🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 816988 Page: 6961 / 8170 (100 per page) Showing: 696001-696100 Last Imported: 30/04/2026, 13:26:03
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 6961 of 8170
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
147.182.253.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5209/02/2026, 00:04:54 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9517, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:35-
124.156.194.•••:18789 - 🇮🇳 India - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:50:5211/04/2026, 09:23:10 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:36tencent.com, chinaunicom.cn
143.198.192.•••:18789 - 🇸🇬 Singapore - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5210/04/2026, 00:58:17 No Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-6531, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:37-
43.153.152.•••:18789 Assistant 🇯🇵 Japan Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:50:5211/02/2026, 16:47:42 Yes Yes APT15, APT17, APT28, APT31, APT36, APT37, APT39, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:38tencent.com
14.103.216.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology07/02/2026, 19:50:5228/02/2026, 10:42:04 Yes No -CVE-2016-0742, CVE-2016-0746, CVE-2016-0747, CVE-2016-1247, CVE-2016-4450, CVE-2017-20005, CVE-2017-7529, CVE-2018-16845, CVE-2019-20372, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2024-734707/02/2026, 20:12:39bytedance.com
136.110.122.•••:18789 蛋蛋 (🥚) 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle07/02/2026, 19:50:5214/02/2026, 12:26:58 - - --07/02/2026, 20:12:40-
129.212.189.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5201/03/2026, 05:16:12 No No -CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:43-
138.197.206.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5217/04/2026, 18:07:36 - - --07/02/2026, 20:12:44-
91.98.18.•••:18789 Assistant 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner07/02/2026, 19:50:5216/02/2026, 21:39:29 No No -CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341907/02/2026, 20:12:45-
164.90.157.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5209/02/2026, 13:53:34 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161707/02/2026, 20:12:46dlsil.com
222.129.34.•••:18789 - 🇨🇳 China mainland - false Leaked AS4808China Unicom Beijing Province NetworkChina Unicom Beijing07/02/2026, 19:50:5222/03/2026, 08:34:23 Yes Yes APT14, APT28, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-13950, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-3181307/02/2026, 20:12:47chinaunicom.cn
38.76.205.•••:18789 小小懿 (🤖) 🇺🇸 United States Yes false Clean AS401701cognetcloud INCFOJ IP Technology07/02/2026, 19:50:5209/02/2026, 00:04:54 - - --07/02/2026, 20:12:48-
43.153.149.•••:18789 - 🇯🇵 Japan - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:50:5213/03/2026, 06:02:49 Yes Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2024-39894, CVE-2024-638707/02/2026, 20:12:49tencent.com
167.114.115.•••:18789 - 🇫🇷 France Yes false Leaked AS16276OVH SASOVH Hosting07/02/2026, 19:50:5206/03/2026, 14:48:47 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2019-3016, CVE-2019-3819, CVE-2019-3887, CVE-2020-14145, CVE-2020-27815, CVE-2021-20194, CVE-2021-28041, CVE-2021-3564, CVE-2021-36368, CVE-2021-41617, CVE-2021-47472, CVE-2021-47538, CVE-2022-38096, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-52575, CVE-2023-52652, CVE-2023-52654, CVE-2023-52843, CVE-2024-26850, CVE-2024-27418, CVE-2024-27420, CVE-2024-6387, CVE-2025-24813, CVE-2025-26465, CVE-2025-31650, CVE-2025-31651, CVE-2025-32728, CVE-2025-46701, CVE-2025-48988, CVE-2025-48989, CVE-2025-49124, CVE-2025-49125, CVE-2025-52434, CVE-2025-52520, CVE-2025-53506, CVE-2025-55668, CVE-2025-55752, CVE-2025-55754, CVE-2025-61795, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:51ovh.ca, ovh.net
114.132.42.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud07/02/2026, 19:50:5206/03/2026, 23:01:57 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272807/02/2026, 20:12:52tencent.com
68.183.196.•••:18789 - 🇨🇦 Canada - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5212/02/2026, 12:36:23 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Salt Typhoon, Sandworm Team, The Shadow BrokersCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:53-
43.156.36.•••:18789 爪爪 (Zhua Zhua) (🐾) 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:50:5210/02/2026, 00:50:21 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2014-4078, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138507/02/2026, 20:12:54tencent.com
46.224.60.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner07/02/2026, 19:50:5126/02/2026, 17:06:23 No No --07/02/2026, 20:12:55-
115.190.18.•••:18789 小麟 (🤖) 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology07/02/2026, 19:50:5116/02/2026, 07:38:17 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:56-
101.42.14.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:50:5106/03/2026, 15:33:55 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138507/02/2026, 20:12:58tencent.com, optage.co.jp
34.158.16.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle07/02/2026, 19:50:5111/04/2026, 08:38:36 No No -CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:59-
159.65.101.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5120/03/2026, 15:47:40 No No -CVE-2016-20012, CVE-2020-14145, CVE-2021-36368, CVE-2021-4161707/02/2026, 20:13:00-
164.92.192.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5109/02/2026, 08:48:35 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:01-
129.159.143.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle07/02/2026, 19:50:5116/03/2026, 15:05:18 Yes Yes goziCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:02healtheintent.com, purewellness.com, cerner.ae, retek.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
180.76.105.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:50:5105/03/2026, 00:44:21 Yes Yes APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161707/02/2026, 20:13:03tfn.net.tw, baidu.com
120.48.130.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:50:5106/03/2026, 23:02:11 - - --07/02/2026, 20:13:04-
142.171.42.•••:18789 - 🇺🇸 United States Yes false Leaked AS35916MULTACOM CORPORATIONMultacom Corporation07/02/2026, 19:50:5117/04/2026, 10:03:28 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:12:41mytelus.com, telusassyst.com, telus.net, multacom.com, telusdigital.com, telusquebec.com, radiant.net, telus.ca, koodomobile.com, storyhive.com, telus.com, telusplanet.net, telus.digital, telus.org, telushealth.co
118.196.5.•••:18789 PKM (Personal Knowledge Management) 🇨🇳 China mainland Yes false Leaked AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology07/02/2026, 19:50:5116/04/2026, 08:45:00 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:06bytedance.com
180.76.169.•••:18789 贾维斯 (Jarvis) (🤖) 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:50:5103/03/2026, 13:12:54 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-07/02/2026, 20:13:07tfn.net.tw, baidu.com
137.184.42.•••:18789 - 🇺🇸 United States - false Leaked AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5109/02/2026, 00:48:18 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:08cprapid.com
134.175.100.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:50:5118/03/2026, 11:15:49 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-11233, CVE-2024-11234, CVE-2024-11235, CVE-2024-11236, CVE-2024-43044, CVE-2024-43045, CVE-2024-47803, CVE-2024-47804, CVE-2024-8929, CVE-2024-8932, CVE-2025-1217, CVE-2025-1219, CVE-2025-1220, CVE-2025-1734, CVE-2025-1735, CVE-2025-1736, CVE-2025-1861, CVE-2025-27622, CVE-2025-27623, CVE-2025-27624, CVE-2025-27625, CVE-2025-31720, CVE-2025-31721, CVE-2025-649107/02/2026, 20:13:09-
157.230.55.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5109/02/2026, 08:48:35 No Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2024-39894, CVE-2024-46981, CVE-2024-51741, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 20:13:10-
165.245.137.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5120/02/2026, 13:16:04 - - --07/02/2026, 20:13:11-
104.248.194.•••:18789 - 🇳🇱 Netherlands - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5109/02/2026, 00:48:18 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:13-
175.154.197.•••:18789 小武 (武功的武) (😎) 🇨🇳 China mainland Yes false Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom Sichuan07/02/2026, 19:50:5109/02/2026, 00:48:18 Yes No --07/02/2026, 20:13:14ub.ac.id, chinaunicom.cn
101.43.240.•••:18789 Momo (🐾) 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:50:5116/04/2026, 01:20:41 Yes Yes APT37, El-Machete-07/02/2026, 20:13:15tencent.com, optage.co.jp
157.245.177.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5109/02/2026, 17:26:25 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161707/02/2026, 20:13:16-
15.204.154.•••:18789 - 🇺🇸 United States - false Leaked AS16276OVH SASOVH Dedicated07/02/2026, 19:50:5113/02/2026, 07:00:46 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6110, CVE-2020-1414507/02/2026, 20:13:17ovhcloud.com
137.184.229.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5109/02/2026, 00:48:18 No Yes APT14, APT28, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 20:13:18-
5.189.140.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo07/02/2026, 19:50:5116/04/2026, 11:27:00 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt TyphoonCVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:19contaboserver.net, contabo.de, contabo.net
71.208.36.•••:18789 - 🇺🇸 United States - false Leaked AS209CenturyLink Communications, LLCCenturyLink07/02/2026, 19:50:5114/02/2026, 19:42:07 Yes No -CVE-2023-27043, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-12254, CVE-2024-12718, CVE-2024-3219, CVE-2024-4032, CVE-2024-6232, CVE-2024-6387, CVE-2024-6923, CVE-2024-7347, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-12084, CVE-2025-13836, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:21ctl.io, digisys.net, globalcrossing.com, centurylinksavings.com, centurylink.com.co, lumen.com, centurytel.net, centurylinkfield.com, centurylink.cl, centurylink.com, centurylink.net, elasticbox.com, embarqmail.com, centurylinkquote.com, centurylink.tech, getcenturylink.com, sealconsult.com, centurylinktechnology.com, streamroot.io, orchestrate.io, sealconsult.net, centurylink.com.pe
180.76.190.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:50:5116/03/2026, 18:04:52 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-07/02/2026, 20:13:22tfn.net.tw, baidu.com
172.104.42.•••:18789 - 🇸🇬 Singapore - false Leaked AS63949Akamai Connected CloudLinode07/02/2026, 19:50:5116/02/2026, 17:57:12 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:23akasripcn.net, edgekey-staging.net, akamaitechnologies.com, akamai.ae, edgekey.net, simplicita.com, inscname.net, edgesuite.net, akamaitech.net, cotendo.com, bubblewrapp.com, chameleonx.com, akamai-staging.net, cformanalytics.com, janrainbackplane.com, verivue.com, akamaized-staging.net, nominum.com, akadns.net, akamaized.net, akamai.net, akamaistream.net, d4p.net, akamaihd.net, instart.com, akamai.dk, edgefcs.net, linodeusercontent.com, akamaihd-staging.net, cotssl.net, akafms.net, akami.com, lognormal.net, octoshape.net, akamai-access.com, instartlogic.com, limelightnetworks.com, akamaiapis.net
46.225.97.•••:18789 Klepec (🐾) 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner07/02/2026, 19:50:5120/02/2026, 22:12:28 - - --07/02/2026, 20:13:24-
152.136.236.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:50:5112/02/2026, 01:37:40 No Yes APT37, El-Machete-07/02/2026, 20:13:25-
172.67.213.•••:18789 - 🇺🇸 United States - false Leaked AS13335Cloudflare, Inc.Cloudflare07/02/2026, 19:50:5116/03/2026, 18:05:31 Yes No --07/02/2026, 20:13:26fdfenergy.com, rjstpierreandsons.com, apie-therapeutics.com, ccccnbtx.org, executivehealthsolutions.com, mozen.io, hzfeidi.com, fricksfashion.com, globaltravelcollection.com, quatangthanhdong.com, oceanexpressag.net, executivehealthsolutions.com.au, technologybuyersguide.com, cityfied.net, arlingtonfoodies.com, rmscva.com, ehm.com.au, incellart.com, anlink.net, hmcxjc.com, shsinotech.com, vbankph.com, travelleaders.com, guanweirecycling.com, viralthread.com, ekakitchen.com, wisehousetech.com, 44tele-infra.com, cloudflare.net, midwestohio.com, fletchingschool.org, co.com, poise.com, loitoan.com, hospicechesapeake.org, jxlingtong.com, nexioncanada.com, vacation.com, calverthospice.org, pincushionlv.com, dairyasia.org, baselinewoods.com, newserverlife.com, montgomery-illinois.org, alghanitex.com, qzz.io, alpinborovets.com, galaxy-travel.com, brownsprinting.com, c4group.org, mountairymd.org, cloudhq-mkt6.net, forwardwirecloth.net, intercontinentalnc.com, andrewharper.com, eurotissus.com, gseschooldallas.org, mendotahospital.org, mayhoangtung.com, nifftseat.com, hospiceofcharlescounty.org, gialoilongan.com, refee.net, xjzljt.net, sxgas.net, bistrotmakan.com, advancentx.org, tsxentertainment.com, kaopiz.com, pathfinderapi.com, tlcorporate.com, vrgkhaihoan.com, american-testing.com, sanhoos.com, bamko.net, ausarabbusinesscouncil.com, hansecontrol.com, it.com, voyagevietnammoto.com, escapevacations.com, eatnuleaf.com, irrigationsystems4u.com, dachcafe.com, finkens.com, xeraliving.fi, china-one.net, allamtravel.com, kingdisplay.net, eu.org, bomara.com, westwoodhistoricalsociety.com, voicecom.ec, com.de, guardianeldercare.com, mbssecure.com, massengale.works, adw.org, villageofpittsford.org, buffalomanufacturingworks.com, ranscustombuilders.com, 4sana.com, sconesinthecity.com, lifelinechiropractic.org, oracle-ag.ch, zhaowoo.net, intheknowexperiences.com, themobilefactory.org, elpaltd.com, bestwanhui.com, louieschickenfingers.com, tta.com, gummyberryjuicesa.co.za, tzell.com, thomashogan.com, airtkt.com, yes-01.com, denverkickersoktoberfest.com, nextekpower.com, workers.dev, igrovyeavtomaty-pro.com, oleytibbiurunler.com, travelleadersnetwork.com, tigerexpressfuel.com, maymacanphu.com, 360-xj.com, jucyvietnam.com, playerssportsbarmadison.com, xjwfcj.com, co.zm, smartdoorsllc.com, imperial-travel.com, gabtechglobal.com, thinx.com, zsnet.net, caez-wv.org, altour.com, china114.net, airfuture.com, vinagreenplus.com, hy189.net, erostours.com, linzess.com, kcprofessional.com, xjhongshun.com, kantanmtblog.com, kimberlyclark.com, nexion.com, geochem.org, lincolnwaymusic.org, equinaceaprodutosnaturais.com, dmln.net, crucon.com
45.130.104.•••:18789 - 🇫🇷 France - false Leaked AS51167Contabo GmbHContabo07/02/2026, 19:50:5102/03/2026, 19:06:15 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 20:13:28contabo.de, contabo.net
47.253.128.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud US07/02/2026, 19:50:5109/02/2026, 00:48:17 No Yes APT17, APT29, APT34, APT35, APT36, APT40, APT41, APT45, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Gaza Cybergang, Hafnium Group, Kimsuky, MuddyWater Group, Patchwork, Sandworm Team, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:29-
159.203.94.•••:18789 Assistant 🇺🇸 United States Yes false Leaked AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:50:5109/02/2026, 00:48:17 Yes Yes APT-C-23, APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Turla APT Group, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11993, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-33193, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:30lucidlink.com
43.134.94.•••:18789 Assistant 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay07/02/2026, 19:50:5103/03/2026, 16:11:06 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:31tencent.com
118.195.162.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedSeeHuNET07/02/2026, 19:50:5104/03/2026, 12:44:00 Yes Yes APT37, El-Machete-07/02/2026, 20:13:32tencent.com
43.167.217.•••:18789 Assistant 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:50:5117/04/2026, 07:04:20 Yes No -CVE-2016-20012, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:33tencent.com
35.187.150.•••:18789 - 🇺🇸 United States - false Clean AS396982Google LLCGoogle07/02/2026, 19:50:5109/02/2026, 01:32:00 No Yes APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-23017, CVE-2021-3618, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:13:34-
46.224.60.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner07/02/2026, 19:48:3626/02/2026, 16:19:26 No No --07/02/2026, 20:08:52-
115.190.18.•••:18789 小麟 (🤖) 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology07/02/2026, 19:48:3616/02/2026, 07:36:02 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:08:53-
101.42.14.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:48:3606/03/2026, 15:31:33 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138507/02/2026, 20:08:54tencent.com, optage.co.jp
34.158.16.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle07/02/2026, 19:48:3611/04/2026, 07:51:10 No No -CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:08:55-
159.65.101.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3620/03/2026, 15:45:18 No No -CVE-2016-20012, CVE-2020-14145, CVE-2021-36368, CVE-2021-4161707/02/2026, 20:08:56-
13.61.219.•••:18789 Lysring (💫) 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon Data Services Sweden07/02/2026, 19:48:3602/03/2026, 08:40:29 - - --07/02/2026, 20:08:57-
164.92.192.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3609/02/2026, 08:46:19 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:08:59-
129.159.143.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle07/02/2026, 19:48:3616/03/2026, 15:47:55 Yes Yes goziCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:09:00healtheintent.com, purewellness.com, cerner.ae, retek.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
180.76.105.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:48:3605/03/2026, 00:42:01 Yes Yes APT17, APT28, APT35, APT37, APT39, Cobalt Group, DragonFly, El-Machete, Gozi, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161707/02/2026, 20:09:01tfn.net.tw, baidu.com
120.48.130.•••:18789 Assistant 🇺🇸 United States Yes false Clean AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:48:3606/03/2026, 23:44:57 - - --07/02/2026, 20:09:02-
118.196.5.•••:18789 PKM (Personal Knowledge Management) 🇨🇳 China mainland Yes false Leaked AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology07/02/2026, 19:48:3616/04/2026, 08:42:40 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:09:03bytedance.com
180.76.169.•••:18789 贾维斯 (Jarvis) (🤖) 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:48:3603/03/2026, 13:10:39 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-07/02/2026, 20:09:05tfn.net.tw, baidu.com
137.184.42.•••:18789 - 🇺🇸 United States - false Leaked AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3609/02/2026, 00:46:03 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:09:06cprapid.com
134.175.100.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:48:3618/03/2026, 11:13:28 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-11233, CVE-2024-11234, CVE-2024-11235, CVE-2024-11236, CVE-2024-43044, CVE-2024-43045, CVE-2024-47803, CVE-2024-47804, CVE-2024-8929, CVE-2024-8932, CVE-2025-1217, CVE-2025-1219, CVE-2025-1220, CVE-2025-1734, CVE-2025-1735, CVE-2025-1736, CVE-2025-1861, CVE-2025-27622, CVE-2025-27623, CVE-2025-27624, CVE-2025-27625, CVE-2025-31720, CVE-2025-31721, CVE-2025-649107/02/2026, 20:09:07-
157.230.55.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3609/02/2026, 08:46:19 No Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2024-39894, CVE-2024-46981, CVE-2024-51741, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 20:09:08-
165.245.137.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3620/02/2026, 13:13:46 - - --07/02/2026, 20:09:09-
104.248.194.•••:18789 - 🇳🇱 Netherlands - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3609/02/2026, 00:46:03 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:09:10-
175.154.197.•••:18789 小武 (武功的武) (😎) 🇨🇳 China mainland Yes false Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom Sichuan07/02/2026, 19:48:3609/02/2026, 00:46:03 Yes No --07/02/2026, 20:09:11ub.ac.id, chinaunicom.cn
101.43.240.•••:18789 Momo (🐾) 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:48:3616/04/2026, 01:18:20 Yes Yes APT37, El-Machete-07/02/2026, 20:09:13tencent.com, optage.co.jp
157.245.177.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3609/02/2026, 17:24:07 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161707/02/2026, 20:09:14-
15.204.154.•••:18789 - 🇺🇸 United States - false Leaked AS16276OVH SASOVH Dedicated07/02/2026, 19:48:3613/02/2026, 06:58:28 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6110, CVE-2020-1414507/02/2026, 20:09:15ovhcloud.com
137.184.229.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:48:3609/02/2026, 00:46:03 No Yes APT14, APT28, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 20:09:16-
5.189.140.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo07/02/2026, 19:48:3616/04/2026, 12:10:31 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt TyphoonCVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:09:17contaboserver.net, contabo.de, contabo.net
71.208.36.•••:18789 - 🇺🇸 United States - false Leaked AS209CenturyLink Communications, LLCCenturyLink07/02/2026, 19:48:3614/02/2026, 19:39:51 Yes No -CVE-2023-27043, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-0397, CVE-2024-12254, CVE-2024-12718, CVE-2024-3219, CVE-2024-4032, CVE-2024-6232, CVE-2024-6387, CVE-2024-6923, CVE-2024-7347, CVE-2024-7592, CVE-2024-8088, CVE-2024-9287, CVE-2025-12084, CVE-2025-13836, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:09:18ctl.io, digisys.net, globalcrossing.com, centurylinksavings.com, centurylink.com.co, lumen.com, centurytel.net, centurylinkfield.com, centurylink.cl, centurylink.com, centurylink.net, elasticbox.com, embarqmail.com, centurylinkquote.com, centurylink.tech, getcenturylink.com, sealconsult.com, centurylinktechnology.com, streamroot.io, orchestrate.io, sealconsult.net, centurylink.com.pe
180.76.190.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu07/02/2026, 19:48:3616/03/2026, 18:01:28 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, Packrat-07/02/2026, 20:09:20tfn.net.tw, baidu.com
172.104.42.•••:18789 - 🇸🇬 Singapore - false Leaked AS63949Akamai Connected CloudLinode07/02/2026, 19:48:3616/02/2026, 17:54:53 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 20:09:21akasripcn.net, edgekey-staging.net, akamaitechnologies.com, akamai.ae, edgekey.net, simplicita.com, inscname.net, edgesuite.net, akamaitech.net, cotendo.com, bubblewrapp.com, chameleonx.com, akamai-staging.net, cformanalytics.com, janrainbackplane.com, verivue.com, akamaized-staging.net, nominum.com, akadns.net, akamaized.net, akamai.net, akamaistream.net, d4p.net, akamaihd.net, instart.com, akamai.dk, edgefcs.net, linodeusercontent.com, akamaihd-staging.net, cotssl.net, akafms.net, akami.com, lognormal.net, octoshape.net, akamai-access.com, instartlogic.com, limelightnetworks.com, akamaiapis.net
46.225.97.•••:18789 Klepec (🐾) 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner07/02/2026, 19:48:3620/02/2026, 22:10:12 - - --07/02/2026, 20:09:22-
152.136.236.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing07/02/2026, 19:48:3612/02/2026, 01:35:22 No Yes APT37, El-Machete-07/02/2026, 20:09:23-
104.21.67.•••:18789 - 🇺🇸 United States - false Leaked AS13335Cloudflare, Inc.Cloudflare07/02/2026, 19:48:3609/02/2026, 00:46:02 Yes No --07/02/2026, 20:09:24fdfenergy.com, rjstpierreandsons.com, apie-therapeutics.com, ccccnbtx.org, executivehealthsolutions.com, mozen.io, hzfeidi.com, fricksfashion.com, globaltravelcollection.com, quatangthanhdong.com, oceanexpressag.net, executivehealthsolutions.com.au, technologybuyersguide.com, cityfied.net, arlingtonfoodies.com, rmscva.com, ehm.com.au, incellart.com, anlink.net, hmcxjc.com, shsinotech.com, vbankph.com, travelleaders.com, guanweirecycling.com, viralthread.com, ekakitchen.com, wisehousetech.com, 44tele-infra.com, cloudflare.net, midwestohio.com, fletchingschool.org, co.com, poise.com, loitoan.com, hospicechesapeake.org, jxlingtong.com, nexioncanada.com, vacation.com, calverthospice.org, pincushionlv.com, dairyasia.org, baselinewoods.com, newserverlife.com, montgomery-illinois.org, alghanitex.com, qzz.io, alpinborovets.com, galaxy-travel.com, brownsprinting.com, c4group.org, mountairymd.org, cloudhq-mkt6.net, forwardwirecloth.net, intercontinentalnc.com, andrewharper.com, eurotissus.com, gseschooldallas.org, mendotahospital.org, mayhoangtung.com, nifftseat.com, hospiceofcharlescounty.org, gialoilongan.com, refee.net, xjzljt.net, sxgas.net, bistrotmakan.com, advancentx.org, tsxentertainment.com, kaopiz.com, pathfinderapi.com, tlcorporate.com, vrgkhaihoan.com, american-testing.com, sanhoos.com, bamko.net, ausarabbusinesscouncil.com, hansecontrol.com, it.com, voyagevietnammoto.com, escapevacations.com, eatnuleaf.com, irrigationsystems4u.com, dachcafe.com, finkens.com, xeraliving.fi, china-one.net, allamtravel.com, kingdisplay.net, eu.org, bomara.com, westwoodhistoricalsociety.com, voicecom.ec, com.de, guardianeldercare.com, mbssecure.com, massengale.works, adw.org, villageofpittsford.org, buffalomanufacturingworks.com, ranscustombuilders.com, 4sana.com, sconesinthecity.com, lifelinechiropractic.org, oracle-ag.ch, zhaowoo.net, intheknowexperiences.com, themobilefactory.org, elpaltd.com, bestwanhui.com, louieschickenfingers.com, tta.com, gummyberryjuicesa.co.za, tzell.com, thomashogan.com, airtkt.com, yes-01.com, denverkickersoktoberfest.com, nextekpower.com, workers.dev, igrovyeavtomaty-pro.com, oleytibbiurunler.com, travelleadersnetwork.com, tigerexpressfuel.com, maymacanphu.com, 360-xj.com, jucyvietnam.com, playerssportsbarmadison.com, xjwfcj.com, co.zm, smartdoorsllc.com, imperial-travel.com, gabtechglobal.com, thinx.com, zsnet.net, caez-wv.org, altour.com, china114.net, airfuture.com, vinagreenplus.com, hy189.net, erostours.com, linzess.com, kcprofessional.com, xjhongshun.com, kantanmtblog.com, kimberlyclark.com, nexion.com, geochem.org, lincolnwaymusic.org, equinaceaprodutosnaturais.com, dmln.net, crucon.com
45.130.104.•••:18789 - 🇫🇷 France - false Leaked AS51167Contabo GmbHContabo07/02/2026, 19:48:3602/03/2026, 19:03:56 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 20:09:25contabo.de, contabo.net
43.162.97.•••:18789 - 🇸🇬 Singapore - false Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:46:2311/02/2026, 14:29:32 - - --07/02/2026, 19:47:52-
157.230.55.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:41:5008/02/2026, 15:53:22 No Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2024-39894, CVE-2024-46981, CVE-2024-51741, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272807/02/2026, 19:43:21-
47.102.102.•••:18789 Assistant 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft07/02/2026, 19:41:5018/04/2026, 00:35:46 No No --07/02/2026, 19:43:22-
142.171.42.•••:18789 - 🇺🇸 United States Yes false Leaked AS35916MULTACOM CORPORATIONMultacom Corporation07/02/2026, 19:40:1717/04/2026, 10:00:01 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 19:43:20mytelus.com, telusassyst.com, telus.net, multacom.com, telusdigital.com, telusquebec.com, radiant.net, telus.ca, koodomobile.com, storyhive.com, telus.com, telusplanet.net, telus.digital, telus.org, telushealth.co
8.215.92.•••:18789 Assistant 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore07/02/2026, 19:38:0923/02/2026, 10:37:15 No - --07/02/2026, 19:39:49-
27.79.228.•••:18789 - 🇻🇳 Vietnam - false Leaked AS7552Viettel GroupViettel07/02/2026, 19:38:0908/02/2026, 16:20:27 Yes No --07/02/2026, 19:39:50viettel.com.vn, chinaunicom.cn
159.65.101.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:35:4424/03/2026, 15:05:05 No No -CVE-2016-20012, CVE-2020-14145, CVE-2021-36368, CVE-2021-4161707/02/2026, 19:37:14-
164.92.192.•••:18789 - 🇩🇪 Germany - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:35:4408/02/2026, 16:20:27 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-1322, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 19:37:15-
47.84.194.•••:18789 Assistant 🇨🇳 China mainland Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud07/02/2026, 19:31:1608/02/2026, 16:20:27 Yes No --07/02/2026, 19:32:46hichina.com, alibaba-inc.com
68.183.196.•••:18789 - 🇨🇦 Canada - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:31:1612/02/2026, 13:15:49 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Salt Typhoon, Sandworm Team, The Shadow BrokersCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 19:32:47-
43.153.149.•••:18789 - 🇯🇵 Japan - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:30:4213/03/2026, 06:00:29 Yes Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2024-39894, CVE-2024-638707/02/2026, 19:30:44tencent.com
167.114.115.•••:18789 - 🇫🇷 France Yes false Leaked AS16276OVH SASOVH Hosting07/02/2026, 19:30:4206/03/2026, 14:46:29 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2019-3016, CVE-2019-3819, CVE-2019-3887, CVE-2020-14145, CVE-2020-27815, CVE-2021-20194, CVE-2021-28041, CVE-2021-3564, CVE-2021-36368, CVE-2021-41617, CVE-2021-47472, CVE-2021-47538, CVE-2022-38096, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-52575, CVE-2023-52652, CVE-2023-52654, CVE-2023-52843, CVE-2024-26850, CVE-2024-27418, CVE-2024-27420, CVE-2024-6387, CVE-2025-24813, CVE-2025-26465, CVE-2025-31650, CVE-2025-31651, CVE-2025-32728, CVE-2025-46701, CVE-2025-48988, CVE-2025-48989, CVE-2025-49124, CVE-2025-49125, CVE-2025-52434, CVE-2025-52520, CVE-2025-53506, CVE-2025-55668, CVE-2025-55752, CVE-2025-55754, CVE-2025-61795, CVE-2025-61984, CVE-2025-6198507/02/2026, 19:30:45ovh.ca, ovh.net
114.132.42.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud07/02/2026, 19:30:4206/03/2026, 23:44:43 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272807/02/2026, 19:30:46tencent.com
68.183.196.•••:18789 - 🇨🇦 Canada - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:30:4212/02/2026, 12:34:07 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Salt Typhoon, Sandworm Team, The Shadow BrokersCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 19:30:47-
43.156.36.•••:18789 爪爪 (Zhua Zhua) (🐾) 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd07/02/2026, 19:30:4210/02/2026, 00:48:03 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2014-4078, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138507/02/2026, 19:30:49tencent.com
134.199.197.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean07/02/2026, 19:28:2911/02/2026, 10:50:18 No No -CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198507/02/2026, 19:30:05-
8.129.97.•••:18789 Assistant 🇸🇬 Singapore Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud07/02/2026, 19:28:2914/02/2026, 15:18:37 No No --07/02/2026, 19:30:06-