Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

45.117.83.34

RESIDENTIALoperator-submittedexploitexposed-secretmalwaremoziopen-directory

Intelligence

ASN / OrgAS131353 · NhanHoa Software company
CountryVietnam
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports110, 3389, 8880, 25, 53, 80, 143, 443, 5555, 8443, 8000
ServiceMicrosoft-IIS/8.5 · Web Server's Default Page
Productsiis
JARM26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532
Loot harvested48 file(s), 18313 KB · exploit, exposed-secret, malware, mozi, pe-binary, webshell

Open directory contents (48)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
AnyDesk.exePE7.6 MB
bin.zipZIP5.2 MB
DllSafeCheck64.dllPE1.5 MB
aomhost64.exePE1.2 MB
Updater.logLOG729 KB
rar.exePE485 KB
log.phpPHP414 KB
‹redacted›.deps.jsonJSON321 KB
‹redacted›.Server.exePE140 KB
EfsPotato2.exePE90 KB
suo5.phpPHP33 KB
pass.phpPHP28 KB
123.exePE22 KB
‹redacted›.Updater.dllPE17 KB
egritos-auth-serilog20240909.logLOG15 KB
Serilog-ProgramMain-%7BDate%7D.logLOG15 KB
logins.phpPHP14 KB
‹redacted›.logsLOGS13 KB
‹redacted›.aspxASPX8 KB
egritos-auth-serilog20240903.logLOG8 KB
egritos-auth-serilog20240910.logLOG6 KB
config.pyPY6 KB
crack_task.pyPY5 KB
parser.pyPY5 KB
egritos-auth-serilog20240905.logLOG5 KB
egritos-auth-serilog20240906.logLOG4 KB
egritos-auth-serilog20240902.logLOG4 KB
egritos-auth-serilog20240907.logLOG3 KB
egritos-auth-serilog20240901.logLOG3 KB
egritos-auth-serilog20240904.logLOG2 KB
password_list.txtTXT2 KB
dict.pyPY2 KB
webcrack.pyPY1 KB
appsettings.jsonJSON1 KB
log.pyPY1 KB
‹redacted›.aspxASPX1 KB
egritos-auth-serilog20240911.logLOG1 KB
backend.yamlYAML1 KB
header.pyPY1 KB
‹redacted›.configCONFIG578 B
‹redacted›.backupBACKUP568 B
‹redacted›.runtimeconfig.jsonJSON557 B
‹redacted›.aspxASPX521 B
‹redacted›.runtimeconfig.jsonJSON488 B
nuclei_high.jsonJSON330 B
in.batBAT184 B
__init__.pyPY93 B
silent_results.txtTXT70 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.89.143.247lead
101.99.84.52lead
103.118.17.124lead
103.144.139.126lead
103.215.136.22lead
103.230.158.120lead
103.241.181.29lead
103.254.255.87lead
104.167.6.152lead
104.41.62.5lead
109.73.11.212lead
110.4.42.177lead
110.4.42.178lead
110.4.42.40lead
113.23.215.90lead