Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

64.23.240.211

DATACENTERoperator-submittedexposed-secretopen-directoryloot-ipc2coinminer

Intelligence

ASN / OrgAS14061 · DigitalOcean, LLC
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 3333, 4444, 5000, 5432, 5555, 7777, 8080, 8081, 8090, 8443, 8888, 9000, 9080
Servicenginx/1.26.0 (Ubuntu)
Productsnginx
JARM27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523
Loot harvested386 file(s), 69746 KB · c2, coinminer, elf-binary, exploit, exposed-secret, forced-loot

Open directory contents (386)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
c2_tasks.jsonJSON19.9 MB
xmrig-proxyELF8.6 MB
tmELF7.9 MB
backup_64.23.240.211.tar.gzGZ6.8 MB
mitm_v7_c2_3355.logLOG5.6 MB
xp.tar.gzGZ3.4 MB
xm.tgzGZ3.3 MB
bf3333.logLOG3.1 MB
xm5b.logLOG1.7 MB
c2_state.jsonJSON1023 KB
hd.x86ELF833 KB
xmrig.logLOG678 KB
trendyol_orders.sqlSQL576 KB
hydra-p2pELF407 KB
master-3f3dc5f50478.jsJS403 KB
mitm_v7_c2_8433.logLOG384 KB
bot_output.logLOG368 KB
hydra-bootstrapELF315 KB
agentELF279 KB
nc_local_test.logLOG279 KB
bf3334.logLOG202 KB
crit.tar.gzGZ162 KB
cacti_exploit_result.jsonJSON136 KB
scan_litellm_db.logLOG121 KB
redismodule.hH114 KB
‹redacted›.partialPARTIA103 KB
redis_rce.soELF97 KB
deploy_via_c2.pyPY72 KB
xm4.logLOG66 KB
c2fix_launch.logLOG62 KB
cacti_exploit_v4_run.logLOG56 KB
df_final.pyPY56 KB
bot.pyPY55 KB
xm3.logLOG46 KB
cacti_exploit_run.logLOG40 KB
v3now_v9.logLOG37 KB
ros_real.logLOG31 KB
web-interface-debug.htmlHTML23 KB
harvest_real.logLOG22 KB
wf.htmlHTML22 KB
mitm_v7_c2_fixed.pyPY21 KB
mitm_v7_c2_decodedTXT21 KB
server.jsJS20 KB
cred_collector.logLOG20 KB
web-interface.htmlHTML19 KB
v3now_c2_v6.pyPY19 KB
web-interface-v2.htmlHTML19 KB
papercut_exploit.pyPY17 KB
‹redacted›.pycPYC15 KB
litellm_exploit.pyPY14 KB
scan_v2.logLOG14 KB
mitm_v7_c2.pyPY12 KB
fofa_new_exploits.txtTXT12 KB
br_stratum_scan_all.txtTXT12 KB
target_gate.pyPY12 KB
c2_orchestrator.pyPY11 KB
cacti_mine_deploy.pyPY10 KB
sangoma_exploit.pyPY10 KB
new_exploits_live.txtTXT10 KB
‹redacted›.outOUT10 KB
v3now_v8.logLOG9 KB
‹redacted›.pycPYC8 KB
c2-deploy.shSH8 KB
lf_tcp_scan.logLOG8 KB
cve_2018_14847.pyPY8 KB
c2v6.logLOG7 KB
mitm_v7_decoded.pyPY7 KB
mt_repoison2.pyPY7 KB
mt_repoison.pyPY6 KB
redis_deploy.pyPY6 KB
cred_stealer.js.bak_1788960999BAK_175 KB
cred_stealer.jsJS5 KB
‹redacted›.pycPYC5 KB
mitm_v7_c2_decoded.gzGZ5 KB
‹redacted›.pycPYC5 KB
mt_audit2.pyPY5 KB
exploit_papercut.pyPY5 KB
mitm_v7_sat.pyPY4 KB
cap3344.logLOG4 KB
pb.pyPY4 KB
cacti_exploit.pyPY4 KB
v3now_v4.logLOG4 KB
mt_audit.pyPY4 KB
langflow_deploy.pyPY4 KB
mitm_std.pyPY4 KB
cacti_callback.logLOG4 KB
docker_deploy.pyPY4 KB
cacti_exploit_v3.pyPY4 KB
forge_test.pyPY4 KB
cacti_exploit_v2.pyPY4 KB
mitm_v7_sat.gzGZ4 KB
myvibe_leads.sqlSQL4 KB
sysd.pyPY4 KB
deploy_c2.shSH4 KB
btc_mitm_v5.pyPY3 KB
langflow_deploy_v2.pyPY3 KB
mt_realcheck.pyPY3 KB
scan_langflow.logLOG3 KB
mass_papercut.logLOG3 KB
flowise_deploy.pyPY3 KB
df.pyPY3 KB
lf_deploy.pyPY3 KB
xm_testELF3 KB
mass_litellm_c2.pyPY3 KB
langflow_deploy_v2.logLOG3 KB
mitm_v3.logLOG3 KB
cacti_exploit_v4.pyPY3 KB
stolen_creds.jsonJSON3 KB
erlang_deploy_xmrig.pyPY3 KB
run_cacti_exploit.pyPY3 KB
mass_lite_rce.pyPY2 KB
v3chunk_adTXT2 KB
v3chunk_afTXT2 KB
v3chunk_aaTXT2 KB
v3chunk_abTXT2 KB
v3chunk_acTXT2 KB
dp.logLOG2 KB
scan_litellm_db.pyPY2 KB
mm.py.gzGZ2 KB
cred_collector.pyPY2 KB
dep_v5.pyPY2 KB
find_api.pyPY2 KB
koi-utfTXT2 KB
webfig_fp.pyPY2 KB
xmrig_ips.txtTXT2 KB
mikrotik_scan.pyPY2 KB
mass_check.logLOG2 KB
erlang_kexcheck.pyPY2 KB
winbox_v2.pyPY2 KB
fofa_c2_scan.pyPY2 KB
wp_scan.pyPY2 KB
‹redacted›.pycPYC2 KB
cacti_verify.pyPY2 KB
httpserver.logLOG2 KB
test_api.pyPY2 KB
oob_fp.logLOG2 KB
config.jsonJSON2 KB
erlang_exploit_fixed.pyPY2 KB
redis_run.logLOG2 KB
xmp.logLOG2 KB
README.mdMD2 KB
koi-winTXT2 KB
fix_v3now.pyPY2 KB
c2-mesh.shSH2 KB
scan.pyPY2 KB
xm.logLOG2 KB
fofa_v3.pyPY2 KB
scan_papercut.pyPY2 KB
dep_178_final.logLOG2 KB
deploy_ec2eu.pyPY2 KB
test_server.pyPY1 KB
rogue_redis.pyPY1 KB
dep_178_v2.logLOG1 KB
winbox_scan.pyPY1 KB
mass_litellm.pyPY1 KB
scan_langflow.pyPY1 KB
papercut_vuln_check.pyPY1 KB
erlang_debug.pyPY1 KB
ssh_brute.pyPY1 KB
mass_litellm.logLOG1 KB
mass_papercut.pyPY1 KB
lf_scanner.pyPY1 KB
lite_rce.pyPY1 KB
test_target_connectivity.pyPY1 KB
redeploy.pyPY1 KB
mitm_probe.pyPY1 KB
m2.pyPY1 KB
winbox_cve.pyPY1 KB
lf_rce_checker.pyPY1 KB
setup_services.pyPY1 KB
deploy_xmrig_v4.pyPY1 KB
xm5.logLOG1 KB
papercut_check_c2.logLOG1 KB
config.jsonJSON1 KB
raw2.pyPY1 KB
wc.pyPY1 KB
fofa_new_exploits.pyPY1 KB
v3chunk_agTXT1 KB
deploy_16.pyPY1 KB
deploy_v5.pyPY1 KB
xmd.logLOG1 KB
xme.logLOG1 KB
check_target.pyPY1 KB
xmr_test.pyPY1 KB
fofa_scan_v2.pyPY1 KB
deploy_xmrig_v5.pyPY1 KB
br_stratum_scan.txtTXT1 KB
mass_check.pyPY1 KB
langflow_rce_test.pyPY1 KB
fix_replace.pyPY1 KB
lf_rce_test.pyPY1 KB
deploy_all.pyPY1 KB
fixblock.pyPY1 KB
rel4_patch_disk.pyPY1 KB
ssh22_scan.pyPY1 KB
lf_rce_7860.pyPY1 KB
wd.pyPY1 KB
deploy_16_v2.pyPY1 KB
langflow_fofa.pyPY1 KB
patch_v6_login.pyPY1 KB
lf_rce_v2.pyPY1 KB
final.shSH1 KB
fake_miner.pyPY1 KB
papercut_check_c2.pyPY1 KB
lf_fast_scan.pyPY1 KB
xmrig_hardcopyTXT1 KB
big_scan2.pyPY1 KB
‹redacted›.outOUT1 KB
xpl.pyPY1 KB
fofa_scan.pyPY1 KB
dep_16_final.pyPY1 KB
verify_miners.pyPY1 KB
langflow_quick.pyPY1 KB
dep_v4.pyPY1 KB
dep_178_final.pyPY1 KB
lf_tcp_scan.pyPY1 KB
rel4_patch.pyPY1 KB
dep_178_v2.pyPY1 KB
big_scan.pyPY1 KB
wf.jsJS1 KB
big_scan.logLOG1 KB
cve.pyPY1 KB
raw7.pyPY1023 B
expl.pyPY1012 B
helper2.pyPY983 B
mitm_fix.pyPY978 B
deploy_178.pyPY978 B
v3now_boot.logLOG977 B
v3now_v7.logLOG972 B
sn.pyPY966 B
vp2.logLOG964 B
scan_v2.pyPY964 B
vp.jsonJSON958 B
deploy_c2.logLOG956 B
patch_v6_origwallet.pyPY955 B
scan_new_exploits.pyPY919 B
cacti_callback_server.pyPY916 B
redis_rce.cC910 B
xfwd_8791.logLOG905 B
recon.logLOG903 B
cacti_callback.pyPY901 B
m.pyPY852 B
scan_tomcat.pyPY837 B
dbg.pyPY813 B
replace_minero.pyPY807 B
helper.pyPY793 B
mitm_full.logLOG775 B
hvlogin.pyPY770 B
br_stratum_final.txtTXT761 B
vfy4.pyPY759 B
sum2.pyPY732 B
verify_v5.pyPY731 B
test_pools.pyPY729 B
hvlogin2.pyPY701 B
deploy_16_v3.pyPY700 B
fix.pyPY700 B
sq.pyPY695 B
raw4.pyPY674 B
scan_br.pyPY674 B
raw5.pyPY673 B
raw6.pyPY659 B
stest.pyPY652 B
xfwd_8092.logLOG633 B
config.jsonJSON632 B
hvprobe.pyPY622 B
webfig_fp.logLOG603 B
dig.shSH602 B
webserver.pyPY601 B
start_mitm_br.pyPY587 B
cb_py.pyPY580 B
sum.pyPY579 B
map.shSH576 B
hvlogin3.pyPY575 B
CREDENTIALS.mdMD571 B
hvlogin4.pyPY565 B
v3now_v3.logLOG557 B
‹redacted›.tmpTMP557 B
raw3.pyPY555 B
gather.shSH552 B
postgres_db.sqlSQL551 B
deploy_16.logLOG544 B
reverse_shell.pyPY544 B
obsy.shSH535 B
sslprobe.pyPY524 B
c2_credentials.jsonJSON512 B
inb.shSH510 B
server8090.logLOG509 B
cacti_callback_server.logLOG489 B
mass_lite_rce.logLOG484 B
lf_rce_7860.logLOG466 B
obs.shSH458 B
an.shSH453 B
mitm_v7_c2_3344.logLOG442 B
obs60.shSH438 B
obsx.shSH436 B
fofa_v3.logLOG416 B
hydra.logLOG411 B
cacti_shell2.logLOG410 B
tsconfig.jsonJSON400 B
raw1.pyPY396 B
login_test.pyPY390 B
base.shSH377 B
est.shSH371 B
deploy_16_v2.logLOG369 B
dep_16_final.logLOG365 B
cb9000.pyPY358 B
cb_listener.pyPY354 B
validate_code_test.logLOG353 B
mitm_probe.logLOG346 B
wordlist.txtTXT345 B
t.pyPY344 B
ptest.pyPY344 B
deploy_payload.jsonJSON342 B
poll.shSH338 B
pool_test.pyPY327 B
mitm_v7.logLOG311 B
‹redacted›.jspJSP311 B
c2.shSH309 B
.envENV303 B
‹redacted›.outOUT302 B
v3now_v5.logLOG302 B
test_pool.pyPY300 B
fofa_c2_scan.logLOG299 B
cacti_exploit.logLOG296 B
deploy_ll.shSH291 B
‹redacted›.jspJSP290 B
tp.pyPY287 B
tb.pyPY286 B
st2.pyPY281 B
ak.bakBAK277 B
scan_new_exploits.logLOG270 B
st1.pyPY268 B
claude_desktop_config.jsonJSON267 B
verify_xm.pyPY262 B
brute_c2.logLOG251 B
brute_c2_10.logLOG230 B
dec2.pyPY230 B
mitm_v7_c2.logLOG230 B
brute_c2_11.logLOG230 B
recon.pyPY226 B
deploy_178.logLOG226 B
brute_c2_1.logLOG223 B
brute_c2_3.logLOG222 B
brute_c2_8.logLOG221 B
brute_c2_4.logLOG221 B
brute_c2_5.logLOG221 B
brute_c2_7.logLOG221 B
brute_c2_9.logLOG221 B
fofa_new_exploits.logLOG204 B
cacti_callbacks.logLOG190 B
hp_status.pyPY189 B
scan10.pyPY189 B
br_stratum_found.txtTXT175 B
bf.logLOG167 B
SHA256SUMSTXT156 B
big_scan2.logLOG151 B
SHA256SUMSTXT150 B
read_payload.jsonJSON142 B
v3now_c2_v6.logLOG141 B
.envENV141 B
brute_c2_6.logLOG139 B
cacti_exploit_v2_run.logLOG135 B
http8099.logLOG135 B
mass_litellm_c2.logLOG131 B
run_cacti_exploit.logLOG131 B
fofa_scan_v2.logLOG131 B
cacti_exploit_v3_run.logLOG130 B
helper.logLOG120 B
mitm.pyPY113 B
validate_payload.jsonJSON103 B
server_mcp.logLOG96 B
test_mineroTXT62 B
langflow_quick.logLOG60 B
rogue.logLOG50 B
helper2.logLOG50 B
redeploy.logLOG50 B
dep_v4.logLOG44 B
cve2.pyPY39 B
shell_cacti.logLOG27 B
dep_v5.logLOG23 B
cacti_shell.logLOG19 B
brute_c2_2.logLOG18 B
exp.pyPY10 B
t1.txtTXT9 B
test.pyPY9 B
check_target.logJSP1 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.131.123.136confirmed
15.204.85.94confirmed
154.29.75.185confirmed
157.90.175.209confirmed
18.136.195.202confirmed
184.154.107.45confirmed
195.178.110.48confirmed
203.194.115.12confirmed
209.99.191.184confirmed
212.232.23.75confirmed
3.128.117.168confirmed
32.236.62.30confirmed
34.254.202.253confirmed
38.60.91.186confirmed
38.76.208.29confirmed