Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

65.20.96.115

DATACENTERoperator-submittedloot-ipelf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS20473 · The Constant Company, LLC
CountrySpain
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 8000, 8080, 5201, 5202
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
JARM29d3fd00029d29d21c42d43d00041df61f6b5fa6973e9fa14c8155669c6633
Loot harvested175 file(s), 47441 KB · elf-binary, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (175)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.koELF7.8 MB
amneziawg.oELF7.7 MB
5mb.binBIN5.0 MB
bench_5mb.binBIN5.0 MB
bench_5mb.binBIN5.0 MB
chameleon_b2_dualport_server.logLOG1.0 MB
bench_1mb.binBIN1.0 MB
test1mb.binBIN1.0 MB
test1mb.binBIN1.0 MB
chameleon_server.logLOG921 KB
http_server.logLOG765 KB
netlink.oELF625 KB
receive.oELF612 KB
send.oELF581 KB
noise.oELF562 KB
device.oELF533 KB
socket.oELF519 KB
allowedips.oELF515 KB
timers.oELF486 KB
peer.oELF473 KB
cookie.oELF458 KB
ratelimiter.oELF451 KB
peerlookup.oELF442 KB
junk.oELF440 KB
queueing.oELF431 KB
header_protection.oELF413 KB
main.oELF407 KB
awgELF134 KB
amneziawg.mod.oELF101 KB
chameleon_hydra.cC64 KB
.device.o.cmdCMD63 KB
.netlink.o.cmdCMD63 KB
.main.o.cmdCMD62 KB
.noise.o.cmdCMD62 KB
.receive.o.cmdCMD62 KB
.cookie.o.cmdCMD62 KB
.socket.o.cmdCMD62 KB
.send.o.cmdCMD62 KB
.timers.o.cmdCMD62 KB
.allowedips.o.cmdCMD62 KB
.queueing.o.cmdCMD62 KB
.peerlookup.o.cmdCMD62 KB
.peer.o.cmdCMD62 KB
.junk.o.cmdCMD62 KB
.header_protection.o.cmdCMD62 KB
.ratelimiter.o.cmdCMD62 KB
ubuntu-22.04-amneziawg-tools.zipZIP61 KB
chameleon_fast_dualport.cC46 KB
w32_descriptors.tar.gzGZ43 KB
acer_chameleon_app.pyPY43 KB
w31_descriptors.tar.gzGZ38 KB
chameleon_turbo_b2.pyPY37 KB
.amneziawg.mod.o.cmdCMD35 KB
chameleon_b2_dualport.pyPY35 KB
w30_descriptors.tar.gzGZ34 KB
netlink.cC34 KB
noise.cC27 KB
hydra_server.logLOG27 KB
discovery_fec_client.pyPY25 KB
chameleon_fast_dualport.logLOG25 KB
w30_telecom_client_stage.pyPY23 KB
chameleon_turbo_b2_server.logLOG21 KB
receive.cC21 KB
chameleon_turbo_server.logLOG17 KB
discovery_telecom_client_stage.pyPY17 KB
test_interopELF16 KB
send.cC16 KB
discovery_fec_server.pyPY15 KB
tELF15 KB
testELF15 KB
chameleon_daemon.pyPY15 KB
chameleon_fast_dualport_server.logLOG15 KB
device.cC14 KB
w30_client.pyPY14 KB
discovery_web_client.pyPY14 KB
frontier_d_client.pyPY14 KB
frontier_f_client.pyPY13 KB
awg-quickTXT13 KB
uncharted_server.logLOG13 KB
‹redacted›.specSPEC13 KB
publish_w30_telecom_descriptors.pyPY12 KB
tun_lifo.logLOG12 KB
socket.cC12 KB
allowedips.cC11 KB
w30_telecom_server.pyPY11 KB
timers.cC9 KB
w30_f_client.pyPY9 KB
reality.goGO9 KB
w30_phase2_probe_stage.pyPY9 KB
chameleon_zeroloss_server.logLOG9 KB
discovery_telecom_server.pyPY8 KB
chameleon_multipath_server.logLOG8 KB
publish_telecom_descriptors.pyPY8 KB
w30_server.pyPY8 KB
frontier_d_server.pyPY8 KB
discovery_web_server.pyPY8 KB
amneziawg.mod.cC8 KB
peer.cC7 KB
w32_f_client.pyPY7 KB
junk.cC7 KB
cookie.cC7 KB
w30_phase3_probe_stage.pyPY6 KB
hydra_client_stun.logLOG6 KB
hydra_client_ntp.logLOG6 KB
peerlookup.cC6 KB
ratelimiter.cC6 KB
discovery_w30_addendum.pyPY5 KB
w31_telecom_server.pyPY5 KB
w30_asym_test.pyPY5 KB
frontier_f_server.pyPY5 KB
chameleon_hydra_server.logLOG5 KB
messages.hH3 KB
srv.logLOG3 KB
client.logLOG3 KB
publish_w31_telecom_descriptor.pyPY2 KB
queueing.cC2 KB
w32_f_server.pyPY2 KB
cli443.logLOG2 KB
cli.logLOG2 KB
main.cC2 KB
novel_tcpdump.logLOG1 KB
test_interop.cC1 KB
cookie.hH1 KB
test_gcm.cC1 KB
header_protection.cC1 KB
KconfigTXT1 KB
test_client_reality.jsonJSON948 B
test_client.jsonJSON947 B
tcpdump_4500.logLOG892 B
run_acer.pyPY866 B
filter-compat-defines.shSH849 B
test_client_google.jsonJSON764 B
test_client_yahoo.jsonJSON764 B
test_ff.jsonJSON741 B
test_safari.jsonJSON740 B
create-patch.shSH736 B
test_google_client.jsonJSON692 B
tcp_trace.logLOG600 B
vps_icmp.logLOG576 B
.amneziawg.o.cmdCMD558 B
discovery_web_server.logLOG554 B
http8000.logLOG554 B
jury-rig.shSH543 B
.amneziawg.mod.cmdCMD542 B
novel_dpi_diff.logLOG529 B
ratelimiter.hH432 B
discovery_telecom_server.logLOG427 B
tcpdump_3ports.logLOG384 B
live_wire_responder.logLOG362 B
discovery_fec_server.logLOG349 B
.gitignoreGITIGN299 B
configTXT299 B
sslip.keyKEY241 B
port_trace.logLOG230 B
.amneziawg.ko.cmdCMD217 B
.Module.symvers.cmdCMD185 B
awg_shim_server.logLOG146 B
.modules.order.cmdCMD139 B
w32_rlnc_srv.logLOG122 B
packed-refsTXT114 B
c_awg_shim_server.logLOG111 B
w31_rlnc_srv.logLOG107 B
frontier_f_server.logLOG95 B
rlnc_server.logLOG94 B
w31_telecom_server.logLOG81 B
c26_client.logLOG79 B
w32_f_server.logLOG77 B
w30_telecom_server.logLOG76 B
descriptionTXT73 B
w30_server.logLOG67 B
.gitattributesGITATT54 B
frontier_d_server.logLOG52 B
shallowTXT41 B
t.cC24 B
HEADTXT23 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
101.89.149.227confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.200.73.97confirmed
104.233.217.66confirmed
106.116.230.110confirmed
107.189.1.175confirmed
109.73.199.99confirmed