huntback / IP intelligence

16.171.12.83

DATACENTERoperator-submittedloot-ipc2exploitmalwaremeterpreter

Intelligence

ASN / OrgAS16509 · Amazon.com, Inc.
CountrySweden
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8080
ServiceSimpleHTTP/0.6 Python/3.14.4 · Directory listing for /
Loot harvested19 file(s), 673 KB · c2, exploit, malware, meterpreter, mozi, pe-binary

Open directory contents (19)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
stageless.b64B64333 KB
stage.binPE249 KB
rat.exePE16 KB
meterpreter.dll.b64B6412 KB
‹redacted›.vbsVBS11 KB
meterpreter.b64B6410 KB
meterpreter_stage.dllPE9 KB
meterpreter.exePE7 KB
stager.ps1PS15 KB
final.ps1PS14 KB
payload.ps1PS14 KB
meterpreter_stage.ps1PS13 KB
run.ps1PS13 KB
rat.ps1PS11 KB
meterpreter_stage.binBIN771 B
‹redacted›.vbsVBS431 B
loader.ps1PS1397 B
obfuscated.ps1PS1340 B
inject.ps1PS1215 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

119.45.236.76lead
178.104.188.135lead
3.84.186.180lead
34.254.202.253lead
38.9.96.215lead
85.198.101.85lead
94.130.22.61lead
95.133.253.15lead