huntback / IP intelligence

176.65.139.131

RESIDENTIALoperator-submittedelf-binarymalwareopen-directoryoperator-reconloot-ip

Intelligence

ASN / OrgAS214472 · Offshore LC
CountryThe Netherlands
NetworkRESIDENTIAL · risk 15/100
Threat score39/100
Open ports21, 22, 80
ServiceApache/2.4.41 (Ubuntu) · Index of /
Productssharepoint, f5-bigip, gitlab, wide-net, apache, citrix
Loot harvested15 file(s), 2284 KB · elf-binary, malware

Open directory contents (15)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
dbgELF1020 KB
arm7ELF121 KB
mpslELF120 KB
mipsELF117 KB
arm6ELF105 KB
m68kELF104 KB
spcELF97 KB
ppcELF93 KB
armELF93 KB
arm5ELF89 KB
x86_64ELF87 KB
sh4ELF81 KB
i686ELF77 KB
x86ELF69 KB
ohshit.shSH3 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.131.123.117lead
107.173.101.114lead
173.249.63.22lead
176.65.139.218lead
190.102.42.202lead
3.221.186.160lead
38.43.93.61lead
45.178.182.227lead
77.83.39.109lead
79.142.194.35lead
94.154.43.221lead
95.43.220.235lead