Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

130.94.95.155

RESIDENTIALoperator-submittedloot-ipc2exploitexposed-secretmalware

Intelligence

ASN / OrgAS2914 · NTT America, Inc.
CountryIndonesia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 23, 80, 443, 587, 1433, 5432, 8080, 8888, 18081
JARM0bd0bd07d0bd0bd01c42d42d000000cdb95e27fd8f9fee4a2bec829b889b8b
Loot harvested316 file(s), 2544 KB · c2, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (316)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
cr_state.jsonJSON498 KB
cr_schedule.jsonJSON432 KB
cr_combo.jsJS424 KB
smtp_catch.logLOG166 KB
loginresp_gillandganesha.htmlHTML54 KB
‹redacted›.xmlXML54 KB
loginresp_razer.htmlHTML53 KB
loginresp_aan.htmlHTML53 KB
loginresp_kaosunisex.htmlHTML53 KB
loginresp_diorfasbis.htmlHTML53 KB
loginresp_mbakvoucher.htmlHTML53 KB
loginresp_mizan.htmlHTML53 KB
loginresp_andremaesha.htmlHTML52 KB
loginresp_mol.htmlHTML52 KB
llms.txtTXT36 KB
api_debit-transaction_post-data-transaction.mdMD13 KB
mplogin.htmlHTML12 KB
mp.htmlHTML12 KB
mp2.htmlHTML12 KB
mp_login.htmlHTML12 KB
login_8443.htmlHTML12 KB
zb_root.htmlHTML12 KB
zb_auth.logLOG11 KB
api_credit-card-transaction.mdMD8 KB
docs_urls.txtTXT8 KB
mon1.jsonJSON6 KB
mine_samples.jsonJSON5 KB
lg2.htmlHTML5 KB
zb_c2b.pyPY3 KB
zb_c2c.pyPY3 KB
zb_c2d.pyPY3 KB
zb_auth.pyPY3 KB
zb_lmtp_enum.pyPY3 KB
zb_role_brute2.pyPY3 KB
verify2.pyPY2 KB
verify.pyPY2 KB
zb_role_brute.pyPY2 KB
zb_c2e.pyPY2 KB
cr_history.jsonJSON2 KB
zb_run.pyPY2 KB
zb_hg.pyPY2 KB
lg.htmlHTML2 KB
zb_dns.pyPY2 KB
zb_37042.pyPY2 KB
captcha_probe.pyPY2 KB
login_post.pyPY2 KB
fp.pyPY2 KB
lateral_auth.pyPY2 KB
zb_smtpauth.pyPY2 KB
passive.pyPY1 KB
zb_one.pyPY1 KB
zb_cmp.pyPY1 KB
dirbrute.pyPY1 KB
cr_rce_proof.pyPY1 KB
zb_c2.pyPY1 KB
zb_imap_brute.pyPY1 KB
zb_diag.pyPY1 KB
mine_counts.jsonJSON1 KB
smtp_catch.pyPY1 KB
dirbrute2.pyPY1 KB
zb_seq.pyPY1 KB
spray.pyPY1 KB
o365_test.pyPY1 KB
zb_sc.pyPY1 KB
hits8880.logLOG1 KB
zb_pj.pyPY1 KB
cr_pwn.pyPY1 KB
vault_brute.pyPY1 KB
zb_q1q2.pyPY1 KB
zb_fav.pyPY1 KB
zb_ex2.pyPY1 KB
zb_c4.pyPY1 KB
zb_prep.pyPY1 KB
cr_exec.pyPY1 KB
zb_acc.pyPY1 KB
zb_run1.pyPY1 KB
zb_diag5.pyPY1 KB
imap_hunt.pyPY1 KB
zb_2s.pyPY1 KB
zb_he.pyPY1 KB
zb_hd.pyPY1 KB
zb_dump.pyPY1 KB
zb_rt.pyPY1 KB
zb_ha.pyPY1 KB
captcha_test.pyPY1 KB
zb_45519.pyPY1 KB
zb_eo.pyPY1 KB
zb_dump1.pyPY1 KB
imap_try.pyPY1 KB
zb_sep.pyPY1 KB
zb_mix.pyPY1 KB
imap_kw.pyPY1 KB
zb_awk2.pyPY1 KB
zb_awk3.pyPY1 KB
zb_mk.pyPY1 KB
zb_p12.logLOG1 KB
zb_hc.pyPY1 KB
mine_sample.pyPY1 KB
zb_dbg.pyPY1 KB
zb_hb.pyPY1 KB
zb_awk4.pyPY1 KB
zb_send.pyPY1 KB
spray_gal.pyPY1 KB
folders2.pyPY1 KB
zb_hh.pyPY1 KB
zb_diag4.pyPY1 KB
zb_diag2.pyPY1 KB
mine_mail.pyPY1 KB
zb_am.pyPY1 KB
zb_run3.pyPY1 KB
zb_multi.pyPY1 KB
zb_dc.pyPY1 KB
zb_ctor.pyPY1 KB
zb_pw.pyPY1 KB
zb_ex.pyPY1 KB
zb_printf.pyPY1 KB
zb_scr2.pyPY1 KB
zb_net.pyPY1 KB
imap_sent.pyPY1 KB
zb_ca.pyPY1 KB
zb_cap.pyPY1 KB
zb_fx.pyPY1 KB
zb_disc.pyPY1 KB
zb_am2.pyPY1 KB
zb_run6.pyPY1 KB
zb_run7.pyPY1 KB
zb_eg2.pyPY1 KB
zb_sv.pyPY1 KB
zb_mh.pyPY1 KB
zb_run4.pyPY1 KB
zb_sn2.pyPY1 KB
zb_run5.pyPY1 KB
zb_run8.pyPY1 KB
zb_eg.pyPY1 KB
zb_ga.pyPY1 KB
zb_inc.pyPY1 KB
zb_si.pyPY1 KB
zb_ad.pyPY1 KB
folders.pyPY1 KB
zb_chain4.pyPY1 KB
zb_shex.pyPY1 KB
zb_nl.pyPY1 KB
zb_cn.pyPY1 KB
zb_host.pyPY1 KB
zb_post.pyPY1 KB
zb_aw.pyPY1 KB
zb_diag7.pyPY1 KB
zb_se.pyPY1 KB
zb_ch.pyPY1 KB
zb_gate.pyPY1 KB
zb_dock.pyPY1 KB
spray_gal2.pyPY1 KB
zb_run9.pyPY1 KB
zb_esc2.pyPY1 KB
zb_gate2.pyPY1 KB
imap_last2.pyPY1 KB
zb_br.pyPY1 KB
zb_run2.pyPY1 KB
zb_lcfg.pyPY1 KB
extract_doc.pyPY1 KB
cr_cfg.txtTXT1 KB
zb_probe.pyPY1 KB
zb_scr.pyPY1 KB
zb_mta.pyPY1 KB
zb_post2.pyPY1 KB
zb_post3.pyPY1 KB
zb_gate3.pyPY1 KB
zb_sn.pyPY1 KB
cr_dump.pyPY1 KB
zb_diag3.pyPY1 KB
zb_esc.pyPY1 KB
zb_inc2.pyPY1 KB
zb_esc3.pyPY1 KB
zb_dg.pyPY1021 B
zb_run10.pyPY1020 B
zb_eq.pyPY1019 B
zb_loc.pyPY1018 B
zb_chain.pyPY1017 B
cr_key3.pyPY996 B
zb_q.pyPY996 B
zb_chain3.pyPY995 B
zb_st.pyPY993 B
hostsweep2.shSH992 B
zb_len.pyPY989 B
lmtp_chk2.pyPY987 B
zb_host2.pyPY981 B
cr_state.pyPY980 B
zb_read5.pyPY978 B
zb_b64b.pyPY976 B
zb_lines.pyPY974 B
cr_log.pyPY972 B
zb_bq.pyPY967 B
zb_hf.pyPY966 B
zb_split.pyPY964 B
lmtp_chkB.pyPY957 B
zb_b64y.pyPY954 B
zb_cnt3.pyPY947 B
hit_listen.pyPY939 B
zb_cnt2.pyPY939 B
zb_sed.pyPY938 B
zb_read4.pyPY935 B
imap_recent.pyPY933 B
zb_bin.pyPY926 B
dns_catch.pyPY925 B
zb_alive.pyPY919 B
cr_upd.pyPY912 B
zb_hex.pyPY909 B
imap_users.pyPY901 B
zb_awk.pyPY901 B
zb_chk.pyPY898 B
zb_chain2.pyPY893 B
httplog.pyPY881 B
lmtp_chkA.pyPY878 B
zb_disc2.pyPY876 B
zb_lsp.pyPY876 B
zb_atomic.pyPY875 B
zb_lmtp.pyPY873 B
zb_e1.pyPY866 B
zb_ml.pyPY862 B
imap_collect.pyPY861 B
zb_b64x.pyPY844 B
cr_probe.pyPY840 B
zb_read3.pyPY838 B
zb_s1.pyPY833 B
imap_last.pyPY831 B
lmtp_chk.pyPY825 B
imap_chk9.pyPY824 B
zb_lad.pyPY820 B
zb_read.pyPY818 B
zb_nest.pyPY817 B
zb_b64.pyPY811 B
zb_iso.pyPY804 B
zb_shell.zipZIP800 B
zb_e2.pyPY788 B
zb_slash.pyPY787 B
lg8880.pyPY786 B
zb_bin2.pyPY779 B
zb_bin3.pyPY777 B
zb_e3.pyPY768 B
zb_bin.logLOG764 B
zb_nest2.pyPY758 B
zb_b64c.pyPY747 B
zb_msed.pyPY739 B
zb_m1.pyPY735 B
zb_dgf.pyPY724 B
lmtp_chk9.pyPY715 B
zb_ctl2.pyPY713 B
zb_chr2.pyPY712 B
zb_bsed.pyPY701 B
imap_enum.pyPY700 B
zb_bb.pyPY697 B
icmp_sniff.pyPY689 B
hostsweep.shSH688 B
zb_pipe2.pyPY688 B
oast.pyPY685 B
zb_dol.pyPY681 B
zb_eg3.pyPY681 B
zb_semi.pyPY681 B
zb_read2.pyPY672 B
imap_find.pyPY670 B
zb_chr.pyPY668 B
imap_find2.pyPY664 B
zb_lmtp_inject.logLOG652 B
zb_pipe.pyPY652 B
zb_gt.pyPY644 B
cr_key2.pyPY625 B
zb_cg.pyPY625 B
zb_diag2.logLOG622 B
imap_all.pyPY615 B
zb_clean.pyPY600 B
smtp_test.pyPY598 B
zb_cp1.pyPY594 B
imap_newest.pyPY592 B
zb_h1.pyPY591 B
cr_key.pyPY584 B
zb_share2.pyPY579 B
zb_dgf2.pyPY561 B
zb_curl.pyPY557 B
zb_pa.pyPY556 B
zb_cut.pyPY554 B
zb_dver.pyPY553 B
zb_srch.pyPY549 B
zb_cat2.pyPY538 B
zb_b65.pyPY537 B
zb_dps2.pyPY535 B
zb_chain4.logLOG534 B
zb_pr.pyPY534 B
zb_sh.pyPY522 B
zb_stat2.pyPY521 B
zb_cat3.pyPY520 B
zb_stat3.pyPY518 B
zb_chain3b.logLOG513 B
zb_mailc2.pyPY499 B
zb_names.pyPY499 B
zb_c2_run2.logLOG498 B
zb_fav.logLOG497 B
zb_share.pyPY493 B
zb_dx.pyPY491 B
zb_dps.pyPY475 B
zb_sub2.pyPY474 B
zb_dnames.pyPY461 B
zb_c2_run1.logLOG427 B
zb_self.pyPY422 B
zb_mail2.pyPY421 B
zb_chain3.logLOG417 B
zb_stat.pyPY390 B
zb_diag5.logLOG339 B
zb_c2b_deploy.logLOG299 B
sweepp.shSH234 B
cj_hfL8.txtTXT198 B
imap_kw.jsonJSON137 B
zb_role_brute.logLOG94 B
icmp_sniff.logLOG23 B
sb_tokens.txtTXT19 B
c2_tokens.txtTXT6 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

100.21.82.169confirmed
101.42.136.73confirmed
101.47.156.26confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.46.185.169confirmed
104.223.41.172confirmed
104.233.150.138confirmed
108.61.219.168confirmed
109.238.87.159confirmed
111.223.247.165confirmed
117.50.80.107confirmed
117.55.226.237confirmed
118.107.13.102confirmed
118.107.41.239confirmed