Live findsCVE IntelConsoleStart free
huntback / IP intelligence

176.104.108.18

RESIDENTIALoperator-submittedopen-directoryexploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS198371 · NINET Company Nis d.o.o.
CountrySerbia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports21, 22, 993, 6379, 80, 443, 25, 465, 587
ServiceApache/2.4.58 (Ubuntu) · Index of /
Productsapache
JARM27d40d40d00040d00042d43d000000b5ce48eb9aaa95d750e8df42b900e12b
Loot harvested17 file(s), 19113 KB · exploit, exposed-secret, malware, mozi, pe-binary

Open directory contents (17)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
ip2location.binBIN5.2 MB
SentinelOneInstaller-32bit_windows_legacy_v2_1_0_93.exePE2.7 MB
SentinelOneInstaller-64bit_windows_legacy_v2_1_0_93.exePE2.7 MB
nmap-service-probesTXT2.5 MB
ip2location.tar.gzGZ1.5 MB
WindowsServer2003.WindowsXP-KB968730-x64-ENU.exePE1.4 MB
nartac.exePE1.1 MB
WindowsXP-KB968730-x86-ENU.exePE735 KB
WindowsServer2003-KB968730-x86-ENU.exePE732 KB
ir-exe.htmlHTML70 KB
ir-mix.htmlHTML47 KB
ja4t-engine-explainer.htmlHTML36 KB
bandwidth.ps1PS14 KB
bandwidth_bez_timeseries.ps1PS13 KB
eset-deinstall.ps1PS11 KB
Certificates.zipZIP1 KB
sentinel-proxy.ps1PS1290 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

143.110.251.6likely
192.227.196.181likely
74.88.7.20likely
102.204.108.13lead
102.90.109.1lead
103.103.21.109lead
103.12.205.68lead
103.140.1.129lead
103.170.204.234lead
103.170.217.170lead
103.181.143.99lead
103.183.75.223lead
103.185.249.13lead
103.84.159.55lead
103.9.206.129lead