Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

157.180.71.22

DATACENTERloot-ipcoinminerelf-binaryexposed-secretmalwareopen-directory

Intelligence

ASN / OrgAS24940 · Hetzner Online GmbH
CountryFinland
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 8888
Productsnginx
JARM27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523
Loot harvested28 file(s), 11207 KB · coinminer, elf-binary, exposed-secret, malware, tunnel

Open directory contents (28)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
snELF8.0 MB
.p.tgzTGZ2.9 MB
adsys-api.logLOG5 KB
heal.shSH5 KB
heal.shSH4 KB
wd7.shSH4 KB
.st.shSH3 KB
nc2.shSH3 KB
nc.shSH3 KB
rn.shSH3 KB
df.pyPY2 KB
gs_v2.shSH2 KB
walletfix.shSH2 KB
_c.shSH2 KB
opt_hp.shSH2 KB
rn_test.shSH1 KB
killdup.shSH1 KB
gs_new.shSH1 KB
dedup.shSH1 KB
_f.shSH1 KB
_q.sqlSQL1 KB
.w3.shSH992 B
.c.shSH928 B
rb.shSH733 B
fixed_ed25519_keyTXT399 B
test_ed25519_keyTXT398 B
_u.sqlSQL189 B
sp.shSH63 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

121.36.206.152confirmed
204.168.225.59confirmed
89.36.231.178confirmed
1.14.93.149lead
1.15.114.102lead
101.32.108.79lead
101.36.118.185lead
101.47.134.222lead
101.47.15.229lead
102.203.200.45lead
102.68.86.43lead
103.111.114.29lead
103.113.104.49lead
103.116.52.164lead
103.129.149.141lead