Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

31.56.228.126

RESIDENTIALloot-ipexposed-secretexploitmalwaremoziopen-directory

Intelligence

ASN / OrgAS56971 · CGI GLOBAL LIMITED
CountryFrance
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 993, 8081, 8443, 8898, 8886, 8889, 8890, 8891, 8892, 8893, 8894, 8895, 8896, 8897
ServiceBaseHTTP/0.6 Python/3.13.5
JARM28d28d28d00028d00042d42d000000ad9bf51cc3f5a1e29eecb81d0c7b06eb
Loot harvested62 file(s), 944 KB · exploit, exposed-secret, malware, mozi

Open directory contents (62)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
p80.logLOG454 KB
http8899.logLOG314 KB
tcp993.logLOG39 KB
https9443.logLOG22 KB
hits.logLOG10 KB
headers.logLOG10 KB
rm.logLOG9 KB
‹redacted›.outOUT9 KB
redir7.logLOG8 KB
redir.logLOG7 KB
redir2.logLOG7 KB
redir3.logLOG6 KB
redir5.logLOG5 KB
redir6.logLOG5 KB
sdc.jsonJSON4 KB
svc_parse.pyPY2 KB
redir4.logLOG2 KB
redirect5.pyPY1 KB
redirect7.pyPY1 KB
redirect4.pyPY1 KB
msg_server2.pyPY1 KB
msg_server.pyPY1 KB
cookie_server.pyPY958 B
server.pyPY943 B
redirect_rm.pyPY937 B
redirect6.pyPY924 B
redirect3.pyPY910 B
csrf.htmlHTML870 B
counter.logLOG749 B
header_server.pyPY749 B
oob.pyPY743 B
html_payload_inline.pyPY711 B
redirect2.pyPY688 B
p80.pyPY680 B
redirect_server.pyPY656 B
html_payload.pyPY654 B
html_payload2.pyPY654 B
csp_listen.pyPY650 B
cookie_inject.pyPY637 B
counter_server.pyPY633 B
bbbridge2.htmlHTML619 B
bbbridge3.htmlHTML539 B
https9443.pyPY416 B
tcplisten.pyPY395 B
bbbridge.htmlHTML292 B
msg.logLOG276 B
msg2.logLOG184 B
configTXT76 B
HEADTXT76 B
.envENV76 B
config.jsonJSON76 B
credentialsTXT76 B
configBIN68 B
cookie.logLOG59 B
credentialsTXT54 B
configTXT49 B
config.jsonJSON49 B
phpinfo.phpPHP49 B
HEADTXT47 B
.envENV42 B
configTXT35 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

175.41.25.250confirmed
207.56.221.47confirmed
45.152.149.32confirmed
49.51.187.59confirmed
100.21.82.169confirmed
101.42.136.73confirmed
101.47.156.26confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.46.185.169confirmed
104.223.41.172confirmed
104.233.150.138confirmed
108.61.219.168confirmed
111.223.247.165confirmed
118.107.13.102confirmed