🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 893 / 10768 (100 per page) Showing: 89201-89300 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 182.88.151.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Guangxi | 03/07/2026, 14:43:44 | 03/07/2026, 21:08:45 | No | No | - | - | 27/06/2026, 21:08:59 | - |
| 54.251.144.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:43:44 | 04/07/2026, 12:50:24 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 21:09:02 | - |
| 103.236.80.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS134768 | CHINANET SHAANXI province Cloud Base network | Sichuan Xiaoteyun Technology | 03/07/2026, 14:43:43 | 03/07/2026, 21:08:45 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 21:09:06 | cnnic.cn |
| 47.90.209.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud US | 03/07/2026, 14:43:43 | 15/07/2026, 13:36:11 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 21:09:09 | - |
| 45.126.43.•••:18789 | - | 🇮🇩 Indonesia | Yes | true | Clean | AS151592 | PT Awan Data Teknologi | Awan Data Teknologi | 03/07/2026, 14:43:42 | 10/09/2026, 14:51:38 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 21:09:20 | - |
| 193.23.3.•••:18789 | - | 🇱🇻 Latvia | Yes | false | Clean | AS9002 | RETN Limited | Beget LLC | 03/07/2026, 14:43:42 | 03/07/2026, 21:51:38 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 21:09:21 | beget.ru |
| 120.195.25.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS56046 | China Mobile communications corporation | China Mobile | 03/07/2026, 14:43:41 | 12/07/2026, 18:58:21 | Yes | No | - | - | 03/07/2026, 21:09:27 | chinamobile.com, chinamobile.cn |
| 47.103.153.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 03/07/2026, 14:43:41 | 10/09/2026, 10:32:14 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2024-7347 | 03/07/2026, 21:09:30 | - |
| 2a02:c207:2338:5178::1:18789 | - | 🇫🇷 France | - | false | Clean | AS51167 | Contabo GmbH | Contabo | 03/07/2026, 14:43:40 | 10/07/2026, 13:22:57 | - | - | - | - | - | - |
| 213.189.216.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS44128 | Internet-Pro LLC | Internet Pro Net | 03/07/2026, 14:41:44 | 06/08/2026, 02:46:12 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2017-15945, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2020-28007, CVE-2020-28008, CVE-2020-28009, CVE-2020-28010, CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014, CVE-2020-28015, CVE-2020-28016, CVE-2020-28018, CVE-2020-28019, CVE-2020-28021, CVE-2020-28022, CVE-2020-28023, CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2021-23017, CVE-2021-27216, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-38371, CVE-2021-41617, CVE-2022-31625, CVE-2022-31626, CVE-2022-31628, CVE-2022-31629, CVE-2022-31630, CVE-2022-37451, CVE-2022-37452, CVE-2022-37454, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2023-51766, CVE-2024-39929, CVE-2024-7347 | 03/07/2026, 14:45:18 | - |
| 240e:3a3:1400:6b40::156d:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 03/07/2026, 14:05:02 | 10/07/2026, 09:11:15 | - | - | - | - | - | - |
| 54.71.237.•••:80 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:05:01 | 04/07/2026, 00:03:49 | Yes | No | - | - | 03/07/2026, 20:30:59 | intellect.com |
| 186.10.144.•••:18789 | - | 🇨🇱 Chile | Yes | false | Leaked | AS27651 | ENTEL CHILE S.A. | Entel Chile | 03/07/2026, 14:05:01 | 27/07/2026, 23:36:18 | Yes | No | - | - | 03/07/2026, 20:31:00 | entel.cl |
| 50.6.6.•••:80 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Website Welcome | 03/07/2026, 14:05:01 | 13/07/2026, 05:00:41 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 20:31:03 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 112.193.99.•••:6443 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Sichuan | 03/07/2026, 14:05:01 | 04/07/2026, 00:47:06 | Yes | No | - | CVE-2014-4078, CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 03/07/2026, 20:31:07 | opengw.net, cloudcorerouter.com, dvrdydns.com, crabdance.com, lovense.club, chinaunicom.cn |
| 3.27.203.•••:18789 | - | 🇦🇺 Australia | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Corporate Services | 03/07/2026, 14:05:00 | 10/09/2026, 04:13:29 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 20:31:10 | - |
| 54.169.234.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:05:00 | 04/07/2026, 15:46:10 | No | No | - | - | 27/06/2026, 20:31:13 | - |
| 54.169.111.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:05:00 | 04/07/2026, 08:37:43 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 20:31:14 | - |
| 157.230.1.•••:80 | - | 🇺🇸 United States | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 03/07/2026, 14:05:00 | 07/07/2026, 05:55:23 | Yes | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2023-5824, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-39894, CVE-2024-45802, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-54574, CVE-2025-59362, CVE-2025-61984, CVE-2025-61985, CVE-2025-62168, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 20:31:17 | duckdns.org |
| 51.44.178.•••:443 | - | 🇫🇷 France | Yes | false | Clean | AS16509 | Amazon.com, Inc. | A100 Row Inc | 03/07/2026, 14:04:59 | 04/07/2026, 08:37:42 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 20:31:21 | - |
| 47.131.228.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:04:59 | 04/07/2026, 08:37:42 | - | - | - | - | - | - |
| 82.207.232.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS8881 | 1&1 Versatel GmbH | VT Customer Pool | 03/07/2026, 14:04:59 | 04/07/2026, 00:47:04 | Yes | - | - | - | 03/07/2026, 20:31:28 | 1und1.net, versatel.de |
| 85.234.84.•••:18789 | - | 🇱🇺 Luxembourg | Yes | false | Clean | AS199524 | G-Core Labs S.A. | G-Core Labs Customer | 03/07/2026, 14:04:59 | 13/08/2026, 04:39:22 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 20:31:29 | - |
| 13.229.53.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:04:59 | 04/07/2026, 08:37:40 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 03/07/2026, 20:31:30 | - |
| 47.129.253.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:04:58 | 04/07/2026, 08:37:40 | - | - | - | - | - | - |
| 63.183.68.•••:443 | - | 🇩🇪 Germany | Yes | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 03/07/2026, 14:04:58 | 04/07/2026, 00:47:03 | No | No | - | - | 27/06/2026, 20:31:36 | - |
| 18.220.108.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:04:58 | 06/09/2026, 18:07:31 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-29323 | 03/07/2026, 20:31:39 | parkingbnb.world |
| 50.6.9.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Newfold Digital | 03/07/2026, 14:04:58 | 22/07/2026, 05:22:08 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 20:31:41 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 129.121.115.•••:80 | - | 🇺🇸 United States | Yes | true | Leaked | AS31898 | Oracle Corporation | OGTIPS1 | 03/07/2026, 14:04:57 | 09/09/2026, 21:48:23 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 02/08/2026, 19:25:33 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, mybluehost.me, dotster.com, bluehost.com |
| 172.67.211.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS13335 | Cloudflare, Inc. | Cloudflare | 03/07/2026, 14:03:20 | 06/07/2026, 19:50:07 | Yes | No | - | - | 03/07/2026, 19:04:44 | logyscal.com, streamshop.com, vpnserver.com, bauerspecialty.com, keentek.kz, shenji-titanium.com, fuyuanwj.com, bellavidalaser.com, applications.com, educorp.com, vcorp.com, themontessoritree.com, assessoriagarvi.com, tecoskydmd.com, jxxlxj.com, andertondental.com, styled.fr, raiolanetworks.com, convoy.co.uk, dereksteinbacher.com, tamtampercusion.com, frprongxanh.com, ashley.fr, albalandgroup.com, catuan.net, alinutripet.com.br, rhmtrailers.com, nutrive.com.br, contentmanager.com, cgmprecast.com, tenxtenx.com, ghaythhammadmd.com, arturosanchez.com, uch.co.uk, miinyih.com, cwsse.com.cn, weareknitters.com, leap.fr, lartigianous.com, byteboard.com, sdkyjt.net, luckyplastic.net, holidayinnfresno.com, entelegis.com, tecnicasuloa.com, ics-line.com, forumcorp.com, dataloop.com, brickelldentalassociates.com, feroxathletics.com, 51yuezhi.com, erinfamilydental.com, hzfeidi.com, ligneblanche.fr, aiden-vn.com, oxigendc.com, pelomaniafrederick.com, filtraglass.com, erbium.fr, alinutri.ind.br, anhbac.com, hghj.com, daliadental.com, msdx.com, soloepis.com, salonnews.com, gws.fr, fricksfashion.com, daso.fr, energyservices.com, sisigf.com, butlerbuilds.com, hoyavision.com.ar, quatangthanhdong.com, parisbrest.fr, maxwellcoachco.com, mobeus.com, bodywisdomchiropractic.com, youthstream.com, printa-cal.com, sencakorthodontics.com, hbbygd88.com, thepayiks.com, fuhuake.com, cityfied.net, zcmp.com, kanesolriver.com, playergroup.com, abpincorp.com, hesgroup.kz, smartloop.com, davinciskygroup.com, globalsolutions.com, rightwaytrading.net, xintec.hk, factotum.fr, isaksoninitiative.com, informationsystems.com, alinutriagro.com.br, fujiyama.fr, karla-gutierrez.com, energypoints.com, meter.ln.cn, des-cpa.com, cxdingli.com, billingcenter.com, congtyhungquoc.com, eurospainconsulting.com, anlink.net, airportkzo.kz, laravital.com, globalexchange.net, jxygcy.com, pxc.co.uk, yac-agcc.com, ucprints.com, tourservices.com, jekotrade.com, nitro.fr, hmcxjc.com, hmi-iml.com, originalsoulvegetarian.com, metrosteelfl.com, altys.fr, shsinotech.com, shczhsyy.com, perfetto.fr, a-vos-souhaits.fr, eng-center.kz, vbankph.com, elrafel.com, qhf820.com, gipnutmeg.com, drinkopus.com, bopcon.com, jck.co.uk, lesmouettes.fr, jiuliproduce.com, tscar.pt, vulcanizadosruiz.com, ytxweb.net, tds-solutions.com, crystal-refractory.com, eurobank.com, bacalaorafols.com, alsuyar.net, graphicconnection.com, pacificpulm.com, kopbprbumiarta.com, go-digerati.com, paolino.fr, utg.kz, xiaoshejia.com, preventionlady.com, igualiaformacion.com, crossolutions.com, aurus.fr, campmgmt.com, aestheticrevolution.com, cayman.fr, itradeonline.com, mpls.org, testlabs.com.au, apartamentosturisticostudela.com, twyaoway.com, audiencegain.net, wecastnetworkinc.com, etz.co.uk, gdheyin.com, boyu-group.com, lateteailleurs.fr, fiyanoventures.com, realmakeronline.com, sunglotech.com, leonne.fr, ekakitchen.com, minhkhanhcomputer.com, carleaseusa.com, aspireal.com, taxi321.com, difrenos.com, apropos.fr, guanlidq.com, fn8group.com, jyskaiyue.com, wisehousetech.com, thietkethanhan.com, lithiumconcrete.com, metrocentre.co.uk, boscobelpharmacy.com, cloudflare.net, jonlomberg.com, langerpump.com, eustaquiocanto.com, pontoon.fr, parkcircledental.com, fitandbendy.com, teslaexploration.com, ohe.fr, vur.co.uk, midstatemachining.com, ceostream.com, induo-textile.com, channel.net, toproaccounting.com, qd-baolian.com, csofam.com, wireandcableconnection.com, ttjgroupllc.com, adrcenterfordevelopment.com, gatorchucks.cn, handyman.com, instorervstorage.com, hanofoods.com, sakatainxsz.com, activ.fr, elsoldeantequera.com, galleryconnection.com, jstream.com, machinesummit.com, rhyt.com, 4starroofing.com, globalventures.com, kidsbud.net, horizm.com, lebistrotduport.fr, loitoan.com, sherry.fr, innfos.cn, ciemam.com, thietbixaydunglamtung.com, ourlike.net, brainspinemd.com, govcoin.com, jupitersignals.com, jxlingtong.com, industrialprocesadorasantay.com, kennysimpsonnissan.com, nutriave.com.br, fpk.co.uk, elreflejo.com, namingsystem.com, ronglianjr.com, nette.fr, merrittrealtyhomes.com, calsolfer.com, herolaboratoriesph.com, presoteaus.com, smart-medicalservices.com, latecmc.com, ss-web.com, pathfinderconsultingllc.com, tekleigh.com, jpsrepair.com, baselinewoods.com, vpicvietphat.com, luxuryventures.com, precision.fr, juliancafe.com, hc0798.com, jte.co.uk, easyins.net, oriane.fr, referral.com, helixpublicity.com, yin.fr, jiabinnu.com, ongnhuamemloithep.com, turnerconcreteinc.com, caldergroup.eu, devil.fr, littlevenicemfg.com, thamesvalleysummer.com, sciencesuite.com, domofilm.com, bulgaria-offroad.com, spreadsheet.co.uk, michelange.fr, alghanitex.com, ez-dentist.com, christen.fr, qzz.io, birminghamneograft.com, webinfinity.nz, lendstream.com, pirineos.com, isotope.fr, giahungtech.com, dehuiguangchang.cn, christianapleasantdental.com, incidence.fr, fresconeedham.com, careagent.com, xjgudao.com, measurenet-tech.com, sgarlatpublicity.com, telos.fr, kfstock.com, wakedayspa.com, gransierassociates.com, sanson.fr, pym.co.uk, ibeslab.com, vbuilders.com, terrabellacommunities.com, hamletdavaridds.com, markbaumann.com, brownsprinting.com, oceans.fr, grupodelasheras.com, pacolopez.com, phutho.work, gaoxinhuanbao.cn, m-printone.com, atomes.fr, fanoia.com, zach.fr, rivalcorp.com, cloudhq-mkt6.net, planemodel.cn, decaeum.com, storia.fr, meldmedia.net, abmdental.com, agilesd.com, medipointhospital.com, laplazadental.com, pctlabresearch.com, t-zoneland.com, vayavision.com, socialsuite.com, forwardwirecloth.net, jworldsport.com, rtry.com, filtrationsystemsms.com, estanteriasjerez.com, fgb.co.uk, songhycas.com, irvinevolcano.com, alston-tech.com, ninokyo.com, cclvcr.com, timing-tech.com, wxkewei.com, globalassetsolutions.com, anichemspeciality.com, unitedrehabproviders.com, lepicier.fr, klmymmyc.com, editorialnazari.com, chinasand.net, jindalengravures.com, homemaintenance.com, rightitfax.com, noon.fr, residenciadeancianosensevilla.com, gydz.net, efi.fr, aquastorenw.com, gzfantai.net, muabanten.com, unterrifieddemocrat.com, studyinchina.io, evenlan.com, compassionatecounselingcompany.com, scienceofspeed.org, varescontracting.com, escudodigital.com, jefferys.co.uk, sap-tech.com, hibetw.com, uho-fp.com.tw, xweiying.com, chunxinghejin.com, dcautomotiveomaha.com, sktind.com, infracollab.com, mayhoangtung.com, tadalafilanx.com, bloomingsmilesdentalpa.com, fidentallab.com, dexceldigitalhub.com, hnbeixiang.com, mingstone.net, mondi.fr, turlututu.fr, flaneur.fr, teppanyaki.fr, avc.fr, gialoilongan.com, caletc.com, phase-line.com, leisonhk.com, refee.net, xjzljt.net, belzuz.com, konnvex-tools.com, xjjingyoga.com, mandarin.fr, gpchain.com, dongfanggufen.net, sxgas.net, citchennai.edu.in, goin-vn.com, wakechem.com, coronde.net, zenna.fr, delco-construction.com, fdfederal.com, vsun-solar.com, indonga.net, amedee.fr, sasmtm.com, echap.fr, hansel.fr, cyberlotus.com, paques.fr, 1haojiyin.com, customerprofile.com, downtowndentalinc.com, yitongqingjie.com, sinotransfj.com, serio.fr, mudanzaspt.com, vrgkhaihoan.com, aibituo.net, dzrjx.net, tjwipes.net, leddartech.com, interpraise.com, dgmiberoamerica.com, talleresvillegas.com, readystaffing.com, aptenonsjz.com, nada.fr, ventureos.com, cofcohg.com, code-china.com, malibupress.com, imobile.com, paroledeviequebec.com, contrib.com, inmokeys.com, faempal.com, athenee.fr, learningwire.com, akina.fr, tallerescodi.com, leixinfoods.net, jamesonsfloralpark.com, burbankdentalarts.com, detongwiremesh.com, goldplateck.com, amv.com.ar, lisabain.com, scorpius.fr, umberto.fr, sunshinedentistry.com, essex.fr, qdcl.com, tradingcorp.com, eshares.com, hardi.fr, sanhoos.com, dldianfeng.cn, vikingswsolutions.com, thanhcongmarble.com, isola.be, martinezcasitas.com, hkplasticviet.com, gruposolvanto.com, dgclh.com, bamko.net, ausarabbusinesscouncil.com, fabi.fr, inventaire.fr, tme.kz, bopeland.kz, lstcarbon.com, simplamo.com, cristaleriatori.com, geole.fr, butcherbox.com, it.com, hvacspareparts.com, voyagevietnammoto.com, explosive.co.uk, jumpingjacksevents.com, taiviet.net, kitchenservices.com, ttstest.com, carmivietnam.com, termoplasticosbenicarlo.com, tcvc.com.tw, vimedtec.com, china-ycgkjx.com, viettelsoftware.com, hanacans.com, itb.fr, pumpkin.fr, orchidees.fr, gaetanasnyc.com, lombardoslu.com, oukay.net, uenlwue.com, apo-led.com, properwebtechnologies.com, irrigationsystems4u.com, cuacuonanbinh.com, uicmarine.com, socialpoint.com, smilelineclinic.com, bnw163.net, ichiisoft.com, oremat.com, grupotegnair.com, yhjgkeji.com, splendid-hotel.fr, aerovertol.com, kdfnutraceuticals.com, beiyuecheng.com, newtownsquaredentist.com, cshczfz.com, realtydao.com, epckorealtd.com, mudraprinters.com, chinasotop.com, mql.co.uk, dogsparesort.com, commercialdiversified.com, sym.fr, china-one.net, gzshengjie56.com, prestigeautoservice.com, zehrendental.com, portcast.com, kingdisplay.net, ddlfc.com, alquilermaquinas.com, chuyenphatnhanhgiare.net, eu.org, alshawvoicebox.com, amilcar.fr, bierte.com, investcentre.com, gowestone.com, sabasportscricket.com, yangjiangshilimaoyi.com, jadzdjm.com, amaprop.com, wlm.co.uk, hadungcraft.com, chrl.com, pesasybalanzas.com, davidpeters.com, buildfolio.com, uhg.co.uk, poelmanresources.com, mero.fr, tailwindgroup.com, iptunnel.com, ttyt360.com, rgcinversiones.com.ar, floridacommercialfencing.com, avancemechanical.com, rayinmind.com, bycast.com, shhctsy.com, leadstream.net, cristinaquerol.com, cinnagen.com, ceramic.fr, nunezhandles.com, suministrosalso.com, hiltonforge.com, myi.co.uk, alinutripet.ind.br, jz5288.com, avantigreen.com, jyb.co.uk, nextvpanama.com, taskmgmt.com, jpdesigntheory.com, joylibros.com, transforminteractive.com, kalaifashions.com, access4.com, jason.fr, servicetech.com, pioneersunlimited.com, appstyx.com, atl-az.com, vidrologic.com, xenanghanoi.com, hygroup.net, venturepub.com, partyworld.com, zgkaite.com, jinld.net, turnoutservices.com, inmueblescoronado.com, sport-goods.net, embutidosbierzo.com, zentel.com.tw, aldente.fr, szlis.com.cn, asfaplasticsurgery.com, storage.co.uk, zjdddl.com, curvedglassxxl.com, dvipcdn.com, dqkeyi.com, ranscustombuilders.com, invoice.co.uk, telecomanalysis.com, cheers.fr, logamdigital.com, mogultechmachining.com, integrityflorida.org, dannynguyen.net, ottleydental.com, gaoyimall.net, etxpba.org, bebek.kz, princewilliamsoundlodging.com, linked.com, mirror.fr, redmood-agency.com, drganim.com, antoanbp.com, oneway.fr, vwr.co.uk, cvifasm.com, proteologics.com, vnoc.com, lumoconsulting.com, casablanca.fr, thefighterattorney.com, ljgyp.net, fundchannel.com, filterswap.com, notarify.io, gjn.co.uk, szsbs.net, ludiana.com, fellowshipbatesville.com, thuanthienplastic.com, oracle-ag.ch, iberoforwarders.com, rconecta.com, eyes-armour.com, zjhrbz.com, zhaowoo.net, jiangsufuji.com, etra.fr, fzfortune.net, turndinc.com, funkbeatschool.com, bestirecorp.com, itmanage.net, arista.fr, mrandmrskebabsonline.com.au, mrz.co.uk, kokuageotech.com, s2p2law.com, piesbrand.com, cazcarra.com, eb5aig.net, grandplace.fr, orthoaplus.com, reservationcenter.com, towerhamlets.co.uk, synecticstrainers.com, transpacificvn.com, actuacee.com, pickfordseafood.com, asd-tec.com, vzn.co.uk, lanechangeconsulting.com, pasadena-homes.com, bestwanhui.com, inetstz.com, natasaspa.com, duran-alonso.com, 3500.com, sneakerdistrict.fr, nafsa.es, 3riversmusictherapy.com, jbw.co.uk, airlineprepschool.com, strenamedical.com, ruixingkuaiji.com, hkbolton.com, highcountrycheyenne.com, frogs.fr, cadastronacional.com, smtefo.com, gruposdm.com, comestibles.fr, 304fence.com, miracledentallab.com, electrode.fr, 869606.com, mark1airforce.com, inspireliterary.com, btrueb.com, sisfrete.com.br, goldenstream.com, bain86.com, picwictoys.com, fxgowin.com, flatbyartis.com, mymaldendentist.com, nash.fr, strongvalve.com, freda.fr, curtidosjacobogomez.com, theuniversityadvisor.com, zhujigema.net, corachanmaxilofacial.com, airtkt.com, interlan.com, kao.co.uk, photal.com.cn, myronschrockdmd.com, automations.com, giztec.com, handy.fr, luckywaymall.com, giaphuccorp.com, bank-easy.net, sankoreafrica.com, globalexport.com, aiglon.fr, taocimall.com, lyxt.com, fedcomm.com, inneuractive.com, enanzo.com, aout.fr, stonebrookfp.com, cariboo.fr, unita.kz, naniwavn.com, workers.dev, chaolipack.com, k9mask.com, districtor.com, deltapaintingandprefinishing.com, whzn.net, texans.com, diamondrefined.com.cn, gvrsystemsautomation.com, cqyjjj.net, reva.fr, newoceanfood.com, ltticorp.com, photochallenge.com, bjzthb.com, nimbletech.org, watershedwines.com.au, efay.com.tw, bmelabandscience.com, vdx.co.uk, nttdata-vds.com, dechuangjixie.com, b3elevation.com, cnkejie.com, reteck.net, talleractivo.com, callasent.com, alinutriagro.ind.br, marinehub.com, technos.fr, thenewthings.com, 8189330.cn, filmteck.com, plasticinjectionmolders.com, tigerexpressfuel.com, easylockselfstorage.com, buildcorp.com, audito.fr, lgsst.com, anmacvietnam.com, proximus.fr, uzin-metal.com, shredlab.com, zsrf.com, megatecnologia.com, maymacanphu.com, motossenda.com, petitspois.fr, demetrioyjavirentacar.com, 360-xj.com, miralomadental.com, smartremsolutions.com, businessmagazine.io, ntuptz.com, jucyvietnam.com, esepshi.kz, aicomplutense.com, techplatforms.ae, youreventsittersllc.com, disdal.com, xjwfcj.com, perfonec.com, eaststeel.net, ateoenergies.com, aspenridgeequine.com, appservice.com, sglcfj.com, tedescoauctions.com, castillianfoods.com, arrowcon-energy.com, helpstream.com, zealenvironmental.com, patentboard.com, 4dpioneers.com, constructionforum.com, lania.fr, pet-bottle.net, realtyconsultant.com, eduexpoastana.kz, trudesign.nz, importandexportspecializedequipmentandservicesinc.com, riofos.com, rathdrum.com.au, datacommunications.com, js-constructioninc.com, miamitelevision.com, disa.fr, cannabiscorp.com, impresosmonterrey.com, shworldbest.com, greensourceohio.com, exponentiel.fr, fotoidea.kz, liyubelt.net.cn, zsnet.net, medbrokers.com, topigx.com, dongguansenzi.com, gaolongan.com, ziboepe.com, kentacapital.com, galiciasea.com, omsheel.com, thundercloudlabs.net, energystorage.com, carmaxbolivia.com, ckxoh.com, sdfengze.net, fyinn.net, monreve.fr, codienthaison.com, cokhinamanh.com, china114.net, venturebuilder.com, chiefdiagnosticservices.com, vipersafetyinc.com, lassocountry.com, zanesvilledental.com, propetchina.com, platformtransition.com, 1800ventures.com, mariano.fr, vladimir.fr, exceptions.fr, hightech.net, bynavas.com, nova88bkk101.com, jing-shin.com, acuitybuilders.com, airfuture.com, investcapecod.com, vinagreenplus.com, houstmust.com, lavenderhotelvn.com, bkpeterson.com, hy189.net, erostours.com, northerncomforthvac.com, joulerestaurant.com, perudentalcare.net, ecasal.com, filatsserena.com, germanpool-nb.com, ike.fr, xtech.kz, randdmd.com, xjhongshun.com, virginiaradiation.com, ssammpack.com, isofh.com, alquilerordenadores.com, viameta.net, robertogarrudo.com, gazoline.fr, soplainfielddentalarts.com, lecottage.fr, southernbellepromo.com, ultimatespeaker.com, cornerstaffing.com, loginport.com, jilyphukhai.com, aleproca.com, geochem.org, food-machines.net, nguyenlieuvn.com, naturalstonefromspain.com, hoanggiapccc.com, greenviet.net, micks.co.uk, trespasosconsultores.com, equinaceaprodutosnaturais.com, lindsayfauverphotography.com, shieldengineering.com, alptech.fr, chothuemaylamda.com, dmln.net, shzhongyi.net, knowledgenetworks.com, jhtf.com, cartons.co.uk |
| 18.141.240.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:03:19 | 03/07/2026, 19:44:59 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:05:01 | - |
| 59.57.134.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 14:03:14 | 03/07/2026, 20:27:48 | Yes | No | - | - | 03/07/2026, 19:06:05 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 212.47.69.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS51167 | Contabo GmbH | Contabo | 03/07/2026, 14:03:14 | 13/08/2026, 19:46:10 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:06:06 | kcom.com, contabo.de, contabo.net |
| 240e:3a3:1400:6b40::156d:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 03/07/2026, 14:03:14 | 10/07/2026, 05:35:37 | - | - | - | - | - | - |
| 192.3.164.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS36352 | HostPapa | RackNerd | 03/07/2026, 14:03:13 | 15/07/2026, 12:11:00 | Yes | Yes | Salt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:06:12 | racknerd.com |
| 8.217.217.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 03/07/2026, 14:03:13 | 03/07/2026, 20:27:47 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:06:14 | - |
| 54.71.237.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:03:13 | 03/07/2026, 20:27:46 | Yes | No | - | - | 03/07/2026, 19:06:22 | intellect.com |
| 50.6.6.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS31898 | Oracle Corporation | Website Welcome | 03/07/2026, 14:03:12 | 13/07/2026, 00:42:13 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 19:06:25 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 112.193.99.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Sichuan | 03/07/2026, 14:03:12 | 03/07/2026, 20:27:45 | Yes | No | - | CVE-2014-4078, CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 03/07/2026, 19:06:29 | opengw.net, cloudcorerouter.com, dvrdydns.com, crabdance.com, lovense.club, chinaunicom.cn |
| 156.228.4.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS202437 | OCITOKEN::202437:1ac7fea5440f1f6a7b9f681fc060638ddfed95a1a74fda0938696f6a7d2d2ceb | Park Apps House | 03/07/2026, 14:03:12 | 13/08/2026, 19:46:13 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 19:06:34 | - |
| 3.27.203.•••:18789 | - | 🇦🇺 Australia | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Corporate Services | 03/07/2026, 14:03:11 | 09/09/2026, 22:29:00 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 19:06:35 | - |
| 54.169.234.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:03:11 | 04/07/2026, 12:52:24 | No | No | - | - | 27/06/2026, 19:06:37 | - |
| 54.169.111.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:03:11 | 03/07/2026, 20:27:44 | - | - | - | - | - | - |
| 157.230.1.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 03/07/2026, 14:03:11 | 07/07/2026, 02:59:48 | Yes | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2023-5824, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-39894, CVE-2024-45802, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-54574, CVE-2025-59362, CVE-2025-61984, CVE-2025-61985, CVE-2025-62168, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 07/07/2026, 00:54:07 | duckdns.org |
| 51.44.178.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 Row Inc | 03/07/2026, 14:03:11 | 04/07/2026, 05:01:51 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 04/07/2026, 03:40:14 | - |
| 161.118.236.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS31898 | Oracle Corporation | Oracle | 03/07/2026, 14:03:11 | 03/07/2026, 21:10:41 | - | - | - | - | - | - |
| 47.131.228.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:03:11 | 04/07/2026, 05:01:51 | - | - | - | - | - | - |
| 82.207.232.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS8881 | 1&1 Versatel GmbH | VT Customer Pool | 03/07/2026, 14:03:10 | 03/07/2026, 21:10:41 | - | - | - | - | - | - |
| 85.234.84.•••:18789 | - | 🇱🇺 Luxembourg | Yes | false | Clean | AS199524 | G-Core Labs S.A. | G-Core Labs Customer | 03/07/2026, 14:03:10 | 13/08/2026, 00:18:32 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 08/07/2026, 23:26:53 | - |
| 13.229.53.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:03:10 | 04/07/2026, 05:01:50 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 04/07/2026, 03:40:25 | - |
| 47.129.253.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:03:10 | 04/07/2026, 05:01:50 | - | - | - | - | - | - |
| 63.183.68.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 03/07/2026, 14:03:09 | 03/07/2026, 21:10:39 | - | - | - | - | - | - |
| 139.59.46.•••:18789 | - | 🇮🇳 India | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 03/07/2026, 14:01:25 | 19/07/2026, 09:10:04 | No | Yes | APT-C-23, APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, Turla APT Group, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13938, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-8022, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-27522, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-41080, CVE-2023-42794, CVE-2023-42795, CVE-2023-44487, CVE-2023-45648, CVE-2023-45802, CVE-2023-46589, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-23672, CVE-2024-24549, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 16:12:00 | - |
| 59.57.134.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Fujian | 03/07/2026, 14:01:24 | 03/07/2026, 20:25:55 | Yes | No | - | - | 03/07/2026, 16:12:05 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 212.47.69.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS51167 | Contabo GmbH | Contabo | 03/07/2026, 14:01:24 | 13/08/2026, 21:10:54 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 16:12:07 | kcom.com, contabo.de, contabo.net |
| 240e:3a3:1400:6b40::156d:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4134 | Chinanet | China Telecom IPv6 Broadband Address | 03/07/2026, 14:01:24 | 10/07/2026, 05:33:45 | - | - | - | - | - | - |
| 192.3.164.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS36352 | HostPapa | RackNerd | 03/07/2026, 14:01:24 | 15/07/2026, 12:52:38 | Yes | Yes | Salt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 16:12:11 | racknerd.com |
| 8.217.217.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 03/07/2026, 14:01:24 | 03/07/2026, 20:25:54 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 16:12:15 | - |
| 54.71.237.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:01:23 | 03/07/2026, 20:25:53 | Yes | No | - | - | 03/07/2026, 16:12:28 | intellect.com |
| 50.6.6.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS31898 | Oracle Corporation | Website Welcome | 03/07/2026, 14:01:22 | 13/07/2026, 00:40:22 | Yes | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 16:12:31 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 112.193.99.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Sichuan | 03/07/2026, 14:01:22 | 03/07/2026, 20:25:53 | Yes | No | - | CVE-2014-4078, CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 03/07/2026, 16:12:38 | opengw.net, cloudcorerouter.com, dvrdydns.com, crabdance.com, lovense.club, chinaunicom.cn |
| 156.228.4.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS202437 | OCITOKEN::202437:1ac7fea5440f1f6a7b9f681fc060638ddfed95a1a74fda0938696f6a7d2d2ceb | Park Apps House | 03/07/2026, 14:01:22 | 13/08/2026, 21:10:57 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 16:12:43 | - |
| 3.27.203.•••:18789 | - | 🇦🇺 Australia | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Corporate Services | 03/07/2026, 14:01:22 | 10/09/2026, 00:35:56 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 16:12:45 | - |
| 54.169.234.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:01:22 | 04/07/2026, 12:50:30 | No | No | - | - | 27/06/2026, 16:12:48 | - |
| 54.169.111.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 14:01:22 | 03/07/2026, 20:25:52 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 16:12:49 | - |
| 157.230.1.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 03/07/2026, 14:01:22 | 07/07/2026, 02:57:49 | Yes | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-36368, CVE-2021-41617, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-51767, CVE-2023-5824, CVE-2024-25111, CVE-2024-25617, CVE-2024-33427, CVE-2024-37894, CVE-2024-39894, CVE-2024-45802, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-54574, CVE-2025-59362, CVE-2025-61984, CVE-2025-61985, CVE-2025-62168, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 16:12:52 | duckdns.org |
| 51.44.178.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 Row Inc | 03/07/2026, 14:01:21 | 04/07/2026, 04:59:58 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 16:12:57 | - |
| 161.118.236.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS31898 | Oracle Corporation | Oracle | 03/07/2026, 14:01:20 | 03/07/2026, 21:08:49 | No | No | - | - | 27/06/2026, 16:13:04 | - |
| 47.131.228.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:01:20 | 04/07/2026, 04:59:58 | - | - | - | - | - | - |
| 82.207.232.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS8881 | 1&1 Versatel GmbH | VT Customer Pool | 03/07/2026, 14:01:20 | 03/07/2026, 21:08:49 | Yes | - | - | - | 03/07/2026, 16:13:08 | 1und1.net, versatel.de |
| 85.234.84.•••:18789 | - | 🇱🇺 Luxembourg | Yes | false | Clean | AS199524 | G-Core Labs S.A. | G-Core Labs Customer | 03/07/2026, 14:01:20 | 13/08/2026, 01:43:00 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 16:13:12 | - |
| 13.229.53.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:01:20 | 04/07/2026, 04:59:57 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 03/07/2026, 16:13:13 | - |
| 47.129.253.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 14:01:19 | 04/07/2026, 04:59:57 | - | - | - | - | - | - |
| 63.183.68.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 03/07/2026, 14:01:19 | 03/07/2026, 21:08:49 | No | No | - | - | 27/06/2026, 16:13:19 | - |
| 192.3.164.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS36352 | HostPapa | RackNerd | 03/07/2026, 13:59:25 | 05/07/2026, 09:30:18 | Yes | Yes | Salt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 14:45:05 | racknerd.com |
| 8.217.217.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 03/07/2026, 13:59:25 | 05/07/2026, 09:30:18 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 14:45:06 | - |
| 156.228.4.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS202437 | OCITOKEN::202437:1ac7fea5440f1f6a7b9f681fc060638ddfed95a1a74fda0938696f6a7d2d2ceb | Park Apps House | 03/07/2026, 13:59:24 | 15/08/2026, 13:16:37 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 14:45:07 | - |
| 54.169.111.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 13:59:24 | 05/07/2026, 09:30:18 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 03/07/2026, 14:45:08 | - |
| 51.44.178.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 Row Inc | 03/07/2026, 13:59:24 | 05/07/2026, 09:30:18 | No | No | - | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 14:45:10 | - |
| 161.118.236.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS31898 | Oracle Corporation | Oracle | 03/07/2026, 13:59:24 | 05/07/2026, 09:30:18 | No | No | - | - | 27/06/2026, 14:45:11 | - |
| 47.131.228.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 13:59:24 | 05/07/2026, 09:30:18 | - | - | - | - | - | - |
| 13.229.53.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 13:59:24 | 05/07/2026, 09:30:18 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 03/07/2026, 14:45:14 | - |
| 47.129.253.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 13:59:24 | 05/07/2026, 09:30:18 | - | - | - | - | - | - |
| 217.142.238.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS31898 | Oracle Corporation | Oracle Sweden | 03/07/2026, 13:22:50 | 10/09/2026, 01:22:54 | Yes | No | - | - | 03/07/2026, 15:33:04 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, skire.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com |
| 198.211.99.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 03/07/2026, 13:22:50 | 09/09/2026, 14:03:07 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-29323, CVE-2023-35784, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:33:05 | - |
| 118.195.216.•••:20445 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 03/07/2026, 13:22:50 | 04/08/2026, 11:27:47 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 03/07/2026, 15:33:08 | tencentcloud.com |
| 54.254.157.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Japan | 03/07/2026, 13:22:50 | 03/07/2026, 23:21:03 | No | Yes | APT-C-23, APT28, APT35, APT36, APT37, APT39, Carbanak, Cobalt Group, DarkHotel Group, Equation Group, Gamaredon Group, Ghostwriter, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2017-20005, CVE-2017-7529, CVE-2018-15473, CVE-2018-15919, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-20685, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-29323, CVE-2023-35784, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:33:10 | - |
| 117.173.158.•••:9001 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 03/07/2026, 13:22:50 | 02/08/2026, 22:11:31 | Yes | No | - | CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 15:33:11 | chinamobile.com, chinamobile.cn |
| 18.141.240.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 13:22:49 | 04/07/2026, 00:03:54 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:33:18 | - |
| 154.12.94.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Leaked | AS8796 | FASTNET DATA INC | FOJ IP Technology | 03/07/2026, 13:22:48 | 03/08/2026, 16:17:27 | Yes | - | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:33:28 | cogentco.com |
| 79.72.54.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle Sweden | 03/07/2026, 13:22:48 | 01/09/2026, 03:30:17 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 15:33:30 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oraclecloudservices.com, rsys2.net, hyperroll.com, orcale.com, oraclemobile.com, sun.co.in, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, oracleemaildelivery.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, skire.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, duckdns.org, dyndns.com, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, recruitmax.com, decisioneering.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com |
| 43.138.185.•••:443 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 03/07/2026, 13:22:48 | 31/08/2026, 03:08:36 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 03/07/2026, 15:33:34 | tencentcloud.com |
| 3.39.254.•••:443 | - | 🇰🇷 South Korea | Yes | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 03/07/2026, 13:22:48 | 01/08/2026, 03:08:12 | No | Yes | APT14, APT40, APT41, Gamaredon Group, Kimsuky, Lazarus Group, SharpPanda | CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617, CVE-2021-44224, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813 | 03/07/2026, 15:33:40 | - |
| 3.17.6.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 13:22:48 | 19/07/2026, 19:57:54 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 03/07/2026, 15:33:41 | - |
| 74.91.136.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Newfold Digital | 03/07/2026, 13:22:48 | 05/09/2026, 14:19:49 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:33:44 | athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com |
| 2409:8a00:79b2:d9a1::3af:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS56048 | China Mobile Communicaitons Corporation | China Mobile | 03/07/2026, 13:22:48 | 04/07/2026, 00:03:52 | - | - | - | - | - | - |
| 159.195.138.•••:18989 | - | 🇩🇪 Germany | Yes | false | Clean | AS197540 | netcup GmbH | Netcup | 03/07/2026, 13:22:48 | 16/07/2026, 14:53:33 | - | - | - | - | - | - |
| 52.221.230.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 03/07/2026, 13:22:47 | 04/07/2026, 01:29:57 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:33:52 | - |
| 43.217.96.•••:443 | - | 🇲🇾 Malaysia | Yes | true | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 03/07/2026, 13:22:47 | 10/09/2026, 12:01:02 | Yes | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 03/07/2026, 15:33:58 | amazonaws.com, amazon.com |
| 204.168.220.•••:18789 | - | 🇫🇮 Finland | Yes | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 03/07/2026, 13:22:47 | 25/08/2026, 12:36:26 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 03/07/2026, 15:34:02 | - |