huntback / IP intelligence

45.151.122.34

DATACENTERloot-ipexposed-secretexploitoperator-submittedcoinminerelf-binary

Intelligence

ASN / OrgAS51167 · Contabo GmbH
CountryFrance
NetworkDATACENTER · risk 60/100
Threat score61/100
Open ports22, 445, 8080, 9090, 9092, 80, 2222, 8099, 9999
ServiceSimpleHTTP/0.6 Python/3.14.7 · Directory listing for /
Productsgitlab, citrix
Loot harvested103 file(s), 121278 KB · coinminer, elf-binary, exploit, exposed-secret, malware, pe-binary

Open directory contents (103)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
xmrig-mo-a64ELF8.3 MB
xmrig-a64ELF8.2 MB
xmrig_bin4ELF8.0 MB
xmrig_bin2ELF8.0 MB
xmrig_bin3ELF8.0 MB
stock-xmrigELF8.0 MB
mo-lin-binaryELF7.3 MB
tor-bundle.tgzTGZ6.6 MB
xmrig.exePE6.2 MB
ksys-x64-staticELF5.9 MB
ksys-a64ELF5.0 MB
xmrig.b64B644.0 MB
xmrig.url.b64B644.0 MB
mo-xmrig.zipZIP3.7 MB
stock-xmrig.tar.gzGZ3.4 MB
mo-lin.tgzTGZ3.0 MB
xmrig.bin.gzGZ3.0 MB
xmrig.zipZIP2.7 MB
win.zipZIP2.6 MB
ksys-x64.gzGZ2.4 MB
ksys-x64.xzXZ1.8 MB
cnprobe_mipsELF662 KB
hi_74kcELF661 KB
hi_f1ELF661 KB
hi_f2ELF661 KB
hi_f3ELF661 KB
hi_mips32ELF661 KB
hi_mips32r2ELF661 KB
cnprobe_v5ELF535 KB
cnprobe_armELF535 KB
probe_armELF531 KB
cnminiELF445 KB
part-00ELF390 KB
part-12BIN390 KB
c000ELF384 KB
cn5.gzGZ243 KB
cnmini.gzGZ215 KB
t150k.binELF146 KB
t60k.binELF58 KB
‹redacted›.sysPE14 KB
jh.shSH9 KB
s8k.binELF7 KB
deploy_marimo.shSH6 KB
deploy2.shSH5 KB
p5k.binELF4 KB
harden.shSH4 KB
harden2.shSH3 KB
syslog-scannerTXT3 KB
pf_deploy.shSH3 KB
pf_deploy_light.shSH3 KB
harden_a64.shSH3 KB
rangesrv.pyPY3 KB
s3k.binELF2 KB
config.jsonJSON2 KB
config.jsonJSON2 KB
syslog-rotateTXT2 KB
config.jsonJSON2 KB
config.jsonJSON2 KB
relay.pyPY2 KB
mirror_proxy.pyPY1 KB
p2k.binELF1 KB
https_mirror.pyPY1 KB
hunt_creds.pyPY1 KB
rslisten.pyPY1 KB
k2.pemPEM1 KB
dnscol.pyPY1 KB
‹redacted›.cmdCMD1 KB
pg_loot2.pyPY1 KB
pg_plain.pyPY1 KB
c2.pemPEM1 KB
hunt2.pyPY1 KB
‹redacted›.cmdCMD1023 B
pg_keys.pyPY991 B
pg_final.pyPY947 B
pg_loot3.pyPY922 B
pybench.pyPY905 B
pg_full.pyPY873 B
pg_plain2.pyPY870 B
‹redacted›.cmdCMD821 B
pg_keys2.pyPY819 B
relay-watchdog.shSH815 B
SHA256SUMSTXT748 B
configTXT710 B
pg_enum.pyPY633 B
ftptest.pyPY607 B
‹redacted›.serviceSERVIC505 B
https2.pyPY491 B
pg_b64.pyPY409 B
pg_hex.pyPY391 B
‹redacted›.vbsVBS351 B
ks.shSH340 B
setrun.ps1PS1264 B
relay.shSH237 B
Start-Zephyr.batBAT200 B
Start-Monero.batBAT190 B
Start-Tari%28XTM-RX%29.batBAT186 B
fetch.shSH158 B
‹redacted›.cmdCMD61 B
‹redacted›.cmdCMD60 B
‹redacted›.cmdCMD44 B
‹redacted›.jspJSP28 B
mo-linux.tgzZIP9 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.42.136.73confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.214.172.114confirmed
103.46.185.169confirmed
108.61.219.168confirmed
111.223.247.165confirmed
118.107.13.102confirmed
118.107.41.239confirmed
118.25.25.81confirmed
121.36.206.152confirmed
122.10.110.72confirmed
122.10.17.49confirmed
149.30.245.147confirmed
15.188.163.78confirmed