🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 1076720 Page: 3965 / 10768 (100 per page) Showing: 396401-396500 Last Imported: 10/09/2026, 14:51:48
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 3965 of 10768
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
111.229.169.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1210/09/2026, 12:00:52 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161701/04/2026, 00:09:52tencent.com
106.53.11.•••:3443 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1201/04/2026, 07:23:47 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161701/04/2026, 00:09:53tencent.com
52.78.1.•••:443 - 🇰🇷 South Korea Yes false Clean AS16509Amazon.com, Inc.AWS Seoul Region01/04/2026, 00:06:1216/04/2026, 22:06:05 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272801/04/2026, 00:09:54-
54.168.244.•••:18789 - 🇯🇵 Japan Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services Japan01/04/2026, 00:06:1201/04/2026, 07:23:47 Yes No --01/04/2026, 00:09:58airnowdata.com, elasticbeanstalk.com
149.30.250.•••:18789 - 🇺🇸 United States Yes false Leaked AS133199SonderCloud LimitedSolustack Limited01/04/2026, 00:06:1217/04/2026, 01:06:15 Yes - -CVE-2019-12519, CVE-2020-11945, CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606, CVE-2020-25097, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-5824, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-45802, CVE-2025-54574, CVE-2025-59362, CVE-2025-6216801/04/2026, 00:10:03cogentco.com
101.43.40.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:1203/04/2026, 23:12:01 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161701/04/2026, 00:10:06tencent.com
180.104.208.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4134ChinanetChinanet Jiangsu Province Network01/04/2026, 00:06:1201/04/2026, 07:23:47 Yes No --01/04/2026, 00:10:10bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, daqu.com.cn, ctyun.cn
103.241.42.•••:18789 - 🇻🇳 Vietnam Yes false Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited01/04/2026, 00:06:1215/04/2026, 13:30:41 - - ----
148.135.114.•••:18789 - 🇺🇸 United States Yes false Clean AS35916MULTACOM CORPORATIONBrander Group01/04/2026, 00:06:1202/06/2026, 13:10:43 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198501/04/2026, 00:10:13brandergroup.net
138.124.86.•••:18789 - 🇸🇪 Sweden Yes false Clean AS41745Hosting servicesRIPE01/04/2026, 00:06:1209/09/2026, 19:40:49 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541428/05/2026, 16:23:27-
138.197.17.•••:443 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 00:06:1203/04/2026, 23:12:54 No Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272801/04/2026, 00:10:17-
193.123.250.•••:18789 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationOracle01/04/2026, 00:06:1201/04/2026, 07:23:47 - - ----
152.53.142.•••:3113 - 🇩🇪 Germany Yes false Leaked AS197540netcup GmbHAT ANX Holding 201/04/2026, 00:06:1216/04/2026, 10:44:40 Yes No --03/04/2026, 21:00:39ap-solut.com, ganzrund.com, amex-healthcare.com, amex-vienna.at, arbeiterkammer.at, mvb-online.com, moriroku.at, anexia-engine.com, nussknackerei.at, pro-food.at, techinvest.at, schneiders-bags.com, welovefurs.com, techbold.at, 0900-live.com, goerner-formpack.com, radiocontent.net, panoramatours.com, goerner-group.com, uppernetwork.com, schlossbrasserie.at, marmind.com, transsolar.com, quicksrv.de, kornladen.at, sange-cnc.at, teigtaschen.at, james.care
47.109.140.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 00:06:1201/04/2026, 07:23:47 - - ----
45.55.87.•••:443 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 00:06:1216/04/2026, 11:29:50 No - -CVE-2019-6110, CVE-2021-36368, CVE-2018-20685, CVE-2019-6109, CVE-2018-15473, CVE-2016-20012, CVE-2023-48795, CVE-2021-41617, CVE-2019-6111, CVE-2023-51385, CVE-2023-38408, CVE-2018-15919, CVE-2020-14145, CVE-2020-1577807/04/2026, 09:36:15-
35.188.57.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle01/04/2026, 00:06:1216/04/2026, 10:44:37 No No --01/04/2026, 00:35:59-
15.206.159.•••:18789 - 🇮🇳 India Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services01/04/2026, 00:06:1201/04/2026, 07:23:47 - - ----
43.156.80.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd01/04/2026, 00:06:1209/09/2026, 00:35:04 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 23:23:26tencent.com
119.29.137.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1201/04/2026, 07:23:47 - - ----
178.156.247.•••:18789 - 🇺🇸 United States Yes false Leaked AS213230Hetzner Online GmbHHetzner01/04/2026, 00:06:1215/04/2026, 13:31:50 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 07:58:31hetzner.com
122.51.8.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1210/09/2026, 12:00:31 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138504/04/2026, 10:15:18tencent.com
220.126.36.•••:18789 - 🇰🇷 South Korea Yes false Clean AS4766Korea TelecomKorea Telecom01/04/2026, 00:06:1204/04/2026, 11:43:30 - - ----
115.190.201.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology01/04/2026, 00:06:1216/04/2026, 01:23:12 Yes No --12/04/2026, 15:01:50gwbn.net.cn
51.75.127.•••:18789 - 🇫🇷 France Yes false Leaked AS16276OVH SASOVH01/04/2026, 00:06:1209/09/2026, 15:28:26 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198510/04/2026, 13:15:11ovh.net
185.105.43.•••:1337 - 🇩🇪 Germany Yes false Clean AS211873Stadtwerke Merseburg GmbHStadtwerke Merseburg01/04/2026, 00:06:1203/04/2026, 23:12:20 - - ----
34.35.137.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle01/04/2026, 00:06:1201/04/2026, 07:23:47 - - ----
39.105.140.•••:18789 - 🇽🇽 XX Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Unknown01/04/2026, 00:06:1209/04/2026, 13:07:57 Yes Yes PackratCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 07:11:51aliyun.com
106.54.245.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedUnknown01/04/2026, 00:06:1208/09/2026, 18:52:27 Yes - --06/04/2026, 23:30:07tencent.com
24.233.3.•••:18789 - 🇺🇸 United States Yes false Clean AS55933Cloudie LimitedCentury Communications01/04/2026, 00:06:1212/04/2026, 23:55:03 No No -CVE-2022-37797, CVE-2022-4155609/04/2026, 13:54:40-
113.45.14.•••:8081 - 🇨🇳 China mainland Yes false Clean AS55990Huawei Cloud Service data centerHuawei Cloud01/04/2026, 00:06:1201/04/2026, 07:23:46 - - ----
39.106.116.•••:18789 - 🇽🇽 XX Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Unknown01/04/2026, 00:06:1210/09/2026, 12:01:10 Yes Yes APT34, APT37, APT41, Bluenoroff, Gamaredon Group, Lazarus Group, MuddyWater Group, Packrat, Sandworm Team, TA505CVE-2013-0340, CVE-2014-4078, CVE-2018-14647, CVE-2018-20406, CVE-2018-20852, CVE-2019-10160, CVE-2019-15903, CVE-2019-16056, CVE-2019-16935, CVE-2019-18348, CVE-2019-20907, CVE-2019-5010, CVE-2019-9636, CVE-2019-9740, CVE-2019-9947, CVE-2019-9948, CVE-2020-14422, CVE-2020-26116, CVE-2020-27619, CVE-2020-8315, CVE-2020-8492, CVE-2021-23336, CVE-2021-28359, CVE-2021-28861, CVE-2021-3177, CVE-2021-3426, CVE-2021-3733, CVE-2021-3737, CVE-2021-4189, CVE-2022-039108/04/2026, 00:21:14aliyun.com
4.236.204.•••:18789 - 🇺🇸 United States Yes false Clean AS8075Microsoft CorporationMicrosoft01/04/2026, 00:06:1201/04/2026, 07:23:46 - - ----
178.156.239.•••:18789 - 🇺🇸 United States Yes false Leaked AS213230Hetzner Online GmbHHetzner01/04/2026, 00:06:1129/06/2026, 00:32:54 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/04/2026, 00:08:19hetzner.com
152.53.202.•••:443 - 🇩🇪 Germany Yes false Clean AS197540netcup GmbHAT ANX Holding 201/04/2026, 00:06:1104/04/2026, 10:14:00 - - ----
119.29.197.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1110/04/2026, 13:58:44 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161707/04/2026, 05:52:56tencent.com
118.89.87.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1108/09/2026, 10:14:37 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161704/04/2026, 06:25:34tencent.com
2a01:4f8:1c1f:af20::1:8443 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner01/04/2026, 00:06:1125/07/2026, 17:27:21 - - ----
43.159.32.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd01/04/2026, 00:06:1101/04/2026, 07:23:46 - - ----
134.175.195.•••:443 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:1115/04/2026, 13:30:08 No Yes APT37, El-Machete-03/04/2026, 19:33:43-
52.81.208.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55960Beijing Guanghuan Xinwang DigitalBeijing Sinnet Technology01/04/2026, 00:06:1116/04/2026, 15:17:01 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 10:22:05amazonaws.cn
209.38.69.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 00:06:1116/04/2026, 01:22:54 No No -CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 06:45:18-
35.163.82.•••:443 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon01/04/2026, 00:06:1101/04/2026, 07:23:46 - - ----
15.204.100.•••:10053 - 🇺🇸 United States Yes false Leaked AS16276OVH SAS[name redacted]01/04/2026, 00:06:1117/04/2026, 06:21:59 Yes Yes APT29, Nobelium, RedCurlCVE-2020-3999, CVE-2023-44487, CVE-2024-22252, CVE-2024-22253, CVE-2024-22254, CVE-2024-22255, CVE-2024-22273, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 14:00:09ovhcloud.com
117.72.57.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com01/04/2026, 00:06:1101/04/2026, 07:23:46 - - ----
212.129.223.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:1106/09/2026, 18:07:35 No Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341904/04/2026, 16:58:13-
2605:a144:2316:1396::1:20000 - 🇺🇸 United States - false Clean AS40021Contabo Inc.Contabo01/04/2026, 00:06:1103/04/2026, 21:43:44 - - ----
106.55.180.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1116/04/2026, 01:23:28 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-6620004/04/2026, 12:31:49tencent.com
209.38.76.•••:443 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 00:06:1117/04/2026, 10:06:45 No Yes APT17, APT29, APT35, APT36, APT37, APT40, APT41, APT45, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, Patchwork, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-638701/04/2026, 13:28:17-
43.139.225.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:1119/07/2026, 17:06:33 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 21:37:45tencent.com
2a02:4780:12:2681::1:443 - 🇮🇳 India - false Clean AS47583Hostinger International LimitedHostinger01/04/2026, 00:06:1117/04/2026, 19:28:36 - - ----
64.90.15.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS979NetLab GlobalNetLab Global01/04/2026, 00:06:1103/04/2026, 22:28:40 - - ----
50.116.56.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode01/04/2026, 00:06:1116/04/2026, 01:23:22 - - ----
109.123.248.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo01/04/2026, 00:06:1116/04/2026, 18:18:41 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 12:15:19contabo.de, contabo.net
64.90.13.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS979NetLab GlobalNetLab Global01/04/2026, 00:06:1128/05/2026, 00:45:10 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541422/05/2026, 05:05:47-
124.221.65.•••:18888 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1007/04/2026, 08:03:38 Yes Yes APT37, El-Machete-07/04/2026, 08:04:22tencent.com
43.134.108.•••:8443 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay01/04/2026, 00:06:1007/04/2026, 08:48:39 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 08:51:55tencent.com
34.42.50.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle01/04/2026, 00:06:1017/04/2026, 23:58:35 No - --31/03/2026, 15:05:50-
124.223.62.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1001/06/2026, 02:43:58 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138510/04/2026, 10:11:06tencent.com
175.178.97.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud01/04/2026, 00:06:1016/04/2026, 01:23:38 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138504/04/2026, 15:32:46tencent.com
5.161.54.•••:18789 - 🇺🇸 United States Yes false Leaked AS213230Hetzner Online GmbHHetzner Online01/04/2026, 00:06:1016/04/2026, 17:33:25 Yes Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 13:15:15cyberwarrior.com, hetzner.com
116.205.242.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud01/04/2026, 00:06:1009/09/2026, 03:24:56 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 12:32:19smartcom.cc, huawei.com, huaweidevice.com
149.102.137.•••:443 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo01/04/2026, 00:06:1015/04/2026, 13:30:22 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2022-36760, CVE-2022-37436, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 00:33:00cogentco.com, contaboserver.net
43.134.115.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay01/04/2026, 00:06:1009/04/2026, 14:36:26 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 06:22:07tencent.com
54.151.170.•••:18789 - 🇸🇬 Singapore Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services01/04/2026, 00:06:1010/09/2026, 12:01:09 No No -CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734714/04/2026, 17:34:40-
111.228.52.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters01/04/2026, 00:06:1001/04/2026, 07:23:45 - - ----
156.225.143.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS142286LUOGELANG (FRANCE) LIMITEDCloudFly Net Inc01/04/2026, 00:06:1016/04/2026, 01:23:21 No Yes El-MacheteCVE-2014-407807/04/2026, 02:53:48-
64.23.214.•••:443 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 00:06:1001/04/2026, 07:23:45 - - ----
168.138.183.•••:443 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle Cloud01/04/2026, 00:06:1016/04/2026, 22:51:11 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, DragonFly, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon, goziCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 17:44:19healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
107.148.153.•••:18789 - 🇺🇸 United States Yes false Clean AS54600PEG TECH INCPeg Tech Inc01/04/2026, 00:06:1008/04/2026, 02:36:02 No No --02/04/2026, 02:38:15-
45.192.109.•••:3000 - 🇭🇰 Hong Kong Yes false Clean AS401701cognetcloud INCVapeline Technology01/04/2026, 00:06:1016/04/2026, 17:33:25 No Yes Salt TyphoonCVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 10:58:13-
82.156.11.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:1007/04/2026, 00:33:52 No Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161706/04/2026, 23:30:15-
82.156.230.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:1012/04/2026, 23:11:00 No Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161703/04/2026, 18:43:12-
182.92.69.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 00:06:1021/05/2026, 23:52:49 Yes No -CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341907/04/2026, 08:04:37aliyun.com
198.252.98.•••:30114 - 🇨🇦 Canada Yes false Leaked AS20068Hawk Host Inc.Hawk Host01/04/2026, 00:06:1009/09/2026, 14:45:33 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-37451, CVE-2022-37452, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-5176607/04/2026, 22:54:08agroservet.com, chickenkiller.com, fastspeed.dk, concriad.com.br, serveftp.com, cloudflare.net, magnuslaw.ca, arandomserver.com, hawkhost.com, crabdance.com, zapto.org, cancerskiout.org, noip.com, jfxtechnologies.com, northtowncompany.com, nasg.org, ddns.net, myftp.biz
111.228.28.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters01/04/2026, 00:06:1013/04/2026, 21:01:52 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 11:05:27jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
2604:2dc0:205:4d00:::10333 - 🇺🇸 United States - false Clean AS16276OVH SASSd One Network01/04/2026, 00:06:1016/04/2026, 01:23:19 - - ----
47.243.203.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK01/04/2026, 00:06:1015/04/2026, 13:30:41 No Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Salt Typhoon, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2006-20001, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 06:35:46-
47.253.250.•••:443 - 🇨🇳 China mainland Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud US01/04/2026, 00:06:1017/04/2026, 08:37:18 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272801/04/2026, 16:29:34-
39.103.84.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 00:06:0931/05/2026, 12:43:12 Yes No --21/05/2026, 22:04:56aliyun.com
62.169.16.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo01/04/2026, 00:06:0917/04/2026, 03:21:51 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 15:33:16contabo.de, contabo.net
118.25.193.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:0917/04/2026, 09:22:18 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138504/04/2026, 14:45:42tencent.com
117.72.26.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com01/04/2026, 00:06:0901/04/2026, 07:23:44 - - ----
34.69.165.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle01/04/2026, 00:06:0915/04/2026, 13:30:15 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 15:42:48-
2a02:4780:6e:b51::1:80 - 🇧🇷 Brazil - false Clean AS47583Hostinger International LimitedHostinger01/04/2026, 00:06:0915/04/2026, 13:31:34 - - ----
43.156.114.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd01/04/2026, 00:06:0908/09/2026, 09:31:37 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 06:09:05tencent.com
74.115.172.•••:18789 - 🇺🇸 United States Yes false Clean AS29802HIVELOCITY, Inc.Hivelocity01/04/2026, 00:06:0903/04/2026, 19:28:17 - - ----
81.71.43.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:0909/09/2026, 23:57:04 No Yes APT37, El-Machete-03/04/2026, 15:42:19-
106.14.76.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 00:06:0917/04/2026, 10:06:18 Yes Yes APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2014-0236, CVE-2015-8879, CVE-2015-8994, CVE-2016-0777, CVE-2016-20012, CVE-2016-3074, CVE-2016-4343, CVE-2016-4537, CVE-2016-4539, CVE-2016-4540, CVE-2016-4541, CVE-2016-4542, CVE-2016-4543, CVE-2016-4544, CVE-2016-5093, CVE-2016-5094, CVE-2016-5095, CVE-2016-5096, CVE-2016-5385, CVE-2016-5399, CVE-2016-5768, CVE-2016-5769, CVE-2016-5770, CVE-2016-5771, CVE-2016-5772, CVE-2016-5773, CVE-2016-6207, CVE-2016-6288, CVE-2016-6289, CVE-2016-6290, CVE-2016-6291, CVE-2016-6292, CVE-2016-6294, CVE-2016-6295, CVE-2016-6296, CVE-2016-6297, CVE-2016-7478, CVE-2017-15906, CVE-2018-19395, CVE-2018-19396, CVE-2018-19520, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 03:51:05aliyun.com
47.92.228.•••:50001 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 00:06:0905/06/2026, 20:23:12 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-3272811/04/2026, 00:18:38-
152.136.142.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:0916/04/2026, 20:35:31 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138516/04/2026, 20:36:12-
1.92.156.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS55990Huawei Cloud Service data centerHuawei Cloud01/04/2026, 00:06:0931/05/2026, 23:54:21 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541423/05/2026, 08:53:04smartcom.cc, huawei.com, huaweidevice.com
54.169.156.•••:18789 - 🇸🇬 Singapore Yes false Clean AS16509Amazon.com, Inc.Amazon01/04/2026, 00:06:0908/04/2026, 03:21:02 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198508/04/2026, 03:23:09-
167.71.17.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean01/04/2026, 00:06:0910/09/2026, 04:13:26 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 10:59:12-
39.98.61.•••:50001 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft01/04/2026, 00:06:0903/06/2026, 11:16:11 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/04/2026, 17:57:01aliyun.com
156.225.143.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS142286LUOGELANG (FRANCE) LIMITEDCloudFly Net Inc01/04/2026, 00:06:0917/04/2026, 07:52:28 No Yes El-MacheteCVE-2014-407811/04/2026, 01:21:52-
120.48.154.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu01/04/2026, 00:06:0901/04/2026, 07:23:43 - - ----
161.97.105.•••:18789 - 🇫🇷 France Yes false Leaked AS51167Contabo GmbHContabo01/04/2026, 00:06:0917/04/2026, 19:28:39 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272803/04/2026, 22:33:13contabo.de, contabo.net
43.136.137.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing01/04/2026, 00:06:0908/09/2026, 23:09:42 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161704/04/2026, 06:43:35tencent.com
117.72.86.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com01/04/2026, 00:06:0904/04/2026, 07:59:48 Yes Yes APT15, APT28, APT31, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APTCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272804/04/2026, 06:18:27jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
2a02:c207:2315:7884::1:20132 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo01/04/2026, 00:06:0907/04/2026, 05:48:56 - - ----