Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

107.175.85.215

DATACENTERoperator-submittedexploitexposed-secretmalwaremoziopen-directory

Intelligence

ASN / OrgAS36352 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 111
ServiceSimpleHTTP/0.6 Python/3.14.7 · Directory listing for /
Loot harvested28 file(s), 772 KB · exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (28)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
pad_hostname.binBIN200 KB
pad_mp.binBIN200 KB
pad_ctl.binBIN200 KB
rd.htmlHTML46 KB
val_all.txtTXT20 KB
proxies_raw.txtTXT18 KB
proxies_clean.txtTXT18 KB
val_socks5.txtTXT16 KB
p_socks5.txtTXT10 KB
‹redacted›.bodyBODY8 KB
23_config.jsonJSON6 KB
107.175.85.2152154 KB
‹redacted›.pycPYC4 KB
‹redacted›.bodyBODY4 KB
upload_test.pyPY3 KB
shiro_probe.pyPY2 KB
README.mdMD1 KB
val2.txtTXT1 KB
validate2.shSH1 KB
validate.shSH1 KB
val_ok.txtTXT586 B
‹redacted›.hdrHDR292 B
up_benign_0.binBIN283 B
proxies_ok.txtTXT254 B
up_exact.binBIN246 B
up_nodollar.binBIN244 B
val_socks4.txtTXT161 B
p_socks4.txtTXT96 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

172.86.118.111lead
2.29.112.91lead
45.151.122.34lead
5.83.144.60lead