Live findsCVE IntelConsoleStart free
huntback / IP intelligence

177.4.12.11

RESIDENTIALcoinminerexploitexposed-secretmalwaremoziopen-directory

Intelligence

ASN / OrgAS140227 · Hong Kong Communications International Co., Limited
CountryHong Kong
NetworkRESIDENTIAL · risk 15/100
Threat score48/100
Open ports22, 4444, 4445, 5000, 5432, 7000, 18080
Productsf5-bigip
Loot harvested25 file(s), 9964 KB · coinminer, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (25)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
ic.zipZIP9.1 MB
ic.logLOG220 KB
‹redacted›.jsonlJSONL219 KB
payload-pool.txtTXT75 KB
README.mdMD47 KB
payload-alive.txtTXT45 KB
kestra_deploy2.pyPY3 KB
kestra_deploy.pyPY3 KB
kestra_recon.pyPY3 KB
kestra_recon2.pyPY3 KB
kestra_recon4.pyPY3 KB
divi_rce.pyPY2 KB
kestra_diag.pyPY2 KB
kestra_recon3.pyPY2 KB
kestra_test.pyPY2 KB
gitlab_pull.pyPY2 KB
gitlab_test.pyPY2 KB
kestra_ver.pyPY2 KB
kestra_exec.pyPY1 KB
pull_kestra.pyPY861 B
g.yamlYAML754 B
v.yamlYAML618 B
x.yamlYAML570 B
w.yamlYAML546 B
interactsh-client.zipZIP9 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.214.172.114confirmed
118.25.25.81confirmed
156.245.146.226confirmed
195.178.110.48confirmed
222.186.57.10confirmed
39.109.100.126confirmed
43.161.243.73confirmed
45.151.122.34confirmed
47.102.192.23confirmed
8.217.24.92confirmed
81.70.21.248confirmed