huntback / IP intelligence

66.42.33.224

DATACENTERoperator-submittedloot-ipc2exposed-secretforced-lootmalware

Intelligence

ASN / OrgAS20473 · The Constant Company, LLC
CountryJapan
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8000, 8080, 8081, 8082
ServiceSimpleHTTP/0.6 Python/3.13.5 · Directory listing for /
Loot harvested21 file(s), 14209 KB · c2, exposed-secret, forced-loot, malware, mozi, sliver

Open directory contents (21)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
sliver_sc2.bin.gzGZ10.7 MB
phish.logLOG1.5 MB
phish_8080.logLOG1.3 MB
sc_enc.binBIN243 KB
captured_hooks.jsonJSON51 KB
captured_creds_8081.jsonJSON13 KB
phish_server_8081.pyPY3 KB
phish_server.py.bak_1790409325BAK_173 KB
phish_server.pyPY3 KB
nccu_phish_server.pyPY3 KB
loader.ps1PS13 KB
send_phish.pyPY2 KB
auto_persist_sliver.shSH1 KB
loader4.ps1PS11 KB
loader2.ps1PS11 KB
auto_persist.shSH1 KB
captured_creds.jsonJSON1 KB
sliver_persist.logLOG1 KB
loader3.ps1PS1949 B
nccu_captured_creds.jsonJSON315 B
seen_sliver_sessions.txtTXT63 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

151.243.11.240lead
151.243.11.241lead
159.223.40.78lead
185.216.68.66lead
46.250.255.73lead
89.19.223.126lead