Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

13.215.184.109

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS16509 · Amazon.com, Inc.
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 3000, 3389, 8080, 8081, 9001
ServiceCaddy
Loot harvested136 file(s), 50805 KB · c2, elf-binary, exploit, exposed-secret, malware, mirai

Open directory contents (136)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
exfil.tar.gzGZ8.2 MB
fscanELF8.0 MB
clone.logLOG7.7 MB
search_cambodia_linuxELF6.5 MB
gogoELF4.1 MB
geosite.datDAT3.9 MB
account.csv.gzGZ3.3 MB
manifest.csvCSV2.2 MB
cdkey_normal.tsv.gzGZ1.8 MB
audit_backup.tar.gzGZ1.7 MB
manifest.csvCSV584 KB
ICY_TRAYELF352 KB
passwords_all.tsv.gzGZ280 KB
‹redacted›.latestLATEST136 KB
gitlab.rbRB135 KB
passwords_12m.tsv.gzGZ38 KB
s5.datDAT33 KB
tokens.jsonJSON33 KB
auto_download.pyPY20 KB
classify.pyPY19 KB
.bash_historyBASH_H19 KB
intel_full_report.mdMD18 KB
1792392733-1ef80447.jsonJSON16 KB
‹redacted›.outOUT16 KB
‹redacted›.latestLATEST16 KB
gitlab-secrets.jsonJSON15 KB
1792392746-f5035713.jsonJSON15 KB
1792396532-f385f080.jsonJSON14 KB
hub.pyPY14 KB
preflight.shSH14 KB
1792392712-415977d5.jsonJSON11 KB
RETROSPECTIVE_%E5%85%A8%E6%B5%81%E7%A8%8B%E5%A4%8D%E7%9B%98.mdMD11 KB
all_downloads.tarTAR10 KB
1792395001-bdaff379.jsonJSON9 KB
hist_full.txtTXT9 KB
check_confluence.pyPY8 KB
configTXT8 KB
auto_login.pyPY8 KB
privesc_plan_81.70.5.113.mdMD7 KB
install.shSH7 KB
download-nexus.shSH7 KB
README.mdMD6 KB
1792396554-fb8f5477.jsonJSON6 KB
extract_all.pyPY6 KB
serversTXT6 KB
summary.mdMD6 KB
clone-all.shSH5 KB
tun.datDAT5 KB
search_cambodia.pyPY5 KB
CREDENTIALS_root.mdMD5 KB
1792394664-9e844ff6.jsonJSON4 KB
sample20_users.jsonJSON4 KB
1792402028-73f3a53e.jsonJSON4 KB
probe.shSH4 KB
MANIFEST.mdMD4 KB
1792398907-794f33c6.jsonJSON4 KB
results.dbDB4 KB
1792396568-5961cbd4.jsonJSON3 KB
cleanup.pyPY3 KB
1792402050-b5053e58.jsonJSON2 KB
triage_deep.shSH2 KB
1792392775-10c626c1.jsonJSON2 KB
export_v3.pyPY2 KB
triage_fast.shSH2 KB
probe2.phpPHP2 KB
1792402819-5d3b541a.jsonJSON2 KB
pwn.shSH2 KB
driver.shSH2 KB
mixin.yamlYAML1 KB
fix2p.txtTXT1 KB
export_certs.pyPY1 KB
split_stream.pyPY1 KB
gl_spray.shSH1 KB
rx.pyPY1 KB
1792392764-acb33942.jsonJSON1 KB
probe_rsaTXT1 KB
id_rsaTXT1 KB
hubcmd11.txtTXT1 KB
probe6.phpPHP1 KB
probe3.phpPHP1 KB
scan2.phpPHP1 KB
azprobe.phpPHP1 KB
hubcmd4.txtTXT1 KB
1792401692-48c4288a.jsonJSON1 KB
patch_hub.pyPY1 KB
1792402330-937c4722.jsonJSON1 KB
teardown.shSH1 KB
info.shSH1 KB
password_probe.txtTXT1017 B
hubreq.txtTXT1003 B
spray.logLOG996 B
find.shSH860 B
sd.phpPHP810 B
pscan.phpPHP743 B
spray.shSH717 B
hubcmd5.txtTXT664 B
install.shSH658 B
hubcmd6.txtTXT614 B
recv5567.pyPY597 B
watchdog.shSH596 B
probe4.phpPHP595 B
wpu.phpPHP556 B
cache.datDAT524 B
‹redacted›.tplTPL515 B
1792399961-e7b65d69.jsonJSON508 B
pwnkit.cC504 B
.envENV497 B
find2.shSH459 B
run.logLOG442 B
spray2.shSH427 B
uninstall.shSH420 B
vc_keyTXT399 B
1792400498-c4f13491.jsonJSON312 B
configTXT309 B
cve.cC292 B
1792401044-fe53e01e.jsonJSON236 B
split.logLOG185 B
recv.logLOG169 B
._hermes-web-connector-windows-386.exeEXE163 B
‹redacted›.errERR156 B
.repupREPUP142 B
credentialsTXT116 B
packed-refsTXT114 B
athena_export.logLOG112 B
.gitignoreGITIGN104 B
descriptionTXT73 B
.editorconfigEDITOR70 B
.shellcheckrcSHELLC59 B
users.sql.gz.md5MD547 B
dev.sql.gz.md5MD545 B
shallowTXT41 B
export_v3.logLOG37 B
configTXT34 B
recv2.logLOG24 B
HEADTXT23 B
.gitattributesGITATT19 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
101.89.149.227confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.200.73.97confirmed
104.233.217.66confirmed
106.116.230.110confirmed
107.189.1.175confirmed
109.73.199.99confirmed