huntback / IP intelligence

168.138.13.221

DATACENTERoperator-submittedexposed-secretmalwaremoziopen-directoryloot-ip

Intelligence

ASN / OrgAS31898 · Oracle Corporation
CountryAustralia
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 9000
ServiceApache/2.4.52 (Ubuntu) · Index of /
Productsapache
Loot harvested20 file(s), 780 KB · exploit, exposed-secret, malware, mozi

Open directory contents (20)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
access.logLOG491 KB
DADDYLIVE%20(tivimate).m3u8M3U8132 KB
info1.phpPHP76 KB
sites.jsonJSON21 KB
install_nvm.shSH15 KB
combined.logLOG11 KB
home.htmlHTML8 KB
README.mdMD8 KB
install-win.batBAT4 KB
install-linux.shSH3 KB
install-mac.shSH3 KB
start-server-win.batBAT527 B
start-server-linux.shSH437 B
configTXT274 B
stop-server-win.batBAT269 B
stop-server-linux.shSH262 B
update-browsers-linux.shSH163 B
update-browsers-win.batBAT161 B
HEADTXT21 B
debug.logLOG13 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
102.209.224.40confirmed
103.131.51.199confirmed
103.133.216.219confirmed
103.195.188.128confirmed
103.254.63.94confirmed
103.35.216.13confirmed
104.192.42.94confirmed
104.223.62.197confirmed
106.52.174.151confirmed
107.150.20.139confirmed
107.191.102.241confirmed
107.191.113.100confirmed
107.191.113.162confirmed
108.160.134.174confirmed