Live findsCVE IntelConsoleStart free
huntback / IP intelligence

169.58.233.110

DATACENTERoperator-submittedloot-ipexploitexposed-secretmalwaremirai

Intelligence

ASN / OrgAS42366 · TerraTransit AG
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 25, 8443, 9999, 80, 2222, 8099, 9090, 9443
Loot harvested84 file(s), 15933 KB · exploit, exposed-secret, malware, mirai, mirror, mozi

Open directory contents (84)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
models.jsonJSON4.5 MB
cves.jsonJSON2.0 MB
server.logLOG1.9 MB
.checksumCHECKS1.4 MB
.templates-indexTEMPLA1.2 MB
templates-checksum.txtTXT1.1 MB
CHANGELOG.mdMD852 KB
‹redacted›.jsonlJSONL771 KB
listener_capture_20260924.logLOG721 KB
receiver.logLOG317 KB
TEMPLATES-STATS.jsonJSON302 KB
2026-08-25T12_04_11_591Z-debug-0.logLOG90 KB
mailhog.logLOG75 KB
2026-10-19T06_57_15_242Z-debug-0.logLOG61 KB
params.txtTXT52 KB
common.txtTXT37 KB
package-lock.jsonJSON33 KB
.package-lock.jsonJSON32 KB
.bash_historyBASH_H21 KB
api-endpoints.txtTXT20 KB
TEMPLATE-CREATION-GUIDE.mdMD14 KB
herdr-server.logLOG13 KB
TEMPLATE-REVIEW-GUIDE.mdMD12 KB
config.yamlYAML11 KB
CONTRIBUTING.mdMD11 KB
config.yamlYAML10 KB
CLAUDE.mdMD10 KB
config.yaml7 KB
README_JA.mdMD6 KB
‹redacted›.jsonlJSONL6 KB
README_KR.mdMD6 KB
‹redacted›.jsonlJSONL6 KB
.bashrcBASHRC5 KB
‹redacted›.jsonlJSONL5 KB
README_CN.mdMD5 KB
‹redacted›.jsonlJSONL4 KB
config.yamlYAML4 KB
ai_provider_mock.pyPY4 KB
.new-additionsNEW-AD3 KB
MAILHOG.mdMD3 KB
upload_server.pyPY3 KB
receiver.pyPY3 KB
snow_import_rsaTXT3 KB
cred_test_listener.pyPY2 KB
config.yaml2 KB
server_loging.pyPY2 KB
config.yamlYAML1 KB
ai_mock.keyKEY1 KB
PULL_REQUEST_TEMPLATE.mdMD1 KB
.nuclei-ignore1 KB
provider-config.yamlYAML1 KB
2026-08-25T12_01_27_785Z-debug-0.logLOG1 KB
2026-08-25T12_01_06_937Z-debug-0.logLOG1 KB
2026-08-25T12_01_26_719Z-debug-0.logLOG1 KB
‹redacted›.cjsCJS1 KB
2026-08-25T11_53_23_051Z-debug-0.logLOG1 KB
2026-08-25T11_53_47_931Z-debug-0.logLOG1 KB
‹redacted›.jsoncJSONC1 KB
2026-08-25T11_53_23_049Z-debug-0.logLOG1 KB
2026-08-25T11_53_47_921Z-debug-0.logLOG1 KB
2026-10-19T06_59_35_700Z-debug-0.logLOG1014 B
2026-08-25T11_53_47_929Z-debug-0.logLOG1011 B
reporting-config.yamlYAML940 B
herdr-client.logLOG811 B
interestingEXT.jsonJSON735 B
rce.jsonJSON609 B
ai_mock_443_stdout.logLOG518 B
listener_stdout.logLOG511 B
go.envENV505 B
.templates-config.jsonJSON499 B
xss.jsonJSON451 B
ai_mock.logLOG319 B
run.shSH240 B
package.jsonJSON238 B
config.yamlYAML191 B
sample_zipped.zipZIP174 B
upload_server.logLOG159 B
probe.shSH144 B
provider-config.yamlYAML118 B
config.tomlTOML113 B
configTXT91 B
README.mdMD87 B
.gitignoreGITIGN63 B
ai_mock_stdout.logLOG63 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Passive DNS

vmi3532355.contaboserver.net

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

157.230.117.70confirmed
157.245.140.34confirmed
176.65.148.59confirmed
185.148.144.99confirmed
190.183.251.210confirmed
2.24.204.250confirmed
41.223.30.7confirmed
43.163.124.78confirmed
64.111.92.149confirmed
66.154.127.156confirmed
8.217.24.92confirmed
89.124.67.72confirmed
94.26.3.238confirmed