Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

23.225.71.207

DATACENTERloot-ipelf-binaryexploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS40065 · CNSERVERS LLC
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 8081, 8898, 8084, 8899, 39091
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested85 file(s), 16393 KB · elf-binary, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (85)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
samples.tar.gzGZ6.1 MB
fscanELF5.9 MB
gsncELF2.7 MB
eoffice__surat_sederhana_bupati21.docxDOCX149 KB
eoffice__surat_perintah_bupati1.docxDOCX146 KB
eoffice__surat_kgb_old.docxDOCX131 KB
p35.tgzTGZ78 KB
tds_types.pyPY76 KB
sekartaji__Surat_Undangan_-_OPD.docxDOCX72 KB
esurat__template_surat_kelurahan.docxDOCX72 KB
esurat__surat_res.docxDOCX71 KB
tds.pyPY65 KB
sekartaji__Surat_Edaran_-_Atas_Nama.docxDOCX65 KB
CVE-2021-22205.pyPY53 KB
esurat__template_surat.docxDOCX44 KB
__init__.pyPY41 KB
six.pyPY33 KB
pyDes.pyPY26 KB
exploit_userspec.pyPY23 KB
esurat__UD1447368441.docDOC22 KB
ntlm.pyPY20 KB
lcid.pyPY18 KB
‹redacted›.pycPYC15 KB
tds_base.pyPY15 KB
sspi.pyPY15 KB
collate.pyPY9 KB
smp.pyPY9 KB
tls.pyPY3 KB
login.pyPY3 KB
redis_honeypot_probe.pyPY3 KB
exploit_nss_d9_py3.pyPY2 KB
exploit_nss_d9.pyPY2 KB
ked_payload.pyPY2 KB
ked_payload2.pyPY2 KB
mstest2.pyPY1 KB
ex2.pyPY1 KB
tz.pyPY1 KB
find_gl.shSH1 KB
harvest.pyPY1 KB
extract3.shSH1 KB
align1.pyPY773 B
extract1.pyPY772 B
ex4.shSH748 B
extract2.shSH720 B
hsamp.pyPY714 B
ex3.shSH691 B
extensions.pyPY673 B
ex5.shSH625 B
find_gl.logLOG491 B
fix1.shSH270 B
ex4.logLOG242 B
configTXT174 B
configTXT165 B
configTXT164 B
configTXT163 B
configTXT162 B
configTXT161 B
configTXT161 B
configTXT160 B
configTXT159 B
configTXT158 B
configTXT157 B
configTXT156 B
configTXT156 B
ex5.logLOG154 B
ex3.logLOG101 B
extract2.logLOG98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT98 B
packed-refsTXT96 B
packed-refsTXT96 B
extract3.logLOG87 B
harvest.logLOG78 B
descriptionTXT73 B
HEADTXT23 B
HEADTXT21 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
101.36.112.205confirmed
101.89.149.227confirmed
102.209.224.40confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.133.216.219confirmed
103.163.246.138confirmed
103.195.188.128confirmed
103.254.63.94confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed