Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

38.97.253.252

DATACENTERexposed-secretmalwaremoziopen-directorytunnelwebshell

Intelligence

ASN / OrgAS174 · Cogent Communications
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports8787, 999, 42208
ServiceWebSockify Python/2.7.5 · Directory listing for /
Loot harvested31 file(s), 511 KB · exposed-secret, malware, mozi, tunnel, webshell

Open directory contents (31)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
sinon.jsJS204 KB
rfb.jsJS85 KB
ui.jsJS58 KB
keysym.jsJS33 KB
token.confCONF30 KB
display.jsJS23 KB
des.jsJS11 KB
json2graph.pyPY6 KB
‹redacted›.poPO6 KB
‹redacted›.poPO5 KB
util.jsJS5 KB
‹redacted›.poPO5 KB
launch.shSH4 KB
base64.jsJS4 KB
‹redacted›.potPOT4 KB
el.jsonJSON3 KB
xgettext-htmlTXT3 KB
de.jsonJSON2 KB
rebind.cC2 KB
sv.jsonJSON2 KB
‹redacted›.poPO1 KB
po2jsTXT1 KB
setup.pyPY1 KB
img2js.pyPY908 B
nl.jsonJSON655 B
b64-to-binary.plPL396 B
‹redacted›.config.jsJS359 B
CREDITSTXT157 B
.gitignoreGITIGN145 B
websockify.pyPY86 B
configTXT17 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

38.224.162.188confirmed
101.35.210.248confirmed
101.43.25.15confirmed
209.38.235.232confirmed
34.22.116.191confirmed
38.76.199.210confirmed
51.159.184.76confirmed
64.20.61.134confirmed