Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

27.131.106.133

RESIDENTIALoperator-submittedcoinminerelf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS38880 · Micron21 Datacentre Pty Ltd
CountryAustralia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 111, 443, 2049, 6443, 8000, 8008, 8088, 18080
Loot harvested29 file(s), 8183 KB · coinminer, elf-binary, exploit, exposed-secret, malware, tunnel

Open directory contents (29)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
xmrigELF8.0 MB
‹redacted›.sampleSAMPLE4 KB
‹redacted›.sampleSAMPLE4 KB
‹redacted›.sampleSAMPLE3 KB
‹redacted›.sampleSAMPLE2 KB
‹redacted›.sampleSAMPLE2 KB
‹redacted›.sampleSAMPLE1 KB
‹redacted›.sampleSAMPLE1 KB
‹redacted›.sampleSAMPLE1 KB
boot.shSH1 KB
‹redacted›.sampleSAMPLE896 B
‹redacted›.sampleSAMPLE544 B
‹redacted›.sampleSAMPLE478 B
‹redacted›.sampleSAMPLE424 B
‹redacted›.sampleSAMPLE416 B
s.shSH377 B
cmdx-0.1.tar.gzGZ334 B
__init__.pyPY333 B
evil.tar.gzGZ253 B
excludeTXT240 B
‹redacted›.sampleSAMPLE189 B
setup.pyPY153 B
configTXT114 B
packed-refsTXT103 B
configTXT92 B
descriptionTXT73 B
refsTXT57 B
HEADTXT21 B
COMMIT_EDITMSGTXT5 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
101.36.112.205confirmed
102.209.224.40confirmed
103.131.51.199confirmed
103.133.216.219confirmed
103.195.188.128confirmed
103.252.72.150confirmed
103.254.63.94confirmed
103.35.216.13confirmed
104.192.42.94confirmed
104.200.73.97confirmed
104.223.62.197confirmed
106.52.174.151confirmed
107.150.20.139confirmed
107.191.102.241confirmed