Live findsCVE IntelConsoleStart free
huntback / IP intelligence

111.223.247.165

RESIDENTIALoperator-submittedloot-ipexploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS64050 · BGP Network Limited
CountrySouth Korea
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 1433, 4445, 8001, 8008, 8080, 8099, 8443, 8888, 8898, 9443, 18081, 111
ServiceBaseHTTP/0.6 Python/3.10.12
JARM2ad2ad0002ad2ad00042d42d000000ad9bf51cc3f5a1e29eecb81d0c7b06eb
Loot harvested31 file(s), 68 KB · exploit, exposed-secret, malware, mozi, pe-binary

Open directory contents (31)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
httpsrv.logLOG32 KB
cbclr.dllPE3 KB
rce_raw.pyPY2 KB
p10.pyPY1 KB
recon.pyPY1 KB
probe3.pyPY1 KB
‹redacted›.pycPYC1 KB
key.pemPEM1 KB
probe4.pyPY1 KB
p14.pyPY1 KB
probe5.pyPY1 KB
chq.pyPY1 KB
probe7.pyPY1 KB
probe6.pyPY1 KB
p12.pyPY1 KB
probe2.pyPY1 KB
rce1.pyPY1 KB
clrtest.pyPY1 KB
cert.pemPEM1 KB
p11.pyPY1005 B
p8.pyPY985 B
p7a.pyPY884 B
p9.pyPY839 B
p13.pyPY815 B
httpsrv.pyPY799 B
clr0.pyPY494 B
chq.shSH150 B
configTXT123 B
configTXT26 B
configTXT2 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

143.92.57.247confirmed
178.16.52.154confirmed
202.162.109.5confirmed
202.162.109.6confirmed
213.177.179.14confirmed
4.193.248.52confirmed
94.130.22.61confirmed
101.42.136.73confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.39.79.102confirmed
103.46.185.169confirmed
104.21.23.192confirmed
108.61.219.168confirmed
109.122.196.145confirmed