🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 683295 Page: 295 / 6833 (100 per page) Showing: 29401-29500 Last Imported: 19/04/2026, 08:41:00
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 295 of 6833
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
154.205.37.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation13/04/2026, 20:12:0516/04/2026, 20:32:43 No No --10/04/2026, 16:00:16-
124.222.8.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/04/2026, 20:12:0517/04/2026, 04:04:03 - - ----
192.142.45.•••:18789 - 🇳🇱 Netherlands - true Clean AS214036Ultahost, Inc.Ultahost13/04/2026, 20:12:0517/04/2026, 18:46:48 No No --11/04/2026, 18:51:05-
204.168.209.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:12:0517/04/2026, 01:03:28 - - ----
154.205.39.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation13/04/2026, 20:12:0417/04/2026, 10:04:34 - - ----
20.240.141.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:12:0414/04/2026, 01:30:50 - - ----
200.10.106.•••:18789 - 🇦🇷 Argentina Yes true Clean AS10834Telefonica de ArgentinaTelefonica Argentina13/04/2026, 20:12:0417/04/2026, 21:42:02 - - ----
47.97.37.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/04/2026, 20:12:0414/04/2026, 01:30:50 - - ----
32.193.132.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon13/04/2026, 20:12:0416/04/2026, 21:17:55 - - ----
8.130.142.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud13/04/2026, 20:12:0317/04/2026, 10:04:18 - - ----
82.156.59.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing13/04/2026, 20:12:0316/04/2026, 19:47:10 - - ----
138.199.219.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:12:0316/04/2026, 18:15:53 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 15:16:36-
204.168.193.•••:18789 - 🇫🇮 Finland - true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:12:0317/04/2026, 03:18:58 - - ----
20.97.51.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:12:0314/04/2026, 01:30:49 - - ----
50.6.251.•••:18789 - 🇺🇸 United States - true Clean AS31898Oracle Corporation[name redacted]13/04/2026, 20:12:0316/04/2026, 01:21:00 - - ----
3.145.76.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon13/04/2026, 20:12:0214/04/2026, 17:29:28 - - ----
59.110.6.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/04/2026, 20:12:0217/04/2026, 04:49:04 - - ----
20.225.99.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:12:0214/04/2026, 01:30:48 - - ----
108.175.1.•••:18789 - 🇺🇸 United States Yes true Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.1&1 Network13/04/2026, 20:12:0217/04/2026, 17:28:46 Yes Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, WIRTECVE-2006-20001, CVE-2013-1896, CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-3581, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2020-11985, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-2569014/04/2026, 05:19:32ionos.com
113.45.164.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS55990Huawei Cloud Service data centerHuawei Cloud13/04/2026, 20:12:0216/04/2026, 16:45:02 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272816/04/2026, 15:17:37smartcom.cc, huawei.com, huaweidevice.com
20.97.23.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:12:0114/04/2026, 01:30:47 - - ----
106.52.146.•••:18789 - 🇨🇳 China mainland - true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/04/2026, 20:12:0117/04/2026, 04:49:07 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-2341917/04/2026, 04:52:30tencent.com
104.21.14.•••:18789 - 🇺🇸 United States - true Clean AS13335Cloudflare, Inc.Cloudflare13/04/2026, 20:12:0114/04/2026, 01:30:47 - - ----
8.134.220.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud13/04/2026, 20:12:0116/04/2026, 22:48:17 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138513/04/2026, 22:29:15-
203.57.85.•••:18789 - 🇮🇳 India Yes true Clean AS137643MANAGE SERVERManage Server13/04/2026, 20:12:0117/04/2026, 02:33:43 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:29:17-
125.118.36.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Hangzhou13/04/2026, 20:12:0014/04/2026, 01:30:46 No No --07/04/2026, 22:29:24-
23.100.102.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:12:0014/04/2026, 01:30:46 No No --07/04/2026, 22:29:27-
38.7.207.•••:18789 - 🇨🇱 Chile - true Clean AS263702GRUPO ZGH SPAGrupo ZGH13/04/2026, 20:12:0017/04/2026, 18:46:44 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-29323, CVE-2023-31122, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:29:36-
20.225.147.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:12:0014/04/2026, 02:16:26 - - ----
38.242.158.•••:18789 - 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo13/04/2026, 20:12:0017/04/2026, 08:34:28 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-52046, CVE-2024-39894, CVE-2024-45692, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2025-6773813/04/2026, 22:29:44cogentco.com, contaboserver.net
18.189.75.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon13/04/2026, 20:12:0014/04/2026, 02:16:26 No No -CVE-2023-44487, CVE-2024-39894, CVE-2024-52804, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-47287, CVE-2025-61984, CVE-2025-61985, CVE-2025-67724, CVE-2025-67725, CVE-2025-6772613/04/2026, 22:29:46-
161.33.34.•••:18789 - 🇺🇸 United States Yes true Leaked AS31898Oracle CorporationOracle13/04/2026, 20:12:0016/04/2026, 19:01:24 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:29:47healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
104.192.80.•••:18789 - 🇺🇸 United States Yes true Clean AS398478PEG TECH INCDignitas Technology13/04/2026, 20:12:0017/04/2026, 03:18:59 No Yes APT28, APT35, APT37, APT39, APT41, Cobalt Group, Equation Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-0777, CVE-2016-0778, CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161713/04/2026, 22:29:48-
20.196.207.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:12:0014/04/2026, 02:16:26 No Yes Packrat-13/04/2026, 22:29:50-
167.172.27.•••:18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean13/04/2026, 20:12:0018/04/2026, 00:40:36 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:29:53-
5.78.205.•••:18789 - 🇺🇸 United States - true Clean AS212317Hetzner Online GmbHHetzner13/04/2026, 20:11:5917/04/2026, 10:03:54 - - ----
65.109.170.•••:18789 - 🇫🇮 Finland Yes true Leaked AS24940Hetzner Online GmbHHetzner Online13/04/2026, 20:11:5914/04/2026, 02:16:26 Yes Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:30:00hetzner.com
185.154.195.•••:18789 - 🇷🇺 Russia Yes true Clean AS9123JSC "TIMEWEB"TimeWeb13/04/2026, 20:11:5916/04/2026, 15:13:59 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Salt Typhoon, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:30:04-
95.217.35.•••:18789 - 🇫🇮 Finland Yes true Leaked AS24940Hetzner Online GmbHHetzner13/04/2026, 20:11:5916/04/2026, 19:01:20 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-46981, CVE-2024-51741, CVE-2024-53846, CVE-2024-6387, CVE-2025-26465, CVE-2025-26618, CVE-2025-30211, CVE-2025-32433, CVE-2025-32728, CVE-2025-46712, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:30:08hetzner.com
4.151.140.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:5514/04/2026, 00:43:08 - - ----
51.178.50.•••:18789 - 🇫🇷 France - true Leaked AS16276OVH SASOVH13/04/2026, 20:09:4917/04/2026, 01:01:04 Yes No -CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 09:45:49ovh.net
143.198.83.•••:18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean13/04/2026, 20:09:4818/04/2026, 00:38:39 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-46848, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-23638, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-39894, CVE-2024-45802, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-54574, CVE-2025-59362, CVE-2025-61984, CVE-2025-61985, CVE-2025-6216814/04/2026, 11:18:44-
82.158.230.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS401701cognetcloud INCVapeliner Technology (HK) Limited13/04/2026, 20:09:4816/04/2026, 14:26:11 - - ----
108.165.135.•••:18789 - 🇺🇸 United States - true Leaked AS20068Hawk Host Inc.Netutils13/04/2026, 20:09:4818/04/2026, 00:39:24 Yes Yes APT15, APT28, APT31, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2023-51766, CVE-2024-3992914/04/2026, 11:16:21arandomserver.com, hawkhost.com, ipxo.com, cyberassets.ae
52.141.2.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:4814/04/2026, 01:28:33 - - ----
57.131.50.•••:18789 - 🇮🇹 Italy Yes true Clean AS16276OVH SASVPS EU South Mil 113/04/2026, 20:09:4815/04/2026, 12:41:30 - - ----
109.228.37.•••:18789 - 🇬🇧 United Kingdom - true Clean AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.GB Glo Con NGCS Public13/04/2026, 20:09:4814/04/2026, 01:28:33 - - ----
4.151.157.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:4714/04/2026, 01:28:33 - - ----
20.97.69.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:4714/04/2026, 01:28:33 - - ----
36.50.26.•••:18789 - 🇻🇳 Vietnam Yes true Clean AS150895EZ TECHNOLOGY COMPANY LIMITEDBlue Sky Network Infrastructure Solutions13/04/2026, 20:09:4714/04/2026, 01:28:32 - - ----
46.225.229.•••:18789 - 🇩🇪 Germany Yes true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:09:4716/04/2026, 16:42:52 - - ----
156.239.224.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS154321CORENET CLOUD SDN. BHD.Binary Networks Solutions LLC13/04/2026, 20:09:4616/04/2026, 22:00:45 - - ----
20.91.213.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:4614/04/2026, 01:28:32 - - ----
61.171.78.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4811China Telecom (Group)ChinaNet13/04/2026, 20:09:4616/04/2026, 13:41:02 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 08:10:49online.sh.cn
213.238.182.•••:18789 - 🇹🇷 Türkiye Yes true Clean AS207279MARKAHOSTMarka Host13/04/2026, 20:09:4617/04/2026, 10:01:42 - - ----
34.230.230.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon13/04/2026, 20:09:4514/04/2026, 21:42:26 No No -CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-54352, CVE-2025-58246, CVE-2025-5867414/04/2026, 01:28:34-
72.56.112.•••:18789 - 🇩🇪 Germany Yes true Clean AS210976Timeweb, LLPTaiwan Cloud13/04/2026, 20:09:4416/04/2026, 14:26:16 - - ----
2a02:4780:2d:6da2::1:18789 - 🇺🇸 United States - true Clean AS47583Hostinger International LimitedHostinger13/04/2026, 20:09:4416/04/2026, 16:42:47 - - ----
98.92.186.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services13/04/2026, 20:09:4414/04/2026, 01:28:30 No No --08/04/2026, 01:28:42-
172.67.185.•••:18789 - 🇺🇸 United States - true Leaked AS13335Cloudflare, Inc.Cloudflare13/04/2026, 20:09:4414/04/2026, 01:28:30 Yes No --14/04/2026, 01:28:45diamondheaddental.com, stuartsyoondds.com, oradelldentistry.com, danca.tv, geyerdental.com, gracifamilydental.com, samuelhuangdental.com, drronaldli.com, drboatwright.com, kirklanddentalsmile.com, carsonchiropractic.com, sandiegodmd.com, scvascular.com, chesterfielddentalassoc.com, leggiodental.com, erdmandentalimplants.com, nita.go.ug, royaltondental.com, classicelectricomaha.com, socialprotection.go.ug, levinefamilydentistry.com, cgmprecast.com, desertridgesmiles.com, lanterndental.com, lindsborgsmiles.com, bikeweeksa.com, masakacity.go.ug, ggperio.com, ics-line.com, troydermatology.com, andersonfamilyandcosmeticdentistry.com, drmumford.com, garganofamilydentistry.com, davidchodesdds.com, sleepmanatee.net, largemandental.com, lamesadental.com, hzfeidi.com, gd4kids.com, clydencdentistry.com, hopperinsuranceagency.com, chirolansing.com, apalib.fr, cvilledds.com, georgejacobsdmd.com, mobeus.com, checkmycolon.com, leesburgsouthgatedental.com, hbbygd88.com, technologybuyersguide.com, hollywoodfootdoc.com, fuhuake.com, nfsgendo.com, fontainecenter.com, allfamilyshorelinedental.com, mayfairdental.com, cityfied.net, co.de, cleanteethseaside.com, entsurgicalgroup.net, abpincorp.com, floydadadental.com, uniquedentalcares.com, andersonpediatricdental.com, anlink.net, garzadentaltx.com, sarheumatology.com, jekotrade.com, loredohands.com, hmcxjc.com, brilliantsmilesdental.net, shsinotech.com, vbankph.com, drmiltongeivelis.com, gipnutmeg.com, bopcon.com, omniumworldwide.com, cpcchem.com, dicksporting.com, mountainstatevascular.com, transpaaccessoires.com, bcu.org, naseni.gov.ng, mycambridgedentist.com, miterrydental.com, judgeyachts.com, oswegodentistry.com, johnstoneperio.com, calvarycare.org.au, footandankledocsofva.com, fredericksburgent.com, boyu-group.com, newhopedentistry.com, yourfamilydentistaz.com, ekakitchen.com, northvillesmiles.com, texanfamilyclinic.com, wisehousetech.com, dermdoctorsnva.com, ayadentistry.com, brianjohnsonmd.com, sexsingles.com, cloudflare.net, unitedpainurgentcare.com, stepforwardfootandankle.com, qd-baolian.com, csofam.com, mynewimagedds.com, orlandchildrenscenter.com, millbrookpodiatrist.com, cccid.net, delcarehealth.com, murdockpediatrics.com, gadsdendentists.com, premierpediatricsin.com, brockorthodontics.com, periodonticimplants.com, jxlingtong.com, aplusped.com, centerdentalassociates.com, duplindental.com, samanthajohnsondmd.com, ocgracepeds.com, sonomadermatology.com, alpinedentalnorthbend.com, ashvilledentalcenter.net, gardencitydentalgroup.com, gibbonsfootandankle.com, mysunrisedentist.com, apamad.fr, presoteaus.com, gloriouscolor.com, baselinewoods.com, araoent.com, wolffamilydentistry.net, eaglemailboxsales.com, agriculture.go.ug, lindidds.com, freeholdfamilydentistry.com, vestaviaaldentist.com, rosewomenshealth.com, groupe-equilibre.fr, jiabinnu.com, dentalplacetx.com, footandanklecg.com, codification.com, alghanitex.com, qzz.io, paspeds.com, fresconeedham.com, isthmusdental.com, kfstock.com, stallingsdentalcare.com, uedcl.co.ug, nancyduggandds.com, thecompletefamilydentistry.com, brownsprinting.com, potere-tech.com, m-printone.com, cloudhq-mkt6.net, roshdental.com, thesmilecenterofnj.com, nygastrodoctor.net, clarkstondentalgroup.com, paulhannadental.com, kaiservacations.com, northscottsdalefootandanklecenter.com, extractproduction.com, smilemora.com, shrinkpeters.com, atlantaskinandaesthetics.com, aligndoc.com, timing-tech.com, klmymmyc.com, greenwellesleydental.net, chdservice.com.br, paulambushmd.com, instepspecialists.net, woodworksrefinish.com, fixtel.com.au, drvahil.com, adkinsfamilydentistry.net, pp.ua, wenn.com, icelandia.com, hnbeixiang.com, atdentalcenter.com, creativesmilesaz.com, ugapost.co.ug, peoples-dental.com, urbra.go.ug, leisonhk.com, eastoverfootandankle.com, myfreshsmiles.com, xjjingyoga.com, dongfanggufen.net, sxgas.net, wakechem.com, jwvalentinedmd.com, westhartforddentalcare.com, karskidental.com, macombcosmeticdentistry.com, ankromdental.com, acedentalweymouth.com, whatyouth.com, markgamalindadds.com, 1haojiyin.com, sinotransfj.com, drmarinamanuntsdds.com, amblerpeds.com, felixcaredental.com, aptenonsjz.com, eurostampiparma.it, paradentalcare.com, loreal.cz, annethaimd.com, chiropractorlinkstlouis.com, elitesmilesokc.com, thedentist4u.com, rosenberryfamilydental.com, villagesleeplab.com, snpclasvegas.com, lasouthbaydental.com, jamesonsfloralpark.com, detongwiremesh.com, cornwallfd.com, sanhoos.com, simatek.com, plattsburghpediatrician.com, jeffreyahlertdds.com, dgclh.com, bamko.net, magnificofamilydentistry.com, hansecontrol.com, beautifulsmilesbydrlloyd.com, norfolkfamilyandpediatricdentistry.com, lstcarbon.com, newportpeds.com, cliftonnjdentist.net, 363pleasantstreetdental.com, campushillsdentistry.net, woburndentalgroup.com, leecosmeticdentistry.com, ttstest.com, robertsteinbergmd.com, eriepodiatry.com, dremiliohernandez.com, bdkdesign.com.ar, gaetanasnyc.com, fia.go.ug, anamazingsmileaz.com, palozolafamilydental.com, oldivydental.com, puyallupdds.com, phamilydentalservice.com, yhjgkeji.com, cimedremedios.com.br, poolerpd.com, umra.go.ug, foxtrons.com, warensdental.com, tevimed.com, wonderfulskin.com, china-one.net, mariettapodiatrygroup.com, onegrandsmile.net, mcneilldentistry.com, eu.org, davidamurphydds.com, bierte.com, dentalartsdesign.com, tallahasseefamilydentistry.net, dentistwestfieldin.com, tulsageneralveterinaryhospital.com, shellservice.dk, otisa.com, satyadermatology.com, olimdentist.com, com.de, qe.de, ttyt360.com, mandarinoriental.it, phillipdondds.com, hancockalbanese.com, mydhaga.com, keystonetowersystems.com, dentistinjonesboroar.com, piedental.com, bradydentalgroup.net, lenhorovitz.com, doradver.ru, milosmedical.com, clemsondental.com, maginus.com, jerigruenesdpm.com, barnesdennig.com, dccenergi.dk, access4.com, plateaufoot.com, drscholler.com, drjamescovan.com, richlandtexas.gov, killinglydentalcare.com, drbrewsterdds.com, zgkaite.com, turnoutservices.com, primecarecg.com, rimrockpodiatry.com, hometownfamilydental502.com, thefoundationforartanddesign.org, eilerfamilydentistry.com, lowellfamilydentalpractice.com, nedentalwellness.com, belfbeckerdental.com, zjdddl.com, nfgsales.com, jamesccalvindds.com, hbpodiatry.com, everettgeneraldentistry.com, drtrudybennett.com, saudichevron.com, toptutorsllc.com, inmanfamilydentistryraineshart.com, shintoandkato.com, advancedfoottexas.com, novadentist.com, oracle-ag.ch, whiteoakpeds.com, eyes-armour.com, zjhrbz.com, zhaowoo.net, jiangsufuji.com, elitesmilesnc.com, adlerfamilydental.com, orchidentalgroup.com, turkishairlinesflightacademy.com, omwlogistics.com, buffalotracegastroenterology.com, bestwanhui.com, englewoodent.com, familysmilecarecenter.com, smilesaverdental.com, princess.com, abbeyfieldstreetdentist.com, lavernedentalcenter.com, glenridgedentalarts.com, cpchem.com, newlondonchiropractor.com, hagroup.com, millvalleydental.com, finance.go.ug, bain86.com, padoniadentalassociates.com, mitchelkatzmd.com, fxgowin.com, franklinlackeedds.com, jt-md.com, stavarachefamilydental.com, perimenisdental.com, haydelchiropractic.com, huffandhuffdentistry.com, littlefieldsmiles.com, langhorstfamilydentistry.com, hrz.fr, eushipments.com, kennethdpilgrimdmd.com, dermatologyok.com, adobegastroenterology.com, fletcherfamilydentistrysc.com, workers.dev, eastendfamilydentistry.com, nolanica.com, tcpga.com, ahhdental.com, edeninternalmedicine.com, calltheclinic.com, newoceanfood.com, grupocimed.com.br, charmiesonidmd.com, dechuangjixie.com, oviedopointdental.com, mallyas.com, greenedentalgroup.com, thenewthings.com, todaysdental.net, irislshieldsdds.com, cloudns.net, franklincountypodiatrist.com, 360-xj.com, xjwfcj.com, westparkprimarycare.com, bulverdedental.com, varlotplc.com, lakecumberlandpediatricdentistry.com, new-yorkpsychology.com, footfirstpodiatry.net, owyheefamilydental.com, normansenzakidds.com, shenandoahdermatology.com, jefferyhurstdds.com, thepreventativemedicine.com, smiles4hollywood.com, bestburiendentist.com, impresosmonterrey.com, shworldbest.com, zsnet.net, dentiststoughton.com, mauryfamilydental.com, dongguansenzi.com, buckeyedentistry.com, warrentonamazingsmile.com, carrollcountydental.com, cepedapediatrics.com, scsatx.net, performancepipe.com, linolakesfamilydentistry.com, china114.net, abcpedsgso.com, hcahealthcarecu.org, eliteankleandfoot.com, drisabellereed.com, saifamilydentistry.com, chevychasedermatologycenter.com, goodingdentalhealth.com, drgilliarddmd.com, georgemalkedds.com, rideautowndentalcare.com, cetec.com.au, xjhongshun.com, cedardentalmi.com, kmurphydental.com, kampferdds.com, warnerrobinsfootandankle.com, dentistspa.com, loginport.com, gou.go.ug, domenicbaglivo.com, geochem.org, drdubow.com, food-machines.net, kazemifardds.com, eastbrunswicknewimagedental.com, shieldengineering.com
52.141.4.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:4414/04/2026, 01:28:30 - - ----
218.90.11.•••:18789 - 🇨🇳 China mainland - true Clean AS4134ChinanetChinaNet Jiangsu13/04/2026, 20:09:4414/04/2026, 01:28:30 - - ----
91.99.73.•••:18789 - 🇩🇪 Germany - true Leaked AS24940Hetzner Online GmbHHetzner Online13/04/2026, 20:09:4417/04/2026, 01:01:10 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:28:50hetzner.com
160.191.29.•••:18789 - 🇮🇳 India - true Clean AS150623HOSTDZIRE WEB SERVICES PRIVATE LIMITEDPrimehost OPC Private Limited13/04/2026, 20:09:4414/04/2026, 09:00:22 No No -CVE-2023-44487, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:28:51-
8.163.17.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud13/04/2026, 20:09:4414/04/2026, 01:28:29 No No --08/04/2026, 01:28:53-
49.12.121.•••:18789 - 🇩🇪 Germany Yes true Leaked AS24940Hetzner Online GmbHHetzner13/04/2026, 20:09:4316/04/2026, 18:59:00 Yes No -CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:28:54hetzner.de, your-server.de, hetzner.com
157.230.19.•••:18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean13/04/2026, 20:09:4317/04/2026, 17:26:30 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138514/04/2026, 01:28:55-
178.104.81.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:09:4317/04/2026, 06:16:59 - - ----
2a02:c207:2304:5147::1:18789 - 🇫🇷 France - true Clean AS51167Contabo GmbHContabo13/04/2026, 20:09:4314/04/2026, 01:28:29 - - ----
20.10.38.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:4314/04/2026, 01:28:29 No Yes APT34, APT35, APT37, APT41, Bluenoroff, Callisto Group, Cobalt Group, Gamaredon Group, Lazarus Group, MoustachedBouncer, MuddyWater Group, Sandworm Team, TA505CVE-2007-4559, CVE-2013-0340, CVE-2016-20012, CVE-2018-1060, CVE-2018-20406, CVE-2018-20852, CVE-2019-10160, CVE-2019-15903, CVE-2019-16056, CVE-2019-16935, CVE-2019-18348, CVE-2019-20907, CVE-2019-5010, CVE-2019-9636, CVE-2019-9740, CVE-2019-9947, CVE-2019-9948, CVE-2020-12062, CVE-2020-14145, CVE-2020-14422, CVE-2020-15778, CVE-2020-26116, CVE-2020-27619, CVE-2020-8315, CVE-2020-8492, CVE-2021-23336, CVE-2021-28041, CVE-2021-28359, CVE-2021-28861, CVE-2021-3177, CVE-2021-3426, CVE-2021-36368, CVE-2021-3733, CVE-2021-3737, CVE-2021-41617, CVE-2021-4189, CVE-2022-0391, CVE-2022-37454, CVE-2023-24329, CVE-2023-2704314/04/2026, 01:29:02-
175.147.116.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Liaoning13/04/2026, 20:09:4217/04/2026, 04:46:46 - - ----
13.201.57.•••:18789 - 🇮🇳 India - true Clean AS16509Amazon.com, Inc.Amazon Web Services13/04/2026, 20:09:4217/04/2026, 01:01:07 No No -CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:29:20-
154.12.91.•••:18789 - 🇭🇰 Hong Kong Yes true Leaked AS401696cognetcloud INCFOJ IP Technology13/04/2026, 20:09:4217/04/2026, 07:47:15 Yes Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-3272814/04/2026, 01:29:28cogentco.com
208.115.216.•••:18789 - 🇨🇦 Canada - true Clean AS46475Limestone Networks, Inc.Breezehost13/04/2026, 20:09:4116/04/2026, 16:42:50 - - ----
154.205.37.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS9294GNET INC.Cloud Innovation13/04/2026, 20:09:4116/04/2026, 20:30:25 No No --08/04/2026, 01:29:41-
124.222.8.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/04/2026, 20:09:4117/04/2026, 04:01:45 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-29885, CVE-2022-34305, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138514/04/2026, 01:29:42tencent.com
192.142.45.•••:18789 - 🇳🇱 Netherlands - true Clean AS214036Ultahost, Inc.Ultahost13/04/2026, 20:09:4117/04/2026, 18:44:18 No No --08/04/2026, 01:29:44-
204.168.209.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:09:4117/04/2026, 01:01:08 - - ----
20.240.141.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:4014/04/2026, 01:28:26 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161714/04/2026, 01:29:55-
200.10.106.•••:18789 - 🇦🇷 Argentina Yes true Leaked AS10834Telefonica de ArgentinaTelefonica Argentina13/04/2026, 20:09:4017/04/2026, 21:39:41 Yes Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, WIRTECVE-2006-20001, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-4580214/04/2026, 01:29:57chickenkiller.com, quickconnect.to, fastspeed.dk, terra.com.ar, movistar.com.ar, tuenti.com.ar, telefonica.com, movistararena.com.ar, telefonica.com.ar
47.97.37.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/04/2026, 20:09:4014/04/2026, 01:28:26 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138514/04/2026, 01:29:58-
32.193.132.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon13/04/2026, 20:09:4016/04/2026, 21:15:33 - - ----
8.130.142.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud13/04/2026, 20:09:3917/04/2026, 10:01:59 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272814/04/2026, 01:30:09-
82.156.59.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing13/04/2026, 20:09:3916/04/2026, 19:44:48 No No --08/04/2026, 01:30:17-
138.199.219.•••:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:09:3916/04/2026, 18:13:29 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:30:18-
204.168.193.•••:18789 - 🇫🇮 Finland - true Clean AS24940Hetzner Online GmbHHetzner13/04/2026, 20:09:3917/04/2026, 03:16:38 - - ----
20.97.51.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:3914/04/2026, 01:28:25 - - ----
3.145.76.•••:18789 - 🇺🇸 United States - true Clean AS16509Amazon.com, Inc.Amazon13/04/2026, 20:09:3814/04/2026, 17:27:06 No No --08/04/2026, 01:30:32-
59.110.6.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/04/2026, 20:09:3817/04/2026, 04:46:42 Yes No -CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341914/04/2026, 01:30:35aliyun.com
20.225.99.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:3814/04/2026, 01:28:24 - - ----
113.45.164.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS55990Huawei Cloud Service data centerHuawei Cloud13/04/2026, 20:09:3716/04/2026, 16:42:46 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272816/04/2026, 16:46:24smartcom.cc, huawei.com, huaweidevice.com
20.97.23.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:3714/04/2026, 01:28:23 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:30:43-
106.52.146.•••:18789 - 🇨🇳 China mainland - true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/04/2026, 20:09:3717/04/2026, 04:46:45 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-2341914/04/2026, 01:30:47tencent.com
8.134.220.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud13/04/2026, 20:09:3716/04/2026, 22:45:59 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138514/04/2026, 01:30:55-
203.57.85.•••:18789 - 🇮🇳 India Yes true Clean AS137643MANAGE SERVERManage Server13/04/2026, 20:09:3717/04/2026, 02:31:23 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:30:56-
125.118.36.•••:18789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Hangzhou13/04/2026, 20:09:3614/04/2026, 02:14:00 No No --08/04/2026, 01:31:01-
23.100.102.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:3614/04/2026, 02:14:00 No No --08/04/2026, 01:31:02-
38.7.207.•••:18789 - 🇨🇱 Chile - true Clean AS263702GRUPO ZGH SPAGrupo ZGH13/04/2026, 20:09:3617/04/2026, 18:44:14 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-29323, CVE-2023-31122, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 01:31:08-
20.225.147.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft13/04/2026, 20:09:3614/04/2026, 02:14:00 - - ----
38.242.158.•••:18789 - 🇩🇪 Germany Yes true Leaked AS51167Contabo GmbHContabo13/04/2026, 20:09:3617/04/2026, 09:17:16 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-52046, CVE-2024-39894, CVE-2024-45692, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2025-6773814/04/2026, 01:31:12cogentco.com, contaboserver.net