Live findsCVE IntelConsoleStart free
huntback / IP intelligence

131.123.43.239

DATACENTERoperator-submittedexposed-secretc2exploitopen-directorytunnel

Intelligence

ASN / Orgunknown
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 8443, 8123, 25, 81
ServiceRouterOS
Loot harvested104 file(s), 4762 KB · c2, exploit, exposed-secret, tunnel

Open directory contents (104)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
imp.zipZIP4.4 MB
sd3.pyPY20 KB
sv3.pyPY17 KB
mhook.shSH11 KB
adenum.pyPY8 KB
131.123.43.239:8123239:814 KB
nds3.pyPY4 KB
vss1.shSH3 KB
loot12b.pyPY3 KB
smb3.pyPY3 KB
gpph.pyPY3 KB
walk12.pyPY3 KB
efox.shSH2 KB
krx.shSH2 KB
lvx.shSH2 KB
mtik.pyPY2 KB
dd_nkr2.shSH2 KB
dd_spz.shSH2 KB
gpph2.pyPY2 KB
samr2.pyPY2 KB
ldap0.pyPY2 KB
loot12.pyPY2 KB
pubwl.pyPY2 KB
miniscmr.pyPY2 KB
mq.shSH2 KB
q.shSH2 KB
kq.shSH2 KB
efoq80.shSH2 KB
q80.shSH2 KB
krq80.shSH2 KB
lvq80.shSH2 KB
mscmr2.pyPY2 KB
daspray.pyPY2 KB
ftpw1.pyPY2 KB
loot1.pyPY2 KB
webdeep.shSH2 KB
statec2.shSH2 KB
statec.shSH2 KB
fetch.pyPY2 KB
pubwl2.pyPY1 KB
moreweb.shSH1 KB
dbgwalk.pyPY1 KB
ade4.shSH1 KB
plx.shSH1 KB
identity_plTXT1 KB
ntrun4.shSH1 KB
ntrun5.shSH1 KB
secrun5.shSH1 KB
kvm.shSH1 KB
secrun6.shSH1 KB
melx.shSH1 KB
hp1.shSH1 KB
secrun3.shSH1 KB
secrun4.shSH1 KB
lvdq80.shSH1 KB
edrfo.shSH1 KB
smsweep.shSH1 KB
efodq80.shSH1 KB
ndrun4.shSH1 KB
pldq.shSH1 KB
krdq80.shSH1 KB
pldq80.shSH1 KB
ex.pyPY1 KB
dd_nkr.shSH1 KB
diagx.shSH1 KB
ndrun3.shSH1 KB
edrfo2.shSH1 KB
ndrun2.shSH1 KB
lvq81.shSH1 KB
secrun2.shSH1 KB
keys1.shSH1 KB
melx2.shSH1 KB
secrun.shSH1 KB
melinstall.shSH1 KB
kvinstall.shSH1 KB
faststream.shSH1 KB
diag.shSH1 KB
zmcens.shSH1019 B
ndrun5.shSH1006 B
mqdq.shSH980 B
gh.shSH979 B
rs.shSH972 B
efio4.shSH840 B
mspinstall.shSH817 B
efio3.shSH759 B
krio3.shSH757 B
efio2.shSH750 B
krio2.shSH748 B
kqdq.shSH739 B
sizes.shSH736 B
ghr.shSH656 B
ade.shSH640 B
fget.shSH639 B
cronadd.shSH627 B
mspb.shSH615 B
b.shSH613 B
kb.shSH613 B
mb.shSH613 B
b80efo.shSH611 B
b80c.shSH610 B
b80kr.shSH610 B
b80lv.shSH610 B
‹redacted›.jspJSP335 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.39.79.102confirmed
104.21.23.192confirmed
109.122.196.145confirmed
111.223.247.165confirmed
138.68.153.82confirmed
139.87.74.49confirmed
139.87.80.68confirmed
143.92.57.247confirmed
154.217.251.226confirmed
154.36.183.100confirmed
157.173.115.165confirmed
159.65.168.239confirmed
16.59.141.234confirmed
167.104.160.76confirmed
168.138.221.255confirmed