02/2026, 15:09:50 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/02/2026, 17:52:48tencent.com
106.12.144.•••:18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 02:30:5823/02/2026, 15:09:50 - - ----
54.156.66.•••:18789 - 🇺🇸 United States Yes true Clean AS14618Amazon.com, Inc.Amazon23/02/2026, 02:30:5823/02/2026, 15:09:50 - - ----
185.220.207.•••:18789 - 🇮🇱 Israel Yes true Clean AS44709O.M.C. COMPUTERS & COMMUNICATIONS LTDCloud Web Manage IL PT14/02/2026, 10:57:2623/02/2026, 15:09:50 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/02/2026, 10:01:24-
42.193.199.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud07/02/2026, 16:49:3523/02/2026, 15:09:50 Yes No --07/02/2026, 16:51:15tencent.com, mobifone.vn
161.97.120.•••:18789 - 🇫🇷 France Yes true Clean AS51167Contabo GmbHContabo23/02/2026, 02:30:5823/02/2026, 15:09:50 - - ----
106.12.42.•••:18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu14/02/2026, 04:22:4323/02/2026, 15:09:50 - - ----
119.29.221.•••:18789 - 🇨🇳 China mainland - true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud23/02/2026, 02:30:5823/02/2026, 15:09:50 - - ----
64.23.167.•••:18789 - 🇺🇸 United States Yes true Clean AS14061DigitalOcean, LLCDigitalOcean23/02/2026, 02:30:5823/02/2026, 15:09:50 - - ----
38.55.165.•••:18789 Assistant 🇺🇸 United States Yes true Leaked AS400619AROSSCLOUD INC.PEG Technology07/02/2026, 05:36:2823/02/2026, 15:09:50 Yes No --07/02/2026, 05:43:35cogentco.com
134.199.214.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean08/02/2026, 01:12:4123/02/2026, 15:09:50 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-638708/02/2026, 01:18:07-
195.28.181.•••:18789 - 🇮🇱 Israel - true Clean AS44709O.M.C. COMPUTERS & COMMUNICATIONS LTDCloud Web Manage22/02/2026, 18:19:4523/02/2026, 15:09:50 - - ----
207.180.254.•••:18789 GIA (/avatar/main) 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo15/02/2026, 12:32:1523/02/2026, 15:09:50 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT32, APT34, APT36, APT37, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Careto APT, Cobalt Group, Donot Team, Emennet Pasargad, Emennet Pasargard, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Turla APT Group, Volt Typhoon, WildCard APTCVE-2005-0004, CVE-2006-20001, CVE-2010-4478, CVE-2010-4755, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0540, CVE-2012-0572, CVE-2012-0574, CVE-2012-0578, CVE-2012-0814, CVE-2012-1688, CVE-2012-1689, CVE-2012-1690, CVE-2012-1697, CVE-2012-1702, CVE-2012-1703, CVE-2012-1705, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757, CVE-2012-2750, CVE-2012-3150, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163, CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2012-5096, CVE-2012-5612, CVE-2012-5614, CVE-2012-5627, CVE-2013-0367, CVE-2013-0368, CVE-2013-0371, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0386, CVE-2013-0389, CVE-2013-1502, CVE-2013-1506, CVE-2013-1511, CVE-2013-1512, CVE-2013-1521, CVE-2013-1523, CVE-2013-1526, CVE-2013-1531, CVE-2013-1532, CVE-2013-1544, CVE-2013-1548, CVE-2013-1552, CVE-2013-1555, CVE-2013-1861, CVE-2013-2375, CVE-2013-2376, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3783, CVE-2013-3793, CVE-2013-3794, CVE-2013-3801, CVE-2013-3802, CVE-2013-3804, CVE-2013-3805, CVE-2013-3808, CVE-2013-3809, CVE-2013-3812, CVE-2013-3839, CVE-2013-5807, CVE-2013-5891, CVE-2013-5908, CVE-2014-0001, CVE-2014-0384, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0420, CVE-2014-0437, CVE-2014-1692, CVE-2014-2419, CVE-2014-2430, CVE-2014-2431, CVE-2014-2432, CVE-2014-2436, CVE-2014-2438, CVE-2014-2440, CVE-2014-2494, CVE-2014-2532, CVE-2014-2653, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484, CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496, CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559, CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2325, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-3152, CVE-2015-4752, CVE-2015-4757, CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-7744, CVE-2015-8325, CVE-2016-0502, CVE-2016-0610, CVE-2016-0616, CVE-2016-0642, CVE-2016-0651, CVE-2016-0777, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-3471, CVE-2016-3492, CVE-2016-5584, CVE-2016-5612, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-6210, CVE-2016-6515, CVE-2016-6664, CVE-2016-7440, CVE-2016-9843, CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-15365, CVE-2017-15906, CVE-2017-15945, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3302, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3600, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2018-15473, CVE-2018-20685, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819, CVE-2018-3058, CVE-2018-3063, CVE-2018-3066, CVE-2018-3081, CVE-2018-3133, CVE-2018-3174, CVE-2018-3282, CVE-2019-0199, CVE-2019-0221, CVE-2019-0232, CVE-2019-10072, CVE-2019-12418, CVE-2019-17563, CVE-2019-17567, CVE-2019-2455, CVE-2019-2481, CVE-2019-2503, CVE-2019-2529, CVE-2019-2614, CVE-2019-2627, CVE-2019-2684, CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805, CVE-2019-2974, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13938, CVE-2020-13943, CVE-2020-13950, CVE-2020-14145, CVE-2020-14550, CVE-2020-15778, CVE-2020-17527, CVE-2020-1927, CVE-2020-1934, CVE-2020-1935, CVE-2020-1938, CVE-2020-2574, CVE-2020-2752, CVE-2020-2780, CVE-2020-2812, CVE-2020-28912, CVE-2020-2922, CVE-2020-35452, CVE-2020-8022, CVE-2020-9484, CVE-2020-9490, CVE-2021-2007, CVE-2021-2011, CVE-2021-2144, CVE-2021-24122, CVE-2021-25122, CVE-2021-25329, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30640, CVE-2021-30641, CVE-2021-33037, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41079, CVE-2021-41617, CVE-2021-43980, CVE-2021-44224, CVE-2021-44790, CVE-2021-46659, CVE-2021-46666, CVE-2021-46667, CVE-2021-46669, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-25762, CVE-2022-26377, CVE-2022-27385, CVE-2022-27449, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31621, CVE-2022-31622, CVE-2022-31623, CVE-2022-31624, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-42252, CVE-2023-25690, CVE-2023-27522, CVE-2023-28708, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-41080, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648, CVE-2023-45802, CVE-2023-46589, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5157, CVE-2024-21733, CVE-2024-23672, CVE-2024-24549, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272816/02/2026, 04:00:42contabo.de, contabo.net
114.132.63.•••:18789 阿飞 (🎋) 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud17/02/2026, 22:23:5123/02/2026, 15:09:50 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA428, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-4577, CVE-2024-5458, CVE-2024-638718/02/2026, 10:44:29tencent.com
138.197.95.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean13/02/2026, 18:06:5423/02/2026, 15:09:49 No Yes APT-C-23, APT1 Comment Crew, APT15, APT27, APT28, APT29, APT31, APT34, APT35, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Earth Longzhi, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon, WildCard APTCVE-2015-9251, CVE-2016-20012, CVE-2019-11358, CVE-2020-11022, CVE-2020-11023, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-23064, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/02/2026, 11:00:39-
43.163.251.•••:18789 - 🇸🇬 Singapore - true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd22/02/2026, 22:47:1323/02/2026, 15:09:49 Yes Yes APT15, APT28, APT31, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 12:11:55tencent.com
106.52.136.•••:18789 Assistant 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud22/02/2026, 19:49:0323/02/2026, 15:09:49 - - ----
2a01:4f8:c012:171b::1:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner Online23/02/2026, 02:30:5723/02/2026, 15:09:49 - - ----
89.58.46.•••:18789 - 🇩🇪 Germany Yes true Clean AS197540netcup GmbHNetcup23/02/2026, 02:30:5723/02/2026, 15:09:49 - - ----
39.102.214.•••:18789 Assistant 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/02/2026, 05:18:5323/02/2026, 15:09:49 Yes Yes APT28, APT29, APT34, APT35, APT37, APT39, APT41, Bluenoroff, Callisto Group, Cobalt Group, Gaza Cybergang, Hafnium Group, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, Sandworm Team, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-44487, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198510/02/2026, 18:36:53aliyun.com, ptcl.net.pk
138.197.33.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean14/02/2026, 01:26:1123/02/2026, 15:09:49 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272814/02/2026, 13:12:00-
35.238.114.•••:18789 - 🇺🇸 United States Yes true Leaked AS396982Google LLCGoogle23/02/2026, 02:30:5723/02/2026, 15:09:49 Yes Yes DragonFly, PackratCVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 04:00:54acuityinc.com, cyclonelighting.com, qsc.com, junoltg.com, eurekalighting.com, acquitybrands.com, eldoled.com, acuitysso.com, acuitybrands.com, acuitybrandslighting.com, atterotech.com, atrius.com, alights.com, buildingos.com, iotaengineering.com, dglogik.com, distech-controls.eu, distech-controls.com, ke2therm.com, luminis.com, qsc.de, locuslabs.com
217.216.87.•••:18789 - 🇩🇪 Germany Yes true Clean AS40021Contabo Inc.Contabo19/02/2026, 08:12:3223/02/2026, 15:09:44 - - ----
165.245.186.•••:18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean22/02/2026, 19:04:2323/02/2026, 15:09:44 - - ----
169.0.51.•••:18789 Clawdia (🐾) 🇿🇦 South Africa Yes true Clean AS37611AFRIHOST SPAfrihost Dynamic23/02/2026, 04:00:2723/02/2026, 15:09:42 No No --17/02/2026, 12:58:49-
137.184.72.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean17/02/2026, 06:17:2323/02/2026, 15:09:42 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/02/2026, 20:20:24-
212.227.65.•••:18789 - 🇩🇪 Germany - true Clean AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.IONOS23/02/2026, 00:59:1623/02/2026, 15:07:41 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 15:07:48-
43.156.89.•••:18789 小鸡鸡 (😄) 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd03/02/2026, 22:36:4423/02/2026, 15:07:41 Yes Yes APT17, APT28, APT35, APT36, APT37, APT39, APT45, CloudSorcerer, Cobalt Group, Daggerfly APT, El-Machete, Kimsuky, MuddyWater Group, Mustang Panda, Salt Typhoon, Sandworm Team, SideWinder APT, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6470, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-11187, CVE-2024-12705, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/02/2026, 02:23:32tencent.com
2a01:4f8:1c1e:69d7::1:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner Online23/02/2026, 00:59:1523/02/2026, 15:07:41 - - ----
39.97.249.•••:18789 - 🇨🇳 China mainland - true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft23/02/2026, 00:59:1523/02/2026, 15:07:41 Yes No --23/02/2026, 15:08:01aliyun.com, ptcl.net.pk
101.132.180.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/02/2026, 17:20:0323/02/2026, 15:07:41 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-48795, CVE-2023-51385, CVE-2024-2352, CVE-2024-24768, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-39907, CVE-2024-39911, CVE-2025-26465, CVE-2025-32728, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-56413, CVE-2025-61984, CVE-2025-61985, CVE-2025-66507, CVE-2025-6650820/02/2026, 16:57:10aliyun.com, optage.co.jp
172.235.246.•••:18789 - 🇮🇩 Indonesia Yes true Clean AS63949Akamai Connected CloudLinode19/02/2026, 17:50:5223/02/2026, 15:07:40 No Yes APT15, APT31, Bitter APT, Bluenoroff, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Salt Typhoon, SideWinder APTCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198520/02/2026, 08:47:36-
96.126.101.•••:18789 - 🇺🇸 United States Yes true Clean AS63949Akamai Connected CloudLinode23/02/2026, 00:59:1523/02/2026, 15:07:40 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2018-5740, CVE-2018-5741, CVE-2018-5743, CVE-2018-5744, CVE-2018-5745, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6465, CVE-2019-6470, CVE-2019-6471, CVE-2020-14145, CVE-2020-15778, CVE-2020-8616, CVE-2020-8617, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-23017, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 15:08:24-
150.136.152.•••:18789 - 🇺🇸 United States Yes true Leaked AS31898Oracle CorporationOracle Cloud23/02/2026, 00:59:1423/02/2026, 15:07:40 Yes Yes APT-C-23, APT36, Cobalt Group, Equation Group, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 15:08:29healtheintent.com, purewellness.com, cerner.ae, retek.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
38.55.161.•••:18789 Assistant 🇺🇸 United States Yes true Leaked AS400619AROSSCLOUD INC.PEG Technology07/02/2026, 02:37:5523/02/2026, 15:07:40 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138507/02/2026, 02:43:45cogentco.com
120.48.66.•••:18789 爪爪 (OpenClaw) (🤖) 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 00:59:1423/02/2026, 15:07:40 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, PackratCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161723/02/2026, 15:08:33chinamobile.com, chinamobile.cn, baidu.com
52.44.162.•••:18789 - 🇺🇸 United States Yes true Clean AS14618Amazon.com, Inc.Amazon05/02/2026, 07:53:1623/02/2026, 15:07:40 No No --06/02/2026, 02:02:08-
8.130.170.•••:18789 小咘 (🐾) 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud23/02/2026, 00:59:1423/02/2026, 15:07:40 No Yes APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2020-9484, CVE-2021-25122, CVE-2021-25329, CVE-2021-30640, CVE-2021-33037, CVE-2021-36368, CVE-2021-41079, CVE-2021-41617, CVE-2021-42340, CVE-2021-43980, CVE-2022-23181, CVE-2022-29885, CVE-2022-34305, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272823/02/2026, 15:08:41-
115.205.75.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Hangzhou20/02/2026, 12:27:5223/02/2026, 15:07:40 No No --17/02/2026, 15:08:48-
121.237.244.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS4134ChinanetChinaNet Jiangsu23/02/2026, 00:59:1423/02/2026, 15:07:40 Yes No --23/02/2026, 15:08:50bj189.cn, datacamp.co.uk, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, daqu.com.cn, ctyun.cn
82.156.8.•••:18789 Assistant 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing23/02/2026, 00:59:1423/02/2026, 15:07:40 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138523/02/2026, 15:08:51-
101.200.217.•••:18789 Assistant 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft20/02/2026, 10:14:2523/02/2026, 15:07:40 Yes Yes APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138520/02/2026, 22:58:43aliyun.com, optage.co.jp
34.159.233.•••:18789 Assistant 🇺🇸 United States Yes true Clean AS396982Google LLCGoogle23/02/2026, 00:59:1423/02/2026, 15:07:40 No Yes APT1, APT32, APT37, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, goziCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161723/02/2026, 15:08:54-
152.53.231.•••:18789 小灰 🇩🇪 Germany Yes true Leaked AS197540netcup GmbHNetcup03/02/2026, 22:37:0423/02/2026, 15:07:39 Yes No -CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/02/2026, 21:14:57netcup.de
172.67.210.•••:18789 - 🇺🇸 United States - true Leaked AS13335Cloudflare, Inc.Cloudflare23/02/2026, 00:59:1423/02/2026, 15:07:39 Yes No --23/02/2026, 15:08:58ardmoreanimalhospital.com, dunskyrehab.com, i3-systems.com, bindlfamilychiropractic.com, davis-chiro.net, visionplustx.com, venancio.com, platinumchiropractic.net, adamschiropractic.com, woods-chiro.com, modernpestservices.com, manfrechiro.com, ashworthpet.com, pvpetclinic.com, doc-cohen.com, quallschiropractic.com, downtownbroadwaychiro.com, marlerchiropractic.com, thenorwalkvethospital.com, drbrianpierce.net, olsonoptical.com, drronfried.com, hartfordanimalhospitalnj.com, hzfeidi.com, fricksfashion.com, kirshnerchiropractic.com, atlanticcoastchiro.com, islandmobilevet.com, globalmattersgroup.com, cityfied.net, vacationstationrvresort.com, arizonaacservice.com, anlink.net, wufamilyeyecare.com, bahamaroadvet.com, company1.com.au, hmcxjc.com, portorangechiropractor.com, boyertownchiropractor.com, wellnessunlimitedllc.com, shsinotech.com, totalbodychiropractic.net, vbankph.com, drbakalis.com, seiwa-elec.com, powellchiroclinic.com, drslotnick.com, fringesalonva.com, waterloovetcare.com, viralthread.com, lakemurrayoptometric.com, ekakitchen.com, georgeschiropractic.com, chapmanchiro.net, argonneanimalhospital.com, wisehousetech.com, coloradospineandsport.com, spinalcareavon.com, cloudflare.net, nunezchiro.com, spayneuterlv.com, foxvalleycareclinic.com, redtailequine.com, backinbalchiro.com, databrick.com, co.com, klucharichchiropracticflorence.com, animalwellnesskokomo.com, harmonfamilychiropractic.com, animalhealthcentersalinas.com, heartfulway.com, jxlingtong.com, axiomwc.com, pawpawvet.com, nardini.com, millardoakschiropractic.com, yumito.net, teasehairbeauty.com, peterdavislaw.com, altosdelchicala.com, baselinewoods.com, woodsdaleanimal.com, felinefinevet.com, ambassador-sz.com, lakesareavh.com, daviseyeassoc.net, wss-associates.com, walkerchiropracticfl.com, darrfamilychiropractic.com, gaineswaysac.com, cleanzoneheating.com, alghanitex.com, qzz.io, northhollywoodchiropractic.com, drsiemens.com, completewellnesschiro.com, yourwellnessstop.com, chiropracticplace.net, koworksllc.net, ginachlaw.com, brownsprinting.com, nkychiropractic.com, lifeskills.vic.edu.au, suncoastchiropractic.com, salisburychiropractic.net, cloudhq-mkt6.net, valenciamoldremediation.us, champmar-ec.com, dubuquefamilychiropractic.com, drsuehomevet.com, forwardwirecloth.net, hudsonchirowellness.com, elevatekeene.com, recremex.com.mx, molloychiropractic.com, takinomiya-hp.com, estrellapkwymed.com, chiropracticcenter-houston.com, arizonalifechiropractic.com, yusavagechiropractic.com, aerosupplycargosadecv.com, merrittchiro.com, dralanpost.com, agency-salon.com, refee.net, xjzljt.net, chirogroupne.com, sxgas.net, lolchiropractic.com, marvinchiro.com, visitvictoria.com, provancechiropractic.com, visitmelbourne.com, kohnanimalhospital.com, alpineequine.net, hollistichealthhealingcenter.com, sfurbanpethospital.com, modestochiro.com, eyecaresalina.com, doctorleblanc.com, confederateridgeanimalhospital.com, apexthewellnessteam.com, bradshawchiropractic.com, artqca.com, thornappleveterinarymedicalcenter.com, bvvc.net, keeneyefamilyvision.com, galvezvetclinic.com, fiercepharma.com, seattlefamilychiro.com, sanhoos.com, cohlchiropractic.com, saratogasportsmassage.com, petersonchiropractic.net, bamko.net, ausarabbusinesscouncil.com, uppervalleyequine.com, creditop.com, dcjames.com, andoverfamilychiropractic.com, chirobygreene.com, iexamopto.com, kindredcarepet.net, portonovachiropractic.com, dimensionschiro.com, evansequine.com, cityofscottville.org, slchiropractic.com, ault-chiropractic.com, vkoptometry.com, lookoutmountainvet.com, outbook.com, heartwoodholistic.com, delmarvachiropractic.com, murrayvillemixedanimalclinic.com, qtxasset.com, halechiro.com, irrigationsystems4u.com, advantagepm.ca, activechiropracticnv.com, aquaterraequine.com, countyseatvet.com, xeraliving.fi, china-one.net, abbottroadanimalclinic.com, kingdisplay.net, eu.org, lifelinepower.com, scheduleme.org, toensingchiro.com, oldhamlin.com, startownvet.com, performancechiropc.com, pprossmx.com, 4seasons-style.com, drmarychiro.com, yonezawabld.com, acmvh.com, pillarchiropractic.com, rhinechiropractic.com, cypresscreekchiro.com, drpeterschiropractic.com, multifamilyexecutive.com, homegrownchiropractic.com, bioceuticals.com.au, serenityhealthchiropractic.com, surfsidepethospital.com, johnstownveterinary.com, crystalclearoptometry.com, eyesonthelakesc.com, cttok.com, loshoptometry.com, ranscustombuilders.com, lehrvision.com, drwkowalski.com, cuppchiropracticcenter.com, methuenveterinaryhospital.com, leverijllc.com, builderonline.com, mountainviewanimal.com, hachinoji.com, cfoinnovation.com, louisvilleriverportauthority.com, arlingtonchiroclinic.com, blackmores.com.au, dawsonclarkchiropractic.com, oracle-ag.ch, vfecfranklin.com, chirofitinc.com, oneontaintegratedchiro.com, zhaowoo.net, chedermenachem.org, clairemontvet.com, dvorafamilychiro.com, rockwoodparkchiro.com, dramoruso.com, success-matters.com, ackermanchiropractic.net, cimarronpetsalon.com, bestwanhui.com, westcoastcarwash.com, outdoorkitchensnorthwest.com, newtonchiropractic.com, ermissolutions.com, madriverveterinaryservice.com, youngbloodequine.com, innovacess.com, dietrichchiro.com, fiercemarkets.com, hppc.gr, missionhillspetcarecenter.com, chiropracticfirstmukwonago.com, abelchiro.com, brevarddisc.com, rollinghillsveterinary.com, actionchirocenter.com, iwai.com, icare4vision.com, austunecommercial.com, bodysolutionschiro.com, countryside-ah.com, hotecoperations.com, brinegarchiropractic.com, harborchiro.com, hara-hospital.com, ridgerunnervet.com, workers.dev, kneisleyeye.com, ndxa.net, johnstownanimalhospital.com, tigerexpressfuel.com, k3ohana.com, vickerschiro.com, touchoflifechiro.com, alexanderchiroclinic.com, nooralaqmar.iq, 360-xj.com, medfordchiropractic.com, xjwfcj.com, co.zm, questex.asia, spinealignop.com, meeshamoultonlaw.com, huronvet.com, citysmallanimalclinic.com, paydaydeals.com.au, elitechiroonline.com, victoriaanimalhospital.com, laneychiro.com, tandbud.dk, drallenonline.com, zsnet.net, meridianoutboard.com, rushanimalcare.com, seoadvisor.dk, physnum.com, coldspringanimalclinic.com, yoohealing.com, china114.net, jvjones.com, smartbuildings.com, triarrows.com, stamfordchiro.com, weavervillechiro.com, vestalspinecare.com, wirickchiropracticcare.com, hy189.net, communitychiropracticyork.com, alive-net.net, lovingtouchclinic.com, xjhongshun.com, mybostonchiropractor.com, lakeforestac.com, inmotion-chiro.com, gatewaychirocenter.com, greatercincychiro.com, sacredheartsveterinaryhospital.com, mosschiropractic.com, geochem.org, condura.com.au, westhartfordchiropractic.com, equinaceaprodutosnaturais.com, dmln.net, wetumpkachiro.com
120.48.8.•••:18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu08/02/2026, 22:44:5223/02/2026, 15:07:39 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, DragonFly, El-Machete, Gamaredon Group, Gaza Cybergang, Gozi, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138510/02/2026, 11:54:11chinamobile.com, chinamobile.cn, baidu.com
8.134.143.•••:18789 - 🇸🇬 Singapore - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud22/02/2026, 10:04:1423/02/2026, 15:07:39 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-3272823/02/2026, 15:09:06-
3.112.73.•••:18789 - 🇯🇵 Japan Yes true Clean AS16509Amazon.com, Inc.Amazon Web Services Japan23/02/2026, 00:59:1323/02/2026, 15:07:39 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 15:09:11-
106.12.6.•••:18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu14/02/2026, 12:23:2123/02/2026, 15:07:39 - - ----
139.162.29.•••:18789 - 🇸🇬 Singapore - true Clean AS63949Akamai Connected CloudLinode22/02/2026, 16:03:1823/02/2026, 15:07:39 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2013-5704, CVE-2014-3581, CVE-2014-3583, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-20012, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-17199, CVE-2018-20685, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 15:09:22-
157.180.88.•••:18789 - 🇫🇮 Finland Yes true Leaked AS24940Hetzner Online GmbHHetzner09/02/2026, 02:11:5823/02/2026, 15:07:39 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/02/2026, 09:25:59hetzner.com
120.48.19.•••:18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu23/02/2026, 00:59:1323/02/2026, 15:07:38 Yes Yes APT17, APT28, APT37, APT40, APT41, Cobalt Group, DragonFly, Earth Berberoka, El-Machete, Energetic Bear, Equation Group, Gozi, Leafminer, Luckycat APT, Packrat, Sandworm TeamCVE-2010-1899, CVE-2010-2730, CVE-2010-397223/02/2026, 15:09:40chinamobile.com, chinamobile.cn, baidu.com
104.21.16.•••:18789 - 🇺🇸 United States - true Leaked AS13335Cloudflare, Inc.Cloudflare23/02/2026, 00:59:1323/02/2026, 15:07:38 Yes No --23/02/2026, 15:09:41divinedentalcare.com, teamdmax.com.au, shogun-toolbox.org, warnerrobinscjd.com, bzabehavioral.com, tenxtenx.com, brennertherapy.com, fivestarfordsm.com, pausemag.co.uk, greatnortherncounseling.com, computerpeople.dk, aiden-vn.com, anhbac.com, ahealingparadigm.com, quatangthanhdong.com, scaffoldeducation.com.br, technologybuyersguide.com, globalmattersgroup.com, fivestarflorence.com, tennesseevalleyice.com, maisfrango.com.br, anlink.net, nextcloud.org, audiencegain.net, drlokken.com, jobsync.com.au, wisehousetech.com, cloudflare.net, resistanceweldsupplies.com, loitoan.com, switchmanpens.com, altosdelchicala.com, baselinewoods.com, complete.org, topshelflobby.com, alghanitex.com, fivestarnissan.com, qzz.io, brownsprinting.com, phutho.work, cloudhq-mkt6.net, detcrc.com.au, valenciamoldremediation.us, champmar-ec.com, standout.dk, msdlawgroup.com, center4hopeandhealing.com, kblmining.com.au, abamidwestltd.com, drillsearch.com.au, anorton.com, pinnaclecenter.com, autoadvantage.com.au, keystore-explorer.org, aerosupplycargosadecv.com, mayhoangtung.com, eposlighting.com, gialoilongan.com, vegpower.org.uk, batteryswapcabinet.com, acerti.com.br, renkweb.com, goin-vn.com, delco-construction.com, lifeworkswellnesscare.com, vsun-solar.com, cyberlotus.com, vrgkhaihoan.com, drtinascottlpc.com, drleemorand.com, belindajudge.com, phillipsplatingcorp.com, equalityohio.org, bamko.net, simplycounseling.com, faithandhopetherapy.com, gryphonminerals.com.au, voyagevietnammoto.com, divadelnirestaurace-rakovnik.cz, lamaxwell.com, thinkery.me, newageib.com, mackenzieccs.com, helpinghandsinspirehappyhearts.com, paulasiegelmft.com, cuacuonanbinh.com, ashleywilliamscounselinginc.com, chuyenphatnhanhgiare.net, eu.org, dawnthompsontherapy.com, pprossmx.com, partnersinchangeco.com, voicecom.ec, zeux.store, advancedpsychologicalwellness.com, calendar.online, hyundaiofgastonia.com, monmouthpsychologistfeldman.com, bridgesandpathways.com, xjnmi.com, christianchanges.com, oracle-ag.ch, transpacificvn.com, eastridingcollege.ac.uk, natasaspa.com, grimsby.ac.uk, carrieamorrisonpsyd.com, aseedofhopecounselingcenter.com, drdavidblackmon.com, humandynamicsinc.net, carbonenergy.com.au, workers.dev, rexdigitalmarketing.com, hashemfoods.com, shilohcounselingservices.com, eggersmannusa.com, resgen.com.au, anmacvietnam.com, maymacanphu.com, movemegroup.com.au, jucyvietnam.com, avantemarine.com.au, puravidaenergy.com.au, counselingwellnesscenter.com, bibsonomy.org, gaolongan.com, naval-group.com.au, dreambuilt.com, gerriwaylandcounseling.com, jjshawcounseling.com, sosdevelopment.com.au, vinagreenplus.com, occalamance.com, deloresmowertherapist.com, fivestarnissanofflorence.com, scaffoldplatform.com.br, isofh.com, jilyphukhai.com, geochem.org, dkrausfootprints.com, ermonline.com.au, knowledgepartners.com.au, innovativeskilledtherapyservices.com, drpetertemple.com, chothuemaylamda.com, prosci.com.au
46.224.128.•••:18789 - 🇩🇪 Germany Yes true Clean AS24940Hetzner Online GmbHHetzner23/02/2026, 00:59:1323/02/2026, 15:07:38 - - ----
64.225.17.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean10/02/2026, 14:44:3823/02/2026, 15:07:38 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272813/02/2026, 18:52:30-
43.134.230.•••:18789 - 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd16/02/2026, 17:08:5223/02/2026, 15:07:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-38709, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-6198516/02/2026, 20:09:22tencent.com
8.221.141.•••:18789 - 🇸🇬 Singapore - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore22/02/2026, 09:19:4323/02/2026, 15:07:38 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 15:09:49-
152.42.231.•••:18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean12/02/2026, 01:33:5323/02/2026, 15:07:38 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/02/2026, 03:02:13-
114.132.99.•••:18789 Assistant 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud20/02/2026, 07:15:4223/02/2026, 15:07:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-2341923/02/2026, 15:09:52tencent.com
8.148.76.•••:18789 Assistant 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud03/02/2026, 22:36:1923/02/2026, 15:07:38 No No --06/02/2026, 02:23:07-
43.153.173.•••:18789 - 🇯🇵 Japan - true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd23/02/2026, 00:14:3923/02/2026, 15:07:38 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 14:26:07tencent.com
103.56.164.•••:18789 - 🇻🇳 Vietnam Yes true Clean AS1359158 Floor, 96-98 Dao Duy Anh, Phu Nhuan, HCMCTLINKVN Technology Connection21/02/2026, 16:07:5223/02/2026, 15:07:38 Yes - -CVE-2017-15945, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198522/02/2026, 04:51:17datadock.ne.jp