huntback / IP intelligence
144.91.103.172
Intelligence
ASN / OrgAS51167 · Contabo GmbH
CountryFrance
NetworkDATACENTER · risk 80/100
Threat score0/100
Open ports22, 8000, 8022, 80, 443, 8880
ServiceSimpleHTTP/0.6 Python/3.11.2 · Directory listing for /
Loot harvested51 file(s), 9944 KB · elf-binary, exposed-secret, malware, tunnel
Open directory contents (51)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| na.zip | ZIP | 6.9 MB |
| ecb | ELF | 873 KB |
| ec2b | ELF | 873 KB |
| masscan2.log | LOG | 281 KB |
| masscan_all.log | LOG | 264 KB |
| masscan3389.log | LOG | 239 KB |
| masscan.log | LOG | 113 KB |
| mass_3320.log | LOG | 28 KB |
| mass_as701.log | LOG | 27 KB |
| mass_3269.log | LOG | 14 KB |
| mass_6167.log | LOG | 13 KB |
| mass_15557.log | LOG | 12 KB |
| mass_22773.log | LOG | 11 KB |
| mass_20115.log | LOG | 10 KB |
| mass_7303.log | LOG | 8 KB |
| mass_5410.log | LOG | 7 KB |
| mass_12479.log | LOG | 7 KB |
| mass_33915.log | LOG | 6 KB |
| rce_big.log | LOG | 6 KB |
| mass_6327.log | LOG | 6 KB |
| mass_7713.log | LOG | 5 KB |
| mass_4788.log | LOG | 5 KB |
| mass_22047.log | LOG | 4 KB |
| mass_5483.log | LOG | 3 KB |
| mass_6830.log | LOG | 3 KB |
| rce_drive.py | PY | 2 KB |
| diag2.py | PY | 2 KB |
| deploy.py | PY | 1 KB |
| deploy21.py | PY | 1 KB |
| deploy.log | LOG | 1 KB |
| verify104.py | PY | 1 KB |
| na93v2.py | PY | 1 KB |
| pipeline2.py | PY | 1 KB |
| deploy21.log | LOG | 1 KB |
| pipeline.py | PY | 1 KB |
| na93.py | PY | 1 KB |
| diag.py | PY | 1 KB |
| census.py | PY | 1 KB |
| l2.sh | SH | 905 B |
| l.sh | SH | 784 B |
| modcheck.py | PY | 639 B |
| rdp_pw.txt | TXT | 609 B |
| rce_run.log | LOG | 586 B |
| na93v2.log | LOG | 371 B |
| pipeline.log | LOG | 326 B |
| na93.log | LOG | 137 B |
| pipe0.log | LOG | 88 B |
| pipe1.log | LOG | 88 B |
| pipe2.log | LOG | 88 B |
| pipe3.log | LOG | 88 B |
| rogue.log | LOG | 78 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 1.95.73.45 | lead |
| 101.34.209.211 | lead |
| 101.36.112.205 | lead |
| 101.53.135.104 | lead |
| 103.112.185.51 | lead |
| 103.112.185.93 | lead |
| 103.127.99.152 | lead |
| 103.151.5.208 | lead |
| 103.159.50.137 | lead |
| 103.226.249.70 | lead |
| 103.248.25.149 | lead |
| 103.31.78.47 | lead |
| 106.55.243.186 | lead |
| 108.165.233.230 | lead |
| 109.122.196.145 | lead |