🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 189 / 10768 (100 per page) Showing: 18801-18900 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 19:21:02 | 09/09/2026, 14:03:07 | No | No | - | - | 16/08/2026, 20:07:19 | - |
| 217.114.7.•••:443 | - | 🇷🇺 Russia | Yes | false | Clean | AS198610 | Beget LLC | Beget LLC | 22/08/2026, 19:21:02 | 31/08/2026, 00:15:52 | Yes | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 22/08/2026, 20:07:20 | beget.ru |
| 2605:a140:2352:542::1:18789 | - | 🇺🇸 United States | - | true | Clean | AS40021 | Contabo Inc. | Contabo | 22/08/2026, 19:21:02 | 08/09/2026, 03:07:32 | - | - | - | - | - | - |
| 212.64.18.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 22/08/2026, 19:21:01 | 23/08/2026, 07:22:33 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 22/08/2026, 20:07:25 | - |
| 66.29.133.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS22612 | Namecheap, Inc. | Wise Guys Installations | 22/08/2026, 19:21:01 | 31/08/2026, 06:43:38 | Yes | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0190, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6470, CVE-2019-9517, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-25220, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-2795, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-38177, CVE-2022-38178, CVE-2023-25690, CVE-2023-27522, CVE-2023-2828, CVE-2023-31122, CVE-2023-3341, CVE-2023-38408, CVE-2023-38709, CVE-2023-4408, CVE-2023-45802, CVE-2023-48795, CVE-2023-50387, CVE-2023-51384, CVE-2023-51385, CVE-2023-5680, CVE-2024-1322, CVE-2024-1737, CVE-2024-1975, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-4076, CVE-2024-40898, CVE-2025-26465, CVE-2025-32728 | 23/08/2026, 01:45:43 | namecheap.com |
| 173.169.65.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS33363 | Charter Communications, Inc | Charter Communications | 22/08/2026, 19:21:00 | 28/08/2026, 19:13:46 | Yes | No | - | - | 23/08/2026, 01:45:47 | chartermedia.com, charteruc.com, charter.com, directmarketingsolutions.com, telovations.net, news8austin.com, spectrumlocalnews.com, ncrrbiz.com, chartertn.net, chtrse.com, innovarsolutions.com, charter-business.net, spectrum.com, adlink.com, charterbusiness.com, bmail.com, chartermi.net, rrbiznet.com, rr.com, insightma.com, 3spectrum.com, cfnews13.com, nnymail.com, spectrumsportsnet.com, chartercom.com, telovations.com, spectrumenterprise.net, bresnan.net, charter.net, cnymail.com, baynews9.com, chartermi.com, bhsn.com, ny1.com, mybrighthouse.com, bhmediastrategies.com, spectrum.net, charter-usa.com, cablemediasales.com, kcmetrosports.com |
| 92.113.149.•••:18789 | - | 🇩🇰 Denmark | - | false | Leaked | AS44803 | Webdock.io ApS | Ukrtelecom | 22/08/2026, 19:19:11 | 29/08/2026, 20:31:20 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 21:26:31 | ukrtelecom.ua |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 22/08/2026, 19:19:11 | 07/09/2026, 20:42:02 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 22/08/2026, 21:26:43 | - |
| 223.167.38.•••:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS17621 | China Unicom Shanghai network | China Unicom Shanghai | 22/08/2026, 19:19:09 | 01/09/2026, 07:05:44 | No | No | - | - | 16/08/2026, 21:26:47 | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 19:19:09 | 09/09/2026, 09:02:12 | No | No | - | - | 16/08/2026, 21:26:53 | - |
| 217.114.7.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS198610 | Beget LLC | Beget LLC | 22/08/2026, 19:19:08 | 03/09/2026, 00:26:45 | Yes | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 22/08/2026, 21:26:54 | beget.ru |
| 2605:a140:2352:542::1:18789 | - | 🇺🇸 United States | - | true | Clean | AS40021 | Contabo Inc. | Contabo | 22/08/2026, 19:19:08 | 07/09/2026, 22:07:04 | - | - | - | - | - | - |
| 212.64.18.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 22/08/2026, 19:19:08 | 23/08/2026, 02:23:29 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 22/08/2026, 21:27:01 | - |
| 66.29.133.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS22612 | Namecheap, Inc. | Wise Guys Installations | 22/08/2026, 19:19:06 | 31/08/2026, 00:57:07 | Yes | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0190, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6470, CVE-2019-9517, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-25220, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-2795, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-38177, CVE-2022-38178, CVE-2023-25690, CVE-2023-27522, CVE-2023-2828, CVE-2023-31122, CVE-2023-3341, CVE-2023-38408, CVE-2023-38709, CVE-2023-4408, CVE-2023-45802, CVE-2023-48795, CVE-2023-50387, CVE-2023-51384, CVE-2023-51385, CVE-2023-5680, CVE-2024-1322, CVE-2024-1737, CVE-2024-1975, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-4076, CVE-2024-40898, CVE-2025-26465, CVE-2025-32728 | 22/08/2026, 21:27:11 | namecheap.com |
| 18.117.0.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 22/08/2026, 19:17:22 | 26/08/2026, 04:53:22 | No | No | - | - | 16/08/2026, 23:34:32 | - |
| 2605:a140:2352:542::1:18789 | - | 🇺🇸 United States | - | true | Clean | AS40021 | Contabo Inc. | Contabo | 22/08/2026, 19:17:14 | 08/09/2026, 00:13:14 | - | - | - | - | - | - |
| 212.64.18.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 22/08/2026, 19:17:13 | 23/08/2026, 03:03:57 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 22/08/2026, 23:35:24 | - |
| 34.226.191.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 22/08/2026, 19:15:14 | 24/08/2026, 20:54:35 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 19:18:01 | - |
| 92.113.149.•••:18789 | - | 🇩🇰 Denmark | - | false | Leaked | AS44803 | Webdock.io ApS | Ukrtelecom | 22/08/2026, 19:15:14 | 31/08/2026, 15:06:05 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 19:18:04 | ukrtelecom.ua |
| 66.29.133.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS22612 | Namecheap, Inc. | Wise Guys Installations | 22/08/2026, 19:15:13 | 01/09/2026, 19:19:06 | Yes | Yes | APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Volt Typhoon, WIRTE | CVE-2006-20001, CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-20012, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-17189, CVE-2018-17199, CVE-2018-20685, CVE-2019-0190, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6470, CVE-2019-9517, CVE-2020-11984, CVE-2020-11993, CVE-2020-13938, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-25220, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-2795, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-38177, CVE-2022-38178, CVE-2023-25690, CVE-2023-27522, CVE-2023-2828, CVE-2023-31122, CVE-2023-3341, CVE-2023-38408, CVE-2023-38709, CVE-2023-4408, CVE-2023-45802, CVE-2023-48795, CVE-2023-50387, CVE-2023-51384, CVE-2023-51385, CVE-2023-5680, CVE-2024-1322, CVE-2024-1737, CVE-2024-1975, CVE-2024-24795, CVE-2024-27316, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-4076, CVE-2024-40898, CVE-2025-26465, CVE-2025-32728 | 22/08/2026, 19:18:08 | namecheap.com |
| 18.117.0.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 22/08/2026, 18:38:22 | 26/08/2026, 10:38:29 | No | No | - | - | 16/08/2026, 20:06:03 | - |
| 180.159.112.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 22/08/2026, 18:38:22 | 23/08/2026, 05:57:28 | - | - | - | - | - | - |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 22/08/2026, 18:38:21 | 08/09/2026, 05:58:17 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 22/08/2026, 20:06:09 | - |
| 182.137.46.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 22/08/2026, 18:38:21 | 23/08/2026, 05:57:27 | No | No | - | - | 16/08/2026, 20:06:11 | - |
| 192.240.204.•••:20245 | - | 🇺🇸 United States | Yes | false | Leaked | AS20454 | SECURED SERVERS LLC | PhoenixNAP | 22/08/2026, 18:38:21 | 26/08/2026, 01:25:24 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 20:06:13 | phoenixnap.com, securedservers.com |
| 101.33.246.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 22/08/2026, 18:38:20 | 10/09/2026, 12:01:10 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 22/08/2026, 20:06:15 | tencentcloud.com |
| 34.62.173.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 22/08/2026, 18:38:20 | 23/08/2026, 05:57:26 | - | - | - | - | - | - | |
| 187.77.19.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 22/08/2026, 18:38:20 | 09/09/2026, 17:34:38 | - | - | - | - | - | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 18:38:20 | 10/09/2026, 10:36:11 | No | No | - | - | 16/08/2026, 20:06:22 | - |
| 157.230.37.•••:443 | - | 🇸🇬 Singapore | Yes | false | Leaked | AS14061 | DigitalOcean, LLC | DigitalOcean | 22/08/2026, 18:38:19 | 01/09/2026, 14:22:16 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 20:06:28 | rcnhost.com, digitaloceanspaces.com, paperspace.io, digitalocean.com, scotch.io, snapshooter.com, paperspace.com, css-tricks.com |
| 107.178.111.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS53755 | Input Output Flood LLC | IOFlood | 22/08/2026, 18:38:19 | 05/09/2026, 20:47:28 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 22/08/2026, 20:06:36 | ioflood.com |
| 220.196.222.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS17621 | China Unicom Shanghai network | China Unicom | 22/08/2026, 18:38:19 | 10/09/2026, 12:00:55 | Yes | No | - | - | 22/08/2026, 20:06:39 | chinaunicom.cn |
| 119.29.16.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 22/08/2026, 18:38:19 | 09/09/2026, 07:39:44 | Yes | Yes | APT37, El-Machete | - | 22/08/2026, 20:06:40 | tencent.com |
| 87.185.146.•••:443 | - | 🇩🇪 Germany | Yes | false | Leaked | AS3320 | Internet service provider operations | Deutsche Telekom | 22/08/2026, 18:38:19 | 23/08/2026, 10:12:25 | Yes | No | - | - | 22/08/2026, 20:06:45 | telekom.de |
| 18.117.0.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon | 22/08/2026, 18:36:28 | 26/08/2026, 04:12:56 | No | No | - | - | 16/08/2026, 18:38:41 | - |
| 180.159.112.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 22/08/2026, 18:36:28 | 23/08/2026, 00:59:03 | - | - | - | - | - | - |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 22/08/2026, 18:36:27 | 08/09/2026, 00:15:06 | No | No | - | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 22/08/2026, 18:38:47 | - |
| 182.137.46.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Sichuan | 22/08/2026, 18:36:27 | 23/08/2026, 00:59:02 | No | No | - | - | 16/08/2026, 18:38:49 | - |
| 34.62.173.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 22/08/2026, 18:36:26 | 23/08/2026, 00:59:01 | - | - | - | - | - | - | |
| 101.33.246.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 22/08/2026, 18:36:26 | 10/09/2026, 07:44:48 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385 | 22/08/2026, 18:38:52 | tencentcloud.com |
| 2a02:4780:2d:b4e5::1:18789 | - | 🇺🇸 United States | - | true | Clean | AS47583 | Hostinger International Limited | Hostinger | 22/08/2026, 18:36:26 | 09/09/2026, 12:35:40 | - | - | - | - | - | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 18:36:26 | 10/09/2026, 04:54:20 | No | No | - | - | 16/08/2026, 18:38:58 | - |
| 157.230.37.•••:18789 | - | 🇸🇬 Singapore | - | false | Leaked | AS14061 | DigitalOcean, LLC | DigitalOcean | 22/08/2026, 18:36:25 | 01/09/2026, 09:16:33 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 18:39:05 | rcnhost.com, digitaloceanspaces.com, paperspace.io, digitalocean.com, scotch.io, snapshooter.com, paperspace.com, css-tricks.com |
| 107.178.111.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS53755 | Input Output Flood LLC | IOFlood | 22/08/2026, 18:36:24 | 05/09/2026, 15:44:07 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728 | 22/08/2026, 18:39:16 | ioflood.com |
| 220.196.222.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS17621 | China Unicom Shanghai network | China Unicom | 22/08/2026, 18:36:24 | 10/09/2026, 10:34:08 | Yes | No | - | - | 22/08/2026, 18:39:17 | chinaunicom.cn |
| 119.29.16.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 22/08/2026, 18:36:24 | 09/09/2026, 02:40:16 | Yes | Yes | APT37, El-Machete | - | 22/08/2026, 18:39:18 | tencent.com |
| 87.185.146.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS3320 | Internet service provider operations | Deutsche Telekom | 22/08/2026, 18:36:23 | 23/08/2026, 03:48:09 | Yes | No | - | - | 22/08/2026, 18:39:23 | telekom.de |
| 176.109.105.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS208677 | "Cloud Technologies" LLC trading as Cloud.ru | SberCloud Net | 22/08/2026, 18:36:23 | 23/08/2026, 01:41:26 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 18:39:24 | - |
| 34.226.191.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 22/08/2026, 18:36:22 | 23/08/2026, 01:41:25 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 18:39:35 | - |
| 216.152.151.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS63023 | GTHost | GT Host | 22/08/2026, 18:36:22 | 23/08/2026, 05:13:01 | - | - | - | - | - | - |
| 180.159.112.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 22/08/2026, 18:34:29 | 23/08/2026, 02:21:34 | - | - | - | - | - | - |
| 34.62.173.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 22/08/2026, 18:34:27 | 23/08/2026, 02:21:33 | - | - | - | - | - | - | |
| 220.196.222.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS17621 | China Unicom Shanghai network | China Unicom | 22/08/2026, 18:34:26 | 10/09/2026, 11:57:17 | Yes | No | - | - | 22/08/2026, 23:34:49 | chinaunicom.cn |
| 119.29.16.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud | 22/08/2026, 18:34:26 | 25/08/2026, 19:40:51 | Yes | Yes | APT37, El-Machete | - | 22/08/2026, 23:34:50 | tencent.com |
| 34.226.191.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14618 | Amazon.com, Inc. | Amazon | 22/08/2026, 18:34:24 | 23/08/2026, 03:04:02 | No | No | - | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 23:35:02 | - |
| 3.72.50.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 22/08/2026, 18:32:24 | 31/08/2026, 00:08:02 | No | - | - | - | 16/08/2026, 19:17:50 | - |
| 54.180.87.•••:18789 | - | 🇰🇷 South Korea | - | false | Clean | AS16509 | Amazon.com, Inc. | AWS Seoul Region | 22/08/2026, 18:32:23 | 24/08/2026, 20:11:44 | No | No | - | - | 16/08/2026, 19:17:51 | - |
| 176.109.105.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS208677 | "Cloud Technologies" LLC trading as Cloud.ru | SberCloud Net | 22/08/2026, 18:32:23 | 24/08/2026, 20:11:43 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 19:17:57 | - |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 22/08/2026, 17:55:36 | 09/09/2026, 13:20:31 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 22/08/2026, 20:05:22 | - |
| 20.83.102.•••:80 | - | 🇺🇸 United States | Yes | true | Clean | AS8075 | Microsoft Corporation | Microsoft | 22/08/2026, 17:55:35 | 06/09/2026, 20:58:03 | No | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 22/08/2026, 20:05:27 | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 17:55:35 | 09/09/2026, 07:39:43 | No | No | - | - | 16/08/2026, 20:05:33 | - |
| 222.117.148.•••:18789 | - | 🇰🇷 South Korea | Yes | false | Leaked | AS4766 | Korea Telecom | Korea Telecom | 22/08/2026, 17:55:35 | 23/08/2026, 05:15:06 | Yes | No | - | - | 22/08/2026, 20:05:35 | ktwiz.co.kr, kornet.net, bizmeka.com, kt.com, homeap.co.kr, hhnsfarm.co.kr, ktds.com, ktlogis.com, ktestate.com, kt-idc.com, ktsat.net, kt.co.kr, ktmediahub.com, ktcloud.com, ktfreetel.co.kr |
| 51.211.217.•••:18789 | - | 🇸🇦 Saudi Arabia | Yes | false | Clean | AS25019 | Saudi Telecom Company JSC | STC Riyadh Residential Fixed Broadband | 22/08/2026, 17:55:35 | 23/08/2026, 05:15:06 | No | No | - | - | 16/08/2026, 20:05:36 | - |
| 15.204.161.•••:10332 | - | 🇺🇸 United States | Yes | true | Leaked | AS16276 | OVH SAS | [name redacted] | 22/08/2026, 17:55:34 | 09/09/2026, 23:57:06 | Yes | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-49975 | 22/08/2026, 20:05:51 | ovhcloud.com |
| 192.240.204.•••:20063 | - | 🇺🇸 United States | Yes | false | Leaked | AS20454 | SECURED SERVERS LLC | PhoenixNAP | 22/08/2026, 17:55:34 | 26/08/2026, 07:04:54 | Yes | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 20:05:52 | phoenixnap.com, securedservers.com |
| 14.113.217.•••:18789 | - | 🇿🇦 South Africa | Yes | false | Clean | AS4134 | Chinanet | CHINANET Guangdong | 22/08/2026, 17:55:34 | 26/08/2026, 03:32:37 | - | - | - | - | - | - |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 22/08/2026, 17:53:41 | 09/09/2026, 09:02:15 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 22/08/2026, 18:38:01 | - |
| 20.83.102.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS8075 | Microsoft Corporation | Microsoft | 22/08/2026, 17:53:40 | 06/09/2026, 16:40:18 | No | No | - | CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617 | 22/08/2026, 18:38:07 | - |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 17:53:39 | 09/09/2026, 02:40:14 | No | No | - | - | 16/08/2026, 18:38:13 | - |
| 222.117.148.•••:18789 | - | 🇰🇷 South Korea | Yes | false | Leaked | AS4766 | Korea Telecom | Korea Telecom | 22/08/2026, 17:53:39 | 23/08/2026, 00:16:31 | Yes | No | - | - | 22/08/2026, 18:38:15 | ktwiz.co.kr, kornet.net, bizmeka.com, kt.com, homeap.co.kr, hhnsfarm.co.kr, ktds.com, ktlogis.com, ktestate.com, kt-idc.com, ktsat.net, kt.co.kr, ktmediahub.com, ktcloud.com, ktfreetel.co.kr |
| 51.211.217.•••:18789 | - | 🇸🇦 Saudi Arabia | Yes | false | Clean | AS25019 | Saudi Telecom Company JSC | STC Riyadh Residential Fixed Broadband | 22/08/2026, 17:53:39 | 23/08/2026, 00:16:31 | No | No | - | - | 16/08/2026, 18:38:16 | - |
| 178.105.132.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 22/08/2026, 17:53:38 | 23/08/2026, 00:16:31 | No | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 18:38:24 | - |
| 51.211.217.•••:18789 | - | 🇸🇦 Saudi Arabia | Yes | false | Clean | AS25019 | Saudi Telecom Company JSC | STC Riyadh Residential Fixed Broadband | 22/08/2026, 17:51:43 | 23/08/2026, 01:39:29 | No | No | - | - | 16/08/2026, 20:46:35 | - |
| 138.2.9.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS31898 | Oracle Corporation | Oracle | 22/08/2026, 17:49:46 | 10/09/2026, 11:54:28 | Yes | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347 | 22/08/2026, 19:17:42 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 103.240.146.•••:18789 | - | 🇪🇸 Spain | - | false | Clean | AS36007 | Kamatera, Inc. | Cloud Web Manage EU MD | 22/08/2026, 17:49:45 | 24/08/2026, 19:29:03 | Yes | Yes | APT14, APT28, APT35, APT37, APT39, APT40, APT41, Cobalt Group, Earth Berberoka, Equation Group, Gamaredon Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Mustang Panda, Sandworm Team, SharpPanda, TA505, The Shadow Brokers, UNC2452, WIRTE | CVE-2006-20001, CVE-2010-4478, CVE-2010-4755, CVE-2010-5107, CVE-2011-4327, CVE-2011-5000, CVE-2012-0814, CVE-2013-1896, CVE-2013-4352, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0117, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2014-3523, CVE-2014-3581, CVE-2014-8109, CVE-2015-0228, CVE-2015-3183, CVE-2015-3185, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-0736, CVE-2016-0777, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-2161, CVE-2016-3115, CVE-2016-4975, CVE-2016-5387, CVE-2016-6210, CVE-2016-6515, CVE-2016-8612, CVE-2016-8743, CVE-2017-15710, CVE-2017-15715, CVE-2017-15906, CVE-2017-3167, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1283, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-17199, CVE-2018-20685, CVE-2019-0217, CVE-2019-0220, CVE-2019-10092, CVE-2019-10098, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11985, CVE-2020-13938, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2021-26690, CVE-2021-26691, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2023-25690, CVE-2023-28531, CVE-2023-28625, CVE-2023-31122, CVE-2023-38408, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 19:17:44 | omc.co.il |
| 185.93.2.•••:18789 | - | 🇫🇷 France | - | false | Leaked | AS60068 | (^_^)/ | BunnyCDN Paris | 22/08/2026, 17:49:45 | 24/08/2026, 19:29:03 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 19:17:46 | b-cdn.net, aux-terrasses.com |
| 52.25.250.•••:443 | - | 🇺🇸 United States | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 22/08/2026, 17:13:10 | 05/09/2026, 00:03:06 | - | - | - | - | - | - |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 22/08/2026, 17:13:10 | 09/09/2026, 03:24:55 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 22/08/2026, 20:04:38 | - |
| 110.157.203.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Xinjiang | 22/08/2026, 17:13:09 | 23/08/2026, 04:32:40 | No | No | - | - | 16/08/2026, 20:04:41 | - |
| 34.185.90.•••:18789 | Assistant | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 22/08/2026, 17:13:08 | 04/09/2026, 19:02:33 | - | - | - | - | - | - | |
| 101.43.30.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 22/08/2026, 17:13:08 | 26/08/2026, 06:22:26 | Yes | Yes | APT37, El-Machete | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 22/08/2026, 20:04:54 | tencentcloud.com |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 17:13:08 | 09/09/2026, 21:48:18 | No | No | - | - | 16/08/2026, 20:04:55 | - |
| 112.255.232.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 22/08/2026, 17:13:07 | 23/08/2026, 05:15:08 | No | No | - | - | 16/08/2026, 20:05:00 | - |
| 189.24.79.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS979 | NetLab Global | NetLab | 22/08/2026, 17:13:07 | 25/08/2026, 19:44:47 | - | - | - | - | - | - |
| 138.2.9.•••:443 | - | 🇺🇸 United States | Yes | true | Leaked | AS31898 | Oracle Corporation | Oracle | 22/08/2026, 17:13:07 | 10/09/2026, 12:00:42 | Yes | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347 | 22/08/2026, 20:05:16 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 121.204.253.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS133776 | Quanzhou | CHINANET Fujian | 22/08/2026, 17:11:19 | 10/09/2026, 11:59:06 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2005-2089, CVE-2008-1446, CVE-2009-1535, CVE-2009-2521, CVE-2009-4444, CVE-2009-4445, CVE-2015-8866, CVE-2015-8994, CVE-2016-10158, CVE-2016-10159, CVE-2016-10160, CVE-2016-10161, CVE-2016-10162, CVE-2016-10397, CVE-2016-10708, CVE-2016-1283, CVE-2016-20012, CVE-2016-7478, CVE-2016-7479, CVE-2016-9138, CVE-2016-9934, CVE-2016-9935, CVE-2016-9936, CVE-2017-11142, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11362, CVE-2017-11628, CVE-2017-12932, CVE-2017-12933, CVE-2017-12934, CVE-2017-15906, CVE-2017-16642, CVE-2017-5340, CVE-2017-7189, CVE-2017-7890, CVE-2017-9120, CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-14884, CVE-2018-15132, CVE-2018-15473, CVE-2018-15919, CVE-2018-17082, CVE-2018-19395, CVE-2018-19396, CVE-2018-19518, CVE-2018-19935, CVE-2018-20685, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9022, CVE-2019-9023, CVE-2019-9024, CVE-2019-9675, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 18:37:03 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 34.123.16.•••:18789 | Assistant | 🇺🇸 United States | Yes | false | Clean | AS396982 | Google LLC | 22/08/2026, 17:11:19 | 22/08/2026, 23:34:03 | No | No | - | CVE-2025-61984, CVE-2025-61985 | 22/08/2026, 18:37:04 | - | |
| 62.143.243.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS3209 | International IP-Backbone of Vodafone | Unitymedia | 22/08/2026, 17:11:19 | 23/08/2026, 09:27:46 | - | - | - | - | - | - |
| 52.25.250.•••:18789 | - | 🇺🇸 United States | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon | 22/08/2026, 17:11:18 | 04/09/2026, 19:00:38 | - | - | - | - | - | - |
| 38.55.99.•••:18789 | - | 🇺🇸 United States | Yes | true | Clean | AS42960 | VH Global Limited | Private Customer | 22/08/2026, 17:11:18 | 08/09/2026, 23:07:38 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385 | 22/08/2026, 18:37:18 | - |
| 110.157.203.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Xinjiang | 22/08/2026, 17:11:17 | 22/08/2026, 23:34:01 | No | No | - | - | 16/08/2026, 18:37:22 | - |
| 206.189.101.•••:18789 | - | 🇳🇱 Netherlands | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 22/08/2026, 17:11:17 | 23/08/2026, 05:13:02 | No | Yes | APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 18:37:23 | - |
| 69.33.211.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS154107 | DigitalLink Global Network Limited | Private Customer | 22/08/2026, 17:11:17 | 26/08/2026, 16:20:23 | - | - | - | - | - | - |
| 34.185.90.•••:18789 | Assistant | 🇺🇸 United States | Yes | true | Clean | AS396982 | Google LLC | 22/08/2026, 17:11:16 | 04/09/2026, 14:05:20 | - | - | - | - | - | - | |
| 101.43.30.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 22/08/2026, 17:11:16 | 26/08/2026, 00:40:48 | Yes | Yes | APT37, El-Machete | CVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 22/08/2026, 18:37:36 | tencentcloud.com |
| 38.147.167.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS42960 | VH Global Limited | Xnnnet Limited | 22/08/2026, 17:11:16 | 09/09/2026, 17:32:38 | No | No | - | - | 16/08/2026, 18:37:37 | - |
| 112.255.232.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Shandong | 22/08/2026, 17:11:14 | 23/08/2026, 00:16:36 | No | No | - | - | 16/08/2026, 18:37:40 | - |
| 189.24.79.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS979 | NetLab Global | NetLab | 22/08/2026, 17:11:13 | 25/08/2026, 13:17:01 | - | - | - | - | - | - |
| 134.199.138.•••:18789 | - | 🇺🇸 United States | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 22/08/2026, 17:11:13 | 23/08/2026, 10:10:20 | No | Yes | Salt Typhoon | CVE-2016-20012, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 22/08/2026, 18:37:51 | - |
| 138.2.9.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS31898 | Oracle Corporation | Oracle | 22/08/2026, 17:11:13 | 10/09/2026, 11:59:08 | Yes | Yes | APT-C-23, Gamaredon Group, Ghostwriter, Lazarus Group, Turla APT Group, Volt Typhoon | CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-44487, CVE-2024-7347 | 22/08/2026, 18:37:56 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |