Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

191.217.250.227

RESIDENTIALloot-ipc2coinminerexploitforced-lootgafgyt

Intelligence

ASN / Orgunknown
CountryUnited States
NetworkRESIDENTIAL · risk 15/100
Threat score41/100
Open ports22, 80, 3389, 8081, 8082, 8443
ServiceGolden Age — Grand Line Fleet
Productssharepoint, f5-bigip
JARM29d29d00000000000042d42d000000dd5c266caaa8baaf93008418f7774284
Loot harvested33 file(s), 74535 KB · c2, coinminer, exploit, exposed-secret, forced-loot, gafgyt

Open directory contents (33)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
p2shit.logLOG51.0 MB
xmrig.binBIN4.5 MB
xmrig.bin.gzGZ3.4 MB
‹redacted›.real.gzGZ3.3 MB
xmrig.bin.real.x86_64.gzGZ3.3 MB
xmrig.bin.arm64.gzGZ2.4 MB
xmrig.bin.real.arm64.gzGZ2.3 MB
xmrig.bin.arm32.gzGZ1.1 MB
xmrig.bin.real.arm32.gzGZ1.0 MB
xpart.x86_64.014014200 KB
info.phpPHP58 KB
info.phpPHP58 KB
kx_beacon.shSH30 KB
kxsup.shSH26 KB
q.phpPHP7 KB
q.phpPHP7 KB
deploy_script.shSH7 KB
p2srun.phpPHP7 KB
kx_install.shSH4 KB
reap_scan.shSH3 KB
reap_scan.binBIN2 KB
bmonob1.binBIN1 KB
bmonob9.binBIN1 KB
blob.binBIN1 KB
kxcmd.phpPHP905 B
p2srun.bat.phpPHP413 B
kx_beacon.sh.md5MD532 B
index.phpPHP13 B
next.phpPHP5 B
next.phpPHP5 B
getfile.phpPHP3 B
minerlog.phpTXT2 B
report.phpTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

100.21.82.169confirmed
100.61.243.172confirmed
101.42.136.73confirmed
101.47.156.26confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.39.79.102confirmed
103.46.185.169confirmed
104.223.41.172confirmed
104.233.150.138confirmed
108.61.219.168confirmed
109.122.196.145confirmed
109.238.87.159confirmed
110.42.215.163confirmed
111.223.247.165confirmed