Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

158.94.172.120

DATACENTERoperator-reconexploitexposed-secretopen-directoryrpcbind-exposed

Intelligence

ASN / OrgAS7488 · CNServer LLC
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 111, 443, 8081, 8443, 18080
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
JARM40d40d40d00040d00043d43d00043d3bef2bf79cd6719851e8198c1e8f9a14
Loot harvested49 file(s), 14414 KB · exploit, exposed-secret

Open directory contents (49)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
http80.logLOG1.0 MB
http80.logLOG985 KB
‹redacted›.poPO386 KB
‹redacted›.poPO385 KB
‹redacted›.poPO384 KB
‹redacted›.poPO384 KB
‹redacted›.poPO382 KB
‹redacted›.poPO382 KB
‹redacted›.poPO382 KB
‹redacted›.poPO382 KB
‹redacted›.poPO382 KB
‹redacted›.poPO382 KB
‹redacted›.poPO382 KB
‹redacted›.poPO382 KB
‹redacted›.poPO381 KB
‹redacted›.poPO381 KB
‹redacted›.poPO378 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO377 KB
‹redacted›.poPO376 KB
‹redacted›.poPO376 KB
‹redacted›.poPO373 KB
‹redacted›.poPO373 KB
‹redacted›.poPO372 KB
‹redacted›.poPO372 KB
‹redacted›.poPO372 KB
‹redacted›.poPO371 KB
http18080.logLOG88 KB
http18080.logLOG70 KB
po.de.b6ae.jsJS28 KB
po.de.d4bc.jsJS25 KB
login.d4bc.jsJS18 KB
d4bc_keys.txtTXT8 KB
c9d.jsonJSON7 KB
cve4631.yamlYAML2 KB
‹redacted›.jsonlJSONL2 KB
findver.logLOG1 KB
creds.pyPY1 KB
findver.shSH1 KB
relay_matrix.pyPY748 B
rawspace.pyPY692 B
rawspace2.pyPY568 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

158.94.172.116confirmed
158.94.172.117confirmed
158.94.172.118confirmed
158.94.172.119confirmed
102.220.88.149lead
102.220.91.52lead
103.103.245.183lead
103.115.49.10lead
103.115.49.131lead
103.115.49.153lead
103.115.49.156lead
103.115.49.170lead
103.115.49.173lead
103.115.49.175lead
103.115.49.178lead