Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

8.212.181.6

DATACENTERoperator-submittedloot-ipc2cobalt-strikeexposed-secretforced-loot

Intelligence

ASN / OrgAS45102 · Alibaba (US) Technology Co., Ltd.
CountryPhilippines
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8000, 8080
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested77 file(s), 271641 KB · c2, cobalt-strike, exploit, exposed-secret, forced-loot, havoc

Open directory contents (77)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
TeamServerImageTXT97.9 MB
go1.22.5.linux-amd64.tar.gzGZ65.8 MB
TeamServerImageTXT37.9 MB
PROFOUND_INTERNAL.binBIN23.6 MB
OCCASIONAL_BRILLIANT.binBIN23.6 MB
evilginxTXT14.7 MB
winvnc.x64.dllPE366 KB
winvnc.x86.dllPE281 KB
rpmdb.sqliteSQLITE212 KB
archives.binBIN134 KB
demon.x64.binBIN101 KB
demon.x64.dllPE100 KB
keys.logLOG86 KB
http_proxy.goGO60 KB
terminal.goGO53 KB
.bash_historyBASH_H44 KB
rpmdb.sqlite-shmSQLITE32 KB
phishlet.goGO29 KB
config.goGO20 KB
data.dbDB20 KB
sessions.binBIN18 KB
CHANGELOGTXT9 KB
certdb.goGO8 KB
modules.txtTXT6 KB
receiver.logLOG6 KB
zhenai.yamlYAML5 KB
db_session.goGO5 KB
README.mdMD5 KB
main.goGO5 KB
config.jsonJSON4 KB
help.goGO4 KB
utils.goGO3 KB
table.goGO3 KB
c2info.binBIN3 KB
log.goGO3 KB
receiver.pyPY3 KB
cnblogs.yamlYAML3 KB
session.goGO3 KB
switch_site.shSH2 KB
banner.goGO2 KB
gophish.goGO2 KB
database.goGO2 KB
‹redacted›.storeSTORE2 KB
‹redacted›.storeSTORE2 KB
‹redacted›.storeSTORE2 KB
blacklist.goGO2 KB
nameserver.goGO2 KB
ca.keyKEY1 KB
teamserverTXT1 KB
grab.ps1PS11 KB
.cobaltstrike.beacon_keysBEACON1 KB
http_server.goGO1 KB
parser.goGO1 KB
teamserverTXT1 KB
beacons.binBIN976 B
packed-refsTXT970 B
services.binBIN949 B
source-common.shSH904 B
shared.goGO902 B
k.jsJS811 B
scripts.goGO787 B
example.yamlYAML623 B
targets.binBIN623 B
‹redacted›.authAUTH512 B
‹redacted›.authAUTH512 B
listeners.binBIN366 B
credentials.binBIN345 B
c2lintTXT309 B
configTXT262 B
build_run.batBAT170 B
hosteditems.binBIN141 B
build.batBAT89 B
beacons.binBIN82 B
descriptionTXT73 B
.gitignoreGITIGN61 B
downloads.binBIN48 B
HEADTXT23 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
101.89.149.227confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.200.73.97confirmed
104.233.217.66confirmed
106.116.230.110confirmed
107.189.1.175confirmed
109.73.199.99confirmed