🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 719 / 10768 (100 per page) Showing: 71801-71900 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 152.70.233.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle | 13/07/2026, 09:58:45 | 19/08/2026, 13:40:30 | Yes | Yes | DragonFly, Packrat, gozi | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 13/07/2026, 12:52:41 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, eu.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 13.140.139.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS51167 | Contabo GmbH | Contabo | 13/07/2026, 09:58:45 | 16/07/2026, 17:45:41 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 12:52:43 | contabo.de, contabo.net |
| 36.225.139.•••:443 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 13/07/2026, 09:58:45 | 13/07/2026, 20:45:56 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 12:52:44 | hinet.net |
| 221.219.101.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4808 | China Unicom Beijing Province Network | China Unicom Beijing | 13/07/2026, 09:57:06 | 13/07/2026, 14:59:43 | Yes | Yes | Packrat | - | 13/07/2026, 10:42:13 | asuscomm.com, chinaunicom.cn |
| 183.23.157.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 13/07/2026, 09:57:00 | 16/07/2026, 12:41:26 | Yes | No | - | - | 13/07/2026, 10:42:57 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 112.115.41.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Yunnan | 13/07/2026, 09:57:00 | 29/07/2026, 15:03:13 | Yes | No | - | - | 13/07/2026, 10:42:58 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 124.223.206.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 13/07/2026, 09:56:59 | 19/07/2026, 14:54:16 | Yes | Yes | APT37, El-Machete | CVE-2014-4078, CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:43:09 | tencentcloud.com |
| 38.55.193.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS139659 | LUCIDACLOUD LIMITED | PEG Technology | 13/07/2026, 09:56:59 | 09/09/2026, 01:57:54 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 10:43:11 | - |
| 15.240.81.•••:18789 | - | 🇿🇦 South Africa | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services | 13/07/2026, 09:56:59 | 17/07/2026, 00:52:59 | - | - | - | - | - | - |
| 45.203.88.•••:18789 | - | 🇲🇾 Malaysia | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Cloud Innovation | 13/07/2026, 09:56:59 | 22/08/2026, 15:05:15 | No | No | - | - | 07/07/2026, 10:43:14 | - |
| 43.213.193.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS16509 | Amazon.com, Inc. | Infrastructure | 13/07/2026, 09:56:58 | 25/07/2026, 00:21:52 | Yes | No | - | - | 13/07/2026, 10:43:22 | cloudfront.com, endless.com, amazonpayments.com, amazonaws.com |
| 183.128.105.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 13/07/2026, 09:56:58 | 13/07/2026, 15:42:34 | No | No | - | - | 07/07/2026, 10:43:27 | - |
| 106.54.234.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Unknown | 13/07/2026, 09:56:57 | 13/07/2026, 15:42:34 | Yes | Yes | APT-C-23, APT14, APT28, APT35, APT36, APT37, APT39, APT40, APT41, Carbanak, Cobalt Group, DarkHotel Group, Earth Berberoka, El-Machete, Equation Group, Gamaredon Group, Ghostwriter, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, Turla APT Group, UNC2452, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2011-4718, CVE-2013-1896, CVE-2013-3735, CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2013-6501, CVE-2013-7327, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-0236, CVE-2014-2020, CVE-2014-3581, CVE-2014-4670, CVE-2014-5459, CVE-2014-8109, CVE-2014-9425, CVE-2014-9426, CVE-2014-9767, CVE-2015-0228, CVE-2015-1351, CVE-2015-3183, CVE-2015-3185, CVE-2015-4116, CVE-2015-4601, CVE-2015-7803, CVE-2015-7804, CVE-2015-8865, CVE-2015-8874, CVE-2015-8877, CVE-2015-8879, CVE-2015-8994, CVE-2015-9253, CVE-2016-0736, CVE-2016-10158, CVE-2016-10159, CVE-2016-10161, CVE-2016-10397, CVE-2016-10712, CVE-2016-1903, CVE-2016-2161, CVE-2016-2554, CVE-2016-3141, CVE-2016-3142, CVE-2016-4070, CVE-2016-4342, CVE-2016-4343, CVE-2016-4537, CVE-2016-4538, CVE-2016-4539, CVE-2016-4540, CVE-2016-4541, CVE-2016-4542, CVE-2016-4543, CVE-2016-4975, CVE-2016-5093, CVE-2016-5094, CVE-2016-5095, CVE-2016-5096, CVE-2016-5114, CVE-2016-5387, CVE-2016-5399, CVE-2016-5768, CVE-2016-5769, CVE-2016-5770, CVE-2016-5771, CVE-2016-5772, CVE-2016-5773, CVE-2016-6288, CVE-2016-6289, CVE-2016-6290, CVE-2016-6291, CVE-2016-6292, CVE-2016-6294, CVE-2016-6295, CVE-2016-6296, CVE-2016-6297, CVE-2016-7124, CVE-2016-7125, CVE-2016-7126, CVE-2016-7127, CVE-2016-7128, CVE-2016-7129, CVE-2016-7130, CVE-2016-7131, CVE-2016-7132, CVE-2016-7411, CVE-2016-7412, CVE-2016-7413, CVE-2016-7414, CVE-2016-7416, CVE-2016-7417, CVE-2016-7418, CVE-2016-7478, CVE-2016-8612, CVE-2016-8740, CVE-2016-8743, CVE-2016-9137, CVE-2016-9138, CVE-2016-9934, CVE-2016-9935, CVE-2017-11142, CVE-2017-11143, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11628, CVE-2017-12933, CVE-2017-15710, CVE-2017-15715, CVE-2017-15945, CVE-2017-16642, CVE-2017-20005, CVE-2017-3167, CVE-2017-3169, CVE-2017-7272, CVE-2017-7679, CVE-2017-7890, CVE-2017-7963, CVE-2017-8923, CVE-2017-9224, CVE-2017-9225, CVE-2017-9226, CVE-2017-9229, CVE-2017-9788, CVE-2017-9798, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-14851, CVE-2018-14883, CVE-2018-15132, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-17082, CVE-2018-17189, CVE-2018-17199, CVE-2018-19395, CVE-2018-19396, CVE-2018-19520, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-0196, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-20372, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9023, CVE-2019-9024, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2019-9517, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2020-11985, CVE-2020-11993, CVE-2020-13938, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-23017, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-3618, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31628, CVE-2022-31629, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41741, CVE-2022-41742, CVE-2023-25690, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-44487, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 10:43:29 | tencentcloud.com |
| 43.138.245.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 13/07/2026, 09:56:57 | 13/07/2026, 15:42:33 | Yes | Yes | APT37, El-Machete | - | 13/07/2026, 10:43:35 | tencentcloud.com |
| 52.68.78.•••:18789 | - | 🇯🇵 Japan | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 13/07/2026, 09:56:55 | 13/07/2026, 21:26:27 | No | No | - | - | 07/07/2026, 10:43:55 | - |
| 2409:8a20:5292:57b0:20c:29ff:fe56:aa95:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS56046 | China Mobile communications corporation | China Mobile | 13/07/2026, 09:56:54 | 13/07/2026, 16:25:40 | - | - | - | - | - | - |
| 152.70.233.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle | 13/07/2026, 09:56:53 | 19/08/2026, 07:52:32 | Yes | Yes | DragonFly, Packrat, gozi | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 13/07/2026, 10:44:06 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, eu.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 13.140.139.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS51167 | Contabo GmbH | Contabo | 13/07/2026, 09:56:53 | 16/07/2026, 13:24:57 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:44:07 | contabo.de, contabo.net |
| 36.225.139.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 13/07/2026, 09:56:53 | 13/07/2026, 16:25:39 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:44:08 | hinet.net |
| 13.48.109.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Sweden | 13/07/2026, 09:55:05 | 13/07/2026, 15:40:45 | No | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 13/07/2026, 14:59:45 | - |
| 183.23.157.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 13/07/2026, 09:55:04 | 16/07/2026, 13:22:55 | Yes | No | - | - | 13/07/2026, 14:59:50 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 112.115.41.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Yunnan | 13/07/2026, 09:55:04 | 13/07/2026, 15:40:44 | Yes | No | - | - | 13/07/2026, 14:59:51 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 38.55.193.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS139659 | LUCIDACLOUD LIMITED | PEG Technology | 13/07/2026, 09:55:03 | 13/07/2026, 15:40:42 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 15:00:03 | - |
| 15.240.81.•••:18789 | - | 🇿🇦 South Africa | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services | 13/07/2026, 09:55:03 | 17/07/2026, 00:51:02 | - | - | - | - | - | - |
| 45.203.88.•••:18789 | - | 🇲🇾 Malaysia | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Cloud Innovation | 13/07/2026, 09:55:03 | 23/07/2026, 04:08:53 | No | No | - | - | 07/07/2026, 15:00:07 | - |
| 43.213.193.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS16509 | Amazon.com, Inc. | Infrastructure | 13/07/2026, 09:55:02 | 22/07/2026, 03:52:49 | Yes | No | - | - | 13/07/2026, 15:00:14 | cloudfront.com, endless.com, amazonpayments.com, amazonaws.com |
| 183.128.105.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 13/07/2026, 09:55:01 | 13/07/2026, 15:40:41 | No | No | - | - | 07/07/2026, 15:00:32 | - |
| 106.54.234.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Unknown | 13/07/2026, 09:55:01 | 13/07/2026, 15:40:41 | - | - | - | - | - | - |
| 43.138.245.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 13/07/2026, 09:55:00 | 13/07/2026, 15:40:40 | Yes | Yes | APT37, El-Machete | - | 13/07/2026, 15:01:02 | tencentcloud.com |
| 52.68.78.•••:18789 | - | 🇯🇵 Japan | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 13/07/2026, 09:54:57 | 13/07/2026, 21:24:31 | No | No | - | - | 07/07/2026, 15:01:22 | - |
| 2409:8a20:5292:57b0:20c:29ff:fe56:aa95:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS56046 | China Mobile communications corporation | China Mobile | 13/07/2026, 09:54:57 | 13/07/2026, 16:23:39 | - | - | - | - | - | - |
| 152.70.233.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle | 13/07/2026, 09:54:56 | 19/08/2026, 09:17:11 | Yes | Yes | DragonFly, Packrat, gozi | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2025-23048, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020 | 13/07/2026, 15:01:32 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, eu.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 52.47.179.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 13/07/2026, 09:52:59 | 09/08/2026, 05:07:32 | No | Yes | APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Equation Group, Gamaredon Group, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2017-15710, CVE-2017-15715, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11993, CVE-2020-14145, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943 | 13/07/2026, 10:36:59 | - |
| 128.251.154.•••:18789 | - | 🇪🇺 European Union | - | false | Leaked | AS8075 | Microsoft Corporation | Cloud | 13/07/2026, 09:52:59 | 16/07/2026, 20:32:26 | Yes | No | - | - | 13/07/2026, 10:37:00 | nokiafoundation.com, open-ecosystem.org, pumatech.com, eizel.com, nokiasaudi.com, nokia.com, nokiasiemensnetworks.com, ovi.com, nsn.com |
| 147.93.7.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS40021 | Contabo Inc. | Contabo | 13/07/2026, 09:52:59 | 15/07/2026, 07:04:39 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:37:01 | contaboserver.net, contabo.de, contabo.net |
| 176.32.76.•••:18789 | - | 🇮🇪 Ireland | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon CloudFront DUB2 | 13/07/2026, 09:52:58 | 10/09/2026, 11:54:35 | No | No | - | - | 07/07/2026, 10:37:02 | - |
| 52.68.78.•••:18789 | - | 🇯🇵 Japan | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 13/07/2026, 09:52:58 | 15/07/2026, 07:47:42 | No | No | - | - | 07/07/2026, 10:37:04 | - |
| 188.166.95.•••:18789 | - | 🇳🇱 Netherlands | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 13/07/2026, 09:52:58 | 18/07/2026, 00:22:53 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MoustachedBouncer, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2007-4559, CVE-2013-0340, CVE-2015-20107, CVE-2016-20012, CVE-2016-3189, CVE-2018-25032, CVE-2019-12900, CVE-2020-10735, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-28861, CVE-2021-36368, CVE-2021-41617, CVE-2022-26488, CVE-2022-37454, CVE-2022-42919, CVE-2022-45061, CVE-2023-24329, CVE-2023-27043, CVE-2023-28531, CVE-2023-36632, CVE-2023-38408, CVE-2023-40217, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 13/07/2026, 10:37:05 | - |
| 222.134.174.•••:1008 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 13/07/2026, 09:16:03 | 06/08/2026, 07:08:47 | No | No | - | - | 07/07/2026, 09:16:52 | - |
| 69.161.221.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS59253 | LEASEWEB SINGAPORE PTE. LTD. | 365 Group LLC | 13/07/2026, 09:16:03 | 22/07/2026, 18:58:09 | Yes | Yes | APT1 Comment Crew, APT15, APT27, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2006-5072, CVE-2007-5197, CVE-2008-3422, CVE-2008-3906, CVE-2010-1459, CVE-2010-4159, CVE-2015-9251, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2017-15945, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-11358, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11022, CVE-2020-11023, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 09:16:57 | fengshuimastersingapore.sg |
| 221.219.101.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4808 | China Unicom Beijing Province Network | China Unicom Beijing | 13/07/2026, 09:16:02 | 13/07/2026, 20:03:07 | Yes | Yes | Packrat | - | 13/07/2026, 09:17:00 | asuscomm.com, chinaunicom.cn |
| 45.203.88.•••:18789 | - | 🇲🇾 Malaysia | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Cloud Innovation | 13/07/2026, 09:16:02 | 24/08/2026, 06:01:06 | No | No | - | - | 07/07/2026, 09:17:03 | - |
| 110.175.238.•••:18789 | - | 🇦🇺 Australia | - | false | Clean | AS7545 | TPG Telecom Limited | TPG Internet | 13/07/2026, 09:16:02 | 13/07/2026, 20:03:06 | Yes | No | - | - | 13/07/2026, 09:17:06 | tpg.com.au |
| 95.133.252.•••:18789 | - | 🇫🇮 Finland | Yes | false | Clean | AS198020 | Verda Cloud Oy | Datacrunch | 13/07/2026, 09:16:02 | 14/08/2026, 05:49:28 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 09:17:07 | datacrunch.io |
| 68.147.83.•••:18789 | - | 🇨🇦 Canada | Yes | false | Leaked | AS6327 | Shaw Communications | Shaw Communications | 13/07/2026, 09:16:00 | 03/08/2026, 21:59:26 | Yes | - | - | CVE-2017-15945, CVE-2024-6484, CVE-2024-6485, CVE-2024-7347, CVE-2025-23419 | 13/07/2026, 09:17:22 | macmadigan.com, chickenkiller.com, rogersondemand.com, quickconnect.to, fastspeed.dk, rogers.ca, rogerstelecom.com, rogers.com, synology.me, rogerssportsandmedia.com, rogerscentre.com |
| 27.152.54.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | Quanzhou Broadband MAN | 13/07/2026, 09:16:00 | 16/07/2026, 22:47:13 | No | No | - | CVE-2025-26618, CVE-2025-30211, CVE-2025-32433, CVE-2025-46712 | 13/07/2026, 09:17:24 | - |
| 59.34.211.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 13/07/2026, 09:16:00 | 13/07/2026, 20:03:04 | Yes | No | - | - | 13/07/2026, 09:17:25 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 91.45.48.•••:8443 | - | 🇩🇪 Germany | - | false | Leaked | AS3320 | Internet service provider operations | Deutsche Telekom | 13/07/2026, 09:16:00 | 13/07/2026, 20:03:04 | Yes | No | - | - | 13/07/2026, 09:17:31 | myfritz.net, telekom.de, fritz.com |
| 85.137.246.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS401701 | cognetcloud INC | Vapeliner Technology (HK) Limited | 13/07/2026, 09:16:00 | 09/08/2026, 22:21:19 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 09:17:33 | - |
| 164.132.104.•••:8080 | - | 🇫🇷 France | - | false | Clean | AS16276 | OVH SAS | OVH | 13/07/2026, 09:16:00 | 13/07/2026, 20:03:03 | - | - | - | - | - | - |
| 2409:8a70:3e74:3940:14a8:d54b:5000:6cb0:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 13/07/2026, 09:16:00 | 13/07/2026, 20:03:03 | - | - | - | - | - | - |
| 13.48.109.•••:443 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Sweden | 13/07/2026, 09:15:59 | 13/07/2026, 20:03:03 | No | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 13/07/2026, 09:17:39 | - |
| 222.134.174.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 13/07/2026, 09:14:06 | 06/08/2026, 02:07:21 | No | No | - | - | 07/07/2026, 10:42:05 | - |
| 69.161.221.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS59253 | LEASEWEB SINGAPORE PTE. LTD. | 365 Group LLC | 13/07/2026, 09:14:06 | 23/07/2026, 05:36:22 | Yes | Yes | APT1 Comment Crew, APT15, APT27, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2006-5072, CVE-2007-5197, CVE-2008-3422, CVE-2008-3906, CVE-2010-1459, CVE-2010-4159, CVE-2015-9251, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2017-15945, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-11358, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11022, CVE-2020-11023, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 10:42:09 | fengshuimastersingapore.sg |
| 111.230.27.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 13/07/2026, 09:14:06 | 14/07/2026, 12:29:15 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387 | 13/07/2026, 10:42:10 | tencentcloud.com |
| 45.203.88.•••:18789 | - | 🇲🇾 Malaysia | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Cloud Innovation | 13/07/2026, 09:14:05 | 24/08/2026, 01:01:32 | No | No | - | - | 07/07/2026, 10:42:16 | - |
| 110.175.238.•••:18789 | - | 🇦🇺 Australia | - | false | Clean | AS7545 | TPG Telecom Limited | TPG Internet | 13/07/2026, 09:14:05 | 13/07/2026, 14:59:42 | Yes | No | - | - | 13/07/2026, 10:42:19 | tpg.com.au |
| 95.133.252.•••:18789 | - | 🇫🇮 Finland | Yes | false | Clean | AS198020 | Verda Cloud Oy | Datacrunch | 13/07/2026, 09:14:05 | 14/08/2026, 01:30:09 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 10:42:20 | datacrunch.io |
| 43.163.218.•••:18789 | - | 🇸🇬 Singapore | - | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 13/07/2026, 09:14:04 | 23/08/2026, 05:55:27 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:42:29 | tencent.com |
| 212.227.193.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS8560 | This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE. | IONOS | 13/07/2026, 09:14:03 | 13/07/2026, 16:25:37 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:42:34 | - |
| 68.147.83.•••:18789 | - | 🇨🇦 Canada | Yes | false | Leaked | AS6327 | Shaw Communications | Shaw Communications | 13/07/2026, 09:14:03 | 03/08/2026, 16:15:09 | Yes | - | - | CVE-2017-15945, CVE-2024-6484, CVE-2024-6485, CVE-2024-7347, CVE-2025-23419 | 13/07/2026, 10:42:40 | macmadigan.com, chickenkiller.com, rogersondemand.com, quickconnect.to, fastspeed.dk, rogers.ca, rogerstelecom.com, rogers.com, synology.me, rogerssportsandmedia.com, rogerscentre.com |
| 27.152.54.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | Quanzhou Broadband MAN | 13/07/2026, 09:14:02 | 16/07/2026, 18:26:28 | No | No | - | CVE-2025-26618, CVE-2025-30211, CVE-2025-32433, CVE-2025-46712 | 13/07/2026, 10:42:41 | - |
| 59.34.211.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 13/07/2026, 09:14:02 | 13/07/2026, 15:42:39 | Yes | No | - | - | 13/07/2026, 10:42:42 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 91.45.48.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS3320 | Internet service provider operations | Deutsche Telekom | 13/07/2026, 09:14:01 | 14/07/2026, 05:18:38 | Yes | No | - | - | 13/07/2026, 10:42:46 | myfritz.net, telekom.de, fritz.com |
| 85.137.246.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS401701 | cognetcloud INC | Vapeliner Technology (HK) Limited | 13/07/2026, 09:14:01 | 09/08/2026, 17:19:19 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:42:47 | - |
| 164.132.104.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS16276 | OVH SAS | OVH | 13/07/2026, 09:14:01 | 16/07/2026, 11:15:06 | - | - | - | - | - | - |
| 2409:8a70:3e74:3940:14a8:d54b:5000:6cb0:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 13/07/2026, 09:14:01 | 13/07/2026, 15:42:38 | - | - | - | - | - | - |
| 13.48.109.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Data Services Sweden | 13/07/2026, 09:14:00 | 13/07/2026, 15:42:38 | No | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 13/07/2026, 10:42:52 | - |
| 222.134.174.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 13/07/2026, 09:12:10 | 13/07/2026, 14:57:48 | No | No | - | - | 07/07/2026, 14:58:53 | - |
| 69.161.221.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS59253 | LEASEWEB SINGAPORE PTE. LTD. | 365 Group LLC | 13/07/2026, 09:12:09 | 23/07/2026, 05:34:20 | Yes | Yes | APT1 Comment Crew, APT15, APT27, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2006-5072, CVE-2007-5197, CVE-2008-3422, CVE-2008-3906, CVE-2010-1459, CVE-2010-4159, CVE-2015-9251, CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2017-15945, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-11358, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11022, CVE-2020-11023, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 14:58:56 | fengshuimastersingapore.sg |
| 111.230.27.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 13/07/2026, 09:12:09 | 14/07/2026, 12:27:21 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387 | 13/07/2026, 14:58:58 | tencentcloud.com |
| 221.219.101.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4808 | China Unicom Beijing Province Network | China Unicom Beijing | 13/07/2026, 09:12:09 | 13/07/2026, 14:57:48 | Yes | Yes | Packrat | - | 13/07/2026, 14:59:01 | asuscomm.com, chinaunicom.cn |
| 45.203.88.•••:18789 | - | 🇲🇾 Malaysia | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Cloud Innovation | 13/07/2026, 09:12:09 | 22/07/2026, 03:52:46 | No | No | - | - | 07/07/2026, 14:59:04 | - |
| 110.175.238.•••:18789 | - | 🇦🇺 Australia | - | false | Clean | AS7545 | TPG Telecom Limited | TPG Internet | 13/07/2026, 09:12:08 | 13/07/2026, 14:57:47 | Yes | No | - | - | 13/07/2026, 14:59:07 | tpg.com.au |
| 95.133.252.•••:18789 | - | 🇫🇮 Finland | Yes | false | Clean | AS198020 | Verda Cloud Oy | Datacrunch | 13/07/2026, 09:12:08 | 14/08/2026, 02:54:11 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/07/2026, 14:59:08 | datacrunch.io |
| 43.163.218.•••:18789 | - | 🇸🇬 Singapore | - | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 13/07/2026, 09:12:07 | 13/07/2026, 20:41:43 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 14:59:18 | tencent.com |
| 212.227.193.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS8560 | This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE. | IONOS | 13/07/2026, 09:12:07 | 13/07/2026, 16:23:37 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 14:59:22 | - |
| 68.147.83.•••:18789 | - | 🇨🇦 Canada | Yes | false | Leaked | AS6327 | Shaw Communications | Shaw Communications | 13/07/2026, 09:12:06 | 03/08/2026, 16:55:44 | Yes | - | - | CVE-2017-15945, CVE-2024-6484, CVE-2024-6485, CVE-2024-7347, CVE-2025-23419 | 13/07/2026, 14:59:29 | macmadigan.com, chickenkiller.com, rogersondemand.com, quickconnect.to, fastspeed.dk, rogers.ca, rogerstelecom.com, rogers.com, synology.me, rogerssportsandmedia.com, rogerscentre.com |
| 27.152.54.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | Quanzhou Broadband MAN | 13/07/2026, 09:12:05 | 16/07/2026, 18:24:25 | No | No | - | CVE-2025-26618, CVE-2025-30211, CVE-2025-32433, CVE-2025-46712 | 13/07/2026, 14:59:30 | - |
| 172.67.138.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS13335 | Cloudflare, Inc. | Cloudflare | 13/07/2026, 09:12:05 | 13/07/2026, 23:32:43 | Yes | No | - | - | 13/07/2026, 14:59:32 | streamshop.com, everlasting.it, vpnserver.com, muellertherapy.com, shenji-titanium.com, fuyuanwj.com, olson.com, applications.com, educorp.com, vcorp.com, kiwibox.com, jxxlxj.com, scales.ai, loupe-global.com, themurrayparishtrust.com, atcevents.com, frprongxanh.com, catuan.net, contentmanager.com, cgmprecast.com, harmonytest.com, health2con.com, roche-nutley.com, byteboard.com, sdkyjt.net, luckyplastic.net, holidayinnfresno.com, watchyourboobs.at, rochediabetes.com, forumcorp.com, nlfit.com, dataloop.com, dragaodomar.org.br, 51yuezhi.com, hzfeidi.com, electronicengineering.com, owassodental.com, aiden-vn.com, melange.ai, anhbac.com, salonnews.com, fricksfashion.com, energyservices.com, jemochemicals.nl, icfolson.com, ironworks.com, roche.com.tw, quatangthanhdong.com, maxwellcoachco.com, bbbiotechconference.com, youthstream.com, jetreacare.com, hhso.at, 277312.com, fuhuake.com, esacinc.com, cityfied.net, okibi.ai, gx101.com, in-deed.net, playergroup.com, abpincorp.com, smartloop.com, hvacdistributors.com, globalsolutions.com, rightwaytrading.net, hqpots.com, informationsystems.com, medtecjapan.com, jw.ai, energypoints.com, dunlopgolf.com, billingcenter.com, ahemao.com, congtyhungquoc.com, anlink.net, ts-tech.info, globalexchange.net, jxygcy.com, yac-agcc.com, tourservices.com, jekotrade.com, hmcxjc.com, shsinotech.com, vbankph.com, yarrowbayplasticsurgery.com, bopcon.com, resoto.com, jiuliproduce.com, ytxweb.net, licenseglobal.com, eurobank.com, graphicconnection.com, go-digerati.com, happylife.ai, paperex-expo.com, xiaoshejia.com, preventionlady.com, campmgmt.com, ramcolab.com, itradeonline.com, mpls.org, internationalmeetingsreview.com, explosystems.com, wecastnetworkinc.com, gdheyin.com, amber.ai, boyu-group.com, fiyanoventures.com, sunglotech.com, ekakitchen.com, hummingbirdins.com, minhkhanhcomputer.com, carleaseusa.com, taxi321.com, hasecuritysolutions.com, refly.ai, jyskaiyue.com, wisehousetech.com, thietkethanhan.com, cloudflare.net, phottix.com, ceostream.com, channel.net, associatedneurologists.com, qd-baolian.com, csofam.com, wireandcableconnection.com, handyman.com, ntisurgical.com, galleryconnection.com, jstream.com, machinesummit.com, gene.com, globalventures.com, lyricsintosong.ai, kidsbud.net, loitoan.com, aviationnow.com, thietbixaydunglamtung.com, farmpress.com, govcoin.com, jxlingtong.com, officeworksrx.com, esep.co.uk, namingsystem.com, glove.com.tw, feedstuffs.com, williamsfurnacerepair.com, ss-web.com, baselinewoods.com, vpicvietphat.com, luxuryventures.com, bestrun.net, ambassador-sz.com, referral.com, jiabinnu.com, nooptionantics.com, ongnhuamemloithep.com, gutding.at, destiny.com.tw, promptster.ai, sciencesuite.com, bulgaria-offroad.com, alghanitex.com, qzz.io, birminghamneograft.com, lendstream.com, giahungtech.com, intelligender.com, careagent.com, trudellmedicalgroup.com, kfstock.com, gatsbylabs.com, vbuilders.com, brownsprinting.com, expocihac.com, scribed.ai, prins.ai, rivalcorp.com, cloudhq-mkt6.net, garyjackson.com, livedesignonline.com, t-zoneland.com, aboveandbeyondcleaningservices.com, socialsuite.com, forwardwirecloth.net, pvhvac.com, ninokyo.com, cclvcr.com, wxkewei.com, swiftfreightlogistics.com, jumpstory.com, anichemspeciality.com, klmymmyc.com, homemaintenance.com, gydz.net, ecotechinc.com, gzfantai.net, jalan.ai, studyinchina.io, plumbingandheating.org, ceconstruction.com, princedentalclinic.com, hzjiaolun.com, hibetw.com, xweiying.com, roche-diagnostics.us, mayhoangtung.com, pp.ua, hnbeixiang.com, mingstone.net, appliancesservices.com, vannuysair.com, comprayventadearmas.com, gialoilongan.com, phase-line.com, refee.net, xjzljt.net, xjjingyoga.com, gpchain.com, dongfanggufen.net, sxgas.net, coronde.net, klavis.ai, olson1to1.com, 1haojiyin.com, customerprofile.com, vrgkhaihoan.com, aibituo.net, dzrjx.net, tjwipes.net, metaworks.ai, palmerstonbakery.com, nextgenhealthcare.com, interpraise.com, readystaffing.com, ventureos.com, cofcohg.com, rochecanada.com, tlexinstitute.com, versarai.ai, malibupress.com, imobile.com, contrib.com, impactanalytics.ai, learningwire.com, leixinfoods.net, detongwiremesh.com, goldplateck.com, roche-australia.com, dentalassist.ai, fiercepharma.com, collinsonpublishing.com, tradingcorp.com, jlhhzy.com, ibcglobal.com, eshares.com, sanhoos.com, gaithersburgflorist.com, fiercehealthit.com, thanhcongmarble.com, expowest.com, hkplasticviet.com, dgclh.com, bamko.net, ausarabbusinesscouncil.com, hansecontrol.com, lstcarbon.com, simplamo.com, retailtrafficmag.com, cphi.com, voyagevietnammoto.com, briefy.ai, kitchenservices.com, ttstest.com, marksullivanhomes.com, carmivietnam.com, vimedtec.com, viettelsoftware.com, semanticbits.com, zt.ai, gaetanasnyc.com, oukay.net, apo-led.com, qtxasset.com, irrigationsystems4u.com, uicmarine.com, socialpoint.com, numen.com.tw, bnw163.net, boxboard.com, ichiisoft.com, yhjgkeji.com, childeducationplus.com, cshczfz.com, realtydao.com, epckorealtd.com, jolicharts.com, accu-chek.com, chinasotop.com, dogsparesort.com, commercialdiversified.com, china-one.net, gzshengjie56.com, portcast.com, kingdisplay.net, shakespearemedia.co.uk, eu.org, bierte.com, investcentre.com, rochefoundationmedicine.com, yangjiangshilimaoyi.com, jadzdjm.com, hadungcraft.com, afghanembassy.us, pesasybalanzas.com, buildfolio.com, dreamacquisition.com, artistrelieftree.com, roche.co.za, neerajlovecyber.com, tailwindgroup.com, com.de, iptunnel.com, roche.com, ttyt360.com, biocro.net, parperfeito.com.br, rayinmind.com, bycast.com, leadstream.net, informamarketsjapan.com, jz5288.com, kmark.com, tahaluf.com, multifamilyexecutive.com, taskmgmt.com, kalaifashions.com, servicetech.com, pioneersunlimited.com, newyorkfarmshow.com, grovehr.com, xenanghanoi.com, hygroup.net, robustlife.com.tw, iskyworth.com, venturepub.com, partyworld.com, financebazaar.com, basis.org, zgkaite.com, jinld.net, turnoutservices.com, occhiali-oakley.it, visumkurierservice.at, vulcantowing.com, managedbyq.com, shin-ei.pro, zjdddl.com, metropolis.ai, ranscustombuilders.com, telecomanalysis.com, gaoyimall.net, princewilliamsoundlodging.com, linked.com, schaffler-verlag.com, nesp.com, dslawn.com, antoanbp.com, cfoinnovation.com, proteologics.com, vnoc.com, jex.com.tw, renalidaexplained.com, ljgyp.net, fundchannel.com, szsbs.net, herocollector.com, thuanthienplastic.com, accu-chek.com.cn, oracle-ag.ch, zjhrbz.com, zhaowoo.net, fzfortune.net, itmanage.net, safeindiaexpo.com, computerzone.com, eb5aig.net, airconditioningheating.net, reservationcenter.com, synecticstrainers.com, einpl.com, icfi.com, iirusa.com, bestwanhui.com, dixonschili.com, tecnalab.it, neumann-group.com, hkbolton.com, icf.com, fiercemarkets.com, 869606.com, mark1airforce.com, goldenstream.com, bain86.com, caviton.com, strongvalve.com, vanesch.nl, zhujigema.net, interlan.com, automations.com, mattjohnsonelectric.com, bank-easy.net, hotecoperations.com, globalexport.com, taocimall.com, fedcomm.com, bbpr.at, directpivotparts.com, spynga.com, ashortwalk.com, naniwavn.com, workers.dev, intriq.ai, usroadconditions.com, dublincleaningservices.com, whzn.net, texans.com, navissupply.com, gvrsystemsautomation.com, cqyjjj.net, ltticorp.com, photochallenge.com, dayspaassociation.com, nttdata-vds.com, blackframe.ai, bluffcountry.com, reteck.net, samsungsv.com, marinehub.com, filmteck.com, tigerexpressfuel.com, buildcorp.com, uzin-metal.com, sindimade.net.br, maymacanphu.com, 360-xj.com, jucyvietnam.com, charlottecommerce.com, youreventsittersllc.com, xjwfcj.com, appservice.com, sglcfj.com, centerforsacredspace.org, helpstream.com, patentboard.com, applebrookinn.com, constructionforum.com, questex.asia, pet-bottle.net, realtyconsultant.com, myqo.com, prbot.ai, importandexportspecializedequipmentandservicesinc.com, synergypower.com, datacommunications.com, miamitelevision.com, cannabiscorp.com, impresosmonterrey.com, shworldbest.com, gemcats.com, philenergyexpo.com, zsnet.net, medbrokers.com, topigx.com, dongguansenzi.com, omsheel.com, spinintel.com, energystorage.com, carmaxbolivia.com, ckxoh.com, sdfengze.net, canontradeshows.com, fyinn.net, designnews.com, informamarkets-info.com, cokhinamanh.com, china114.net, daisei048.pro, venturebuilder.com, vipersafetyinc.com, lassocountry.com, youniversitytv.com, propetchina.com, 1800ventures.com, hightech.net, vinagreenplus.com, arcgroup.com, money2020middleeast.com, lavenderhotelvn.com, bkpeterson.com, microsoftvirtualacademy.com, chambersconstruction.com, hy189.net, northerncomforthvac.com, tmlcorp.com, void.cl, madeinspace.us, xjhongshun.com, ssammpack.com, viameta.net, southernbellepromo.com, cornerstaffing.com, wilcoxfurniture.com, geochem.org, nguyenlieuvn.com, hoanggiapccc.com, whir.com, villageofmuttontown.com, equinaceaprodutosnaturais.com, dmln.net, shzhongyi.net, northgate-tech.com, intertec.com |
| 59.34.211.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 13/07/2026, 09:12:05 | 13/07/2026, 15:40:47 | Yes | No | - | - | 13/07/2026, 14:59:33 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 91.45.48.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS3320 | Internet service provider operations | Deutsche Telekom | 13/07/2026, 09:12:05 | 14/07/2026, 05:16:37 | Yes | No | - | - | 13/07/2026, 14:59:37 | myfritz.net, telekom.de, fritz.com |
| 85.137.246.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS401701 | cognetcloud INC | Vapeliner Technology (HK) Limited | 13/07/2026, 09:12:05 | 13/07/2026, 15:40:46 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 14:59:38 | - |
| 164.132.104.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS16276 | OVH SAS | OVH | 13/07/2026, 09:12:04 | 13/07/2026, 15:40:46 | - | - | - | - | - | - |
| 2409:8a70:3e74:3940:14a8:d54b:5000:6cb0:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 13/07/2026, 09:12:04 | 13/07/2026, 15:40:45 | - | - | - | - | - | - |
| 207.211.172.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS31898 | Oracle Corporation | Oracle | 13/07/2026, 09:10:06 | 24/08/2026, 05:55:04 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387 | 13/07/2026, 10:36:44 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 59.124.140.•••:18789 | - | 🇹🇼 Taiwan | - | true | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 13/07/2026, 09:10:05 | 09/09/2026, 20:17:21 | Yes | No | - | - | 13/07/2026, 10:36:47 | hinet.net |
| 43.163.218.•••:18789 | - | 🇸🇬 Singapore | - | false | Leaked | AS132203 | Tencent Building, Kejizhongyi Avenue | Aceville Pte Ltd | 13/07/2026, 09:10:05 | 24/08/2026, 23:44:53 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:36:49 | tencent.com |
| 212.227.193.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS8560 | This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE. | IONOS | 13/07/2026, 09:10:05 | 15/07/2026, 06:21:26 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:36:51 | - |
| 2409:8a70:3e74:3940:14a8:d54b:5000:6cb0:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 13/07/2026, 09:10:05 | 15/07/2026, 07:04:40 | - | - | - | - | - | - |
| 38.238.203.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Dxtl Service | 13/07/2026, 08:33:03 | 24/08/2026, 04:35:58 | No | No | - | - | 07/07/2026, 17:13:42 | - |
| 50.254.142.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS7922 | Comcast Cable Communications, LLC | Comcast | 13/07/2026, 08:33:03 | 13/07/2026, 18:37:10 | - | - | - | - | - | - |
| 45.203.88.•••:18789 | - | 🇲🇾 Malaysia | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Cloud Innovation | 13/07/2026, 08:33:03 | 23/08/2026, 19:23:42 | No | No | - | - | 07/07/2026, 17:13:51 | - |
| 152.114.192.•••:443 | - | 🇩🇪 Germany | Yes | true | Leaked | AS57043 | HOSTKEY B.V. | Hostkey | 13/07/2026, 08:33:03 | 08/09/2026, 03:50:27 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 17:13:52 | chickenkiller.com, mooo.com, dvrdydns.com, crabdance.com |
| 154.85.144.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | DingFeng XinHui HK Technology Limited | 13/07/2026, 08:33:00 | 24/08/2026, 11:44:11 | No | No | - | - | 07/07/2026, 09:16:24 | - |
| 38.238.203.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Dxtl Service | 13/07/2026, 08:31:13 | 23/08/2026, 22:53:44 | No | No | - | - | 07/07/2026, 10:41:02 | - |
| 50.254.142.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS7922 | Comcast Cable Communications, LLC | Comcast | 13/07/2026, 08:31:13 | 13/07/2026, 14:16:56 | - | - | - | - | - | - |
| 45.203.88.•••:18789 | - | 🇲🇾 Malaysia | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | Cloud Innovation | 13/07/2026, 08:31:12 | 23/08/2026, 14:24:51 | No | No | - | - | 07/07/2026, 10:41:15 | - |
| 152.114.192.•••:18789 | - | 🇩🇪 Germany | - | true | Leaked | AS57043 | HOSTKEY B.V. | Hostkey | 13/07/2026, 08:31:12 | 07/09/2026, 23:32:27 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/07/2026, 10:41:16 | chickenkiller.com, mooo.com, dvrdydns.com, crabdance.com |
| 154.85.144.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS134548 | DXTL Tseung Kwan O Service | DingFeng XinHui HK Technology Limited | 13/07/2026, 08:31:08 | 24/08/2026, 06:41:47 | No | No | - | - | 07/07/2026, 10:41:39 | - |