Live findsCVE IntelConsoleStart free
huntback / IP intelligence

202.162.109.6

DATACENTERloot-ipexploitexposed-secretgafgytmalwaremozi

Intelligence

ASN / OrgAS152194 · CTG Server Limited
CountryAustralia
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 3000, 3306, 8000, 8001, 8088, 8091, 8095, 8096, 9000, 9443, 9999, 18080
ServiceSimpleHTTP/0.6 Python/3.10.12
JARM2ad2ad0002ad2ad00042d42d000000ad9bf51cc3f5a1e29eecb81d0c7b06eb
Loot harvested23 file(s), 18606 KB · exploit, exposed-secret, gafgyt, malware, mozi, pe-binary

Open directory contents (23)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
svcupd.exePE9.4 MB
access.logLOG1.9 MB
out.logLOG1.4 MB
msupd_c03.b64B64976 KB
msupd_c06.b64B64976 KB
msupd_c09.b64B64976 KB
msupd_c10.b64B64976 KB
msupd_c13.b64B64976 KB
msupd_c14.b64B64715 KB
vps-watch.logLOG5 KB
jeecms-attack.pyPY3 KB
jeecms-probe3.pyPY3 KB
jeecms-sqli-diff2.pyPY2 KB
jeecms-sqli-diff.pyPY2 KB
jeecms-probe4.pyPY2 KB
jeecms-attack.logLOG948 B
‹redacted›.headersHEADER721 B
vps-watch.shSH416 B
jeecms-sqli-diff.logLOG404 B
‹redacted›.jspJSP306 B
configTXT40 B
s16.phpPHP19 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

111.223.247.165confirmed
143.92.57.247confirmed
202.162.109.5confirmed
103.39.79.102confirmed
104.21.23.192confirmed
109.122.196.145confirmed
131.123.43.239confirmed
138.68.153.82confirmed
139.87.74.49confirmed
139.87.80.68confirmed
154.217.251.226confirmed
154.36.183.100confirmed
157.173.115.165confirmed
159.65.168.239confirmed
16.59.141.234confirmed