Live findsCVE IntelConsoleStart free
huntback / IP intelligence

15.188.163.78

DATACENTERoperator-submittedc2elf-binaryexploitexposed-secretforced-loot

Intelligence

ASN / OrgAS16509 · Amazon.com, Inc.
CountryFrance
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8000, 8080, 8099, 8888, 9001
ServiceSimpleHTTP/0.6 Python/3.11.14 · Directory listing for /
Loot harvested378 file(s), 119616 KB · c2, elf-binary, exploit, exposed-secret, forced-loot, malware

Open directory contents (378)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.dmpDMP92.4 MB
chisel_windows_amd64PE8.6 MB
chisel_linuxELF8.3 MB
ul.txtTXT1.5 MB
mk.exePE1.3 MB
Rubeus.exePE462 KB
Rubeus.exePE436 KB
000001.logLOG404 KB
000001.logLOG316 KB
http.logLOG312 KB
1791973795-5599.logLOG249 KB
relaysmb2.logLOG237 KB
20261014111638_bloodhound.zipZIP222 KB
1791973917-2b8d.logLOG222 KB
1791974128-1ffc.logLOG218 KB
websrv.logLOG119 KB
relay_smb23.logLOG105 KB
gssapi-1.12.0.tar.gzGZ93 KB
relayldap.logLOG86 KB
nano.exePE76 KB
relaysignseal.logLOG71 KB
1791989043-3723.logLOG71 KB
1791989105-80c4.logLOG71 KB
1791989186-57ea.logLOG71 KB
bh_acl_20261014121952_users.jsonJSON69 KB
‹redacted›.dmpDMP58 KB
edges.txtTXT56 KB
GodPotato.exeEXE56 KB
‹redacted›.dmpDMP55 KB
1791974465-76fa.logLOG51 KB
td2.logLOG46 KB
sql_writable.txtTXT35 KB
relaysmb.logLOG33 KB
secretsdump_smb.pyPY29 KB
bh_acl_20261014121952_containers.jsonJSON29 KB
netifaces-0.11.0.tar.gzGZ29 KB
PrintSpoofer.exeEXE26 KB
noPac.pyPY19 KB
coerce3.logLOG18 KB
bh_acl_20261014121952_computers.jsonJSON15 KB
relay_ldap.logLOG15 KB
rl_nv.logLOG14 KB
2530222962TXT14 KB
setup.pyPY13 KB
rl_dcsocks.logLOG12 KB
rl_dc2.logLOG12 KB
rl_smb2.logLOG11 KB
‹redacted›.whlWHL10 KB
up_ac2.sqlSQL8 KB
249420644TXT8 KB
ptt_out.txtTXT8 KB
sidmap.txtTXT8 KB
1655754972TXT8 KB
scanner.pyPY7 KB
PKG-INFOTXT6 KB
relay_smb.logLOG6 KB
README.mdMD6 KB
tcpd_coerce.logLOG6 KB
‹redacted›.rstRST5 KB
ferox_iis.txtTXT5 KB
relay_ldap3.logLOG5 KB
rl4.logLOG5 KB
rl6.logLOG5 KB
rl_smb.logLOG5 KB
Responder.conf.bakBAK4 KB
3053479185TXT4 KB
tmux.logLOG4 KB
gm.txtTXT4 KB
relay_ldap2.logLOG4 KB
rl5.logLOG4 KB
tmux2.logLOG3 KB
1791975032-0c38.logLOG3 KB
1791974326-be58.logLOG3 KB
‹redacted›.metadataMETADA3 KB
web_writable.txtTXT3 KB
bh_acl_20261014121952_domains.jsonJSON3 KB
dacledit-20261014-112020.bakBAK3 KB
1791975823-7ec1.logLOG3 KB
3286122102TXT3 KB
bh_acl_20261014121952_ous.jsonJSON3 KB
relay_mic3.logLOG3 KB
relay.logLOG3 KB
responder_full.logLOG2 KB
1791985848-c5d7.logLOG2 KB
coerce2.logLOG2 KB
critic_scan.txtTXT2 KB
td.logLOG2 KB
web_secretsdump.txtTXT2 KB
rl_dc.logLOG2 KB
gmsadump.pyPY2 KB
1791982096-6549.logLOG1 KB
out.logLOG1 KB
3196834474TXT1 KB
Administrator%40RestrictedKrbHost_share.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
.gitignoreGITIGN1 KB
Administrator%40eventlog_share.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
Administrator%40cifs_DC-AC.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
Administrator%40cifs_share.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
Administrator%40host_DC-AC.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
Administrator%40host_share.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
Administrator%40HOST_SHARE.ACADEMY.NINJA.LAN%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
Administrator%40HTTP_share.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
Administrator%40cifs_DC-VIL.ninja.hack%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
fullscan.txtTXT1 KB
tmp2u7wv8icTXT1 KB
tmp5v7poklsTXT1 KB
tmp6w5d8d31TXT1 KB
tmp7egs9m3_TXT1 KB
tmp89wb6nm9TXT1 KB
tmp9t0kh6vmTXT1 KB
tmpclq4yx_oTXT1 KB
tmpgbekwf50TXT1 KB
tmpgtzrtwzxTXT1 KB
tmpinfjltw8TXT1 KB
tmpiq9lj1h4TXT1 KB
tmpk6p7y12yTXT1 KB
tmpkdivldbbTXT1 KB
tmpkr9gui2qTXT1 KB
tmpmgryjhjdTXT1 KB
tmpp8_zly07TXT1 KB
tmpq53c6l2hTXT1 KB
tmpr8vkfq5jTXT1 KB
tmpx7h23552TXT1 KB
tmpxw8jxun7TXT1 KB
tmpy9oi86wfTXT1 KB
tmpsmjfiafmTXT1 KB
1791977636-44c0.logLOG1 KB
relay_v2_findings.mdMD1 KB
unpac_extract.pyPY1 KB
Administrator%40cifs_dc-ac.academy.ninja.lan%40ACADEMY.NINJA.LAN.ccacheCCACHE1 KB
blind.pyPY1 KB
r22.logLOG1 KB
1791993596-95fc.logLOG1 KB
1791993777-ff89.logLOG1 KB
1791988767-f956.logLOG1 KB
1791988977-f8f9.logLOG1 KB
1791988994-bc6e.logLOG1 KB
ntlmrelay2.logLOG1 KB
ntlmrelay_ldap.logLOG1 KB
unpac2.pyPY1 KB
1791986083-1cfb.logLOG1 KB
blindlib.pyPY1 KB
ldapdump.pyPY1 KB
unpac4.pyPY1 KB
pull_shares.pyPY1 KB
coerce_all.logLOG1 KB
dc_over_smb.pyPY1 KB
unpac3.pyPY1 KB
2988649940TXT1 KB
relay21.logLOG1 KB
unpac5.pyPY1 KB
1791977150-d50b.logLOG1023 B
1791975354-ceaf.logLOG1021 B
fresh.logLOG1004 B
unpac_rbcd.pyPY977 B
tmpn7elbux0TXT969 B
relay_mic.logLOG967 B
r20.logLOG929 B
1791972909-e3b8.logLOG929 B
1791995499-7361.logLOG926 B
t1.pyPY912 B
pivot2.logLOG891 B
pivot_relay.logLOG891 B
1791984283-b5eb.logLOG890 B
one_shot.logLOG890 B
relay.logLOG890 B
1792001957-33c3.logLOG804 B
1791975426-116e.logLOG800 B
1791978425-18e2.logLOG797 B
1792002715-d84c.logLOG797 B
live.logLOG797 B
relay2.logLOG797 B
r100.txtTXT785 B
run22.shSH775 B
relay.logLOG759 B
3053446237TXT720 B
run22.pyPY709 B
gssapi_install.logLOG689 B
listener2.pyPY677 B
1791975560-7f7a.shSH657 B
relay5985.logLOG637 B
relay9004.logLOG637 B
oracle.pyPY629 B
pull21.pyPY626 B
run_dcsync.pyPY622 B
listener.pyPY588 B
set_rbcd.pyPY573 B
dc_sync_smb.pyPY551 B
recv.pyPY535 B
upload.pyPY527 B
mkps.pyPY523 B
mkps2.pyPY514 B
1792001879-ff50.logLOG512 B
1791977240-420c.logLOG507 B
krb.ps1PS1497 B
smbserver.logLOG496 B
coerce.logLOG491 B
1791975426-116e.shSH487 B
1791985952-f60c.logLOG473 B
1792001879-ff50.shSH461 B
lsass.ps1PS1459 B
sqlcmd.pyPY456 B
1791975450-8a30.shSH425 B
own.ps1PS1420 B
rce.pyPY418 B
1791985952-f60c.shSH416 B
dcsync.pyPY408 B
t2.ps1PS1403 B
checkacl.pyPY399 B
pw50.txtTXT395 B
coerce_stdout.logLOG386 B
1791975934-5d0a.shSH377 B
dump.ps1PS1376 B
1791975788-b929.logLOG371 B
enum22.batBAT367 B
1791975816-ac5d.shSH366 B
1791984054-9bab.shSH365 B
rs.ps1PS1362 B
nc8000.logLOG357 B
1791974128-1ffc.shSH356 B
hashcat.logLOG355 B
hc.logLOG355 B
shell.ps1PS1351 B
1791975659-bc50.shSH346 B
rbcd.pyPY344 B
run_relay.shSH343 B
t.ps1PS1343 B
run_smbrelay.shSH339 B
1791986083-1cfb.shSH334 B
1791975685-8a1f.shSH332 B
1791975881-f767.shSH325 B
inj.pyPY318 B
readdump.ps1PS1314 B
r.shSH313 B
1791975648-e9c5.shSH312 B
1791975971-5b36.shSH307 B
rce.shSH298 B
1791986901-ed6d.shSH297 B
sqlq.shSH296 B
t2.pyPY289 B
1791985848-c5d7.shSH289 B
mssql_cmd.shSH288 B
rev.logLOG288 B
wr.pyPY288 B
exfil.batBAT287 B
1791975588-5f9f.shSH283 B
copy_out.batBAT278 B
rev.ps1PS1278 B
readfile.pyPY273 B
run_ldap_relay.shSH273 B
1791976757-a1cc.shSH269 B
1791987061-5093.shSH264 B
1791975354-ceaf.shSH261 B
1791985528-5d07.shSH255 B
1791987049-b6fd.shSH255 B
readsub.pyPY254 B
1791988767-f956.shSH251 B
px.shSH246 B
run_sql.shSH246 B
1791989043-3723.shSH241 B
top30.txtTXT237 B
1791987091-eebe.shSH229 B
1791971631-35b9.shSH225 B
mkdump.batBAT221 B
1791981857-fa9e.logLOG221 B
1791977071-ea7a.shSH214 B
1791995499-7361.shSH212 B
sqlcmd.shSH208 B
1791978455-cc10.shSH208 B
1791988964-b750.logLOG207 B
1791975788-b929.shSH204 B
smbread.shSH200 B
1791972766-d6ce.shSH200 B
1791977032-f759.shSH199 B
1792002715-d84c.shSH199 B
1791982075-1dd8.shSH197 B
1792002111-225b.shSH197 B
t.pyPY189 B
rh_share_shell.logLOG188 B
1792001957-33c3.shSH187 B
rs_shell.logLOG184 B
shell2.logLOG184 B
1791973797-3023.logLOG184 B
1791973929-db80.logLOG184 B
1791972807-70d8.shSH182 B
1791984010-cedf.shSH171 B
1791988964-b750.shSH171 B
run_wmi.shSH168 B
1791988994-bc6e.shSH167 B
1791984283-b5eb.shSH165 B
1791987267-c483.shSH165 B
1791977137-47c0.shSH164 B
1791978319-fab0.shSH163 B
1791972532-d984.shSH161 B
1791993617-8697.shSH160 B
1791993596-95fc.shSH159 B
client.pyPY157 B
1791988977-f8f9.shSH155 B
gmsa.pyPY151 B
1791978149-9331.shSH150 B
1791975560-7f7a.logLOG146 B
1791977240-420c.shSH144 B
1791978425-18e2.shSH142 B
1791975450-8a30.logLOG140 B
proxychains.confCONF135 B
nc9001.logLOG134 B
1791977965-205d.shSH133 B
1791985701-279e.shSH133 B
1791975823-7ec1.shSH127 B
1791981857-fa9e.shSH125 B
1791981871-7d1e.shSH125 B
1791975189-a08e.shSH123 B
2630375055TXT123 B
1791977938-1110.shSH120 B
1791982096-6549.shSH120 B
r15.txtTXT119 B
1791987160-2dfa.logLOG117 B
1791993777-ff89.shSH117 B
1791973815-bf9e.logLOG115 B
pc4.confCONF112 B
1791972909-e3b8.shSH111 B
1791986337-7308.logLOG111 B
1791986806-de15.logLOG111 B
1340692518TXT107 B
1791987267-c483.logLOG105 B
nc8445.logLOG104 B
1791972054-e3a0.shSH103 B
nc445.logLOG102 B
shell.logLOG102 B
3346351066TXT102 B
1791972585-e37e.shSH100 B
188305025TXT93 B
308141063TXT92 B
1791985559-2844.shSH90 B
1791987160-2dfa.shSH89 B
1791978139-ffa8.shSH84 B
1791986337-7308.shSH83 B
spider_22.shSH74 B
1791977150-d50b.shSH74 B
1791973849-c4cb.shSH73 B
1791987184-a91e.shSH73 B
hashcat2.logLOG71 B
1791972532-d984.logLOG64 B
1791973795-5599.shSH64 B
000001.logLOG63 B
000001.logLOG63 B
1791978121-2907.shSH57 B
1791987892-c4a0.shSH55 B
1791977636-44c0.shSH54 B
verify.pyPY52 B
1791973917-2b8d.shSH49 B
1791985531-ef3e.shSH49 B
1791973929-db80.shSH48 B
1791977199-58a0.shSH46 B
1791979954-93d3.logLOG45 B
1791980002-029c.logLOG45 B
1791986127-3c8d.shSH43 B
1791973797-3023.shSH42 B
1791973821-4c54.shSH40 B
1791980002-029c.shSH36 B
resp.logLOG35 B
1791979954-93d3.shSH35 B
1791985528-5d07.logLOG30 B
1791974006-0b81.shSH28 B
1791986901-ed6d.logLOG28 B
1791974326-be58.shSH27 B
1791976757-a1cc.logLOG25 B
1791982075-1dd8.logLOG21 B
1791975032-0c38.shSH20 B
1791973815-bf9e.shSH13 B
1791977938-1110.logLOG13 B
1791975659-bc50.logLOG12 B
1791975685-8a1f.logLOG11 B
1791975670-3feb.shSH9 B
1791971631-35b9.logLOG8 B
1791972585-e37e.log5 B
1791977137-47c0.logLOG4 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.42.136.73confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.46.185.169confirmed
104.248.244.66confirmed
108.61.219.168confirmed
111.223.247.165confirmed
118.107.13.102confirmed
118.107.41.239confirmed
121.36.206.152confirmed
122.10.110.72confirmed
122.10.17.49confirmed
149.30.245.147confirmed
153.52.111.73confirmed
154.217.251.226confirmed