Live findsCVE IntelConsoleStart free
huntback / IP intelligence

154.36.183.100

RESIDENTIALoperator-submittedloot-ipc2elf-binaryexposed-secretmalware

Intelligence

ASN / OrgAS979 · NetLab Global
CountryMU
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 8443, 8899, 18089, 443
ServiceBaseHTTP/0.6 Python/3.8.10 · Agent Console — Session Error
Productsnginx
Loot harvested18 file(s), 7772 KB · c2, elf-binary, exposed-secret, malware, tunnel

Open directory contents (18)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
agent2ELF7.5 MB
install_panel.shSH50 KB
btmonitoragent.shSH19 KB
watch_station_fix.pyPY3 KB
oms2303b.pyPY3 KB
vps_login5.pyPY2 KB
vps_login4.pyPY2 KB
migrate.shSH2 KB
vps_login2.pyPY1 KB
vps_login3.pyPY1 KB
setup3.shSH1 KB
vps_socks.pyPY1 KB
chaintest.shSH865 B
killold.shSH769 B
.bash_historyBASH_H341 B
authorized_keysTXT311 B
vps_socks.logLOG20 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.39.79.102confirmed
104.21.23.192confirmed
109.122.196.145confirmed
111.223.247.165confirmed
131.123.43.239confirmed
138.68.153.82confirmed
139.87.74.49confirmed
139.87.80.68confirmed
143.92.57.247confirmed
154.217.251.226confirmed
157.173.115.165confirmed
159.65.168.239confirmed
16.59.141.234confirmed
167.104.160.76confirmed
168.138.221.255confirmed