🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 175 / 10768 (100 per page) Showing: 17401-17500 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 23/08/2026, 23:35:29 | 09/09/2026, 06:12:33 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 23/08/2026, 23:37:01 | - |
| 42.227.51.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 23/08/2026, 23:35:28 | 24/08/2026, 05:16:15 | Yes | No | - | - | 23/08/2026, 23:37:09 | chinaunicom.cn |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 23:35:28 | 08/09/2026, 20:59:24 | No | No | - | - | 17/08/2026, 23:37:12 | - |
| 218.68.99.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | Unknown | 23/08/2026, 23:35:28 | 26/08/2026, 19:53:35 | Yes | No | - | - | 23/08/2026, 23:37:14 | chinaunicom.cn |
| 38.38.161.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 23:35:27 | 27/08/2026, 15:35:32 | No | - | - | - | 17/08/2026, 23:37:15 | - |
| 104.207.75.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS22612 | Namecheap, Inc. | Namecheap | 23/08/2026, 23:35:27 | 30/08/2026, 06:22:16 | - | - | - | - | - | - |
| 140.188.153.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 23:35:25 | 07/09/2026, 22:49:41 | Yes | No | - | - | 23/08/2026, 23:37:29 | cogentco.com |
| 38.33.221.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 23:35:25 | 27/08/2026, 07:09:58 | No | Yes | APT1 Comment Crew, APT15, APT27, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Earth Longzhi, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon, WildCard APT | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-11358, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11022, CVE-2020-11023, CVE-2020-14145, CVE-2020-15778, CVE-2020-23064, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 23/08/2026, 23:37:34 | - |
| 2408:8459:d001:24d3::c8a:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS17816 | China Unicom IP network China169 Guangdong province | China Unicom | 23/08/2026, 23:35:23 | 24/08/2026, 05:58:48 | - | - | - | - | - | - |
| 79.14.225.•••:18789 | - | 🇮🇹 Italy | - | false | Clean | AS3269 | Telecom Italia S.p.A. | Telecom ADSL Pool Milano 2 | 23/08/2026, 23:35:23 | 24/08/2026, 05:58:47 | - | - | - | - | - | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 23:35:22 | 08/09/2026, 17:23:49 | No | No | - | - | 17/08/2026, 23:37:52 | - |
| 140.188.143.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 23:35:22 | 07/09/2026, 17:04:42 | Yes | No | - | - | 23/08/2026, 23:37:57 | cogentco.com |
| 42.227.51.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 23/08/2026, 23:33:28 | 24/08/2026, 06:39:51 | Yes | No | - | - | 24/08/2026, 01:45:13 | chinaunicom.cn |
| 218.68.99.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | Unknown | 23/08/2026, 23:33:27 | 26/08/2026, 21:18:38 | Yes | No | - | - | 24/08/2026, 01:45:17 | chinaunicom.cn |
| 104.207.75.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS22612 | Namecheap, Inc. | Namecheap | 23/08/2026, 23:31:24 | 01/09/2026, 01:14:02 | - | - | - | - | - | - |
| 62.234.111.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 23/08/2026, 23:31:24 | 25/08/2026, 23:54:30 | No | No | - | - | 18/08/2026, 05:13:36 | - |
| 88.208.243.•••:18789 | - | 🇬🇧 United Kingdom | - | false | Leaked | AS8560 | This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE. | Next Generation Cloud Server | 23/08/2026, 23:31:24 | 26/08/2026, 00:37:01 | Yes | Yes | APT-C-23, APT1 Comment Crew, APT10, APT15, APT19, APT27, APT28, APT29, APT30, APT33, APT34, APT35, APT37, APT39, APT40, APT41, APT5, AQUATIC PANDA, Antlion APT, BRONZE ATLAS, Bluenoroff, Bronze Butler APT, Buhtrap Group, Calypso APT, Carbanak, Cobalt Group, CopyKittens, DarkHydrus, DragonOK APT, Earth Berberoka, Energetic Bear, Equation Group, FIN6, Gamaredon Group, Greenbug Group, Hafnium Group, Inception Framework, Konni Group, Lazarus Group, Moses Staff APT, MuddyWater Group, Orangeworm, Sandworm Team, Silence Hacker Group, TA505, The Shadow Brokers, Thrip APT, Triton APT, Tropic Trooper, Volatile Kitten | CVE-2014-3562, CVE-2014-4650, CVE-2015-3456, CVE-2015-5741, CVE-2015-6815, CVE-2016-2124, CVE-2016-2183, CVE-2016-6662, CVE-2017-1000376, CVE-2017-5645, CVE-2017-9953, CVE-2018-1059, CVE-2018-10869, CVE-2018-10892, CVE-2018-10926, CVE-2018-1111, CVE-2018-1128, CVE-2018-1129, CVE-2018-14462, CVE-2018-14463, CVE-2018-14465, CVE-2018-14469, CVE-2018-14622, CVE-2018-14645, CVE-2018-14879, CVE-2018-14882, CVE-2018-16229, CVE-2018-16540, CVE-2018-16871, CVE-2018-17456, CVE-2018-18311, CVE-2018-20615, CVE-2018-3665, CVE-2018-3760, CVE-2018-5741, CVE-2018-5743, CVE-2018-5744, CVE-2019-10196, CVE-2019-11038, CVE-2019-11477, CVE-2019-11478, CVE-2019-14813, CVE-2019-14816, CVE-2019-14907, CVE-2019-19906, CVE-2019-3459, CVE-2019-3880, CVE-2019-5798, CVE-2019-6470, CVE-2019-6471, CVE-2019-6974, CVE-2019-7221, CVE-2019-7317, CVE-2020-10696, CVE-2020-10711, CVE-2020-10749, CVE-2020-10756, CVE-2020-10763, CVE-2020-14318, CVE-2020-14355, CVE-2020-14364, CVE-2020-14370, CVE-2020-14394, CVE-2020-15705, CVE-2020-15706, CVE-2020-15707, CVE-2020-1711, CVE-2020-25639, CVE-2020-25657, CVE-2020-25710, CVE-2020-25717, CVE-2020-25743, CVE-2020-27777, CVE-2020-27786, CVE-2020-27827, CVE-2020-35518, CVE-2020-35524, CVE-2020-8616, CVE-2020-8617, CVE-2020-8622, CVE-2020-8623, CVE-2020-8624, CVE-2020-8625, CVE-2021-20179, CVE-2021-20188, CVE-2021-20229, CVE-2021-20236, CVE-2021-20270, CVE-2021-25214, CVE-2021-25215, CVE-2021-25216, CVE-2021-25219, CVE-2021-25220, CVE-2021-32027, CVE-2021-3516, CVE-2021-3532, CVE-2021-3533, CVE-2021-3537, CVE-2021-3621, CVE-2021-3669, CVE-2021-3737, CVE-2021-3752, CVE-2021-4104, CVE-2021-41817, CVE-2021-44142, CVE-2021-45417, CVE-2022-0711, CVE-2022-1011, CVE-2022-1227, CVE-2022-1708, CVE-2022-2132, CVE-2022-2393, CVE-2022-2795, CVE-2022-2850, CVE-2022-2989, CVE-2022-2990, CVE-2022-32545, CVE-2022-32546, CVE-2022-32547, CVE-2022-38177, CVE-2022-38178, CVE-2023-2828, CVE-2023-3341, CVE-2023-4408, CVE-2023-50387, CVE-2023-5680, CVE-2024-1737, CVE-2024-1975, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 24/08/2026, 05:13:37 | fasthosts.co.uk |
| 79.14.225.•••:18789 | - | 🇮🇹 Italy | - | false | Clean | AS3269 | Telecom Italia S.p.A. | Telecom ADSL Pool Milano 2 | 23/08/2026, 23:31:24 | 26/08/2026, 00:37:01 | - | - | - | - | - | - |
| 140.188.150.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:54:41 | 08/09/2026, 22:27:05 | Yes | No | - | - | 24/08/2026, 01:06:11 | cogentco.com |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:54:41 | 08/09/2026, 11:40:29 | No | - | - | - | 18/08/2026, 01:06:13 | - |
| 38.38.161.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:54:40 | 27/08/2026, 16:19:42 | No | - | - | - | 18/08/2026, 01:06:16 | - |
| 193.181.210.•••:443 | - | 🇩🇰 Denmark | Yes | false | Clean | AS44803 | Webdock.io ApS | Webdock | 23/08/2026, 22:54:40 | 30/08/2026, 19:57:33 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 24/08/2026, 01:06:20 | - |
| 110.188.244.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 23/08/2026, 22:54:40 | 24/08/2026, 10:19:03 | No | No | - | - | 18/08/2026, 01:06:22 | - |
| 171.213.177.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 23/08/2026, 22:54:40 | 27/08/2026, 20:34:13 | No | No | - | - | 18/08/2026, 01:06:24 | - |
| 140.188.157.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:54:40 | 10/09/2026, 12:00:56 | Yes | No | - | - | 24/08/2026, 01:06:30 | cogentco.com |
| 140.188.153.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:54:39 | 07/09/2026, 23:34:33 | Yes | No | - | - | 24/08/2026, 01:06:35 | cogentco.com |
| 162.141.78.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS395839 | HOSTKEY | Hostkey | 23/08/2026, 22:54:39 | 10/09/2026, 12:00:54 | No | No | - | - | 18/08/2026, 01:06:36 | - |
| 182.120.116.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 23/08/2026, 22:54:38 | 24/08/2026, 10:19:02 | No | No | - | - | 18/08/2026, 01:06:42 | - |
| 111.76.46.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Jiangxi | 23/08/2026, 22:54:37 | 24/08/2026, 10:19:01 | No | No | - | - | 18/08/2026, 03:53:38 | - |
| 43.139.192.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 23/08/2026, 22:54:37 | 24/08/2026, 10:19:01 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 24/08/2026, 03:53:39 | tencentcloud.com |
| 91.119.109.•••:18789 | - | 🇦🇹 Austria | Yes | true | Clean | AS8412 | Magenta Telekom | Infra DSL Dynamic IP Pool | 23/08/2026, 22:54:36 | 10/09/2026, 12:00:26 | - | - | - | - | - | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:54:36 | 09/09/2026, 14:45:34 | No | No | - | - | 18/08/2026, 03:53:52 | - |
| 114.80.42.•••:8083 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4811 | China Telecom (Group) | ChinaNet Shanghai | 23/08/2026, 22:54:36 | 08/09/2026, 22:27:03 | Yes | No | - | CVE-2015-9251, CVE-2016-20012, CVE-2019-11358, CVE-2019-16905, CVE-2020-11022, CVE-2020-11023, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 24/08/2026, 03:53:56 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 125.109.37.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Wenzhou Node Network | 23/08/2026, 22:54:36 | 24/08/2026, 10:19:00 | No | No | - | - | 18/08/2026, 03:53:57 | - |
| 140.188.150.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:54:36 | 08/09/2026, 09:31:34 | Yes | No | - | - | 24/08/2026, 03:53:58 | cogentco.com |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 23/08/2026, 22:54:36 | 09/09/2026, 10:29:23 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 24/08/2026, 03:54:00 | - |
| 140.188.150.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:52:52 | 08/09/2026, 17:23:52 | Yes | No | - | - | 23/08/2026, 23:36:01 | cogentco.com |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:52:52 | 08/09/2026, 06:38:57 | No | - | - | - | 17/08/2026, 23:36:03 | - |
| 125.208.22.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS146817 | Hubei Feixun Network Co., Ltd | Hubei Feixun Network | 23/08/2026, 22:52:51 | 03/09/2026, 00:26:42 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 23/08/2026, 23:36:05 | qq.chat, qq.com |
| 38.38.161.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:52:51 | 27/08/2026, 09:58:35 | No | - | - | - | 17/08/2026, 23:36:07 | - |
| 110.188.244.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 23/08/2026, 22:52:51 | 24/08/2026, 04:33:45 | No | No | - | - | 17/08/2026, 23:36:12 | - |
| 171.213.177.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 23/08/2026, 22:52:51 | 27/08/2026, 14:11:09 | No | No | - | - | 17/08/2026, 23:36:15 | - |
| 140.188.157.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:52:50 | 10/09/2026, 10:34:09 | Yes | No | - | - | 23/08/2026, 23:36:20 | cogentco.com |
| 140.188.153.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:52:49 | 07/09/2026, 18:32:23 | Yes | No | - | - | 23/08/2026, 23:36:26 | cogentco.com |
| 162.141.78.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS395839 | HOSTKEY | Hostkey | 23/08/2026, 22:52:49 | 10/09/2026, 10:34:05 | No | No | - | - | 17/08/2026, 23:36:27 | - |
| 182.120.116.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Henan | 23/08/2026, 22:52:48 | 24/08/2026, 05:16:19 | No | No | - | - | 17/08/2026, 23:36:34 | - |
| 43.139.192.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 23/08/2026, 22:52:47 | 24/08/2026, 05:16:18 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 23/08/2026, 23:36:37 | tencentcloud.com |
| 111.76.46.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Jiangxi | 23/08/2026, 22:52:47 | 24/08/2026, 05:16:18 | No | No | - | - | 17/08/2026, 23:36:38 | - |
| 121.150.89.•••:18789 | - | 🇰🇷 South Korea | - | false | Leaked | AS4766 | Korea Telecom | Korea Telecom | 23/08/2026, 22:52:47 | 24/08/2026, 05:16:18 | Yes | No | - | - | 23/08/2026, 23:36:45 | macmadigan.com, chickenkiller.com, quickconnect.to, ktwiz.co.kr, kornet.net, fastspeed.dk, bizmeka.com, kt.com, homeap.co.kr, hhnsfarm.co.kr, ktds.com, ktlogis.com, ktestate.com, synology.me, kt-idc.com, ktsat.net, kt.co.kr, ktmediahub.com, ktcloud.com, ktfreetel.co.kr |
| 91.119.109.•••:18789 | - | 🇦🇹 Austria | Yes | true | Clean | AS8412 | Magenta Telekom | Infra DSL Dynamic IP Pool | 23/08/2026, 22:52:46 | 10/09/2026, 11:58:44 | - | - | - | - | - | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:52:46 | 09/09/2026, 09:44:51 | No | No | - | - | 17/08/2026, 23:36:53 | - |
| 114.80.42.•••:18789 | - | 🇨🇳 China mainland | - | true | Leaked | AS4811 | China Telecom (Group) | ChinaNet Shanghai | 23/08/2026, 22:52:46 | 08/09/2026, 17:23:50 | Yes | No | - | CVE-2015-9251, CVE-2016-20012, CVE-2019-11358, CVE-2019-16905, CVE-2020-11022, CVE-2020-11023, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 23/08/2026, 23:36:58 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 125.109.37.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Wenzhou Node Network | 23/08/2026, 22:52:46 | 24/08/2026, 05:16:16 | No | No | - | - | 17/08/2026, 23:36:59 | - |
| 43.139.192.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 23/08/2026, 22:50:49 | 24/08/2026, 06:39:53 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 24/08/2026, 01:45:00 | tencentcloud.com |
| 111.76.46.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Jiangxi | 23/08/2026, 22:50:49 | 24/08/2026, 06:39:53 | No | No | - | - | 18/08/2026, 01:45:01 | - |
| 52.25.250.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 23/08/2026, 22:48:51 | 04/09/2026, 13:18:47 | - | - | - | - | - | - |
| 162.141.78.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS395839 | HOSTKEY | Hostkey | 23/08/2026, 22:48:51 | 10/09/2026, 11:54:31 | No | No | - | - | 18/08/2026, 05:13:31 | - |
| 3.70.6.•••:15006 | - | 🇩🇪 Germany | Yes | true | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 23/08/2026, 22:15:58 | 10/09/2026, 12:04:28 | No | No | - | - | 17/08/2026, 22:18:25 | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:12:10 | 09/09/2026, 11:54:44 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 24/08/2026, 01:05:20 | - |
| 156.215.125.•••:18789 | - | 🇪🇬 Egypt | Yes | false | Clean | AS8452 | TE-AS | TE Data | 23/08/2026, 22:12:10 | 30/08/2026, 07:49:32 | No | No | - | - | 18/08/2026, 01:05:24 | - |
| 16.162.112.•••:443 | - | 🇨🇳 China mainland | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Hong Kong | 23/08/2026, 22:12:09 | 24/08/2026, 09:36:22 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 24/08/2026, 01:05:32 | - |
| 14.153.167.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 23/08/2026, 22:12:09 | 24/08/2026, 09:36:22 | Yes | No | - | CVE-2019-12181, CVE-2020-15541, CVE-2020-15542, CVE-2020-15543 | 24/08/2026, 01:05:33 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 140.188.157.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:12:09 | 09/09/2026, 01:59:53 | Yes | No | - | - | 24/08/2026, 01:05:36 | cogentco.com |
| 102.182.62.•••:18789 | - | 🇿🇦 South Africa | Yes | false | Leaked | AS37611 | AFRIHOST SP | Airmobile | 23/08/2026, 22:12:09 | 24/08/2026, 09:36:22 | Yes | No | - | - | 24/08/2026, 01:05:37 | afrihost.com |
| 140.188.153.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:12:09 | 10/09/2026, 09:11:37 | Yes | No | - | - | 24/08/2026, 01:05:40 | cogentco.com |
| 111.230.134.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 23/08/2026, 22:12:08 | 10/09/2026, 04:56:22 | - | - | - | - | - | - |
| 47.122.105.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 23/08/2026, 22:12:08 | 02/09/2026, 07:25:57 | - | - | - | - | - | - |
| 106.55.94.•••:8443 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 23/08/2026, 22:12:08 | 09/09/2026, 03:24:52 | Yes | Yes | APT37, El-Machete | - | 24/08/2026, 01:05:47 | tencentcloud.com |
| 120.53.247.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Shandong Servsd Technology | 23/08/2026, 22:12:08 | 05/09/2026, 17:54:57 | Yes | Yes | APT37, El-Machete | - | 24/08/2026, 01:05:52 | cnnic.cn |
| 34.81.148.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 23/08/2026, 22:12:08 | 02/09/2026, 08:50:01 | No | No | - | CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 24/08/2026, 01:05:54 | - | |
| 16.59.146.•••:443 | - | 🇺🇸 United States | Yes | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 23/08/2026, 22:12:08 | 27/08/2026, 19:09:26 | Yes | No | - | - | 24/08/2026, 01:05:55 | amazonaws.com, amazon.com |
| 140.188.154.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:12:07 | 10/09/2026, 12:00:15 | Yes | No | - | - | 24/08/2026, 01:05:56 | cogentco.com |
| 140.188.152.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:12:07 | 08/09/2026, 09:31:35 | Yes | No | - | - | 24/08/2026, 01:06:03 | cogentco.com |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 23/08/2026, 22:12:07 | 09/09/2026, 14:45:27 | No | No | - | - | 18/08/2026, 01:06:04 | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:12:07 | 08/09/2026, 22:27:04 | No | No | - | - | 18/08/2026, 01:06:08 | - |
| 36.133.41.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS9808 | China Mobile Communications Group Co., Ltd. | China Mobile | 23/08/2026, 22:12:07 | 04/09/2026, 17:38:26 | Yes | Yes | Packrat | CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347 | 24/08/2026, 01:06:09 | chinamobile.com, chinamobile.cn |
| 112.80.174.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Jiangsu | 23/08/2026, 22:10:17 | 09/09/2026, 18:15:00 | Yes | No | - | - | 24/08/2026, 03:10:47 | chinaunicom.cn |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:10:15 | 09/09/2026, 06:55:08 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 24/08/2026, 03:10:56 | - |
| 156.215.125.•••:18789 | - | 🇪🇬 Egypt | Yes | false | Clean | AS8452 | TE-AS | TE Data | 23/08/2026, 22:10:15 | 30/08/2026, 02:08:54 | No | No | - | - | 18/08/2026, 03:11:03 | - |
| 16.162.112.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Hong Kong | 23/08/2026, 22:10:14 | 24/08/2026, 04:33:51 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 24/08/2026, 03:11:12 | - |
| 14.153.167.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 23/08/2026, 22:10:14 | 24/08/2026, 04:33:51 | Yes | No | - | CVE-2019-12181, CVE-2020-15541, CVE-2020-15542, CVE-2020-15543 | 24/08/2026, 03:11:14 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 140.188.157.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:10:14 | 08/09/2026, 22:24:56 | Yes | No | - | - | 24/08/2026, 03:11:19 | cogentco.com |
| 102.182.62.•••:18789 | - | 🇿🇦 South Africa | Yes | false | Leaked | AS37611 | AFRIHOST SP | Airmobile | 23/08/2026, 22:10:14 | 24/08/2026, 04:33:51 | Yes | No | - | - | 24/08/2026, 03:11:20 | afrihost.com |
| 140.188.153.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:10:13 | 10/09/2026, 04:11:22 | Yes | No | - | - | 24/08/2026, 03:11:22 | cogentco.com |
| 111.230.134.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 23/08/2026, 22:10:13 | 09/09/2026, 23:55:01 | - | - | - | - | - | - |
| 47.122.105.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 23/08/2026, 22:10:12 | 02/09/2026, 03:11:43 | - | - | - | - | - | - |
| 120.53.247.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Shandong Servsd Technology | 23/08/2026, 22:10:11 | 06/09/2026, 19:30:53 | Yes | Yes | APT37, El-Machete | - | 23/08/2026, 23:35:44 | cnnic.cn |
| 16.59.146.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 23/08/2026, 22:10:11 | 27/08/2026, 12:47:09 | Yes | No | - | - | 23/08/2026, 23:35:46 | amazonaws.com, amazon.com |
| 140.188.154.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:10:11 | 10/09/2026, 11:58:27 | Yes | No | - | - | 23/08/2026, 23:35:47 | cogentco.com |
| 140.188.152.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS54600 | PEG TECH INC | PEG Technology | 23/08/2026, 22:10:11 | 08/09/2026, 04:31:06 | Yes | No | - | - | 23/08/2026, 23:35:53 | cogentco.com |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 23/08/2026, 22:10:10 | 09/09/2026, 11:09:56 | No | No | - | - | 17/08/2026, 23:35:55 | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 23/08/2026, 22:10:10 | 08/09/2026, 17:23:51 | No | No | - | - | 17/08/2026, 23:35:58 | - |
| 112.80.174.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Jiangsu | 23/08/2026, 22:08:22 | 09/09/2026, 19:37:01 | Yes | No | - | - | 23/08/2026, 22:11:37 | chinaunicom.cn |
| 156.215.125.•••:18789 | - | 🇪🇬 Egypt | Yes | false | Clean | AS8452 | TE-AS | TE Data | 23/08/2026, 22:08:20 | 30/08/2026, 03:31:31 | No | No | - | - | 17/08/2026, 22:11:50 | - |
| 16.162.112.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Hong Kong | 23/08/2026, 22:08:19 | 24/08/2026, 05:56:58 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 23/08/2026, 22:11:57 | - |
| 34.81.148.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 23/08/2026, 22:08:16 | 02/09/2026, 05:58:15 | No | No | - | CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 23/08/2026, 22:12:10 | - | |
| 16.59.146.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 23/08/2026, 22:08:16 | 27/08/2026, 14:09:20 | Yes | No | - | - | 23/08/2026, 22:12:12 | amazonaws.com, amazon.com |
| 16.146.163.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 23/08/2026, 22:06:19 | 06/09/2026, 22:59:55 | Yes | No | - | - | 24/08/2026, 03:08:36 | amazonaws.com, amazon.com |
| 16.162.112.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Hong Kong | 23/08/2026, 22:06:19 | 25/08/2026, 23:11:53 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 24/08/2026, 05:13:24 | - |
| 16.59.146.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS16509 | Amazon.com, Inc. | Amazon | 23/08/2026, 22:06:18 | 29/08/2026, 07:07:01 | Yes | No | - | - | 24/08/2026, 05:13:27 | amazonaws.com, amazon.com |