Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

192.210.228.111

DATACENTERoperator-submittedelf-binaryexposed-secretmalwareopen-directorype-binary

Intelligence

ASN / OrgAS36352 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 1080, 8000, 8080, 18080, 18081
ServiceSimpleHTTP/0.6 Python/3.8.10 · Directory listing for /
Loot harvested65 file(s), 123617 KB · elf-binary, exposed-secret, malware, pe-binary, tunnel

Open directory contents (65)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
chisel.exePE9.3 MB
chiselELF8.9 MB
fscanELF8.1 MB
fscan.gzGZ7.9 MB
kerbruteELF7.9 MB
ligolo-ng-proxy.gzGZ7.5 MB
frps.gzGZ7.3 MB
ligolo-ng-agentELF6.8 MB
stowaway_agents.tar.gzGZ6.5 MB
fscan.exePE6.1 MB
frpc.gzGZ6.1 MB
fscan.exe.gzGZ5.9 MB
chisel_win.gzGZ3.8 MB
chisel.exe.gzGZ3.8 MB
chisel.gzGZ3.7 MB
chisel.gzGZ3.6 MB
ligolo-ng-agent.gzGZ2.8 MB
stowaway_adminELF2.4 MB
stowaway_agentELF2.1 MB
SSLPlugin.dllPE1.8 MB
3proxy.zipZIP1.8 MB
mimikatz.exePE1.3 MB
mimikatz.zipZIP1.2 MB
plink.exeEXE1012 KB
srv.logLOG548 KB
Rubeus.exePE436 KB
socatELF375 KB
3proxy.exePE351 KB
wordlists.tar.gzGZ287 KB
PCREPlugin.dllPE163 KB
socat.gzGZ137 KB
TrafficPlugin.dllPE111 KB
mycrypt.exePE110 KB
StringsPlugin.dllPE109 KB
WindowsAuthentication.dllPE109 KB
FilePlugin.dllPE108 KB
utf8tocp1251.dllPE70 KB
ncELF42 KB
nc.gzGZ15 KB
‹redacted›.jarJAR13 KB
rus.3ps3PS8 KB
READMETXT8 KB
‹redacted›.sampleSAMPLE7 KB
‹redacted›.sampleSAMPLE1 KB
3proxy.keyKEY1 KB
server.keyKEY1 KB
SHA256SUMSTXT1 KB
README.mdMD878 B
SHA256SUMSTXT801 B
get.shSH566 B
r.batBAT486 B
tun_keyTXT399 B
stow-add.shSH382 B
launch5.batBAT354 B
launch3.batBAT332 B
launch.batBAT323 B
launch4.batBAT309 B
dcflag.batBAT306 B
launch6.batBAT284 B
pth.batBAT199 B
run.batBAT175 B
run3p.batBAT94 B
launch2.batBAT73 B
3proxy.cfgCFG14 B
3proxy_dc.cfgCFG14 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

139.162.50.39confirmed
139.224.113.180confirmed
15.188.163.78confirmed
158.247.218.226confirmed
165.154.225.131confirmed
172.104.173.165confirmed
186.241.74.242confirmed
193.36.119.24confirmed
2.59.218.32confirmed
202.182.101.198confirmed
207.56.221.47confirmed
208.85.17.99confirmed
209.99.190.118confirmed
217.160.132.82confirmed
38.60.227.210confirmed