Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

167.17.69.200

DATACENTERloot-ipc2elf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS63023 · GTHost
CountryCanada
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 3000, 4444, 5555, 8000, 8443, 8888, 9999
ServiceLiteLLM API - Swagger UI
JARM40d40d40d00000000043d43d00043d6aff5ab0f4fc31897186312c9e639319
Loot harvested27 file(s), 27056 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (27)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
temp.exePE6.0 MB
payload_elfELF5.8 MB
RootHawkX-amd64ELF4.8 MB
RootHawkX-arm64ELF4.7 MB
RootHawkX-386ELF4.6 MB
trc20.txtTXT205 KB
alive.txtTXT94 KB
sql_poc.pyPY42 KB
standalone.phpPHP37 KB
x_final2.phpPHP32 KB
deploy_x.shSH21 KB
x_privesc_v2.pyPY15 KB
x_privesc.pyPY14 KB
sndav_exploit.pyPY14 KB
unified_payload.phpPHP14 KB
x.phpPHP13 KB
wd_watch.pyPY13 KB
rce_original.phpPHP12 KB
unified_header.phpPHP3 KB
x_new.phpPHP2 KB
x_final.phpPHP2 KB
privesc_31431.pyPY2 KB
fix_xphp.shSH2 KB
privesc_final.pyPY1 KB
copyfail_v2.pyPY1 KB
copyfail_su.pyPY846 B
onjoin_payload.shSH316 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.14.95.153lead
100.49.115.5lead
102.220.161.129lead
103.118.252.174lead
103.163.219.198lead
109.120.140.164lead
109.172.95.142lead
109.237.98.105lead
109.237.98.119lead
109.237.98.26lead
109.238.86.144lead
109.238.86.251lead
124.198.132.167lead
138.124.115.57lead
138.124.116.55lead