🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 683295 Page: 889 / 6833 (100 per page) Showing: 88801-88900 Last Imported: 19/04/2026, 08:41:00
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 889 of 6833
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
44.222.178.•••:18789 - 🇺🇸 United States - true Clean AS14618Amazon.com, Inc.Amazon Web Services05/04/2026, 17:18:2410/04/2026, 12:30:12 No No --30/03/2026, 17:25:29-
40.115.141.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:18:2410/04/2026, 13:15:38 - - ----
13.229.60.•••:18789 - 🇸🇬 Singapore - true Clean AS16509Amazon.com, Inc.Amazon Web Services05/04/2026, 17:18:2410/04/2026, 13:15:38 No Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-3272805/04/2026, 17:25:31-
18.136.206.•••:18789 - 🇸🇬 Singapore - true Clean AS16509Amazon.com, Inc.Amazon Web Services05/04/2026, 17:18:2410/04/2026, 13:15:38 No Yes APT-C-23, APT36, Cobalt Group, Equation Group, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt TyphoonCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734705/04/2026, 17:25:33-
165.232.72.•••:443 - 🇩🇪 Germany Yes true Clean AS14061DigitalOcean, LLCDigitalOcean05/04/2026, 17:15:5317/04/2026, 23:58:32 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MoustachedBouncer, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, TA505, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2013-0340, CVE-2016-20012, CVE-2018-1060, CVE-2018-15473, CVE-2018-15919, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-20406, CVE-2018-20685, CVE-2018-20852, CVE-2019-10160, CVE-2019-15903, CVE-2019-16056, CVE-2019-16935, CVE-2019-18348, CVE-2019-20372, CVE-2019-20907, CVE-2019-5010, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2019-9636, CVE-2019-9740, CVE-2019-9947, CVE-2019-9948, CVE-2020-14145, CVE-2020-14422, CVE-2020-15778, CVE-2020-26116, CVE-2020-27619, CVE-2020-8315, CVE-2020-8492, CVE-2021-23017, CVE-2021-23336, CVE-2021-28359, CVE-2021-28861, CVE-2021-3177, CVE-2021-3426, CVE-2021-3618, CVE-2021-36368, CVE-2021-3733, CVE-2021-3737, CVE-2021-41617, CVE-2021-4189, CVE-2022-0391, CVE-2022-37454, CVE-2022-41741, CVE-2022-41742, CVE-2023-24329, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 21:05:05-
23.111.15.•••:18789 - 🇸🇬 Singapore Yes true Clean AS59253LEASEWEB SINGAPORE PTE. LTD.Leaseweb Asia Pacific05/04/2026, 17:15:5215/04/2026, 13:32:07 - - ----
8.211.158.•••:80 - 🇸🇬 Singapore Yes true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore05/04/2026, 17:15:5209/04/2026, 09:23:33 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 21:05:16-
149.30.198.•••:18789 - 🇺🇸 United States Yes true Leaked AS133199SonderCloud LimitedSolustack Limited05/04/2026, 17:15:5217/04/2026, 10:06:09 Yes No --05/04/2026, 21:05:21cogentco.com
107.167.5.•••:18789 - 🇺🇸 United States Yes true Clean AS46844SharktechSharktech05/04/2026, 17:15:5206/04/2026, 00:01:05 - - ----
47.109.72.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft05/04/2026, 17:15:5212/04/2026, 15:02:35 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138506/04/2026, 00:02:34-
47.82.212.•••:18789 - 🇺🇸 United States Yes true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud05/04/2026, 17:15:5117/04/2026, 19:28:35 Yes No -CVE-2015-9253, CVE-2016-20012, CVE-2017-15906, CVE-2017-7272, CVE-2017-7963, CVE-2017-8923, CVE-2017-9225, CVE-2017-9229, CVE-2018-15473, CVE-2018-15919, CVE-2018-19395, CVE-2018-19396, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-31628, CVE-2022-31629, CVE-2022-4900, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:02:39hichina.com, alibaba-inc.com
47.237.203.•••:18789 - 🇺🇸 United States - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud05/04/2026, 17:15:5106/04/2026, 00:01:03 - - ----
129.121.87.•••:80 - 🇺🇸 United States Yes true Clean AS31898Oracle CorporationOGTIPS105/04/2026, 17:15:5117/04/2026, 22:29:42 - - ----
8.219.173.•••:443 - 🇸🇬 Singapore Yes true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore05/04/2026, 17:15:5106/04/2026, 05:14:47 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:02:54-
2a02:4780:66:cab6::1:18789 - 🇧🇷 Brazil - true Clean AS47583Hostinger International LimitedHostinger05/04/2026, 17:15:5117/04/2026, 20:13:49 - - ----
204.168.169.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner05/04/2026, 17:15:5014/04/2026, 10:34:11 - - ----
47.129.227.•••:443 - 🇸🇬 Singapore Yes true Leaked AS16509Amazon.com, Inc.Amazon Web Services05/04/2026, 17:15:5012/04/2026, 00:49:15 Yes - --06/04/2026, 00:03:22amazon.fr, bookworm.com, amazon.com.br, audible.com, lovefilm.com, amazon.eu, amzaon.com, amazaon.com, audible.in, z-exp.com, amozon.com, aws-amazon.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, amazonaws.cm, com.be, amazonpay.com, rooftopmedia.net, vine.com, imdb.com, ssl-images-amazon.com, amazon.com.au, amazon-rings.com, assoc-amazon.com, amazonin.com, amzn.asia, annapurnalabs.com, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, amazon.ae, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, amazon-aws.com, endless.com, amazonlocal.com, amazonm.com, amazonllc.com, media-imdb.com, amazon.com.tw, createspace.com, amazonaws.com, amzn.com, amazon.com, images-amazon.com, amazon.com.co
204.168.179.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner05/04/2026, 17:15:5017/04/2026, 10:06:02 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:03:28-
43.134.96.•••:443 - 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay05/04/2026, 17:15:5017/04/2026, 23:59:04 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:03:30tencent.com
115.190.142.•••:18789 - 🇨🇳 China mainland Yes true Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology05/04/2026, 17:15:5017/04/2026, 07:07:02 Yes No --06/04/2026, 00:03:34gwbn.net.cn
42.194.139.•••:18888 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud05/04/2026, 17:15:5015/04/2026, 13:32:07 Yes Yes APT37, El-Machete-06/04/2026, 00:03:36tencent.com
43.155.137.•••:44444 - 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd05/04/2026, 17:15:5015/04/2026, 13:31:44 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2019-16905, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2020-8616, CVE-2020-8617, CVE-2020-8618, CVE-2020-8619, CVE-2020-8620, CVE-2020-8621, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-2795, CVE-2022-3094, CVE-2022-38177, CVE-2022-38178, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:03:42tencent.com
158.178.243.•••:18789 - 🇺🇸 United States Yes true Leaked AS31898Oracle CorporationOracle Corporation05/04/2026, 17:15:5006/04/2026, 00:01:01 Yes Yes APT14, APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon, WIRTECVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-24989, CVE-2024-24990, CVE-2024-27316, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-734706/04/2026, 00:03:44healtheintent.com, purewellness.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com
175.0.66.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS4134ChinanetChinaNet Hunan Province Network05/04/2026, 17:15:4811/04/2026, 10:54:02 Yes No --06/04/2026, 00:04:05bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
167.235.117.•••:18000 - 🇩🇪 Germany Yes true Leaked AS24940Hetzner Online GmbHHetzner05/04/2026, 17:15:4809/04/2026, 10:53:19 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:04:10your-server.de, hetzner.com
64.188.61.•••:18789 - 🇩🇪 Germany Yes true Clean AS210976Timeweb, LLPTaiwan Cloud05/04/2026, 17:15:4715/04/2026, 01:34:13 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:04:22-
149.30.197.•••:18789 - 🇺🇸 United States Yes true Leaked AS133199SonderCloud LimitedSolustack Limited05/04/2026, 17:15:4717/04/2026, 23:58:08 Yes No --06/04/2026, 00:04:23cogentco.com
45.197.146.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS134365Ansheng Network Technology Co., LimitedOneFiveEight Cloud Computing05/04/2026, 17:15:4715/04/2026, 13:31:12 No Yes APT37, El-Machete-06/04/2026, 00:08:17-
43.250.173.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS62468VpsQuan L.L.C.HK United05/04/2026, 17:15:4706/04/2026, 00:00:58 - - ----
103.250.10.•••:18789 - 🇸🇬 Singapore Yes true Leaked AS138608Cloud Host Pte LtdCloud Host05/04/2026, 17:15:4709/04/2026, 00:22:40 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341906/04/2026, 00:04:40daa-taa.com
80.225.213.•••:18789 - 🇺🇸 United States Yes true Leaked AS31898Oracle CorporationOracle Sweden05/04/2026, 17:15:4706/04/2026, 00:00:58 Yes No -CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:04:50healtheintent.com, purewellness.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com
18.180.135.•••:443 - 🇯🇵 Japan Yes true Clean AS16509Amazon.com, Inc.Amazon Web Services Japan05/04/2026, 17:15:4617/04/2026, 07:52:22 No No --31/03/2026, 00:04:54-
188.166.152.•••:443 - 🇬🇧 United Kingdom Yes true Clean AS14061DigitalOcean, LLCDigitalOcean05/04/2026, 17:15:4617/04/2026, 23:58:59 No Yes APT-C-23, APT15, APT28, APT29, APT31, APT34, APT36, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Turla APT Group, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:04:56-
149.30.201.•••:18789 - 🇺🇸 United States Yes true Leaked AS133199SonderCloud LimitedSolustack Limited05/04/2026, 17:15:4615/04/2026, 13:31:11 Yes No --06/04/2026, 00:04:57cogentco.com
43.243.73.•••:80 - 🇭🇰 Hong Kong Yes true Clean AS152194CTG Server LimitedSun Network Hong Kong05/04/2026, 17:15:4606/04/2026, 00:00:57 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161706/04/2026, 00:05:10-
101.35.138.•••:18888 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing05/04/2026, 17:15:4611/04/2026, 10:55:05 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161706/04/2026, 00:05:13tencent.com
18.210.249.•••:443 - 🇺🇸 United States Yes true Clean AS14618Amazon.com, Inc.Amazon05/04/2026, 17:15:4606/04/2026, 00:00:57 No No -CVE-2017-20005, CVE-2017-7529, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2019-20372, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-734706/04/2026, 00:05:14-
47.84.28.•••:443 - 🇺🇸 United States Yes true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud05/04/2026, 17:15:4609/04/2026, 01:54:52 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:05:17hichina.com, alibaba-inc.com
43.161.229.•••:443 - 🇸🇬 Singapore Yes true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd05/04/2026, 17:15:4615/04/2026, 13:30:27 Yes No --06/04/2026, 00:05:18tencent.com
2001:da8:8000:6838:211:32ff:fee4:57be:18789 - 🇨🇳 China mainland - true Clean AS23910China Next Generation Internet CERNET2CERNET205/04/2026, 17:15:4615/04/2026, 13:31:50 - - ----
175.27.137.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud05/04/2026, 17:15:4612/04/2026, 00:48:41 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:05:24tencent.com
38.127.47.•••:18789 - 🇺🇸 United States Yes true Clean AS18978Enzu IncEnzu05/04/2026, 17:15:4517/04/2026, 20:13:46 No No --31/03/2026, 00:05:43-
47.106.201.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft05/04/2026, 17:15:4417/04/2026, 23:58:18 No No --03/04/2026, 11:44:17-
80.93.63.•••:18789 - 🇷🇺 Russia Yes true Clean AS44112SpaceWeb LtdSpaceWeb05/04/2026, 17:15:4406/04/2026, 00:00:55 - - ----
34.216.86.•••:443 - 🇺🇸 United States Yes true Clean AS16509Amazon.com, Inc.Amazon05/04/2026, 17:15:4406/04/2026, 15:48:19 No No --31/03/2026, 15:06:59-
54.87.10.•••:443 - 🇺🇸 United States Yes true Clean AS14618Amazon.com, Inc.Amazon05/04/2026, 17:15:4406/04/2026, 00:00:55 - - ----
119.29.172.•••:18888 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud05/04/2026, 17:15:4417/04/2026, 23:58:43 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/04/2026, 18:49:10tencent.com
1.15.133.•••:18888 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud05/04/2026, 17:15:4409/04/2026, 06:23:48 Yes Yes APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, El-Machete, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTECVE-2006-20001, CVE-2010-4657, CVE-2013-6712, CVE-2014-0207, CVE-2014-0237, CVE-2014-0238, CVE-2014-3479, CVE-2014-3480, CVE-2014-3487, CVE-2014-3515, CVE-2014-3981, CVE-2014-4049, CVE-2014-4721, CVE-2014-9767, CVE-2015-8994, CVE-2016-0736, CVE-2016-2161, CVE-2016-4975, CVE-2016-5387, CVE-2016-7478, CVE-2016-8612, CVE-2016-8740, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-11763, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-1333, CVE-2018-17189, CVE-2018-17199, CVE-2018-19395, CVE-2018-19396, CVE-2018-19520, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-9517, CVE-2020-11985, CVE-2020-11993, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-39275, CVE-2021-40438, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-2569009/04/2026, 06:30:53tencent.com
134.209.23.•••:443 - 🇬🇧 United Kingdom Yes true Clean AS14061DigitalOcean, LLCDigitalOcean05/04/2026, 17:15:4414/04/2026, 23:19:53 No Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272809/04/2026, 01:07:52-
43.138.208.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing05/04/2026, 17:15:4309/04/2026, 08:38:36 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161706/04/2026, 00:53:45tencent.com
103.47.227.•••:18789 - 🇸🇬 Singapore Yes true Leaked AS6364Atlantic.net, Inc.Atlantic.Net05/04/2026, 17:15:4317/04/2026, 23:59:16 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198506/04/2026, 00:53:49atlantic.net
204.168.209.•••:80 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner05/04/2026, 17:15:4315/04/2026, 01:35:59 - - ----
154.92.19.•••:50000 - 🇭🇰 Hong Kong Yes true Clean AS142403YISU CLOUD LTDYisu Cloud Ltd05/04/2026, 17:15:4317/04/2026, 01:51:27 No Yes APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, goziCVE-2006-20001, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-3272806/04/2026, 00:53:53-
3.145.43.•••:443 - 🇺🇸 United States Yes true Clean AS16509Amazon.com, Inc.Amazon05/04/2026, 17:15:4317/04/2026, 10:06:21 No No -CVE-2016-20012, CVE-2021-36368, CVE-2021-4161706/04/2026, 00:58:27-
20.224.242.•••:443 - 🇺🇸 United States Yes true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:15:4316/04/2026, 01:23:54 No No --31/03/2026, 01:03:04-
183.129.114.•••:6789 - 🇨🇳 China mainland Yes true Clean AS4134ChinanetChinaNet Hangzhou05/04/2026, 17:15:4306/04/2026, 00:46:02 No No --31/03/2026, 01:03:08-
38.127.47.•••:18789 - 🇺🇸 United States Yes true Clean AS18978Enzu IncEnzu05/04/2026, 17:15:4317/04/2026, 23:58:11 No No -CVE-2021-41617, CVE-2018-15473, CVE-2020-14145, CVE-2020-15778, CVE-2023-48795, CVE-2016-20012, CVE-2023-38408, CVE-2019-6109, CVE-2019-6111, CVE-2018-20685, CVE-2017-15906, CVE-2018-15919, CVE-2021-36368, CVE-2023-51385, CVE-2019-611006/04/2026, 01:07:32-
2409:8a28:255a:c2b0:cf8a:8b49:e3bf:2faa:18789 - 🇨🇳 China mainland - true Clean AS56041China Mobile communications corporationChina Mobile05/04/2026, 17:15:4206/04/2026, 00:46:01 - - ----
2409:8a28:6215:61b0::7e4:18789 - 🇨🇳 China mainland - true Clean AS56041China Mobile communications corporationChina Mobile05/04/2026, 17:15:4206/04/2026, 00:46:01 - - ----
8.137.32.•••:18789 - 🇸🇬 Singapore Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud05/04/2026, 17:15:4206/04/2026, 00:46:01 - - ----
104.131.188.•••:18789 - 🇺🇸 United States Yes true Clean AS14061DigitalOcean, LLCDigitalOcean05/04/2026, 17:13:3605/04/2026, 21:44:01 - - ----
106.12.74.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS38365Beijing Baidu Netcom Science and Technology Co., Ltd.Baidu05/04/2026, 17:13:3612/04/2026, 18:38:38 Yes Yes APT17, APT37, DragonFly, El-Machete, Gozi, PackratCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198512/04/2026, 16:24:19baidu.com
20.196.193.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:13:3605/04/2026, 21:44:01 - - ----
4.154.2.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:13:3506/04/2026, 05:12:33 - - ----
23.111.15.•••:18789 - 🇸🇬 Singapore Yes true Clean AS59253LEASEWEB SINGAPORE PTE. LTD.Leaseweb Asia Pacific05/04/2026, 17:13:3515/04/2026, 11:19:36 - - ----
149.30.198.•••:18789 - 🇺🇸 United States Yes true Leaked AS133199SonderCloud LimitedSolustack Limited05/04/2026, 17:13:3517/04/2026, 10:03:50 Yes No --09/04/2026, 07:54:40cogentco.com
107.167.5.•••:18789 - 🇺🇸 United States Yes true Clean AS46844SharktechSharktech05/04/2026, 17:13:3505/04/2026, 21:44:00 - - ----
47.109.72.•••:18789 - 🇨🇳 China mainland Yes true Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft05/04/2026, 17:13:3409/04/2026, 05:36:14 No Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138509/04/2026, 01:52:35-
20.225.145.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:13:3405/04/2026, 20:58:56 - - ----
47.82.212.•••:18789 - 🇺🇸 United States Yes true Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud05/04/2026, 17:13:3417/04/2026, 17:28:48 Yes No -CVE-2015-9253, CVE-2016-20012, CVE-2017-15906, CVE-2017-7272, CVE-2017-7963, CVE-2017-8923, CVE-2017-9225, CVE-2017-9229, CVE-2018-15473, CVE-2018-15919, CVE-2018-19395, CVE-2018-19396, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9637, CVE-2019-9638, CVE-2019-9639, CVE-2019-9641, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2022-31628, CVE-2022-31629, CVE-2022-4900, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 21:46:58hichina.com, alibaba-inc.com
51.83.130.•••:18789 - 🇵🇱 Poland - true Clean AS16276OVH SASOVH Poland05/04/2026, 17:13:3405/04/2026, 21:43:59 - - ----
47.237.203.•••:18789 - 🇺🇸 United States - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud05/04/2026, 17:13:3405/04/2026, 21:43:59 - - ----
129.121.87.•••:18789 - 🇺🇸 United States - true Clean AS31898Oracle CorporationOGTIPS105/04/2026, 17:13:3417/04/2026, 20:56:30 - - ----
8.219.173.•••:18789 - 🇸🇬 Singapore - true Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore05/04/2026, 17:13:3406/04/2026, 05:12:31 - - ----
2a02:4780:66:cab6::1:18789 - 🇧🇷 Brazil - true Clean AS47583Hostinger International LimitedHostinger05/04/2026, 17:13:3317/04/2026, 18:07:44 - - ----
204.168.169.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner05/04/2026, 17:13:3314/04/2026, 10:31:53 - - ----
2a01:4f8:151:534a:43::a:18789 - 🇩🇪 Germany - true Clean AS24940Hetzner Online GmbHHetzner05/04/2026, 17:13:3305/04/2026, 21:43:58 - - ----
47.129.227.•••:18789 - 🇸🇬 Singapore - true Leaked AS16509Amazon.com, Inc.Amazon Web Services05/04/2026, 17:13:3312/04/2026, 00:46:58 Yes - --08/04/2026, 04:51:38amazon.fr, bookworm.com, amazon.com.br, audible.com, lovefilm.com, amazon.eu, amzaon.com, amazaon.com, audible.in, z-exp.com, amozon.com, aws-amazon.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, amazonaws.cm, com.be, amazonpay.com, rooftopmedia.net, vine.com, imdb.com, ssl-images-amazon.com, amazon.com.au, amazon-rings.com, assoc-amazon.com, amazonin.com, amzn.asia, annapurnalabs.com, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, amazon.ae, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, amazon-aws.com, endless.com, amazonlocal.com, amazonm.com, amazonllc.com, media-imdb.com, amazon.com.tw, createspace.com, amazonaws.com, amzn.com, amazon.com, images-amazon.com, amazon.com.co
204.168.179.•••:18789 - 🇫🇮 Finland Yes true Clean AS24940Hetzner Online GmbHHetzner05/04/2026, 17:13:3217/04/2026, 10:03:43 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 09:05:18-
43.134.96.•••:18789 - 🇸🇬 Singapore - true Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay05/04/2026, 17:13:3218/04/2026, 00:40:48 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 19:27:34tencent.com
115.190.142.•••:18789 - 🇨🇳 China mainland Yes true Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology05/04/2026, 17:13:3217/04/2026, 04:49:03 Yes No --08/04/2026, 12:21:43gwbn.net.cn
42.194.139.•••:18789 - 🇨🇳 China mainland - true Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud05/04/2026, 17:13:3215/04/2026, 11:19:36 Yes Yes APT37, El-Machete-12/04/2026, 14:22:02tencent.com
43.155.137.•••:18789 - 🇸🇬 Singapore - true Clean AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd05/04/2026, 17:13:3215/04/2026, 12:43:51 - - ----
158.178.243.•••:18789 - 🇺🇸 United States Yes true Clean AS31898Oracle CorporationOracle Corporation05/04/2026, 17:13:3205/04/2026, 21:43:57 - - ----
104.46.230.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:13:3205/04/2026, 21:43:57 - - ----
175.0.66.•••:18789 - 🇨🇳 China mainland Yes true Leaked AS4134ChinanetChinaNet Hunan Province Network05/04/2026, 17:13:3111/04/2026, 10:51:45 Yes No --05/04/2026, 22:29:46bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
194.163.151.•••:18789 - 🇩🇪 Germany - true Clean AS51167Contabo GmbHContabo05/04/2026, 17:13:3016/04/2026, 01:20:17 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:30:04-
64.188.61.•••:18789 - 🇩🇪 Germany Yes true Clean AS210976Timeweb, LLPTaiwan Cloud05/04/2026, 17:13:3016/04/2026, 01:21:12 No No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:30:07-
52.231.66.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:13:3005/04/2026, 22:28:57 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161705/04/2026, 22:30:08-
149.30.197.•••:18789 - 🇺🇸 United States Yes true Leaked AS133199SonderCloud LimitedSolustack Limited05/04/2026, 17:13:3018/04/2026, 00:41:09 Yes No --05/04/2026, 22:30:12cogentco.com
172.67.214.•••:18789 - 🇺🇸 United States - true Leaked AS13335Cloudflare, Inc.Cloudflare05/04/2026, 17:13:3012/04/2026, 23:08:22 Yes No --05/04/2026, 22:30:14yielm.com, fuyuanwj.com, 10366092.com, wisdomxj.cn, multiinno.com, macrosfastening.com, liveathercules.com, jxxlxj.com, atrium-sa.com, gtcc.org, cplpress.com, bzabehavioral.com, chconseils.com, cgmprecast.com, cwsse.com.cn, woodtechfurnish.com, mediatecsrl.it, sdkyjt.net, luckyplastic.net, qmscrushing.com, bikeweeksa.com, brennertherapy.com, ics-line.com, greatnortherncounseling.com, lajollaendoscopy.com, flexipgroup.com, hzfeidi.com, fricksfashion.com, ahealingparadigm.com, xjkrx.cn, dittothailand.com, creamlanddairy.com, mentalhealthspecialists.net, woodgateneighbors.com, hbbygd88.com, efreyre.com, fuhuake.com, sanmanuel.com, skalafacade.com, cityfied.net, abpincorp.com, baystateendodontics.com, rightwaytrading.net, xintec.hk, verdebh.com, giftedandlit.com, istorsolutions.com, pnkshocks.com, meter.ln.cn, anlink.net, jxygcy.com, jekotrade.com, hmcxjc.com, jindianglass.net, shsinotech.com, vbankph.com, gipnutmeg.com, bopcon.com, 10366118.com, ytxweb.net, leduc-lubot.com, smcinternational.fr, alsuyar.net, wintersuninternational.com, mcconstructors.com, amarilloheartgroup.com, boyu-group.com, ekakitchen.com, drlokken.com, ruppsstorage.com, wisehousetech.com, cloudflare.net, benchmarkindustrial.com, uniquestaxidermy.com, qd-baolian.com, csofam.com, gatorchucks.cn, svtranspro.com, mpm.com, kidsbud.net, innfos.cn, moto-privee.com, jxlingtong.com, oliveau-maconnerie.fr, etus.com.br, les-petites-bretonnes.fr, hiltscustomrifles.com, coffmancounseling.com, baselinewoods.com, omniquip.com, dataeverywhere.com, gjbbathrooms.com, goldmineandcoco.com, jiabinnu.com, myhongkongchef.co.uk, plainfieldwis.com, odc-industries.com, yaamava.com, alghanitex.com, qzz.io, dehuiguangchang.cn, calipio.com, xjgudao.com, kfstock.com, jfmselfstorage.com, porcelainchina.net, brownsprinting.com, mclaughlincounselingswla.com, cyberscope.fr, m-printone.com, cloudhq-mkt6.net, lojapratique.com.br, forwardwirecloth.net, center4hopeandhealing.com, sanmanuelcareers.com, abamidwestltd.com, cclvcr.com, timing-tech.com, blendus.com.br, klmymmyc.com, xspotstorage.com, anorton.com, chinasand.net, pinnaclecenter.com, visionsource-dewittoptometrypc.com, hnbeixiang.com, chinayinshufood.com, neurobehavioralaustin.com, pureselects.com, symphonyts.com, leisonhk.com, refee.net, xjzljt.net, xjjingyoga.com, dongfanggufen.net, sxgas.net, wakechem.com, bdstraws.com, alexis.in, lifeworkswellnesscare.com, pratiqueemcasa.com.br, 1haojiyin.com, garage-auto-martinez.fr, lamaison-corse.fr, utcleeds.com, advancedrestclient.com, mubayyin.cn, gowithcd.com, sinotransfj.com, ozhouseprice.com, ahimsa-fund.com, dzrjx.net, doosanvinahaiphong.com, aptenonsjz.com, globalinternation.com, maryelexports.com, xjxhhydropower.com, fahrneyford.com, bluegrassnutrition.net, dawnportertherapy.com, drleemorand.com, detongwiremesh.com, inox3x.com, belindajudge.com, cadpipe.com, sanhoos.com, dldianfeng.cn, donnaschwartztherapist.com, gnvurbanart.com, dgclh.com, bamko.net, ausarabbusinesscouncil.com, simplycounseling.com, faithandhopetherapy.com, hansecontrol.com, lstcarbon.com, keshardeo.com, eastsacflorist.com, it.com, energetica-pv.com, peliculasreligiosas.com, ttstest.com, newhollandford.com, imperialsprinkler.com, wholeselfpsychotherapy.com, iscsurfaces.com, mackenzieccs.com, qualityfitnessmukilteo.com, gaetanasnyc.com, riverinafielddays.com, serichai.com, oukay.net, helpinghandsinspirehappyhearts.com, gsportspt.com, paulasiegelmft.com, irrigationsystems4u.com, southernlights.com, forresterlincoln.com, aigmf.com, elite-kg.edu.hk, kathleenokeefelcsw.com, yhjgkeji.com, u-saveselfstorage.com, arcosmartsensor.com, beiyuecheng.com, experts-ffg.fr, socalpowwow.com, triokaraoke.com, ashleywilliamscounselinginc.com, china-one.net, kingdisplay.net, jssd.net, duranttool.com, eu.org, dawnthompsontherapy.com, bierte.com, lasvegasnvtherapist.com, garage-eiffel.fr, jadzdjm.com, clinicacolumbia.com, pesasybalanzas.com, inoxydable-consult.com, partnersinchangeco.com, greenlatex.com, com.de, ttyt360.com, elmerhareford.com, gelais.com, integrative-practices.com, atsengineering.net, advancedpsychologicalwellness.com, laserpeak.com, crozatier.com, herculesind.com, zgkaite.com, turnoutservices.com, xcom-mc.fr, 0991df.net, cansoford.ca, szlis.com.cn, brinsonfordlincolnofathens.com, zjdddl.com, xjpingjie.com, tacticalfirearmsandarchery.com, aciervanguard.com, ranscustombuilders.com, miscellaneous-metals.com, skill1999.com, reliancemediaworks.com, dorobou-nikki.com, dynamic-source.com, bridgesandpathways.com, buckleighwilliams.com, joyceweckl.com, santotomasport.com.gt, shinkonggroup.com, hotel-beausejour-nevers.fr, christianchanges.com, voiceofhaircare.com, oracle-ag.ch, triade.pro, eyes-armour.com, zjhrbz.com, zhaowoo.net, jiangsufuji.com, famekeeda.com, bentonford.com, iexpertify.com, pratiquefit.com.br, anmarinternational.com, biocosmesibb.it, bestwanhui.com, bearspringshotel.com, dino-official.com, koinos-pistoia.it, carinaevinos.com, domainedelagarenne-morestel.fr, uniquedesignsbytina.com, gunguntextiles.com, fermeurop.fr, bain86.com, fxgowin.com, carrieamorrisonpsyd.com, agriglobalcommodity.com, fnds3000.com, aseedofhopecounselingcenter.com, beecircular.org, lensmam.com, drdavidblackmon.com, m-dnc.com, call4mac.com, humandynamicsinc.net, thepsila.com, workers.dev, restorecontrol.co.uk, spumanterestaurant.com, 10366110.com, force-interim.com, indianscientificgoods.com, newoceanfood.com, jcconfection.com, shilohcounselingservices.com, qualitymotorsindependence.com, patriotpreston.com, dechuangjixie.com, cnkejie.com, benchmarkinc.com, cougnaud.com, 8189330.cn, tigerexpressfuel.com, jinpac.com, chestershd.com, p49deesign.com, 360-xj.com, rpmwatercraft.com, delraybeachcounseling.com, xjwfcj.com, oishiisushi.dk, polywoodoutdoor.com, adamgrindlinger.com, 178162.com, labocaine.com, pollyholding.com, anhuaabrasives.net, petdairy.com, isolation-maisons-provencales.fr, counselingwellnesscenter.com, french-atlantic-island.com, impresosmonterrey.com, shworldbest.com, magispharma.it, liyubelt.net.cn, zsnet.net, dongguansenzi.com, carmaxbolivia.com, denis-carrelage.fr, sdfengze.net, mrc.co, gerriwaylandcounseling.com, granger-michel.com, jjshawcounseling.com, empreintes-coiffure.fr, flushbottomvalves.net, china114.net, cqtools.com.au, 970storage.com, megaadvance.com, olivet-business-center.fr, timelesscounseling.com, occalamance.com, dts-renovation.fr, hy189.net, deloresmowertherapist.com, garnetford.com, dharacg.com, twoosk.com, chinakangtai.net, sainthimat.com, bfreecocktailbar.com, polywoodinc.com, xjhongshun.com, prestigestarcarpet.com, malevaut-naud.com, geochem.org, dkrausfootprints.com, food-machines.net, samvaad.co, esssyntech.com, equinaceaprodutosnaturais.com, innovativeskilledtherapyservices.com, drpetertemple.com, dmln.net, obcauto.com
138.252.249.•••:18789 - 🇲🇾 Malaysia Yes true Clean AS139923ABCCLOUD SDN.BHD.[name redacted]05/04/2026, 17:13:3005/04/2026, 23:13:38 - - ----
20.48.33.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:13:3005/04/2026, 22:28:57 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:30:20-
45.197.146.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS134365Ansheng Network Technology Co., LimitedOneFiveEight Cloud Computing05/04/2026, 17:13:3015/04/2026, 13:28:51 No Yes APT37, El-Machete-05/04/2026, 22:30:25-
43.250.173.•••:18789 - 🇭🇰 Hong Kong Yes true Clean AS62468VpsQuan L.L.C.HK United05/04/2026, 17:13:3005/04/2026, 22:28:57 - - ----
20.98.220.•••:18789 - 🇺🇸 United States - true Clean AS8075Microsoft CorporationMicrosoft05/04/2026, 17:13:2905/04/2026, 22:28:57 No Yes APT-C-23, APT32, APT36, APT37, Careto APT, Emennet Pasargad, Emennet Pasargard, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Lazarus Group, MuddyWater Group, Sea Turtle Group, Silence Hacker Group, Turla APT Group, Volt Typhoon, WildCard APTCVE-2016-6816, CVE-2016-6817, CVE-2016-8735, CVE-2016-8745, CVE-2017-12617, CVE-2017-5647, CVE-2017-5648, CVE-2017-5650, CVE-2017-5651, CVE-2017-5664, CVE-2017-7674, CVE-2017-7675, CVE-2018-11784, CVE-2018-1304, CVE-2018-1305, CVE-2018-1336, CVE-2018-8014, CVE-2018-8034, CVE-2018-8037, CVE-2019-0199, CVE-2019-0221, CVE-2019-0232, CVE-2019-10072, CVE-2019-12418, CVE-2019-17563, CVE-2019-2684, CVE-2020-11996, CVE-2020-13934, CVE-2020-13935, CVE-2020-13943, CVE-2020-17527, CVE-2020-1935, CVE-2020-1938, CVE-2020-8022, CVE-2020-9484, CVE-2021-24122, CVE-2021-25122, CVE-2021-25329, CVE-2021-30640, CVE-2021-33037, CVE-2021-41079, CVE-2021-43980, CVE-2022-25762, CVE-2022-42252, CVE-2023-28708, CVE-2023-41080, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648, CVE-2023-46589, CVE-2024-23672, CVE-2024-2454905/04/2026, 22:30:36-
103.250.10.•••:18789 - 🇸🇬 Singapore Yes true Leaked AS138608Cloud Host Pte LtdCloud Host05/04/2026, 17:13:2911/04/2026, 06:23:43 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347, CVE-2025-2341905/04/2026, 22:30:37daa-taa.com
43.163.233.•••:18789 - 🇸🇬 Singapore - true Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd05/04/2026, 17:13:2906/04/2026, 05:11:49 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:30:44tencent.com
80.225.213.•••:18789 - 🇺🇸 United States Yes true Leaked AS31898Oracle CorporationOracle Sweden05/04/2026, 17:13:2905/04/2026, 22:28:56 Yes No -CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198505/04/2026, 22:30:50healtheintent.com, purewellness.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, skire.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com
18.180.135.•••:18789 - 🇯🇵 Japan - true Clean AS16509Amazon.com, Inc.Amazon Web Services Japan05/04/2026, 17:13:2918/04/2026, 00:40:16 No No --30/03/2026, 22:31:04-