🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 518 / 10768 (100 per page) Showing: 51701-51800 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 166.88.227.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS134677 | Dromatics Systems Pte Ltd | Netutils | 27/07/2026, 04:08:50 | 30/08/2026, 02:47:25 | Yes | No | - | CVE-2016-20012, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 04:53:56 | ipxo.com, cyberassets.ae |
| 154.206.173.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 03:32:06 | 12/08/2026, 03:26:39 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 03:32:53 | - |
| 123.153.124.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Zhejiang | 27/07/2026, 03:32:06 | 31/07/2026, 01:10:24 | Yes | No | - | - | 27/07/2026, 03:32:54 | chinaunicom.cn |
| 52.67.224.•••:443 | - | 🇧🇷 Brazil | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Brazil | 27/07/2026, 03:32:06 | 27/07/2026, 14:15:40 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 27/07/2026, 03:32:56 | - |
| 154.206.171.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 03:32:06 | 12/08/2026, 00:33:11 | No | - | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 03:32:58 | - |
| 1.205.157.•••:8888 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Guizhou | 27/07/2026, 03:32:06 | 27/07/2026, 14:15:39 | No | No | - | - | 21/07/2026, 03:33:02 | - |
| 175.10.74.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Hunan Province Network | 27/07/2026, 03:32:06 | 02/08/2026, 02:07:14 | Yes | No | - | - | 27/07/2026, 03:33:06 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 167.233.35.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS24940 | Hetzner Online GmbH | Hetzner | 27/07/2026, 03:32:05 | 02/09/2026, 17:23:22 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 03:33:08 | your-server.de |
| 8.135.26.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 27/07/2026, 03:32:05 | 10/09/2026, 12:00:58 | - | - | - | - | - | - |
| 183.23.132.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 27/07/2026, 03:32:04 | 27/07/2026, 14:15:37 | Yes | No | - | - | 27/07/2026, 03:33:16 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 103.30.146.•••:18789 | - | 🇮🇩 Indonesia | Yes | true | Clean | AS46050 | PT JC Indonesia | Jogjacamp Indonesia | 27/07/2026, 03:32:04 | 10/09/2026, 12:00:28 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 04/09/2026, 07:45:09 | - |
| 112.115.168.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Yunnan | 27/07/2026, 03:32:04 | 30/07/2026, 16:27:30 | No | No | - | - | 21/07/2026, 03:33:20 | - |
| 18.168.163.•••:443 | - | 🇬🇧 United Kingdom | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 27/07/2026, 03:32:03 | 02/08/2026, 20:45:14 | No | Yes | APT14, APT40, APT41, Cobalt Group, Gamaredon Group, Kimsuky, Lazarus Group, SharpPanda | CVE-2006-20001, CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-3590, CVE-2022-36760, CVE-2022-37436, CVE-2022-4973, CVE-2023-22622, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51385, CVE-2023-5692, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-54352 | 27/07/2026, 03:33:23 | - |
| 112.118.224.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS4760 | HKT Limited | Netvigator | 27/07/2026, 03:32:03 | 30/07/2026, 12:48:34 | No | No | - | - | 21/07/2026, 03:33:28 | - |
| 45.207.124.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 27/07/2026, 03:32:03 | 08/09/2026, 00:59:36 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 27/07/2026, 03:33:29 | - |
| 220.169.240.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hengyang Node Network | 27/07/2026, 03:32:03 | 30/07/2026, 17:54:10 | No | No | - | - | 21/07/2026, 03:33:31 | - |
| 154.206.172.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 03:32:03 | 11/08/2026, 17:17:43 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 03:33:34 | - |
| 45.207.120.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Leaked | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 27/07/2026, 03:32:02 | 09/09/2026, 06:14:40 | Yes | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 27/07/2026, 03:33:35 | cgmprecast.com, fuhuake.com, abpincorp.com, jekotrade.com, bopcon.com, boyu-group.com, qd-baolian.com, csofam.com, jiabinnu.com, kfstock.com, klmymmyc.com, hnbeixiang.com, xjjingyoga.com, 1haojiyin.com, detongwiremesh.com, dgclh.com, lstcarbon.com, ttstest.com, gaetanasnyc.com, yhjgkeji.com, bierte.com, ttyt360.com, zgkaite.com, turnoutservices.com, zjdddl.com, zjhrbz.com, bain86.com, impresosmonterrey.com, shworldbest.com, dongguansenzi.com |
| 45.207.122.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 27/07/2026, 03:32:02 | 10/09/2026, 11:18:55 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 27/07/2026, 03:33:37 | - |
| 74.91.136.•••:443 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Newfold Digital | 27/07/2026, 03:32:02 | 25/08/2026, 17:36:46 | Yes | No | - | CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 03:33:40 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 240e:3b1:c842:6a60::bd2:55551 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 27/07/2026, 03:32:02 | 27/07/2026, 14:58:54 | - | - | - | - | - | - |
| 217.216.76.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS141995 | Contabo Asia Private Limited | Contabo | 27/07/2026, 03:30:16 | 27/07/2026, 09:11:55 | - | - | - | - | - | - |
| 171.213.205.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 27/07/2026, 03:30:16 | 30/07/2026, 16:24:56 | No | No | - | - | 21/07/2026, 06:25:28 | - |
| 154.206.173.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 03:30:15 | 11/08/2026, 22:20:47 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 06:25:30 | - |
| 52.67.224.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Brazil | 27/07/2026, 03:30:15 | 27/07/2026, 09:11:53 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 27/07/2026, 08:31:55 | - |
| 154.206.171.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 03:30:15 | 11/08/2026, 19:27:07 | No | - | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 08:31:56 | - |
| 1.205.157.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | ChinaNet Guizhou | 27/07/2026, 03:30:14 | 27/07/2026, 09:11:52 | No | No | - | - | 21/07/2026, 08:32:02 | - |
| 175.10.74.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Hunan Province Network | 27/07/2026, 03:30:13 | 01/08/2026, 21:03:00 | Yes | No | - | - | 27/07/2026, 08:32:05 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 167.233.35.•••:18789 | - | 🇩🇪 Germany | Yes | false | Leaked | AS24940 | Hetzner Online GmbH | Hetzner | 27/07/2026, 03:30:13 | 02/09/2026, 13:01:29 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 08:32:09 | your-server.de |
| 8.135.26.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 27/07/2026, 03:30:13 | 10/09/2026, 11:58:58 | - | - | - | - | - | - |
| 194.233.227.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS56329 | Gigaclear Limited | Gigaclear | 27/07/2026, 03:30:12 | 27/07/2026, 09:11:50 | No | No | - | - | 21/07/2026, 08:32:14 | - |
| 183.23.132.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 27/07/2026, 03:30:12 | 29/07/2026, 07:48:17 | Yes | No | - | - | 27/07/2026, 08:32:16 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 103.30.146.•••:18789 | - | 🇮🇩 Indonesia | Yes | true | Clean | AS46050 | PT JC Indonesia | Jogjacamp Indonesia | 27/07/2026, 03:30:12 | 10/09/2026, 11:58:48 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 04/09/2026, 04:52:58 | - |
| 18.168.163.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 27/07/2026, 03:30:11 | 02/08/2026, 15:43:38 | No | Yes | APT14, APT40, APT41, Cobalt Group, Gamaredon Group, Kimsuky, Lazarus Group, SharpPanda | CVE-2006-20001, CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-3590, CVE-2022-36760, CVE-2022-37436, CVE-2022-4973, CVE-2023-22622, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51385, CVE-2023-5692, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-54352 | 27/07/2026, 08:32:21 | - |
| 112.118.224.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS4760 | HKT Limited | Netvigator | 27/07/2026, 03:30:11 | 31/07/2026, 01:51:23 | No | No | - | - | 21/07/2026, 08:32:26 | - |
| 45.207.124.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 27/07/2026, 03:30:11 | 10/09/2026, 11:58:49 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 27/07/2026, 08:32:27 | - |
| 220.169.240.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hengyang Node Network | 27/07/2026, 03:30:10 | 30/07/2026, 12:02:43 | No | No | - | - | 21/07/2026, 08:32:30 | - |
| 154.206.172.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 03:30:10 | 11/08/2026, 12:12:58 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 08:32:32 | - |
| 45.207.120.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Leaked | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 27/07/2026, 03:30:09 | 09/09/2026, 13:18:30 | Yes | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 27/07/2026, 08:32:33 | cgmprecast.com, fuhuake.com, abpincorp.com, jekotrade.com, bopcon.com, boyu-group.com, qd-baolian.com, csofam.com, jiabinnu.com, kfstock.com, klmymmyc.com, hnbeixiang.com, xjjingyoga.com, 1haojiyin.com, detongwiremesh.com, dgclh.com, lstcarbon.com, ttstest.com, gaetanasnyc.com, yhjgkeji.com, bierte.com, ttyt360.com, zgkaite.com, turnoutservices.com, zjdddl.com, zjhrbz.com, bain86.com, impresosmonterrey.com, shworldbest.com, dongguansenzi.com |
| 45.207.122.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 27/07/2026, 03:30:09 | 10/09/2026, 11:16:55 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 27/07/2026, 08:32:37 | - |
| 166.88.227.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS134677 | Dromatics Systems Pte Ltd | Netutils | 27/07/2026, 03:30:09 | 28/08/2026, 08:31:32 | Yes | No | - | CVE-2016-20012, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 08:32:38 | ipxo.com, cyberassets.ae |
| 74.91.136.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Newfold Digital | 27/07/2026, 03:30:09 | 27/08/2026, 16:17:41 | Yes | No | - | CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 08:32:41 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 138.0.68.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS264536 | DIRETRIX COMÉRCIO INFORMATICA LTDA. | Diretrix Comercio Informatica | 27/07/2026, 03:28:24 | 27/07/2026, 09:09:57 | No | Yes | APT28, GreyEnergy Group, SandCat | CVE-2017-9765, CVE-2019-7659 | 27/07/2026, 07:04:34 | - |
| 171.213.205.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 27/07/2026, 03:28:23 | 30/07/2026, 17:06:38 | No | No | - | - | 21/07/2026, 07:04:47 | - |
| 123.153.124.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Zhejiang | 27/07/2026, 03:28:22 | 30/07/2026, 20:45:08 | Yes | No | - | - | 27/07/2026, 07:04:48 | chinaunicom.cn |
| 52.67.224.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Brazil | 27/07/2026, 03:28:22 | 27/07/2026, 09:52:39 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 27/07/2026, 07:04:49 | - |
| 1.205.157.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | ChinaNet Guizhou | 27/07/2026, 03:28:21 | 27/07/2026, 09:52:38 | No | No | - | - | 21/07/2026, 07:04:52 | - |
| 175.10.74.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Hunan Province Network | 27/07/2026, 03:28:20 | 01/08/2026, 21:44:09 | Yes | No | - | - | 27/07/2026, 07:04:56 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 183.23.132.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 27/07/2026, 03:28:18 | 29/07/2026, 08:30:04 | Yes | No | - | - | 27/07/2026, 07:05:00 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 18.168.163.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 27/07/2026, 03:28:18 | 02/08/2026, 16:24:30 | No | Yes | APT14, APT40, APT41, Cobalt Group, Gamaredon Group, Kimsuky, Lazarus Group, SharpPanda | CVE-2006-20001, CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-3590, CVE-2022-36760, CVE-2022-37436, CVE-2022-4973, CVE-2023-22622, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51385, CVE-2023-5692, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-54352 | 27/07/2026, 07:05:05 | - |
| 112.118.224.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS4760 | HKT Limited | Netvigator | 27/07/2026, 03:28:17 | 31/07/2026, 02:33:57 | No | No | - | - | 21/07/2026, 07:05:09 | - |
| 52.67.224.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Brazil | 27/07/2026, 03:26:21 | 29/07/2026, 01:20:35 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 27/07/2026, 04:56:17 | - |
| 43.98.175.•••:18789 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud Singapore | 27/07/2026, 03:26:20 | 05/09/2026, 14:13:47 | Yes | No | - | CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 04:56:18 | alibabacloud.com |
| 85.175.97.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS25490 | OJSC "Southern Telecommunications Company" | Rostelecom | 27/07/2026, 03:26:20 | 03/09/2026, 15:13:25 | - | - | - | - | - | - |
| 18.168.163.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 27/07/2026, 03:26:20 | 03/08/2026, 16:53:52 | No | Yes | APT14, APT40, APT41, Cobalt Group, Gamaredon Group, Kimsuky, Lazarus Group, SharpPanda | CVE-2006-20001, CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-3590, CVE-2022-36760, CVE-2022-37436, CVE-2022-4973, CVE-2023-22622, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51385, CVE-2023-5692, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-26465, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-54352 | 27/07/2026, 04:53:55 | - |
| 78.12.243.•••:8023 | - | 🇲🇽 Mexico | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Mexico | 27/07/2026, 02:53:31 | 22/08/2026, 10:14:49 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 27/07/2026, 02:57:51 | - |
| 47.103.198.•••:443 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 27/07/2026, 02:49:37 | 10/09/2026, 12:00:56 | No | No | - | - | 21/07/2026, 11:25:20 | - |
| 82.146.63.•••:443 | - | 🇷🇺 Russia | Yes | false | Clean | AS29182 | JSC IOT | Datacenter | 27/07/2026, 02:49:31 | 01/09/2026, 05:40:24 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 27/07/2026, 10:40:20 | - |
| 171.83.60.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS137266 | CHINATELECOM Hubei province Wuhan 5G network | ChinaNet Hubei | 27/07/2026, 02:49:31 | 02/08/2026, 15:03:16 | Yes | No | - | - | 27/07/2026, 10:40:22 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 154.206.173.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:49:31 | 12/08/2026, 06:20:21 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 10:40:25 | - |
| 106.122.207.•••:8000 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 27/07/2026, 02:49:30 | 27/07/2026, 13:32:24 | Yes | No | - | - | 27/07/2026, 03:32:13 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 154.206.171.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:49:30 | 11/08/2026, 05:47:05 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 03:32:18 | - |
| 134.175.99.•••:443 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 27/07/2026, 02:49:30 | 25/08/2026, 11:11:09 | No | Yes | APT-C-23, APT14, APT28, APT40, APT41, Cobalt Group, Donot Team, Gamaredon Group, Ghostwriter, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, SharpPanda, TA428, TA505, Turla APT Group, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120, CVE-2019-11048, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-13950, CVE-2020-35452, CVE-2020-7064, CVE-2020-7065, CVE-2020-7066, CVE-2020-7067, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2020-7071, CVE-2020-9490, CVE-2021-21702, CVE-2021-21703, CVE-2021-21704, CVE-2021-21705, CVE-2021-21706, CVE-2021-21707, CVE-2021-21708, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31625, CVE-2022-31626, CVE-2022-31628, CVE-2022-31629, CVE-2022-31630, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-37454, CVE-2022-4900, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-4577, CVE-2024-7347 | 27/07/2026, 03:32:21 | - |
| 179.99.16.•••:18789 | - | 🇧🇷 Brazil | Yes | false | Leaked | AS27699 | TELEFÔNICA BRASIL S.A | Telefonica Brasil | 27/07/2026, 02:49:28 | 27/07/2026, 13:32:22 | Yes | No | - | - | 27/07/2026, 03:32:28 | vidav.com.br, vivo.com.br, telefonicacelular.com.br, telefonica.com, telefonica.com.br, ajato.com.br, vivae.com.br, gvt.com.br, vivoplataformadigital.com.br |
| 74.91.136.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Newfold Digital | 27/07/2026, 02:49:27 | 05/08/2026, 16:50:32 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-33257, CVE-2026-33260, CVE-2026-33608, CVE-2026-33609, CVE-2026-33610, CVE-2026-33611, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 03:32:32 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 34.203.71.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 27/07/2026, 02:49:27 | 02/08/2026, 17:54:26 | No | - | - | CVE-2023-44487, CVE-2024-7347 | 27/07/2026, 03:32:35 | - |
| 154.206.172.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:49:27 | 10/08/2026, 21:53:56 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 03:32:37 | - |
| 1.14.133.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 27/07/2026, 02:49:27 | 11/08/2026, 00:45:46 | Yes | Yes | APT37, El-Machete | - | 27/07/2026, 03:32:41 | tencentcloud.com |
| 111.243.29.•••:8081 | - | 🇹🇼 Taiwan | Yes | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 27/07/2026, 02:49:27 | 27/07/2026, 13:32:20 | Yes | No | - | - | 27/07/2026, 03:32:42 | hinet.net |
| 217.216.76.•••:80 | - | 🇩🇪 Germany | Yes | false | Clean | AS141995 | Contabo Asia Private Limited | Contabo | 27/07/2026, 02:49:27 | 27/07/2026, 14:15:41 | - | - | - | - | - | - |
| 171.213.205.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 27/07/2026, 02:49:27 | 30/07/2026, 22:16:29 | No | No | - | - | 21/07/2026, 03:32:52 | - |
| 172.104.62.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS63949 | Akamai Connected Cloud | Linode | 27/07/2026, 02:47:42 | 28/08/2026, 02:52:58 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 02:49:55 | - |
| 171.83.60.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS137266 | CHINATELECOM Hubei province Wuhan 5G network | ChinaNet Hubei | 27/07/2026, 02:47:42 | 02/08/2026, 10:01:39 | Yes | No | - | - | 27/07/2026, 02:50:02 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 154.206.173.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:47:41 | 12/08/2026, 01:13:53 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 02:50:06 | - |
| 106.122.207.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 27/07/2026, 02:47:40 | 27/07/2026, 08:29:10 | Yes | No | - | - | 27/07/2026, 02:50:11 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 154.206.171.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:47:40 | 11/08/2026, 05:44:42 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 02:50:15 | - |
| 134.175.99.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 27/07/2026, 02:47:40 | 25/08/2026, 05:28:30 | No | Yes | APT-C-23, APT14, APT28, APT40, APT41, Cobalt Group, Donot Team, Gamaredon Group, Ghostwriter, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, SharpPanda, TA428, TA505, Turla APT Group, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120, CVE-2019-11048, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-13950, CVE-2020-35452, CVE-2020-7064, CVE-2020-7065, CVE-2020-7066, CVE-2020-7067, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2020-7071, CVE-2020-9490, CVE-2021-21702, CVE-2021-21703, CVE-2021-21704, CVE-2021-21705, CVE-2021-21706, CVE-2021-21707, CVE-2021-21708, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31625, CVE-2022-31626, CVE-2022-31628, CVE-2022-31629, CVE-2022-31630, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-37454, CVE-2022-4900, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-4577, CVE-2024-7347 | 27/07/2026, 02:50:17 | - |
| 179.99.16.•••:18789 | - | 🇧🇷 Brazil | Yes | false | Leaked | AS27699 | TELEFÔNICA BRASIL S.A | Telefonica Brasil | 27/07/2026, 02:47:38 | 27/07/2026, 08:29:07 | Yes | No | - | - | 27/07/2026, 02:50:24 | vidav.com.br, vivo.com.br, telefonicacelular.com.br, telefonica.com, telefonica.com.br, ajato.com.br, vivae.com.br, gvt.com.br, vivoplataformadigital.com.br |
| 154.206.172.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:47:37 | 10/08/2026, 22:34:28 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 02:50:32 | - |
| 138.0.68.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS264536 | DIRETRIX COMÉRCIO INFORMATICA LTDA. | Diretrix Comercio Informatica | 27/07/2026, 02:47:36 | 08/08/2026, 06:21:23 | No | Yes | APT28, GreyEnergy Group, SandCat | CVE-2017-9765, CVE-2019-7659 | 27/07/2026, 02:50:36 | - |
| 111.243.29.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 27/07/2026, 02:47:36 | 28/07/2026, 17:32:51 | Yes | No | - | - | 27/07/2026, 02:50:38 | hinet.net |
| 1.14.133.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 27/07/2026, 02:47:36 | 11/08/2026, 00:43:23 | Yes | Yes | APT37, El-Machete | - | 27/07/2026, 02:50:39 | tencentcloud.com |
| 171.121.167.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shanxi | 27/07/2026, 02:45:51 | 27/07/2026, 08:27:05 | Yes | No | - | - | 27/07/2026, 05:40:33 | chinaunicom.cn |
| 172.104.62.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS63949 | Akamai Connected Cloud | Linode | 27/07/2026, 02:45:50 | 27/07/2026, 10:35:25 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 05:40:35 | - |
| 171.83.60.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS137266 | CHINATELECOM Hubei province Wuhan 5G network | ChinaNet Hubei | 27/07/2026, 02:45:49 | 02/08/2026, 10:42:45 | Yes | No | - | - | 27/07/2026, 05:40:41 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 106.122.207.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 27/07/2026, 02:45:48 | 27/07/2026, 09:10:00 | Yes | No | - | - | 27/07/2026, 05:40:48 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 111.243.29.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 27/07/2026, 02:45:44 | 28/07/2026, 18:13:34 | Yes | No | - | - | 27/07/2026, 07:04:37 | hinet.net |
| 1.14.133.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 27/07/2026, 02:45:44 | 11/08/2026, 02:50:33 | Yes | Yes | APT37, El-Machete | - | 27/07/2026, 07:04:38 | tencentcloud.com |
| 134.175.99.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 27/07/2026, 02:43:49 | 21/08/2026, 04:26:35 | No | Yes | APT-C-23, APT14, APT28, APT40, APT41, Cobalt Group, Donot Team, Gamaredon Group, Ghostwriter, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, SharpPanda, TA428, TA505, Turla APT Group, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120, CVE-2019-11048, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-13950, CVE-2020-35452, CVE-2020-7064, CVE-2020-7065, CVE-2020-7066, CVE-2020-7067, CVE-2020-7068, CVE-2020-7069, CVE-2020-7070, CVE-2020-7071, CVE-2020-9490, CVE-2021-21702, CVE-2021-21703, CVE-2021-21704, CVE-2021-21705, CVE-2021-21706, CVE-2021-21707, CVE-2021-21708, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31625, CVE-2022-31626, CVE-2022-31628, CVE-2022-31629, CVE-2022-31630, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-37454, CVE-2022-4900, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-4577, CVE-2024-7347 | 27/07/2026, 04:56:14 | - |
| 138.0.68.•••:18789 | - | 🇧🇷 Brazil | - | false | Clean | AS264536 | DIRETRIX COMÉRCIO INFORMATICA LTDA. | Diretrix Comercio Informatica | 27/07/2026, 02:43:49 | 29/07/2026, 00:38:05 | No | Yes | APT28, GreyEnergy Group, SandCat | CVE-2017-9765, CVE-2019-7659 | 27/07/2026, 04:56:16 | - |
| 140.143.98.•••:8444 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 27/07/2026, 02:06:51 | 10/09/2026, 12:00:45 | - | - | - | - | - | - |
| 169.58.52.•••:443 | - | 🇩🇪 Germany | Yes | false | Clean | AS51167 | Contabo GmbH | Contabo | 27/07/2026, 02:06:50 | 27/07/2026, 12:49:08 | - | - | - | - | - | - |
| 69.160.173.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS59371 | Dimension Network & Communication Limited | Dimension Network and Communication | 27/07/2026, 02:06:50 | 21/08/2026, 13:34:38 | No | No | - | CVE-2006-20001, CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41741, CVE-2022-41742, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-7347, CVE-2025-23048, CVE-2025-23419, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2026-24072, CVE-2026-28780, CVE-2026-29168, CVE-2026-29169, CVE-2026-33006, CVE-2026-33007, CVE-2026-33523, CVE-2026-33857, CVE-2026-34032, CVE-2026-34059 | 27/07/2026, 11:25:23 | - |
| 154.206.173.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:06:50 | 11/08/2026, 12:15:18 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 11:25:29 | - |
| 154.206.171.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS139880 | OWGELS INTERNATIONAL CO., LIMITED | Starbow Ltd | 27/07/2026, 02:06:50 | 11/08/2026, 14:24:15 | No | No | - | CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419 | 27/07/2026, 11:25:31 | - |
| 118.195.165.•••:20445 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | SeeHuNET | 27/07/2026, 02:06:49 | 09/09/2026, 11:12:07 | Yes | - | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 27/07/2026, 11:25:35 | tencent.com |
| 52.83.230.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS135629 | Ningxia West Cloud Data Technology Co.Ltd. | Ningxia West Cloud Data Technology | 27/07/2026, 02:06:49 | 10/09/2026, 12:00:48 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 27/07/2026, 11:25:36 | - |
| 183.134.156.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 27/07/2026, 02:06:49 | 27/07/2026, 12:49:07 | No | No | - | - | 21/07/2026, 10:39:25 | - |
| 85.137.171.•••:18789 | - | 🇮🇪 Ireland | Yes | false | Clean | AS202448 | https://www.mvps.net | MVPs Ltd | 27/07/2026, 02:06:48 | 10/09/2026, 09:54:00 | - | - | - | - | - | - |
| 106.53.171.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 27/07/2026, 02:06:48 | 30/07/2026, 07:42:26 | Yes | No | - | - | 27/07/2026, 10:39:39 | tencentcloud.com |