🦞 OpenClaw Exposure Watchboard
This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.
Exposed Instances: 1076720 Page: 296 / 10768 (100 per page) Showing: 29501-29600 Last Imported: 10/09/2026, 14:51:48
🇨🇳 507,651
🇺🇸 312,129
Build With Vivgrid
Explore Vivgrid Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com
Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.
| Endpoint | Assistant Name | Country | auth_required | is_active | has_leaked_creds | asn | asn_name | org | first_seen | last_seen | asi_has_breach | asi_has_threat_actor | asi_threat_actors | asi_cves | asi_enriched_at | asi_domains |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 18.184.107.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 13/08/2026, 00:15:22 | 09/09/2026, 22:27:01 | No | No | - | - | 07/08/2026, 01:46:08 | - |
| 119.123.78.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 13/08/2026, 00:15:22 | 15/08/2026, 21:53:12 | Yes | No | - | - | 13/08/2026, 01:46:09 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 13.39.158.•••:18789 | - | 🇫🇷 France | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 13/08/2026, 00:13:21 | 02/09/2026, 02:25:18 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2023-29323 | 13/08/2026, 00:18:01 | - |
| 116.236.82.•••:18789 | - | 🇨🇳 China mainland | - | true | Leaked | AS4812 | China Telecom (Group) | ChinaNet Shanghai | 13/08/2026, 00:13:21 | 10/09/2026, 02:00:06 | Yes | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, DarkHotel Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Packrat, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2015-8325, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10160, CVE-2016-10708, CVE-2016-1283, CVE-2016-3115, CVE-2016-6210, CVE-2016-6515, CVE-2016-8858, CVE-2017-11142, CVE-2017-11143, CVE-2017-11144, CVE-2017-11145, CVE-2017-11147, CVE-2017-11628, CVE-2017-12933, CVE-2017-15906, CVE-2017-16642, CVE-2017-20005, CVE-2017-7529, CVE-2017-7890, CVE-2017-9224, CVE-2017-9226, CVE-2017-9227, CVE-2017-9228, CVE-2017-9229, CVE-2018-10545, CVE-2018-10546, CVE-2018-10547, CVE-2018-10548, CVE-2018-10549, CVE-2018-14851, CVE-2018-14883, CVE-2018-15132, CVE-2018-15473, CVE-2018-15919, CVE-2018-16843, CVE-2018-16844, CVE-2018-16845, CVE-2018-17082, CVE-2018-19518, CVE-2018-19520, CVE-2018-19935, CVE-2018-20685, CVE-2018-20783, CVE-2018-5711, CVE-2018-5712, CVE-2018-7584, CVE-2019-20372, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2019-6977, CVE-2019-9020, CVE-2019-9021, CVE-2019-9023, CVE-2019-9024, CVE-2019-9511, CVE-2019-9513, CVE-2019-9516, CVE-2020-14145, CVE-2021-23017, CVE-2021-3618, CVE-2021-41617, CVE-2023-28531, CVE-2023-29323, CVE-2023-35784, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-6387, CVE-2024-7347, CVE-2025-23419, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 13/08/2026, 00:18:04 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, lifeliqe3d.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 18.184.107.•••:18789 | - | 🇩🇪 Germany | - | true | Clean | AS16509 | Amazon.com, Inc. | A100 ROW | 13/08/2026, 00:13:21 | 10/09/2026, 11:54:51 | No | No | - | - | 07/08/2026, 00:18:05 | - |
| 85.214.214.•••:18789 | - | 🇩🇪 Germany | - | false | Leaked | AS6724 | STRATO AG | Strato Data Center | 13/08/2026, 00:13:21 | 15/08/2026, 01:06:07 | Yes | Yes | APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-55753, CVE-2025-58098, CVE-2025-59775, CVE-2025-61984, CVE-2025-61985, CVE-2025-65082, CVE-2025-66200, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 13/08/2026, 00:18:06 | strato.de |
| 45.207.125.•••:443 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 12/08/2026, 23:36:13 | 09/09/2026, 14:03:09 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 13/08/2026, 01:06:05 | - |
| 47.98.37.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 12/08/2026, 23:36:13 | 13/08/2026, 11:08:25 | No | No | - | - | 07/08/2026, 01:06:08 | - |
| 113.243.73.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Hunan Province Network | 12/08/2026, 23:36:12 | 13/08/2026, 11:08:24 | Yes | No | - | - | 13/08/2026, 01:06:14 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 45.207.125.•••:443 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 12/08/2026, 23:36:11 | 09/09/2026, 05:32:16 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 13/08/2026, 01:06:21 | - |
| 113.95.136.•••:18789 | - | 🇮🇲 Isle of Man | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 12/08/2026, 23:36:10 | 21/08/2026, 20:02:40 | Yes | No | - | - | 13/08/2026, 01:06:28 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 139.59.101.•••:443 | - | 🇸🇬 Singapore | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 12/08/2026, 23:36:10 | 02/09/2026, 23:04:17 | No | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 13/08/2026, 01:06:29 | - |
| 121.168.115.•••:18789 | - | 🇰🇷 South Korea | Yes | true | Leaked | AS4766 | Korea Telecom | Korea Telecom | 12/08/2026, 23:36:10 | 10/09/2026, 12:00:51 | Yes | No | - | - | 13/08/2026, 01:06:30 | ktwiz.co.kr, kornet.net, bizmeka.com, kt.com, homeap.co.kr, hhnsfarm.co.kr, ktds.com, ktlogis.com, ktestate.com, kt-idc.com, ktsat.net, kt.co.kr, ktmediahub.com, ktcloud.com, ktfreetel.co.kr |
| 42.51.37.•••:50000 | - | 🇨🇳 China mainland | Yes | true | Clean | AS56005 | Zhengzhou Fastidc Technology Co.,Ltd. | Henan Telcom Union Technology | 12/08/2026, 23:36:10 | 09/09/2026, 03:24:55 | No | No | - | - | 07/08/2026, 01:06:33 | - |
| 113.249.10.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | Chinanet Chongqing | 12/08/2026, 23:36:09 | 13/08/2026, 11:08:20 | No | No | - | - | 07/08/2026, 01:06:38 | - |
| 103.185.248.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS401696 | cognetcloud INC | GA Cloud Technology Hong Kong | 12/08/2026, 23:36:09 | 19/08/2026, 04:19:20 | No | No | - | - | 07/08/2026, 01:06:43 | - |
| 47.98.37.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS37963 | Hangzhou Alibaba Advertising Co.,Ltd. | Alisoft | 12/08/2026, 23:34:18 | 13/08/2026, 06:03:03 | No | No | - | - | 07/08/2026, 03:56:24 | - |
| 46.225.185.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 12/08/2026, 23:34:18 | 13/08/2026, 06:46:22 | No | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 13/08/2026, 03:56:26 | - |
| 125.24.8.•••:18789 | - | 🇹🇭 Thailand | - | false | Clean | AS23969 | TOT Public Company Limited | TOT Public Company Limited | 12/08/2026, 23:34:17 | 13/08/2026, 06:46:22 | No | No | - | CVE-2019-7659 | 13/08/2026, 03:56:30 | - |
| 113.243.73.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Hunan Province Network | 12/08/2026, 23:34:17 | 13/08/2026, 06:46:22 | Yes | No | - | - | 13/08/2026, 03:56:32 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 113.95.136.•••:18789 | - | 🇮🇲 Isle of Man | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 12/08/2026, 23:34:14 | 21/08/2026, 14:15:19 | Yes | No | - | - | 13/08/2026, 03:56:41 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 139.59.101.•••:18789 | - | 🇸🇬 Singapore | - | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 12/08/2026, 23:34:14 | 02/09/2026, 18:03:38 | No | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 13/08/2026, 03:56:42 | - |
| 121.168.115.•••:18789 | - | 🇰🇷 South Korea | Yes | true | Leaked | AS4766 | Korea Telecom | Korea Telecom | 12/08/2026, 23:34:14 | 10/09/2026, 11:16:56 | Yes | No | - | - | 13/08/2026, 03:56:44 | ktwiz.co.kr, kornet.net, bizmeka.com, kt.com, homeap.co.kr, hhnsfarm.co.kr, ktds.com, ktlogis.com, ktestate.com, kt-idc.com, ktsat.net, kt.co.kr, ktmediahub.com, ktcloud.com, ktfreetel.co.kr |
| 113.249.10.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | Chinanet Chongqing | 12/08/2026, 23:34:13 | 13/08/2026, 06:46:18 | No | No | - | - | 07/08/2026, 03:56:50 | - |
| 103.185.248.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS401696 | cognetcloud INC | GA Cloud Technology Hong Kong | 12/08/2026, 23:34:13 | 18/08/2026, 23:15:55 | No | No | - | - | 07/08/2026, 03:56:53 | - |
| 125.24.8.•••:18789 | - | 🇹🇭 Thailand | - | false | Clean | AS23969 | TOT Public Company Limited | TOT Public Company Limited | 12/08/2026, 23:32:19 | 13/08/2026, 07:27:31 | No | No | - | CVE-2019-7659 | 13/08/2026, 01:45:37 | - |
| 113.243.73.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | ChinaNet Hunan Province Network | 12/08/2026, 23:32:18 | 13/08/2026, 08:10:44 | Yes | No | - | - | 13/08/2026, 01:45:39 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 113.95.136.•••:18789 | - | 🇮🇲 Isle of Man | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 12/08/2026, 23:32:16 | 21/08/2026, 15:41:54 | Yes | No | - | - | 13/08/2026, 01:45:45 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 46.225.185.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS24940 | Hetzner Online GmbH | Hetzner | 12/08/2026, 23:30:15 | 14/08/2026, 23:40:04 | No | No | - | CVE-2023-44487, CVE-2024-7347, CVE-2025-23419, CVE-2026-49975 | 12/08/2026, 23:32:14 | - |
| 202.182.112.•••:18789 | - | 🇯🇵 Japan | - | false | Leaked | AS20473 | The Constant Company, LLC | The Constant Company | 12/08/2026, 23:30:15 | 30/08/2026, 06:18:35 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, DragonFly, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 12/08/2026, 23:32:15 | vultr.com |
| 125.24.8.•••:18789 | - | 🇹🇭 Thailand | - | false | Clean | AS23969 | TOT Public Company Limited | TOT Public Company Limited | 12/08/2026, 23:30:15 | 14/08/2026, 23:40:04 | No | No | - | CVE-2019-7659 | 12/08/2026, 23:32:16 | - |
| 179.191.207.•••:18789 | - | 🇧🇷 Brazil | - | false | Leaked | AS28210 | GIGA MAIS FIBRA TELECOMUNICACOES S.A. | ED Solucoes em Tecnologia da Informacao | 12/08/2026, 23:30:15 | 14/08/2026, 23:40:04 | Yes | No | - | CVE-2023-21528, CVE-2023-21704, CVE-2023-21705, CVE-2023-21713, CVE-2023-21718, CVE-2023-23384, CVE-2023-29349, CVE-2023-29356, CVE-2023-32025, CVE-2023-32026, CVE-2023-32027, CVE-2023-32028, CVE-2023-36417, CVE-2023-36420, CVE-2023-36728, CVE-2023-36730, CVE-2023-36785, CVE-2023-38169, CVE-2023-44487, CVE-2024-0056, CVE-2024-7347, CVE-2025-23419 | 12/08/2026, 23:32:17 | alloha.com, ed.dev.br, db3telecom.com.br, gigamais.tv.br |
| 139.59.101.•••:18789 | - | 🇸🇬 Singapore | - | true | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 12/08/2026, 23:30:15 | 04/09/2026, 13:18:47 | No | Yes | APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-23017, CVE-2021-28041, CVE-2021-3618, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 12/08/2026, 23:32:18 | - |
| 129.121.122.•••:443 | - | 🇺🇸 United States | Yes | false | Clean | AS31898 | Oracle Corporation | OGTIPS1 | 12/08/2026, 22:53:09 | 14/08/2026, 01:32:29 | - | - | - | - | - | - |
| 101.43.226.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 12/08/2026, 22:53:09 | 10/09/2026, 12:00:18 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 13/08/2026, 01:05:18 | tencentcloud.com |
| 156.236.66.•••:50000 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS142403 | YISU CLOUD LTD | Yisu Cloud Ltd | 12/08/2026, 22:53:09 | 27/08/2026, 09:18:22 | No | Yes | Packrat | CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/08/2026, 01:05:19 | - |
| 66.135.12.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS20473 | The Constant Company, LLC | Constant | 12/08/2026, 22:53:08 | 09/09/2026, 12:37:54 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/08/2026, 01:05:26 | constant.com |
| 125.25.112.•••:18789 | - | 🇹🇭 Thailand | Yes | false | Clean | AS23969 | TOT Public Company Limited | TOT Public Company Limited | 12/08/2026, 22:53:07 | 13/08/2026, 10:24:58 | No | Yes | Packrat | - | 13/08/2026, 01:05:28 | - |
| 47.85.188.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 12/08/2026, 22:53:07 | 10/09/2026, 07:46:49 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/08/2026, 01:05:32 | hichina.com, alibaba-inc.com |
| 13.212.25.•••:443 | - | 🇸🇬 Singapore | Yes | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 12/08/2026, 22:53:07 | 10/09/2026, 09:53:59 | No | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 13/08/2026, 01:05:34 | - |
| 183.128.201.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 12/08/2026, 22:53:07 | 16/08/2026, 04:22:43 | No | No | - | - | 07/08/2026, 01:05:36 | - |
| 45.207.125.•••:443 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 12/08/2026, 22:53:07 | 09/09/2026, 22:31:10 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 13/08/2026, 01:05:38 | - |
| 154.12.227.•••:20054 | - | 🇺🇸 United States | Yes | false | Leaked | AS40021 | Contabo Inc. | Contabo | 12/08/2026, 22:53:06 | 25/08/2026, 08:20:50 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/08/2026, 01:05:44 | cogentco.com, contaboserver.net, cprapid.com |
| 45.207.121.•••:443 | - | 🇭🇰 Hong Kong | Yes | true | Leaked | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 12/08/2026, 22:53:06 | 10/09/2026, 10:36:10 | Yes | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 13/08/2026, 01:05:47 | cgmprecast.com, fuhuake.com, abpincorp.com, jekotrade.com, bopcon.com, boyu-group.com, qd-baolian.com, csofam.com, jiabinnu.com, kfstock.com, klmymmyc.com, hnbeixiang.com, xjjingyoga.com, 1haojiyin.com, detongwiremesh.com, dgclh.com, lstcarbon.com, ttstest.com, gaetanasnyc.com, yhjgkeji.com, bierte.com, ttyt360.com, zgkaite.com, turnoutservices.com, zjdddl.com, zjhrbz.com, bain86.com, impresosmonterrey.com, shworldbest.com, dongguansenzi.com |
| 113.206.227.•••:50001 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Chongqing | 12/08/2026, 22:53:06 | 19/08/2026, 18:17:00 | Yes | No | - | - | 13/08/2026, 01:05:48 | chinaunicom.cn |
| 122.10.47.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS134548 | DXTL Tseung Kwan O Service | Hong Kong Service | 12/08/2026, 22:53:06 | 09/09/2026, 09:46:59 | No | No | - | - | 07/08/2026, 01:05:49 | - |
| 45.207.124.•••:443 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 12/08/2026, 22:53:05 | 10/09/2026, 12:00:52 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 13/08/2026, 01:05:53 | - |
| 123.249.74.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS55990 | Huawei Cloud Service data center | Huawei Cloud | 12/08/2026, 22:53:05 | 13/08/2026, 10:24:56 | Yes | No | - | - | 13/08/2026, 01:05:54 | smartcom.cc, huawei.com, huaweidevice.com |
| 45.207.121.•••:443 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 12/08/2026, 22:53:05 | 09/09/2026, 14:45:33 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 13/08/2026, 01:05:56 | - |
| 2409:8a1a:3b43:8690:46a8:42ff:fe0c:9f38:443 | - | 🇨🇳 China mainland | - | false | Clean | AS132525 | HeiLongJiang Mobile Communication Company Limited | China Mobile | 12/08/2026, 22:53:05 | 13/08/2026, 16:55:43 | - | - | - | - | - | - |
| 102.132.237.•••:80 | - | 🇿🇦 South Africa | Yes | false | Leaked | AS37680 | Cool Ideas Service Provider (Pty) Ltd | OpenServe FTTH | 12/08/2026, 22:53:05 | 19/08/2026, 06:28:37 | Yes | No | - | - | 13/08/2026, 01:06:01 | chickenkiller.com, quickconnect.to, fastspeed.dk, ddns.net |
| 129.121.122.•••:18789 | - | 🇺🇸 United States | Yes | false | Clean | AS31898 | Oracle Corporation | OGTIPS1 | 12/08/2026, 22:51:13 | 15/08/2026, 01:09:56 | - | - | - | - | - | - |
| 101.43.226.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Clean | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 12/08/2026, 22:51:13 | 10/09/2026, 11:58:31 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, El-Machete, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 12/08/2026, 22:53:34 | tencentcloud.com |
| 168.107.63.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle | 12/08/2026, 22:51:13 | 14/08/2026, 03:38:51 | Yes | No | - | - | 12/08/2026, 22:53:39 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 66.135.12.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS20473 | The Constant Company, LLC | Constant | 12/08/2026, 22:51:12 | 09/09/2026, 07:37:45 | Yes | Yes | APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt Typhoon | CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 12/08/2026, 22:53:44 | constant.com |
| 159.194.226.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS198610 | Beget LLC | Beget LLC | 12/08/2026, 22:51:11 | 13/08/2026, 06:03:08 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 12/08/2026, 22:53:45 | beget.ru |
| 125.25.112.•••:18789 | - | 🇹🇭 Thailand | Yes | false | Clean | AS23969 | TOT Public Company Limited | TOT Public Company Limited | 12/08/2026, 22:51:11 | 13/08/2026, 06:03:07 | No | Yes | Packrat | - | 12/08/2026, 22:53:47 | - |
| 47.85.188.•••:18789 | - | 🇺🇸 United States | Yes | true | Leaked | AS45102 | Alibaba (US) Technology Co., Ltd. | Alibaba Cloud | 12/08/2026, 22:51:11 | 10/09/2026, 02:46:19 | Yes | No | - | CVE-2016-20012, CVE-2019-16905, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 12/08/2026, 22:53:52 | hichina.com, alibaba-inc.com |
| 13.212.25.•••:18789 | - | 🇸🇬 Singapore | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 12/08/2026, 22:51:10 | 10/09/2026, 04:54:22 | No | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 12/08/2026, 22:53:53 | - |
| 183.128.201.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 12/08/2026, 22:51:10 | 16/08/2026, 00:04:03 | No | No | - | - | 06/08/2026, 22:53:54 | - |
| 122.10.47.•••:18789 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS134548 | DXTL Tseung Kwan O Service | Hong Kong Service | 12/08/2026, 22:51:09 | 09/09/2026, 04:47:52 | No | No | - | - | 06/08/2026, 22:54:04 | - |
| 113.206.227.•••:18789 | - | 🇨🇳 China mainland | - | false | Leaked | AS4837 | CHINA UNICOM China169 Backbone | China Unicom Chongqing | 12/08/2026, 22:51:09 | 19/08/2026, 12:54:29 | Yes | No | - | - | 12/08/2026, 22:54:05 | chinaunicom.cn |
| 102.132.237.•••:18789 | - | 🇿🇦 South Africa | - | false | Leaked | AS37680 | Cool Ideas Service Provider (Pty) Ltd | OpenServe FTTH | 12/08/2026, 22:51:08 | 19/08/2026, 02:07:53 | Yes | No | - | - | 12/08/2026, 22:54:12 | chickenkiller.com, quickconnect.to, fastspeed.dk, ddns.net |
| 168.107.63.•••:18789 | - | 🇺🇸 United States | Yes | false | Leaked | AS31898 | Oracle Corporation | Oracle | 12/08/2026, 22:49:18 | 14/08/2026, 05:02:25 | Yes | No | - | - | 13/08/2026, 01:45:16 | netsuit.com, healtheintent.com, purewellness.com, lodestarcorp.com, cerner.ae, retek.com, tryfoexnow.com, moatads.com, oraclefusion.com, connectinc.com, inquira.com, portal.com, glog.com, healtheatcerner.com, oracle.com, hiedirectconnect.org, maxymiser.net, oraclecloudservices.com, rsys2.net, hyperroll.com, nor1.com, oxygen.systems, oraclegovcloud.com, orcale.com, sun.co.in, openair.co, oraclepdemos.com, stellent.com, torexretail.com, siebel.com, cerner.net, oracle-cloud.com, docucorp.com, mvalent.com, netsuitesuiteprojectspro.com, elementfusion.com, netsuiteforms.com, oraclecloud.com, en25.com, solaris.com, rightnowtech.com, think.com, ipapp.com, pertmaster.com, jdedwards.com, commercialware.com, tiger-institute.org, zenedge.com, skire.com, sun.com, ateam-oracle.com, sales.com, fyleio.com, push.io, estara.com, tekelec.com, textura.com, paymyhealthbill.com, dyndns.com, java.net, optika.com, mobilemd.com, jcp.org, smed.com, cernerenviza-tw.com, datafox.com, recruitmax.com, decisioneering.com, adiinsights.com, stortek.com, seebeyond.com, berkeleydb.org, livelook.com, openjdk.org, virtualbox.org, dyn.com, oraclehealth.com, aimsystems.com, sunworld.com, plumtree.com, storagetek.com, oracledatacloud.com |
| 159.194.226.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS198610 | Beget LLC | Beget LLC | 12/08/2026, 22:49:17 | 13/08/2026, 07:27:36 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 13/08/2026, 01:45:19 | beget.ru |
| 13.212.25.•••:18789 | - | 🇸🇬 Singapore | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 12/08/2026, 22:49:16 | 10/09/2026, 07:00:15 | No | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 13/08/2026, 01:45:23 | - |
| 43.245.224.•••:18789 | - | 🇳🇱 Netherlands | - | true | Leaked | AS57043 | HOSTKEY B.V. | Hostkey | 12/08/2026, 22:47:16 | 10/09/2026, 11:54:28 | Yes | Yes | Salt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 12/08/2026, 23:32:07 | hostkey.com, ddns.net |
| 64.202.191.•••:18789 | - | 🇺🇸 United States | - | true | Leaked | AS26496 | GoDaddy.com, LLC | GoDaddy | 12/08/2026, 22:47:14 | 06/09/2026, 01:39:45 | Yes | No | - | - | 12/08/2026, 23:32:09 | godaddy.com |
| 159.194.226.•••:18789 | - | 🇷🇺 Russia | - | false | Clean | AS198610 | Beget LLC | Beget LLC | 12/08/2026, 22:47:14 | 14/08/2026, 23:40:05 | Yes | No | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 12/08/2026, 23:32:10 | beget.ru |
| 13.212.25.•••:18789 | - | 🇸🇬 Singapore | - | true | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services | 12/08/2026, 22:47:14 | 10/09/2026, 11:54:49 | No | - | - | CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728 | 12/08/2026, 23:32:11 | - |
| 36.27.37.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 12/08/2026, 22:10:09 | 13/08/2026, 08:58:17 | No | No | - | - | 07/08/2026, 01:04:06 | - |
| 15.223.206.•••:443 | - | 🇨🇦 Canada | Yes | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 12/08/2026, 22:10:09 | 14/08/2026, 00:49:13 | No | No | - | - | 07/08/2026, 01:04:07 | - |
| 2408:8234:9c18:e0b:9209:d0ff:fe7b:84a9:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom | 12/08/2026, 22:10:09 | 13/08/2026, 08:58:17 | - | - | - | - | - | - |
| 45.207.124.•••:443 | - | 🇭🇰 Hong Kong | Yes | true | Clean | AS142286 | LUOGELANG (FRANCE) LIMITED | Ares IDC Limited | 12/08/2026, 22:10:08 | 10/09/2026, 09:53:58 | No | Yes | APT1, APT32, APT37, APT38, DragonFly, El-Machete, FIN8, Gamaredon-Group, Packrat, gozi | - | 13/08/2026, 01:04:18 | - |
| 113.105.194.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS4134 | Chinanet | CHINANET Guangdong | 12/08/2026, 22:10:08 | 16/08/2026, 15:03:45 | Yes | No | - | - | 13/08/2026, 01:04:25 | bj189.cn, 118114.cn, ctwing.cn, chinatelecom.com.cn, chinatelecom.cn, new-gm.cn, 189.cn, 189free.cn, ideal.sh.cn, daqu.com.cn, ctyun.cn |
| 42.51.40.•••:50000 | - | 🇨🇳 China mainland | Yes | true | Clean | AS56005 | Zhengzhou Fastidc Technology Co.,Ltd. | Henan Telcom Union Technology | 12/08/2026, 22:10:08 | 09/09/2026, 04:50:02 | No | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-41617 | 13/08/2026, 01:04:26 | - |
| 156.247.81.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS9294 | GNET INC. | Cloud Innovation | 12/08/2026, 22:10:07 | 10/09/2026, 09:11:36 | No | No | - | - | 07/08/2026, 01:04:30 | - |
| 122.234.149.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 12/08/2026, 22:10:07 | 18/08/2026, 17:15:34 | No | No | - | - | 07/08/2026, 01:04:38 | - |
| 45.95.2.•••:443 | - | 🇩🇪 Germany | Yes | false | Clean | AS41745 | Hosting services | Ilya Baykov | 12/08/2026, 22:10:07 | 16/08/2026, 11:30:20 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 13/08/2026, 01:04:41 | - |
| 193.112.192.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 12/08/2026, 22:10:07 | 10/09/2026, 12:00:28 | Yes | No | - | - | 13/08/2026, 01:04:44 | telstra.com.au, muru-d.com, ivision.com.au, medicaldirector.com, bigond.com, telstrainternationalgroup.com, telstra.com, bigpond.com, emerging.com.au, telstraglobal.com, telstrainternational.com, telstraglobal.net |
| 64.83.34.•••:18789 | - | 🇯🇵 Japan | Yes | false | Clean | AS979 | NetLab Global | NTT America | 12/08/2026, 22:10:07 | 19/08/2026, 04:19:19 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 13/08/2026, 01:04:45 | - |
| 1.160.158.•••:443 | - | 🇹🇼 Taiwan | Yes | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 12/08/2026, 22:10:07 | 14/08/2026, 01:32:30 | Yes | No | - | CVE-2005-2089, CVE-2008-1446, CVE-2009-1535, CVE-2009-2521, CVE-2009-4444, CVE-2009-4445, CVE-2017-7269, CVE-2018-19052, CVE-2018-25103, CVE-2019-11072, CVE-2024-3708 | 13/08/2026, 01:04:48 | twgate.net, hinet.net |
| 117.50.175.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS23724 | IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province Network | UCloud | 12/08/2026, 22:10:06 | 13/08/2026, 09:41:33 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-7347, CVE-2025-23419 | 13/08/2026, 01:04:51 | ucloud.cn |
| 125.82.66.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Chongqing | 12/08/2026, 22:10:06 | 13/08/2026, 09:41:33 | No | No | - | - | 07/08/2026, 01:04:57 | - |
| 43.245.224.•••:443 | - | 🇳🇱 Netherlands | Yes | true | Leaked | AS57043 | HOSTKEY B.V. | Hostkey | 12/08/2026, 22:10:05 | 10/09/2026, 12:01:15 | Yes | Yes | Salt Typhoon | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 13/08/2026, 01:05:03 | hostkey.com, ddns.net |
| 163.228.242.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS58593 | Shanghai Blue Cloud Technology Co.,Ltd | Shanghai Blue Cloud Technology | 12/08/2026, 22:10:05 | 09/09/2026, 21:05:29 | Yes | No | - | - | 13/08/2026, 01:05:05 | 21vbluecloud.com |
| 164.92.128.•••:443 | - | 🇩🇪 Germany | Yes | false | Clean | AS14061 | DigitalOcean, LLC | DigitalOcean | 12/08/2026, 22:10:05 | 14/08/2026, 02:58:19 | No | Yes | APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt Typhoon | CVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985 | 13/08/2026, 01:05:07 | - |
| 36.27.37.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 12/08/2026, 22:08:02 | 13/08/2026, 04:36:58 | No | No | - | - | 06/08/2026, 22:52:25 | - |
| 15.223.206.•••:18789 | - | 🇨🇦 Canada | - | false | Clean | AS16509 | Amazon.com, Inc. | Amazon Web Services Canada | 12/08/2026, 22:08:02 | 13/08/2026, 20:29:37 | No | No | - | - | 06/08/2026, 22:52:26 | - |
| 223.241.23.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Anhui | 12/08/2026, 22:08:02 | 18/08/2026, 20:11:36 | No | No | - | - | 06/08/2026, 22:52:29 | - |
| 2408:8234:9c18:e0b:9209:d0ff:fe7b:84a9:18789 | - | 🇨🇳 China mainland | - | false | Clean | AS4837 | CHINA UNICOM China169 Backbone | China Unicom | 12/08/2026, 22:08:01 | 13/08/2026, 05:19:58 | - | - | - | - | - | - |
| 156.247.81.•••:18789 | - | 🇭🇰 Hong Kong | Yes | false | Clean | AS9294 | GNET INC. | Cloud Innovation | 12/08/2026, 22:07:59 | 10/09/2026, 04:11:22 | No | No | - | - | 06/08/2026, 22:52:45 | - |
| 104.21.24.•••:18789 | - | 🇺🇸 United States | - | false | Leaked | AS13335 | Cloudflare, Inc. | Cloudflare | 12/08/2026, 22:07:59 | 13/08/2026, 05:19:55 | Yes | No | - | - | 12/08/2026, 22:52:52 | premiergroup.net, imagodeigallery.com, hudsonpacific.com.au, danca.tv, stjosephhealthmedicalgroup.com, venancio.com, almexmx.com, effectiv.ca, innovisiontech.co, psjhealth.org, frprongxanh.com, spokanecardiology.com, cgmprecast.com, stjosephhealth.org, collabriacare.org, grupocsh.com, pudacoalinc.com, holidayinnfresno.com, ics-line.com, deanesa.co.za, limpiom.net, pivotsmo.com, grassrootscardiff.com, saintjohnscancer.org, maxwellcoachco.com, quarterbistrocincy.com, hbbygd88.com, thomsonparaninfo.com, aclteslim.com, gruppoesi.it, globalmattersgroup.com, fuhuake.com, refleon.com, kanesolriver.com, abpincorp.com, hvacdistributors.com, tbioc.org, hotelsoho.com.au, buddybenchaustralia.com.au, draperyconcepts.com.au, congtyhungquoc.com, anlink.net, pentafonusa.com, saharacares.net, jekotrade.com, originalsoulvegetarian.com, jindianglass.net, providencehealthplan.com, rajdootcables.com, shczhsyy.com, tronicstudio.com, gipnutmeg.com, bopcon.com, resoto.com, objetivomoda.com, easymedico.com, famexdeleon.com, branexdesign.com, go-digerati.com, elitex.it, naseni.gov.ng, judgeyachts.com, preventionlady.com, providence.org, enmagine.com, boyu-group.com, sjhhnss.org, sunglotech.com, complyfoam.com, minhkhanhcomputer.com, carleaseusa.com, wisehousetech.com, thietkethanhan.com, cloudflare.net, sotecatering.com, talentresponse.com, lucera.fr, qd-baolian.com, databrick.com, csofam.com, wireandcableconnection.com, makerpad.co, premierwines.com, thietbixaydunglamtung.com, imisamx.com, ipaporcellane.it, sjo.org, ronglianjr.com, nardini.com, mission4health.com, altosdelchicala.com, williamsfurnacerepair.com, imsa-search.com, baselinewoods.com, vpicvietphat.com, bestrun.net, hc0798.com, bsrandassociates.com, jiabinnu.com, ongnhuamemloithep.com, willcctv.com, cleanzoneheating.com, alghanitex.com, qzz.io, giahungtech.com, kapturebooth.com.au, columbiasurgicalspecialists.com, kfstock.com, gatsbylabs.com, gransierassociates.com, yipesnorth.com, kinetika.cn, porcelainchina.net, koworksllc.net, iobconcursos.com, ginachlaw.com, brownsprinting.com, m-printone.com, sharevue.org, sapl-sas.com, cloudhq-mkt6.net, nubix.io, freetaxusa.com, champmar-ec.com, angel-box.net, tennis-florida.com, hzhsyr.com, gsgarage.com.au, ninokyo.com, timing-tech.com, klmymmyc.com, journeyconstruction.com, aquastorenw.com, healdsburgdistricthospital.org, bolinyinwu.net, studyinchina.io, plumbingandheating.org, psjhmedgroups.org, totolink-shop.com, hagpleasuremoments.it, chunxinghejin.com, aerosupplycargosadecv.com, sktind.com, pp.ua, wenn.com, hnbeixiang.com, stjudewellnesscenter.org, importadorakukulkan.com, chinayinshufood.com, appliancesservices.com, vannuysair.com, phase-line.com, leisonhk.com, davlanrooftiling.com.au, newliferestoration.net, xjjingyoga.com, gpchain.com, dongfanggufen.net, wakechem.com, ecbarton.com, sasmtm.com, 1haojiyin.com, yitongqingjie.com, sinotransfj.com, kadlecmed.org, nossasaopaulo.org.br, stjoe.org, aptenonsjz.com, encarnacionmas.com, rameducationalservices.com, eurostampiparma.it, redwoodmemorial.org, yongxinco.com, code-china.com, aharegioniv.com, airtronic-usa.com, prastudies.com, sacksrickettscase.com, stjhs.org, fcea.net, detongwiremesh.com, kinggm.com, simatek.com, thanhcongmarble.com, hkplasticviet.com, dgclh.com, bamko.net, sicmi.com, lifestylefinancial.co.za, creditop.com, lstcarbon.com, simplamo.com, it.com, ttstest.com, carmivietnam.com, china-ycgkjx.com, viettelsoftware.com, outbook.com, gaetanasnyc.com, blexointernational.com, uicmarine.com, rohigreen.com, ichiisoft.com, yhjgkeji.com, cqsl.com.cn, innatschofield.com, polimerosrl.it, providence.in, commercialdiversified.com, hongyang0769.net, getransportation.com, jssd.net, eu.org, corporativobrefer.com, scheduleme.org, bierte.com, pprossmx.com, hadungcraft.com, facey.net, camsizer.cn, otisa.com, swedish.org, techcronus.com.au, ttyt360.com, grupocasiraga.com, biocro.net, compushopsa.co.za, mandarinoriental.it, hancockalbanese.com, dkcompany.com, shhctsy.com, gracehealthsystem.com, eyesetcokc.com, doradver.ru, univ-catholille.fr, theoutplay.com, altatechinc.com, maginus.com, kadlec.org, my-cx.com.au, secondsandsurplus.com, barnesdennig.com, wzydkj.com, pioneersunlimited.com, atl-az.com, xenanghanoi.com, pmps.com.hk, shinruey.net, richlandtexas.gov, zgkaite.com, turnoutservices.com, edaris.com, turnerdesign.com.au, mcdanielssubaru.com, mahalle.dk, zjdddl.com, m-wood2.com, propertyconsultantsltd.com, dqkeyi.com, productosdelmarmarinatrading.com, panologic.com, abhotel.com.au, princewilliamsoundlodging.com, leverijllc.com, printerkartu.com, antoanbp.com, robuschi.it, thuanthienplastic.com, pulsechecked.com, oracle-ag.ch, eyes-armour.com, zjhrbz.com, quesosochoa.com, jiangsufuji.com, thealternativeboard.com, chedermenachem.org, mediterranealg.it, airconditioningheating.net, synecticstrainers.com, jonesvillefamilymedical.com, albedadvanced.com, regalworx.co.za, sddyhy.net, kisimarealestate.com, unclebsorganicgardening.com, ruixingkuaiji.com, friscoinnongalena.com, covmedgroup.org, st-lukes.org, provimaging.com, shmc.org, solarunitedneighbors.org, bain86.com, fxgowin.com, fyiac.com, ariete.com.br, stjosephhomehealth.org, luckywaymall.com, olyobgyn.com, viagratabsforsale.online, naniwavn.com, workers.dev, chaolipack.com, carnes3a.com, fremontfirefighters.com, gvrsystemsautomation.com, newoceanfood.com, ltticorp.com, sistersofprovidence.net, bjzthb.com, qbsconstruction.co.nz, cmimoulding.com, dechuangjixie.com, reteck.net, utoolslp.com, mallyas.com, tecnosolmx.com, jinpac.com, cloudns.net, uzin-metal.com, motossenda.com, psjhmedgroups.com, youreventsittersllc.com, ibss.it, allplans.co.za, pet-bottle.net, meeshamoultonlaw.com, pollyholding.com, anhuaabrasives.net, tintamar.com, impresosmonterrey.com, shworldbest.com, plantation-ppl.com, dongguansenzi.com, omsheel.com, meridianoutboard.com, prudentialtravels.net, thecontinentalhotel.com.au, physnum.com, isobarmarketingintelligence.com, providenceventures.org, cokhinamanh.com, vipersafetyinc.com, themagicbus.gr, qyfxs.cn, smartbuildings.com, denaliincorporated.com, tensarnagreen.com, houstmust.com, lavenderhotelvn.com, bkpeterson.com, chinakangtai.net, hitesh.co.in, germanpool-nb.com, mckinneysmiles.com, cartubo.com, ssammpack.com, goigo.hr, viameta.net, southernbellepromo.com, loginport.com, healthservicesassetmanagement.com, kipenguincentre.com.au, geochem.org, food-machines.net, nguyenlieuvn.com, hoanggiapccc.com, tomoloo.cn |
| 122.234.149.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Hangzhou | 12/08/2026, 22:07:59 | 18/08/2026, 12:51:52 | No | No | - | - | 06/08/2026, 22:52:54 | - |
| 45.95.2.•••:18789 | - | 🇩🇪 Germany | - | false | Clean | AS41745 | Hosting services | Ilya Baykov | 12/08/2026, 22:07:58 | 16/08/2026, 07:11:40 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414, CVE-2026-59995, CVE-2026-59996, CVE-2026-59997, CVE-2026-59998, CVE-2026-59999, CVE-2026-60000, CVE-2026-60001, CVE-2026-60002 | 12/08/2026, 22:52:56 | - |
| 193.112.192.•••:18789 | - | 🇨🇳 China mainland | Yes | true | Leaked | AS45090 | Shenzhen Tencent Computer Systems Company Limited | Tencent Cloud Computing | 12/08/2026, 22:07:58 | 10/09/2026, 11:58:46 | Yes | No | - | - | 12/08/2026, 22:52:59 | telstra.com.au, muru-d.com, ivision.com.au, medicaldirector.com, bigond.com, telstrainternationalgroup.com, telstra.com, bigpond.com, emerging.com.au, telstraglobal.com, telstrainternational.com, telstraglobal.net |
| 64.83.34.•••:18789 | - | 🇯🇵 Japan | Yes | false | Clean | AS979 | NetLab Global | NTT America | 12/08/2026, 22:07:58 | 18/08/2026, 23:15:53 | No | No | - | CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-61985, CVE-2026-35385, CVE-2026-35386, CVE-2026-35387, CVE-2026-35388, CVE-2026-35414 | 12/08/2026, 22:53:00 | - |
| 1.160.158.•••:18789 | - | 🇹🇼 Taiwan | - | false | Leaked | AS3462 | Data Communication Business Group | Chunghwa Telecom Data Group | 12/08/2026, 22:07:57 | 13/08/2026, 21:12:59 | Yes | No | - | CVE-2005-2089, CVE-2008-1446, CVE-2009-1535, CVE-2009-2521, CVE-2009-4444, CVE-2009-4445, CVE-2017-7269, CVE-2018-19052, CVE-2018-25103, CVE-2019-11072, CVE-2024-3708 | 12/08/2026, 22:53:02 | twgate.net, hinet.net |
| 117.50.175.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Leaked | AS23724 | IDC, China Telecommunications Corporation / AS4808 China Unicom Beijing Province Network | UCloud | 12/08/2026, 22:07:57 | 13/08/2026, 05:19:55 | Yes | Yes | APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Packrat, Sandworm Team, The Shadow Brokers | CVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2024-31079, CVE-2024-32760, CVE-2024-34161, CVE-2024-35200, CVE-2024-7347, CVE-2025-23419 | 12/08/2026, 22:53:05 | ucloud.cn |
| 125.82.66.•••:18789 | - | 🇨🇳 China mainland | Yes | false | Clean | AS4134 | Chinanet | ChinaNet Chongqing | 12/08/2026, 22:07:56 | 13/08/2026, 05:19:54 | No | No | - | - | 06/08/2026, 22:53:10 | - |