Live findsCVE IntelConsoleStart free
huntback / IP intelligence

104.160.169.204

DATACENTERoperator-submittedloot-ipc2coinminerelf-binaryexploit

Intelligence

ASN / OrgAS46844 · Sharktech
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 389, 443, 3306, 8080, 8085, 8099
Servicenginx · 404 Not Found
Productsnginx, apache
JARM3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763
Loot harvested170 file(s), 27403 KB · c2, coinminer, elf-binary, exploit, exposed-secret, havoc

Open directory contents (170)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
top.txtTXT4.8 MB
pri.txtTXT3.4 MB
top400.txtTXT3.2 MB
p.662.2 MB
p.112.2 MB
p.222.2 MB
p.332.2 MB
.sshc.logLOG1.4 MB
clientELF610 KB
d2.204204570 KB
fl_204.txtTXT357 KB
i24119_ldap.logLOG304 KB
olf.txtTXT264 KB
oob23850.logLOG248 KB
‹redacted›.outOUT76 KB
z.222253 KB
z.111153 KB
z.343453 KB
z.080853 KB
z.313153 KB
z.404053 KB
z.505053 KB
z.000053 KB
z.202053 KB
z.272753 KB
z.393953 KB
z.565653 KB
z.040453 KB
z.060653 KB
z.252553 KB
z.282853 KB
z.292953 KB
z.606053 KB
z.030353 KB
z.171753 KB
z.191953 KB
z.151553 KB
z.242453 KB
z.424253 KB
z.484853 KB
z.010153 KB
z.020253 KB
z.101053 KB
z.161653 KB
z.181853 KB
z.323253 KB
z.050553 KB
z.434353 KB
z.444453 KB
z.575753 KB
z.595953 KB
z.090953 KB
z.212153 KB
z.353553 KB
z.555553 KB
z.585853 KB
z.070753 KB
z.121253 KB
z.141453 KB
z.262653 KB
z.303053 KB
z.232353 KB
z.333353 KB
z.383853 KB
z.515153 KB
z.626253 KB
z.535353 KB
.p57a.htmlHTML28 KB
.p57b.htmlHTML28 KB
.l57a.htmlHTML28 KB
.l57b.htmlHTML28 KB
.l57v204b.htmlHTML28 KB
body_120.237.226.202.htmlHTML19 KB
cioutTXT18 KB
crack2ELF16 KB
crack3ELF16 KB
i14631_forensic.txtTXT16 KB
i26479_c3.txtTXT9 KB
.aud.pyPY7 KB
i26479_c2.txtTXT4 KB
i24015b.shSH2 KB
.sshd.pam.bakBAK2 KB
watched.pyPY2 KB
sniff.pyPY1 KB
sw.shSH1 KB
k27391c.shSH1 KB
i15046_la.shSH1 KB
probe_full.shSH1 KB
ln.shSH1 KB
t207.shSH1 KB
i24119_ldap_1792707182.pyPY1 KB
dec2.pyPY1 KB
.s2.shSH1 KB
i15243.shSH1 KB
.i43870_b.shSH1 KB
.i43870_a.shSH1 KB
.x15045.shSH990 B
f204.shSH969 B
ci.shSH948 B
idump.pyPY849 B
i26479c3.shSH826 B
.s3.shSH776 B
i26479c2.shSH776 B
i14682_p1.shSH728 B
fullscan.pyPY712 B
pr.shSH695 B
presign.jsonJSON694 B
presign2.jsonJSON694 B
presign3.jsonJSON694 B
k27391e.shSH692 B
probe.pyPY684 B
scan_one.pyPY683 B
p.shSH681 B
launch.shSH677 B
i26479_fin_204.txtTXT655 B
.s5.shSH609 B
i15243fs.shSH588 B
‹redacted›.expEXP571 B
olp_stamp.binBIN551 B
q2.pyPY532 B
.i43870_v204.shSH506 B
.i43870_cl.shSH497 B
k27391f.shSH490 B
g8.txtTXT453 B
‹redacted›.hdrHDR420 B
‹redacted›.hdrHDR396 B
.s4.shSH334 B
rd.shSH311 B
sc2.jsonJSON301 B
p2.shSH276 B
t.pyPY236 B
t2.pyPY231 B
.sshc.shSH192 B
o.shSH192 B
run0.shSH189 B
runb.shSH189 B
.i43870_s.shSH182 B
e204TXT166 B
oob8099.logLOG158 B
hTXT157 B
dl.logLOG150 B
p.0.logLOG140 B
p.1.logLOG140 B
p.2.logLOG140 B
p.3.logLOG140 B
p.4.logLOG140 B
p.5.logLOG140 B
p.6.logLOG140 B
p.7.logLOG140 B
tokTXT135 B
.c57a.jarTXT131 B
LinuxPanel-11.5.0.plPL106 B
qa_me204TXT83 B
b.32.logLOG73 B
b.33.logLOG73 B
b.34.logLOG73 B
b.35.logLOG73 B
b.36.logLOG73 B
b.37.logLOG73 B
b.38.logLOG73 B
b.39.logLOG73 B
z.32.logLOG73 B
z.33.logLOG73 B
z.34.logLOG73 B
z.35.logLOG73 B
z.36.logLOG73 B
z.37.logLOG73 B
z.38.logLOG73 B
z.39.logLOG73 B
t.shSH36 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

194.11.226.41confirmed
194.233.72.68confirmed
198.46.158.18confirmed
3.84.186.180confirmed
45.142.143.235confirmed
47.102.192.23confirmed
1.15.135.85lead
1.15.171.78lead
1.15.24.14lead
1.92.109.47lead
1.92.194.198lead
1.95.79.93lead
101.132.85.204lead
101.227.42.145lead
101.32.218.224lead