huntback / IP intelligence

193.180.209.78

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitmalware

Intelligence

ASN / OrgAS44803 · Webdock.io ApS
CountryDenmark
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 5432, 7443, 8080, 8443, 8888, 9090
Loot harvested32 file(s), 41590 KB · c2, elf-binary, exploit, malware, mozi, pe-binary

Open directory contents (32)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
ZoomTools_v8.zipZIP9.2 MB
garbleELF9.1 MB
dropper.exePE6.7 MB
svc.exePE5.2 MB
AdobeTools_VMBlock.zipZIP4.2 MB
shellcoder_binELF3.9 MB
AdobeTools.zipZIP2.0 MB
WinDefCtl.exePE80 KB
‹redacted›.sysPE39 KB
main.goGO29 KB
main.goGO28 KB
inject.exePE19 KB
main_backup.goGO16 KB
ZoomInstaller.exePE15 KB
codebase.zipZIP13 KB
injector.cC8 KB
gen_oleacc.pyPY4 KB
B2.dllPE4 KB
‹redacted›.htaHTA3 KB
build_v8.shSH1 KB
build_v7.shSH1 KB
check_imports.shSH1 KB
stub_loader.cC1 KB
build_test_dll.shSH1 KB
patch_main.pyPY1008 B
rebuild_dll_v7b.shSH853 B
setup_agent_v2.shSH777 B
setup_agent_module.shSH572 B
garble_build.shSH503 B
garble_v2.shSH493 B
install_donut.shSH322 B
build_shellcoder.shSH242 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.14.93.149lead
1.15.114.102lead
101.32.108.79lead
101.36.118.185lead
101.47.134.222lead
101.47.15.229lead
102.203.200.45lead
102.68.86.43lead
103.111.114.29lead
103.113.104.49lead
103.116.52.164lead
103.129.149.141lead
103.133.216.219lead
103.150.93.176lead
103.151.141.85lead