Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

104.200.73.97

DATACENTERshodan-opendirmalicious-opendirmal-files:linpeas.shexploit-files:cve-2026-73570.py,run_poc_vps.sh,udev_exploit.cloot-ipc2

Intelligence

ASN / OrgAS199959 · GWY IT PTY LTD
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports8888, 22
ServiceSimpleHTTP/0.6 Python/3.14.4 · Directory listing for /
Loot harvested134 file(s), 52377 KB · c2, elf-binary, exploit, exposed-secret, malware, meterpreter

Open directory contents (134)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
fscan_32bitELF7.7 MB
centUPdate5MinOldELF6.9 MB
ubUpdate5MinELF6.8 MB
fscanELF6.8 MB
mainELF6.7 MB
ncat.exePE5.2 MB
localrelay_linux_amd64ELF4.9 MB
linpeas.shSH1.1 MB
module_metadata_cache.jsonJSON1003 KB
CVE-2026-46331ELF886 KB
CVE-2026-43284ELF862 KB
CVE-2026-43503ELF831 KB
CVE-2026-43284.cC66 KB
raiseChild.pyPY58 KB
butterfactory2o.exePE56 KB
ticketer.pyPY56 KB
ntfs-read.pyPY48 KB
goldenPac.pyPY47 KB
getST.pyPY45 KB
exchanger.pyPY41 KB
dacledit.pyPY40 KB
changepasswd.pyPY38 KB
describeTicket.pyPY36 KB
tstool.pyPY36 KB
LICENSETXT34 KB
badsuccessor.pyPY34 KB
ntlmrelayx.pyPY32 KB
reg.pyPY31 KB
dpapi.pyPY29 KB
psexec.pyPY29 KB
secretsdump.pyPY29 KB
DumpNTLMInfo.pyPY28 KB
karmaSMB.pyPY27 KB
dcomexec.pyPY27 KB
net.pyPY27 KB
GetUserSPNs.pyPY27 KB
PrintSpoofer64.exeEXE26 KB
dpapidump.pyPY24 KB
rdp_check.pyPY22 KB
netview.pyPY21 KB
addcomputer.pyPY21 KB
arg.phpPHP20 KB
slip.phpPHP19 KB
GetNPUsers.pyPY19 KB
wmiexec.pyPY19 KB
CVE-2026-46331.cC19 KB
icmpsh.exePE18 KB
attrib.pyPY17 KB
dirtyELF16 KB
services.pyPY16 KB
smbexec.pyPY16 KB
rpcmap.pyPY16 KB
cve-2016-0728ELF16 KB
icmpsh-mELF16 KB
.bash_historyBASH_H15 KB
rbcd.pyPY14 KB
GetLAPSPassword.pyPY14 KB
owneredit.pyPY14 KB
filetime.pyPY14 KB
Get-GPPPassword.pyPY14 KB
findDelegation.pyPY13 KB
getPac.pyPY13 KB
atexec.pyPY12 KB
sambaPipe.pyPY12 KB
keylistattack.pyPY12 KB
wmipersist.pyPY11 KB
GetADComputers.pyPY11 KB
regsecrets.pyPY11 KB
CVE-2026-43503.cC11 KB
config.yamlYAML10 KB
samrdump.pyPY10 KB
kintercept.pyPY9 KB
icmpsh-s.cC9 KB
GetADUsers.pyPY9 KB
mimikatz.pyPY8 KB
full-nelson.cC8 KB
wmiquery.pyPY8 KB
lookupsid.pyPY7 KB
rpcdump.pyPY7 KB
deploy_icmpsh.pyPY7 KB
smbserver.pyPY7 KB
mempodipper.cC7 KB
machine_role.pyPY7 KB
CVE-2026-73570.pyPY6 KB
getTGT.pyPY5 KB
checkMSSQLStatus.pyPY5 KB
CheckLDAPStatus.pyPY5 KB
registry-read.pyPY5 KB
mssqlclient.pyPY5 KB
smbclient.pyPY5 KB
README.mdMD4 KB
dirty.cC4 KB
dirty.cC4 KB
split.pyPY4 KB
cve-2016-0728.cC4 KB
icmpsh_m.pyPY4 KB
getArch.pyPY4 KB
‹redacted›.sumSUM4 KB
samedit.pyPY3 KB
icmpsh-m.cC3 KB
README.mdMD3 KB
esentutl.pyPY3 KB
ticketConverter.pyPY3 KB
sniff.pyPY3 KB
mqtt_check.pyPY2 KB
udev_exploit.cC2 KB
ping.pyPY2 KB
ping6.pyPY2 KB
sniffer.pyPY2 KB
listener_icmp.pyPY2 KB
run.shSH2 KB
icmpsh-m.plPL2 KB
mssqlinstance.pyPY1 KB
agent_icmp.ps1PS11 KB
upload_server.pyPY870 B
framework.logLOG858 B
.nc_historyNC_HIS826 B
start.shSH627 B
nxc.confCONF579 B
cert.pemPEM562 B
cert.pemPEM558 B
run_poc_vps.shSH518 B
historyTXT494 B
‹redacted›.modMOD492 B
configTXT262 B
configTXT259 B
key.pemPEM241 B
key.pemPEM241 B
packed-refsTXT184 B
mm.zipZIP165 B
packed-refsTXT114 B
descriptionTXT73 B
HEADTXT23 B
.gitignoreGITIGN12 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
101.89.149.227confirmed
103.117.136.137confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.233.217.66confirmed
106.116.230.110confirmed
107.189.1.175confirmed
109.73.199.99confirmed