Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

81.181.166.24

RESIDENTIALoperator-submittedc2exploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS48881 · DataNode DC SRL
CountryRomania
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 3306, 8000, 9090
Servicecloudflare · readsmoon · book cover design by Plisco Carina
JARM2ad2ad0002ad2ad00042d42d0000002059a3b916699461c5923779b77cf06b
Loot harvested28 file(s), 8624 KB · c2, exploit, exposed-secret, malware, mozi, webshell

Open directory contents (28)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
p5m.binBIN5.0 MB
p1m.binBIN1.0 MB
eas3-android.txtTXT608 KB
unleash-repo-schema-v1-codeium-language-server.jsonJSON452 KB
eas-log-fresh.txtTXT383 KB
eas2-android.txtTXT379 KB
unleash-backup-codeium-extension.jsonJSON359 KB
google_test.htmlHTML88 KB
css_requests.logLOG75 KB
bing_test.htmlHTML70 KB
eas-android-build.logLOG46 KB
sudo_test.logLOG3 KB
analyze.pyPY2 KB
test_analytics.shSH1 KB
find_violations.shSH1 KB
c.pemPEM1 KB
su.jsonJSON1 KB
su2.jsonJSON1 KB
p1k.binBIN1 KB
u.txtTXT930 B
check_violations.shSH904 B
gen.jsJS739 B
nginx_patch.pyPY554 B
rm.logLOG261 B
test_creds.txtTXT49 B
scarf-js-history-oexperience.logLOG32 B
up-test.binBIN13 B
s.binBIN3 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.32.51.21lead
102.164.37.97lead
102.208.186.12lead
102.210.149.236lead
103.103.22.4lead
103.146.52.138lead
103.172.236.164lead
103.94.169.208lead
104.194.135.22lead
104.194.159.84lead
104.194.84.117lead
104.248.22.187lead
104.248.243.65lead
104.248.45.206lead
107.173.41.13lead