🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 234899 Page: 344 / 2349 (100 per page) Showing: 34301-34400 Last Imported: 03/03/2026, 10:47:41
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 344 of 2349
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
46.101.133.••• :18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean03/03/2026, 04:02:3903/03/2026, 10:11:39 - - ----
2a02:4780:5e:a851::1:18789 - 🇲🇾 Malaysia - true Clean AS47583Hostinger International LimitedHostinger17/02/2026, 04:01:2603/03/2026, 10:11:38 - - ----
120.48.0.••• :18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu15/02/2026, 09:34:4903/03/2026, 10:11:38 Yes Yes APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161716/02/2026, 00:17:16chinamobile.com, chinamobile.cn, baidu.com
158.220.107.••• :18789 - 🇩🇪 Germany - true Leaked AS51167Contabo GmbHContabo19/02/2026, 14:06:5803/03/2026, 10:11:38 Yes Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/02/2026, 08:24:26contabo.de, contabo.net
115.190.225.••• :18789 mimi / 咪咪 (🐱) 🇨🇳 China mainland Yes true Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology28/02/2026, 04:44:2403/03/2026, 10:11:38 - - ----
43.136.18.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing03/02/2026, 22:43:5903/03/2026, 10:11:38 Yes No --05/02/2026, 14:16:19tencent.com
138.197.178.••• :18789 - 🇩🇪 Germany Yes true Clean AS14061DigitalOcean, LLCDigitalOcean26/02/2026, 23:48:2203/03/2026, 10:11:38 - - ----
1.14.111.••• :18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud03/03/2026, 04:02:3903/03/2026, 10:11:38 - - ----
165.245.131.••• :18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean15/02/2026, 21:16:5503/03/2026, 10:11:38 - - ----
120.48.159.••• :18789 Assistant 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu22/02/2026, 13:03:2103/03/2026, 10:11:38 - - ----
47.85.104.••• :18789 - 🇨🇳 China mainland Yes true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud28/02/2026, 04:44:2603/03/2026, 10:11:38 - - ----
170.106.151.••• :18789 - 🇺🇸 United States Yes true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd27/02/2026, 23:33:3003/03/2026, 10:11:38 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-638727/02/2026, 23:33:46-
180.76.145.••• :18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu12/02/2026, 05:57:4703/03/2026, 10:11:38 - - ----
111.231.113.••• :18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
120.48.154.••• :18789 Assistant 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
111.229.189.••• :18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud25/02/2026, 04:00:2903/03/2026, 10:11:38 - - ----
106.12.175.••• :18789 Assistant (🌿) 🇨🇳 China mainland Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu16/02/2026, 07:34:3503/03/2026, 10:11:38 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-22/02/2026, 22:50:45bj189.cn, baidu.com
43.134.27.••• :18789 - 🇸🇬 Singapore - true Clean AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
120.48.129.••• :18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu25/02/2026, 05:30:0503/03/2026, 10:11:38 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT37, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, DragonFly, El-Machete, Gamaredon Group, Gaza Cybergang, Gozi, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138528/02/2026, 05:30:17chinamobile.com, chinamobile.cn, baidu.com
3.9.17.••• :18789 - 🇬🇧 United Kingdom - true Clean AS16509Amazon.com, Inc.Amazon Web Services27/02/2026, 22:54:5903/03/2026, 10:11:38 No Yes APT15, APT28, APT31, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APTCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138501/03/2026, 01:32:59-
47.99.172.••• :18789 Assistant 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft28/02/2026, 15:50:2303/03/2026, 10:11:38 - - ----
1.14.2.••• :18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud02/03/2026, 19:03:4603/03/2026, 10:11:38 - - ----
89.167.55.••• :18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner13/02/2026, 02:33:3003/03/2026, 10:11:38 - - ----
103.97.178.••• :18789 - 🇭🇰 Hong Kong - true Clean AS401696cognetcloud INCHong Kong Cloud Network Technology Co., Limited03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
149.88.74.••• :18789 - 🇭🇰 Hong Kong Yes true Clean AS401696cognetcloud INCHong Kong Cloud Network Technology Co Ltd25/02/2026, 12:57:4403/03/2026, 10:11:38 - - ----
110.42.110.••• :18789 - 🇨🇳 China mainland Yes true Clean AS136188NINGBO, ZHEJIANG Province, P.R.China.Ningbo Zhuo Zhi Innovation Network Technology03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
139.59.174.••• :18789 - 🇬🇧 United Kingdom - true Leaked AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 18:57:5803/03/2026, 10:11:38 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 19:02:27rcnhost.com, digitaloceanspaces.com, paperspace.io, digitalocean.com, scotch.io, snapshooter.com, paperspace.com, css-tricks.com
2a02:4780:4:79d::1:18789 - 🇺🇸 United States - true Clean AS47583Hostinger International LimitedHostinger09/02/2026, 11:38:5903/03/2026, 10:11:38 - - ----
43.156.229.••• :18789 - 🇸🇬 Singapore Yes true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
120.48.2.••• :18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu13/02/2026, 10:36:3303/03/2026, 10:11:38 Yes Yes APT17, APT28, APT37, APT41, DragonFly, El-Machete, Equation Group, Gozi, PackratCVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2016-0777, CVE-2017-1590617/02/2026, 00:21:03chinamobile.com, chinamobile.cn, baidu.com
142.93.106.••• :18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean24/02/2026, 03:08:1303/03/2026, 10:11:38 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2014-0128, CVE-2014-3609, CVE-2014-6270, CVE-2014-7141, CVE-2014-7142, CVE-2015-3455, CVE-2016-10002, CVE-2016-10708, CVE-2016-20012, CVE-2016-2569, CVE-2016-2570, CVE-2016-2571, CVE-2016-3948, CVE-2016-4051, CVE-2016-4052, CVE-2016-4053, CVE-2016-4054, CVE-2016-4555, CVE-2016-4556, CVE-2017-15906, CVE-2018-1000024, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-12519, CVE-2019-12521, CVE-2019-12523, CVE-2019-12526, CVE-2019-12529, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11945, CVE-2020-12062, CVE-2020-14058, CVE-2020-14145, CVE-2020-15049, CVE-2020-15778, CVE-2020-25097, CVE-2021-28041, CVE-2021-28651, CVE-2021-31807, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/02/2026, 20:18:34-
23.95.181.••• :18789 - 🇺🇸 United States Yes true Clean AS36352HostPapaRackNerd03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
106.12.165.••• :18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
43.160.241.••• :18789 - 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd25/02/2026, 12:57:4303/03/2026, 10:11:38 Yes No -CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198526/02/2026, 02:14:11tencent.com
143.110.230.••• :18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean27/02/2026, 13:49:3803/03/2026, 10:11:38 - - ----
138.68.73.••• :18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean02/03/2026, 12:21:0903/03/2026, 10:11:38 - - ----
180.76.111.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu12/02/2026, 12:32:4003/03/2026, 10:11:38 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-25/02/2026, 04:02:51tfn.net.tw, baidu.com
154.12.55.••• :18789 - 🇺🇸 United States Yes true Clean AS979NetLab GlobalNetLab Global03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
38.12.6.••• :18789 - 🇺🇸 United States - true Clean AS400619AROSSCLOUD INC.PEG Technology03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
54.166.58.••• :18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon18/02/2026, 16:17:5103/03/2026, 10:11:38 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161719/02/2026, 06:44:41-
167.172.185.••• :18789 - 🇩🇪 Germany - true Clean AS14061DigitalOcean, LLCDigitalOcean02/03/2026, 19:48:1803/03/2026, 10:11:38 No Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-734702/03/2026, 19:49:29-
14.103.221.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology12/02/2026, 11:04:4203/03/2026, 10:11:38 Yes No --22/02/2026, 04:54:33bytedance.com
15.235.211.••• :18789 - 🇸🇬 Singapore Yes true Clean AS16276OVH SASOVH Singapore25/02/2026, 23:58:0303/03/2026, 10:11:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2006-20001, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620026/02/2026, 02:58:33ovh.ca, eu.org
2a02:4780:12:b47e::1:18789 - 🇮🇳 India - true Clean AS47583Hostinger International LimitedHostinger05/02/2026, 10:02:3603/03/2026, 10:11:38 - - --06/02/2026, 02:12:19-
47.86.38.••• :18789 - 🇭🇰 Hong Kong Yes true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK01/03/2026, 13:15:4003/03/2026, 10:11:38 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/03/2026, 00:33:46-
43.157.224.••• :18789 Assistant 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd16/02/2026, 04:38:3103/03/2026, 10:11:38 Yes No -CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/03/2026, 08:50:36tencent.com, qzz.io
167.99.72.••• :18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 04:06:1903/03/2026, 10:11:38 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Domestic Kitten, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA428, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2006-7243, CVE-2007-1581, CVE-2007-6750, CVE-2008-0005, CVE-2008-0455, CVE-2008-0456, CVE-2008-2364, CVE-2008-2371, CVE-2008-2665, CVE-2008-2666, CVE-2008-2829, CVE-2008-2939, CVE-2008-3658, CVE-2008-3659, CVE-2008-3660, CVE-2008-5498, CVE-2008-5557, CVE-2008-5624, CVE-2008-5625, CVE-2008-5658, CVE-2008-5814, CVE-2008-7068, CVE-2009-1195, CVE-2009-1271, CVE-2009-1272, CVE-2009-1890, CVE-2009-1891, CVE-2009-1956, CVE-2009-2626, CVE-2009-2687, CVE-2009-2699, CVE-2009-3094, CVE-2009-3095, CVE-2009-3291, CVE-2009-3292, CVE-2009-3293, CVE-2009-3555, CVE-2009-3557, CVE-2009-3558, CVE-2009-4018, CVE-2009-4142, CVE-2009-4143, CVE-2009-4418, CVE-2009-5016, CVE-2010-0408, CVE-2010-0434, CVE-2010-1128, CVE-2010-1129, CVE-2010-1130, CVE-2010-1452, CVE-2010-1860, CVE-2010-1861, CVE-2010-1862, CVE-2010-1864, CVE-2010-1868, CVE-2010-1914, CVE-2010-1915, CVE-2010-1917, CVE-2010-2093, CVE-2010-2097, CVE-2010-2100, CVE-2010-2101, CVE-2010-2190, CVE-2010-2191, CVE-2010-2225, CVE-2010-2484, CVE-2010-2531, CVE-2010-3065, CVE-2010-3436, CVE-2010-3709, CVE-2010-3710, CVE-2010-3870, CVE-2010-4645, CVE-2010-4657, CVE-2010-4697, CVE-2010-4699, CVE-2011-0419, CVE-2011-0421, CVE-2011-0708, CVE-2011-0752, CVE-2011-0755, CVE-2011-1092, CVE-2011-1153, CVE-2011-1464, CVE-2011-1466, CVE-2011-1467, CVE-2011-1468, CVE-2011-1469, CVE-2011-1470, CVE-2011-1471, CVE-2011-2483, CVE-2011-3182, CVE-2011-3192, CVE-2011-3267, CVE-2011-3268, CVE-2011-3368, CVE-2011-3607, CVE-2011-3639, CVE-2011-4317, CVE-2011-4415, CVE-2011-4718, CVE-2011-4885, CVE-2012-0031, CVE-2012-0053, CVE-2012-0057, CVE-2012-0788, CVE-2012-0789, CVE-2012-0883, CVE-2012-1171, CVE-2012-1172, CVE-2012-1823, CVE-2012-2311, CVE-2012-2336, CVE-2012-2687, CVE-2012-2688, CVE-2012-3365, CVE-2012-3499, CVE-2012-4558, CVE-2013-1635, CVE-2013-1643, CVE-2013-1862, CVE-2013-1896, CVE-2013-2110, CVE-2013-4248, CVE-2013-4635, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-8626, CVE-2014-9427, CVE-2015-8994, CVE-2016-20012, CVE-2016-4975, CVE-2016-5387, CVE-2016-7478, CVE-2016-8743, CVE-2017-15906, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-15473, CVE-2018-15919, CVE-2018-19520, CVE-2018-20685, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-28625, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272807/02/2026, 04:39:42-
124.222.38.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud09/02/2026, 13:06:0703/03/2026, 10:11:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT37, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138509/02/2026, 15:45:02tencent.com, chinaunicom.cn
89.117.19.••• :18789 - 🇺🇸 United States Yes true Leaked AS40021Contabo Inc.Internet Number Rent23/02/2026, 22:37:2503/03/2026, 10:11:38 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272824/02/2026, 19:03:20telecentras.lt
8.147.56.••• :18789 小凳子 (🪑) 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud03/02/2026, 22:37:0403/03/2026, 10:11:38 - - --05/02/2026, 05:27:59-
180.76.145.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu13/02/2026, 09:52:3003/03/2026, 10:11:38 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-19/02/2026, 11:10:40tfn.net.tw, baidu.com
34.146.141.••• :18789 - 🇺🇸 United States - true Clean AS396982Google LLCGoogle03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
157.230.34.••• :18789 - 🇸🇬 Singapore - true Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 14:36:5003/03/2026, 10:11:38 No Yes APT-C-23, APT-C-34, APT10, APT14, APT15, APT17, APT20, APT27, APT28, APT29, APT3, APT30, APT31, APT32, APT33, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, APT5, AVIVORE, Bitter APT, BlackTech APT, Bluenoroff, Bronze Butler APT, Callisto Group, Carbanak, Chimera APT, CloudSorcerer, Cobalt Group, Daggerfly APT, DarkHotel Group, Donot Team, Energetic Bear, Evil Eye APT, FIN6, Gamaredon Group, Gaza Cybergang, Goblin Panda, Gorgon Group, GreyEnergy Group, Hafnium Group, Ice Fog APT, Inception Framework, Iridium APT, IronHusky, Karma Panda, Kimsuky, Lazarus Group, Mikroceen APT, MuddyWater Group, Mustang Panda, Orangeworm, Pacha Group, Patchwork, Pioneer Kitten, Platinum Group, Promethium Group, Rancor Group, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, Silence Hacker Group, Stealth Falcon APT, Syrian Electronic Army, TA410, TA428, TA456, TA505, TA542, TeamSpy, The Shadow Brokers, Triton APT, Tropic Trooper, Turla APT Group, Vicious Panda, Volatile Kitten, Volt Typhoon, WIRTE, Wild Neutron, WildPressureCVE-2006-20001, CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2018-5740, CVE-2018-5741, CVE-2018-5743, CVE-2018-5744, CVE-2018-5745, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-10149, CVE-2019-13917, CVE-2019-15846, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6465, CVE-2019-6470, CVE-2019-6471, CVE-2019-9517, CVE-2020-11993, CVE-2020-12062, CVE-2020-12783, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-28007, CVE-2020-28008, CVE-2020-28009, CVE-2020-28010, CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014, CVE-2020-28015, CVE-2020-28016, CVE-2020-28017, CVE-2020-28018, CVE-2020-28019, CVE-2020-28020, CVE-2020-28021, CVE-2020-28022, CVE-2020-28023, CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2020-35452, CVE-2020-8015, CVE-2020-8616, CVE-2020-8617, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2020-9490, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-26690, CVE-2021-26691, CVE-2021-27216, CVE-2021-28041, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-38371, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-2795, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-37451, CVE-2022-37452, CVE-2022-38177, CVE-2022-38178, CVE-2023-25690, CVE-2023-27522, CVE-2023-2828, CVE-2023-28531, CVE-2023-31122, CVE-2023-3341, CVE-2023-38408, CVE-2023-38709, CVE-2023-4408, CVE-2023-45802, CVE-2023-48795, CVE-2023-50387, CVE-2023-51384, CVE-2023-51385, CVE-2023-51766, CVE-2024-1322, CVE-2024-1737, CVE-2024-1975, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-39929, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 14:55:19-
60.205.207.••• :18789 - 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft12/02/2026, 14:00:4103/03/2026, 10:11:38 Yes Yes APT-C-23, APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Earth Berberoka, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Turla APT Group, Volt Typhoon, WIRTECVE-2006-20001, CVE-2008-0455, CVE-2009-3560, CVE-2009-3720, CVE-2010-0434, CVE-2010-1452, CVE-2010-1623, CVE-2010-2068, CVE-2010-4478, CVE-2010-4755, CVE-2010-5107, CVE-2011-0419, CVE-2011-3192, CVE-2011-3348, CVE-2011-3368, CVE-2011-3607, CVE-2011-3639, CVE-2011-4317, CVE-2011-4327, CVE-2011-4415, CVE-2011-5000, CVE-2012-0031, CVE-2012-0053, CVE-2012-0814, CVE-2012-0883, CVE-2012-2687, CVE-2012-3499, CVE-2012-4557, CVE-2012-4558, CVE-2013-1862, CVE-2013-1896, CVE-2013-2249, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-0228, CVE-2015-3183, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-0777, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-4975, CVE-2016-5387, CVE-2016-6210, CVE-2016-6515, CVE-2016-8612, CVE-2016-8743, CVE-2017-15906, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-15778, CVE-2021-23017, CVE-2021-34798, CVE-2021-3618, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-37436, CVE-2022-41741, CVE-2022-41742, CVE-2023-28625, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2024-734715/02/2026, 11:50:05aliyun.com
167.86.83.••• :18789 - 🇩🇪 Germany Yes true Clean AS51167Contabo GmbHContabo03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
135.181.90.••• :18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner Online03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
174.138.81.••• :18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
120.48.18.••• :18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu13/02/2026, 21:00:4103/03/2026, 10:11:38 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-14/02/2026, 09:30:56chinamobile.com, chinamobile.cn, baidu.com
172.237.157.••• :18789 - 🇺🇸 United States Yes true Clean AS63949Akamai Connected CloudLinode20/02/2026, 05:46:5803/03/2026, 10:11:38 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198520/02/2026, 10:17:39-
1.12.62.••• :18789 - 🇨🇳 China mainland - true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud02/03/2026, 19:48:1803/03/2026, 10:11:38 Yes Yes APT37, El-Machete-02/03/2026, 19:49:37tencent.com
106.12.168.••• :18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
47.110.53.••• :18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
43.138.223.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing25/02/2026, 00:17:0003/03/2026, 10:11:38 Yes Yes APT37, El-MacheteCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161725/02/2026, 12:19:14tencent.com
156.225.28.••• :18789 - 🇺🇸 United States Yes true Clean AS401701cognetcloud INCVapeline Technology28/02/2026, 02:31:1703/03/2026, 10:11:38 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, goziCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-2352, CVE-2024-24768, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-39907, CVE-2024-39911, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-56413, CVE-2025-61984, CVE-2025-61985, CVE-2025-66507, CVE-2025-6650828/02/2026, 20:21:32-
111.228.61.••• :18789 - 🇨🇳 China mainland Yes true Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters02/03/2026, 07:54:3203/03/2026, 10:11:38 - - ----
78.46.197.••• :18789 - 🇩🇪 Germany Yes true Leaked AS24940Hetzner Online GmbHHetzner Online03/02/2026, 22:43:5603/03/2026, 10:11:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138504/02/2026, 21:36:09hetzner.com
98.91.61.••• :18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services02/03/2026, 15:19:4603/03/2026, 10:11:38 - - ----
148.135.43.••• :18789 Assistant 🇺🇸 United States Yes true Clean AS35916MULTACOM CORPORATIONBrander Group01/03/2026, 19:35:0403/03/2026, 10:11:38 - - ----
2409:8a00:2524:8cf0:9209:d0ff:fe50:c229:18789 - 🇨🇳 China mainland - true Clean AS56048China Mobile Communicaitons CorporationChina Mobile19/02/2026, 02:13:0103/03/2026, 10:11:38 - - ----
5.78.137.••• :18789 Bitsy (🐝) 🇺🇸 United States Yes true Leaked AS212317Hetzner Online GmbHHetzner Online14/02/2026, 06:31:5703/03/2026, 10:11:38 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/02/2026, 13:09:59hetzner.com
138.199.232.••• :18789 - 🇩🇪 Germany Yes true Clean AS24940Hetzner Online GmbHHetzner25/02/2026, 15:57:1403/03/2026, 10:11:38 No No --19/02/2026, 18:57:20-
120.48.131.••• :18789 Assistant 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu15/02/2026, 02:59:4603/03/2026, 10:11:38 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161718/02/2026, 01:00:53chinamobile.com, chinamobile.cn, baidu.com
43.154.149.••• :18789 - 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd27/02/2026, 21:04:2103/03/2026, 10:11:38 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/03/2026, 02:17:09tencent.com
152.53.61.••• :18789 - 🇩🇪 Germany - true Clean AS197540netcup GmbHAT ANX Holding 223/02/2026, 00:14:4003/03/2026, 10:11:38 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 14:24:31-
47.109.43.••• :18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft03/03/2026, 04:02:3803/03/2026, 10:11:38 - - ----
147.182.198.••• :18789 - 🇺🇸 United States Yes true Clean AS14061DigitalOcean, LLCDigitalOcean08/02/2026, 01:30:2003/03/2026, 10:11:38 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2019-12519, CVE-2020-11945, CVE-2020-12062, CVE-2020-14058, CVE-2020-14145, CVE-2020-15049, CVE-2020-15778, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606, CVE-2020-25097, CVE-2021-28041, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2021-46784, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41317, CVE-2022-41318, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-45802, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198508/02/2026, 01:37:13-
130.162.249.••• :18789 - 🇺🇸 United States Yes true Leaked AS31898Oracle CorporationOracle Cloud14/02/2026, 00:40:0303/03/2026, 10:11:38 Yes Yes DragonFly, Packrat, goziCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161717/02/2026, 01:04:23healtheintent.com, purewellness.com, cerner.ae, retek.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
74.48.7.••• :18789 - 🇺🇸 United States Yes true Leaked AS35916MULTACOM CORPORATIONMultacom Corporation09/02/2026, 22:30:0103/03/2026, 10:11:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198510/02/2026, 07:28:09multacom.com, qzz.io
170.64.211.••• :18789 - 🇦🇺 Australia - true Clean AS14061DigitalOcean, LLCDigitalOcean22/02/2026, 14:33:2603/03/2026, 10:11:37 No Yes APT15, APT17, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Salt Typhoon, SideWinder APTCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198523/02/2026, 02:32:55-
120.48.159.••• :18789 贾维斯 (🔥) 🇺🇸 United States Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/02/2026, 06:00:1003/03/2026, 10:11:37 Yes Yes APT37, El-Machete, Gozi-10/02/2026, 06:46:18chinamobile.com, chinamobile.cn, baidu.com
34.130.240.••• :18789 Assistant 🇺🇸 United States Yes true Clean AS396982Google LLCGoogle16/02/2026, 15:40:0903/03/2026, 10:11:37 No No -CVE-2016-8742, CVE-2017-12635, CVE-2017-12636, CVE-2018-11769, CVE-2018-17188, CVE-2018-20239, CVE-2018-8007, CVE-2019-11581, CVE-2019-15001, CVE-2019-20419, CVE-2019-3400, CVE-2020-14177, CVE-2020-14179, CVE-2021-26080, CVE-2021-26086, CVE-2021-38295, CVE-2021-39116, CVE-2021-39126, CVE-2021-39128, CVE-2021-41313, CVE-2021-43941, CVE-2021-43944, CVE-2021-43946, CVE-2021-43952, CVE-2022-0540, CVE-2022-24706, CVE-2022-36799, CVE-2022-36801, CVE-2023-26268, CVE-2023-4572520/02/2026, 00:33:53-
49.235.34.••• :18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud06/02/2026, 16:52:4303/03/2026, 10:11:37 Yes No --06/02/2026, 16:58:12truecorp.co.th, tencent.com
89.167.121.••• :18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner25/02/2026, 21:43:3803/03/2026, 10:11:37 - - ----
124.70.17.••• :18789 - 🇨🇳 China mainland Yes true Leaked AS55990Huawei Cloud Service data centerHuawei Cloud28/02/2026, 14:20:1703/03/2026, 10:11:37 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198528/02/2026, 18:05:13smartcom.cc, huawei.com, huaweidevice.com, chinaunicom.cn
134.209.50.••• :18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean18/02/2026, 15:06:4903/03/2026, 10:11:37 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198518/02/2026, 18:45:44-
106.13.13.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu13/02/2026, 01:04:2003/03/2026, 10:11:37 Yes Yes APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198522/02/2026, 01:53:43bj189.cn, baidu.com
204.141.218.••• :18789 - 🇭🇰 Hong Kong Yes true Leaked AS152644QINIU LimitedSuperstify Technology Pte Ltd06/02/2026, 20:44:5503/03/2026, 10:11:37 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/02/2026, 20:46:39alternativepayments.com, ignatius.edu, nflplayercare.com, openbsd.org, openssh.com, nfl.biz, ntt.net, mod.go.jp, archny.org, gih.com, 2000charge.com, nfl.net
180.76.233.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu15/02/2026, 13:57:4103/03/2026, 10:11:37 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-15/02/2026, 14:44:03tfn.net.tw, baidu.com
119.200.71.••• :18789 골덕 (🦴) 🇰🇷 South Korea Yes true Leaked AS4766Korea TelecomKorea Telecom06/02/2026, 22:19:0203/03/2026, 10:11:37 Yes Yes Equation Group, Hafnium Group, Lazarus Group, Silence Hacker GroupCVE-2013-7458, CVE-2016-10517, CVE-2018-11218, CVE-2018-11219, CVE-2018-12326, CVE-2018-12453, CVE-2019-10192, CVE-2019-10193, CVE-2020-14147, CVE-2021-31294, CVE-2021-32626, CVE-2021-32761, CVE-2021-3470, CVE-2022-24735, CVE-2022-24736, CVE-2022-24834, CVE-2022-36021, CVE-2022-3647, CVE-2023-25155, CVE-2023-28856, CVE-2023-4514506/02/2026, 22:23:28kornet.net, bizmeka.com, kt.com, homeap.co.kr, hhnsfarm.co.kr, ktds.com, ktlogis.com, ktestate.com, krnic.or.kr, kt-idc.com, kt.co.kr, ktmediahub.com, ktcloud.com, ktfreetel.co.kr
103.40.13.••• :18789 - 🇨🇳 China mainland Yes true Leaked AS56046China Mobile communications corporation / AS63567 Suqian Pugongying Network Service Co.,LtdSuqian Pugongying Network Service26/02/2026, 22:09:0703/03/2026, 10:11:37 Yes No --28/02/2026, 23:15:57tom.com, datadock.ne.jp
170.233.114.••• :18789 - 🇧🇷 Brazil - true Clean AS265078JHS TELECOMUNICAÇOES LTDAJHS Telecomunicacoes03/03/2026, 04:02:3803/03/2026, 10:11:37 - - ----
120.48.154.••• :18789 Assistant 🇺🇸 United States Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu03/03/2026, 04:02:3803/03/2026, 10:11:37 - - ----
118.145.111.••• :18789 Assistant 🇨🇳 China mainland Yes true Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology10/02/2026, 11:49:3203/03/2026, 10:11:37 - - ----
180.76.142.••• :18789 Assistant 🇨🇳 China mainland Yes true Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu12/02/2026, 12:32:4203/03/2026, 10:11:37 - - ----
180.76.227.••• :18789 Assistant 🇨🇳 China mainland Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/02/2026, 09:38:1703/03/2026, 10:11:37 Yes Yes APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161713/02/2026, 17:22:14tfn.net.tw, baidu.com
38.177.242.••• :18789 - 🇸🇬 Singapore - true Clean AS394432PEG TECH INCPEG Technology26/02/2026, 02:56:5503/03/2026, 10:11:37 - - ----
134.209.158.••• :18789 - 🇮🇳 India - true Clean AS14061DigitalOcean, LLCDigitalOcean16/02/2026, 17:53:2203/03/2026, 10:11:37 No Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-23017, CVE-2021-3618, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-734717/02/2026, 09:18:23-
111.228.60.••• :18789 Assistant 🇨🇳 China mainland Yes true Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/02/2026, 19:48:4803/03/2026, 10:11:37 - - ----
8.216.36.••• :18789 - 🇸🇬 Singapore - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore13/02/2026, 04:01:4003/03/2026, 10:11:37 - - ----
104.236.111.••• :18789 - 🇺🇸 United States - true Clean AS14061DigitalOcean, LLCDigitalOcean19/02/2026, 20:05:0803/03/2026, 10:11:37 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2020-11985, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198519/02/2026, 20:51:47-