🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 1006105 Page: 3529 / 10062 (100 per page) Showing: 352801-352900 Last Imported: 14/07/2026, 07:44:58
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 3529 of 10062
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
192.144.205.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 08:21:0612/07/2026, 05:21:44 No - --24/03/2026, 09:50:02-
38.3.160.•••:18789 - 🇮🇩 Indonesia Yes false Leaked AS138064PT. Jinom Network IndonesiaJinom Network Indonesia30/03/2026, 08:21:0613/07/2026, 02:50:26 Yes No -CVE-2006-20001, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-6198530/03/2026, 09:50:03cogentco.com
3.35.235.•••:18789 - 🇰🇷 South Korea - false Clean AS16509Amazon.com, Inc.AWS Seoul Region30/03/2026, 08:21:0217/04/2026, 19:25:51 - - ----
129.226.90.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd30/03/2026, 08:21:0212/04/2026, 00:46:53 No Yes APT15, APT17, APT28, APT31, APT35, APT36, APT37, APT39, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/04/2026, 00:02:04-
47.92.246.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 08:20:5804/06/2026, 07:58:53 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2018-17189, CVE-2018-17199, CVE-2019-0190, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-9517, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-4089802/04/2026, 11:11:04-
20.214.106.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:20:5230/03/2026, 10:30:50 - - ----
109.107.137.•••:18789 - 🇯🇵 Japan - false Clean AS3258xTom Japan CorporationXTom30/03/2026, 08:20:4916/06/2026, 06:57:53 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 09:46:36xtom.com
81.69.219.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 08:20:3613/07/2026, 12:50:02 No Yes APT37, El-Machete-05/04/2026, 22:32:47-
2a02:4780:5e:b927::1:18789 - 🇲🇾 Malaysia - false Clean AS47583Hostinger International LimitedHostinger30/03/2026, 08:20:3212/07/2026, 20:25:54 - - ----
148.135.77.•••:18789 - 🇺🇸 United States Yes false Clean AS35916MULTACOM CORPORATIONBrander Group30/03/2026, 08:20:1317/04/2026, 18:07:43 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/04/2026, 18:11:48brandergroup.net
101.96.199.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology30/03/2026, 08:20:1130/03/2026, 11:15:16 - - ----
115.190.170.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology30/03/2026, 08:20:0502/04/2026, 14:08:50 No No --27/03/2026, 14:11:55-
4.154.200.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:20:0430/03/2026, 11:15:08 - - ----
185.249.227.•••:18789 - 🇩🇪 Germany Yes false Clean AS51167Contabo GmbHContabo30/03/2026, 08:20:0415/04/2026, 13:27:43 No Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA428, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2017-8923, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2018-5741, CVE-2018-5743, CVE-2018-5744, CVE-2019-11048, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6470, CVE-2019-6471, CVE-2020-14145, CVE-2020-15778, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2020-8616, CVE-2020-8617, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-36368, CVE-2021-41617, CVE-2022-2795, CVE-2022-31628, CVE-2022-31629, CVE-2022-37454, CVE-2022-38177, CVE-2022-38178, CVE-2023-2828, CVE-2023-28531, CVE-2023-31122, CVE-2023-3341, CVE-2023-38408, CVE-2023-38709, CVE-2023-43622, CVE-2023-4408, CVE-2023-44487, CVE-2023-45802, CVE-2023-48795, CVE-2023-50387, CVE-2023-51384, CVE-2023-51385, CVE-2023-5680, CVE-2024-1737, CVE-2024-1975, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-4577, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272812/04/2026, 13:42:54-
106.75.224.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS17621China Unicom Shanghai network / AS4811 China Telecom (Group)UCloud30/03/2026, 08:20:0425/06/2026, 17:19:30 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541430/05/2026, 01:37:04ucloud.cn
64.90.15.•••:18789 - 🇭🇰 Hong Kong - false Clean AS979NetLab GlobalNetLab Global30/03/2026, 08:20:0406/04/2026, 02:58:11 - - ----
24.150.206.•••:18789 - 🇨🇦 Canada Yes false Clean AS7992Cogeco Connexion Inc.Cogeco Cable Canada30/03/2026, 08:20:0411/04/2026, 07:08:52 No No --05/04/2026, 05:38:58-
221.225.10.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Jiangsu30/03/2026, 08:20:0430/03/2026, 11:15:08 - - ----
52.141.35.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:20:0430/03/2026, 11:15:08 Yes No -CVE-2014-407830/03/2026, 11:17:58cnthoth.com
103.224.80.•••:18789 - 🇨🇳 China mainland Yes false Clean AS932XNNET LLCLingshan30/03/2026, 08:20:0416/04/2026, 12:58:06 No Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 13:01:02-
154.193.217.•••:18789 - 🇺🇸 United States - false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited30/03/2026, 08:20:0330/03/2026, 11:15:08 - - ----
47.92.114.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 08:20:0303/06/2026, 19:04:13 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-8022, CVE-2021-41617, CVE-2025-24813, CVE-2025-55752, CVE-2025-55754, CVE-2025-6179513/04/2026, 13:32:26-
34.38.85.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle30/03/2026, 08:20:0330/03/2026, 11:15:07 - - ----
111.228.51.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters30/03/2026, 08:20:0305/04/2026, 04:33:27 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198502/04/2026, 06:42:57jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
3.121.180.•••:18789 - 🇩🇪 Germany - false Clean AS16509Amazon.com, Inc.A100 ROW30/03/2026, 08:20:0313/07/2026, 15:42:38 No No --25/03/2026, 02:15:14-
98.80.208.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services30/03/2026, 08:20:0323/05/2026, 15:06:12 No No --27/03/2026, 14:12:20-
204.57.249.•••:18789 - 🇺🇸 United States - false Clean AS55039Fatbeam, LLCFatbeam30/03/2026, 08:20:0330/03/2026, 11:15:07 - - ----
47.92.123.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 08:20:0305/06/2026, 02:37:56 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161722/05/2026, 06:53:58-
172.67.186.•••:18789 - 🇺🇸 United States - false Leaked AS13335Cloudflare, Inc.Cloudflare30/03/2026, 08:20:0311/06/2026, 03:20:16 Yes No --31/03/2026, 05:16:08cnlimited.com, navkarfittings.com, cplpress.com, aurumalloys.com, classicelectricomaha.com, cgmprecast.com, bikeweeksa.com, salvationarmyhouston.org, hzfeidi.com, aiden-vn.com, vizseek.com, anhbac.com, quatangthanhdong.com, fuhuake.com, cityfied.net, homsnap.com, abpincorp.com, broadbandcommission.org, goldenomega.cl, suffolkacademiestrust.ac.uk, citypantry.com, anlink.net, jekotrade.com, hmcxjc.com, shsinotech.com, vbankph.com, bopcon.com, rajveerstainless.com, eventbrite.com.ar, retrievalmasters.com, boyu-group.com, ekakitchen.com, taxi321.com, windexinfotech.in, wisehousetech.com, cloudflare.net, salvationarmysouth.org, qd-baolian.com, stainox.com, csofam.com, lyricsintosong.ai, loitoan.com, jxlingtong.com, thosepaintingguys.com, hiltscustomrifles.com, baselinewoods.com, omniquip.com, jiabinnu.com, nicholsmarine.net, alghanitex.com, qzz.io, kfstock.com, brownsprinting.com, cloudhq-mkt6.net, zenitegrafica.com.br, t-zoneland.com, applesteels.com, goodluckmetal.com, klmymmyc.com, us.org, woodworksrefinish.com, mayhoangtung.com, neosec.ai, hnbeixiang.com, gialoilongan.com, xjjingyoga.com, sxgas.net, wakechem.com, 1haojiyin.com, vrgkhaihoan.com, nandishwarsteel.com, villabeat.com, detongwiremesh.com, cedartreemedia.com, www.us.com, sanhoos.com, olx.com.ar, gnvurbanart.com, dgclh.com, bamko.net, hansecontrol.com, lstcarbon.com, eastsacflorist.com, it.com, voyagevietnammoto.com, briefy.ai, ttstest.com, lamaxwell.com, vimedtec.com, octopustele.com, esab.com.ar, gaetanasnyc.com, 2moilfieldgroup.com, yhjgkeji.com, www.eu.com, china-one.net, gobrio.com, kencotubes.com, eu.org, bierte.com, royaumedeslivres.fr, com.de, ttyt360.com, gelais.com, mydhaga.com, taxhawk.com, www.de.com, herculesind.com, zgkaite.com, turnoutservices.com, boelusstatebank.com, zjdddl.com, buckleighwilliams.com, xjnmi.com, idealwindlass.com, intbot.ai, oracle-ag.ch, zjhrbz.com, zhaowoo.net, anmarinternational.com, computerzone.com, salvationarmyflorida.org, transpacificvn.com, einpl.com, bestwanhui.com, dino-official.com, lvly.tv, calicometal.com, bain86.com, fnds3000.com, nikofasteners.com, workers.dev, hashemfoods.com, alphanickel.com, hindelastomers.com, nttdata-vds.com, egrana.com.br, sauss.net, netlinks.com.au, chestershd.com, maymacanphu.com, rpbfm.fr, 360-xj.com, jucyvietnam.com, xjwfcj.com, impresosmonterrey.com, shworldbest.com, zsnet.net, topigx.com, dongguansenzi.com, homelingua.com, njwlimited.com, china114.net, vinagreenplus.com, dharacg.com, scottishengineering.org.uk, xjhongshun.com, geochem.org
159.75.95.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 08:20:0330/03/2026, 11:15:07 - - ----
180.93.98.•••:18789 - 🇻🇳 Vietnam Yes false Clean AS7602Sai gon Postel CorporationSaigon Postel30/03/2026, 08:20:0230/03/2026, 11:15:07 - - ----
136.25.59.•••:18789 - 🇺🇸 United States Yes false Clean AS19165Webpass Inc.San Francisco30/03/2026, 08:20:0223/06/2026, 11:29:05 No - -CVE-2016-2124, CVE-2017-11103, CVE-2017-12150, CVE-2017-12151, CVE-2017-12163, CVE-2017-14746, CVE-2017-15275, CVE-2017-7494, CVE-2018-1050, CVE-2018-1057, CVE-2018-10858, CVE-2018-10919, CVE-2018-14628, CVE-2018-14629, CVE-2018-16841, CVE-2018-16851, CVE-2019-10218, CVE-2019-14833, CVE-2019-14847, CVE-2019-14861, CVE-2019-14870, CVE-2019-14902, CVE-2019-3824, CVE-2019-3880, CVE-2020-10704, CVE-2020-10730, CVE-2020-10745, CVE-2020-10760, CVE-2020-14318, CVE-2020-14323, CVE-2020-14383, CVE-2020-1472, CVE-2020-17049, CVE-2020-25717, CVE-2020-25718, CVE-2020-25719, CVE-2020-25722, CVE-2020-27840, CVE-2021-20251, CVE-2021-20254, CVE-2021-20277, CVE-2021-20316, CVE-2021-3670, CVE-2021-3671, CVE-2021-3738, CVE-2021-43566, CVE-2021-44141, CVE-2021-44142, CVE-2022-0336, CVE-2022-1615, CVE-2022-2031, CVE-2022-32742, CVE-2022-32743, CVE-2022-32744, CVE-2022-32746, CVE-2022-3437, CVE-2022-37966, CVE-2022-37967, CVE-2022-38023, CVE-2022-42898, CVE-2022-45141, CVE-2023-0614, CVE-2023-0922, CVE-2023-34966, CVE-2023-34967, CVE-2023-34968, CVE-2023-3961, CVE-2023-4091, CVE-2023-4154, CVE-2023-42669, CVE-2023-42670, CVE-2023-556807/04/2026, 18:18:21-
121.199.74.•••:18789 - 🇨🇳 China mainland - false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 08:20:0207/04/2026, 20:31:50 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-2341907/04/2026, 18:19:14aliyun.com
52.231.76.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:20:0230/03/2026, 11:15:06 - - ----
43.156.248.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd30/03/2026, 08:20:0205/04/2026, 14:15:44 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 04:23:30tencent.com
49.235.82.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 08:20:0216/04/2026, 10:02:39 - - ----
46.224.169.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner30/03/2026, 08:20:0215/04/2026, 00:02:14 - - ----
159.194.204.•••:18789 - 🇷🇺 Russia Yes false Clean AS198610Beget LLCBeget LLC30/03/2026, 08:20:0211/04/2026, 10:51:47 - - ----
20.165.232.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:20:0230/03/2026, 11:15:06 - - ----
125.118.255.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hangzhou30/03/2026, 08:20:0102/04/2026, 09:39:26 - - ----
172.67.181.•••:18789 - 🇺🇸 United States - false Leaked AS13335Cloudflare, Inc.Cloudflare30/03/2026, 08:20:0108/07/2026, 16:12:23 Yes No --31/03/2026, 05:13:46burningtreetulsa.com, clarionevents.com, chemours.com, venancio.com, universitytickets.com, knollwoodlife.com, styled.fr, atcevents.com, jerrybuiltburgers.com, ashley.fr, cgmprecast.com, gracechurchsc.org, leap.fr, bikeweeksa.com, apachehillspoa.org, columbianatractor.com, hzfeidi.com, electronicengineering.com, ligneblanche.fr, greenbriercivic.com, erbium.fr, qrhoa.org, fricksfashion.com, daso.fr, bbbiotechconference.com, bianchi.fr, pineridgeiii.com, lythamcoa.com, 277312.com, fuhuake.com, cityfied.net, gx101.com, oceancovedrive.com, abpincorp.com, factotum.fr, fujiyama.fr, medtecjapan.com, anlink.net, jekotrade.com, foliogrc.com, nitro.fr, hmcxjc.com, jindianglass.net, shsinotech.com, vbankph.com, maderahomeownersassn.org, bopcon.com, lesmouettes.fr, licenseglobal.com, ashlandparkpoa.com, alsuyar.net, paolino.fr, cayman.fr, ppcc.co.th, boyu-group.com, lateteailleurs.fr, leonne.fr, ekakitchen.com, edgewatercovehoa.com, windmillvillage.org, wisehousetech.com, clariongaming.com, cloudflare.net, dh3west.com, radioking.com, ohe.fr, martinscrossinghoa.org, qd-baolian.com, databrick.com, csofam.com, activ.fr, hhpoia.com, kidsbud.net, lebistrotduport.fr, sherry.fr, timberlake-analytics.com.br, jxlingtong.com, milnitzky.com.br, nardini.com, rioverdevista.com, feedstuffs.com, baselinewoods.com, sailfishvillage.com, climatecouncil.com, yin.fr, jiabinnu.com, oceanlaneplaza170.org, cleanzoneheating.com, alghanitex.com, christen.fr, qzz.io, indiantownassociation.org, isotope.fr, orchardfarmshoa.com, golfparkexloo.nl, telos.fr, kfstock.com, koworksllc.net, iobconcursos.com, ginachlaw.com, brownsprinting.com, expocihac.com, oceans.fr, xxglasses.net, sisecam.com, arras-hoa.com, lianlianglobal.com.br, eaa-s.jp, oxyvit.com, zach.fr, cloudhq-mkt6.net, storia.fr, forwardwirecloth.net, lepicier.fr, klmymmyc.com, hamletrva.com, chinasand.net, noon.fr, hawthornebridgecourt.com, woodwayhighlands.com, cascadesclinton.com, shipwatchvillagehoa.com, fdic.org, thechemourscompany.com, hnbeixiang.com, notfadeawaygraphics.com, mondi.fr, turlututu.fr, flaneur.fr, teppanyaki.fr, refee.net, xjzljt.net, xjjingyoga.com, sxgas.net, gulftobaybuilders.com, wakechem.com, zenna.fr, lakeviewvillasatalvamar.com, amedee.fr, hansel.fr, 1haojiyin.com, plasto.fr, serio.fr, imagotechmedia.com, shockolat.it, nada.fr, diamonds.pro, sanimax.com.br, athenee.fr, akina.fr, aikmanwildlife.com, detongwiremesh.com, umberto.fr, essex.fr, ibcglobal.com, hardi.fr, sanhoos.com, stjls-mattoon.com, kinsleyforest.org, dgclh.com, bamko.net, ausarabbusinesscouncil.com, creditop.com, mountainharbourtn.com, inventaire.fr, hansecontrol.com, lstcarbon.com, it.com, lytlepark.com, ttstest.com, lamaxwell.com, adinfuse.com, outbook.com, itb.fr, pumpkin.fr, gaetanasnyc.com, oukay.net, desertgreenscommunity.org, irrigationsystems4u.com, ventnor-o.com, palmpointepalmisles.org, cloudlandatlookout.com, philanddereks.com, boxboard.com, yhjgkeji.com, splendid-hotel.fr, innatschofield.com, reserveboulder.com, renewableenergyworld.com, sym.fr, china-one.net, getransportation.com, csinitiative.com, kingdisplay.net, eu.org, scheduleme.org, bierte.com, orangewoodcoa.com, affiliatesummit.com, hotel-valdevienne.com, sandyhookyce.org, mero.fr, tietgenskolen.dk, com.de, ttyt360.com, kingswood3.com, ceramic.fr, tomahawkcreek.net, coastalstheone.com, zvagostillwater.com, govinsider.asia, tahaluf.com, wscainc.com, forestcovepoa.net, periodical.com.br, skybryce.org, krytox.com, oldemillcreekpoa.com, jason.fr, newyorkfarmshow.com, ambassadorhousehoa.com, zgkaite.com, turnoutservices.com, nova.ge, aldente.fr, oilandgascouncil.com, lakevistapoa.com, usefolio.com, powergen.com, zjdddl.com, airportxnews.com, sixlakescountryclub.com, dvipcdn.com, insuretechconnect.com, ranscustombuilders.com, cheers.fr, wskypoa.com, clarion-defence.com, leverijllc.com, mirror.fr, power-grid.com, oneway.fr, xjnmi.com, blueberrymeadowshoa.com, lamplighterlane.com, oracle-ag.ch, zjhrbz.com, zhaowoo.net, sbandassociates.com, seminolelakehoa.com, chedermenachem.org, arista.fr, grandplace.fr, iirusa.com, bestwanhui.com, pasabahce.com, outdoorkitchensnorthwest.com, ermissolutions.com, comestibles.fr, electrode.fr, sacornerstone.org, bain86.com, stsmoa.com, nash.fr, oceanbreezeofamelia.org, freda.fr, barrheadchamber.ca, handy.fr, thecottagesatcontentmentisland.org, lakewoodparkpoa.com, aout.fr, cariboo.fr, workers.dev, hashemfoods.com, reva.fr, melchiortersen.com, highpointwestcondos.com, tigerexpressfuel.com, proximus.fr, petitspois.fr, magpt.com, 360-xj.com, xjwfcj.com, piqueassiette.fr, letoilehoa.com, villarosahoafl.com, epernaycommunity.com, oakbrookestateschatham.com, meeshamoultonlaw.com, sa-ccs.org, disa.fr, impresosmonterrey.com, shworldbest.com, zsnet.net, plantation-ppl.com, bdi-usa.com, dongguansenzi.com, meridianoutboard.com, viton.com, carmaxbolivia.com, burnmarketing.com, southforkrancheshoa.org, cuerie.com, canontradeshows.com, dsei-japan.com, designnews.com, monreve.fr, physnum.com, informamarkets-info.com, manorsatwaterford.com, china114.net, exceptions.fr, tontohillswater.org, smartbuildings.com, denaliincorporated.com, timbercreekpoa.net, wildwoodresortcity.com, arcgroup.com, harwoodc.com, money2020middleeast.com, hy189.net, ike.fr, idoceanside1.com, xjhongshun.com, cuendet.com, lecottage.fr, kyokushinkarate.news, sanddollarshores.org, geochem.org, whir.com, equinaceaprodutosnaturais.com, alptech.fr, dmln.net, intertec.com
178.104.14.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner30/03/2026, 08:20:0111/04/2026, 22:32:32 No No --02/04/2026, 15:38:45-
20.59.61.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:20:0131/03/2026, 03:43:31 - - ----
192.9.181.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationOracle30/03/2026, 08:20:0112/07/2026, 10:24:19 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 22:32:25healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
3.87.75.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services30/03/2026, 08:20:0113/07/2026, 19:17:43 No No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161702/04/2026, 08:55:55-
213.32.254.•••:18789 - 🇮🇶 Iraq - false Clean AS206206Kurdistan Net Company for Computer and Internet Ltd.O3 Telecom30/03/2026, 08:20:0110/04/2026, 13:10:18 - - ----
112.229.229.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Shandong30/03/2026, 08:20:0114/04/2026, 09:47:45 - - ----
39.98.76.•••:18789 - 🇨🇳 China mainland - false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 08:20:0103/06/2026, 23:23:40 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 07:08:14aliyun.com
100.20.239.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon30/03/2026, 08:20:0009/04/2026, 13:05:18 - - ----
14.110.106.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinanet Chongqing30/03/2026, 08:20:0030/03/2026, 11:15:04 - - ----
156.226.177.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS154321CORENET CLOUD SDN. BHD.Landui Cloud Computing HK Limited30/03/2026, 08:20:0008/04/2026, 07:03:12 - - ----
36.151.151.•••:18789 - 🇨🇳 China mainland Yes false Clean AS56046China Mobile communications corporationChina Mobile30/03/2026, 08:20:0002/04/2026, 14:08:47 - - ----
112.124.26.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 08:20:0017/04/2026, 05:34:12 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24989, CVE-2024-24990, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-6387, CVE-2024-734717/04/2026, 00:17:11aliyun.com
54.66.245.•••:18789 - 🇦🇺 Australia - false Clean AS16509Amazon.com, Inc.Amazon30/03/2026, 08:20:0011/07/2026, 22:13:07 No No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620022/05/2026, 04:48:10-
164.90.156.•••:18789 - 🇺🇸 United States - false Leaked AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 08:20:0017/04/2026, 21:42:05 Yes Yes APT17, APT28, APT29, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, Sandworm Team, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272802/04/2026, 11:11:51lucidlink.com
45.3.57.•••:18789 - 🇮🇹 Italy - false Leaked AS202870Dimensione S.r.l.Dimension30/03/2026, 08:20:0018/06/2026, 03:54:34 Yes No -CVE-2024-12254, CVE-2024-12718, CVE-2024-3219, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-12084, CVE-2025-12781, CVE-2025-13836, CVE-2025-1383718/06/2026, 01:08:43homeip.net, netsuit.com, healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, chickenkiller.com, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, dynalias.net, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
64.226.78.•••:18789 - 🇩🇪 Germany Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 08:19:5930/03/2026, 10:29:57 - - ----
72.56.24.•••:18789 - 🇳🇱 Netherlands - false Clean AS210976Timeweb, LLPTaiwan Cloud30/03/2026, 08:19:5901/06/2026, 23:04:35 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/06/2026, 17:29:17-
122.152.220.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 08:19:5910/04/2026, 16:14:15 Yes - --01/04/2026, 11:06:18tencent.com
36.5.87.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Anhui30/03/2026, 08:19:5930/03/2026, 11:15:03 - - ----
120.69.102.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Xinjiang30/03/2026, 08:19:5930/03/2026, 11:15:03 - - ----
18.191.222.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon30/03/2026, 08:19:5911/07/2026, 09:23:00 No No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620005/04/2026, 12:05:52-
20.114.8.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:19:5930/03/2026, 11:15:03 - - ----
62.171.161.•••:18789 - 🇫🇷 France Yes false Leaked AS51167Contabo GmbHContabo30/03/2026, 08:19:5915/04/2026, 13:28:09 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272802/04/2026, 23:17:44contaboserver.net, contabo.de, contabo.net
119.45.196.•••:18789 - 🇨🇳 China mainland - false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 08:19:5815/04/2026, 01:32:55 Yes No --02/04/2026, 11:08:58tencent.com
222.71.197.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4812China Telecom (Group)ChinaNet Shanghai30/03/2026, 08:19:5814/04/2026, 10:32:37 Yes No --02/04/2026, 14:56:08bj189.cn, 118114.cn, ctwing.cn, online.sh.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, daqu.com.cn, ctyun.cn
82.64.16.•••:18789 - 🇫🇷 France Yes false Clean AS12322Free SASSAS30/03/2026, 08:19:5817/04/2026, 22:26:54 No Yes APT14, APT28, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-3112231/03/2026, 11:14:19-
180.76.242.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu30/03/2026, 08:19:5813/07/2026, 05:40:58 Yes Yes APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161714/04/2026, 21:02:42baidu.com
44.200.207.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services30/03/2026, 08:19:5830/03/2026, 22:27:39 - - ----
119.165.182.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom Shandong30/03/2026, 08:19:5812/04/2026, 00:47:09 Yes No --05/04/2026, 07:32:46chinaunicom.cn
129.154.56.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle30/03/2026, 08:19:5817/04/2026, 10:03:31 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, DragonFly, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon, goziCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/04/2026, 09:20:53healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
109.206.243.•••:18789 - 🇫🇮 Finland Yes false Clean AS215590DpkgSoft International LimitedHelsinki30/03/2026, 08:19:5830/03/2026, 11:15:01 - - ----
8.138.19.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud30/03/2026, 08:19:5713/06/2026, 00:37:15 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272830/05/2026, 21:18:45-
240e:30c:3557:4a01::a50:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChina Telecom IPv6 Broadband Address30/03/2026, 08:19:5730/03/2026, 11:15:01 - - ----
2a02:4780:5e:c544::1:18789 - 🇲🇾 Malaysia - false Clean AS47583Hostinger International LimitedHostinger30/03/2026, 08:19:5713/06/2026, 14:42:07 - - ----
165.232.190.•••:18789 - 🇮🇳 India Yes false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 08:19:5711/07/2026, 12:56:24 No Yes APT-C-23, APT17, APT29, APT35, APT36, APT37, APT40, APT41, APT45, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Equation Group, Gamaredon Group, Ghostwriter, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198508/04/2026, 06:19:32-
146.190.86.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean30/03/2026, 08:19:5730/03/2026, 11:15:01 - - ----
240e:352:8102:bd00::4:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChina Telecom IPv6 Broadband Address30/03/2026, 08:19:5702/04/2026, 20:54:37 - - ----
178.104.81.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner30/03/2026, 08:19:5711/04/2026, 10:52:01 - - ----
140.238.9.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle Cloud30/03/2026, 08:19:5610/04/2026, 13:55:49 Yes Yes DragonFly, Packrat, goziCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198510/04/2026, 13:59:59healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
176.9.64.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner Online GmbH30/03/2026, 08:19:5618/04/2026, 00:41:32 No Yes APT10, APT14, APT15, APT17, APT27, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, APT5, Bitter APT, Bluenoroff, Bronze Butler APT, Callisto Group, Calypso APT, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, DEV-0198, Daggerfly APT, Dark Caracal APT, Donot Team, Emennet Pasargad, Emennet Pasargard, Equation Group, Gamaredon Group, Gaza Cybergang, GreyEnergy Group, Hafnium Group, Inception Framework, Keyhole Panda, Kimsuky, Lazarus Group, Lorec53, MuddyWater Group, Nobelium, Patchwork, RomCom Group, Salt Typhoon, SandCat, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, Sprite Spider, The Shadow Brokers, Turla APT Group, UNC1945, UNC2630, Volatile Cedar APT, Volt TyphoonCVE-2005-0004, CVE-2006-20001, CVE-2012-0540, CVE-2012-0572, CVE-2012-0574, CVE-2012-0578, CVE-2012-1688, CVE-2012-1689, CVE-2012-1690, CVE-2012-1697, CVE-2012-1702, CVE-2012-1703, CVE-2012-1705, CVE-2012-1734, CVE-2012-1735, CVE-2012-1756, CVE-2012-1757, CVE-2012-2750, CVE-2012-3150, CVE-2012-3158, CVE-2012-3160, CVE-2012-3163, CVE-2012-3166, CVE-2012-3167, CVE-2012-3173, CVE-2012-3177, CVE-2012-3180, CVE-2012-3197, CVE-2012-5060, CVE-2012-5096, CVE-2012-5612, CVE-2012-5614, CVE-2012-5627, CVE-2013-0367, CVE-2013-0368, CVE-2013-0371, CVE-2013-0383, CVE-2013-0384, CVE-2013-0385, CVE-2013-0386, CVE-2013-0389, CVE-2013-1502, CVE-2013-1506, CVE-2013-1511, CVE-2013-1512, CVE-2013-1521, CVE-2013-1523, CVE-2013-1526, CVE-2013-1531, CVE-2013-1532, CVE-2013-1544, CVE-2013-1548, CVE-2013-1552, CVE-2013-1555, CVE-2013-1861, CVE-2013-2375, CVE-2013-2376, CVE-2013-2378, CVE-2013-2389, CVE-2013-2391, CVE-2013-2392, CVE-2013-3783, CVE-2013-3793, CVE-2013-3794, CVE-2013-3801, CVE-2013-3802, CVE-2013-3804, CVE-2013-3805, CVE-2013-3808, CVE-2013-3809, CVE-2013-3812, CVE-2013-3839, CVE-2013-5807, CVE-2013-5891, CVE-2013-5908, CVE-2014-0001, CVE-2014-0384, CVE-2014-0386, CVE-2014-0393, CVE-2014-0401, CVE-2014-0402, CVE-2014-0412, CVE-2014-0420, CVE-2014-0437, CVE-2014-2419, CVE-2014-2430, CVE-2014-2431, CVE-2014-2432, CVE-2014-2436, CVE-2014-2438, CVE-2014-2440, CVE-2014-2494, CVE-2014-4207, CVE-2014-4243, CVE-2014-4258, CVE-2014-4260, CVE-2014-4274, CVE-2014-4287, CVE-2014-6463, CVE-2014-6464, CVE-2014-6469, CVE-2014-6478, CVE-2014-6484, CVE-2014-6491, CVE-2014-6494, CVE-2014-6495, CVE-2014-6496, CVE-2014-6500, CVE-2014-6505, CVE-2014-6507, CVE-2014-6520, CVE-2014-6530, CVE-2014-6551, CVE-2014-6555, CVE-2014-6559, CVE-2014-6568, CVE-2015-0374, CVE-2015-0381, CVE-2015-0382, CVE-2015-0391, CVE-2015-0411, CVE-2015-0432, CVE-2015-0433, CVE-2015-0441, CVE-2015-0499, CVE-2015-0501, CVE-2015-0505, CVE-2015-2325, CVE-2015-2568, CVE-2015-2571, CVE-2015-2573, CVE-2015-2582, CVE-2015-2620, CVE-2015-2643, CVE-2015-2648, CVE-2015-3152, CVE-2015-4752, CVE-2015-4757, CVE-2015-4792, CVE-2015-4802, CVE-2015-4807, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819, CVE-2015-4826, CVE-2015-4830, CVE-2015-4836, CVE-2015-4858, CVE-2015-4861, CVE-2015-4864, CVE-2015-4870, CVE-2015-4879, CVE-2015-4913, CVE-2015-7744, CVE-2016-0502, CVE-2016-0610, CVE-2016-0616, CVE-2016-0642, CVE-2016-0651, CVE-2016-3471, CVE-2016-3492, CVE-2016-5584, CVE-2016-5612, CVE-2016-5624, CVE-2016-5626, CVE-2016-5629, CVE-2016-6664, CVE-2016-7440, CVE-2016-9843, CVE-2017-10268, CVE-2017-10378, CVE-2017-10379, CVE-2017-10384, CVE-2017-15365, CVE-2017-15945, CVE-2017-3238, CVE-2017-3243, CVE-2017-3244, CVE-2017-3258, CVE-2017-3265, CVE-2017-3291, CVE-2017-3302, CVE-2017-3308, CVE-2017-3309, CVE-2017-3312, CVE-2017-3313, CVE-2017-3317, CVE-2017-3318, CVE-2017-3453, CVE-2017-3456, CVE-2017-3464, CVE-2017-3600, CVE-2017-3636, CVE-2017-3641, CVE-2017-3651, CVE-2017-3653, CVE-2017-4902, CVE-2017-4903, CVE-2017-4904, CVE-2017-4905, CVE-2017-4924, CVE-2017-4933, CVE-2017-5753, CVE-2017-9765, CVE-2018-20685, CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665, CVE-2018-2668, CVE-2018-2755, CVE-2018-2761, CVE-2018-2767, CVE-2018-2771, CVE-2018-2781, CVE-2018-2813, CVE-2018-2817, CVE-2018-2819, CVE-2018-3058, CVE-2018-3063, CVE-2018-3066, CVE-2018-3081, CVE-2018-3133, CVE-2018-3174, CVE-2018-3282, CVE-2019-16905, CVE-2019-2455, CVE-2019-2481, CVE-2019-2503, CVE-2019-2529, CVE-2019-2614, CVE-2019-2627, CVE-2019-2737, CVE-2019-2739, CVE-2019-2740, CVE-2019-2805, CVE-2019-2974, CVE-2019-5516, CVE-2019-5517, CVE-2019-5518, CVE-2019-5519, CVE-2019-5520, CVE-2019-5521, CVE-2019-5544, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-7659, CVE-2020-14145, CVE-2020-14550, CVE-2020-2574, CVE-2020-2752, CVE-2020-2780, CVE-2020-2812, CVE-2020-28912, CVE-2020-2922, CVE-2020-3962, CVE-2020-3963, CVE-2020-3964, CVE-2020-3965, CVE-2020-3966, CVE-2020-3967, CVE-2020-3968, CVE-2020-3969, CVE-2020-3970, CVE-2020-3971, CVE-2020-3976, CVE-2020-3992, CVE-2021-2007, CVE-2021-2011, CVE-2021-2144, CVE-2021-22040, CVE-2021-22041, CVE-2021-22050, CVE-2021-41617, CVE-2021-46659, CVE-2021-46666, CVE-2021-46667, CVE-2021-46669, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-27385, CVE-2022-27449, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31621, CVE-2022-31622, CVE-2022-31623, CVE-2022-31624, CVE-2022-31696, CVE-2022-31699, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5157, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-6620005/04/2026, 09:49:36-
119.91.114.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 08:19:5624/05/2026, 05:47:05 - - ----
68.64.183.•••:18789 - 🇭🇰 Hong Kong - false Leaked AS139659LUCIDACLOUD LIMITEDLucidCloud30/03/2026, 08:19:5617/06/2026, 00:46:37 Yes No -CVE-2023-44487, CVE-2024-7347, CVE-2025-2341916/06/2026, 19:03:44gtt.net, hiberniaatlantic.com
3.237.189.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon Web Services30/03/2026, 08:19:5613/07/2026, 14:59:40 No No --17/05/2026, 23:32:59-
129.204.149.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 08:19:5614/07/2026, 03:08:40 - - ----
111.228.58.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters30/03/2026, 08:19:5605/04/2026, 17:59:29 - - ----
2a02:4780:66:db4::1:18789 - 🇧🇷 Brazil - false Clean AS47583Hostinger International LimitedHostinger30/03/2026, 08:19:5617/04/2026, 10:03:50 - - ----
157.180.125.•••:18789 - 🇫🇮 Finland Yes false Leaked AS24940Hetzner Online GmbHHetzner30/03/2026, 08:19:5609/06/2026, 22:21:30 Yes No -CVE-2023-44487, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 18:16:29hetzner.com
2a02:c207:2310:117::1:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo30/03/2026, 08:19:5610/07/2026, 13:24:46 - - ----
111.229.114.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud30/03/2026, 08:19:5608/04/2026, 13:05:27 Yes Yes APT37, El-Machete-31/03/2026, 16:29:57tencent.com
119.28.101.•••:18789 - 🇸🇬 Singapore - false Clean AS132203Tencent Building, Kejizhongyi AvenueTencent Cloud30/03/2026, 08:19:5630/03/2026, 20:11:47 - - ----
72.56.22.•••:18789 - 🇳🇱 Netherlands Yes false Clean AS210976Timeweb, LLPTaiwan Cloud30/03/2026, 08:19:5617/04/2026, 23:56:34 - - ----
4.255.229.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:19:5603/06/2026, 18:20:33 No No --28/05/2026, 16:54:51-
122.247.57.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet ZJ Ningbo30/03/2026, 08:19:5603/04/2026, 21:40:56 - - ----
84.36.25.•••:18789 - 🇪🇬 Egypt - false Clean AS36992Etisalat MISRStandard Cairo Zone ADSL Users30/03/2026, 08:19:5630/03/2026, 11:15:00 - - ----
172.67.192.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare30/03/2026, 08:19:5631/03/2026, 02:58:38 - - ----
20.214.139.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft30/03/2026, 08:19:5630/03/2026, 20:11:47 - - ----
8.140.174.•••:18789 - 🇸🇬 Singapore - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud30/03/2026, 08:19:5612/06/2026, 14:02:08 No Yes APT-C-23, APT36, Cobalt Group, Equation Group, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341928/05/2026, 07:06:22-
112.126.27.•••:18789 - 🇨🇳 China mainland - false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft30/03/2026, 08:19:5506/07/2026, 00:31:25 Yes Yes Salt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272814/04/2026, 21:02:38aliyun.com
134.175.121.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing30/03/2026, 08:19:5530/03/2026, 10:29:53 - - ----