🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 1076720 Page: 713 / 10768 (100 per page) Showing: 71201-71300 Last Imported: 10/09/2026, 14:51:48
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 713 of 10768
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
152.32.171.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUcloud Information Technology HK13/07/2026, 18:31:5614/07/2026, 00:15:19 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:59:13-
92.5.189.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationOracle Sweden13/07/2026, 18:31:5614/07/2026, 00:15:19 Yes - -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:59:14netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, skire.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com
115.202.216.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetCHINANET-ZJ-TZ13/07/2026, 18:31:5616/07/2026, 16:15:20 - - ----
115.202.188.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetCHINANET-ZJ-TZ13/07/2026, 18:31:5614/07/2026, 00:15:18 No No --07/07/2026, 19:59:21-
117.50.186.•••:18789 - 🇨🇳 China mainland - false Leaked AS23724IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province NetworkUCloud13/07/2026, 18:31:5501/08/2026, 09:31:03 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:59:27ucloud.cn
104.21.89.•••:18789 - 🇺🇸 United States - false Leaked AS13335Cloudflare, Inc.Cloudflare13/07/2026, 18:31:5514/07/2026, 00:15:17 Yes No --13/07/2026, 19:59:31wadefuneralhome.net, stevensonfuneralhome.net, streamshop.com, vpnserver.com, shenji-titanium.com, fuyuanwj.com, danca.tv, 10366092.com, applications.com, educorp.com, vcorp.com, sh-hibo.com, rainbowsunrisemapambazuko.org, jxxlxj.com, irteya.ru, scales.ai, kmb-autoklima.de, faceinthemirror.org, frprongxanh.com, catuan.net, contentmanager.com, cgmprecast.com, 127578.com, ccccnbtx.org, tshlkj.net, byteboard.com, sdkyjt.net, luckyplastic.net, holidayinnfresno.com, ics-line.com, forumcorp.com, dataloop.com, 51yuezhi.com, hzfeidi.com, aiden-vn.com, melange.ai, shbdn.com, limpiom.net, anhbac.com, rubank.ru, pivotsmo.com, newtown.ru, salonnews.com, energyservices.com, vivianfuneralhome.com, sz-jl.com, quatangthanhdong.com, 10366064.com, maxwellcoachco.com, youthstream.com, jetreacare.com, hbbygd88.com, gruppoesi.it, fuhuake.com, vinci.com, perm.su, cityfied.net, okibi.ai, aaanet.ru, kanesolriver.com, playergroup.com, abpincorp.com, smartloop.com, hrlevage.fr, globalsolutions.com, rightwaytrading.net, hqpots.com, wenchyuan.com, informationsystems.com, marshfuneral.com, jw.ai, energypoints.com, dunlopgolf.com, cxdingli.com, billingcenter.com, congtyhungquoc.com, anlink.net, globalexchange.net, jxygcy.com, xl-flex.com, yac-agcc.com, tourservices.com, jekotrade.com, hmcxjc.com, originalsoulvegetarian.com, jindianglass.net, shsinotech.com, shczhsyy.com, vbankph.com, wallofportfolios.com, gipnutmeg.com, xjhhcm.com, bopcon.com, resoto.com, jiuliproduce.com, 10366118.com, triomed.pro, wagnerdavis.com, masthercell.com, ytxweb.net, mtu-net.ru, eurobank.com, alsuyar.net, graphicconnection.com, go-digerati.com, elitex.it, cmpage.org, happylife.ai, 10366046.com, judgeyachts.com, xiaoshejia.com, preventionlady.com, campmgmt.com, ramcolab.com, itradeonline.com, mpls.org, ashtonvalepreschool.co.uk, explosystems.com, wecastnetworkinc.com, gdheyin.com, amber.ai, rayfuneralcremation.com, retrievalmasters.com, chinasyh.net, boyu-group.com, flyfishersofthebitterroot.org, sunglotech.com, ekakitchen.com, minhkhanhcomputer.com, carleaseusa.com, taxi321.com, refly.ai, jyskaiyue.com, wisehousetech.com, millerfh.net, thietkethanhan.com, cloudflare.net, chinahongkun.com, 8v.com, ceostream.com, channel.net, fletchingschool.org, qd-baolian.com, mjoconnors.com, csofam.com, wireandcableconnection.com, handyman.com, vrnt.ru, galleryconnection.com, jstream.com, machinesummit.com, globalventures.com, lyricsintosong.ai, kidsbud.net, loitoan.com, thietbixaydunglamtung.com, ourlike.net, sandy.ru, chicpartydress.com, interclass.us, govcoin.com, jxlingtong.com, westernofficeplus.com, namingsystem.com, ronglianjr.com, saintjohninstitute.org, wellead.net, dairyasia.org, mtu-inform.ru, yarbermortuary.com, baselinewoods.com, poisesoft.net, vpicvietphat.com, luxuryventures.com, bestrun.net, hc0798.com, easyins.net, referral.com, ucumc.org, jiabinnu.com, bojangles.com, ongnhuamemloithep.com, boon-two.com, promptster.ai, willcctv.com, directfuneralservicesabq.com, sciencesuite.com, montgomery-illinois.org, alghanitex.com, qzz.io, 302588.com, lendstream.com, giahungtech.com, careagent.com, kfstock.com, gatsbylabs.com, gransierassociates.com, vbuilders.com, porcelainchina.net, brownsprinting.com, 743151.com, c4group.org, mountairymd.org, scribed.ai, m-printone.com, prins.ai, rivalcorp.com, cloudhq-mkt6.net, garyjackson.com, tennis-florida.com, hzhsyr.com, alderette-pomeroy.com, perm.ru, t-zoneland.com, aboveandbeyondcleaningservices.com, socialsuite.com, forwardwirecloth.net, ninokyo.com, hurleyfuneralhome.com, baskervillefuneralhomellc.com, timing-tech.com, wxkewei.com, swiftfreightlogistics.com, klmymmyc.com, riverrunplantation.com, chinasand.net, homemaintenance.com, gydz.net, us.org, aquastorenw.com, smartpos.net.br, sergeantsmajor.org, gzfantai.net, jalan.ai, bolinyinwu.net, studyinchina.io, totolink-shop.com, ceconstruction.com, hzjiaolun.com, toptotsdaynursery.co.uk, jjduffyfuneralhome.com, gseschooldallas.org, xweiying.com, chunxinghejin.com, mendotahospital.org, sktind.com, mayhoangtung.com, pp.ua, tadalafilanx.com, neosec.ai, hnbeixiang.com, mingstone.net, chinayinshufood.com, 10366006.com, gialoilongan.com, phase-line.com, doublebalance.com.au, leisonhk.com, refee.net, xjzljt.net, xjjingyoga.com, gpchain.com, dongfanggufen.net, sxgas.net, wakechem.com, coronde.net, jialilace.com, klavis.ai, advancentx.org, ngatiwhatuaorakei.com, sasmtm.com, 1haojiyin.com, customerprofile.com, yitongqingjie.com, sinotransfj.com, vrgkhaihoan.com, aibituo.net, referrals.com, dzrjx.net, tjwipes.net, metaworks.ai, interpraise.com, readystaffing.com, aptenonsjz.com, framecoframing.com, eurostampiparma.it, allacucinadellelanghe.it, ventureos.com, cofcohg.com, yongxinco.com, code-china.com, versarai.ai, malibupress.com, imobile.com, contrib.com, impactanalytics.ai, learningwire.com, leixinfoods.net, 10366090.com, detongwiremesh.com, goldplateck.com, mtsgsm.com, dentalassist.ai, tradingcorp.com, jlhhzy.com, www.us.com, eshares.com, sanhoos.com, gaithersburgflorist.com, robertporterfuneralhome.com, thanhcongmarble.com, hkplasticviet.com, dgclh.com, bamko.net, sicmi.com, 10366024.com, hansecontrol.com, rpt.fi, lstcarbon.com, simplamo.com, it.com, voyagevietnammoto.com, briefy.ai, jingyucn.net, kitchenservices.com, ttstest.com, carmivietnam.com, vimedtec.com, china-ycgkjx.com, viettelsoftware.com, zt.ai, gaetanasnyc.com, oukay.net, apo-led.com, dqbxg.com, terrazasfuneralchapel.com, uicmarine.com, 10366038.com, socialpoint.com, weavermortuaryinc.com, rohigreen.com, bnw163.net, ichiisoft.com, igistec.com, scheidfuneralhome.com, yhjgkeji.com, pcdateam.org, cshczfz.com, realtydao.com, hmcoptical.com, www.eu.com, commercialdiversified.com, hongyang0769.net, china-one.net, zhejiangzg.com, portcast.com, kingdisplay.net, jssd.net, eu.org, bierte.com, investcentre.com, yangjiangshilimaoyi.com, jadzdjm.com, hadungcraft.com, buildfolio.com, premierhandymanservices.com, dreamacquisition.com, wal-max.com, otisa.com, neerajlovecyber.com, tailwindgroup.com, com.de, iptunnel.com, ttyt360.com, rayinmind.com, bycast.com, www.de.com, shhctsy.com, leadstream.net, doradver.ru, wisemanfuneralhome.net, karofilm.ru, satlock.com, jz5288.com, kmark.com, taskmgmt.com, lepse.com, servicetech.com, pioneersunlimited.com, atl-az.com, xenanghanoi.com, pmps.com.hk, hygroup.net, shinruey.net, venturepub.com, partyworld.com, basis.org, denbo-dillmanfuneralhomes.com, zgkaite.com, jinld.net, turnoutservices.com, jollysocks.com, sport-goods.net, historicbakerfh.com, vulcantowing.com, dfcvb.com, zjdddl.com, villageofpittsford.org, m-wood2.com, metropolis.ai, dqkeyi.com, telecomanalysis.com, huadewood.com, nis-glonass.ru, gaoyimall.net, princewilliamsoundlodging.com, linked.com, nesp.com, dslawn.com, antoanbp.com, robuschi.it, neschllc.com, proteologics.com, vnoc.com, intbot.ai, ljgyp.net, fundchannel.com, szsbs.net, lifelinechiropractic.org, thuanthienplastic.com, skipperleeandsonseternalrest.com, oracle-ag.ch, eyes-armour.com, zjhrbz.com, zhaowoo.net, sogaz.ru, jiangsufuji.com, fzfortune.net, fittingmold.net, itmanage.net, neddevinesboston.com, mediterranealg.it, computerzone.com, com.se, eb5aig.net, themobilefactory.org, reservationcenter.com, synecticstrainers.com, einpl.com, sddyhy.net, bestwanhui.com, kisimarealestate.com, neumann-group.com, unclebsorganicgardening.com, ruixingkuaiji.com, hkbolton.com, 869606.com, 10366026.com, goldenstream.com, bain86.com, fxgowin.com, caviton.com, strongvalve.com, carboncard.com, p-c-svcs.com, zhujigema.net, ariete.com.br, interlan.com, automations.com, luckywaymall.com, yoshikawa-h.com, bank-easy.net, globalexport.com, taocimall.com, udmurt.ru, rakennusfakta.fi, fedcomm.com, armyaviationmuseum.org, yijia-audio.com, naniwavn.com, comstar-uts.ru, workers.dev, chaolipack.com, intriq.ai, axiansredtoo.us, 10366110.com, dublincleaningservices.com, whzn.net, ewt.biz, texans.com, navissupply.com, gvrsystemsautomation.com, cqyjjj.net, newoceanfood.com, ltticorp.com, photochallenge.com, bjzthb.com, nttdata-vds.com, blackframe.ai, dechuangjixie.com, reteck.net, dartong.net, banana.ai, mallyas.com, marinehub.com, filmteck.com, selectium.mk, ystadspa.se, buildcorp.com, jinpac.com, cfgt18.com, uzin-metal.com, apeloa-kangyu.com, maymacanphu.com, jvpfh.com, premiergolf.com, motossenda.com, 360-xj.com, jucyvietnam.com, charlottecommerce.com, youreventsittersllc.com, xjwfcj.com, ibss.it, eaststeel.net, appservice.com, sglcfj.com, helpstream.com, blackmountainmetals.com, patentboard.com, constructionforum.com, pet-bottle.net, immunizekansascoalition.org, realtyconsultant.com, pollyholding.com, anhuaabrasives.net, myqo.com, prbot.ai, 10366068.com, datacommunications.com, axians.us, miamitelevision.com, cannabiscorp.com, cafedelapresse.fr, impresosmonterrey.com, shworldbest.com, gemcats.com, zsnet.net, medbrokers.com, topigx.com, dongguansenzi.com, omsheel.com, caez-wv.org, spinintel.com, energystorage.com, ckxoh.com, sdfengze.net, fyinn.net, cokhinamanh.com, china114.net, venturebuilder.com, vipersafetyinc.com, propetchina.com, 1800ventures.com, hightech.net, vinagreenplus.com, houstmust.com, lavenderhotelvn.com, bkpeterson.com, hy189.net, chinakangtai.net, germanpool-nb.com, xjhongshun.com, ssammpack.com, forecon.fi, viameta.net, k-captain.com, southernbellepromo.com, cornerstaffing.com, loginport.com, geochem.org, food-machines.net, nguyenlieuvn.com, hoanggiapccc.com, ruckfuneral.com, kamas.ru, lincolnwaymusic.org, 10366146.com, 10366034.com, mts.ru, dmln.net, shzhongyi.net, i-soon.net
56.10.7.•••:18789 - 🇺🇸 United States - false Leaked AS16509Amazon.com, Inc.Amazon13/07/2026, 18:31:5419/08/2026, 02:05:49 Yes No -CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2026-24072, CVE-2026-28780, CVE-2026-29167, CVE-2026-29168, CVE-2026-29169, CVE-2026-29170, CVE-2026-33006, CVE-2026-33007, CVE-2026-33523, CVE-2026-33857, CVE-2026-34032, CVE-2026-34059, CVE-2026-34355, CVE-2026-34356, CVE-2026-42535, CVE-2026-42536, CVE-2026-43951, CVE-2026-44119, CVE-2026-44185, CVE-2026-44186, CVE-2026-44631, CVE-2026-48913, CVE-2026-4997503/08/2026, 09:04:00usps.gov, shippingapis.com, parcelpostplus.com, uspostalservice.com, usps.com, amazonaws.com, amazon.com
116.48.22.•••:18789 - 🇭🇰 Hong Kong - false Clean AS4760HKT LimitedNetvigator13/07/2026, 18:31:5417/07/2026, 07:15:21 No No --07/07/2026, 19:59:37-
123.56.105.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/07/2026, 18:31:4810/09/2026, 11:56:35 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:59:39aliyun.com
113.128.104.•••:18789 - 🇨🇳 China mainland - false Leaked AS4134ChinanetChinaNet Shandong13/07/2026, 18:31:4714/07/2026, 00:15:15 Yes No --13/07/2026, 19:59:45bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
114.27.58.•••:18789 - 🇹🇼 Taiwan - false Leaked AS3462Data Communication Business GroupChunghwa Telecom Data Group13/07/2026, 18:31:4614/07/2026, 20:20:34 Yes No --13/07/2026, 19:59:54hinet.net
104.192.80.•••:18789 - 🇺🇸 United States - false Clean AS398478PEG TECH INCDignitas Technology13/07/2026, 18:31:4514/07/2026, 00:58:02 No No -CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161713/07/2026, 19:59:55-
119.45.104.•••:18789 - 🇨🇳 China mainland - true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/07/2026, 18:31:4507/09/2026, 20:40:01 Yes - --13/07/2026, 19:59:58tencentcloud.com
65.1.201.•••:18789 - 🇮🇳 India - false Clean AS16509Amazon.com, Inc.Amazon Web Services13/07/2026, 18:31:4314/07/2026, 00:57:59 No No --07/07/2026, 20:00:14-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 18:31:4323/07/2026, 05:34:18 No No --07/07/2026, 20:00:15-
92.5.189.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationOracle Sweden13/07/2026, 18:29:3324/08/2026, 03:04:52 Yes - -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 18:33:40netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, skire.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com
23.19.231.•••:18789 Assistant 🇺🇸 United States Yes true Clean AS395954Leaseweb USA, Inc.LeaseWeb USA13/07/2026, 17:56:4410/09/2026, 12:04:54 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/07/2026, 18:00:49-
124.120.169.•••:18789 - 🇭🇰 Hong Kong - false Leaked AS17552True OnlineTrueHispaniola13/07/2026, 17:52:3417/07/2026, 07:19:40 Yes Yes APT1 Comment Crew, Gaza Cybergang, Packrat, Volatile KittenCVE-2011-1833, CVE-2011-2494, CVE-2011-2905, CVE-2011-2909, CVE-2011-4086, CVE-2011-4127, CVE-2012-0045, CVE-2012-0957, CVE-2012-2137, CVE-2012-3375, CVE-2012-3400, CVE-2012-3430, CVE-2012-3511, CVE-2012-4398, CVE-2012-4467, CVE-2012-4508, CVE-2012-4530, CVE-2012-4542, CVE-2012-5374, CVE-2012-5375, CVE-2012-5517, CVE-2012-5532, CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, CVE-2012-6549, CVE-2012-6638, CVE-2012-6647, CVE-2013-0160, CVE-2013-0216, CVE-2013-0217, CVE-2013-0228, CVE-2013-0268, CVE-2013-0290, CVE-2013-0309, CVE-2013-0310, CVE-2013-0311, CVE-2013-0313, CVE-2013-0343, CVE-2013-0349, CVE-2013-0871, CVE-2013-0913, CVE-2013-1059, CVE-2013-1763, CVE-2013-1767, CVE-2013-1772, CVE-2013-1773, CVE-2013-1774, CVE-2013-1819, CVE-2013-1858, CVE-2013-1928, CVE-2013-1959, CVE-2013-2015, CVE-2013-2058, CVE-2013-2140, CVE-2013-2164, CVE-2013-2206, CVE-2013-2232, CVE-2013-2234, CVE-2013-2237, CVE-2013-2546, CVE-2013-2547, CVE-2013-2548, CVE-2013-2888, CVE-2013-2889, CVE-2013-2890, CVE-2013-2891, CVE-2013-2892, CVE-2013-2893, CVE-2013-2894, CVE-2013-2895, CVE-2013-2896, CVE-2013-2897, CVE-2013-2898, CVE-2013-2899, CVE-2013-2929, CVE-2013-2930, CVE-2013-3301, CVE-2013-3302, CVE-2013-4125, CVE-2013-4127, CVE-2013-4129, CVE-2013-4162, CVE-2013-4163, CVE-2013-4205, CVE-2013-4247, CVE-2013-4270, CVE-2013-4299, CVE-2013-4300, CVE-2013-4343, CVE-2013-4345, CVE-2013-4348, CVE-2013-4350, CVE-2013-4387, CVE-2013-4470, CVE-2013-4483, CVE-2013-4511, CVE-2013-4512, CVE-2013-4513, CVE-2013-4514, CVE-2013-4515, CVE-2013-4516, CVE-2013-4563, CVE-2013-4579, CVE-2013-4587, CVE-2013-4591, CVE-2013-4592, CVE-2013-6282, CVE-2013-6367, CVE-2013-6368, CVE-2013-6376, CVE-2013-6378, CVE-2013-6380, CVE-2013-6381, CVE-2013-6382, CVE-2013-6383, CVE-2013-6431, CVE-2013-6432, CVE-2013-6763, CVE-2013-7026, CVE-2013-7027, CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, CVE-2013-7266, CVE-2013-7267, CVE-2013-7268, CVE-2013-7269, CVE-2013-7270, CVE-2013-7271, CVE-2013-7281, CVE-2013-7348, CVE-2014-0038, CVE-2014-2889, CVE-2014-3645, CVE-2014-3688, CVE-2014-7841, CVE-2014-7842, CVE-2014-8133, CVE-2014-8884, CVE-2014-8989, CVE-2014-9090, CVE-2021-3609, CVE-2021-3640, CVE-2021-4197, CVE-2021-45868, CVE-2022-28356, CVE-2022-2996813/07/2026, 19:19:06true.th
140.245.53.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle13/07/2026, 17:52:3431/07/2026, 16:24:55 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:19:15netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
106.75.214.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS17621China Unicom Shanghai network / AS4811 China Telecom (Group)UCloud13/07/2026, 17:52:3425/07/2026, 13:11:47 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-29323, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/07/2026, 19:19:16ucloud.cn
192.84.39.•••:443 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationNetwork Solutions13/07/2026, 17:52:3423/07/2026, 07:46:46 - - ----
54.232.168.•••:443 - 🇧🇷 Brazil Yes false Clean AS16509Amazon.com, Inc.Amazon Web Services Brazil13/07/2026, 17:52:3323/07/2026, 05:38:39 No No --07/07/2026, 19:19:28-
123.122.36.•••:18789 - 🇨🇳 China mainland - false Leaked AS4808China Unicom Beijing Province NetworkChina Unicom Beijing13/07/2026, 17:52:3214/07/2026, 04:37:23 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/07/2026, 19:19:35chinaunicom.cn
15.204.104.•••:10029 - 🇺🇸 United States Yes true Leaked AS16276OVH SASSd One Network13/07/2026, 17:52:3209/09/2026, 01:17:34 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:19:40ovhcloud.com
167.233.203.•••:18789 - 🇩🇪 Germany Yes false Leaked AS24940Hetzner Online GmbHHetzner Online13/07/2026, 17:52:3204/08/2026, 18:00:18 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-6000204/08/2026, 11:31:10hetzner.com
52.206.231.•••:443 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon13/07/2026, 17:52:3214/07/2026, 16:07:18 No No --07/07/2026, 19:19:42-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 17:52:3124/08/2026, 03:53:24 No No --07/07/2026, 19:19:46-
169.58.4.•••:18789 - 🇩🇪 Germany Yes true Clean AS51167Contabo GmbHContabo13/07/2026, 17:52:3107/09/2026, 22:09:01 - - ----
152.32.171.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS135377UCLOUD INFORMATION TECHNOLOGY (HK) LIMITEDUcloud Information Technology HK13/07/2026, 17:52:3102/09/2026, 02:31:31 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:19:53-
124.120.169.•••:18789 - 🇭🇰 Hong Kong - false Leaked AS17552True OnlineTrueHispaniola13/07/2026, 17:50:4317/07/2026, 02:17:55 Yes Yes APT1 Comment Crew, Gaza Cybergang, Packrat, Volatile KittenCVE-2011-1833, CVE-2011-2494, CVE-2011-2905, CVE-2011-2909, CVE-2011-4086, CVE-2011-4127, CVE-2012-0045, CVE-2012-0957, CVE-2012-2137, CVE-2012-3375, CVE-2012-3400, CVE-2012-3430, CVE-2012-3511, CVE-2012-4398, CVE-2012-4467, CVE-2012-4508, CVE-2012-4530, CVE-2012-4542, CVE-2012-5374, CVE-2012-5375, CVE-2012-5517, CVE-2012-5532, CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, CVE-2012-6549, CVE-2012-6638, CVE-2012-6647, CVE-2013-0160, CVE-2013-0216, CVE-2013-0217, CVE-2013-0228, CVE-2013-0268, CVE-2013-0290, CVE-2013-0309, CVE-2013-0310, CVE-2013-0311, CVE-2013-0313, CVE-2013-0343, CVE-2013-0349, CVE-2013-0871, CVE-2013-0913, CVE-2013-1059, CVE-2013-1763, CVE-2013-1767, CVE-2013-1772, CVE-2013-1773, CVE-2013-1774, CVE-2013-1819, CVE-2013-1858, CVE-2013-1928, CVE-2013-1959, CVE-2013-2015, CVE-2013-2058, CVE-2013-2140, CVE-2013-2164, CVE-2013-2206, CVE-2013-2232, CVE-2013-2234, CVE-2013-2237, CVE-2013-2546, CVE-2013-2547, CVE-2013-2548, CVE-2013-2888, CVE-2013-2889, CVE-2013-2890, CVE-2013-2891, CVE-2013-2892, CVE-2013-2893, CVE-2013-2894, CVE-2013-2895, CVE-2013-2896, CVE-2013-2897, CVE-2013-2898, CVE-2013-2899, CVE-2013-2929, CVE-2013-2930, CVE-2013-3301, CVE-2013-3302, CVE-2013-4125, CVE-2013-4127, CVE-2013-4129, CVE-2013-4162, CVE-2013-4163, CVE-2013-4205, CVE-2013-4247, CVE-2013-4270, CVE-2013-4299, CVE-2013-4300, CVE-2013-4343, CVE-2013-4345, CVE-2013-4348, CVE-2013-4350, CVE-2013-4387, CVE-2013-4470, CVE-2013-4483, CVE-2013-4511, CVE-2013-4512, CVE-2013-4513, CVE-2013-4514, CVE-2013-4515, CVE-2013-4516, CVE-2013-4563, CVE-2013-4579, CVE-2013-4587, CVE-2013-4591, CVE-2013-4592, CVE-2013-6282, CVE-2013-6367, CVE-2013-6368, CVE-2013-6376, CVE-2013-6378, CVE-2013-6380, CVE-2013-6381, CVE-2013-6382, CVE-2013-6383, CVE-2013-6431, CVE-2013-6432, CVE-2013-6763, CVE-2013-7026, CVE-2013-7027, CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, CVE-2013-7266, CVE-2013-7267, CVE-2013-7268, CVE-2013-7269, CVE-2013-7270, CVE-2013-7271, CVE-2013-7281, CVE-2013-7348, CVE-2014-0038, CVE-2014-2889, CVE-2014-3645, CVE-2014-3688, CVE-2014-7841, CVE-2014-7842, CVE-2014-8133, CVE-2014-8884, CVE-2014-8989, CVE-2014-9090, CVE-2021-3609, CVE-2021-3640, CVE-2021-4197, CVE-2021-45868, CVE-2022-28356, CVE-2022-2996813/07/2026, 17:54:01true.th
84.201.4.•••:18789 - 🇩🇪 Germany - false Leaked AS214036Ultahost, Inc.UltaHost13/07/2026, 17:50:4214/07/2026, 07:28:09 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:54:11ultahost.com
140.245.53.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle13/07/2026, 17:50:4231/07/2026, 10:36:40 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:54:12netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
106.75.214.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS17621China Unicom Shanghai network / AS4811 China Telecom (Group)UCloud13/07/2026, 17:50:4225/07/2026, 08:10:25 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-29323, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/07/2026, 17:54:13ucloud.cn
192.84.39.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationNetwork Solutions13/07/2026, 17:50:4223/07/2026, 02:45:30 - - ----
54.232.168.•••:18789 - 🇧🇷 Brazil - false Clean AS16509Amazon.com, Inc.Amazon Web Services Brazil13/07/2026, 17:50:4123/07/2026, 00:37:58 No No --07/07/2026, 17:54:21-
43.167.18.•••:18789 - 🇸🇬 Singapore - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd13/07/2026, 17:50:4014/07/2026, 09:36:19 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:54:22tencent.com
216.107.138.•••:18789 - 🇸🇬 Singapore - false Clean AS212238Datacamp LimitedPrivate Customer13/07/2026, 17:50:4014/07/2026, 12:29:20 No No --07/07/2026, 17:54:26-
103.241.42.•••:18789 - 🇻🇳 Vietnam - false Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited13/07/2026, 17:50:3914/07/2026, 00:17:15 No No --07/07/2026, 17:54:28-
123.122.36.•••:18789 - 🇨🇳 China mainland - false Leaked AS4808China Unicom Beijing Province NetworkChina Unicom Beijing13/07/2026, 17:50:3914/07/2026, 00:17:15 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/07/2026, 17:54:29chinaunicom.cn
218.74.140.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Shaoxing13/07/2026, 17:50:3814/07/2026, 00:17:14 No No --07/07/2026, 17:54:34-
52.206.231.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon13/07/2026, 17:50:3814/07/2026, 11:44:55 No No --07/07/2026, 17:54:38-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 17:50:3823/08/2026, 22:53:49 No No --07/07/2026, 17:54:42-
171.213.164.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Sichuan13/07/2026, 17:48:4517/07/2026, 03:41:33 No No --07/07/2026, 20:45:33-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 17:48:4522/07/2026, 01:01:02 No No --07/07/2026, 20:45:35-
124.120.169.•••:18789 - 🇭🇰 Hong Kong - false Leaked AS17552True OnlineTrueHispaniola13/07/2026, 17:48:4317/07/2026, 02:16:00 Yes Yes APT1 Comment Crew, Gaza Cybergang, Packrat, Volatile KittenCVE-2011-1833, CVE-2011-2494, CVE-2011-2905, CVE-2011-2909, CVE-2011-4086, CVE-2011-4127, CVE-2012-0045, CVE-2012-0957, CVE-2012-2137, CVE-2012-3375, CVE-2012-3400, CVE-2012-3430, CVE-2012-3511, CVE-2012-4398, CVE-2012-4467, CVE-2012-4508, CVE-2012-4530, CVE-2012-4542, CVE-2012-5374, CVE-2012-5375, CVE-2012-5517, CVE-2012-5532, CVE-2012-6536, CVE-2012-6537, CVE-2012-6538, CVE-2012-6539, CVE-2012-6540, CVE-2012-6541, CVE-2012-6542, CVE-2012-6543, CVE-2012-6544, CVE-2012-6545, CVE-2012-6546, CVE-2012-6547, CVE-2012-6548, CVE-2012-6549, CVE-2012-6638, CVE-2012-6647, CVE-2013-0160, CVE-2013-0216, CVE-2013-0217, CVE-2013-0228, CVE-2013-0268, CVE-2013-0290, CVE-2013-0309, CVE-2013-0310, CVE-2013-0311, CVE-2013-0313, CVE-2013-0343, CVE-2013-0349, CVE-2013-0871, CVE-2013-0913, CVE-2013-1059, CVE-2013-1763, CVE-2013-1767, CVE-2013-1772, CVE-2013-1773, CVE-2013-1774, CVE-2013-1819, CVE-2013-1858, CVE-2013-1928, CVE-2013-1959, CVE-2013-2015, CVE-2013-2058, CVE-2013-2140, CVE-2013-2164, CVE-2013-2206, CVE-2013-2232, CVE-2013-2234, CVE-2013-2237, CVE-2013-2546, CVE-2013-2547, CVE-2013-2548, CVE-2013-2888, CVE-2013-2889, CVE-2013-2890, CVE-2013-2891, CVE-2013-2892, CVE-2013-2893, CVE-2013-2894, CVE-2013-2895, CVE-2013-2896, CVE-2013-2897, CVE-2013-2898, CVE-2013-2899, CVE-2013-2929, CVE-2013-2930, CVE-2013-3301, CVE-2013-3302, CVE-2013-4125, CVE-2013-4127, CVE-2013-4129, CVE-2013-4162, CVE-2013-4163, CVE-2013-4205, CVE-2013-4247, CVE-2013-4270, CVE-2013-4299, CVE-2013-4300, CVE-2013-4343, CVE-2013-4345, CVE-2013-4348, CVE-2013-4350, CVE-2013-4387, CVE-2013-4470, CVE-2013-4483, CVE-2013-4511, CVE-2013-4512, CVE-2013-4513, CVE-2013-4514, CVE-2013-4515, CVE-2013-4516, CVE-2013-4563, CVE-2013-4579, CVE-2013-4587, CVE-2013-4591, CVE-2013-4592, CVE-2013-6282, CVE-2013-6367, CVE-2013-6368, CVE-2013-6376, CVE-2013-6378, CVE-2013-6380, CVE-2013-6381, CVE-2013-6382, CVE-2013-6383, CVE-2013-6431, CVE-2013-6432, CVE-2013-6763, CVE-2013-7026, CVE-2013-7027, CVE-2013-7263, CVE-2013-7264, CVE-2013-7265, CVE-2013-7266, CVE-2013-7267, CVE-2013-7268, CVE-2013-7269, CVE-2013-7270, CVE-2013-7271, CVE-2013-7281, CVE-2013-7348, CVE-2014-0038, CVE-2014-2889, CVE-2014-3645, CVE-2014-3688, CVE-2014-7841, CVE-2014-7842, CVE-2014-8133, CVE-2014-8884, CVE-2014-8989, CVE-2014-9090, CVE-2021-3609, CVE-2021-3640, CVE-2021-4197, CVE-2021-45868, CVE-2022-28356, CVE-2022-2996813/07/2026, 19:58:26true.th
84.201.4.•••:18789 - 🇩🇪 Germany - false Leaked AS214036Ultahost, Inc.UltaHost13/07/2026, 17:48:4214/07/2026, 08:09:10 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:58:35ultahost.com
140.245.53.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle13/07/2026, 17:48:4231/07/2026, 11:18:08 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:58:36netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
192.84.39.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationNetwork Solutions13/07/2026, 17:48:4223/07/2026, 03:26:34 - - ----
54.232.168.•••:18789 - 🇧🇷 Brazil - false Clean AS16509Amazon.com, Inc.Amazon Web Services Brazil13/07/2026, 17:48:4114/07/2026, 00:15:23 No No --07/07/2026, 19:58:46-
43.167.18.•••:18789 - 🇸🇬 Singapore - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd13/07/2026, 17:48:4014/07/2026, 09:34:30 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:58:48tencent.com
216.107.138.•••:18789 - 🇸🇬 Singapore - false Clean AS212238Datacamp LimitedPrivate Customer13/07/2026, 17:48:3914/07/2026, 12:27:25 No No --07/07/2026, 19:58:50-
123.122.36.•••:18789 - 🇨🇳 China mainland - false Leaked AS4808China Unicom Beijing Province NetworkChina Unicom Beijing13/07/2026, 17:48:3914/07/2026, 00:15:21 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/07/2026, 19:58:53chinaunicom.cn
103.241.42.•••:18789 - 🇻🇳 Vietnam - false Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited13/07/2026, 17:48:3914/07/2026, 00:15:21 No No --07/07/2026, 19:58:56-
218.74.140.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Shaoxing13/07/2026, 17:48:3814/07/2026, 00:15:21 No No --07/07/2026, 19:58:59-
52.206.231.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon13/07/2026, 17:48:3714/07/2026, 11:42:58 No No --07/07/2026, 19:59:01-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 17:48:3722/07/2026, 11:00:01 No No --07/07/2026, 19:59:06-
154.12.29.•••:18789 - 🇺🇸 United States - false Leaked AS401696cognetcloud INCFOJ IP Technology13/07/2026, 17:46:3615/07/2026, 15:01:20 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:46:39cogentco.com
84.201.4.•••:18789 - 🇩🇪 Germany - false Leaked AS214036Ultahost, Inc.UltaHost13/07/2026, 17:46:3415/07/2026, 15:01:19 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:46:42ultahost.com
192.84.39.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationNetwork Solutions13/07/2026, 17:46:3422/07/2026, 01:41:56 - - ----
54.232.168.•••:18789 - 🇧🇷 Brazil - false Clean AS16509Amazon.com, Inc.Amazon Web Services Brazil13/07/2026, 17:46:3424/07/2026, 16:26:49 No No --07/07/2026, 17:46:46-
103.241.42.•••:18789 - 🇻🇳 Vietnam - false Clean AS135983Tino Group Joint Stock CompanyMMO Viet Nam Software Company Limited13/07/2026, 17:46:3415/07/2026, 15:44:11 No No --07/07/2026, 17:46:47-
52.206.231.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon13/07/2026, 17:46:3315/07/2026, 15:44:11 No No --07/07/2026, 17:46:51-
23.19.231.•••:18789 Assistant 🇺🇸 United States Yes true Clean AS395954Leaseweb USA, Inc.LeaseWeb USA13/07/2026, 17:46:3310/09/2026, 11:54:33 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198513/07/2026, 17:46:52-
38.76.183.•••:18789 - 🇭🇰 Hong Kong Yes false Leaked AS401701cognetcloud INCHong Kong Cloud Network Technology Co Ltd13/07/2026, 17:09:0403/08/2026, 19:51:20 Yes No -CVE-2009-2957, CVE-2009-2958, CVE-2012-3411, CVE-2013-0198, CVE-2015-3294, CVE-2015-8899, CVE-2017-13704, CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496, CVE-2017-15107, CVE-2019-14513, CVE-2019-14834, CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687, CVE-2021-3448, CVE-2022-0934, CVE-2023-28450, CVE-2023-50387, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 23:37:37cogentco.com
173.254.232.•••:18789 - 🇺🇸 United States - false Leaked AS36352HostPapaRackNerd13/07/2026, 17:09:0414/07/2026, 03:54:09 Yes Yes APT28, APT41CVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2016-077713/07/2026, 23:37:43carleaseusa.com, gpchain.com, racknerd.com
3.38.22.•••:443 - 🇰🇷 South Korea Yes true Clean AS16509Amazon.com, Inc.AWS Seoul Region13/07/2026, 17:09:0410/09/2026, 12:00:52 No No -CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341913/07/2026, 23:37:44-
124.223.156.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/07/2026, 17:09:0319/07/2026, 21:23:56 Yes Yes APT37, El-Machete, Hafnium GroupCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-30639, CVE-2021-30640, CVE-2021-33037, CVE-2021-36368, CVE-2021-41079, CVE-2021-41617, CVE-2021-42340, CVE-2022-23181, CVE-2022-25762, CVE-2022-2988513/07/2026, 23:37:46tencentcloud.com
111.170.164.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS151185China TelecomChinaNet Hubei13/07/2026, 17:09:0322/08/2026, 21:29:02 Yes No --13/07/2026, 23:37:50bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
117.41.139.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetCHINANET Jiangxi13/07/2026, 17:09:0226/07/2026, 04:49:49 No No --07/07/2026, 23:37:53-
117.50.175.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS23724IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province NetworkUCloud13/07/2026, 17:09:0201/08/2026, 15:20:43 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-638713/07/2026, 23:37:57ucloud.cn
47.116.36.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/07/2026, 17:09:0220/08/2026, 15:50:57 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138513/07/2026, 23:38:02-
35.238.148.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle13/07/2026, 17:09:0115/08/2026, 01:12:12 No No -CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161713/07/2026, 23:38:05-
121.21.4.•••:18789 - 🇨🇳 China mainland - false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Hebei13/07/2026, 17:09:0117/07/2026, 08:44:57 No No --07/07/2026, 23:38:06-
42.193.17.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/07/2026, 17:09:0109/09/2026, 20:23:05 Yes Yes APT37, El-Machete-13/07/2026, 23:38:12tencentcloud.com
139.100.234.•••:443 - 🇷🇺 Russia - false Clean AS49505JSC SelectelSelectel13/07/2026, 17:09:0114/07/2026, 13:58:17 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 23:38:15-
112.112.52.•••:18789 - 🇨🇳 China mainland - false Leaked AS4134ChinanetChinaNet Yunnan13/07/2026, 17:09:0114/07/2026, 03:54:05 Yes No --13/07/2026, 23:38:19bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
182.242.69.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Yunnan Province Network13/07/2026, 17:09:0017/07/2026, 12:18:03 No No --07/07/2026, 23:38:23-
38.12.23.•••:18789 - 🇺🇸 United States Yes false Leaked AS402169Uscloud IncPEG Technology13/07/2026, 17:09:0026/07/2026, 19:45:54 Yes - -CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 19:18:52cogentco.com
171.213.164.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Sichuan13/07/2026, 17:09:0017/07/2026, 08:02:23 No No --07/07/2026, 19:18:54-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 17:09:0024/08/2026, 01:45:51 No No --07/07/2026, 19:18:56-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 17:07:1523/08/2026, 17:56:58 No No --07/07/2026, 17:52:46-
27.20.67.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Hubei13/07/2026, 17:07:1514/07/2026, 21:05:32 No No --07/07/2026, 17:52:47-
119.45.230.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/07/2026, 17:07:1503/08/2026, 23:22:08 - - ----
38.76.183.•••:18789 - 🇭🇰 Hong Kong Yes false Leaked AS401701cognetcloud INCHong Kong Cloud Network Technology Co Ltd13/07/2026, 17:07:1403/08/2026, 14:06:44 Yes No -CVE-2009-2957, CVE-2009-2958, CVE-2012-3411, CVE-2013-0198, CVE-2015-3294, CVE-2015-8899, CVE-2017-13704, CVE-2017-14491, CVE-2017-14492, CVE-2017-14493, CVE-2017-14494, CVE-2017-14495, CVE-2017-14496, CVE-2017-15107, CVE-2019-14513, CVE-2019-14834, CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25684, CVE-2020-25685, CVE-2020-25686, CVE-2020-25687, CVE-2021-3448, CVE-2022-0934, CVE-2023-28450, CVE-2023-50387, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:52:54cogentco.com
173.254.232.•••:18789 - 🇺🇸 United States - false Leaked AS36352HostPapaRackNerd13/07/2026, 17:07:1315/07/2026, 02:06:38 Yes Yes APT28, APT41CVE-2010-4478, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2016-077713/07/2026, 17:52:59carleaseusa.com, gpchain.com, racknerd.com
3.38.22.•••:18789 - 🇰🇷 South Korea - true Clean AS16509Amazon.com, Inc.AWS Seoul Region13/07/2026, 17:07:1310/09/2026, 11:16:58 No No -CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341913/07/2026, 17:53:01-
124.223.156.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/07/2026, 17:07:1319/07/2026, 17:04:10 Yes Yes APT37, El-Machete, Hafnium GroupCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-30639, CVE-2021-30640, CVE-2021-33037, CVE-2021-36368, CVE-2021-41079, CVE-2021-41617, CVE-2021-42340, CVE-2022-23181, CVE-2022-25762, CVE-2022-2988513/07/2026, 17:53:02tencentcloud.com
111.170.164.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS151185China TelecomChinaNet Hubei13/07/2026, 17:07:1222/08/2026, 16:30:07 Yes No --13/07/2026, 17:53:09bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
117.41.139.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetCHINANET Jiangxi13/07/2026, 17:07:1125/07/2026, 23:48:44 No No --07/07/2026, 17:53:13-
117.50.175.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS23724IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province NetworkUCloud13/07/2026, 17:07:1101/08/2026, 10:16:09 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-638713/07/2026, 17:53:18ucloud.cn
47.116.36.•••:18789 - 🇨🇳 China mainland Yes false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft13/07/2026, 17:07:1120/08/2026, 17:58:23 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138513/07/2026, 17:53:22-
35.238.148.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle13/07/2026, 17:07:1114/08/2026, 20:51:42 No No -CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161713/07/2026, 17:53:26-
121.21.4.•••:18789 - 🇨🇳 China mainland - false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Hebei13/07/2026, 17:07:1117/07/2026, 03:43:23 No No --07/07/2026, 17:53:27-
42.193.17.•••:18789 - 🇨🇳 China mainland Yes true Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud13/07/2026, 17:07:1009/09/2026, 15:26:09 Yes Yes APT37, El-Machete-13/07/2026, 17:53:31tencentcloud.com
139.100.234.•••:18789 - 🇷🇺 Russia - false Clean AS49505JSC SelectelSelectel13/07/2026, 17:07:0914/07/2026, 20:22:24 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:53:35-
112.112.52.•••:18789 - 🇨🇳 China mainland - false Leaked AS4134ChinanetChinaNet Yunnan13/07/2026, 17:07:0913/07/2026, 23:34:34 Yes No --13/07/2026, 17:53:39bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
182.242.69.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Yunnan Province Network13/07/2026, 17:07:0817/07/2026, 07:17:11 No No --07/07/2026, 17:53:46-
38.12.23.•••:18789 - 🇺🇸 United States Yes false Leaked AS402169Uscloud IncPEG Technology13/07/2026, 17:07:0826/07/2026, 14:45:11 Yes - -CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-3541413/07/2026, 17:53:48cogentco.com
171.213.164.•••:18789 - 🇨🇳 China mainland - false Clean AS4134ChinanetChinaNet Sichuan13/07/2026, 17:07:0817/07/2026, 03:00:28 No No --07/07/2026, 17:53:49-
45.203.88.•••:18789 - 🇲🇾 Malaysia Yes false Clean AS134548DXTL Tseung Kwan O ServiceCloud Innovation13/07/2026, 17:07:0823/08/2026, 20:46:02 No No --07/07/2026, 17:53:51-