Live findsCVE IntelConsoleStart free
huntback / IP intelligence

185.157.161.93

DATACENTERoperator-submittedc2coinminerelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS42675 · Obehosting AB
CountrySweden
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 8089, 8765
Loot harvested503 file(s), 118354 KB · c2, coinminer, elf-binary, exploit, exposed-secret, forced-loot

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
aarch64-musl.tgzTGZ103.1 MB
cdn_x64.binELF2.2 MB
cdn_arm.binELF1.9 MB
b4.tarTAR1.6 MB
adminaudit_data.jsonJSON600 KB
exynos-memELF575 KB
bassols_osc_final.htmlHTML216 KB
bassols_osc_v39b.htmlHTML216 KB
_mrgchkTXT171 KB
bassols_prod.htmlHTML158 KB
bp.htmlHTML158 KB
cfdomains_prio.txtTXT109 KB
cfdomains.txtTXT109 KB
results.jsonJSON105 KB
chunk_1.sqlSQL102 KB
chunk_2.sqlSQL102 KB
chunk_3.sqlSQL102 KB
chunk_2.sqlSQL102 KB
chunk_3.sqlSQL102 KB
chunk_2.sqlSQL102 KB
chunk_1.sqlSQL102 KB
chunk_2.sqlSQL102 KB
chunk_3.sqlSQL102 KB
chunk_3.sqlSQL102 KB
chunk_1.sqlSQL102 KB
chunk_0.sqlSQL102 KB
chunk_0.sqlSQL102 KB
chunk_0.sqlSQL102 KB
_chkpageTXT100 KB
configTXT49 KB
snap22.b64B6446 KB
_dbi4217.jsJS26 KB
_w3b_3368.jsJS26 KB
_w3b_5634.jsJS26 KB
_w3b_1196.jsJS26 KB
_w3b_5146.jsJS26 KB
_access_4229.jsJS26 KB
_vatech_5046.jsJS26 KB
_w3_884.jsJS26 KB
_w3b_1055.jsJS26 KB
_w3b_2083.jsJS26 KB
_pv_2996.jsJS26 KB
_w3b_1562.jsJS26 KB
_pv_5133.jsJS26 KB
_w3b_5051.jsJS26 KB
_w3_1076.jsJS26 KB
_w3b_2735.jsJS26 KB
_w3b_3921.jsJS26 KB
_w3b_4217.jsJS26 KB
_w3_1055.jsJS26 KB
_w3_2735.jsJS26 KB
_w3b_4533.jsJS26 KB
_w3_1258.jsJS26 KB
_w3_2083.jsJS26 KB
_w3_3921.jsJS26 KB
_w3_4533.jsJS26 KB
_w3b_1076.jsJS26 KB
_w3b_4217x.jsJS26 KB
_w3b_601.jsJS26 KB
_w3_1562.jsJS26 KB
_w3_4793.jsJS26 KB
_s4217.jsJS26 KB
_w3_2454.jsJS26 KB
_w3b_4793.jsJS26 KB
_w3b_2609.jsJS26 KB
_w3_5054.jsJS26 KB
_w3b_884.jsJS26 KB
_w3_3302.jsJS26 KB
_w3_90.jsJS26 KB
_w3b_766.jsJS26 KB
_yaccess_4229.jsJS26 KB
_w3_2570.jsJS26 KB
_w3b_2570.jsJS26 KB
‹redacted›.origORIG26 KB
_w3b_1778.jsJS26 KB
_w3_1648.jsJS26 KB
‹redacted›.origORIG26 KB
_w3b_1648.jsJS26 KB
_w3b_90.jsJS26 KB
_dbi_5051.jsJS26 KB
_pv_5600.jsJS25 KB
_pv_5616.jsJS25 KB
_pv_5615.jsJS25 KB
_pv.jsJS25 KB
_pv_739.jsJS25 KB
_pv_5614.jsJS25 KB
_pv_5623.jsJS25 KB
_pv_5625.jsJS25 KB
_pv_5605.jsJS25 KB
_pv_5626.jsJS25 KB
_pv_5620.jsJS25 KB
_pv_4917.jsJS25 KB
_pv_5618.jsJS25 KB
_pv_5627.jsJS25 KB
_pv_5601.jsJS25 KB
_pv_5606.jsJS25 KB
_pv_5595.jsJS25 KB
_pv_5608.jsJS25 KB
_pv_5613.jsJS25 KB
_pv_5604.jsJS25 KB
_pv_5609.jsJS25 KB
_pv_5622.jsJS25 KB
_pv_5603.jsJS25 KB
chunk_4.sqlSQL12 KB
overnight_stats.jsonJSON9 KB
parse_wave.pyPY8 KB
ldELF8 KB
overnight_stats.jsonJSON8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
parse_wave.pyPY8 KB
overnight_stats.jsonJSON8 KB
overnight_stats.jsonJSON7 KB
parse_wave.pyPY7 KB
overnight_stats.jsonJSON7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
parse_wave.pyPY7 KB
overnight_stats.jsonJSON7 KB
parse_wave.pyPY6 KB
parse_wave.pyPY6 KB
_cdnchk1TXT6 KB
bt_cmd.txtTXT6 KB
parse_wave.pyPY6 KB
parse_wave.pyPY6 KB
parse_wave.pyPY6 KB
overnight_stats.jsonJSON6 KB
overnight_stats.jsonJSON6 KB
overnight_stats.jsonJSON6 KB
overnight_stats.jsonJSON6 KB
probe603.datDAT6 KB
_cdnchk2TXT6 KB
overnight_stats.jsonJSON5 KB
bt2.phpPHP5 KB
followup_305.pyPY5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
certscan.pyPY5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
lf4.htmlHTML5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
overnight_stats.jsonJSON5 KB
stats.pyPY4 KB
overnight_stats.jsonJSON4 KB
beacons24h.tsvTSV4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
overnight_stats.jsonJSON4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
overnight_stats.jsonJSON4 KB
login3.htmlHTML4 KB
overnight_stats.jsonJSON4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
overnight_stats.jsonJSON4 KB
addrfix3.phpPHP4 KB
home.htmlHTML4 KB
home2.htmlHTML4 KB
lf.htmlHTML4 KB
lf2.htmlHTML4 KB
lf3.htmlHTML4 KB
login.htmlHTML4 KB
login2.htmlHTML4 KB
overnight_stats.jsonJSON4 KB
overnight_stats.jsonJSON4 KB
overnight_stats.jsonJSON4 KB
overnight_stats.jsonJSON4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY4 KB
stats.pyPY3 KB
stats.pyPY3 KB
stats.pyPY3 KB
overnight_stats.jsonJSON3 KB
stats.pyPY3 KB
build_targets.pyPY3 KB
agency_boxes.jsonJSON3 KB
adminplant.phpPHP3 KB
stats.pyPY3 KB
stats.pyPY3 KB
stats.pyPY3 KB
build_targets_rest.pyPY3 KB
bfilter2.pyPY3 KB
build_poly_deploy.shSH3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
addrfix2.phpPHP3 KB
bfilter.pyPY3 KB
extract_state.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
dispatch.pyPY3 KB
build_table.pyPY3 KB
bschk.phpPHP2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
extract_state.pyPY2 KB
exectest4.phpPHP2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
build_targets_cjs.pyPY2 KB
build_gone_rest.pyPY2 KB
adminaudit.phpPHP2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
extract_state.pyPY2 KB
adminkill.phpPHP2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
cdncheck.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
dispatch.pyPY2 KB
btdump.datDAT2 KB
agentA_results.txtTXT2 KB
recaptcha_token.txtTXT2 KB
agentA_assign.txtTXT2 KB
run3.pyPY2 KB
cf1z.pyPY2 KB
bundle_extract.pyPY1 KB
cfrprobe.shSH1 KB
agentD_assign.txtTXT1 KB
exectest.phpPHP1 KB
cdncheck.pyPY1 KB
cdncheck.pyPY1 KB
cdncheck.pyPY1 KB
card_dedupe.phpPHP1 KB
ajmode.phpPHP1 KB
run2.pyPY1 KB
setup.pyPY1 KB
cf2b.pyPY1 KB
cf1y.pyPY1 KB
cf2.pyPY1 KB
‹redacted›.cmdCMD1 KB
http.logLOG1 KB
bt_collect.pyPY1 KB
cf1x.pyPY1 KB
exp.cC1 KB
run_exp.pyPY1 KB
probe.pyPY1 KB
hdrs.txtTXT1 KB
cfrh_1224.shSH1 KB
cf1.pyPY1 KB
rq.pyPY1 KB
cfr314js.shSH1 KB
cfrh_1351.shSH1 KB
cfrh_1550.shSH1 KB
chunk_4.sqlSQL1 KB
chunk_4.sqlSQL1 KB
cfrh_1814.shSH1 KB
cfrh_1965.shSH1 KB
cfrh_2035.shSH1 KB
cfrh_298.shSH1 KB
cfrh_314.shSH1 KB
cfrh_1778.shSH1 KB
.rc1.shSH1 KB
collector.logLOG1 KB
cfr1778b.shSH1 KB
collect.pyPY1 KB
bhp.shSH1 KB
cfrperp.shSH1 KB
cfrpatch2.shSH1 KB
‹redacted›.cmdCMD1 KB
cfr314f.shSH1 KB
agdiag.phpPHP1 KB
bhp2.shSH1 KB
cf.tar.gzGZ1 KB
trial2.pyPY953 B
‹redacted›.cmdCMD942 B
‹redacted›.cmdCMD941 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
‹redacted›.cmdCMD926 B
build_prev.pyPY924 B
build_prev.pyPY899 B
c1233.jsonJSON849 B
trial.pyPY845 B
cfrperp2.shSH842 B
cfr314fs3.shSH840 B
cfr1267d.shSH829 B
cfrmp2_562.shSH779 B
cfrmp3_562.shSH776 B
super.plPL760 B
jar2.txtTXT753 B
copy_fail_exp.pyPY732 B
cfrmp2_1318.shSH711 B
cfrmp3_1318.shSH707 B
‹redacted›.cmdCMD706 B
cfrmp2_733.shSH689 B
cfrmp2_812.shSH687 B
cfrmp2_3500.shSH685 B
cfrmp2_529.shSH685 B
cfrmp3_733.shSH685 B
cfrmp3_812.shSH684 B
cfr2035.shSH682 B
cfrmp3_529.shSH682 B
cfrmp2_283.shSH681 B
cfrmp3_3500.shSH681 B
cfrmp3_283.shSH678 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

209.141.43.95confirmed
47.102.192.23confirmed