Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

52.188.156.253

DATACENTERioc-tweetfeedexploitmalwaremoziopen-directorype-binary

Intelligence

ASN / OrgAS8075 · Microsoft Corporation
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443
Servicenginx/1.22.1 · Welcome to nginx!
Productsnginx
JARM27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523
Loot harvested7 file(s), 1974 KB · exploit, malware, mozi, pe-binary

Open directory contents (7)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
54e54se34sde45e4.exePE604 KB
m.exePE604 KB
i.exePE604 KB
a.ps1PS153 KB
4etgr4eg5ehgyt.ps1PS153 KB
t.ps1PS153 KB
‹redacted›.comCOM1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Passive DNS

appdata.eastus.cloudapp.azure.com

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.14.93.149lead
1.15.114.102lead
101.32.108.79lead
101.36.118.185lead
101.47.134.222lead
101.47.15.229lead
102.203.200.45lead
102.68.86.43lead
103.111.114.29lead
103.113.104.49lead
103.116.52.164lead
103.129.149.141lead
103.133.216.219lead
103.150.93.176lead
103.151.141.85lead