🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 958193 Page: 4899 / 9582 (100 per page) Showing: 489801-489900 Last Imported: 18/06/2026, 08:26:08
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 4899 of 9582
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
82.156.100.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:12:5714/03/2026, 01:54:13 - - ----
43.134.134.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:12:5712/04/2026, 23:52:06 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/03/2026, 19:59:46tencent.com
95.81.98.•••:18789 - 🇳🇱 Netherlands Yes false Leaked AS216154CLODO CLOUD SERVICE CO. L.L.CJoint Stock Company Internet of Things10/03/2026, 21:12:5717/06/2026, 03:39:39 Yes No --16/03/2026, 13:49:07fvds.ru
180.76.56.•••:18789 - 🇨🇳 China mainland Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
43.156.204.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:12:5713/03/2026, 19:16:52 - - ----
129.211.14.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:12:5717/06/2026, 09:27:32 No - --10/04/2026, 22:52:52-
89.117.59.•••:18789 - 🇺🇸 United States Yes false Clean AS51167Contabo GmbHLithuanian Radio and TV Center10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
38.165.20.•••:18789 - 🇺🇸 United States Yes false Leaked AS967VMISS Inc.PEG Technology10/03/2026, 21:12:5727/05/2026, 11:12:01 Yes No -CVE-2024-6484, CVE-2024-648512/03/2026, 11:07:06cogentco.com
120.48.48.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
68.183.57.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean10/03/2026, 21:12:5717/06/2026, 15:50:14 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-3272801/04/2026, 10:23:39-
3.91.41.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon Web Services10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
111.229.208.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:12:5714/03/2026, 00:25:08 - - ----
51.75.185.•••:18789 - 🇫🇷 France Yes false Clean AS16276OVH SASOVH10/03/2026, 21:12:5712/03/2026, 16:18:17 - - ----
8.219.196.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
178.104.24.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
120.48.5.•••:18789 賈維斯 (JARVIS) ((待定)) 🇺🇸 United States Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:12:5707/04/2026, 08:45:54 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 07:20:11baidu.com
123.207.247.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
64.81.113.•••:18789 - 🇯🇵 Japan Yes false Leaked AS979NetLab GlobalNetLab Global10/03/2026, 21:12:5709/04/2026, 22:09:33 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198518/03/2026, 05:15:14speakeasy.net, megapath.com, gtt.net, talkingnets.com, ultradsl.net, hiberniaatlantic.com
149.118.151.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle10/03/2026, 21:12:5716/06/2026, 16:13:08 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198509/04/2026, 18:26:23healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
1.94.167.•••:18789 - 🇨🇳 China mainland Yes false Clean AS55990Huawei Cloud Service data centerBeijing Teletron Telecom10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
106.12.163.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
218.206.54.•••:18789 - 🇨🇳 China mainland Yes false Clean AS9808China Mobile Communications Group Co., Ltd.China Mobile Yunnan10/03/2026, 21:12:5710/03/2026, 21:12:57 - - ----
47.116.180.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:12:5717/06/2026, 14:24:18 No Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-46118, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 12:04:20-
101.204.221.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneUNICOM Sichuan10/03/2026, 21:12:5714/03/2026, 01:09:57 - - ----
43.156.157.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:10:4810/03/2026, 21:10:48 - - ----
106.52.17.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4813/03/2026, 19:53:43 Yes No -CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/03/2026, 14:04:48tencent.com
204.168.154.•••:18789 - 🇫🇮 Finland - false Clean AS24940Hetzner Online GmbHHetzner10/03/2026, 21:10:4512/03/2026, 11:02:47 - - ----
118.25.188.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4516/06/2026, 16:53:32 Yes - --03/04/2026, 12:39:17tencent.com
43.128.92.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:10:4517/06/2026, 05:03:56 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-8616, CVE-2020-8617, CVE-2020-8618, CVE-2020-8619, CVE-2020-8620, CVE-2020-8621, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-2795, CVE-2022-3094, CVE-2022-38177, CVE-2022-38178, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/04/2026, 17:52:33tencent.com
193.112.192.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4516/06/2026, 10:29:26 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-6470, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138504/04/2026, 02:35:57telstra.com.au, muru-d.com, ivision.com.au, medicaldirector.com, bigond.com, telstrainternationalgroup.com, telstra.com, telstra-global.com, bigpond.com, emerging.com.au, telstraglobal.com, telstrainternational.com, telstraglobal.net
120.48.12.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4510/03/2026, 21:10:45 - - ----
42.193.98.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4516/03/2026, 06:01:14 - - ----
120.48.98.•••:18789 Assistant 🇺🇸 United States Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4506/04/2026, 03:40:52 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, DragonFly, El-Machete, Gamaredon Group, Gaza Cybergang, Gozi, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:25:18baidu.com
114.132.188.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4516/06/2026, 13:20:32 Yes Yes APT37, El-MacheteCVE-2019-20372, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734701/04/2026, 21:03:46tencent.com
112.124.99.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:10:4516/03/2026, 18:03:17 - - ----
3.16.135.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon10/03/2026, 21:10:4510/03/2026, 21:10:45 - - ----
139.59.188.•••:18789 - 🇬🇧 United Kingdom - false Clean AS14061DigitalOcean, LLCDigitalOcean10/03/2026, 21:10:4524/05/2026, 00:51:11 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-1695, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/03/2026, 11:49:17-
152.136.224.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4517/06/2026, 04:20:23 No Yes APT15, APT28, APT29, APT31, APT34, APT37, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138513/03/2026, 18:29:04-
123.56.30.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:10:4514/03/2026, 01:52:17 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/03/2026, 22:56:29aliyun.com
60.205.164.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:10:4517/06/2026, 10:08:01 Yes No -CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341922/05/2026, 15:16:38aliyun.com
158.180.66.•••:18789 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationOracle10/03/2026, 21:10:4510/03/2026, 21:10:45 - - ----
1.14.192.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4509/04/2026, 05:33:55 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/03/2026, 22:54:08tencent.com
106.52.124.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4513/03/2026, 10:28:17 - - ----
43.157.240.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:10:4504/04/2026, 19:49:49 Yes No --13/03/2026, 14:02:01tencent.com
120.53.240.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedShandong Servsd Technology10/03/2026, 21:10:4517/06/2026, 09:25:47 Yes Yes APT37, El-Machete-14/03/2026, 01:07:58cnnic.cn
111.231.21.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4516/06/2026, 22:36:05 Yes No --13/03/2026, 11:48:14tencent.com
43.136.132.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4516/04/2026, 22:45:51 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138501/04/2026, 16:24:58tencent.com
157.245.61.•••:18789 - 🇸🇬 Singapore Yes false Clean AS14061DigitalOcean, LLCDigitalOcean10/03/2026, 21:10:4517/06/2026, 03:37:44 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 02:38:53-
49.232.210.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4515/06/2026, 21:42:21 Yes Yes APT37, El-Machete-31/03/2026, 01:25:40tencent.com
18.167.186.•••:18789 - 🇨🇳 China mainland Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services Hong Kong10/03/2026, 21:10:4510/03/2026, 21:10:45 - - ----
18.142.215.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services10/03/2026, 21:10:4524/03/2026, 22:45:01 No No --08/03/2026, 00:25:47-
167.235.200.•••:18789 - 🇩🇪 Germany Yes false Leaked AS24940Hetzner Online GmbHHetzner Online10/03/2026, 21:10:4517/04/2026, 01:46:29 Yes No -CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 21:49:50hetzner.com
159.223.203.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean10/03/2026, 21:10:4516/06/2026, 17:36:15 No Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/03/2026, 12:33:44-
129.213.10.•••:18789 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationOracle Cloud10/03/2026, 21:10:4513/03/2026, 23:38:22 - - ----
111.228.3.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS141679China Telecom Beijing Tianjin Hebei Big Data Industry Park BranchJingdong Headquarters10/03/2026, 21:10:4509/04/2026, 18:04:11 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 07:05:13jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com
188.245.223.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner10/03/2026, 21:10:4504/04/2026, 09:24:06 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198518/03/2026, 10:28:19-
120.48.89.•••:18789 Assistant 🇺🇸 United States Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4506/04/2026, 11:25:56 Yes Yes APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161714/03/2026, 00:25:39baidu.com
15.204.249.•••:18789 - 🇺🇸 United States Yes false Leaked AS16276OVH SASVPS US East VA 210/03/2026, 21:10:4530/03/2026, 17:32:29 Yes No -CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198530/03/2026, 12:01:06ovh.us
120.48.98.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4507/04/2026, 08:43:34 - - ----
103.142.25.•••:18789 - 🇻🇳 Vietnam - false Clean AS135951Webico Company LimitedTino Group10/03/2026, 21:10:4510/03/2026, 21:10:45 - - ----
212.64.13.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4516/06/2026, 23:18:46 No - --31/03/2026, 22:38:40-
43.156.202.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
120.48.20.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
47.254.229.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Malaysia10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
3.25.80.•••:18789 - 🇦🇺 Australia - false Clean AS16509Amazon.com, Inc.Amazon Corporate Services10/03/2026, 21:10:4415/06/2026, 18:09:03 No No -CVE-2006-20001, CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-6620003/04/2026, 18:39:31-
47.92.196.•••:18789 小马 (🐴) 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
98.92.41.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon Web Services10/03/2026, 21:10:4416/06/2026, 04:48:13 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541401/06/2026, 14:42:51-
38.55.133.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.PEG Technology10/03/2026, 21:10:4415/04/2026, 13:26:25 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/03/2026, 12:37:32-
8.131.68.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud10/03/2026, 21:10:4422/03/2026, 09:16:55 - - ----
106.14.123.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:10:4417/06/2026, 17:56:10 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198527/03/2026, 09:24:38aliyun.com
129.211.27.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4413/04/2026, 05:32:54 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt TyphoonCVE-2010-4478, CVE-2010-4755, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2016-0777, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-15778, CVE-2021-36368, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138510/04/2026, 12:24:00-
47.243.64.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud HK10/03/2026, 21:10:4417/04/2026, 10:00:56 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/03/2026, 12:31:34-
43.129.23.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay10/03/2026, 21:10:4407/04/2026, 06:28:48 No Yes APT37, El-MacheteCVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/04/2026, 04:14:53-
106.54.7.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
120.48.83.•••:18789 虾米 (Xiami) (暂时空着) 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
120.48.107.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4414/03/2026, 01:52:28 - - ----
192.144.238.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
47.92.102.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:10:4404/06/2026, 20:57:35 No No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-4161713/03/2026, 22:53:28-
43.139.3.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4417/04/2026, 10:02:16 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2017-15945, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138508/04/2026, 20:40:30tencent.com
114.67.156.•••:18789 - 🇨🇳 China mainland Yes false Clean AS23724IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province NetworkJD.com10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
120.48.139.•••:18789 Assistant 🇭🇰 Hong Kong Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
209.38.93.•••:18789 - 🇦🇺 Australia Yes false Leaked AS14061DigitalOcean, LLCDigitalOcean10/03/2026, 21:10:4414/03/2026, 01:07:34 Yes Yes APT15, APT17, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Salt Typhoon, SideWinder APTCVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/03/2026, 09:01:11cprapid.com
180.76.232.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4407/04/2026, 22:45:06 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, PackratCVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198504/04/2026, 13:56:01baidu.com
43.167.176.•••:18789 - 🇸🇬 Singapore Yes false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
101.43.89.•••:18789 - 🇨🇳 China mainland - false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing10/03/2026, 21:10:4418/06/2026, 05:17:30 Yes Yes APT37, El-MacheteCVE-2022-22707, CVE-2022-4155616/03/2026, 12:39:12tencent.com
106.52.178.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4410/03/2026, 21:10:44 - - ----
182.254.168.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4415/04/2026, 19:08:05 Yes Yes APT28, APT35, APT36, APT37, APT39, Cobalt Group, El-Machete, Equation Group, Hafnium Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13943, CVE-2020-14145, CVE-2020-17527, CVE-2020-9484, CVE-2021-24122, CVE-2021-25122, CVE-2021-25329, CVE-2021-30640, CVE-2021-33037, CVE-2021-41079, CVE-2021-41617, CVE-2021-43980, CVE-2022-29885, CVE-2022-34305, CVE-2022-4225201/04/2026, 16:25:27tencent.com
180.76.113.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4414/03/2026, 01:52:09 - - ----
111.231.56.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4322/03/2026, 15:16:11 Yes No --19/03/2026, 04:17:26tencent.com
43.134.20.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay10/03/2026, 21:10:4317/04/2026, 20:54:06 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6470, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-8616, CVE-2020-8617, CVE-2020-8618, CVE-2020-8619, CVE-2020-8620, CVE-2020-8621, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-2795, CVE-2022-3094, CVE-2022-38177, CVE-2022-38178, CVE-2023-2828, CVE-2023-28531, CVE-2023-3341, CVE-2023-38408, CVE-2023-4408, CVE-2023-48795, CVE-2023-50387, CVE-2023-50868, CVE-2023-51384, CVE-2023-51385, CVE-2023-5517, CVE-2023-6516, CVE-2024-11187, CVE-2024-1737, CVE-2024-197522/03/2026, 07:50:48tencent.com
120.48.78.•••:18789 Assistant 🇺🇸 United States Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4306/04/2026, 11:59:50 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-22/03/2026, 15:19:18baidu.com
64.20.42.•••:18789 - 🇺🇸 United States - false Clean AS19318Interserver, IncInterserver10/03/2026, 21:10:4303/04/2026, 07:24:53 - - ----
124.77.200.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4812China Telecom (Group)ChinaNet Shanghai10/03/2026, 21:10:4326/03/2026, 21:24:28 - - ----
120.48.31.•••:18789 机票预订助手 (✈️) 🇺🇸 United States Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4306/04/2026, 03:40:51 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, PackratCVE-2017-15945, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:25:24baidu.com
106.54.77.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud10/03/2026, 21:10:4311/04/2026, 18:57:38 - - ----
8.152.6.•••:18789 - 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud10/03/2026, 21:10:4317/06/2026, 08:43:02 No Yes APT36, Gamaredon GroupCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-16845, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-3272801/04/2026, 17:06:41-
43.160.225.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd10/03/2026, 21:10:4317/06/2026, 10:08:07 Yes No -CVE-2023-44487, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/04/2026, 17:59:55tencent.com
120.48.73.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu10/03/2026, 21:10:4310/03/2026, 21:10:43 - - ----
108.187.4.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS138995Antbox Networks LimitedAntbox Network10/03/2026, 21:10:4314/03/2026, 01:51:37 - - ----
114.55.132.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft10/03/2026, 21:10:4315/04/2026, 23:15:10 Yes No --09/04/2026, 15:43:01aliyun.com