huntback / IP intelligence

47.76.239.114

DATACENTERoperator-submittedcoinminerexploitexposed-secretgafgytmalware

Intelligence

ASN / OrgAS45102 · Alibaba (US) Technology Co., Ltd.
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 445, 3389
Servicenginx/1.24.0 · Index of /
Productsnginx
Loot harvested25 file(s), 34363 KB · coinminer, exploit, exposed-secret, gafgyt, malware, pe-binary

Open directory contents (25)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
libGLESv2.dllPE7.6 MB
vk_swiftshader.dllPE5.4 MB
d3dcompiler_47.dllPE4.5 MB
x.exePE3.9 MB
ffmpeg.dllPE3.0 MB
dxil.dllPE1.4 MB
board.exePE1.1 MB
sysdog.exePE1.0 MB
pool.exePE1.0 MB
loop.exePE1.0 MB
t.exePE1.0 MB
vulkan-1.dllPE930 KB
v8_context_snapshot.binBIN698 KB
libEGL.dllPE508 KB
snapshot_blob.binBIN333 KB
elevate.exePE145 KB
kill.ps1PS161 KB
proxy.logLOG6 KB
server.keyKEY1 KB
cert_key.pemPEM1 KB
server.crtCRT1 KB
cert.pemPEM964 B
config.jsonJSON770 B
SHA256SUMSTXT236 B
‹redacted›.cmdCMD20 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

8.138.137.232lead