huntback / IP intelligence

107.172.209.126

DATACENTERioc-tweetfeedexploitmalwareopen-directorype-binary

Intelligence

ASN / OrgAS36352 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports21, 80, 443, 445, 3389, 8080
ServiceApache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.0.28 · Index of /
Productsapache
Loot harvested5 file(s), 5181 KB · exploit, malware, pe-binary

Open directory contents (5)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
3.jpgJPG3.2 MB
55.zipZIP705 KB
dwn.exePE492 KB
jkSAhod.txtTXT370 KB
base64_payload_output_from_builderTXT370 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

217.60.76.249confirmed
102.220.23.253lead
103.101.58.162lead
103.12.205.114lead
104.219.236.115lead
110.10.130.86lead
128.199.192.135lead
132.247.113.22lead
149.50.96.122lead
151.84.80.152lead
153.75.95.135lead
166.62.33.230lead
167.88.160.219lead
172.86.110.51lead
172.86.115.112lead