Live findsCVE IntelConsoleStart free
huntback / IP intelligence

217.217.233.97

RESIDENTIALpayload-dropc2exposed-secretopen-directorytunnelwebshell

Intelligence

ASN / OrgAS20326 · TeraSwitch Networks Inc.
CountryChina
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 443, 8443, 8081, 8082, 9001, 2096, 3333, 9443, 80, 1337
Productsnginx
JARM3fd3fd00000000000043d43d00043dc3b2afa8a5ec09b510a8559aff7899fb
Loot harvested18 file(s), 8566 KB · c2, coinminer, elf-binary, exposed-secret, malware, tunnel

Open directory contents (18)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
xmrigMiner.gzGZ3.4 MB
x.gzGZ3.3 MB
ccd_arm64ELF681 KB
ccdELF629 KB
ccd.gzGZ243 KB
run.shSH11 KB
run_arm.shSH10 KB
run.sh.bak-v13-1790027885BAK-V110 KB
run.sh.bak-v12-1790024468BAK-V19 KB
wd.shSH8 KB
run.sh.bak-v11-1790019958BAK-V18 KB
run.sh.bak-1790005533BAK-177 KB
run_v9_backup.shSH6 KB
go.shSH3 KB
‹redacted›.tmpTMP3 KB
win_deploy.ps1PS12 KB
a.shSH1 KB
a.shSH364 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

95.133.253.15confirmed
102.68.87.1lead
103.130.213.106lead
103.167.88.135lead
103.187.9.14lead
103.212.120.129lead
103.230.159.169lead
103.31.204.206lead
103.74.116.219lead
104.194.132.98lead
104.194.156.121lead
104.225.153.141lead
104.244.79.40lead
107.189.15.167lead
107.189.16.213lead