huntback / IP intelligence
38.9.96.215
Intelligence
ASN / OrgAS174 · Cogent Communications
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 1234, 1337, 3000, 3306, 6666, 8080, 8081, 8082, 8088, 8096, 8181
ServiceSimpleHTTP/0.6 Python/3.14.4 · Directory listing for /
Productsnginx
Loot harvested15 file(s), 7831 KB · c2, elf-binary, havoc, malware, mozi, tunnel
Open directory contents (15)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| port80.log | LOG | 6.0 MB |
| arm7 | ELF | 210 KB |
| mips | ELF | 202 KB |
| mipsel | ELF | 202 KB |
| m68k | ELF | 175 KB |
| arm6 | ELF | 160 KB |
| ppc | ELF | 159 KB |
| x86_64 | ELF | 156 KB |
| arm5 | ELF | 150 KB |
| arm4 | ELF | 150 KB |
| sh4 | ELF | 139 KB |
| a.sh | SH | 1 KB |
| femboy.sh | SH | 975 B |
| atterna.sh | SH | 784 B |
| run.sh | SH | 305 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 1.14.93.149 | lead |
| 1.15.114.102 | lead |
| 101.32.108.79 | lead |
| 101.36.118.185 | lead |
| 101.47.134.222 | lead |
| 101.47.15.229 | lead |
| 102.203.200.45 | lead |
| 102.68.86.43 | lead |
| 103.111.114.29 | lead |
| 103.113.104.49 | lead |
| 103.116.52.164 | lead |
| 103.129.149.141 | lead |
| 103.133.216.219 | lead |
| 103.150.93.176 | lead |
| 103.151.141.85 | lead |