Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

66.179.31.191

VPNVPNoperator-boxexploitc2exposed-secretopen-directorytunnel

Intelligence

ASN / OrgAS399629 · BL Networks
CountryUnited States
NetworkVPN · risk 70/100
Threat score0/100
Open ports22, 8082, 6666, 8898
Loot harvested60 file(s), 1319 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (60)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
godzilla_mem.zipZIP783 KB
fscan_3x.logLOG89 KB
batch_abTXT60 KB
exp.soSO43 KB
fscan_0x.logLOG38 KB
hr_kp_login_res.htmlHTML20 KB
hr_kp_res.htmlHTML20 KB
hr_kp_l.htmlHTML20 KB
hr_kp_login.htmlHTML20 KB
hr_login.htmlHTML19 KB
dsms_overnight.pyPY14 KB
dnams_test.htmlHTML14 KB
batch500_ahTXT11 KB
batch500_akTXT10 KB
batch500_aeTXT10 KB
batch500_agTXT10 KB
geoserver_xxe.pyPY10 KB
geoserver_deep_exploit.pyPY6 KB
hr_login_res.htmlHTML5 KB
hr_login_page.htmlHTML5 KB
geoserver_decrypt.pyPY5 KB
dcbuner_fl.htmlHTML4 KB
dcbuner_form.htmlHTML4 KB
dcbuner_lp2.htmlHTML4 KB
dcbuner_lp3.htmlHTML4 KB
dcbuner_lp4.htmlHTML4 KB
dcbuner_tc.htmlHTML4 KB
dcbuner_login_page.htmlHTML4 KB
geoserver_rest_exploit.pyPY4 KB
geoserver_rce.pyPY3 KB
geoserver_admin_full.pyPY3 KB
exploit2.pyPY3 KB
hik.pyPY3 KB
geoserver_master_exploit.pyPY3 KB
geoserver_sqlview.pyPY3 KB
extract_pw.pyPY3 KB
build_module.shSH2 KB
geoserver_reset_pg.pyPY2 KB
exploit.pyPY2 KB
debug_ignition.pyPY2 KB
deploy_module.pyPY2 KB
find_writable.pyPY2 KB
cve76904.pyPY2 KB
exploit3.pyPY2 KB
find_log.pyPY2 KB
debug_targets.pyPY2 KB
confluence_mem.zipZIP1 KB
deploy_war.shSH1 KB
deploy_115.binBIN1 KB
deploy_oob.shSH1 KB
hik_fullscan.pyPY1 KB
‹redacted›.warWAR995 B
dcbuner_jar3.txtTXT935 B
gen_implant.pyPY772 B
‹redacted›.xmlXML667 B
build.shSH485 B
‹redacted›.pharPHAR477 B
cleanup.shSH373 B
evil.cC186 B
cleo_exploit.shSH85 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

134.122.169.32confirmed