huntback / IP intelligence

64.20.61.134

DATACENTERoperator-submittedexposed-secretmalwaremoziopen-directorytunnel

Intelligence

ASN / OrgAS19318 · Interserver, Inc
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 3306, 5000, 5555, 6379, 8000, 8080, 8081, 8082, 8083, 8088, 8443, 8765, 4444
ServiceCaddy · ARTEX — 自主渗透测试控制台
Productsnginx
Loot harvested38 file(s), 318 KB · exposed-secret, malware, mozi, tunnel

Open directory contents (38)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
rfb.jsJS103 KB
ui.jsJS56 KB
keysym.jsJS33 KB
display.jsJS15 KB
vnc.htmlHTML14 KB
des.jsJS10 KB
websock.jsJS10 KB
novnc_proxyTXT6 KB
vnc_lite.htmlHTML6 KB
util.jsJS5 KB
webutil.jsJS5 KB
base64.jsJS4 KB
el.jsonJSON3 KB
ru.jsonJSON3 KB
ja.jsonJSON3 KB
nl.jsonJSON2 KB
fr.jsonJSON2 KB
ko.jsonJSON2 KB
cs.jsonJSON2 KB
pt_BR.jsonJSON2 KB
de.jsonJSON2 KB
pl.jsonJSON2 KB
tr.jsonJSON2 KB
sv.jsonJSON2 KB
es.jsonJSON2 KB
zh_CN.jsonJSON2 KB
zh_TW.jsonJSON2 KB
b64-to-binary.plPL392 B
credentialsTXT171 B
server-statusTXT168 B
entriesTXT167 B
envTXT167 B
configTXT166 B
config.jsonJSON166 B
phpinfo.phpPHP166 B
HEADTXT164 B
.envENV159 B
CREDITSTXT157 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.35.210.248confirmed
101.43.25.15confirmed
209.38.235.232confirmed
34.22.116.191confirmed
38.224.162.188confirmed
38.76.199.210confirmed
38.97.253.252confirmed
51.159.184.76confirmed
103.253.40.42lead
103.253.40.44lead
13.140.171.3lead
139.59.208.29lead
147.135.213.131lead
150.136.55.16lead
152.53.199.247lead