huntback / IP intelligence

116.63.131.238

RESIDENTIALloot-ipexposed-secretmalwaremozi

Intelligence

ASN / OrgAS134542 · China Unicom IP network
CountryChina
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports21, 22, 23, 53, 81, 88, 110, 143, 389, 465, 587, 993, 1521, 2095, 2375, 3000
ServiceOrientDB Server v.2.2.22 (build fb2b7d321ea8a5a5b18a82237049804aace9e3de) · Redirecting to OrientDB Studio...
Productsnginx
Loot harvested2 file(s), 56 KB · exposed-secret, malware, mozi

Open directory contents (2)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
Main_Login.asp?error_status=1&page=index.asp&lock_time=0ASP&LO56 KB
configTXT12 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

152.32.154.231confirmed
102.70.86.105lead
103.215.80.153lead
103.247.19.204lead
104.245.245.213lead
104.251.180.112lead
107.189.22.235lead
107.189.23.9lead
109.120.132.28lead
111.223.247.165lead
117.239.196.141lead
117.27.135.90lead
119.59.117.47lead
122.164.126.53lead
123.207.206.234lead