Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

108.61.161.224

DATACENTERoperator-submittedloot-ipc2exploitexposed-secretmalware

Intelligence

ASN / OrgAS20473 · The Constant Company, LLC
CountryJapan
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 7000, 9001, 49221
Servicenginx/1.28.3 (Ubuntu)
Productsnginx
Loot harvested197 file(s), 24327 KB · c2, exploit, exposed-secret, malware, mirai, mozi

Open directory contents (197)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
extjs2.logLOG2.7 MB
ext_js.jsonJSON2.4 MB
extjs.logLOG824 KB
b.476204476204824 KB
b.469626469626824 KB
b.479037479037820 KB
p.htmlHTML782 KB
b.483757483757592 KB
i3.htmlHTML566 KB
b.479946479946463 KB
b.484532484532460 KB
b.470591470591392 KB
huge.txtTXT382 KB
b.484689484689381 KB
‹redacted›.cleanCLEAN380 KB
h2s.jsonJSON379 KB
b.469183469183367 KB
b.484840484840352 KB
b.490645490645331 KB
b.468267468267321 KB
b.492250492250319 KB
b.485550485550302 KB
b.493237493237298 KB
b.479104479104280 KB
b.475299475299265 KB
000001.logLOG247 KB
b.488234488234222 KB
b.491285491285209 KB
b.490181490181207 KB
b.471342471342205 KB
b.492099492099198 KB
b.481638481638176 KB
lw.jsJS170 KB
b.485344485344166 KB
b.478337478337156 KB
b.478866478866155 KB
b.466869466869150 KB
b.486981486981146 KB
b.468032468032136 KB
b.481419481419136 KB
b.483839483839132 KB
b.480374480374125 KB
ext_hosts.jsonJSON125 KB
b.476511476511124 KB
b.487633487633123 KB
b.487141487141123 KB
b.468789468789122 KB
b.476769476769119 KB
poolall.txtTXT118 KB
‹redacted›.cleanCLEAN117 KB
b.488762488762117 KB
crt2.tsvTSV116 KB
b.480354480354115 KB
k.htmlHTML115 KB
ku.jsonJSON115 KB
b.464860464860106 KB
b.465256465256103 KB
b.46528846528897 KB
b.49380449380497 KB
crt.tsvTSV93 KB
crt2.txtTXT91 KB
b.47602247602290 KB
b.49455349455390 KB
‹redacted›.cleanCLEAN87 KB
b.47102447102484 KB
b.47684647684684 KB
b.48353248353283 KB
crt.txtTXT81 KB
out3.tsvTSV81 KB
b.48074848074880 KB
‹redacted›.cleanCLEAN78 KB
b.48109548109574 KB
b.48821648821666 KB
b.49305149305162 KB
pool.txtTXT62 KB
‹redacted›.cleanCLEAN62 KB
b.47115547115560 KB
nuclei.logLOG59 KB
out.tsvTSV58 KB
b.489584COM56 KB
out2.tsvTSV56 KB
b.49287149287155 KB
b.47976547976555 KB
b.47206847206854 KB
b.48515048515054 KB
b.47731847731853 KB
b.47284147284152 KB
b.48883748883751 KB
000001.logLOG48 KB
b.48988448988446 KB
domains.txtTXT45 KB
b.49073449073443 KB
‹redacted›.cleanCLEAN43 KB
b.48417348417343 KB
b.47422747422741 KB
b.48002848002838 KB
‹redacted›.cleanCLEAN37 KB
all2.txtTXT37 KB
000001.logLOG37 KB
qa.htmlHTML35 KB
d.htmlHTML34 KB
dm.htmlHTML34 KB
b.48553048553033 KB
b.47503147503132 KB
b.49314949314931 KB
b.47728247728230 KB
f.htmlHTML30 KB
b.48085548085529 KB
b.47404047404027 KB
b.48886048886026 KB
b.46755746755726 KB
b.47692847692825 KB
b.47506247506225 KB
all.txtTXT24 KB
‹redacted›.cleanCLEAN24 KB
al.htmlHTML21 KB
lp.htmlHTML21 KB
b.48635548635520 KB
pmr.htmlHTML18 KB
pm.htmlHTML18 KB
b.47537247537216 KB
b.46787646787616 KB
b.48760148760114 KB
b.48316948316914 KB
delta.txtTXT13 KB
b.48459748459712 KB
cap.jsonJSON12 KB
ao2.htmlHTML11 KB
img.binBIN11 KB
b.46911846911810 KB
b.49305749305710 KB
lx.jsJS9 KB
alive4.txtTXT9 KB
lx.htmlHTML9 KB
lg.htmlHTML8 KB
pipe3.logLOG7 KB
b.4631904631906 KB
b.4731014731016 KB
b.4713744713746 KB
pipe2.logLOG5 KB
b.4710524710525 KB
i2TXT5 KB
b.4825984825985 KB
b.4939534939535 KB
b.4925664925664 KB
pipeline.logLOG4 KB
b.4811024811023 KB
b.4888014888013 KB
alive2.txtTXT3 KB
b.4880224880223 KB
pipeline.pyPY3 KB
pipe4.logLOG3 KB
anc_logic.pyPY3 KB
hj1.htmlHTML3 KB
operating.txtTXT2 KB
b.4839204839202 KB
hyip.htmlHTML2 KB
pma_brute.pyPY2 KB
ext_js.pyPY2 KB
admin_brute.pyPY2 KB
anc_err.pyPY1 KB
anc2.pyPY1 KB
anc_idor.pyPY1 KB
git_extract.pyPY1 KB
lwup.pyPY1 KB
anc_trace.pyPY1 KB
anc.pyPY1 KB
fuzz.pyPY1 KB
led.shSH1 KB
fp4.shSH876 B
fp2.shSH853 B
hq3.shSH819 B
hq2.shSH792 B
ext.shSH780 B
fp3.shSH765 B
hq.shSH710 B
exp.shSH699 B
configTXT685 B
_dsh_script.shSH683 B
fp5.shSH645 B
r404.pyPY616 B
cand.shSH581 B
crt2.shSH580 B
crt.shSH577 B
api.shSH481 B
adm.shSH472 B
ck.shSH423 B
lsn.pyPY385 B
obj.binBIN302 B
lr.jsonJSON86 B
backdoor.txtTXT53 B
k.phpPHP28 B
fuzz.logLOG20 B
exp.logLOG19 B
cand.logLOG10 B
crt.logLOG10 B
crt2.logLOG10 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.21.53.99confirmed
168.144.111.89confirmed
172.67.211.156confirmed