huntback / IP intelligence

38.60.212.186

DATACENTERai-pentest-consolepanel:ARTEXrpcbind-exposedshodan-opendirmalicious-opendirmal-files:chk2.ps1,fixacl.ps1,list1.ps1,mkdriver.ps1

Intelligence

ASN / OrgAS154177 · Cogent Communications, LLC
CountryJP
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 111, 8787, 8000, 18080
ServiceSimpleHTTP/0.6 Python/3.11.2 · Directory listing for /
Loot harvested47 file(s), 527 KB · exposed-secret, malware, mozi, tunnel

Open directory contents (47)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
plink.gzGZ481 KB
‹redacted›.pycPYC4 KB
write_probe.ps1PS14 KB
probe_remote.ps1PS13 KB
rce.pyPY2 KB
‹redacted›.pycPYC2 KB
probe2.ps1PS11 KB
s1.shSH1 KB
rce.pyPY1 KB
ssh109.pyPY1 KB
m2.jsJS1 KB
up.pyPY1 KB
pg7.shSH1 KB
push2.pyPY1 KB
pg1.shSH1 KB
pg8.shSH1 KB
pg9.shSH1 KB
scan.sqlSQL990 B
push.pyPY900 B
pg6.shSH872 B
s2.shSH864 B
mkpth3.ps1PS1851 B
ps.pyPY843 B
mkpth2.ps1PS1813 B
pg2.shSH790 B
mkdriver2.ps1PS1764 B
mkdriver.ps1PS1760 B
pg5.shSH678 B
mkpth.ps1PS1613 B
list1.ps1PS1519 B
readout.ps1PS1519 B
pg3.shSH444 B
runpth.ps1PS1433 B
s3.shSH427 B
chk2.ps1PS1420 B
fixacl.ps1PS1398 B
psrun2.pyPY397 B
s9.shSH383 B
pg4.shSH349 B
pip1.ps1PS1280 B
up.logLOG222 B
s10.shSH187 B
readout2.ps1PS1136 B
readout3.ps1PS1118 B
readout4.ps1PS1118 B
s11.shSH78 B
s0.shSH44 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205lead
143.246.202.252lead
144.91.103.172lead
154.89.148.84lead
168.144.85.125lead
173.254.242.131lead
179.43.175.2lead
202.182.101.198lead
208.87.131.125lead
38.60.241.211lead
64.83.20.32lead
8.215.192.157lead
85.190.115.121lead
85.190.115.218lead