🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 816988 Page: 278 / 8170 (100 per page) Showing: 27701-27800 Last Imported: 15/05/2026, 09:32:33
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 278 of 8170
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
89.207.255.•••:18789 - 🇰🇿 Kazakhstan Yes false Clean AS202958Hoster.KZ - AlmatyHoster.KZ14/04/2026, 02:14:5617/04/2026, 19:25:56 - - ----
178.104.130.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 02:14:5616/04/2026, 19:47:14 - - ----
20.45.38.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5514/04/2026, 07:32:38 - - ----
52.90.117.•••:18789 - 🇺🇸 United States Yes false Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:14:5514/04/2026, 10:32:40 No No --08/04/2026, 09:48:59-
20.98.237.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5514/04/2026, 07:32:38 - - ----
34.175.70.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle14/04/2026, 02:14:5517/04/2026, 18:46:46 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138515/04/2026, 22:00:13-
82.156.176.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:14:5516/04/2026, 22:48:14 No Yes APT37, El-Machete-16/04/2026, 19:04:17-
54.160.174.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:14:5414/04/2026, 07:32:37 - - ----
47.92.121.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 02:14:5417/04/2026, 08:34:36 No No -CVE-2022-34170, CVE-2022-34171, CVE-2022-34172, CVE-2022-34173, CVE-2022-34174, CVE-2022-3417517/04/2026, 07:05:56-
20.110.51.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5414/04/2026, 07:32:37 - - ----
167.86.100.•••:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo14/04/2026, 02:14:5414/04/2026, 07:32:37 - - ----
92.4.92.•••:18789 - 🇺🇸 United States Yes false Clean AS31898Oracle CorporationOracle Sweden14/04/2026, 02:14:5417/04/2026, 19:25:54 - - ----
74.48.39.•••:18789 - 🇺🇸 United States Yes false Clean AS35916MULTACOM CORPORATIONMultacom Corporation14/04/2026, 02:14:5417/04/2026, 10:03:12 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198517/04/2026, 10:05:06multacom.com
45.192.110.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS401696cognetcloud INCVapeline Technology14/04/2026, 02:14:5316/04/2026, 22:48:20 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-3272816/04/2026, 19:01:09-
156.239.46.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited14/04/2026, 02:14:5317/04/2026, 18:07:43 No Yes Salt TyphoonCVE-2020-25097, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-2352, CVE-2024-24768, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-39907, CVE-2024-39911, CVE-2024-6387, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-55753, CVE-2025-56413, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2025-66507, CVE-2025-6650817/04/2026, 18:11:57-
222.79.16.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Fujian14/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
20.63.216.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
104.215.74.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
217.60.248.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS56971AS56971 CloudCGI Global Limited14/04/2026, 02:14:5316/04/2026, 22:48:17 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 19:02:42-
152.53.108.•••:18789 - 🇦🇹 Austria - false Clean AS197540netcup GmbHAT ANX Holding 214/04/2026, 02:14:5314/04/2026, 07:32:36 - - ----
20.236.136.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:5214/04/2026, 07:32:35 - - ----
47.83.117.•••:18789 - 🇺🇸 United States Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud14/04/2026, 02:14:5217/04/2026, 09:19:34 - - ----
2a02:4780:79:ee91::1:18789 - 🇩🇪 Germany - false Clean AS47583Hostinger International LimitedHostinger14/04/2026, 02:14:5214/04/2026, 07:32:35 - - ----
8.137.184.•••:18789 - 🇸🇬 Singapore - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud14/04/2026, 02:14:5118/04/2026, 00:40:42 - - ----
154.205.36.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 02:14:5116/04/2026, 23:33:13 - - ----
144.91.67.•••:18789 - 🇩🇪 Germany Yes false Clean AS51167Contabo GmbHContabo14/04/2026, 02:14:5117/04/2026, 10:03:45 - - ----
44.250.224.•••:18789 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon14/04/2026, 02:14:5114/04/2026, 07:32:34 - - ----
87.106.166.•••:18789 - 🇩🇪 Germany Yes false Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.Ionos Cloud TXL14/04/2026, 02:14:5117/04/2026, 10:04:21 Yes No --14/04/2026, 18:48:51ionos.com
172.67.212.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare14/04/2026, 02:14:5015/04/2026, 01:31:51 - - ----
58.50.217.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hubei14/04/2026, 02:14:5017/04/2026, 20:10:58 - - ----
54.227.207.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:14:5017/04/2026, 10:03:50 - - ----
137.220.157.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS4907BGPNET PTE. LTD.Cloudbays, New Town Central Plaza14/04/2026, 02:14:4917/04/2026, 18:07:46 No No --11/04/2026, 18:10:25-
103.108.66.•••:18789 - 🇭🇰 Hong Kong - false Clean AS401696cognetcloud INCHuangyun Internet Tec Limited14/04/2026, 02:14:4917/04/2026, 21:42:06 - - ----
101.43.8.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:14:4917/04/2026, 00:18:18 - - ----
50.6.248.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationNewfold Digital14/04/2026, 02:14:4917/04/2026, 05:34:05 Yes No --17/04/2026, 00:20:54athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com
20.214.179.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4914/04/2026, 07:32:32 - - ----
172.105.5.•••:18789 - 🇨🇦 Canada Yes false Clean AS63949Akamai Connected CloudLinode14/04/2026, 02:14:4814/04/2026, 07:32:32 - - ----
2001:41d0:2005:100::1d1f:18789 - 🇮🇹 Italy - false Clean AS16276OVH SASVPS EU South Mil 114/04/2026, 02:14:4817/04/2026, 02:33:44 - - ----
43.251.227.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS401696cognetcloud INCI Layer Limited14/04/2026, 02:14:4817/04/2026, 10:03:26 - - ----
49.13.174.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner Online14/04/2026, 02:14:4814/04/2026, 07:32:31 - - ----
183.130.219.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet-ZJ Zhongxin14/04/2026, 02:14:4814/04/2026, 07:32:31 - - ----
20.125.19.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4814/04/2026, 07:32:31 - - ----
119.45.115.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud14/04/2026, 02:14:4718/04/2026, 00:40:13 - - ----
43.139.34.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:14:4716/04/2026, 20:32:40 Yes No --16/04/2026, 16:01:44tencent.com
116.169.116.•••:18789 - 🇨🇳 China mainland - false Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom14/04/2026, 02:14:4716/04/2026, 20:32:41 Yes No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 16:01:18chinaunicom.cn, objecteye.com
154.205.37.•••:18789 - 🇭🇰 Hong Kong Yes false Leaked AS9294GNET INC.Cloud Innovation14/04/2026, 02:14:4717/04/2026, 10:04:40 Yes No --16/04/2026, 21:19:09cgmprecast.com, fuhuake.com, abpincorp.com, jekotrade.com, bopcon.com, boyu-group.com, qd-baolian.com, csofam.com, jiabinnu.com, kfstock.com, klmymmyc.com, hnbeixiang.com, xjjingyoga.com, 1haojiyin.com, detongwiremesh.com, dgclh.com, lstcarbon.com, ttstest.com, gaetanasnyc.com, yhjgkeji.com, bierte.com, ttyt360.com, zgkaite.com, turnoutservices.com, zjdddl.com, zjhrbz.com, bain86.com, impresosmonterrey.com, shworldbest.com, dongguansenzi.com
154.205.39.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 02:14:4717/04/2026, 07:04:25 - - ----
128.140.101.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner Online14/04/2026, 02:14:4714/04/2026, 07:32:30 - - ----
27.8.156.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Chongqing14/04/2026, 02:14:4717/04/2026, 10:03:57 - - ----
43.103.51.•••:18789 - 🇸🇬 Singapore Yes false Clean AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud Singapore14/04/2026, 02:14:4717/04/2026, 10:03:43 - - ----
20.97.59.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4714/04/2026, 07:32:30 - - ----
2409:8a55:4fe4:44d0::ad0:18789 - 🇨🇳 China mainland - false Clean AS9808China Mobile Communications Group Co., Ltd.China Mobile14/04/2026, 02:14:4617/04/2026, 05:34:07 - - ----
13.202.231.•••:18789 - 🇮🇳 India - false Clean AS16509Amazon.com, Inc.Amazon Web Services14/04/2026, 02:14:4614/04/2026, 07:32:29 - - ----
110.41.61.•••:18789 - 🇨🇳 China mainland Yes false Clean AS55990Huawei Cloud Service data centerHuawei Cloud14/04/2026, 02:14:4617/04/2026, 19:25:47 - - ----
20.22.185.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4614/04/2026, 07:32:29 - - ----
120.26.48.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 02:14:4614/04/2026, 08:17:39 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 08:18:09aliyun.com
13.78.44.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:14:4514/04/2026, 08:17:39 - - ----
163.176.234.•••:18789 - 🇺🇸 United States Yes false Leaked AS31898Oracle CorporationOracle14/04/2026, 02:14:4514/04/2026, 08:17:39 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 08:18:17healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
124.156.222.•••:18789 - 🇯🇵 Japan Yes false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd14/04/2026, 02:14:4517/04/2026, 03:19:01 Yes Yes APT17, APT36, APT37, APT45, CloudSorcerer, Daggerfly APT, Kimsuky, MuddyWater Group, SideWinder APT, The Shadow BrokersCVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 08:18:27tencent.com
116.205.230.•••:18789 - 🇨🇳 China mainland Yes false Clean AS55990Huawei Cloud Service data centerHuawei Cloud14/04/2026, 02:12:3717/04/2026, 10:01:46 - - ----
2a02:c207:2317:5353::1:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo14/04/2026, 02:12:3714/04/2026, 07:30:20 - - ----
4.151.165.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3614/04/2026, 07:30:19 - - ----
20.196.192.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3614/04/2026, 07:30:19 - - ----
172.67.159.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare14/04/2026, 02:12:3614/04/2026, 23:59:53 - - ----
20.114.43.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3514/04/2026, 07:30:18 - - ----
89.207.255.•••:18789 - 🇰🇿 Kazakhstan Yes false Leaked AS202958Hoster.KZ - AlmatyHoster.KZ14/04/2026, 02:12:3517/04/2026, 19:23:33 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198515/04/2026, 11:57:46viprinet.com, untergrund.net, hoster.kz
178.104.130.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner14/04/2026, 02:12:3516/04/2026, 19:44:52 - - ----
20.45.38.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3514/04/2026, 07:30:18 - - ----
20.98.237.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3514/04/2026, 07:30:18 - - ----
34.175.70.•••:18789 - 🇺🇸 United States Yes false Clean AS396982Google LLCGoogle14/04/2026, 02:12:3517/04/2026, 18:44:16 No Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-5138517/04/2026, 15:44:24-
82.156.176.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:12:3416/04/2026, 22:45:56 No Yes APT37, El-Machete-16/04/2026, 22:03:56-
54.160.174.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:12:3414/04/2026, 07:30:17 - - ----
47.92.121.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft14/04/2026, 02:12:3417/04/2026, 08:32:16 - - ----
20.110.51.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3414/04/2026, 07:30:17 - - ----
167.86.100.•••:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo14/04/2026, 02:12:3314/04/2026, 07:30:16 Yes Yes APT14, APT28, APT40, APT41, Carbanak, Kimsuky, Lazarus Group, SharpPandaCVE-2021-1636, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29143, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-38709, CVE-2024-24795, CVE-2024-27316, CVE-2024-36387, CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573, CVE-2024-39894, CVE-2024-40898, CVE-2024-42516, CVE-2024-43204, CVE-2024-43394, CVE-2024-47252, CVE-2024-6387, CVE-2025-1220, CVE-2025-1735, CVE-2025-23048, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-49630, CVE-2025-49812, CVE-2025-53020, CVE-2025-61984, CVE-2025-61985, CVE-2025-649114/04/2026, 02:12:41duckdns.org
74.48.39.•••:18789 - 🇺🇸 United States Yes false Clean AS35916MULTACOM CORPORATIONMultacom Corporation14/04/2026, 02:12:3317/04/2026, 10:00:51 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT36, APT37, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:12:46multacom.com
45.192.110.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS401696cognetcloud INCVapeline Technology14/04/2026, 02:12:3316/04/2026, 22:46:02 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-26465, CVE-2025-3272814/04/2026, 02:12:49-
156.239.46.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited14/04/2026, 02:12:3317/04/2026, 18:05:20 No Yes Salt TyphoonCVE-2020-25097, CVE-2021-28116, CVE-2021-28651, CVE-2021-28652, CVE-2021-28662, CVE-2021-31806, CVE-2021-31807, CVE-2021-31808, CVE-2021-33620, CVE-2021-46784, CVE-2022-41317, CVE-2022-41318, CVE-2023-28531, CVE-2023-36457, CVE-2023-36458, CVE-2023-37477, CVE-2023-38408, CVE-2023-39964, CVE-2023-39965, CVE-2023-39966, CVE-2023-46724, CVE-2023-46728, CVE-2023-46846, CVE-2023-46847, CVE-2023-48795, CVE-2023-49285, CVE-2023-49286, CVE-2023-49288, CVE-2023-50269, CVE-2023-51384, CVE-2023-51385, CVE-2023-5824, CVE-2024-2352, CVE-2024-24768, CVE-2024-27288, CVE-2024-30257, CVE-2024-34352, CVE-2024-39907, CVE-2024-39911, CVE-2024-6387, CVE-2025-34410, CVE-2025-34429, CVE-2025-34430, CVE-2025-54424, CVE-2025-55753, CVE-2025-56413, CVE-2025-58098, CVE-2025-59775, CVE-2025-65082, CVE-2025-66200, CVE-2025-66507, CVE-2025-6650814/04/2026, 02:12:52-
222.79.16.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4134ChinanetChinaNet Fujian14/04/2026, 02:12:3214/04/2026, 07:30:16 Yes No --14/04/2026, 02:12:54bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn
20.63.216.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3214/04/2026, 07:30:16 - - ----
104.215.74.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3214/04/2026, 07:30:16 - - ----
217.60.248.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS56971AS56971 CloudCGI Global Limited14/04/2026, 02:12:3216/04/2026, 22:45:59 No No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:12:57-
152.53.108.•••:18789 - 🇦🇹 Austria - false Leaked AS197540netcup GmbHAT ANX Holding 214/04/2026, 02:12:3214/04/2026, 07:30:15 Yes Yes APT15, APT17, APT28, APT31, APT36, APT37, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Inception Framework, Kimsuky, MuddyWater Group, RomCom Group, Salt Typhoon, Sea Turtle Group, SideWinder APT, The Shadow BrokersCVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:13:05ap-solut.com, ganzrund.com, amex-healthcare.com, amex-vienna.at, arbeiterkammer.at, mvb-online.com, moriroku.at, anexia-engine.com, nussknackerei.at, pro-food.at, techinvest.at, schneiders-bags.com, welovefurs.com, techbold.at, 0900-live.com, goerner-formpack.com, megasrv.de, radiocontent.net, panoramatours.com, goerner-group.com, uppernetwork.com, schlossbrasserie.at, marmind.com, transsolar.com, kornladen.at, sange-cnc.at, teigtaschen.at, bestsrv.de, james.care
20.236.136.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:3214/04/2026, 07:30:15 - - ----
47.83.117.•••:18789 - 🇺🇸 United States Yes false Leaked AS45102Alibaba (US) Technology Co., Ltd.Alibaba Cloud14/04/2026, 02:12:3117/04/2026, 09:17:15 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:13:23hichina.com, alibaba-inc.com
2a02:4780:79:ee91::1:18789 - 🇩🇪 Germany - false Clean AS47583Hostinger International LimitedHostinger14/04/2026, 02:12:3114/04/2026, 07:30:14 - - ----
8.137.184.•••:18789 - 🇸🇬 Singapore - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alibaba Cloud14/04/2026, 02:12:3118/04/2026, 00:38:21 - - ----
154.205.36.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS9294GNET INC.Cloud Innovation14/04/2026, 02:12:3016/04/2026, 23:30:52 No No --08/04/2026, 02:13:40-
144.91.67.•••:18789 - 🇩🇪 Germany Yes false Leaked AS51167Contabo GmbHContabo14/04/2026, 02:12:3017/04/2026, 10:01:25 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-36368, CVE-2021-41617, CVE-2023-31122, CVE-2023-38408, CVE-2023-43622, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:13:44contabo.de, contabo.net
87.106.166.•••:18789 - 🇩🇪 Germany Yes false Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.Ionos Cloud TXL14/04/2026, 02:12:3017/04/2026, 10:02:01 Yes No --14/04/2026, 02:13:45ionos.com
104.21.61.•••:18789 - 🇺🇸 United States - false Leaked AS13335Cloudflare, Inc.Cloudflare14/04/2026, 02:12:2915/04/2026, 01:29:24 Yes No --14/04/2026, 02:13:53digitalssite.com, fuyuanwj.com, jxxlxj.com, atcevents.com, hoolina.com, credowm.com, abaq-z.com, cgmprecast.com, twf2019.com, ccccnbtx.org, airconservice.us, sdkyjt.net, luckyplastic.net, qmscrushing.com, bikeweeksa.com, elecdata.com, ics-line.com, salvationarmyhouston.org, dupontholding.com, dupont-dow.com, hzfeidi.com, electronicengineering.com, goldenruleservicesacramento.org, cookefg.com, redondobeachairconditioning.us, hopperinsuranceagency.com, sz-jl.com, muirwoodpw.com, wellclinics.ca, bbbiotechconference.com, bowersockcapital.com, hbbygd88.com, fuhuake.com, skalafacade.com, cityfied.net, abpincorp.com, hvacdistributors.com, rightwaytrading.net, wenchyuan.com, giftedandlit.com, medtecjapan.com, anlink.net, multibase.com, jxygcy.com, acukwik.com, sanctuarywealth.com, jekotrade.com, hmcxjc.com, eg427.com, shsinotech.com, vbankph.com, itechinc.com, gipnutmeg.com, xjhhcm.com, bopcon.com, dupont-danmark.com, ytxweb.net, apparo.org, licenseglobal.com, transpaaccessoires.com, jhfadvisors.com, acs.org.au, hbcollection-ksa.com, chinasyh.net, boyu-group.com, westautorepair.com, ekakitchen.com, kiaksa.com, qnityelectronics.com, wisehousetech.com, cloudflare.net, hpme.com, salvationarmysouth.org, fletchingschool.org, qd-baolian.com, csofam.com, allseasonsroofinginc.com, wigandintegratedwealth.com, kidsbud.net, bellafaris.com, openapi.com, aviationnow.com, moto-privee.com, valorousadvisors.com, paramountairconditioning.com, jxlingtong.com, prairiefirewealth.com, proficio.in, dairyasia.org, feedstuffs.com, intermountainfab.com, 6degreeswealth.com, cmpmedica.com, baselinewoods.com, dupont.ua, goldmineandcoco.com, jiabinnu.com, airconditioningdistributor.us, montgomery-illinois.org, apimetrics.io, alghanitex.com, qzz.io, 18forty8privatewealth.com, calipio.com, kfstock.com, institut-beaute-capella.fr, daralgmyelh.com, brownsprinting.com, expocihac.com, potere-tech.com, c4group.org, mountairymd.org, xxglasses.net, m-printone.com, cloudhq-mkt6.net, goescontabil.com.br, twinfallscanal.com, forwardwirecloth.net, corian.com, cclvcr.com, timing-tech.com, klmymmyc.com, rotate.io, plumbingandheating.org, newhope.com, gseschooldallas.org, mendotahospital.org, hnbeixiang.com, aaram-sa.com, jttransport.com, seniorinsurancemarketing.com, leisonhk.com, refee.net, xjzljt.net, xjjingyoga.com, dongfanggufen.net, sxgas.net, wakechem.com, virtuabil.com.br, projectchange.info, patronato.com, alexis.in, advancentx.org, foodiversity.org, 1haojiyin.com, sama-lan.com, ark-car.com, sinotransfj.com, dzrjx.net, gsquaredprivatewealth.com, altravia.com, aptenonsjz.com, globalinternation.com, maryelexports.com, incrementstore.com, dupont.ae, classroomcentral.org, farmprogress.com, detongwiremesh.com, laan-sa.com, wealthmanagement.com, ibcglobal.com, sanhoos.com, delight-sa.com, uplandprivatewealth.com, dgclh.com, bamko.net, hansecontrol.com, pixelsksa.com, lstcarbon.com, retailtrafficmag.com, adma.com.au, ausperityprivatewealth.com, cphi.com, energetica-pv.com, rbamglobalpvtltd.com, ttstest.com, nature-mixes.com, gaetanasnyc.com, riverinafielddays.com, oukay.net, boxboard.com, yhjgkeji.com, doctorcare.ca, allurebeauty.com, china-one.net, kingdisplay.net, eu.org, concenturewealth.com, bierte.com, jadzdjm.com, clinicacolumbia.com, pesasybalanzas.com, prem-box.com, areen-alkaif.com, mtgr-altmyez.com, kloepfer.com, com.de, ttyt360.com, aircraftbluebook.com, batalatsa.com, mycatty23online.com, relaisdechatenoy.fr, everthine.com, jdkwealth.com, coventya.com, tahaluf.com, galaxy-of-luxury.com, newyorkfarmshow.com, wizardworld.com, basis.org, zgkaite.com, turnoutservices.com, guamhealthcare.com, zjdddl.com, villageofpittsford.org, toptutorsllc.com, huadewood.com, slongpumps.com, smartzonesa.com, reliancemediaworks.com, lavandeparfums.com, usa-fabric.com, shinkonggroup.com, rhawealth.com, informa-events.com, orangeairconditioning.us, starrcorporation.com, regina-hotel.fr, lifelinechiropractic.org, restaurant-hospitality.com, oracle-ag.ch, eyes-armour.com, auriccapital.com, zjhrbz.com, zhaowoo.net, jiangsufuji.com, your-plus1.com, themobilefactory.org, famigliawealth.net, salvationarmyflorida.org, iirusa.com, bestwanhui.com, carinaevinos.com, uniquedesignsbytina.com, specialevents.com, bain86.com, fxgowin.com, beecircular.org, workers.dev, skyvholdings.com, pharmacieclemenceaulalonde.fr, informa-mea.com, newoceanfood.com, chnl.it, mercer-wm.com, pbcbuilds.com, dechuangjixie.com, sauss.net, tigerexpressfuel.com, apeloa-kangyu.com, proveedor211.com, wshahalamira.com, 360-xj.com, xjwfcj.com, kester.com, tbclaw.net, pricedigests.com, macdermidgraphics.com, aldman1.com, dupont.com.sg, impresosmonterrey.com, shworldbest.com, zsnet.net, dongguansenzi.com, dupont.com.tw, caez-wv.org, lafender.com, carmaxbolivia.com, sdfengze.net, canontradeshows.com, granger-michel.com, designnews.com, informamarkets-info.com, china114.net, arcgroup.com, money2020middleeast.com, hy189.net, shmagbalanyeq.com, conversantwealth.com, xjhongshun.com, telepaws.com, tabcoin.com, informaconnect.com, eazizlildhabayihs.com, geochem.org, food-machines.net, whir.com, samvaad.co, lincolnwaymusic.org, wheatondirect.us, dmln.net, intertec.com
58.50.217.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hubei14/04/2026, 02:12:2917/04/2026, 20:08:36 No No --08/04/2026, 02:13:55-
54.227.207.•••:18789 - 🇺🇸 United States - false Clean AS14618Amazon.com, Inc.Amazon14/04/2026, 02:12:2917/04/2026, 10:01:31 - - ----
137.220.157.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS4907BGPNET PTE. LTD.Cloudbays, New Town Central Plaza14/04/2026, 02:12:2917/04/2026, 18:05:24 No No --08/04/2026, 02:14:03-
103.108.66.•••:18789 - 🇭🇰 Hong Kong - false Clean AS401696cognetcloud INCHuangyun Internet Tec Limited14/04/2026, 02:12:2917/04/2026, 21:39:45 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:14:05-
101.43.8.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing14/04/2026, 02:12:2817/04/2026, 00:15:56 Yes Yes APT37, El-MacheteCVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-5138514/04/2026, 02:14:10tencent.com
50.6.248.•••:18789 - 🇺🇸 United States - false Leaked AS31898Oracle CorporationNewfold Digital14/04/2026, 02:12:2817/04/2026, 05:31:44 Yes No --14/04/2026, 02:14:14athenixinc.com, hostmonster.com, site5.com, domain.com, readyhosting.com, homestead.com, endurance.com, mojomarketplace.com, dotster.com, bluehost.com
20.214.179.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft14/04/2026, 02:12:2814/04/2026, 07:30:12 No No --08/04/2026, 02:14:19-
172.105.5.•••:18789 - 🇨🇦 Canada Yes false Leaked AS63949Akamai Connected CloudLinode14/04/2026, 02:12:2817/04/2026, 17:26:31 Yes No -CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:14:22healtheintent.com, purewellness.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, oracle.com, hiedirectconnect.org, chickenkiller.com, maxymiser.net, oraclecloudservices.com, fastspeed.dk, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, oraclemobile.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, siebel.com, cerner.net, dynip.online, oracle-cloud.com, docucorp.com, mvalent.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, jdedwards.com, tiger-institute.org, zenedge.com, skire.com, sun.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, dynalias.net, java.net, optika.com, dyndns.info, dyndns.org, dyndns.tv, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, livelook.com, openjdk.org, virtualbox.org, dyn.com, ddns.net, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com
2001:41d0:2005:100::1d1f:18789 - 🇮🇹 Italy - false Clean AS16276OVH SASVPS EU South Mil 114/04/2026, 02:12:2717/04/2026, 02:31:24 - - ----