🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 651864 Page: 624 / 6519 (100 per page) Showing: 62301-62400 Last Imported: 13/04/2026, 13:41:02
🇨🇳 356,384
🇺🇸 173,592
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 14.216.134.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 05/04/2026, 03:17:07 | 05/04/2026, 09:49:52 | Yes | No | - | - | 05/04/2026, 09:53:33 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 109.199.99.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS51167 | Contabo GmbH | Contabo | 05/04/2026, 03:17:07 | 05/04/2026, 09:49:52 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 09:53:42 | contabo.de, contabo.net |
| 44.248.10.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 05/04/2026, 03:17:07 | 06/04/2026, 01:30:59 | - | - | - | - | - | - |
| 123.121.4.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4808 | China Unicom Beijing Province Network | China Unicom Beijing | 05/04/2026, 03:17:07 | 05/04/2026, 09:04:48 | - | - | - | - | - | - |
| 106.81.39.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4134 | Chinanet | Chinanet Chongqing | 05/04/2026, 03:17:06 | 05/04/2026, 09:49:51 | No | No | - | CVE-2018-19052, CVE-2018-25103, CVE-2019-11072, CVE-2024-3708 | 05/04/2026, 09:53:59 | - |
| 212.64.18.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 05/04/2026, 03:17:06 | 10/04/2026, 17:45:43 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, DarkHotel Group, Donot Team, El-Machete, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt Typhoon | CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-0742, CVE-2016-0746, CVE-2016-0747, CVE-2016-0777, CVE-2016-0778, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1247, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-4450, CVE-2016-6210, CVE-2016-6515, CVE-2017-15906, CVE-2017-20005, CVE-2017-7529, CVE-2018-15473, CVE-2018-15919, CVE-2018-16845, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 05/04/2026, 09:54:01 | - |
| 39.98.76.•••:50001 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:17:06 | 11/04/2026, 10:10:46 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 05/04/2026, 09:54:09 | aliyun.com |
| 111.228.55.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS141679 | China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch | Jingdong Headquarters | 05/04/2026, 03:17:06 | 11/04/2026, 10:55:02 | Yes | No | - | CVE-2023-28531, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-2352, CVE-2024-24768, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-39907, CVE-2024-39911, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-56413, CVE-2025-61984, CVE-2025-61985, CVE-2025-66507, CVE-2025-66508 | 05/04/2026, 09:54:11 | jdl.cn, vackbot.com, vg.com, jdfinance.com, 51buy.com, blackdragon.com, jddj.com, 7fresh.com, jd.com, 360buy.com, chinabank.com.cn, 360buyimg.com, imdada.cn, jdh.com |
| 114.132.171.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 05/04/2026, 03:17:06 | 11/04/2026, 10:54:47 | Yes | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 09:54:12 | tencent.com |
| 34.66.132.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 05/04/2026, 03:17:06 | 12/04/2026, 00:49:54 | No | - | - | CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 09:54:16 | - | |
| 5.196.31.•••:18789 | - | 🇫🇷 France | Yes | true | Leaked | AS16276 | OVH SAS | OVH | 05/04/2026, 03:17:06 | 13/04/2026, 12:54:20 | Yes | Yes | APT-C-23, APT14, APT15, APT17, APT27, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, Chimera APT, CloudSorcerer, Cobalt Group, DRBControl, Daggerfly APT, Donot Team, Earth Berberoka, Equation Group, Evil Eye APT, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Night Dragon, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA428, TA505, The Shadow Brokers, Tropic Trooper, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2011-4718, CVE-2012-1171, CVE-2013-1896, CVE-2013-4248, CVE-2013-4352, CVE-2013-5704, CVE-2013-6420, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0207, CVE-2014-0226, CVE-2014-0231, CVE-2014-0237, CVE-2014-0238, CVE-2014-2497, CVE-2014-3478, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-3515, CVE-2014-3581, CVE-2014-3587, CVE-2014-3597, CVE-2014-3668, CVE-2014-3669, CVE-2014-3670, CVE-2014-4721, CVE-2014-5120, CVE-2014-8109, CVE-2014-8142, CVE-2014-9427, CVE-2014-9652, CVE-2014-9653, CVE-2014-9705, CVE-2014-9767, CVE-2014-9912, CVE-2015-0228, CVE-2015-0231, CVE-2015-0232, CVE-2015-0235, CVE-2015-0273, CVE-2015-2331, CVE-2015-2348, CVE-2015-2783, CVE-2015-2787, CVE-2015-3183, CVE-2015-3185, CVE-2015-3307, CVE-2015-3329, CVE-2015-3330, CVE-2015-3411, CVE-2015-3412, CVE-2015-4021, CVE-2015-4022, CVE-2015-4024, CVE-2015-4025, CVE-2015-4026, CVE-2015-4147, CVE-2015-4148, CVE-2015-4598, CVE-2015-4599, CVE-2015-4600, CVE-2015-4602, CVE-2015-4603, CVE-2015-4604, CVE-2015-4605, CVE-2015-4643, CVE-2015-4644, CVE-2015-5589, CVE-2015-5590, CVE-2015-6832, CVE-2015-6833, CVE-2015-6834, CVE-2015-6835, CVE-2015-6836, CVE-2015-8835, CVE-2015-8838, CVE-2015-8867, CVE-2015-8873, CVE-2015-8876, CVE-2015-8935, CVE-2015-8994, CVE-2016-0736, CVE-2016-2161, CVE-2016-3185, CVE-2016-4975, CVE-2016-5387, CVE-2016-6174, CVE-2016-7478, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-17199, CVE-2018-19395, CVE-2018-19396, CVE-2018-19520, CVE-2018-19935, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2020-11985, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-4900, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31227, CVE-2024-4577, CVE-2024-51741, CVE-2024-5458, CVE-2024-6387, CVE-2025-26465, CVE-2025-27151, CVE-2025-32728, CVE-2025-43960, CVE-2025-46686, CVE-2025-48367, CVE-2025-49844, CVE-2025-61984, CVE-2025-61985 | 07/04/2026, 19:49:04 | ovh.net |
| 115.45.4.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS17962 | ShenZhen Topway Video Communication Co. Ltd | Shenzhen Topway Video Communication | 05/04/2026, 03:17:06 | 05/04/2026, 09:49:49 | - | - | - | - | - | - |
| 219.128.75.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 05/04/2026, 03:17:06 | 11/04/2026, 04:11:34 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 08/04/2026, 07:07:38 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 5.180.81.•••:18789 | - | 🇹🇷 Türkiye | Yes | true | Clean | AS210574 | PH Bilisim Teknolojileri Limited Sirketi | Poyraz Hosting | 05/04/2026, 03:17:05 | 11/04/2026, 10:54:26 | - | - | - | - | - | - |
| 154.9.232.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS979 | NetLab Global | Cogent Communications | 05/04/2026, 03:17:05 | 11/04/2026, 23:20:16 | Yes | Yes | APT15, APT28, APT31, APT37, APT39, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 11/04/2026, 23:25:08 | cogentco.com |
| 69.5.23.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS150436 | Byteplus Pte. Ltd. | Byteplus | 05/04/2026, 03:17:05 | 12/04/2026, 00:49:30 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 11/04/2026, 21:50:28 | - |
| 38.127.47.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS18978 | Enzu Inc | Enzu | 05/04/2026, 03:17:05 | 13/04/2026, 12:54:12 | No | No | - | - | 02/04/2026, 09:21:46 | - |
| 114.117.251.•••:18888 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 05/04/2026, 03:17:05 | 08/04/2026, 13:08:13 | - | - | - | - | - | - |
| 103.117.136.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS401701 | cognetcloud INC | Fojip Technology | 05/04/2026, 03:17:05 | 05/04/2026, 09:49:48 | - | - | - | - | - | - |
| 62.146.236.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS141995 | Contabo Asia Private Limited | Contabo | 05/04/2026, 03:17:04 | 11/04/2026, 10:55:08 | - | - | - | - | - | - |
| 38.60.194.•••:18789 | - | 🇲🇾 Malaysia | Yes | true | Clean | AS138915 | Kaopu Cloud HK Limited | LightNode My | 05/04/2026, 03:17:04 | 11/04/2026, 10:55:46 | No | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 11/04/2026, 10:15:42 | - |
| 159.69.206.•••:443 | - | 🇩🇪 Germany | Yes | true | Leaked | AS24940 | Hetzner Online GmbH | Hetzner Online | 05/04/2026, 03:17:04 | 10/04/2026, 17:46:57 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 07/04/2026, 23:39:07 | hetzner.com |
| 149.118.150.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS31898 | Oracle Corporation | Oracle | 05/04/2026, 03:17:04 | 11/04/2026, 10:55:22 | - | - | - | - | - | - |
| 2a02:4780:5e:87b4::1:3005 | - | 🇲🇾 Malaysia | - | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 05/04/2026, 03:17:04 | 12/04/2026, 00:48:37 | - | - | - | - | - | - |
| 64.23.216.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 05/04/2026, 03:17:03 | 11/04/2026, 07:56:26 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387 | 05/04/2026, 18:52:46 | - |
| 52.7.31.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS14618 | Amazon.com, Inc. | Amazon | 05/04/2026, 03:17:03 | 12/04/2026, 00:49:04 | - | - | - | - | - | - |
| 38.145.216.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS18978 | Enzu Inc | Enzu | 05/04/2026, 03:17:03 | 08/04/2026, 21:22:22 | No | No | - | - | 02/04/2026, 20:12:06 | - |
| 118.195.208.•••:443 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 05/04/2026, 03:17:03 | 05/04/2026, 09:49:47 | - | - | - | - | - | - |
| 114.246.230.•••:16888 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4808 | China Unicom Beijing Province Network | China Unicom Beijing | 05/04/2026, 03:17:03 | 12/04/2026, 00:48:38 | - | - | - | - | - | - |
| 217.142.225.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS31898 | Oracle Corporation | Oracle Sweden | 05/04/2026, 03:17:03 | 10/04/2026, 17:46:25 | Yes | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 10/04/2026, 17:47:34 | healtheintent.com, purewellness.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com |
| 34.209.115.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 05/04/2026, 03:17:03 | 11/04/2026, 10:55:19 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617 | 05/04/2026, 18:53:24 | - |
| 51.21.246.•••:18789 | - | 🇸🇪 Sweden | Yes | true | Clean | AS16509 | Amazon.com, Inc. | A100 Row | 05/04/2026, 03:17:02 | 05/04/2026, 09:49:46 | - | - | - | - | - | - |
| 188.245.92.•••:80 | - | 🇩🇪 Germany | Yes | true | Leaked | AS24940 | Hetzner Online GmbH | Hetzner | 05/04/2026, 03:17:02 | 11/04/2026, 09:25:57 | Yes | Yes | Salt Typhoon | CVE-2016-20012, CVE-2019-6470, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-11187, CVE-2024-1737, CVE-2024-1975, CVE-2024-39894, CVE-2024-4076, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985 | 11/04/2026, 02:41:43 | hetzner.com |
| 47.92.195.•••:50001 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:17:01 | 11/04/2026, 10:54:34 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-11596, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-42252, CVE-2022-45143, CVE-2023-28708, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 10:42:24 | - |
| 42.51.41.•••:50000 | - | 🇨🇳 China mainland | Yes | true | Clean | AS56005 | Zhengzhou Fastidc Technology Co.,Ltd. | Henan Telcom Union Technology | 05/04/2026, 03:17:01 | 05/04/2026, 10:34:55 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 10:42:32 | - |
| 144.31.96.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS216127 | INTERNATIONAL HOSTING COMPANY LIMITED | Nuxt Cloud | 05/04/2026, 03:17:00 | 05/04/2026, 10:34:55 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 11:00:15 | - |
| 106.15.48.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:17:00 | 08/04/2026, 13:08:16 | Yes | No | - | - | 05/04/2026, 11:04:43 | aliyun.com |
| 167.86.98.•••:18789 | - | 🇫🇷 France | Yes | true | Clean | AS51167 | Contabo GmbH | Contabo | 05/04/2026, 03:17:00 | 05/04/2026, 10:34:53 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728 | 05/04/2026, 11:13:25 | - |
| 106.54.245.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Unknown | 05/04/2026, 03:17:00 | 11/04/2026, 05:41:45 | Yes | Yes | APT37, El-Machete | - | 11/04/2026, 01:23:19 | tencent.com |
| 45.94.31.•••:18789 | - | 🇳🇱 Netherlands | Yes | true | Clean | AS210558 | 028f45e8dd4f225cb46a7d8003745a3a7f55d3a0 | 1337 Services | 05/04/2026, 03:17:00 | 11/04/2026, 10:55:34 | No | Yes | APT17, APT28, APT35, APT36, APT37, APT39, APT45, CloudSorcerer, Cobalt Group, Daggerfly APT, Kimsuky, MuddyWater Group, Mustang Panda, Sandworm Team, SideWinder APT, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 08/04/2026, 10:09:12 | - |
| 207.244.241.•••:20027 | - | 🇺🇸 United States | Yes | true | Leaked | AS40021 | Contabo Inc. | Contabo | 05/04/2026, 03:17:00 | 11/04/2026, 21:05:22 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2001-1556, CVE-2002-0061, CVE-2002-0392, CVE-2003-0020, CVE-2003-0083, CVE-2003-0132, CVE-2004-0174, CVE-2004-0942, CVE-2004-2343, CVE-2005-3352, CVE-2006-20001, CVE-2006-5752, CVE-2007-3304, CVE-2007-4465, CVE-2007-6750, CVE-2008-2939, CVE-2009-3555, CVE-2011-0419, CVE-2012-0031, CVE-2012-0053, CVE-2013-1862, CVE-2015-0228, CVE-2016-20012, CVE-2016-8612, CVE-2017-9788, CVE-2017-9798, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-37436, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-40898, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 11/04/2026, 17:59:15 | classyng.com, contaboserver.net, contabo.com, contabo.net |
| 121.37.250.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 05/04/2026, 03:17:00 | 08/04/2026, 01:50:37 | - | - | - | - | - | - |
| 82.156.77.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 05/04/2026, 03:17:00 | 13/04/2026, 12:55:10 | No | Yes | APT37, El-Machete | - | 11/04/2026, 00:06:44 | - |
| 43.160.242.•••:443 | - | 🇸🇬 Singapore | Yes | true | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 05/04/2026, 03:16:59 | 08/04/2026, 13:08:02 | - | - | - | - | - | - |
| 46.224.104.•••:80 | - | 🇩🇪 Germany | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 05/04/2026, 03:16:59 | 12/04/2026, 00:48:33 | No | No | - | - | 02/04/2026, 20:09:13 | - |
| 158.220.92.•••:18789 | - | 🇩🇪 Germany | Yes | true | Leaked | AS51167 | Contabo GmbH | Contabo | 05/04/2026, 03:16:58 | 11/04/2026, 10:54:43 | Yes | Yes | APT15, APT17, APT28, APT31, APT35, APT36, APT37, APT39, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers | CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-35784, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-24989, CVE-2024-24990, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347 | 08/04/2026, 13:14:09 | terratransit.de, contabo.de, contabo.net |
| 3.111.219.•••:19000 | - | 🇮🇳 India | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 05/04/2026, 03:16:58 | 05/04/2026, 10:34:52 | - | - | - | - | - | - |
| 39.98.87.•••:50001 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:16:58 | 08/04/2026, 13:07:31 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 08/04/2026, 10:51:25 | aliyun.com |
| 39.103.94.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:16:58 | 08/04/2026, 13:08:17 | - | - | - | - | - | - |
| 8.134.181.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 05/04/2026, 03:16:58 | 10/04/2026, 17:46:29 | No | Yes | APT1 Comment Crew, APT15, APT17, APT27, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Earth Longzhi, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2011-4969, CVE-2012-6708, CVE-2015-9251, CVE-2019-11358, CVE-2020-7656, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387 | 08/04/2026, 00:23:29 | - |
| 38.127.47.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS18978 | Enzu Inc | Enzu | 05/04/2026, 03:16:58 | 11/04/2026, 08:41:10 | No | - | - | CVE-2016-20012, CVE-2019-6111, CVE-2018-15473, CVE-2019-6109, CVE-2018-15919, CVE-2019-6110, CVE-2020-15778, CVE-2021-36368, CVE-2023-48795, CVE-2023-51385, CVE-2017-15906, CVE-2018-20685, CVE-2023-38408, CVE-2021-41617, CVE-2020-14145 | 11/04/2026, 08:43:43 | - |
| 47.92.215.•••:50001 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:16:58 | 11/04/2026, 10:55:22 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 08/04/2026, 20:09:14 | - |
| 98.126.102.•••:10241 | - | 🇺🇸 United States | Yes | true | Clean | AS4213 | Krypt Technologies | Krypt Technologies | 05/04/2026, 03:16:58 | 12/04/2026, 00:50:15 | Yes | No | - | CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 08/04/2026, 20:08:12 | vpls.net, vpls.com |
| 103.133.56.•••:18789 | - | 🇮🇩 Indonesia | Yes | true | Clean | AS138131 | CV. NATANETWORK SOLUTION | Natanetwork Solution | 05/04/2026, 03:16:58 | 11/04/2026, 10:54:19 | - | - | - | - | - | - |
| 46.62.198.•••:18789 | - | 🇫🇮 Finland | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner Online | 05/04/2026, 03:16:58 | 08/04/2026, 13:07:10 | - | - | - | - | - | - |
| 8.134.97.•••:443 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 05/04/2026, 03:16:58 | 12/04/2026, 00:05:10 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 08/04/2026, 08:39:33 | - |
| 76.13.25.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 05/04/2026, 03:16:58 | 05/04/2026, 10:34:51 | - | - | - | - | - | - |
| 195.26.231.•••:18789 | - | 🇩🇪 Germany | Yes | true | Clean | AS57043 | HOSTKEY B.V. | Hostkey | 05/04/2026, 03:16:58 | 05/04/2026, 10:34:51 | - | - | - | - | - | - |
| 13.112.27.•••:443 | - | 🇯🇵 Japan | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 05/04/2026, 03:16:58 | 05/04/2026, 10:34:51 | - | - | - | - | - | - |
| 43.156.9.•••:443 | - | 🇸🇬 Singapore | Yes | true | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 05/04/2026, 03:16:58 | 11/04/2026, 10:55:48 | Yes | Yes | APT37, El-Machete | CVE-2014-4078, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 08/04/2026, 07:51:31 | tencent.com |
| 135.181.96.•••:18789 | - | 🇫🇮 Finland | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner Online | 05/04/2026, 03:16:57 | 10/04/2026, 17:46:59 | - | - | - | - | - | - |
| 101.32.163.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 05/04/2026, 03:16:57 | 05/04/2026, 10:34:51 | - | - | - | - | - | - |
| 223.105.76.•••:18888 | - | 🇽🇽 XX | Yes | true | Leaked | AS56046 | China Mobile communications corporation | Unknown | 05/04/2026, 03:16:57 | 12/04/2026, 20:56:04 | Yes | No | - | - | 09/04/2026, 13:10:05 | chinamobile.com, chinamobile.cn |
| 8.148.187.•••:443 | - | 🇸🇬 Singapore | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alibaba Cloud | 05/04/2026, 03:16:57 | 11/04/2026, 20:20:21 | No | No | - | CVE-2016-10002, CVE-2016-10003, CVE-2018-1000024, CVE-2018-1000027, CVE-2018-19131, CVE-2018-19132, CVE-2019-12519, CVE-2019-12520, CVE-2019-12521, CVE-2019-12522, CVE-2019-12523, CVE-2019-12524, CVE-2019-12525, CVE-2019-12526, CVE-2019-12528, CVE-2019-12529, CVE-2019-13345, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-18860, CVE-2020-11945, CVE-2020-14058, CVE-2020-15049, CVE-2020-15810, CVE-2020-15811, CVE-2020-24606, CVE-2020-25097, CVE-2020-8449, CVE-2020-8450, CVE-2020-8517, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-46784, CVE-2022-41318, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-5824, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-45802, CVE-2025-54574 | 05/04/2026, 15:08:40 | - |
| 47.116.222.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:16:57 | 11/04/2026, 09:26:02 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 08/04/2026, 12:24:11 | - |
| 43.213.61.•••:18789 | - | 🇹🇼 Taiwan | Yes | true | Leaked | AS16509 | Amazon.com, Inc. | Infrastructure | 05/04/2026, 03:16:57 | 08/04/2026, 00:20:30 | Yes | No | - | - | 07/04/2026, 19:48:49 | cloudfront.com, asuscomm.com, endless.com, amazonpayments.com, amazonaws.com |
| 180.97.254.•••:10056 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4134 | Chinanet | Chinanet Jiangsu Province Network | 05/04/2026, 03:16:57 | 11/04/2026, 21:50:08 | Yes | - | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 09/04/2026, 04:54:59 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 34.143.156.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 05/04/2026, 03:16:56 | 13/04/2026, 12:54:34 | - | - | - | - | - | - | |
| 87.99.134.•••:18003 | Echo (/avatar/main) | 🇺🇸 United States | Yes | true | Leaked | AS213230 | Hetzner Online GmbH | Hetzner | 05/04/2026, 03:16:56 | 10/04/2026, 17:46:27 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 08/04/2026, 01:06:29 | hetzner.com |
| 134.185.90.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS31898 | Oracle Corporation | Oracle | 05/04/2026, 03:16:56 | 11/04/2026, 03:26:31 | - | - | - | - | - | - |
| 213.55.160.•••:7443 | - | 🇨🇭 Switzerland | Yes | true | Clean | AS15796 | Salt Mobile SA | Salt Mobile | 05/04/2026, 03:16:56 | 12/04/2026, 00:48:49 | No | No | - | - | 06/04/2026, 00:08:29 | - |
| 46.224.140.•••:80 | - | 🇩🇪 Germany | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 05/04/2026, 03:16:56 | 11/04/2026, 19:41:21 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 11/04/2026, 17:49:20 | - |
| 184.34.141.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 05/04/2026, 03:16:56 | 12/04/2026, 00:49:00 | - | - | - | - | - | - |
| 164.92.170.•••:443 | - | 🇩🇪 Germany | Yes | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 05/04/2026, 03:16:56 | 13/04/2026, 12:54:48 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-27043, CVE-2023-28531, CVE-2023-36632, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-11168, CVE-2024-3219, CVE-2024-39894, CVE-2024-4032, CVE-2024-5642, CVE-2024-6232, CVE-2024-6387, CVE-2024-6923, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287 | 11/04/2026, 18:12:37 | - |
| 46.137.60.•••:18789 | - | 🇮🇪 Ireland | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon EC2 EU | 05/04/2026, 03:16:11 | 05/04/2026, 03:16:11 | - | - | - | - | - | - |
| 149.104.69.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS138915 | Kaopu Cloud HK Limited | LightNode US | 05/04/2026, 03:16:11 | 05/04/2026, 03:16:11 | - | - | - | - | - | - |
| 104.21.26.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS13335 | Cloudflare, Inc. | Cloudflare | 05/04/2026, 03:16:11 | 05/04/2026, 20:14:05 | - | - | - | - | - | - |
| 157.180.115.•••:18789 | - | 🇫🇮 Finland | Yes | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 05/04/2026, 03:16:11 | 10/04/2026, 10:08:56 | - | - | - | - | - | - |
| 159.65.150.•••:18789 | - | 🇮🇳 India | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 05/04/2026, 03:16:11 | 10/04/2026, 16:13:53 | Yes | Yes | APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 05/04/2026, 23:14:13 | mettlenetworks.com |
| 115.204.166.•••:18789 | - | 🇨🇳 China mainland | - | true | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 05/04/2026, 03:16:11 | 07/04/2026, 22:02:09 | - | - | - | - | - | - |
| 4.223.69.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS8075 | Microsoft Corporation | Microsoft | 05/04/2026, 03:16:10 | 05/04/2026, 03:16:10 | - | - | - | - | - | - |
| 211.162.78.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS17623 | China Unicom Shenzen network | Shenzhen Greatwall Broadband | 05/04/2026, 03:16:10 | 11/04/2026, 04:53:52 | - | - | - | - | - | - |
| 52.226.108.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS8075 | Microsoft Corporation | Microsoft | 05/04/2026, 03:16:10 | 10/04/2026, 11:39:51 | - | - | - | - | - | - |
| 120.198.177.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 05/04/2026, 03:16:10 | 10/04/2026, 17:43:31 | - | - | - | - | - | - |
| 172.67.197.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS13335 | Cloudflare, Inc. | Cloudflare | 05/04/2026, 03:16:10 | 10/04/2026, 00:57:27 | - | - | - | - | - | - |
| 8.211.154.•••:18789 | - | 🇸🇬 Singapore | Yes | true | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud Singapore | 05/04/2026, 03:16:09 | 11/04/2026, 18:21:12 | No | No | - | - | 05/04/2026, 18:24:45 | - |
| 123.60.97.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 05/04/2026, 03:16:09 | 10/04/2026, 16:58:29 | - | - | - | - | - | - |
| 154.217.249.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS400619 | AROSSCLOUD INC. | Fastmos Co Limited | 05/04/2026, 03:16:09 | 11/04/2026, 04:53:52 | - | - | - | - | - | - |
| 130.61.226.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS31898 | Oracle Corporation | Oracle Cloud | 05/04/2026, 03:16:08 | 11/04/2026, 07:08:45 | Yes | Yes | Salt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 11/04/2026, 07:13:01 | healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oracleemaildelivery.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 46.224.168.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 05/04/2026, 03:16:08 | 08/04/2026, 13:05:53 | - | - | - | - | - | - |
| 47.97.1.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 05/04/2026, 03:16:08 | 11/04/2026, 22:32:34 | - | - | - | - | - | - |
| 60.176.195.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 05/04/2026, 03:16:08 | 05/04/2026, 03:16:08 | - | - | - | - | - | - |
| 183.156.164.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 05/04/2026, 03:16:08 | 05/04/2026, 03:16:08 | - | - | - | - | - | - |
| 4.151.200.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS8075 | Microsoft Corporation | Microsoft | 05/04/2026, 03:16:08 | 05/04/2026, 03:16:08 | - | - | - | - | - | - |
| 3.76.103.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 05/04/2026, 03:16:08 | 11/04/2026, 00:41:10 | No | - | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368 | 07/04/2026, 22:06:52 | - |
| 57.131.49.•••:18789 | - | 🇮🇹 Italy | Yes | true | Clean | AS16276 | OVH SAS | VPS EU South Mil 1 | 05/04/2026, 03:16:07 | 11/04/2026, 10:51:41 | - | - | - | - | - | - |
| 85.17.244.•••:18789 | - | 🇳🇱 Netherlands | - | true | Clean | AS60781 | Netherlands | LeaseWeb | 05/04/2026, 03:16:07 | 05/04/2026, 03:16:07 | - | - | - | - | - | - |
| 206.189.102.•••:18789 | - | 🇳🇱 Netherlands | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 05/04/2026, 03:16:07 | 12/04/2026, 00:46:37 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 08/04/2026, 02:36:17 | - |
| 49.232.158.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 05/04/2026, 03:16:07 | 10/04/2026, 17:43:25 | - | - | - | - | - | - |
| 117.72.217.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS141679 | China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch | JD.com | 05/04/2026, 03:16:07 | 10/04/2026, 17:44:00 | - | - | - | - | - | - |