Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

185.199.108.133

DATACENTERoperator-submittedioc-tweetfeedexploitstaged-loader-kit-partialloot-ipmalware

Intelligence

ASN / OrgAS54113 · Fastly, Inc.
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 443
JARM29d3fd00029d29d00041d41d00041d6b5eefa2404a56c2ced79a0d16afe36c
Loot harvested5 file(s), 2774 KB · exploit, ioc-match, malware, mozi

Open directory contents (5)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
udt.batBAT2.5 MB
‹redacted›.dbfDBF154 KB
‹redacted›.htaHTA17 KB
scan.ps1PS17 KB
landing2.txtTXT39 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Passive DNS

raw.githubusercontent.com

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

185.199.109.133confirmed
185.199.110.133confirmed
185.199.111.133confirmed
20.26.156.215confirmed
107.173.38.158lead
108.61.220.65lead
109.122.197.237lead
118.194.250.47lead
146.75.119.6lead
147.45.224.48lead
151.101.1.124lead
151.101.1.64lead
151.101.128.223lead
151.101.130.132lead
151.101.130.159lead