Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

91.197.98.188

RESIDENTIALoperator-submittedexposed-secretmalwaremoziopen-directorype-binary

Intelligence

ASN / OrgAS197695 · "Domain names registrar REG.RU", Ltd
CountryRussia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 5555, 7777, 8000, 8070
JARM27d40d40d00040d00042d43d0000007d20e9b9a3e87aa1ec17cb4d646ce9a5
Loot harvested12 file(s), 20857 KB · exposed-secret, malware, mozi, pe-binary, tunnel

Open directory contents (12)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
AnyDesk.exePE7.7 MB
svhost.exePE6.3 MB
libcrypto.dllPE1.7 MB
bore.exePE1.4 MB
ssh.exePE1.2 MB
ab.exePE951 KB
v.exePE754 KB
exec.exePE331 KB
rr.exePE73 KB
PrintSpoofer.exePE21 KB
Invoke-PowerShellTcp.ps1PS14 KB
ct.batBAT1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

5.83.144.60confirmed
102.213.181.90lead
103.117.148.247lead
103.118.245.63lead
103.127.98.10lead
103.142.25.154lead
103.146.23.195lead
103.175.219.40lead
103.180.134.215lead
103.85.59.78lead
107.155.87.214lead
109.120.151.140lead
109.122.196.126lead
109.122.196.95lead
109.122.197.113lead