Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

5.129.204.34

RESIDENTIALoperator-submittedloot-ipelf-binaryexposed-secretmalwareopen-directory

Intelligence

ASN / OrgAS9123 · JSC "TIMEWEB"
CountryRussia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 5000, 8080, 8081, 8090, 8443, 9443
Servicenginx/1.24.0 (Ubuntu) · Welcome to nginx!
Productsnginx
JARM27d40d40d00040d00042d43d0000007d20e9b9a3e87aa1ec17cb4d646ce9a5
Loot harvested4 file(s), 9440 KB · elf-binary, exposed-secret, malware

Open directory contents (4)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
shelterdesk-relay-linuxELF9.2 MB
install.shSH4 KB
force-update.ps1PS13 KB
configTXT22 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

102.213.181.90lead
103.117.148.247lead
103.118.245.63lead
103.127.98.10lead
103.142.25.154lead
103.146.23.195lead
103.175.219.40lead
103.180.134.215lead
103.85.59.78lead
107.155.87.214lead
109.120.151.140lead
109.122.196.126lead
109.122.196.95lead
109.122.197.113lead
109.122.197.243lead