Live findsCVE IntelConsoleStart free
huntback / IP intelligence

158.247.218.226

DATACENTERoperator-submittedc2cobalt-strikeelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS20473 · The Constant Company, LLC
CountrySouth Korea
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 1080, 2222, 4444, 8000
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested122 file(s), 19584 KB · c2, cobalt-strike, elf-binary, exploit, exposed-secret, macho-binary

Open directory contents (122)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
MyAdmin.exePE9.3 MB
pythonELF5.7 MB
http.logLOG1011 KB
http.logLOG1009 KB
poetry.lockLOCK238 KB
evo_brm_192.168.2.118_20241218_1.tar.gzGZ201 KB
evil-winrm.rbRB152 KB
pavoCommon.jsJS121 KB
ticketer.pyPY61 KB
raiseChild.pyPY60 KB
ntfs-read.pyPY48 KB
goldenPac.pyPY47 KB
getST.pyPY45 KB
nc64.exePE44 KB
exchanger.pyPY41 KB
dacledit.pyPY40 KB
neoreg.pyPY40 KB
changepasswd.pyPY38 KB
describeTicket.pyPY36 KB
tstool.pyPY36 KB
LICENSETXT34 KB
badsuccessor.pyPY33 KB
ntlmrelayx.pyPY32 KB
reg.pyPY31 KB
dpapi.pyPY29 KB
psexec.pyPY29 KB
secretsdump.pyPY28 KB
DumpNTLMInfo.pyPY28 KB
karmaSMB.pyPY27 KB
dcomexec.pyPY27 KB
net.pyPY27 KB
GetUserSPNs.pyPY26 KB
README.mdMD24 KB
rdp_check.pyPY22 KB
netview.pyPY21 KB
addcomputer.pyPY21 KB
GetNPUsers.pyPY19 KB
wmiexec.pyPY19 KB
attrib.pyPY17 KB
services.pyPY16 KB
smbexec.pyPY16 KB
rpcmap.pyPY16 KB
.bash_historyBASH_H15 KB
rbcd.pyPY14 KB
GetLAPSPassword.pyPY14 KB
owneredit.pyPY14 KB
filetime.pyPY14 KB
Get-GPPPassword.pyPY14 KB
findDelegation.pyPY13 KB
getPac.pyPY13 KB
atexec.pyPY12 KB
sambaPipe.pyPY12 KB
keylistattack.pyPY12 KB
wmipersist.pyPY11 KB
GetADComputers.pyPY11 KB
regsecrets.pyPY11 KB
CHANGELOG-en.mdMD10 KB
samrdump.pyPY10 KB
kintercept.pyPY9 KB
README-en.mdMD9 KB
GetADUsers.pyPY9 KB
mimikatz.pyPY8 KB
README.mdMD8 KB
Activate.ps1PS18 KB
wmiquery.pyPY8 KB
CHANGELOG.mdMD8 KB
lookupsid.pyPY7 KB
rpcdump.pyPY7 KB
LICENSETXT7 KB
smbserver.pyPY7 KB
machine_role.pyPY7 KB
hik_panda.pyPY6 KB
getTGT.pyPY5 KB
CheckLDAPStatus.pyPY5 KB
registry-read.pyPY5 KB
CODE_OF_CONDUCT.mdMD5 KB
mssqlclient.pyPY5 KB
smbclient.pyPY5 KB
split.pyPY4 KB
getArch.pyPY4 KB
CHANGELOG.mdMD4 KB
samedit.pyPY3 KB
.nc_historyNC_HIS3 KB
ldap_listen.pyPY3 KB
esentutl.pyPY3 KB
ticketConverter.pyPY3 KB
sniff.pyPY3 KB
‹redacted›.specSPEC3 KB
mqtt_check.pyPY2 KB
ping.pyPY2 KB
ping6.pyPY2 KB
sniffer.pyPY2 KB
build_collector.pyPY2 KB
cryptoLogin.jsJS1 KB
‹redacted›.classMACHO1 KB
mssqlinstance.pyPY1 KB
pfwd.pyPY1 KB
.gitignoreGITIGN810 B
ligolo-ng.yamlYAML790 B
nxc.confCONF524 B
.editorconfigEDITOR453 B
operator_keyTXT411 B
tunnel_keyTXT399 B
‹redacted›.histHIST280 B
.gitattributesGITATT254 B
minikerberos-pwTXT239 B
asysocks-portscanTXT234 B
asysocks-webdavTXT233 B
ligolo_keyTXT233 B
asysocks-tunnelTXT232 B
asysocks-bruteTXT231 B
asysocks-fileserverTXT231 B
asysocks-proxyTXT231 B
asysocks-secTXT229 B
x.shSH224 B
dplootTXT215 B
‹redacted›.nixNIX182 B
.gitignoreGITIGN152 B
x2.shSH138 B
operator_key.pubPUB96 B
pfwd.logLOG83 B
.gitignoreGITIGN82 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.121.94.25confirmed
23.81.35.61confirmed
38.60.227.210confirmed
45.142.143.235confirmed
46.225.118.210confirmed
67.215.232.25confirmed
104.131.177.14lead
138.197.72.235lead
14.29.208.101lead
148.116.90.65lead
154.219.98.61lead
176.65.139.250lead
178.63.68.220lead
185.13.230.208lead
2.27.23.151lead