Live findsCVE IntelConsoleStart free
huntback / IP intelligence

204.168.225.59

DATACENTERloot-ipc2coinminerelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS24940 · Hetzner Online GmbH
CountryFinland
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 5555, 8080, 8898, 9080
Productsnginx
JARM27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523
Loot harvested487 file(s), 97550 KB · c2, coinminer, elf-binary, exploit, exposed-secret, forced-loot

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
sk.tgzTGZ14.9 MB
.sELF8.0 MB
‹redacted›.goodELF8.0 MB
xELF8.0 MB
xkvELF7.9 MB
.rr20517ELF7.9 MB
.rr26721ELF7.9 MB
.xELF6.7 MB
xg.gzGZ3.4 MB
k1.gzGZ3.3 MB
nr.gzGZ3.3 MB
mine-x64.gzGZ3.3 MB
sm.gzGZ3.3 MB
std.tgzTGZ2.2 MB
ui.jsJS1.7 MB
.srv2.logLOG1.6 MB
x.logLOG924 KB
‹redacted›.jsonlJSONL519 KB
cs.htmlHTML280 KB
c_43.jsonJSON249 KB
w1TXT231 KB
id1TXT231 KB
ids.jsonJSON198 KB
c_44.jsonJSON172 KB
c_42.jsonJSON134 KB
c_41.jsonJSON95 KB
cis.htmlHTML93 KB
j.jsJS51 KB
c_40.jsonJSON42 KB
kp.tgzTGZ35 KB
r1TXT20 KB
e.jsonJSON12 KB
rk5.shSH10 KB
b.tarTAR10 KB
b2.tarTAR10 KB
.d0.shSH9 KB
n.txtTXT8 KB
n3.htmlHTML7 KB
pk.logLOG6 KB
‹redacted›.pycPYC6 KB
ck_2a2b5164c213TXT5 KB
ck_85fcc127b341TXT4 KB
dpf.pyPY4 KB
ck_a70d81024957TXT4 KB
ck_20ab1cc32f80TXT4 KB
.nt_st2ka.pyPY4 KB
st2v.pyPY4 KB
gh.pyPY3 KB
fp3.pyPY3 KB
dfv2.pyPY3 KB
‹redacted›.jarJAR3 KB
.as.pyPY3 KB
.st.shSH3 KB
ck_02a27ee3e678TXT3 KB
ck_050da36823bcTXT3 KB
ck_097a684ecba0TXT3 KB
ck_22aac6b8ad7bTXT3 KB
ck_23f292095743TXT3 KB
ck_32758d416d45TXT3 KB
ck_b7cb723d407fTXT3 KB
ck_c020642c5671TXT3 KB
ck_c0bf0994b7d5TXT3 KB
ck_e8aa4cac3a38TXT3 KB
ck_ea6d38997ee0TXT3 KB
ck_f441585b9f94TXT3 KB
ck_416e2cfc7aa9TXT3 KB
ck_f72f7293928bTXT3 KB
op.pyPY3 KB
ck_ed574378d9d3TXT3 KB
ck_8890fb39a0eaTXT3 KB
fixhost.shSH3 KB
collide2.pyPY3 KB
rc.pyPY2 KB
ck_05e189038b65TXT2 KB
sshscan2.pyPY2 KB
sshscan.pyPY2 KB
ck_d0f317e744acTXT2 KB
ck_20c427d7aff1TXT2 KB
fm.pyPY2 KB
ck_3ad79827ebbaTXT2 KB
ck_55c1ce315723TXT2 KB
dp.pyPY2 KB
ck_4d19ab93482eTXT2 KB
ck_1506a8960400TXT2 KB
dr.pyPY2 KB
k165_1018TXT2 KB
ro.pyPY2 KB
wv.pyPY2 KB
walletfix.shSH2 KB
.ls.pyPY2 KB
_d.shSH2 KB
rs.pyPY2 KB
bp.pyPY2 KB
ck_43df467cd0a4TXT2 KB
st2_probe.pyPY1 KB
st2_verify.pyPY1 KB
ck_49da53753763TXT1 KB
fgp.pyPY1 KB
st2_check.pyPY1 KB
ck_332a59720c28TXT1 KB
ck_2861d82013c7TXT1 KB
cs.shSH1 KB
d.shSH1 KB
ck_138f8467dfdfTXT1 KB
x_configured.jsonJSON1 KB
fdp.pyPY1 KB
ck_14148ce19999TXT1 KB
x.binBIN1 KB
ck_264357e1d3c0TXT1 KB
ck_4e830bf453ccTXT1 KB
ck_8791ce64cb14TXT1 KB
ck_8f079e7b5dfcTXT1 KB
ck_9336dd340efeTXT1 KB
ck_997ef56d2104TXT1 KB
ck_9a444b4ec587TXT1 KB
ck_c32f7cae9c74TXT1 KB
ck_c5cf4ba04188TXT1 KB
ck_f2d2309bd2c2TXT1 KB
ck_025b19bda07aTXT1 KB
ck_03bbe873d9b9TXT1 KB
ck_0a40d0035cefTXT1 KB
ck_0bb3267a5075TXT1 KB
ck_0f117aa14520TXT1 KB
ck_0f4eefb5d37aTXT1 KB
ck_1933c6d8e1b6TXT1 KB
ck_1f37187d63e1TXT1 KB
ck_227aae714d85TXT1 KB
ck_2355b0d8e269TXT1 KB
ck_24ef9749266aTXT1 KB
ck_27101cd05423TXT1 KB
ck_2821fb867ee2TXT1 KB
ck_2868fde5385bTXT1 KB
ck_291db65d3ab1TXT1 KB
ck_2b1a37921963TXT1 KB
ck_2cf7d7279263TXT1 KB
ck_2e96793b38f6TXT1 KB
ck_3498529fbe11TXT1 KB
ck_352f853204a9TXT1 KB
ck_3552fafea30bTXT1 KB
ck_38c5318223edTXT1 KB
ck_3912b43c1ab4TXT1 KB
ck_3b5b35849af4TXT1 KB
ck_3f26423382ddTXT1 KB
ck_406f09d03ab2TXT1 KB
ck_41feb7460d7fTXT1 KB
ck_44c90f19c96bTXT1 KB
ck_4ff2611d93c4TXT1 KB
ck_5101e86dcf83TXT1 KB
ck_547f37d09b19TXT1 KB
ck_57b16b306255TXT1 KB
ck_57ee12c52758TXT1 KB
ck_58053941832aTXT1 KB
ck_58dac8898681TXT1 KB
ck_59651cfff25fTXT1 KB
ck_5ea092670280TXT1 KB
ck_5f24d28592f7TXT1 KB
ck_608c2070c6b5TXT1 KB
ck_65ae6f59e872TXT1 KB
ck_661c65c13504TXT1 KB
ck_66af878eb572TXT1 KB
ck_69d52b10b930TXT1 KB
ck_6cf32ce7fee5TXT1 KB
ck_760195c2e353TXT1 KB
ck_7e51b0ea83a9TXT1 KB
ck_83ce66bb2adaTXT1 KB
ck_883076309ae9TXT1 KB
ck_8ab99f74d4bbTXT1 KB
ck_8cb003572836TXT1 KB
ck_8ec6c338a0edTXT1 KB
ck_93057a76de03TXT1 KB
ck_949bc9a0e624TXT1 KB
ck_98b9cadd9fefTXT1 KB
ck_9b8b60215ce9TXT1 KB
ck_9d771edc6077TXT1 KB
ck_a5a78607e9bcTXT1 KB
ck_a77d4a0daf99TXT1 KB
ck_a95a5816ce93TXT1 KB
ck_aa8ce21b5418TXT1 KB
ck_ac084c741cd5TXT1 KB
ck_ad55c24fcfd1TXT1 KB
ck_ae1d4ebd613dTXT1 KB
ck_ae804af3eb8cTXT1 KB
ck_afa91a56bfe1TXT1 KB
ck_b0487c4870e0TXT1 KB
ck_b1d5be980111TXT1 KB
ck_b37d024eb2ffKEY1 KB
ck_bf4a9d5b6727TXT1 KB
ck_c0b7b0c872caTXT1 KB
ck_c223e9c19586TXT1 KB
ck_c279c8a0fef4TXT1 KB
ck_c5421484cd49TXT1 KB
ck_c5b23bb5c87bTXT1 KB
ck_c637ba34f6daTXT1 KB
ck_c6a77874dd9aTXT1 KB
ck_cadeadc1274bTXT1 KB
ck_cf540f17c40fTXT1 KB
ck_d2298fe50d27TXT1 KB
ck_d69543c45186TXT1 KB
ck_d74d08da27cfTXT1 KB
ck_d979760e8563TXT1 KB
ck_dd9ef501e0e0TXT1 KB
ck_ded66bf6ae06TXT1 KB
ck_e3b4573ed137TXT1 KB
ck_e5cfeb2053baTXT1 KB
ck_e7526a8afcd7TXT1 KB
ck_e90bfde6e090TXT1 KB
ck_ea34c81c38a3TXT1 KB
ck_ed5a645d383cTXT1 KB
ck_f4e6df8458b6TXT1 KB
ck_f53f0474353dTXT1 KB
ck_2f95d3649667TXT1 KB
ck_865f84d9e323TXT1 KB
test_curl.phpPHP1 KB
pull84.logLOG1 KB
rv.pyPY1 KB
.nt_v2.pyPY1 KB
relay.pyPY1 KB
ck_66318e97153dTXT1 KB
.p.shSH1 KB
_f.shSH1 KB
.nt_v3.pyPY1 KB
scan.logLOG1 KB
pdt.pyPY1 KB
scan2.logLOG1 KB
.ss.shSH1 KB
chk52.pyPY1 KB
cmd.txtTXT1007 B
lab.logLOG1001 B
.w3.shSH992 B
.rs.shSH990 B
sf.jsonJSON951 B
pw5.pyPY938 B
wf.shSH936 B
.c.shSH928 B
ck_a60da154baf6TXT916 B
ck_b48659f594c9TXT916 B
ck_fc8b8ff65a48TXT916 B
dm2.shSH905 B
.p443.logLOG873 B
test_curl3.phpPHP857 B
chk2.shSH838 B
test_curl2.phpPHP794 B
kt.pyPY765 B
c.logLOG754 B
ctl_check.shSH714 B
ct_1792235516.bakBAK702 B
dm.shSH694 B
ck_f48309791386TXT672 B
ctl_check2.shSH640 B
awstest.pyPY639 B
scan.logLOG618 B
xr.shSH616 B
startbeacon.shSH592 B
test_squid.shSH579 B
ct.bakBAK550 B
ctl_check3.shSH521 B
clean_hetzner.pyPY508 B
k1484_e5fe763451bf24ca.pemPEM497 B
k0654_01a70dee22d2ed28.pemPEM493 B
k0900_49fa9037e52ce695.pemPEM493 B
.run.shSH490 B
test_curl4.phpPHP480 B
bg169.shSH463 B
jk_payload.txtTXT461 B
pj2.pyPY451 B
k1482_891556b649649b8c.pemPEM444 B
sb2.shSH435 B
k0015_b839c2c11137b6fd.pemPEM432 B
k0503_a451eb49f48c2451.pemPEM432 B
k0515_c50bb249cc9e32bb.pemPEM432 B
k0767_5f99b5bc028510f8.pemPEM432 B
k0848_903a2e340f9cec88.pemPEM432 B
k1077_6db971215f4e8292.pemPEM432 B
k1293_c3319d7db33ace82.pemPEM432 B
k2091_26bd00671a21964d.pemPEM432 B
k0043_822a3872e38514fb.pemPEM419 B
k0045_b79c9828690c4a9d.pemPEM419 B
k0110_446e475a754a642f.pemPEM419 B
k0155_a6abad1cea6e90e6.pemPEM419 B
k0257_221d7fda93b21686.pemPEM419 B
k0302_d56f9fa77fbd9b3b.pemTXT419 B
k0344_d6edcfe4cd3740a2.pemPEM419 B
k0394_cd1f859f4c8d97a4.pemPEM419 B
k0436_e48fccdd44b690ec.pemPEM419 B
k0530_cbafc61b3794d431.pemPEM419 B
k0755_21e5f69e4a715d4e.pemPEM419 B
k0785_ca58a167f4532947.pemPEM419 B
k0849_1ccc62964778c61e.pemPEM419 B
k1004_e35c5ef506cb7852.pemPEM419 B
k1063_6979d2c6dd1035fd.pemPEM419 B
k1082_10f1251b47af9616.pemPEM419 B
k1107_4fb7865e5fd4463e.pemPEM419 B
k1148_495cee9c0c61a397.pemPEM419 B
k1265_f361078c9c74f66e.pemPEM419 B
k1336_100eeca707f2933d.pemPEM419 B
k1621_1a13364470808ab5.pemPEM419 B
k1627_d054fc3706bcbc71.pemPEM419 B
k1695_e1e3337157338c0d.pemPEM419 B
k1794_f3a37b661eb55e6e.pemPEM419 B
k1927_e61e2beae1172c67.pemPEM419 B
k2075_a5e236c84f89ece0.pemPEM419 B
k2109_ab9217553672a195.pemPEM419 B
k2110_7b692c2f6da41c0e.pemPEM419 B
k2130_d38d9fbba4b97fb3.pemPEM419 B
k2237_8c49c64e5ed84bf6.pemPEM419 B
k2251_b8158bf02cf3c63e.pemPEM419 B
k2253_701fc6fae96e9b22.pemPEM419 B
k2317_80fff05dd6321807.pemPEM419 B
k2389_46_224_193_66_8888__id_ed25519TXT419 B
k2393_94.103.15.55_2053__id_ed2551955_205419 B
k2399_23.251.34.86_18080__id_ed2551986_180419 B
k2411_106.54.49.55_8899__id_ed25519_1panel55_889419 B
k2414_221.231.140.150_id_ed25519150_ID419 B
awscheck.pyPY415 B
.k0K0411 B
k0062_b4904dadf60a8b43.pemPEM411 B
k0081_a654775f357e078a.pemPEM411 B
k0119_fd58736081ff3663.pemPEM411 B
k0163_f098575d6ea41bc0.pemPEM411 B
k0174_3823017b4ae9ec18.pemPEM411 B
k0197_e1069d17a5d20d65.pemPEM411 B
k0235_e883b77f1a4068b1.pemPEM411 B
k0269_78fc5c0c03d49178.pemPEM411 B
k0371_731241acf97e66c4.pemPEM411 B
k0383_af5ef6385ca0ea70.pemPEM411 B
k0424_cf9ca4ac75b47679.pemPEM411 B
k0465_7f43b30149f3ed0c.pemPEM411 B
k0506_968b8de86f7a4e4a.pemPEM411 B
k0528_de06343b1fa1f673.pemPEM411 B
k0529_67d81d2ec34a5198.pemPEM411 B
k0541_291e2e62359196b5.pemPEM411 B
k0546_19f6c10f0c58bc21.pemPEM411 B
k0633_7828f8e7ac2d079b.pemPEM411 B
k0719_ed6105a0784e717c.pemPEM411 B
k0796_5ea516504b099a31.pemPEM411 B
k0813_4bc1d86069ed5a81.pemPEM411 B
k0869_dc2021aec4134b6d.pemPEM411 B
k0893_c3e6df24aab8ba40.pemPEM411 B
k1018_0f809243c85855f7.pemPEM411 B
k1030_592626a153006ca9.pemPEM411 B
k1094_c3d07d305fd60591.pemPEM411 B
k1139_e43dbcbc88926061.pemPEM411 B
k1143_08a5d356ce38feba.pemPEM411 B
k1176_1ec2e29e106b6e75.pemPEM411 B
k1181_74dc93557bf2ca18.pemTXT411 B
k1223_ddcffda424314412.pemPEM411 B
k1358_24a81df9bc779fab.pemPEM411 B
k1384_19167a95b29653d9.pemPEM411 B
k1437_4aea4b7a729a00e4.pemPEM411 B
k1526_585f30b1a948810a.pemPEM411 B
k1591_cd809b866c3db896.pemPEM411 B
k1651_69a1fd4c0e1cf569.pemPEM411 B
k1671_c9e2b94c8a159f54.pemPEM411 B
k1768_233a06ffbb845537.pemPEM411 B
k1783_c20ce893c49b59f7.pemPEM411 B
k1878_11b92a0394f79feb.pemPEM411 B
k2000_73030a2c8685c32a.pemPEM411 B
k2038_bfa409fc407960ec.pemPEM411 B
k2050_b17f15f847f7e9db.pemPEM411 B
k2054_75adca30c7119f3d.pemPEM411 B
k2117_41020d9e66ad7ce2.pemPEM411 B
k2202_d53b6dcf31a6affc.pemPEM411 B
k2315_716d352ef017e42e.pemPEM411 B
k2327_244d0bce89c7c1e6.pemPEM411 B
k2365_fcda9c0626ca124f.pemPEM411 B
k2383_892560ab29d02198.pemPEM411 B
k2387_b9064a30b0750eda.pemPEM411 B
k2391_31_70_75_227_9000__id_ed25519TXT411 B
k2396_58.87.95.101_8899__id_ed25519_remote101_88411 B
k2398_165.22.241.196_8000__id_ed25519196_80411 B
k2402_62.171.139.108_9001__id_ed25519108_90411 B
k2404_79.112.85.135_8080__id_ed25519135_80411 B
k2407_106.14.120.192_9001__id_ed25519_github192_90411 B
k2408_78.40.195.108_8080__id_ed25519_mbessonov108_80411 B
k2413_89.36.231.178_deploy_tun_key178_DE411 B
k2415_89.36.231.178_id_ed25519178_ID411 B
k2416_211.233.91.195_id_ed25519195_ID411 B
k2418_68.183.187.54_id_ed2551954_ID_411 B
k2422_130.162.182.9_id_ed255199_ID_E411 B
verify138.pyPY409 B
pj.pyPY408 B
ctf16_pivot_keyTXT399 B
k0082_f4d3dcc8391889ab.pemPEM399 B
k0134_efabf52ad9bcc066.pemPEM399 B
k0242_db199d404a8477f8.pemPEM399 B
k0258_1d7d3482d9a6619a.pemPEM399 B
k0324_fb0e09a12bb0c75b.pemPEM399 B
k0618_0178f56af453440b.pemPEM399 B
k0657_432bcecf6d86010b.pemPEM399 B
k0737_68ee7fd34266c880.pemPEM399 B
k0754_768f6a21d7744375.pemTXT399 B
k0778_62ff31ff6af04937.pemPEM399 B
k0844_1c3f12ba5c86bd14.pemPEM399 B
k0880_ff1c7ab431f7fc3f.pemPEM399 B
k0897_104cb694d98e3e52.pemPEM399 B
k1023_8c003c1da3d71f40.pemPEM399 B
k1032_312f4f43af7aae7b.pemPEM399 B
k1328_613e585029a3d4bc.pemPEM399 B
k1470_78cdf7e354efe108.pemTXT399 B
k1487_4a4719831eeb8d20.pemPEM399 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

118.193.37.113confirmed
121.36.206.152confirmed
185.148.144.99confirmed
207.180.193.40confirmed
40.160.241.170confirmed
47.102.192.23confirmed
49.51.230.17confirmed
89.36.231.178confirmed
91.92.241.101confirmed
1.14.93.149lead
1.15.114.102lead
101.32.108.79lead
101.36.118.185lead
101.47.134.222lead
101.47.15.229lead