Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

194.233.67.247

DATACENTERoperator-submittedc2coinminerelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS141995 · Contabo Asia Private Limited
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8765
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested354 file(s), 82030 KB · c2, coinminer, elf-binary, exploit, exposed-secret, gafgyt

Open directory contents (354)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
bukit-sari.zipZIP7.7 MB
batch1.tarTAR7.3 MB
batch3.tarTAR7.3 MB
lp-gen.zipZIP6.3 MB
blue_master.phpPHP5.6 MB
lp-generator-v2.zipZIP5.4 MB
lp-generator-v2.tar.gzGZ5.4 MB
lp-gen.tar.gzGZ5.1 MB
lp-generator-v2.zipZIP4.9 MB
index.phpPHP2.3 MB
index.phpPHP2.3 MB
bim_main.jsJS1.4 MB
batch4.tarTAR760 KB
_respTXT515 KB
lp-generator.tar.gzGZ410 KB
lp-generator.tar.gzGZ410 KB
b64_chunk.txtTXT361 KB
b64_data.txtTXT361 KB
b64_upload.txtTXT360 KB
b64_parts.txtTXT356 KB
about.html.gzGZ265 KB
inject.sqlSQL201 KB
blue_hex.phpPHP187 KB
blue_xor.phpPHP124 KB
blue_mod_xor.phpPHP124 KB
cf_chunk_aaELF97 KB
chunk_akTXT97 KB
chunk_bcTXT97 KB
chunk_bjTXT97 KB
chunk_ckTXT97 KB
chunk_fbTXT97 KB
chunk_ftTXT97 KB
chunk_gaTXT97 KB
chunk_gcTXT97 KB
chunk_gdTXT97 KB
chunk_geTXT97 KB
chunk_ggTXT97 KB
chunk_ghTXT97 KB
chunk_goTXT97 KB
chunk_gpTXT97 KB
chunk_gqTXT97 KB
chunk_grTXT97 KB
chunk_guTXT97 KB
chunk_gxTXT97 KB
chunk_gyTXT97 KB
chunk_gzTXT97 KB
chunk_hbTXT97 KB
chunk_heTXT97 KB
chunk_hiTXT97 KB
chunk_hjTXT97 KB
chunk_hlTXT97 KB
chunk_hpTXT97 KB
chunk_hqTXT97 KB
chunk_hsTXT97 KB
chunk_hwTXT97 KB
chunk_ibTXT97 KB
chunk_icTXT97 KB
chunk_idTXT97 KB
chunk_ieTXT97 KB
chunk_ifTXT97 KB
chunk_igTXT97 KB
chunk_iiTXT97 KB
chunk_ijTXT97 KB
chunk_ikTXT97 KB
chunk_ilTXT97 KB
chunk_iqTXT97 KB
chunk_irTXT97 KB
chunk_isTXT97 KB
chunk_ivTXT97 KB
chunk_iwTXT97 KB
chunk_iyTXT97 KB
chunk_jbTXT97 KB
chunk_jcTXT97 KB
chunk_jgTXT97 KB
chunk_jiTXT97 KB
chunk_jkTXT97 KB
chunk_jlTXT97 KB
chunk_jnTXT97 KB
chunk_joTXT97 KB
chunk_jqTXT97 KB
chunk_jrTXT97 KB
chunk_jsTXT97 KB
chunk_jtTXT97 KB
chunk_juTXT97 KB
chunk_jwTXT97 KB
chunk_jxTXT97 KB
chunk_jzTXT97 KB
chunk_kaTXT97 KB
chunk_kbTXT97 KB
chunk_keTXT97 KB
chunk_kfTXT97 KB
chunk_khTXT97 KB
chunk_kiTXT97 KB
chunk_kjTXT97 KB
chunk_kkTXT97 KB
chunk_klTXT97 KB
chunk_kmTXT97 KB
chunk_kpTXT97 KB
chunk_ksTXT97 KB
chunk_kuTXT97 KB
chunk_kwTXT97 KB
chunk_kzTXT97 KB
chunk_laTXT97 KB
chunk_lcTXT97 KB
chunk_ldTXT97 KB
chunk_leTXT97 KB
chunk_lgTXT97 KB
chunk_lhTXT97 KB
chunk_liTXT97 KB
chunk_lkTXT97 KB
chunk_lmTXT97 KB
chunk_lnTXT97 KB
chunk_lpTXT97 KB
chunk_lqTXT97 KB
chunk_ltTXT97 KB
chunk_luTXT97 KB
chunk_lwTXT97 KB
chunk_lxTXT97 KB
chunk_lzTXT97 KB
chunk_mcTXT97 KB
chunk_mdTXT97 KB
chunk_meTXT97 KB
chunk_miTXT97 KB
chunk_abTXT97 KB
chunk_acTXT97 KB
chunk_agTXT97 KB
chunk_ajTXT97 KB
chunk_akTXT97 KB
chunk_anTXT97 KB
chunk_aoTXT97 KB
chunk_apTXT97 KB
chunk_arTXT97 KB
chunk_asTXT97 KB
chunk_atTXT97 KB
chunk_beTXT97 KB
chunk_bhTXT97 KB
chunk_biTXT97 KB
chunk_bjTXT97 KB
chunk_bkTXT97 KB
chunk_bnTXT97 KB
chunk_bpTXT97 KB
chunk_bqTXT97 KB
chunk_brTXT97 KB
chunk_bsTXT97 KB
chunk_btTXT97 KB
chunk_buTXT97 KB
chunk_bvTXT97 KB
chunk_bwTXT97 KB
chunk_byTXT97 KB
chunk_cbTXT97 KB
chunk_cdTXT97 KB
chunk_chTXT97 KB
chunk_ciTXT97 KB
chunk_ckTXT97 KB
chunk_cnTXT97 KB
chunk_coTXT97 KB
chunk_ctTXT97 KB
.blue.phpPHP95 KB
.blue_pnl.phpPHP93 KB
blue_patched.phpPHP93 KB
blue_mod.phpPHP93 KB
bluefm_debug.phpPHP93 KB
bluefm_fixed.phpPHP93 KB
art64.txtTXT73 KB
10k_passwords.txtTXT71 KB
chunk.b64B6465 KB
articles.zipZIP58 KB
articles.json.gzGZ55 KB
c_aeTXT48 KB
c_aiTXT48 KB
c_akTXT48 KB
auto_master_v2.logLOG47 KB
chunk_asTXT39 KB
chunk_biTXT39 KB
chunk_blTXT39 KB
install.logLOG35 KB
‹redacted›.configCONFIG35 KB
debug.logLOG35 KB
error.logLOG35 KB
slims.logLOG35 KB
blue_b64.txtTXT31 KB
alfa_out.htmlHTML30 KB
blue.gzGZ22 KB
solidtoto_complete_20261025.txtTXT19 KB
hsfootballhub-150-urls.txtTXT18 KB
000001.logLOG17 KB
hsfootballhub-149-urls-fix.txtTXT17 KB
generate.phpPHP14 KB
blue_chunk_aaTXT14 KB
blue_chunk_abTXT14 KB
blue_chunk_acTXT14 KB
blue_chunk_aeTXT14 KB
blue_chunk_afTXT14 KB
1536913718TXT14 KB
hsfootballhub-dirmap-150.txtTXT13 KB
hsfootballhub-dirmap-120-v2.txtTXT13 KB
static-lp-deploy.shSH11 KB
blue_decoded.phpPHP11 KB
ag3_bkyk6541.shSH10 KB
generate.phpPHP10 KB
generate.phpPHP9 KB
c_agTXT9 KB
c_amTXT9 KB
c_atTXT9 KB
c_baTXT9 KB
c_bdTXT9 KB
c_bhTXT9 KB
abelpc_final_inventory.txtTXT9 KB
inject-to-wp.phpPHP9 KB
cf_shm.cC9 KB
audit_report_auto_master.txtTXT8 KB
1796792594TXT8 KB
3551022635TXT7 KB
abelpc_inventory_final.txtTXT7 KB
faqs.jsonJSON6 KB
abelpc_inventory.txtTXT6 KB
ag_real.shSH6 KB
bfa_inject.phpPHP6 KB
generate_samsung.phpPHP6 KB
chunk_0.txtTXT5 KB
chunk_13.txtTXT5 KB
chunk_15.txtTXT5 KB
chunk_16.txtTXT5 KB
chunk_6.txtTXT5 KB
chunk_9.txtTXT5 KB
blue_raw.phpPHP5 KB
blue_chunk_agTXT5 KB
auto_master_new.logLOG5 KB
3908078997TXT4 KB
break_sitemap.pyPY4 KB
ABELPC_FULL.txtTXT4 KB
akademy_gs_deploy.phpPHP4 KB
amp.gzGZ4 KB
blue_hex_login.htmlHTML4 KB
blue_loader_login.htmlHTML4 KB
blue_login_resp.htmlHTML4 KB
blue_mod_login.htmlHTML4 KB
blue_xor_login.htmlHTML4 KB
lp_injector.phpPHP4 KB
check_lp.pyPY4 KB
blue_fm.htmlHTML4 KB
blue_fm2.htmlHTML4 KB
blue_fm3.htmlHTML4 KB
blue_hex_fm.htmlHTML4 KB
blue_hex_form.htmlHTML4 KB
blue_hex_test.htmlHTML4 KB
blue_loader_fm.htmlHTML4 KB
blue_loader_form.htmlHTML4 KB
blue_loggedin.htmlHTML4 KB
blue_login_page.htmlHTML4 KB
blue_mod_fm.htmlHTML4 KB
blue_mod_form.htmlHTML4 KB
blue_test3.htmlHTML4 KB
blue_xor_fm.htmlHTML4 KB
blue_xor_form.htmlHTML4 KB
blue_xor_test.htmlHTML4 KB
mssc_loader.phpPHP4 KB
check_page_content.pyPY4 KB
dirmap-generator.shSH3 KB
.nailong.phpPHP3 KB
check_db.pyPY3 KB
check_db3.pyPY3 KB
abelpc_lp_report.txtTXT3 KB
check_via_fmwrite.pyPY3 KB
hsfootballhub-dirmap.txtTXT3 KB
check_syntax.pyPY3 KB
ak_csrf.htmlHTML3 KB
b1.htmlHTML3 KB
b2.htmlHTML3 KB
b3.htmlHTML3 KB
blue1.htmlHTML3 KB
blue_after.htmlHTML3 KB
blue_api.pyPY3 KB
blue_resp.txtTXT3 KB
bluefm_home.htmlHTML3 KB
bluefm_resp.htmlHTML3 KB
bosowa.phpPHP3 KB
1389332694TXT3 KB
check_files.pyPY3 KB
check_pages_final.pyPY3 KB
aceincorporation-dirmap.txtTXT3 KB
02_BLUE_SHELLS.txtTXT3 KB
browse_fm.pyPY2 KB
check_blue.pyPY2 KB
check_cmd.pyPY2 KB
check_actions.pyPY2 KB
alfa_shell.jsJS2 KB
check_wp_path.pyPY2 KB
check_posts.pyPY2 KB
blueauth.phpPHP2 KB
check_gsinstall.pyPY2 KB
batch-generate.shSH2 KB
blue_login.pyPY1 KB
00-lp-direct.phpPHP1 KB
ag_mini_v2.shSH1 KB
config.phpPHP1 KB
config.phpPHP1 KB
cellclinic_check.pyPY1 KB
2651424017TXT1 KB
check_cleanup.phpPHP1 KB
ag3_simple.shSH1 KB
03_BACKUP_SHELLS.txtTXT1 KB
auto_master.logLOG1 KB
ag_mini.shSH1 KB
check_fs.pyPY1 KB
shellplugin.zipZIP1 KB
api_.envENV1 KB
1125779199TXT1 KB
pokrovcell-directories.txtTXT1 KB
pokrovcell-config.phpPHP959 B
arsip_cookies.txtTXT952 B
lp-pack.tar.gzGZ926 B
config.phpPHP921 B
01_GSOCKET.txtTXT881 B
04_ADMINER_DB.txtTXT804 B
930752662TXT720 B
check_theme.phpPHP671 B
bfa_config.phpPHP636 B
config.phpPHP632 B
shell8.phpPHP630 B
big_wordlist.txtTXT571 B
bkyk_cohosts.txtTXT437 B
check_dir.phpPHP413 B
akademy_gs_secrets.txtTXT404 B
.pnl_admin_activity.logLOG393 B
.gv2.logLOG358 B
evil.zipZIP337 B
c2026_pages.phpPHP311 B
evil.phpPHP284 B
adminer_cookies.txtTXT235 B
akademy_deployment.txtTXT213 B
‹redacted›.jarJAR213 B
shell1.phpPHP209 B
blue_e2e_44276TXT207 B
blue_loader_sess.txtTXT198 B
config.phpPHP188 B
shell2.phpPHP187 B
check.phpPHP156 B
shell6.phpPHP145 B
shell4.phpPHP138 B
admin_shell.txtTXT131 B
shell3.phpPHP116 B
shell7.phpPHP111 B
shell5.phpPHP108 B
2372062342TXT107 B
daemon.logLOG100 B
1735718237TXT93 B
cache_handler.phpPHP73 B
ag3_runner.shSH72 B
000001.logLOG58 B
lp-generator-v3.zipZIP55 B
000001.logLOG50 B
000001.logLOG49 B
ag_start.logLOG40 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.160.169.204confirmed
104.233.217.108confirmed
15.188.163.78confirmed
156.245.146.226confirmed
168.144.111.89confirmed
168.144.157.73confirmed
173.212.244.40confirmed
194.11.226.41confirmed
194.233.72.68confirmed
198.46.158.18confirmed
3.84.186.180confirmed
34.254.202.253confirmed
39.107.106.210confirmed
41.223.30.7confirmed
45.142.143.235confirmed