Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

45.155.19.244

RESIDENTIALloot-ipc2exploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS209317 · Samet Girginer
CountryTurkey
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 3000, 8000, 8008, 8088, 8090, 8091
Servicenginx/1.24.0 (Ubuntu) · Welcome to nginx!
Productsnginx
JARM27d40d40d00040d00042d43d0000007d20e9b9a3e87aa1ec17cb4d646ce9a5
Loot harvested56 file(s), 772 KB · c2, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (56)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.tsTS42 KB
‹redacted›.tsTS35 KB
‹redacted›.tsTS34 KB
‹redacted›.tsTS33 KB
‹redacted›.tsTS32 KB
‹redacted›.tsTS29 KB
‹redacted›.mjsMJS28 KB
‹redacted›.tsTS26 KB
‹redacted›.tsTS25 KB
‹redacted›.tsTS23 KB
‹redacted›.tsTS23 KB
‹redacted›.tsTS21 KB
‹redacted›.tsTS21 KB
plugin.jsJS21 KB
‹redacted›.tsTS19 KB
plugin.jsJS16 KB
‹redacted›.tsTS15 KB
‹redacted›.mjsMJS15 KB
plugins.jsonJSON15 KB
plugin.jsJS14 KB
plugin.jsJS13 KB
AGENTS.mdMD13 KB
plugin.jsJS12 KB
plugin.jsJS12 KB
plugin.jsJS12 KB
plugin.jsJS11 KB
plugin.jsJS11 KB
‹redacted›.bundled.jsJS10 KB
plugin.jsJS10 KB
plugin.jsJS10 KB
‹redacted›.tsTS10 KB
plugin.jsJS10 KB
plugin.jsJS9 KB
plugin.jsJS9 KB
plugin.jsJS9 KB
plugin.jsJS9 KB
plugin.jsJS8 KB
plugin.jsJS8 KB
plugin.jsJS8 KB
plugin.jsJS7 KB
plugin.jsJS7 KB
plugin.jsJS7 KB
package.pyPY6 KB
plugin.jsJS6 KB
‹redacted›.mjsMJS5 KB
‹redacted›.mjsMJS4 KB
‹redacted›.mjsMJS4 KB
‹redacted›.mjsMJS4 KB
‹redacted›.mjsMJS4 KB
‹redacted›.mjsMJS4 KB
serve.pyPY3 KB
‹redacted›.mjsMJS1 KB
.gitignoreGITIGN1 KB
plugin.jsonJSON625 B
tsconfig.jsonJSON202 B
tsconfig.jsonJSON201 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

102.213.181.90lead
103.117.148.247lead
103.118.245.63lead
103.127.98.10lead
103.142.25.154lead
103.146.23.195lead
103.175.219.40lead
103.180.134.215lead
103.85.59.78lead
107.155.87.214lead
109.120.151.140lead
109.122.196.126lead
109.122.196.95lead
109.122.197.113lead
109.122.197.243lead