Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

31.76.94.111

DATACENTERloot-ipc2coinminerelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS201988 · VPSPay Networks LTD
CountryUnited States
NetworkDATACENTER · risk 80/100
Threat score0/100
Open ports22, 80, 8010
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested63 file(s), 11766 KB · c2, coinminer, elf-binary, exploit, exposed-secret, malware

Open directory contents (63)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
xmrigELF8.0 MB
iotproxy.tgzTGZ2.1 MB
s_digitalocean.logLOG199 KB
iot.dbDB176 KB
microsocks-mips64el-linux-muslELF114 KB
microsocks-mips64-linux-muslELF114 KB
microsocks-mips-linux-muslELF101 KB
microsocks-mipsel-linux-muslELF101 KB
microsocks-powerpc-linux-muslELF76 KB
microsocks-armv5-linux-musleabiELF72 KB
microsocks-arm-linux-musleabiELF70 KB
microsocks-aarch64-linux-muslELF67 KB
microsocks-x86_64-linux-muslELF63 KB
microsocks-x86-linux-muslELF61 KB
exploits.pyPY23 KB
‹redacted›.pycPYC20 KB
auto.pyPY18 KB
typing.pyPY14 KB
pipeline.pyPY12 KB
auto.logLOG11 KB
shellscan.pyPY11 KB
__main__.pyPY9 KB
scan.pyPY9 KB
message.pyPY9 KB
‹redacted›.jsonlJSONL8 KB
io.pyPY7 KB
proxyhunt.pyPY6 KB
webcreds.pyPY6 KB
run.pyPY5 KB
shells.pyPY5 KB
info.pyPY4 KB
onvif.pyPY4 KB
worker.pyPY3 KB
db.pyPY3 KB
mikrotik.pyPY3 KB
adbscan.pyPY3 KB
packet.pyPY3 KB
probe.pyPY3 KB
net.pyPY2 KB
dvrip_spray.pyPY2 KB
login.pyPY2 KB
operation.pyPY2 KB
gen_targets.pyPY2 KB
fastscan.pyPY2 KB
serve.pyPY2 KB
discover.pyPY2 KB
fingerprint.pyPY1 KB
udp_spray.pyPY1 KB
upnp.shSH1 KB
‹redacted›.xmlXML1 KB
search.pyPY1 KB
playback.pyPY1 KB
monitor.pyPY1 KB
batches.logLOG1 KB
_version.pyPY1 KB
pipeline.logLOG978 B
mock_tbk_srv.pyPY691 B
pool_status.pyPY672 B
errors.pyPY607 B
start_callback.shSH338 B
__init__.pyPY135 B
_version_lock.pyPY18 B
shellscan_pos.txtTXT5 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.252.72.150confirmed
27.131.106.133confirmed
38.60.227.210confirmed
45.151.122.34confirmed
51.81.244.207confirmed
64.177.33.68confirmed
8.220.87.150confirmed