huntback / IP intelligence

89.108.76.200

RESIDENTIALloot-ipcoinminerexploitmalwareopen-directorytunnel

Intelligence

ASN / OrgAS197695 · "Domain names registrar REG.RU", Ltd
CountryRussia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports21, 22, 25, 80, 110, 143, 443, 465, 587, 993, 995, 5432, 7777, 8080, 8443, 8888
Servicenginx/1.30.2 · FASTPANEL
Productsnginx
Loot harvested9 file(s), 8 KB · coinminer, exploit, malware, tunnel

Open directory contents (9)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
__init__.pyPY3 KB
config.jsonJSON2 KB
modeling_evil.pyPY1 KB
pytorch_model.binBIN516 B
config.jsonJSON414 B
tokenizer.jsonJSON311 B
tokenizer_config.jsonJSON155 B
SHA256SUMSTXT150 B
configuration_evil.pyPY127 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

2.26.229.254confirmed
45.151.122.34confirmed
153.75.86.243likely
1.55.92.39lead
102.134.50.57lead
102.210.149.141lead
103.114.160.232lead
103.117.100.93lead
103.120.218.130lead
103.124.105.205lead
103.40.161.225lead
103.72.99.73lead
104.194.132.108lead
104.194.133.83lead
104.194.135.131lead