🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 926582 Page: 3986 / 9266 (100 per page) Showing: 398501-398600 Last Imported: 07/06/2026, 03:36:56
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 3986 of 9266
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
49.232.57.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2404/06/2026, 09:23:55 - - ----
43.136.83.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:2405/06/2026, 16:04:14 Yes - -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161722/03/2026, 10:49:19tencent.com
49.51.233.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueTencent Cloud15/03/2026, 22:53:2311/04/2026, 10:52:50 Yes Yes APT15, APT28, APT31, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Packrat, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272816/03/2026, 15:51:53tencent.com
199.7.140.•••:18789 - 🇺🇸 United States Yes false Clean AS979NetLab GlobalNetutils15/03/2026, 22:53:2318/03/2026, 09:46:06 - - ----
120.26.83.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft15/03/2026, 22:53:2319/03/2026, 07:06:04 - - ----
54.65.72.•••:18789 - 🇯🇵 Japan - false Clean AS16509Amazon.com, Inc.Amazon15/03/2026, 22:53:2315/04/2026, 13:27:51 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198524/03/2026, 06:57:13-
49.232.184.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2306/06/2026, 15:20:03 Yes - --26/05/2026, 07:53:10tencent.com
82.157.125.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:2316/03/2026, 00:23:09 - - ----
120.48.153.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu15/03/2026, 22:53:2316/03/2026, 00:23:09 - - ----
79.194.135.•••:18789 - 🇩🇪 Germany - false Clean AS3320Internet service provider operationsDeutsche Telekom15/03/2026, 22:53:2316/03/2026, 00:23:09 - - ----
43.140.1.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:2316/03/2026, 00:23:09 - - ----
117.72.43.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com15/03/2026, 22:53:2312/04/2026, 00:02:23 Yes Yes APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198508/04/2026, 20:03:15jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
106.12.75.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu15/03/2026, 22:53:2310/04/2026, 00:57:22 - - ----
178.104.51.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner15/03/2026, 22:53:2319/03/2026, 07:05:11 - - ----
89.167.50.•••:18789 - 🇫🇮 Finland Yes false Clean AS24940Hetzner Online GmbHHetzner15/03/2026, 22:53:2228/05/2026, 23:24:46 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198515/04/2026, 13:31:49-
117.72.246.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com15/03/2026, 22:53:2212/04/2026, 23:52:31 - - ----
172.67.192.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare15/03/2026, 22:53:2216/03/2026, 00:23:08 - - ----
156.241.101.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS135097LUOGELANG (FRANCE) LIMITEDCloudFly Net Inc15/03/2026, 22:53:2206/06/2026, 06:13:12 No No --13/03/2026, 06:22:22-
60.177.76.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hangzhou15/03/2026, 22:53:2216/03/2026, 00:23:08 - - ----
117.72.244.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com15/03/2026, 22:53:2211/04/2026, 10:51:42 - - ----
1.116.116.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2207/06/2026, 01:10:06 Yes No --04/06/2026, 04:24:26tencent.com, tencentcloud.com
62.234.44.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:2207/04/2026, 08:45:52 No No --13/03/2026, 06:20:56-
117.72.70.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com15/03/2026, 22:53:2219/03/2026, 07:06:05 - - ----
211.149.160.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS38283CHINANET SiChuan Telecom Internet Data CenterChengdu West Dimension Digital Technology15/03/2026, 22:53:2205/06/2026, 18:12:46 Yes Yes APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2022-41741, CVE-2022-41742, CVE-2023-41056, CVE-2023-4448702/04/2026, 13:27:50west.cn
43.136.173.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:2221/03/2026, 17:23:52 - - ----
106.55.102.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2204/06/2026, 05:07:31 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161703/04/2026, 16:28:21tencent.com
182.92.60.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft15/03/2026, 22:53:2216/03/2026, 00:23:08 - - ----
42.193.140.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2216/03/2026, 00:23:08 - - ----
149.30.231.•••:18789 - 🇺🇸 United States Yes false Clean AS133199SonderCloud LimitedSolustack Limited15/03/2026, 22:53:2218/04/2026, 00:40:30 - - ----
43.165.195.•••:18789 - 🇮🇩 Indonesia Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd15/03/2026, 22:53:2208/04/2026, 13:05:32 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198508/04/2026, 12:22:19tencent.com
106.52.40.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2206/06/2026, 23:46:10 Yes No --21/03/2026, 06:05:15tencent.com
47.84.109.•••:18789 - 🇺🇸 United States - false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud15/03/2026, 22:53:2116/03/2026, 00:23:07 - - ----
111.228.58.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/03/2026, 22:53:2113/04/2026, 15:42:14 - - ----
43.135.150.•••:18789 - 🇺🇸 United States Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd15/03/2026, 22:53:2106/06/2026, 08:19:31 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541422/05/2026, 09:42:14tencent.com
159.223.105.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:53:2116/03/2026, 00:23:07 - - ----
129.211.213.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:2116/03/2026, 00:23:07 - - ----
129.121.86.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationOGTIPS115/03/2026, 22:53:2116/03/2026, 00:23:07 - - ----
217.15.162.•••:18789 - 🇩🇪 Germany - false Leaked AS141995Contabo Asia Private LimitedContabo15/03/2026, 22:53:2118/03/2026, 11:15:50 Yes Yes APT15, APT28, APT31, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APTCVE-2016-20012, CVE-2020-25097, CVE-2021-28041, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-38408, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272818/03/2026, 05:58:33contaboserver.net, contabo.de, contabo.net
20.165.180.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft15/03/2026, 22:53:2116/03/2026, 00:23:07 - - ----
49.235.115.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2105/06/2026, 01:13:07 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138522/03/2026, 10:50:12tencent.com
47.96.85.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft15/03/2026, 22:53:2116/03/2026, 00:23:07 - - ----
204.141.229.•••:18789 - 🇸🇬 Singapore Yes false Clean AS152644QINIU LimitedSuperstify Technology Pte Ltd15/03/2026, 22:53:2122/03/2026, 15:18:26 - - ----
117.72.51.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com15/03/2026, 22:53:2121/03/2026, 10:32:52 - - ----
81.70.240.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:2022/03/2026, 13:03:49 - - ----
43.106.116.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore15/03/2026, 22:53:2005/04/2026, 22:28:56 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:30:48alibabacloud.com
137.184.251.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:53:2016/03/2026, 00:23:06 - - ----
13.212.51.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services15/03/2026, 22:53:2025/03/2026, 11:01:29 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161722/03/2026, 07:51:16-
8.218.167.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore15/03/2026, 22:53:2022/03/2026, 05:08:48 - - ----
52.161.37.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft15/03/2026, 22:53:2024/05/2026, 08:35:07 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541424/05/2026, 04:26:09-
111.228.17.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/03/2026, 22:53:2011/04/2026, 21:02:34 - - ----
111.229.137.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:2022/03/2026, 08:34:19 - - ----
149.30.184.•••:18789 - 🇺🇸 United States Yes false Leaked AS133199SonderCloud LimitedSolustack Limited15/03/2026, 22:53:2016/04/2026, 22:48:17 Yes No -CVE-2020-8022, CVE-2022-29885, CVE-2022-34305, CVE-2022-42252, CVE-2023-28708, CVE-2023-41080, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648, CVE-2023-46589, CVE-2024-23672, CVE-2024-2454916/04/2026, 19:02:57cogentco.com
111.228.37.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/03/2026, 22:53:2011/04/2026, 23:17:21 - - ----
4.255.151.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft15/03/2026, 22:53:2016/03/2026, 00:23:06 - - ----
111.228.53.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/03/2026, 22:53:2022/03/2026, 11:34:00 - - ----
134.199.224.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:53:2015/04/2026, 13:28:07 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 18:06:10-
180.130.116.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom Yunnan15/03/2026, 22:53:1911/04/2026, 07:53:36 Yes No -CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 20:14:12chinaunicom.cn
47.94.143.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft15/03/2026, 22:53:1916/03/2026, 00:23:05 - - ----
43.139.238.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:1916/03/2026, 00:23:05 - - ----
123.56.244.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft15/03/2026, 22:53:1916/03/2026, 00:23:05 - - ----
43.133.193.•••:18789 - 🇯🇵 Japan Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd15/03/2026, 22:53:1907/06/2026, 01:10:17 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541425/05/2026, 20:40:41tencent.com
115.190.218.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology15/03/2026, 22:53:1907/06/2026, 01:10:25 Yes No --03/04/2026, 17:10:43gwbn.net.cn
111.228.33.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/03/2026, 22:53:1912/04/2026, 00:46:47 - - ----
146.190.219.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:53:1931/05/2026, 14:46:13 - - ----
117.72.166.•••:18789 - 🇨🇳 China mainland Yes false Clean AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com15/03/2026, 22:53:1918/03/2026, 14:16:50 - - ----
115.191.17.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology15/03/2026, 22:53:1916/04/2026, 01:19:47 - - ----
122.51.83.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:1919/03/2026, 07:05:56 - - ----
154.217.249.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited15/03/2026, 22:53:1911/04/2026, 06:23:30 No No --13/03/2026, 05:39:25-
111.228.7.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/03/2026, 22:53:1912/04/2026, 15:38:58 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/04/2026, 15:39:51jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
124.221.170.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:1905/06/2026, 03:20:12 Yes Yes APT37, El-Machete-16/03/2026, 13:48:20tencent.com
47.243.24.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK15/03/2026, 22:53:1931/03/2026, 06:43:30 - - ----
42.193.17.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:53:1921/03/2026, 10:33:52 - - ----
43.139.95.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing15/03/2026, 22:53:1916/03/2026, 00:23:04 - - ----
104.21.35.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare15/03/2026, 22:53:1923/05/2026, 03:54:22 - - ----
142.93.187.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:53:1804/04/2026, 11:40:49 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 11:43:49-
165.22.102.•••:18789 - 🇸🇬 Singapore Yes false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:53:1811/04/2026, 21:02:34 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198521/03/2026, 10:35:14-
43.160.210.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd15/03/2026, 22:53:1831/03/2026, 01:28:18 - - ----
124.71.203.•••:18789 - 🇨🇳 China mainland Yes false Clean AS55990Huawei Cloud Service data centerHuawei Cloud15/03/2026, 22:51:1216/03/2026, 00:21:01 - - ----
47.108.212.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft15/03/2026, 22:51:1216/03/2026, 00:21:01 - - ----
47.237.187.•••:18789 - 🇺🇸 United States - false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud15/03/2026, 22:51:1216/03/2026, 00:21:00 - - ----
172.67.148.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare15/03/2026, 22:51:1216/03/2026, 00:21:00 - - ----
46.225.70.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner15/03/2026, 22:51:1216/03/2026, 18:02:18 - - ----
117.72.35.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJD.com15/03/2026, 22:51:1021/05/2026, 00:30:36 Yes - -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198524/03/2026, 12:07:45jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
45.76.177.•••:18789 - 🇸🇬 Singapore - false Clean AS20473The Constant Company, LLCVultr Holdings15/03/2026, 22:51:1016/03/2026, 00:20:59 - - ----
2a02:4780:66:f9e6::1:18789 - 🇧🇷 Brazil - false Clean AS47583Hostinger International LimitedHostinger15/03/2026, 22:51:1005/06/2026, 01:54:08 - - ----
8.130.52.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud15/03/2026, 22:51:1005/04/2026, 14:58:29 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138502/04/2026, 19:25:41-
119.3.157.•••:18789 - 🇨🇳 China mainland Yes false Clean AS55990Huawei Cloud Service data centerHuawei Cloud15/03/2026, 22:51:1021/03/2026, 22:16:18 - - ----
114.132.83.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:51:1002/06/2026, 16:45:57 Yes - --07/04/2026, 07:17:34tencent.com
110.40.139.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud15/03/2026, 22:51:1008/04/2026, 15:27:08 Yes Yes APT37, El-Machete-31/03/2026, 02:58:27tencent.com
31.220.79.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo15/03/2026, 22:51:1008/04/2026, 08:31:14 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 01:40:55terratransit.de, contabo.de, contabo.net
43.165.174.•••:18789 - 🇯🇵 Japan Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd15/03/2026, 22:51:0904/06/2026, 15:01:24 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198503/04/2026, 14:55:02tencent.com
165.1.65.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationOracle15/03/2026, 22:51:0905/06/2026, 05:24:54 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198524/03/2026, 13:38:51healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
134.209.25.•••:18789 - 🇬🇧 United Kingdom - false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:51:0916/03/2026, 06:01:33 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/03/2026, 02:49:05-
117.43.52.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetCHINANET Jiangxi15/03/2026, 22:51:0918/03/2026, 19:56:56 No No --12/03/2026, 15:36:14-
47.97.49.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft15/03/2026, 22:51:0928/05/2026, 13:22:25 - - ----
34.29.176.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle15/03/2026, 22:51:0916/03/2026, 00:20:58 - - ----
120.48.139.•••:18789 Assistant 🇭🇰 Hong Kong Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu15/03/2026, 22:51:0916/03/2026, 00:20:58 - - ----
111.228.7.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters15/03/2026, 22:51:0913/04/2026, 12:51:02 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 11:24:32jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
46.101.45.•••:18789 - 🇬🇧 United Kingdom - false Clean AS14061DigitalOcean, LLCDigitalOcean15/03/2026, 22:51:0916/03/2026, 18:03:14 - - ----
47.77.233.•••:18789 - 🇺🇸 United States - false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud15/03/2026, 22:51:0915/04/2026, 03:19:56 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198518/03/2026, 22:43:14hichina.com, alibaba-inc.com