huntback / IP intelligence

107.148.227.57

RESIDENTIALoperator-submittedelf-binarymalwareopen-directorype-binarytunnel

Intelligence

ASN / OrgAS54600 · PEG TECH INC
CountryUnited States
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports80, 8000, 8443, 8888, 9000
ServiceSimpleHTTP/0.6 Python/3.14.4 · Directory listing for /
Loot harvested25 file(s), 25085 KB · elf-binary, malware, pe-binary, tunnel

Open directory contents (25)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
chisel.exePE9.3 MB
chiselELF8.9 MB
linux_x64_adminELF2.4 MB
windows_x64_agent.exePE2.2 MB
push_mimikatz.exePE1.3 MB
http.logLOG306 KB
broker.logLOG44 KB
push_nc.exePE44 KB
broker.pyPY6 KB
s.ps1PS11 KB
listen.ps1PS11 KB
s.ps1PS11 KB
chisel.logLOG1 KB
switch_relay.shSH1 KB
relay.pyPY1 KB
relay8888.pyPY1 KB
agent.ps1PS1851 B
multiport.pyPY832 B
start_rh.shSH500 B
sx.ps1PS1443 B
admin.logLOG221 B
mp.logLOG151 B
start_mp.shSH139 B
relay.logLOG60 B
relay8888.logLOG29 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

134.122.169.32confirmed
139.162.50.39confirmed
15.188.163.78confirmed
158.247.218.226confirmed
172.104.173.165confirmed
192.210.228.111confirmed
2.59.218.32confirmed
202.182.101.198confirmed
208.85.17.99confirmed
209.99.190.118confirmed
217.160.132.82confirmed
38.60.227.210confirmed
39.107.106.210confirmed
43.161.243.73confirmed
45.142.143.235confirmed