🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 4483 / 10768 (100 per page) Showing: 448201-448300 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 223.166.241.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS17621 | China Unicom Shanghai network | China Unicom Shanghai | 26/03/2026, 20:40:43 | 27/03/2026, 00:26:24 | - | - | - | - | - | - |
| 120.26.204.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:43 | 27/03/2026, 00:26:24 | - | - | - | - | - | - |
| 15.235.147.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16276 | OVH SAS | OVH Singapore | 26/03/2026, 20:40:43 | 27/03/2026, 00:26:24 | - | - | - | - | - | - |
| 44.249.243.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 26/03/2026, 20:40:43 | 08/09/2026, 23:07:37 | No | No | - | - | 04/04/2026, 16:16:39 | - |
| 64.225.72.•••:18789 | - | 🇳🇱 Netherlands | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:43 | 09/04/2026, 14:34:10 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 04/04/2026, 08:44:27 | - |
| 123.207.58.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 26/03/2026, 20:40:43 | 17/04/2026, 00:18:13 | Yes | No | - | - | 30/03/2026, 10:31:51 | tencent.com |
| 8.147.126.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 26/03/2026, 20:40:42 | 27/03/2026, 00:26:24 | - | - | - | - | - | - |
| 2604:2dc0:205:4d00:::18789 | - | 🇺🇸 United States | - | false | Clean | AS16276 | OVH SAS | Sd One Network | 26/03/2026, 20:40:42 | 10/09/2026, 11:58:48 | - | - | - | - | - | - |
| 43.156.141.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 26/03/2026, 20:40:42 | 01/08/2026, 19:36:28 | Yes | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 25/05/2026, 03:34:19 | tencent.com |
| 39.98.90.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:42 | 09/09/2026, 00:32:58 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 07/04/2026, 22:04:26 | aliyun.com |
| 20.194.20.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 26/03/2026, 20:40:42 | 27/03/2026, 00:26:24 | - | - | - | - | - | - |
| 45.32.239.•••:18789 | - | 🇳🇱 Netherlands | Yes | false | Clean | AS20473 | The Constant Company, LLC | Vultr Holdings | 26/03/2026, 20:40:42 | 21/05/2026, 08:14:39 | - | - | - | - | - | - |
| 44.222.240.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon Web Services | 26/03/2026, 20:40:42 | 10/09/2026, 03:28:41 | No | No | - | - | 11/04/2026, 06:19:32 | - |
| 118.25.146.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 26/03/2026, 20:40:42 | 11/06/2026, 05:27:45 | Yes | - | - | - | 05/04/2026, 23:59:16 | tencent.com |
| 175.24.172.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 26/03/2026, 20:40:42 | 27/03/2026, 00:26:23 | - | - | - | - | - | - |
| 154.215.94.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 26/03/2026, 20:40:42 | 31/03/2026, 07:28:31 | - | - | - | - | - | - |
| 154.194.190.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 26/03/2026, 20:40:42 | 10/09/2026, 11:58:18 | No | - | - | - | 27/03/2026, 05:14:11 | - |
| 129.226.81.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 26/03/2026, 20:40:42 | 08/09/2026, 14:32:22 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 06:52:14 | - |
| 34.68.3.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 26/03/2026, 20:40:42 | 16/04/2026, 10:02:44 | No | Yes | DragonFly, Packrat, Salt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 02/04/2026, 06:42:42 | - | |
| 152.42.213.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:42 | 17/04/2026, 04:04:03 | No | Yes | APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 29/03/2026, 18:31:05 | - |
| 104.21.45.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS13335 | Cloudflare, Inc. | Cloudflare | 26/03/2026, 20:40:42 | 27/03/2026, 00:26:23 | - | - | - | - | - | - |
| 51.38.92.•••:18789 | - | 🇩🇪 Germany | Yes | false | Clean | AS16276 | OVH SAS | Failover IP | 26/03/2026, 20:40:42 | 15/04/2026, 21:59:58 | No | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 07/04/2026, 06:30:29 | - |
| 117.50.241.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS23724 | IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province Network | UCloud | 26/03/2026, 20:40:41 | 27/03/2026, 00:26:23 | - | - | - | - | - | - |
| 3.134.194.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 26/03/2026, 20:40:41 | 31/08/2026, 03:06:18 | No | Yes | DragonFly | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 24/05/2026, 12:51:44 | - |
| 94.198.220.•••:18789 | - | 🇰🇿 Kazakhstan | Yes | false | Leaked | AS9123 | JSC "TIMEWEB" | Taiwan Cloud | 26/03/2026, 20:40:41 | 16/06/2026, 18:21:00 | Yes | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, Volt Typhoon | CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 29/03/2026, 23:01:46 | tw1.ru |
| 149.30.231.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS133199 | SonderCloud Limited | Solustack Limited | 26/03/2026, 20:40:41 | 17/04/2026, 10:04:39 | - | - | - | - | - | - |
| 119.91.127.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 26/03/2026, 20:40:41 | 27/03/2026, 00:26:22 | - | - | - | - | - | - |
| 116.118.45.•••:18789 | - | 🇻🇳 Vietnam | Yes | false | Leaked | AS135951 | Webico Company Limited | ADSL Service | 26/03/2026, 20:40:41 | 05/04/2026, 22:28:53 | Yes | Yes | APT15, APT28, APT31, APT36, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 06:48:56 | aiden-vn.com, anhbac.com, quatangthanhdong.com, loitoan.com, mayhoangtung.com, gialoilongan.com, vrgkhaihoan.com, voyagevietnammoto.com, viettelsoftware.com, ichiisoft.com, spt.vn, maymacanphu.com, jucyvietnam.com, vinagreenplus.com |
| 51.77.70.•••:18789 | - | 🇮🇹 Italy | Yes | false | Clean | AS16276 | OVH SAS | OVH Dedicated Failover IPs | 26/03/2026, 20:40:41 | 27/03/2026, 00:26:22 | - | - | - | - | - | - |
| 156.225.143.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | CloudFly Net Inc | 26/03/2026, 20:40:41 | 17/04/2026, 04:03:59 | No | Yes | APT1, APT32, El-Machete, FIN8, Gamaredon-Group, gozi | CVE-2014-4078 | 11/04/2026, 17:42:49 | - |
| 116.6.93.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4809 | China Telecom Next Generation Carrier Network | CHINANET Guangdong | 26/03/2026, 20:40:41 | 16/04/2026, 01:20:58 | - | - | - | - | - | - |
| 79.108.225.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS36007 | Kamatera, Inc. | CloudWebManage | 26/03/2026, 20:40:40 | 27/03/2026, 00:26:22 | - | - | - | - | - | - |
| 172.67.177.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS13335 | Cloudflare, Inc. | Cloudflare | 26/03/2026, 20:40:40 | 05/09/2026, 02:07:58 | Yes | No | - | - | 27/03/2026, 07:10:55 | seldatekstil.com, 1-x-stavka1.ru, caliskanbt.com, cgmprecast.com, hzfeidi.com, fricksfashion.com, faceprogram.org, stb-cpaturkey.com, globalmattersgroup.com, borbelaw.com, fuhuake.com, cityfied.net, abpincorp.com, kiaoztopraklar.com, anlink.net, jekotrade.com, hmcxjc.com, shsinotech.com, vbankph.com, bopcon.com, clubduma.ru, boyu-group.com, ekakitchen.com, wisehousetech.com, cloudflare.net, toklaipackaging.com, prevossolutions.com, qd-baolian.com, knc.eco.br, csofam.com, kidsbud.net, nutmegstatefcu.org, jxlingtong.com, nonalaguerre.com, ledan.com.br, altosdelchicala.com, baselinewoods.com, jiabinnu.com, citizensbank.net, alghanitex.com, qzz.io, duartegestao.com.br, kfstock.com, srw-eng.com, brownsprinting.com, cloudhq-mkt6.net, valenciamoldremediation.us, champmar-ec.com, forwardwirecloth.net, klmymmyc.com, rnvanalytics.com, aerosupplycargosadecv.com, pp.ua, hnbeixiang.com, refee.net, xjzljt.net, mobixa.net, xjjingyoga.com, sxgas.net, wakechem.com, rlktech.com, martiwatersports.com, 1haojiyin.com, detongwiremesh.com, sanhoos.com, simatek.com, comelitgroup.it, dgclh.com, entrecom.com, bamko.net, ausarabbusinesscouncil.com, hansecontrol.com, lstcarbon.com, it.com, voyagevietnammoto.com, ttstest.com, lamaxwell.com, gaetanasnyc.com, oukay.net, irrigationsystems4u.com, yhjgkeji.com, gptx.org, acassist.co.uk, ikbalambalaj.com, china-one.net, kingdisplay.net, eu.org, bierte.com, pprossmx.com, ibew56fcu.org, polikom.ru, com.de, ttyt360.com, zgkaite.com, turnoutservices.com, zjdddl.com, ranscustombuilders.com, comelit.it, parliament-osetia.ru, xjnmi.com, 3enelektrik.com, oracle-ag.ch, aquecedoresimperio.com.br, zjhrbz.com, zhaowoo.net, precouncil.org, bestwanhui.com, bain86.com, tektasgroup.com, workers.dev, digitalvizyon.net, hashemfoods.com, stingraysystem.com, dedagroup.com, tigerexpressfuel.com, 360-xj.com, xjwfcj.com, isny.us, allaboutnails.org, impresosmonterrey.com, shworldbest.com, zsnet.net, dongguansenzi.com, ecodryfood.com, tomastc.com, muskmedikal.com, carmaxbolivia.com, china114.net, futurefg.ru, hy189.net, ljasurvey.com, askargrup.com, xjhongshun.com, southport-harbor.com, lyric-line.ru, geochem.org, equinaceaprodutosnaturais.com, dmln.net |
| 24.233.20.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS55933 | Cloudie Limited | Century Communications | 26/03/2026, 20:40:40 | 11/04/2026, 10:51:38 | - | - | - | - | - | - |
| 154.213.118.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Leaked | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 26/03/2026, 20:40:40 | 12/04/2026, 17:08:28 | Yes | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 30/03/2026, 20:11:47 | wisdomxj.cn, cwsse.com.cn, xjkrx.cn, xintec.hk, meter.ln.cn, gatorchucks.cn, innfos.cn, dehuiguangchang.cn, xjgudao.com, mubayyin.cn, xjxhhydropower.com, dldianfeng.cn, beiyuecheng.com, 0991df.net, szlis.com.cn, cnkejie.com, 8189330.cn, liyubelt.net.cn |
| 106.54.206.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Unknown | 26/03/2026, 20:40:40 | 28/07/2026, 13:15:19 | Yes | Yes | APT37, El-Machete | - | 07/04/2026, 18:19:04 | tencent.com |
| 47.251.160.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud US | 26/03/2026, 20:40:40 | 25/05/2026, 03:32:41 | No | Yes | APT15, APT28, APT31, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 24/05/2026, 21:55:48 | - |
| 43.153.222.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 26/03/2026, 20:40:40 | 07/04/2026, 05:01:13 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 26/03/2026, 21:26:02 | tencent.com |
| 38.55.146.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS400619 | AROSSCLOUD INC. | PEG Technology | 26/03/2026, 20:40:40 | 07/09/2026, 11:16:46 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:26:03 | - |
| 146.190.148.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:40 | 13/07/2026, 08:32:12 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:26:05 | - |
| 139.9.194.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 26/03/2026, 20:40:40 | 06/04/2026, 23:12:58 | No | Yes | APT28, APT35, APT36, APT37, APT39, Cobalt Group, Equation Group, Hafnium Group, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, Silence Hacker Group, The Shadow Brokers, WildCard APT | CVE-2016-10708, CVE-2017-15906, CVE-2018-11784, CVE-2018-1304, CVE-2018-1305, CVE-2018-1336, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2018-8014, CVE-2018-8034, CVE-2018-8037, CVE-2019-0199, CVE-2019-0221, CVE-2019-10072, CVE-2019-12418, CVE-2019-17563, CVE-2019-2684, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13943, CVE-2020-14145, CVE-2020-17527, CVE-2020-1935, CVE-2020-1938, CVE-2020-9484, CVE-2021-24122, CVE-2021-25122, CVE-2021-25329, CVE-2021-30640, CVE-2021-33037, CVE-2021-41079, CVE-2021-41617, CVE-2021-43980, CVE-2022-25762, CVE-2022-34305, CVE-2022-42252, CVE-2023-28708 | 26/03/2026, 21:26:10 | - |
| 80.167.236.•••:18789 | - | 🇩🇰 Denmark | - | false | Clean | AS3292 | TDC A/S | Triad Denmark | 26/03/2026, 20:40:40 | 09/09/2026, 04:05:19 | Yes | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 26/03/2026, 21:26:16 | jsoesterreich.at, jsworldmedia.com |
| 115.68.228.•••:18789 | - | 🇰🇷 South Korea | Yes | false | Clean | AS38700 | SMILESERV | SmileServ | 26/03/2026, 20:40:40 | 17/04/2026, 10:03:52 | - | - | - | - | - | - |
| 74.208.79.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS8560 | This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE. | 1&1 Ionos | 26/03/2026, 20:40:40 | 27/03/2026, 07:10:55 | Yes | Yes | APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2016-0736, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2020-11985, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:26:20 | ionos.com |
| 95.217.154.•••:18789 | - | 🇫🇮 Finland | Yes | false | Leaked | AS24940 | Hetzner Online GmbH | Hetzner Online | 26/03/2026, 20:40:40 | 02/06/2026, 11:39:51 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:26:22 | hetzner.com |
| 207.180.208.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS51167 | Contabo GmbH | Contabo | 26/03/2026, 20:40:40 | 10/09/2026, 11:58:50 | Yes | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-26691, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:26:23 | contaboserver.net, contabo.de, contabo.net |
| 111.228.8.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS141679 | China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch | Jingdong Headquarters | 26/03/2026, 20:40:40 | 10/04/2026, 00:57:10 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:26:29 | jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com |
| 192.241.144.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:39 | 30/03/2026, 11:15:42 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387 | 26/03/2026, 21:26:37 | cloudflare.net, widgetic.com |
| 5.146.10.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS3209 | International IP-Backbone of Vodafone | Unitymedia | 26/03/2026, 20:40:39 | 22/08/2026, 14:23:07 | Yes | No | - | - | 11/06/2026, 19:43:06 | myfritz.net, fritz.com, myqnapcloud.com, qmiix.com |
| 154.194.182.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 26/03/2026, 20:40:39 | 08/09/2026, 19:33:34 | No | - | - | - | 20/03/2026, 21:26:39 | - |
| 40.115.217.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 26/03/2026, 20:40:39 | 14/08/2026, 13:40:18 | No | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 26/03/2026, 21:26:43 | - |
| 159.65.216.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:39 | 27/05/2026, 14:47:50 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:26:47 | - |
| 34.30.99.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 26/03/2026, 20:40:39 | 14/04/2026, 07:32:33 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 26/03/2026, 21:26:48 | - | |
| 66.85.168.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS20454 | SECURED SERVERS LLC | NET-885615 | 26/03/2026, 20:40:39 | 09/09/2026, 13:18:29 | Yes | - | - | - | 26/03/2026, 21:26:53 | phoenixnap.com, securedservers.com |
| 43.106.106.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud Singapore | 26/03/2026, 20:40:39 | 08/09/2026, 23:50:19 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 14:16:57 | alibabacloud.com |
| 117.72.96.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS141679 | China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch | JD.com | 26/03/2026, 20:40:39 | 02/04/2026, 03:01:44 | - | - | - | - | - | - |
| 103.215.83.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS24544 | Overcasts Limited | Miramar Tower Unit 1010 | 26/03/2026, 20:40:39 | 27/03/2026, 00:26:21 | - | - | - | - | - | - |
| 20.10.134.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS8075 | Microsoft Corporation | Microsoft | 26/03/2026, 20:40:39 | 27/03/2026, 00:26:21 | - | - | - | - | - | - |
| 72.60.157.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS47583 | Hostinger International Limited | Hostinger | 26/03/2026, 20:40:39 | 27/03/2026, 00:26:21 | - | - | - | - | - | - |
| 49.235.111.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 26/03/2026, 20:40:39 | 09/09/2026, 15:26:10 | Yes | Yes | APT37, El-Machete | - | 26/03/2026, 21:26:58 | tencent.com |
| 13.231.232.•••:18789 | - | 🇯🇵 Japan | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 26/03/2026, 20:40:39 | 10/09/2026, 11:58:26 | No | - | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 26/03/2026, 21:27:05 | - |
| 149.50.150.•••:18789 | - | 🇦🇷 Argentina | - | false | Leaked | AS27823 | Dattatec.com | Dattatec | 26/03/2026, 20:40:39 | 15/08/2026, 09:46:04 | Yes | No | - | - | 26/03/2026, 21:27:06 | cogentco.com |
| 91.99.12.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS24940 | Hetzner Online GmbH | Hetzner Online | 26/03/2026, 20:40:39 | 04/04/2026, 19:08:34 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:27:07 | your-server.de, hetzner.com |
| 118.25.230.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 26/03/2026, 20:40:39 | 08/09/2026, 01:39:57 | Yes | No | - | - | 26/03/2026, 21:27:08 | tencent.com |
| 195.231.120.•••:18789 | - | 🇮🇹 Italy | - | false | Clean | AS202613 | Internet Service Provider | Aruba Broadband Net | 26/03/2026, 20:40:39 | 27/03/2026, 00:26:20 | Yes | No | - | CVE-2024-6484, CVE-2024-6485 | 26/03/2026, 21:27:10 | myqnapcloud.com |
| 52.91.236.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 26/03/2026, 20:40:39 | 30/03/2026, 11:15:38 | - | - | - | - | - | - |
| 13.234.226.•••:18789 | - | 🇮🇳 India | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 26/03/2026, 20:40:39 | 27/03/2026, 00:26:20 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:27:16 | - |
| 8.129.27.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 26/03/2026, 20:40:39 | 16/04/2026, 17:30:38 | - | - | - | - | - | - |
| 206.119.160.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS133199 | SonderCloud Limited | Solustack Limited | 26/03/2026, 20:40:39 | 07/09/2026, 22:07:04 | Yes | Yes | APT15, APT28, APT31, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 26/03/2026, 21:27:22 | cogentco.com |
| 129.121.86.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS31898 | Oracle Corporation | OGTIPS1 | 26/03/2026, 20:40:39 | 08/09/2026, 13:49:27 | Yes | Yes | FIN8 | - | 26/03/2026, 21:27:29 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 175.152.169.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Sichuan | 26/03/2026, 20:40:39 | 03/04/2026, 04:27:57 | No | No | - | - | 20/03/2026, 21:27:32 | - |
| 154.213.120.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 26/03/2026, 20:40:39 | 12/04/2026, 23:53:01 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 26/03/2026, 21:27:37 | - |
| 156.249.239.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Ares IDC Limited | 26/03/2026, 20:40:39 | 24/07/2026, 12:56:28 | No | No | - | - | 20/03/2026, 21:27:39 | - |
| 3.123.25.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 26/03/2026, 20:40:38 | 27/03/2026, 08:40:20 | No | No | - | - | 20/03/2026, 21:27:41 | - |
| 47.97.80.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:38 | 30/03/2026, 11:15:01 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:27:45 | - |
| 154.213.108.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS132839 | POWER LINE DATACENTER | Digital Core Technology Co. Limited | 26/03/2026, 20:40:38 | 08/04/2026, 20:01:20 | No | Yes | APT-C-23, APT1, APT28, APT32, APT35, APT37, APT38, APT39, Cobalt Group, DragonFly, El-Machete, FIN8, Gamaredon Group, Gamaredon-Group, Ghostwriter, Kimsuky, Lazarus Group, Mustang Panda, Packrat, Sandworm Team, The Shadow Brokers, Turla APT Group, Volt Typhoon, gozi | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-3618, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487 | 26/03/2026, 21:27:46 | - |
| 152.53.161.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS197540 | netcup GmbH | Netcup | 26/03/2026, 20:40:38 | 16/04/2026, 01:20:10 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 26/03/2026, 21:27:52 | netcup.de, quicksrv.de |
| 47.90.137.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud US | 26/03/2026, 20:40:38 | 27/03/2026, 00:26:20 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:27:56 | - |
| 183.156.126.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 26/03/2026, 20:40:38 | 27/03/2026, 00:26:20 | No | No | - | - | 20/03/2026, 21:28:09 | - |
| 39.98.65.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:38 | 29/03/2026, 17:45:13 | Yes | No | - | - | 26/03/2026, 21:28:13 | aliyun.com |
| 43.160.210.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 26/03/2026, 20:40:38 | 11/04/2026, 10:52:32 | - | - | - | - | - | - |
| 156.225.143.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | CloudFly Net Inc | 26/03/2026, 20:40:38 | 16/04/2026, 17:30:35 | No | Yes | El-Machete, FIN8, Gamaredon-Group | CVE-2014-4078 | 26/03/2026, 21:28:15 | - |
| 101.132.77.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:38 | 29/05/2026, 17:51:19 | Yes | No | - | - | 26/03/2026, 21:28:16 | aliyun.com, optage.co.jp |
| 2408:8352:e60:89:211:32ff:fede:9151:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom | 26/03/2026, 20:40:38 | 15/04/2026, 01:32:41 | - | - | - | - | - | - |
| 8.136.203.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 26/03/2026, 20:40:38 | 17/04/2026, 07:49:35 | - | - | - | - | - | - |
| 165.22.98.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:38 | 01/06/2026, 16:05:44 | No | Yes | APT-C-23, APT36, Cobalt Group, Equation Group, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-12254, CVE-2024-12718, CVE-2024-3219, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-12084, CVE-2025-12781, CVE-2025-13836, CVE-2025-13837, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:28:23 | - |
| 39.98.50.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:38 | 03/06/2026, 19:04:19 | Yes | Yes | APT29, Packrat | CVE-2014-0160, CVE-2014-0224, CVE-2014-4078, CVE-2015-10003 | 26/03/2026, 21:28:25 | aliyun.com |
| 118.69.82.•••:18789 | - | 🇻🇳 Vietnam | Yes | false | Leaked | AS18403 | FPT Telecom Company | Viettel HCMC IP Range | 26/03/2026, 20:40:38 | 16/04/2026, 23:33:10 | Yes | Yes | Packrat | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 26/03/2026, 21:28:26 | fpt.vn |
| 35.202.2.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 26/03/2026, 20:40:38 | 16/04/2026, 19:01:29 | No | Yes | DragonFly, Packrat | CVE-2025-26466, CVE-2025-32728 | 26/03/2026, 21:28:31 | - | |
| 54.195.209.•••:18789 | - | 🇮🇪 Ireland | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 26/03/2026, 20:40:38 | 27/03/2026, 00:26:19 | No | No | - | - | 20/03/2026, 21:28:33 | - |
| 8.136.19.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 26/03/2026, 20:40:38 | 20/05/2026, 18:51:58 | - | - | - | - | - | - |
| 34.63.104.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS396982 | Google LLC | 26/03/2026, 20:40:38 | 24/05/2026, 07:53:06 | No | No | - | - | 30/03/2026, 07:34:41 | - | |
| 144.31.85.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS213520 | Senko Digital LLC | Senko Digital | 26/03/2026, 20:40:38 | 06/07/2026, 01:57:06 | No | No | - | CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:28:47 | - |
| 159.223.63.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:38 | 28/06/2026, 01:01:50 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:28:59 | virtualeventplatform.asia |
| 165.1.73.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle | 26/03/2026, 20:40:38 | 12/04/2026, 23:52:31 | Yes | Yes | APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:29:02 | healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 36.151.150.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS56046 | China Mobile communications corporation | China Mobile | 26/03/2026, 20:40:38 | 07/09/2026, 22:49:42 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:29:05 | chinamobile.com, chinamobile.cn |
| 39.98.67.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:38 | 04/06/2026, 05:07:35 | Yes | Yes | Packrat | - | 26/03/2026, 21:29:13 | aliyun.com |
| 170.64.159.•••:18789 | - | 🇦🇺 Australia | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 26/03/2026, 20:40:37 | 17/04/2026, 08:34:30 | No | Yes | APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers | CVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:29:17 | - |
| 34.28.49.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 26/03/2026, 20:40:37 | 27/03/2026, 00:26:19 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 26/03/2026, 21:29:20 | - | |
| 47.92.85.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 26/03/2026, 20:40:37 | 03/06/2026, 13:21:07 | No | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728 | 26/03/2026, 21:29:21 | - |