Live findsCVE IntelConsoleStart free
huntback / IP intelligence

31.76.79.58

RESIDENTIALblocklist-datashieldloot-ipexploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS215439 · PLAY2GO INTERNATIONAL LIMITED
CountryUnited States
NetworkRESIDENTIAL · risk 80/100
Threat score0/100
Open ports22, 9090
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested34 file(s), 59 KB · exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (34)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
emobile.pyPY41 KB
listener.pyPY2 KB
cookie9443.shSH1 KB
probe9443.shSH915 B
recon77.shSH891 B
api77.shSH842 B
apps77.shSH793 B
poison4.shSH783 B
poison3.shSH745 B
svc77.shSH696 B
login77.shSH676 B
poison.shSH628 B
poison5.shSH613 B
js77.shSH553 B
grep77.shSH500 B
poison2.shSH498 B
poison9443.shSH479 B
pages77.shSH477 B
emp77.shSH475 B
benign9443.shSH450 B
ua.shSH423 B
p.plPL414 B
lp9443.shSH364 B
cd77.shSH320 B
httpx77.shSH319 B
rce77b.shSH273 B
setup.shSH265 B
rce77c.shSH237 B
rce77d.shSH233 B
parse_ms.shSH212 B
ctx77.shSH172 B
rce77e.shSH134 B
mscan.shSH130 B
rce77.shSH117 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.131.177.14lead
138.197.72.235lead
14.29.208.101lead
148.116.90.65lead
154.219.98.61lead
158.247.218.226lead
176.65.139.250lead
178.63.68.220lead
185.13.230.208lead
2.27.23.151lead
2.27.249.100lead
207.180.219.101lead
207.57.188.152lead
23.94.189.114lead
4.193.248.52lead