🦞 OpenClaw Exposure Watchboard

This page lists publicly reachable active OpenClaw instances for defensive awareness. If this is your deployment, enable authentication, remove direct public exposure, and patch immediately.

Exposed Instances: 816988 Page: 456 / 8170 (100 per page) Showing: 45501-45600 Last Imported: 15/05/2026, 09:32:33
Build With Vivgrid

Ship Secure Enterprise AI Agents 10× Faster with vivgrid.com

Vivgrid gives you authentication, model gateway, tool control, cost tracking, and enterprise observability — everything you need to ship AI agents safely at scale.

Explore Vivgrid
Showing page 456 of 8170
Endpoint Assistant Name Country auth_requiredis_activehas_leaked_credsasnasn_nameorgfirst_seenlast_seenasi_has_breachasi_has_threat_actorasi_threat_actorsasi_cvesasi_enriched_atasi_domains
43.134.51.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay11/04/2026, 04:52:3317/04/2026, 17:28:46 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198516/04/2026, 19:03:27tencent.com
135.225.90.•••:18789 - 🇸🇪 Sweden - false Clean AS8075Microsoft CorporationCloud11/04/2026, 04:52:3311/04/2026, 10:08:10 - - ----
154.193.237.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:52:3314/04/2026, 10:32:05 - - ----
89.167.10.•••:18789 - 🇫🇮 Finland Yes false Clean AS24940Hetzner Online GmbHHetzner11/04/2026, 04:52:3317/04/2026, 10:03:18 - - ----
154.193.239.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:52:3214/04/2026, 10:32:20 - - ----
154.193.233.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:52:3214/04/2026, 00:00:07 No No --08/04/2026, 00:04:10-
129.146.40.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationOracle11/04/2026, 04:52:3217/04/2026, 10:04:30 - - ----
49.233.75.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud11/04/2026, 04:52:3213/04/2026, 22:30:04 - - ----
183.159.161.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hangzhou11/04/2026, 04:52:3211/04/2026, 10:08:09 - - ----
192.140.186.•••:18789 - 🇨🇳 China mainland Yes false Clean AS146817Hubei Feixun Network Co., LtdHubei Feixun Network11/04/2026, 04:52:3216/04/2026, 18:15:51 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272814/04/2026, 00:03:19-
154.193.235.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:52:3214/04/2026, 01:30:50 - - ----
20.46.179.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:3111/04/2026, 10:08:08 - - ----
91.99.213.•••:18789 - 🇩🇪 Germany Yes false Clean AS24940Hetzner Online GmbHHetzner Online11/04/2026, 04:52:3116/04/2026, 17:30:39 - - ----
124.223.38.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud11/04/2026, 04:52:3117/04/2026, 04:03:59 Yes Yes APT37, El-Machete-14/04/2026, 09:50:27tencent.com
240e:3b7:3230:a9c1::120:18789 - 🇨🇳 China mainland - false Clean AS134774CHINANET Guangdong province Shenzhen MAN networkChina Telecom IPv6 Broadband Address11/04/2026, 04:52:3114/04/2026, 10:31:42 - - ----
20.214.168.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:3111/04/2026, 10:08:08 - - ----
115.190.167.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology11/04/2026, 04:52:3014/04/2026, 21:44:41 - - ----
20.214.146.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:3011/04/2026, 10:08:07 - - ----
154.81.38.•••:18789 - 🇺🇸 United States Yes false Clean AS140869Turing Group LimitedTuring Group Limited11/04/2026, 04:52:3016/04/2026, 15:14:02 - - ----
45.33.76.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode11/04/2026, 04:52:2917/04/2026, 18:07:42 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, Donot Team, Earth Berberoka, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2008-0455, CVE-2010-5107, CVE-2012-0031, CVE-2012-0053, CVE-2012-0883, CVE-2012-2687, CVE-2012-3499, CVE-2012-4558, CVE-2013-1862, CVE-2013-1896, CVE-2013-2249, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-0228, CVE-2015-3183, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-0777, CVE-2016-0778, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-4975, CVE-2016-5387, CVE-2016-6210, CVE-2016-6515, CVE-2016-8612, CVE-2016-8743, CVE-2017-15906, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-37436, CVE-2023-28531, CVE-2023-28625, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 02:20:38-
182.119.234.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom Henan11/04/2026, 04:52:2911/04/2026, 10:08:07 - - ----
43.139.89.•••:18789 - 🇨🇳 China mainland Yes false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing11/04/2026, 04:52:2917/04/2026, 10:03:25 - - ----
2408:8221:946:6980::1004:18789 - 🇨🇳 China mainland - false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom11/04/2026, 04:52:2915/04/2026, 01:31:48 - - ----
52.231.71.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2911/04/2026, 10:08:06 - - ----
94.191.37.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing11/04/2026, 04:52:2917/04/2026, 08:34:28 - - ----
5.42.97.•••:18789 - 🇷🇺 Russia Yes false Clean AS9123JSC "TIMEWEB"Taiwan Cloud11/04/2026, 04:52:2912/04/2026, 00:47:20 - - ----
47.92.143.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft11/04/2026, 04:52:2917/04/2026, 01:48:41 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272816/04/2026, 21:20:34-
165.22.33.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean11/04/2026, 04:52:2811/04/2026, 10:08:06 - - ----
20.114.66.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2811/04/2026, 10:08:05 - - ----
54.69.153.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon11/04/2026, 04:52:2814/04/2026, 01:30:57 - - ----
20.110.127.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2811/04/2026, 10:08:05 - - ----
104.21.55.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare11/04/2026, 04:52:2811/04/2026, 10:08:05 - - ----
47.129.206.•••:18789 - 🇸🇬 Singapore - false Leaked AS16509Amazon.com, Inc.Amazon Web Services11/04/2026, 04:52:2814/04/2026, 22:30:16 Yes No --14/04/2026, 22:33:48amazon.fr, bookworm.com, amazon.com.br, audible.com, lovefilm.com, amazon.eu, amzaon.com, amazaon.com, audible.in, z-exp.com, amozon.com, aws-amazon.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, amazonaws.cm, com.be, amazonpay.com, rooftopmedia.net, vine.com, imdb.com, ssl-images-amazon.com, amazon.com.au, amazon-rings.com, assoc-amazon.com, amazonin.com, amzn.asia, annapurnalabs.com, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, amazon.ae, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, amazon-aws.com, endless.com, amazonlocal.com, amazonm.com, amazonllc.com, media-imdb.com, amazon.com.tw, createspace.com, amazonaws.com, amzn.com, amazon.com, images-amazon.com, amazon.com.co
47.129.193.•••:18789 - 🇸🇬 Singapore - false Leaked AS16509Amazon.com, Inc.Amazon Web Services11/04/2026, 04:52:2817/04/2026, 05:34:12 Yes No --17/04/2026, 00:17:14amazon.fr, bookworm.com, amazon.com.br, audible.com, lovefilm.com, amazon.eu, amzaon.com, amazaon.com, audible.in, z-exp.com, amozon.com, aws-amazon.com, shopbop.com, accept.com, amazonn.com, boxofficemojo.com, amazonaws-us-gov.com, amaozn.com, awsamazon.com, amazonmusiclocal.com, a9.com, amzzon.com, mturk.com, amazonaws.cm, com.be, amazonpay.com, rooftopmedia.net, vine.com, imdb.com, ssl-images-amazon.com, amazon.com.au, amazon-rings.com, assoc-amazon.com, amazonin.com, amzn.asia, annapurnalabs.com, apn-portal.com, evi.com, amazonprime.com, audiblecareers.com, beautybar.com, junglee.com, amazon.ae, tenmarks.com, amazonwebservices.net, associates-amazon.com, amazonrobotics.com, amazon-aws.com, endless.com, amazonlocal.com, amazonm.com, amazonllc.com, media-imdb.com, amazon.com.tw, createspace.com, amazonaws.com, amzn.com, amazon.com, images-amazon.com, amazon.com.co
20.194.49.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2711/04/2026, 10:08:05 - - ----
13.229.207.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services11/04/2026, 04:52:2711/04/2026, 10:08:05 - - ----
2a01:4f9:c013:8ef9::1:18789 - 🇫🇮 Finland - false Clean AS24940Hetzner Online GmbHHetzner11/04/2026, 04:52:2717/04/2026, 10:04:16 - - ----
162.19.75.•••:18789 - 🇫🇷 France Yes false Clean AS16276OVH SASOVH11/04/2026, 04:52:2711/04/2026, 10:08:04 - - ----
165.232.149.•••:18789 - 🇺🇸 United States Yes false Clean AS14061DigitalOcean, LLCDigitalOcean11/04/2026, 04:52:2717/04/2026, 10:04:34 - - ----
74.208.221.•••:18789 - 🇺🇸 United States Yes false Leaked AS8560This is the joint network for IONOS, Fasthosts, Arsys, 1&1 Mail and Media and 1&1 Telecom. Formerly known as 1&1 Internet SE.1&1 Ionos11/04/2026, 04:52:2717/04/2026, 18:07:45 Yes Yes APT-C-23, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Turla APT Group, Volt TyphoonCVE-2021-23017, CVE-2021-3618, CVE-2022-41741, CVE-2022-41742, CVE-2023-28531, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2024-6484, CVE-2024-6485, CVE-2024-7347, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 05:17:45ionos.com
18.136.107.•••:18789 - 🇸🇬 Singapore - false Clean AS16509Amazon.com, Inc.Amazon Web Services11/04/2026, 04:52:2711/04/2026, 18:59:59 - - ----
154.81.38.•••:18789 - 🇺🇸 United States Yes false Clean AS140869Turing Group LimitedTuring Group Limited11/04/2026, 04:52:2614/04/2026, 20:58:49 No No --08/04/2026, 20:59:39-
121.238.21.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Jiangsu11/04/2026, 04:52:2617/04/2026, 20:11:01 - - ----
20.41.96.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2611/04/2026, 10:08:03 - - ----
20.210.89.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2511/04/2026, 10:08:03 - - ----
20.196.96.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2511/04/2026, 10:08:02 - - ----
20.222.228.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2511/04/2026, 10:08:02 - - ----
20.59.63.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:52:2511/04/2026, 10:08:02 - - ----
118.196.94.•••:18789 - 🇨🇳 China mainland - false Leaked AS137718Beijing Volcano Engine Technology Co., Ltd. / AS4811 China Telecom (Group)Beijing Volcano Engine Technology11/04/2026, 04:52:2517/04/2026, 20:56:24 Yes No -CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198514/04/2026, 10:35:15bytedance.com
178.253.38.•••:18789 - 🇷🇺 Russia Yes false Clean AS204997FIRST SERVER LIMITEDFirst Server Limited11/04/2026, 04:52:2518/04/2026, 00:40:47 No No -CVE-2016-20012, CVE-2020-14145, CVE-2021-28041, CVE-2021-36368, CVE-2021-4161711/04/2026, 23:21:50-
107.148.174.•••:18789 - 🇺🇸 United States Yes false Clean AS21859Zenlayer IncPeg Tech Inc11/04/2026, 04:50:1717/04/2026, 10:01:21 No No --05/04/2026, 07:08:29-
111.23.65.•••:18789 - 🇨🇳 China mainland Yes false Clean AS56047China Mobile communications corporationChina Mobile11/04/2026, 04:50:1714/04/2026, 09:45:34 No No --05/04/2026, 07:08:30-
20.210.178.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:1711/04/2026, 09:20:54 No No --05/04/2026, 07:08:35-
116.148.115.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom11/04/2026, 04:50:1715/04/2026, 01:29:57 - - ----
119.45.237.•••:18789 - 🇨🇳 China mainland - false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud11/04/2026, 04:50:1611/04/2026, 09:20:54 Yes Yes APT-C-23, APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Equation Group, Gamaredon Group, Gaza Cybergang, Ghostwriter, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, Turla APT Group, UNC2452, Volt Typhoon, WIRTECVE-2016-20012, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-0196, CVE-2019-0197, CVE-2019-0211, CVE-2019-0215, CVE-2019-0217, CVE-2019-0220, CVE-2019-10081, CVE-2019-10082, CVE-2019-10092, CVE-2019-10097, CVE-2019-10098, CVE-2019-16905, CVE-2019-17567, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-11984, CVE-2020-11993, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-41741, CVE-2022-41742, CVE-2023-38408, CVE-2023-44487, CVE-2023-48795, CVE-2023-51385, CVE-2024-7347, CVE-2025-2341911/04/2026, 07:08:40tencent.com
20.89.218.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:1611/04/2026, 09:20:54 No No --05/04/2026, 07:08:42-
52.141.4.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:1611/04/2026, 09:20:53 - - ----
45.33.64.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode11/04/2026, 04:50:1517/04/2026, 10:01:42 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-16905, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 07:09:02-
185.195.13.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationNewfold Digital11/04/2026, 04:50:1514/04/2026, 10:30:35 Yes Yes APT28, APT37, Carbanak, Cobalt Group, DragonFly, El-Machete, Lazarus Group, RomCom GroupCVE-2012-2552, CVE-2014-1820, CVE-2014-4061, CVE-2015-1761, CVE-2015-1762, CVE-2015-1763, CVE-2016-7253, CVE-2016-7254, CVE-2017-8516, CVE-2020-0618, CVE-2021-163611/04/2026, 07:09:13publicdomainregistry.com
20.196.127.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:1511/04/2026, 10:05:53 - - ----
206.189.23.•••:18789 - 🇬🇧 United Kingdom - false Clean AS14061DigitalOcean, LLCDigitalOcean11/04/2026, 04:50:1517/04/2026, 10:00:49 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, The Shadow Brokers, UNC2452, Volt Typhoon, WIRTECVE-2016-20012, CVE-2019-17567, CVE-2020-11984, CVE-2020-11993, CVE-2020-12062, CVE-2020-13950, CVE-2020-14145, CVE-2020-15778, CVE-2020-1927, CVE-2020-1934, CVE-2020-35452, CVE-2020-9490, CVE-2021-26690, CVE-2021-26691, CVE-2021-28041, CVE-2021-30641, CVE-2021-33193, CVE-2021-34798, CVE-2021-36160, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-41617, CVE-2021-44224, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-23943, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-3272811/04/2026, 07:09:25-
135.181.192.•••:18789 - 🇫🇮 Finland Yes false Leaked AS24940Hetzner Online GmbHHetzner Online11/04/2026, 04:50:1317/04/2026, 09:17:09 Yes Yes APT15, APT28, APT29, APT31, APT34, APT41, Bitter APT, Bluenoroff, Callisto Group, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, Volt TyphoonCVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 07:09:40hetzner.com
43.156.225.•••:18789 - 🇸🇬 Singapore - false Leaked AS132203Tencent Building, Kejizhongyi AvenueAceville Pte Ltd11/04/2026, 04:50:1311/04/2026, 10:50:35 Yes Yes APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT41, Bitter APT, Bluenoroff, Callisto Group, Cobalt Group, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 07:09:44tencent.com
176.84.75.•••:18789 - 🇪🇸 Spain - false Clean AS3352TELEFONICA DE ESPANA S.A.U.Telefonica11/04/2026, 04:50:1311/04/2026, 10:05:51 No No --05/04/2026, 07:09:46-
167.86.115.•••:18789 - 🇫🇷 France - false Clean AS51167Contabo GmbHContabo11/04/2026, 04:50:1317/04/2026, 17:26:27 No Yes APT14, APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT40, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, Carbanak, ChamelGang, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, Lazarus Group, MuddyWater Group, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2006-20001, CVE-2016-20012, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2022-22707, CVE-2022-26377, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30522, CVE-2022-30556, CVE-2022-31813, CVE-2022-36760, CVE-2022-37436, CVE-2022-41556, CVE-2023-25690, CVE-2023-27522, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 09:23:48-
74.222.26.•••:18789 - 🇭🇰 Hong Kong Yes false Clean AS22439Perfect International, IncPacific International Lines (Hong Kong) Karvl11/04/2026, 04:50:1317/04/2026, 07:47:26 No No --05/04/2026, 09:23:52-
178.104.153.•••:18789 - 🇩🇪 Germany - false Clean AS24940Hetzner Online GmbHHetzner11/04/2026, 04:50:1217/04/2026, 07:02:08 - - ----
43.134.51.•••:18789 - 🇸🇬 Singapore Yes false Leaked AS132203Tencent Building, Kejizhongyi Avenue6 Collyer Quay11/04/2026, 04:50:1217/04/2026, 17:26:24 Yes Yes APT15, APT17, APT28, APT29, APT31, APT34, APT35, APT36, APT37, APT39, APT41, APT45, Bitter APT, Bluenoroff, Callisto Group, CloudSorcerer, Cobalt Group, Daggerfly APT, Donot Team, El-Machete, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, Kimsuky, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SideWinder APT, The Shadow Brokers, Volt TyphoonCVE-2016-10708, CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-12062, CVE-2020-14145, CVE-2020-15778, CVE-2021-28041, CVE-2021-36368, CVE-2021-41617, CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-39894, CVE-2024-6387, CVE-2025-26465, CVE-2025-26466, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 09:23:59tencent.com
135.225.90.•••:18789 - 🇸🇪 Sweden - false Leaked AS8075Microsoft CorporationCloud11/04/2026, 04:50:1211/04/2026, 10:05:51 Yes No --11/04/2026, 09:24:01open-ecosystem.org, pumatech.com, eizel.com, nokiasaudi.com, nokia.com, nokiasiemensnetworks.com, ovi.com, nsn.com
3.144.17.•••:18789 - 🇺🇸 United States Yes false Clean AS16509Amazon.com, Inc.Amazon11/04/2026, 04:50:1211/04/2026, 10:05:50 No - -CVE-2016-20012, CVE-2021-36368, CVE-2021-4161711/04/2026, 09:24:05-
154.193.237.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:50:1214/04/2026, 10:29:42 No No --05/04/2026, 09:24:06-
89.167.10.•••:18789 - 🇫🇮 Finland Yes false Clean AS24940Hetzner Online GmbHHetzner11/04/2026, 04:50:1217/04/2026, 10:00:58 No No --05/04/2026, 09:24:08-
154.193.239.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:50:1214/04/2026, 10:29:59 No No --05/04/2026, 09:24:11-
154.193.233.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:50:1114/04/2026, 00:43:14 No No --05/04/2026, 09:24:22-
129.146.40.•••:18789 - 🇺🇸 United States - false Clean AS31898Oracle CorporationOracle11/04/2026, 04:50:1117/04/2026, 10:02:10 - - ----
49.233.75.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud11/04/2026, 04:50:1113/04/2026, 22:27:41 - - ----
183.159.161.•••:18789 - 🇨🇳 China mainland Yes false Clean AS4134ChinanetChinaNet Hangzhou11/04/2026, 04:50:1111/04/2026, 10:05:49 No No --05/04/2026, 09:24:33-
192.140.186.•••:18789 - 🇨🇳 China mainland Yes false Clean AS146817Hubei Feixun Network Co., LtdHubei Feixun Network11/04/2026, 04:50:1116/04/2026, 18:13:28 No No -CVE-2016-20012, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-36368, CVE-2021-41617, CVE-2023-38408, CVE-2023-48795, CVE-2023-51385, CVE-2025-26465, CVE-2025-3272811/04/2026, 09:24:34-
154.193.235.•••:18789 - 🇺🇸 United States Yes false Clean AS400619AROSSCLOUD INC.Fastmos Co Limited11/04/2026, 04:50:1114/04/2026, 01:28:26 No No --05/04/2026, 09:24:37-
20.46.179.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:1011/04/2026, 10:05:49 No No --05/04/2026, 09:24:44-
91.99.213.•••:18789 - 🇩🇪 Germany Yes false Leaked AS24940Hetzner Online GmbHHetzner Online11/04/2026, 04:50:1016/04/2026, 17:28:20 Yes No -CVE-2023-28531, CVE-2023-38408, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 09:24:48hetzner.com
124.223.38.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud11/04/2026, 04:50:1017/04/2026, 04:01:40 Yes Yes APT37, El-Machete-11/04/2026, 09:24:51tencent.com
240e:3b7:3230:a9c1::120:18789 - 🇨🇳 China mainland - false Clean AS134774CHINANET Guangdong province Shenzhen MAN networkChina Telecom IPv6 Broadband Address11/04/2026, 04:50:0914/04/2026, 10:29:19 - - ----
20.214.168.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:0911/04/2026, 10:05:48 No Yes Packrat-11/04/2026, 09:24:56-
115.190.167.•••:18789 - 🇨🇳 China mainland Yes false Clean AS137718Beijing Volcano Engine Technology Co., Ltd.Beijing Volcano Engine Technology11/04/2026, 04:50:0914/04/2026, 21:42:24 Yes No --11/04/2026, 09:25:11gwbn.net.cn
20.214.146.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:0911/04/2026, 10:05:47 - - ----
154.81.38.•••:18789 - 🇺🇸 United States Yes false Clean AS140869Turing Group LimitedTuring Group Limited11/04/2026, 04:50:0816/04/2026, 15:11:38 No Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161711/04/2026, 09:25:27-
182.119.234.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS4837CHINA UNICOM China169 BackboneChina Unicom Henan11/04/2026, 04:50:0811/04/2026, 10:05:47 Yes No --11/04/2026, 09:25:30chinaunicom.cn
45.33.76.•••:18789 - 🇺🇸 United States Yes false Clean AS63949Akamai Connected CloudLinode11/04/2026, 04:50:0817/04/2026, 18:05:20 No Yes APT14, APT15, APT28, APT29, APT31, APT34, APT35, APT37, APT39, APT40, APT41, Bitter APT, Bluenoroff, Callisto Group, Carbanak, Cobalt Group, Donot Team, Earth Berberoka, Equation Group, Gamaredon Group, Gaza Cybergang, Hafnium Group, Inception Framework, IronHusky, Kimsuky, Lazarus Group, Lyceum APT, MuddyWater Group, Mustang Panda, Patchwork, RomCom Group, Salt Typhoon, Sandworm Team, Sea Turtle Group, SharpPanda, SideWinder APT, TA505, TEMP.Hermit, The Shadow Brokers, Volt Typhoon, WIRTECVE-2006-20001, CVE-2008-0455, CVE-2010-5107, CVE-2012-0031, CVE-2012-0053, CVE-2012-0883, CVE-2012-2687, CVE-2012-3499, CVE-2012-4558, CVE-2013-1862, CVE-2013-1896, CVE-2013-2249, CVE-2013-5704, CVE-2013-6438, CVE-2014-0098, CVE-2014-0118, CVE-2014-0226, CVE-2014-0231, CVE-2014-1692, CVE-2014-2532, CVE-2014-2653, CVE-2015-0228, CVE-2015-3183, CVE-2015-5352, CVE-2015-5600, CVE-2015-6563, CVE-2015-6564, CVE-2015-8325, CVE-2016-0777, CVE-2016-0778, CVE-2016-10009, CVE-2016-10010, CVE-2016-10011, CVE-2016-10012, CVE-2016-10708, CVE-2016-1908, CVE-2016-20012, CVE-2016-3115, CVE-2016-4975, CVE-2016-5387, CVE-2016-6210, CVE-2016-6515, CVE-2016-8612, CVE-2016-8743, CVE-2017-15906, CVE-2017-3167, CVE-2017-3169, CVE-2017-7679, CVE-2017-9788, CVE-2017-9798, CVE-2018-1301, CVE-2018-1302, CVE-2018-1303, CVE-2018-1312, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2020-15778, CVE-2021-34798, CVE-2021-36368, CVE-2021-39275, CVE-2021-40438, CVE-2021-44790, CVE-2022-22719, CVE-2022-22720, CVE-2022-22721, CVE-2022-28330, CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-30556, CVE-2022-31813, CVE-2022-37436, CVE-2023-28531, CVE-2023-28625, CVE-2023-31122, CVE-2023-38408, CVE-2023-38709, CVE-2023-45802, CVE-2023-48795, CVE-2023-51384, CVE-2023-51385, CVE-2024-40898, CVE-2024-6387, CVE-2025-26465, CVE-2025-32728, CVE-2025-61984, CVE-2025-6198511/04/2026, 09:25:31-
43.139.89.•••:18789 - 🇨🇳 China mainland Yes false Leaked AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing11/04/2026, 04:50:0717/04/2026, 10:01:04 Yes Yes APT28, APT35, APT37, APT39, Cobalt Group, Kimsuky, Mustang Panda, Sandworm Team, The Shadow BrokersCVE-2016-10708, CVE-2017-15906, CVE-2018-15473, CVE-2018-15919, CVE-2018-20685, CVE-2019-6109, CVE-2019-6110, CVE-2019-6111, CVE-2020-14145, CVE-2021-4161714/04/2026, 07:31:59tencent.com
2408:8221:946:6980::1004:18789 - 🇨🇳 China mainland - false Clean AS4837CHINA UNICOM China169 BackboneChina Unicom11/04/2026, 04:50:0715/04/2026, 01:29:22 - - ----
52.231.71.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:0711/04/2026, 10:05:46 - - ----
94.191.37.•••:18789 - 🇨🇳 China mainland - false Clean AS45090Shenzhen Tencent Computer Systems Company LimitedTencent Cloud Computing11/04/2026, 04:50:0717/04/2026, 08:32:09 - - ----
5.42.97.•••:18789 - 🇷🇺 Russia Yes false Leaked AS9123JSC "TIMEWEB"Taiwan Cloud11/04/2026, 04:50:0717/04/2026, 17:26:29 Yes No --17/04/2026, 11:20:32bk.ru, youla.ru, imgsmail.ru, icq.net, mail.ru, smailru.net, icq.com
47.92.143.•••:18789 - 🇨🇳 China mainland - false Clean AS37963Hangzhou Alibaba Advertising Co.,Ltd.Alisoft11/04/2026, 04:50:0717/04/2026, 01:46:22 - - ----
165.22.33.•••:18789 - 🇺🇸 United States - false Clean AS14061DigitalOcean, LLCDigitalOcean11/04/2026, 04:50:0711/04/2026, 10:05:46 - - ----
20.114.66.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:0711/04/2026, 10:05:46 - - ----
54.69.153.•••:18789 - 🇺🇸 United States - false Clean AS16509Amazon.com, Inc.Amazon11/04/2026, 04:50:0714/04/2026, 01:28:33 No No --06/04/2026, 09:18:21-
20.110.127.•••:18789 - 🇺🇸 United States - false Clean AS8075Microsoft CorporationMicrosoft11/04/2026, 04:50:0711/04/2026, 10:05:46 - - ----
104.21.55.•••:18789 - 🇺🇸 United States - false Clean AS13335Cloudflare, Inc.Cloudflare11/04/2026, 04:50:0611/04/2026, 10:05:45 - - ----