huntback / IP intelligence

132.226.169.119

DATACENTERoperator-submittedelf-binaryexposed-secretmalwaremoziopen-directory

Intelligence

ASN / OrgAS31898 · Oracle Corporation
CountrySouth Korea
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 81, 2095, 7000, 111
Servicenginx/1.18.0 (Ubuntu) · Index of /
Productsnginx
Loot harvested36 file(s), 27174 KB · elf-binary, exposed-secret, malware, mozi, tunnel

Open directory contents (36)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
ppELF8.9 MB
bestipELF6.0 MB
ui.zipZIP2.5 MB
btvdpELF2.0 MB
ZeroOmegaOptions-2026-08-30T02_12_31.336Z.bakBAK811 KB
clash.yaml.bakBAK533 KB
clash.yaml.22520 KB
n1.yamlYAML514 KB
new.yamlYAML513 KB
clash0.yamlYAML500 KB
clash.yaml.source.22485 KB
‹redacted›.cfCF483 KB
clash.yaml.source.11482 KB
openclash.yamlYAML365 KB
clash.yamlYAML358 KB
clash.yaml.11348 KB
‹redacted›.sourceSOURCE342 KB
sf.yamlYAML332 KB
ct1.yamlYAML324 KB
ZeroOmegaOptions-2026-04-28T08_43_37.492Z.bakBAK116 KB
OmegaOptions.bakBAK116 KB
pac.txtTXT115 KB
initlvmdevbox_changeid.shSH17 KB
initlvmdevbox.shSH16 KB
SERVER_LST.txtTXT13 KB
newcf.shSH11 KB
getnewcf.shSH4 KB
clash3.yamlYAML4 KB
run.batBAT3 KB
vpn.pyPY2 KB
update_glibc.shSH2 KB
clash_new.yamlYAML1 KB
speedrun.shSH1 KB
set_cf_worker.shSH1 KB
‹redacted›.arm.tar.gzGZ457 B
tv.shSH330 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

185.232.170.43lead
193.143.1.141lead
8.138.46.135lead