huntback / IP intelligence
65.20.109.231
Intelligence
ASN / OrgAS20473 · The Constant Company, LLC
CountrySpain
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8080
ServiceWsgiDAV/4.3.5 Cheroot/11.1.2 Python/3.14.4 · WsgiDAV - Index of /
Loot harvested37 file(s), 36862 KB · exploit, malware, pe-binary, webshell
Open directory contents (37)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| PortableCOMHunt.zip | ZIP | 8.3 MB |
| Inveigh.exe | PE | 4.2 MB |
| zoip.zip | ZIP | 3.6 MB |
| ‹redacted›.ocx | PE | 3.0 MB |
| ‹redacted›.ocx | PE | 3.0 MB |
| ‹redacted›.ocx | PE | 1.4 MB |
| ‹redacted›.ocx | PE | 1.0 MB |
| agent-2bd66d86.exe | PE | 679 KB |
| agent-c9c267bf.exe | PE | 679 KB |
| agent-b78c648b.exe | PE | 654 KB |
| agent-e29a30a0.exe | PE | 654 KB |
| agent-d2ddd530.exe | PE | 641 KB |
| agent-11e2e608.exe | PE | 622 KB |
| agent-395729a4.exe | PE | 622 KB |
| agent-c3ba332a.exe | PE | 622 KB |
| new.exe | PE | 622 KB |
| ‹redacted›.new | PE | 622 KB |
| newer.exe | PE | 622 KB |
| Syn.exe | PE | 622 KB |
| agent-1450f55b.exe | PE | 593 KB |
| drivems.exe | PE | 538 KB |
| agent-18b6a38b.exe | PE | 480 KB |
| agent-aa56b349.exe | PE | 466 KB |
| agent-4d05b579.exe | PE | 464 KB |
| mimic.exe | PE | 463 KB |
| agent-fa6b52d4.exe | PE | 434 KB |
| bg.zip | ZIP | 310 KB |
| poc.exe | PE | 234 KB |
| agent.log | LOG | 136 KB |
| update.log | LOG | 17 KB |
| cloud | TXT | 13 KB |
| ‹redacted›.install.log | LOG | 12 KB |
| extracted_data.zip | ZIP | 12 KB |
| Watch-ChromeAdminPrompt.ps1 | PS1 | 8 KB |
| bumper.exe | PE | 6 KB |
| bumper.ps1 | PS1 | 3 KB |
| standalone_hunt.ps1 | PS1 | 3 KB |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 217.69.11.65 | confirmed |