🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 683295 Page: 278 / 6833 (100 per page) Showing: 27701-27800 Last Imported: 19/04/2026, 08:41:00
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 278 of 6833
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
89.207.255.•••:18789 - 🇰🇿 Kazakhstan Yes true Clean AS202958Hoster.KZ - AlmatyHoster.KZ14/04/2026, 02:14:5617/04/2026, 19:25:56 - - ----
178.104.130.•••:18789 - 🇩🇪 Germany Yes true Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 02:14:5616/04/2026, 19:47:14 - - ----
20.45.38.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5514/04/2026, 07:32:38 - - ----
52.90.117.•••:18789 - 🇺🇸 United States Yes true Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:14:5514/04/2026, 10:32:40 No No --08/04/2026, 09:48:59-
20.98.237.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5514/04/2026, 07:32:38 - - ----
34.175.70.•••:18789 - 🇺🇸 United States Yes true Clean AS396982Google LLCGoogle14/04/2026, 02:14:5517/04/2026, 18:46:46 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138515/04/2026, 22:00:13-
82.156.176.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:14:5516/04/2026, 22:48:14 No Yes APT37, El-Machete-16/04/2026, 19:04:17-
54.160.174.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:14:5414/04/2026, 07:32:37 - - ----
47.92.121.•••:18789 - 🇨🇳 China mainland - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 02:14:5417/04/2026, 08:34:36 No No -CVE-2022-34170, CVE-2022-34171, CVE-2022-34172, CVE-2022-34173, CVE-2022-34174, CVE-2022-3417517/04/2026, 07:05:56-
20.110.51.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5414/04/2026, 07:32:37 - - ----
167.86.100.•••:18789 - 🇫🇷 France - true Clean AS51167Contabo GmbHContabo14/04/2026, 02:14:5414/04/2026, 07:32:37 - - ----
92.4.92.•••:18789 - 🇺🇸 United States Yes true Clean AS31898Oracle CorporationOracle Sweden14/04/2026, 02:14:5417/04/2026, 19:25:54 - - ----
74.48.39.•••:18789 - 🇺🇸 United States Yes true Clean AS35916MULTACOM CORPORATIONMultacom Corporation14/04/2026, 02:14:5417/04/2026, 10:03:12 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/04/2026, 10:05:06multacom.com
45.192.110.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS401696cognetcloud INCVapeline Technology14/04/2026, 02:14:5316/04/2026, 22:48:20 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-3272816/04/2026, 19:01:09-
156.239.46.•••:18789 - 🇺🇸 United States Yes true Clean AS400619AROSSCLOUD INC.Fastmos Co Limited14/04/2026, 02:14:5317/04/2026, 18:07:43 No Yes Salt TyphoonCVE-2020-25097, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-2352, CVE-2024-24768, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-39907, CVE-2024-39911, CVE-2024-6387, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-55753, CVE-2025-56413, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2025-66507, CVE-2025-6650817/04/2026, 18:11:57-
222.79.16.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Fujian14/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
20.63.216.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
104.215.74.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
217.60.248.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS56971AS56971 CloudCGI Global Limited14/04/2026, 02:14:5316/04/2026, 22:48:17 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 19:02:42-
152.53.108.•••:18789 - 🇦🇹 Austria - true Clean AS197540netcup GmbHAT ANX Holding 214/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
20.236.136.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5214/04/2026, 07:32:35 - - ----
47.83.117.•••:18789 - 🇺🇸 United States Yes true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud14/04/2026, 02:14:5217/04/2026, 09:19:34 - - ----
2a02:4780:79:ee91::1:18789 - 🇩🇪 Germany - true Clean AS47583Hostinger International LimitedHostinger14/04/2026, 02:14:5214/04/2026, 07:32:35 - - ----
8.137.184.•••:18789 - 🇸🇬 Singapore - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud14/04/2026, 02:14:5118/04/2026, 00:40:42 - - ----
154.205.36.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation14/04/2026, 02:14:5116/04/2026, 23:33:13 - - ----
144.91.67.•••:18789 - 🇩🇪 Germany Yes true Clean AS51167Contabo GmbHContabo14/04/2026, 02:14:5117/04/2026, 10:03:45 - - ----
44.250.224.•••:18789 - 🇺🇸 United States Yes true Clean AS16509Amazon.com, Inc.Amazon14/04/2026, 02:14:5114/04/2026, 07:32:34 - - ----
87.106.166.•••:18789 - 🇩🇪 Germany Yes true Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.Ionos Cloud TXL14/04/2026, 02:14:5117/04/2026, 10:04:21 Yes No --14/04/2026, 18:48:51ionos.com
172.67.212.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare14/04/2026, 02:14:5015/04/2026, 01:31:51 - - ----
58.50.217.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Hubei14/04/2026, 02:14:5017/04/2026, 20:10:58 - - ----
54.227.207.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:14:5017/04/2026, 10:03:50 - - ----
137.220.157.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS4907BGPNET PTE. LTD.Cloudbays, New Town Central Plaza14/04/2026, 02:14:4917/04/2026, 18:07:46 No No --11/04/2026, 18:10:25-
103.108.66.•••:18789 - 🇭🇰 Hong Kong - true Clean AS401696cognetcloud INCHuangyun Internet Tec Limited14/04/2026, 02:14:4917/04/2026, 21:42:06 - - ----
101.43.8.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:14:4917/04/2026, 00:18:18 - - ----
50.6.248.•••:18789 - 🇺🇸 United States - true Leaked AS31898Oracle CorporationNewfold Digital14/04/2026, 02:14:4917/04/2026, 05:34:05 Yes No --17/04/2026, 00:20:54athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com
20.214.179.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4914/04/2026, 07:32:32 - - ----
172.105.5.•••:18789 - 🇨🇦 Canada Yes true Clean AS63949Akamai Connected CloudLinode14/04/2026, 02:14:4814/04/2026, 07:32:32 - - ----
2001:41d0:2005:100::1d1f:18789 - 🇮🇹 Italy - true Clean AS16276OVH SASVPS EU South Mil 114/04/2026, 02:14:4817/04/2026, 02:33:44 - - ----
43.251.227.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS401696cognetcloud INCI Layer Limited14/04/2026, 02:14:4817/04/2026, 10:03:26 - - ----
49.13.174.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner Online14/04/2026, 02:14:4814/04/2026, 07:32:31 - - ----
183.130.219.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet-ZJ Zhongxin14/04/2026, 02:14:4814/04/2026, 07:32:31 - - ----
20.125.19.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4814/04/2026, 07:32:31 - - ----
119.45.115.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 02:14:4718/04/2026, 00:40:13 - - ----
43.139.34.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:14:4716/04/2026, 20:32:40 Yes No --16/04/2026, 16:01:44tencent.com
116.169.116.•••:18789 - 🇨🇳 China mainland - true Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom14/04/2026, 02:14:4716/04/2026, 20:32:41 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 16:01:18chinaunicom.cn, objecteye.com
154.205.37.•••:18789 - 🇭🇰 Hong Kong Yes true Leaked AS9294GNET INC.Cloud Innovation14/04/2026, 02:14:4717/04/2026, 10:04:40 Yes No --16/04/2026, 21:19:09cgmprecast.com, fuhuake.com, abpincorp.com, jekotrade.com, bopcon.com, boyu-group.com, qd-baolian.com, csofam.com, jiabinnu.com, kfstock.com, klmymmyc.com, hnbeixiang.com, xjjingyoga.com, 1haojiyin.com, detongwiremesh.com, dgclh.com, lstcarbon.com, ttstest.com, gaetanasnyc.com, yhjgkeji.com, bierte.com, ttyt360.com, zgkaite.com, turnoutservices.com, zjdddl.com, zjhrbz.com, bain86.com, impresosmonterrey.com, shworldbest.com, dongguansenzi.com
154.205.39.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation14/04/2026, 02:14:4717/04/2026, 07:04:25 - - ----
128.140.101.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner Online14/04/2026, 02:14:4714/04/2026, 07:32:30 - - ----
27.8.156.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Chongqing14/04/2026, 02:14:4717/04/2026, 10:03:57 - - ----
43.103.51.•••:18789 - 🇸🇬 Singapore Yes true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore14/04/2026, 02:14:4717/04/2026, 10:03:43 - - ----
20.97.59.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4714/04/2026, 07:32:30 - - ----
2409:8a55:4fe4:44d0::ad0:18789 - 🇨🇳 China mainland - true Clean AS9808China Mobile Communications Group Co., Ltd.China Mobile14/04/2026, 02:14:4617/04/2026, 05:34:07 - - ----
13.202.231.•••:18789 - 🇮🇳 India - true Clean AS16509Amazon.com, Inc.Amazon Web Services14/04/2026, 02:14:4614/04/2026, 07:32:29 - - ----
110.41.61.•••:18789 - 🇨🇳 China mainland Yes true Clean AS55990Huawei Cloud Service data centerHuawei Cloud14/04/2026, 02:14:4617/04/2026, 19:25:47 - - ----
20.22.185.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4614/04/2026, 07:32:29 - - ----
120.26.48.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 02:14:4614/04/2026, 08:17:39 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 08:18:09aliyun.com
13.78.44.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4514/04/2026, 08:17:39 - - ----
163.176.234.•••:18789 - 🇺🇸 United States Yes true Leaked AS31898Oracle CorporationOracle14/04/2026, 02:14:4514/04/2026, 08:17:39 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 08:18:17healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
124.156.222.•••:18789 - 🇯🇵 Japan Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd14/04/2026, 02:14:4517/04/2026, 03:19:01 Yes Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 08:18:27tencent.com
116.205.230.•••:18789 - 🇨🇳 China mainland Yes true Clean AS55990Huawei Cloud Service data centerHuawei Cloud14/04/2026, 02:12:3717/04/2026, 10:01:46 - - ----
2a02:c207:2317:5353::1:18789 - 🇫🇷 France - true Clean AS51167Contabo GmbHContabo14/04/2026, 02:12:3714/04/2026, 07:30:20 - - ----
4.151.165.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3614/04/2026, 07:30:19 - - ----
20.196.192.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3614/04/2026, 07:30:19 - - ----
172.67.159.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare14/04/2026, 02:12:3614/04/2026, 23:59:53 - - ----
20.114.43.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3514/04/2026, 07:30:18 - - ----
89.207.255.•••:18789 - 🇰🇿 Kazakhstan Yes true Leaked AS202958Hoster.KZ - AlmatyHoster.KZ14/04/2026, 02:12:3517/04/2026, 19:23:33 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198515/04/2026, 11:57:46viprinet.com, untergrund.net, hoster.kz
178.104.130.•••:18789 - 🇩🇪 Germany Yes true Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 02:12:3516/04/2026, 19:44:52 - - ----
20.45.38.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3514/04/2026, 07:30:18 - - ----
20.98.237.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3514/04/2026, 07:30:18 - - ----
34.175.70.•••:18789 - 🇺🇸 United States Yes true Clean AS396982Google LLCGoogle14/04/2026, 02:12:3517/04/2026, 18:44:16 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138517/04/2026, 15:44:24-
82.156.176.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:12:3416/04/2026, 22:45:56 No Yes APT37, El-Machete-16/04/2026, 22:03:56-
54.160.174.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:12:3414/04/2026, 07:30:17 - - ----
47.92.121.•••:18789 - 🇨🇳 China mainland - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 02:12:3417/04/2026, 08:32:16 - - ----
20.110.51.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3414/04/2026, 07:30:17 - - ----
167.86.100.•••:18789 - 🇫🇷 France - true Clean AS51167Contabo GmbHContabo14/04/2026, 02:12:3314/04/2026, 07:30:16 Yes Yes APT14, APT28, APT40, APT41, Carbanak, Kimsuky, Lazarus Group, SharpPandaCVE-2021-1636, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29143, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-1220, CVE-2025-1735, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985, CVE-2025-649114/04/2026, 02:12:41duckdns.org
74.48.39.•••:18789 - 🇺🇸 United States Yes true Clean AS35916MULTACOM CORPORATIONMultacom Corporation14/04/2026, 02:12:3317/04/2026, 10:00:51 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:12:46multacom.com
45.192.110.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS401696cognetcloud INCVapeline Technology14/04/2026, 02:12:3316/04/2026, 22:46:02 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-3272814/04/2026, 02:12:49-
156.239.46.•••:18789 - 🇺🇸 United States Yes true Clean AS400619AROSSCLOUD INC.Fastmos Co Limited14/04/2026, 02:12:3317/04/2026, 18:05:20 No Yes Salt TyphoonCVE-2020-25097, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-2352, CVE-2024-24768, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-39907, CVE-2024-39911, CVE-2024-6387, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-55753, CVE-2025-56413, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2025-66507, CVE-2025-6650814/04/2026, 02:12:52-
222.79.16.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS4134ChinanetChinaNet Fujian14/04/2026, 02:12:3214/04/2026, 07:30:16 Yes No --14/04/2026, 02:12:54bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
20.63.216.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3214/04/2026, 07:30:16 - - ----
104.215.74.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3214/04/2026, 07:30:16 - - ----
217.60.248.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS56971AS56971 CloudCGI Global Limited14/04/2026, 02:12:3216/04/2026, 22:45:59 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:12:57-
152.53.108.•••:18789 - 🇦🇹 Austria - true Leaked AS197540netcup GmbHAT ANX Holding 214/04/2026, 02:12:3214/04/2026, 07:30:15 Yes Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:13:05ap-solut.com, ganzrund.com, amex-healthcare.com, amex-vienna.at, arbeiterkammer.at, mvb-online.com, moriroku.at, anexia-engine.com, nussknackerei.at, pro-food.at, techinvest.at, schneiders-bags.com, welovefurs.com, techbold.at, 0900-live.com, goerner-formpack.com, megasrv.de, radiocontent.net, panoramatours.com, goerner-group.com, uppernetwork.com, schlossbrasserie.at, marmind.com, transsolar.com, kornladen.at, sange-cnc.at, teigtaschen.at, bestsrv.de, james.care
20.236.136.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3214/04/2026, 07:30:15 - - ----
47.83.117.•••:18789 - 🇺🇸 United States Yes true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud14/04/2026, 02:12:3117/04/2026, 09:17:15 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:13:23hichina.com, alibaba-inc.com
2a02:4780:79:ee91::1:18789 - 🇩🇪 Germany - true Clean AS47583Hostinger International LimitedHostinger14/04/2026, 02:12:3114/04/2026, 07:30:14 - - ----
8.137.184.•••:18789 - 🇸🇬 Singapore - true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud14/04/2026, 02:12:3118/04/2026, 00:38:21 - - ----
154.205.36.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation14/04/2026, 02:12:3016/04/2026, 23:30:52 No No --08/04/2026, 02:13:40-
144.91.67.•••:18789 - 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo14/04/2026, 02:12:3017/04/2026, 10:01:25 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2023-31122, CVE-2023-38408, CVE-2023-43622, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:13:44contabo.de, contabo.net
87.106.166.•••:18789 - 🇩🇪 Germany Yes true Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.Ionos Cloud TXL14/04/2026, 02:12:3017/04/2026, 10:02:01 Yes No --14/04/2026, 02:13:45ionos.com
104.21.61.•••:18789 - 🇺🇸 United States - true Leaked AS13335Cloudflare, Inc.Cloudflare14/04/2026, 02:12:2915/04/2026, 01:29:24 Yes No --14/04/2026, 02:13:53digitalssite.com, fuyuanwj.com, jxxlxj.com, atcevents.com, hoolina.com, credowm.com, abaq-z.com, cgmprecast.com, twf2019.com, ccccnbtx.org, airconservice.us, sdkyjt.net, luckyplastic.net, qmscrushing.com, bikeweeksa.com, elecdata.com, ics-line.com, salvationarmyhouston.org, dupontholding.com, dupont-dow.com, hzfeidi.com, electronicengineering.com, goldenruleservicesacramento.org, cookefg.com, redondobeachairconditioning.us, hopperinsuranceagency.com, sz-jl.com, muirwoodpw.com, wellclinics.ca, bbbiotechconference.com, bowersockcapital.com, hbbygd88.com, fuhuake.com, skalafacade.com, cityfied.net, abpincorp.com, hvacdistributors.com, rightwaytrading.net, wenchyuan.com, giftedandlit.com, medtecjapan.com, anlink.net, multibase.com, jxygcy.com, acukwik.com, sanctuarywealth.com, jekotrade.com, hmcxjc.com, eg427.com, shsinotech.com, vbankph.com, itechinc.com, gipnutmeg.com, xjhhcm.com, bopcon.com, dupont-danmark.com, ytxweb.net, apparo.org, licenseglobal.com, transpaaccessoires.com, jhfadvisors.com, acs.org.au, hbcollection-ksa.com, chinasyh.net, boyu-group.com, westautorepair.com, ekakitchen.com, kiaksa.com, qnityelectronics.com, wisehousetech.com, cloudflare.net, hpme.com, salvationarmysouth.org, fletchingschool.org, qd-baolian.com, csofam.com, allseasonsroofinginc.com, wigandintegratedwealth.com, kidsbud.net, bellafaris.com, openapi.com, aviationnow.com, moto-privee.com, valorousadvisors.com, paramountairconditioning.com, jxlingtong.com, prairiefirewealth.com, proficio.in, dairyasia.org, feedstuffs.com, intermountainfab.com, 6degreeswealth.com, cmpmedica.com, baselinewoods.com, dupont.ua, goldmineandcoco.com, jiabinnu.com, airconditioningdistributor.us, montgomery-illinois.org, apimetrics.io, alghanitex.com, qzz.io, 18forty8privatewealth.com, calipio.com, kfstock.com, institut-beaute-capella.fr, daralgmyelh.com, brownsprinting.com, expocihac.com, potere-tech.com, c4group.org, mountairymd.org, xxglasses.net, m-printone.com, cloudhq-mkt6.net, goescontabil.com.br, twinfallscanal.com, forwardwirecloth.net, corian.com, cclvcr.com, timing-tech.com, klmymmyc.com, rotate.io, plumbingandheating.org, newhope.com, gseschooldallas.org, mendotahospital.org, hnbeixiang.com, aaram-sa.com, jttransport.com, seniorinsurancemarketing.com, leisonhk.com, refee.net, xjzljt.net, xjjingyoga.com, dongfanggufen.net, sxgas.net, wakechem.com, virtuabil.com.br, projectchange.info, patronato.com, alexis.in, advancentx.org, foodiversity.org, 1haojiyin.com, sama-lan.com, ark-car.com, sinotransfj.com, dzrjx.net, gsquaredprivatewealth.com, altravia.com, aptenonsjz.com, globalinternation.com, maryelexports.com, incrementstore.com, dupont.ae, classroomcentral.org, farmprogress.com, detongwiremesh.com, laan-sa.com, wealthmanagement.com, ibcglobal.com, sanhoos.com, delight-sa.com, uplandprivatewealth.com, dgclh.com, bamko.net, hansecontrol.com, pixelsksa.com, lstcarbon.com, retailtrafficmag.com, adma.com.au, ausperityprivatewealth.com, cphi.com, energetica-pv.com, rbamglobalpvtltd.com, ttstest.com, nature-mixes.com, gaetanasnyc.com, riverinafielddays.com, oukay.net, boxboard.com, yhjgkeji.com, doctorcare.ca, allurebeauty.com, china-one.net, kingdisplay.net, eu.org, concenturewealth.com, bierte.com, jadzdjm.com, clinicacolumbia.com, pesasybalanzas.com, prem-box.com, areen-alkaif.com, mtgr-altmyez.com, kloepfer.com, com.de, ttyt360.com, aircraftbluebook.com, batalatsa.com, mycatty23online.com, relaisdechatenoy.fr, everthine.com, jdkwealth.com, coventya.com, tahaluf.com, galaxy-of-luxury.com, newyorkfarmshow.com, wizardworld.com, basis.org, zgkaite.com, turnoutservices.com, guamhealthcare.com, zjdddl.com, villageofpittsford.org, toptutorsllc.com, huadewood.com, slongpumps.com, smartzonesa.com, reliancemediaworks.com, lavandeparfums.com, usa-fabric.com, shinkonggroup.com, rhawealth.com, informa-events.com, orangeairconditioning.us, starrcorporation.com, regina-hotel.fr, lifelinechiropractic.org, restaurant-hospitality.com, oracle-ag.ch, eyes-armour.com, auriccapital.com, zjhrbz.com, zhaowoo.net, jiangsufuji.com, your-plus1.com, themobilefactory.org, famigliawealth.net, salvationarmyflorida.org, iirusa.com, bestwanhui.com, carinaevinos.com, uniquedesignsbytina.com, specialevents.com, bain86.com, fxgowin.com, beecircular.org, workers.dev, skyvholdings.com, pharmacieclemenceaulalonde.fr, informa-mea.com, newoceanfood.com, chnl.it, mercer-wm.com, pbcbuilds.com, dechuangjixie.com, sauss.net, tigerexpressfuel.com, apeloa-kangyu.com, proveedor211.com, wshahalamira.com, 360-xj.com, xjwfcj.com, kester.com, tbclaw.net, pricedigests.com, macdermidgraphics.com, aldman1.com, dupont.com.sg, impresosmonterrey.com, shworldbest.com, zsnet.net, dongguansenzi.com, dupont.com.tw, caez-wv.org, lafender.com, carmaxbolivia.com, sdfengze.net, canontradeshows.com, granger-michel.com, designnews.com, informamarkets-info.com, china114.net, arcgroup.com, money2020middleeast.com, hy189.net, shmagbalanyeq.com, conversantwealth.com, xjhongshun.com, telepaws.com, tabcoin.com, informaconnect.com, eazizlildhabayihs.com, geochem.org, food-machines.net, whir.com, samvaad.co, lincolnwaymusic.org, wheatondirect.us, dmln.net, intertec.com
58.50.217.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Hubei14/04/2026, 02:12:2917/04/2026, 20:08:36 No No --08/04/2026, 02:13:55-
54.227.207.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:12:2917/04/2026, 10:01:31 - - ----
137.220.157.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS4907BGPNET PTE. LTD.Cloudbays, New Town Central Plaza14/04/2026, 02:12:2917/04/2026, 18:05:24 No No --08/04/2026, 02:14:03-
103.108.66.•••:18789 - 🇭🇰 Hong Kong - true Clean AS401696cognetcloud INCHuangyun Internet Tec Limited14/04/2026, 02:12:2917/04/2026, 21:39:45 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:14:05-
101.43.8.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:12:2817/04/2026, 00:15:56 Yes Yes APT37, El-MacheteCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138514/04/2026, 02:14:10tencent.com
50.6.248.•••:18789 - 🇺🇸 United States - true Leaked AS31898Oracle CorporationNewfold Digital14/04/2026, 02:12:2817/04/2026, 05:31:44 Yes No --14/04/2026, 02:14:14athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com
20.214.179.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:2814/04/2026, 07:30:12 No No --08/04/2026, 02:14:19-
172.105.5.•••:18789 - 🇨🇦 Canada Yes true Leaked AS63949Akamai Connected CloudLinode14/04/2026, 02:12:2817/04/2026, 17:26:31 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:14:22healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, chickenkiller.com, maxymiser.net, oraclecloudservices.com, fastspeed.dk, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, dynip.online, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, dynalias.net, java.net, optika.com, dyndns.info, dyndns.org, dyndns.tv, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, ddns.net, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
2001:41d0:2005:100::1d1f:18789 - 🇮🇹 Italy - true Clean AS16276OVH SASVPS EU South Mil 114/04/2026, 02:12:2717/04/2026, 02:31:24 - - ----