huntback / IP intelligence

213.136.79.115

DATACENTERloot-ipc2coinminerelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS51167 · Contabo GmbH
CountryFrance
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports21, 22, 25, 80, 443, 8000, 8080, 8443, 8888, 8898, 2222
Loot harvested460 file(s), 1301856 KB · c2, coinminer, elf-binary, exploit, exposed-secret, forced-loot

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
netd_save.tar.gzGZ258.0 MB
‹redacted›.restoreRESTOR133.5 MB
rockyou.txtTXT133.4 MB
state.dbDB124.7 MB
loot_completo.tar.gzGZ66.6 MB
loot_final2.tar.gzGZ66.6 MB
uvTXT62.6 MB
loot_f2_part_aaTXT45.0 MB
loot_final_part_aaTXT45.0 MB
loot_part_aaTXT45.0 MB
loot_v2_part_aaTXT45.0 MB
docker-binTXT31.2 MB
masscan_B.txtTXT24.6 MB
pt12.txtTXT22.3 MB
tirithTXT21.7 MB
loot_final_part_abTXT21.6 MB
loot_f2_part_abTXT21.6 MB
loot_v2_part_abTXT21.6 MB
loot_part_abTXT21.6 MB
panel_c.txtTXT17.9 MB
targets_B.txtTXT12.0 MB
kali-docker.tar.gzGZ5.9 MB
agent.logLOG5.0 MB
models_dev_cache.jsonJSON4.4 MB
pv.logLOG1.8 MB
dropbear_aarch64ELF1.1 MB
CHANGELOG.mdMD848 KB
errors.logLOG819 KB
masscan_B.logLOG547 KB
all_containers_inspect.jsonJSON383 KB
gateway.logLOG368 KB
uvxELF342 KB
cands.txtTXT335 KB
request_dump_20260826_064753_c6f620e6_20260828_213134_083122.jsonJSON331 KB
request_dump_20260721_091813_e93b042a_20260721_112511_970418.jsonJSON327 KB
request_dump_20260721_091813_e93b042a_20260721_113811_172469.jsonJSON301 KB
request_dump_20260826_064753_c6f620e6_20260828_212724_853203.jsonJSON280 KB
request_dump_20260818_111005_b47f3fbf_20260821_173231_959819.jsonJSON278 KB
acme.shSH265 KB
request_dump_20260726_234717_ae92e36e_20260727_001026_425585.jsonJSON254 KB
attack_results.txtTXT248 KB
request_dump_20260726_234717_ae92e36e_20260729_031647_428282.jsonJSON225 KB
request_dump_20260726_234717_ae92e36e_20260727_001015_033403.jsonJSON222 KB
autoharden.logLOG188 KB
request_dump_20260826_064753_c6f620e6_20260830_190321_961080.jsonJSON180 KB
request_dump_20260731_182033_804991f4_20260801_052141_155296.jsonJSON175 KB
request_dump_20260731_182033_804991f4_20260801_052120_566770.jsonJSON175 KB
loot_sin_dumps.tar.gzGZ162 KB
request_dump_20260726_234717_ae92e36e_20260727_000203_390182.jsonJSON157 KB
request_dump_20260722_063425_fda9ca56_20260722_063651_758644.jsonJSON148 KB
request_dump_20260902_001126_c887bd80_20260913_234119_813891.jsonJSON138 KB
request_dump_20260902_001126_c887bd80_20260913_233201_098648.jsonJSON138 KB
request_dump_20260902_001126_c887bd80_20260913_200026_778512.jsonJSON138 KB
request_dump_20260902_001126_c887bd80_20260911_203743_796213.jsonJSON138 KB
masscan_oct8.logLOG136 KB
masscan.logLOG119 KB
request_dump_20260731_182033_804991f4_20260801_175738_950952.jsonJSON116 KB
kanban.dbDB116 KB
request_dump_20260731_182033_804991f4_20260801_175645_383211.jsonJSON115 KB
proxy.py-2.3.1.tar.gzGZ102 KB
request_dump_20260723_201731_ff3eef28_20260723_205029_783650.jsonJSON97 KB
request_dump_20260723_201731_ff3eef28_20260723_204937_267406.jsonJSON97 KB
request_dump_20260723_201731_ff3eef28_20260723_204900_578189.jsonJSON97 KB
request_dump_20260723_201731_ff3eef28_20260723_204824_699390.jsonJSON97 KB
request_dump_20260913_234641_696324b4_20260913_235102_408583.jsonJSON74 KB
request_dump_20260913_234641_696324b4_20260915_224737_004546.jsonJSON74 KB
request_dump_20260915_231654_33a3dfe7_20260915_232021_659994.jsonJSON74 KB
request_dump_20260913_235106_73c63c_20260913_235451_155152.jsonJSON73 KB
PKG-INFOTXT73 KB
mc.logLOG71 KB
gateway-shutdown-diag.logLOG69 KB
README.mdMD56 KB
dump_bg.logLOG37 KB
masscan_nezha.logLOG36 KB
scanner.pyPY35 KB
verification_evidence.dbDB32 KB
pstree_full.txtTXT26 KB
ptree.txtTXT22 KB
auto-persist-host.shSH21 KB
harden_ssh.shSH20 KB
dns_baidu.shSH20 KB
synology_dsm.shSH20 KB
auto-persist-host.shSH19 KB
zyxel_gs1900.shSH18 KB
ps.txtTXT18 KB
dns_pleskxml.shSH18 KB
hydra_recon.pyPY18 KB
byteplus_alb.shSH17 KB
dns_hetznercloud.shSH17 KB
entrypoint.shSH17 KB
entrypoint.shSH16 KB
ssh.shSH16 KB
recon_hydra.pyPY16 KB
dns_azure.shSH16 KB
haproxy.shSH16 KB
masscan_eu.logLOG16 KB
dns_selectel.shSH15 KB
HERMES_USAGE.mdMD15 KB
dns_edgedns.shSH15 KB
dns_hostup.shSH14 KB
dns_arubabusiness.shSH14 KB
unifi.shSH13 KB
panos.shSH13 KB
portainer_bruteforce.pyPY12 KB
smtp.shSH12 KB
dns_aws.shSH12 KB
truenas.shSH12 KB
dns_freedns.shSH12 KB
dns_openstack.shSH11 KB
dns_kas.shSH11 KB
dns_omglol.shSH11 KB
dns_yandex360.shSH11 KB
docker.shSH11 KB
dns_inwx.shSH10 KB
dns_timeweb.shSH10 KB
dns_cyon.shSH10 KB
dns_oci.shSH10 KB
elementor_vulnerability_report.mdMD10 KB
dns_namecheap.shSH10 KB
dns_huaweicloud.shSH10 KB
dns_bhosted.shSH10 KB
dns_1984hosting.shSH10 KB
lighttpd.shSH9 KB
dns_sotoon.shSH9 KB
truenas_ws.shSH9 KB
ps.txtTXT9 KB
dns_dnsservices.shSH9 KB
gateway-exit-diag.logLOG9 KB
dns_euserv.shSH9 KB
multideploy.shSH9 KB
dns_openprovider.shSH9 KB
dns_hostingde.shSH8 KB
dns_volcengine.shSH8 KB
dns_dynv6.shSH8 KB
dns_gname.shSH8 KB
dns_comlaude.shSH8 KB
dns_yc.shSH8 KB
openstack.shSH8 KB
dns_jd.shSH8 KB
dns_conoha.shSH8 KB
dns_ovh.shSH8 KB
dns_cpanel_uapi.shSH8 KB
dns_geoscaling.shSH7 KB
cpanel_uapi.shSH7 KB
aws_ses.shSH7 KB
dns_loopia.shSH7 KB
dns_dyn.shSH7 KB
netd-docker.shSH7 KB
phoenix-docker.shSH7 KB
acme.sh.completionCOMPLE7 KB
dns_bunny.shSH7 KB
dns_dgon.shSH7 KB
dns_ispconfig.shSH7 KB
dns_beget.shSH7 KB
dns_infoblox_uddi.shSH7 KB
dns_world4you.shSH7 KB
dns_cf.shSH7 KB
entrypoint.shSH7 KB
dns_opnsense.shSH7 KB
.skills_prompt_snapshot.jsonJSON6 KB
dns_wedos.shSH6 KB
vault.shSH6 KB
extract_openai.pyPY6 KB
dns_mythic_beasts.shSH6 KB
dns_eurodns.shSH6 KB
dns_rcode0.shSH6 KB
dns_pdns.shSH6 KB
dns_clouddns.shSH6 KB
dns_spaceship.shSH6 KB
dns_ali.shSH6 KB
mass_docker_harvest.pyPY6 KB
windows_rdp.shSH6 KB
dns_sitehost.shSH6 KB
dns_gd.shSH6 KB
dns_he.shSH6 KB
dns_poweradmin.shSH6 KB
DockerfileTXT6 KB
dns_rackspace.shSH6 KB
baidu_cdn.shSH6 KB
dns_autodns.shSH6 KB
dns_simply.shSH6 KB
dns_subreg.shSH6 KB
openmediavault.shSH6 KB
.sys-helper.shSH6 KB
dns_tencent.shSH6 KB
routeros.shSH6 KB
ruckus.shSH6 KB
dns_one.shSH6 KB
fortigate.shSH5 KB
dns_exoscale.shSH5 KB
dns_hostinger.shSH5 KB
dns_qc.shSH5 KB
DockerfileTXT5 KB
dns_constellix.shSH5 KB
dns_glesys.shSH5 KB
nezha_hunt.pyPY5 KB
dns_dnsimple.shSH5 KB
dns_virakcloud.shSH5 KB
dns_cloudns.shSH5 KB
dns_mijnhost.shSH5 KB
dns_active24.shSH5 KB
dns_infomaniak.shSH5 KB
dns_miab.shSH5 KB
dns_openprovider_rest.shSH5 KB
dns_level27.shSH5 KB
dns_online.shSH5 KB
.usage.jsonJSON5 KB
dns_czechia.shSH5 KB
host-watchdog.shSH5 KB
dns_nic.shSH5 KB
dns_dynu.shSH5 KB
dns_nw.shSH5 KB
dns_linode_v4.shSH5 KB
dns_schlundtech.shSH5 KB
dns_transip.shSH5 KB
dns_cpanel.shSH5 KB
dns_gandi_livedns.shSH5 KB
dns_azion.shSH5 KB
dns_efficientip.shSH5 KB
dns_websupport.shSH5 KB
dns_servercow.shSH5 KB
dns_desec.shSH5 KB
dns_creoline.shSH5 KB
dns_internetbs.shSH5 KB
dns_bh.shSH5 KB
localcopy.shSH5 KB
proxmoxve.shSH5 KB
ghost_dump.pyPY5 KB
dns_gcloud.shSH5 KB
dns_gcore.shSH5 KB
dns_artfiles.shSH5 KB
keyhelp.shSH4 KB
dns_namecom.shSH4 KB
dns_da.shSH4 KB
dns_nsupdate.shSH4 KB
dns_joker.shSH4 KB
dns_mydnsjp.shSH4 KB
dns_durabledns.shSH4 KB
dns_aurora.shSH4 KB
dns_netcup.shSH4 KB
dns_curanet.shSH4 KB
dns_ultra.shSH4 KB
panel_hunt.pyPY4 KB
ghost_dump.shSH4 KB
MASTER_INDEX.mdMD4 KB
dns_selfhost.shSH4 KB
dns_laodc.shSH4 KB
dns_linode.shSH4 KB
dns_njalla.shSH4 KB
gcore_cdn.shSH4 KB
dns_kappernet.shSH4 KB
proxmoxbs.shSH4 KB
dns_muumuu.shSH4 KB
dns_la.shSH4 KB
fritzbox.shSH4 KB
opsgenie.shSH4 KB
dns_porkbun.shSH4 KB
dns_alviy.shSH4 KB
dns_veesp.shSH4 KB
dns_unoeuro.shSH4 KB
dns_googledomains.shSH4 KB
dns_zoneedit.shSH4 KB
dns_neodigit.shSH4 KB
dns_easydns.shSH4 KB
setup.pyPY4 KB
peplink.shSH4 KB
fleet-push.shSH4 KB
dns_domeneshop.shSH4 KB
dns_mgwm.shSH4 KB
dns_pointhq.shSH4 KB
dns_netlify.shSH4 KB
deploy_host.shSH4 KB
dns_scaleway.shSH4 KB
dns_ipv64.shSH4 KB
mailgun.shSH4 KB
dns_arvan.shSH4 KB
dns_hexonet.shSH4 KB
recon_read.pyPY4 KB
dns_acmedns.shSH4 KB
dns_ionos.shSH4 KB
dns_me.shSH4 KB
dns_ionos_cloud.shSH4 KB
dns_udr.shSH4 KB
dns_lua.shSH4 KB
dns_nsone.shSH3 KB
dns_edgecenter.shSH3 KB
dns_cn.shSH3 KB
dns_zone.shSH3 KB
dns_opusdns.shSH3 KB
dns_misaka.shSH3 KB
hydra_185.txtTXT3 KB
install.shSH3 KB
dns_vultr.shSH3 KB
dns_infoblox.shSH3 KB
dns_namesilo.shSH3 KB
dns_dpi.shSH3 KB
dns_duckdns.shSH3 KB
dns_rackcorp.shSH3 KB
dns_dp.shSH3 KB
dns_regru.shSH3 KB
bark.shSH3 KB
dns_variomedia.shSH3 KB
dns_calrissia.shSH3 KB
dns_leaseweb.shSH3 KB
dns_vscale.shSH3 KB
dns_lexicon.shSH3 KB
vault_cli.shSH3 KB
README.mdMD3 KB
dns_freemyip.shSH3 KB
dns_vercel.shSH3 KB
dns_ddnss.shSH3 KB
dns_ad.shSH3 KB
cleverreach.shSH3 KB
dns_rage4.shSH3 KB
dns_anx.shSH3 KB
dns_fornex.shSH3 KB
autoharden.shSH3 KB
dns_dnsexit.shSH3 KB
dns_zilore.shSH3 KB
dns_nanelo.shSH3 KB
authorized_keysTXT3 KB
dns_acmeproxy.shSH3 KB
.bashrcBASHRC3 KB
dns_nederhost.shSH3 KB
dns_bookmyname.shSH3 KB
exim4.shSH3 KB
qiniu.shSH3 KB
kemplm.shSH3 KB
mail.shSH3 KB
vsftpd.shSH3 KB
dns_cdmon.shSH3 KB
consul.shSH3 KB
dns_firestorm.shSH3 KB
dns_kinghost.shSH3 KB
fetch_cves.pyPY3 KB
ifttt.shSH2 KB
directadmin.shSH2 KB
config.yamlYAML2 KB
sweep_version.pyPY2 KB
edgio.shSH2 KB
nz_cb.logLOG2 KB
dns_limacity.shSH2 KB
telegram_commands.logLOG2 KB
dns_knot.shSH2 KB
dns_west_cn.shSH2 KB
kong.shSH2 KB
dns_mydevil.shSH2 KB
dns_zonomi.shSH2 KB
ali_dcdn.shSH2 KB
ali_cdn.shSH2 KB
docker7_hits.txtTXT2 KB
telegram.shSH2 KB
strongswan.shSH2 KB
dns_dnshome.shSH2 KB
keyhelp_api.shSH2 KB
pushover.shSH2 KB
dns_maradns.shSH2 KB
dns_technitium.shSH2 KB
dns_dreamhost.shSH2 KB
dingtalk.shSH2 KB
hunt.logLOG2 KB
sendgrid.shSH2 KB
dns_nm.shSH2 KB
cqhttp.shSH2 KB
teams.shSH2 KB
waha.shSH2 KB
netlify.shSH2 KB
gitlab.shSH2 KB
dns_ipprojects.shSH1 KB
hydra_195.txtTXT1 KB
postmark.shSH1 KB
xmpp.shSH1 KB
debug_fix.pyPY1 KB
watchdog.shSH1 KB
watchdog-docker.shSH1 KB
mailcow.shSH1 KB
MEMORY.mdMD1 KB
hunt_masscan.shSH1 KB
vw_akey_std.pyPY1 KB
dns_nsd.shSH1 KB
mattermost.shSH1 KB
dns_doapi.shSH1 KB
openai_token_real.txtTXT1 KB
dns_df.shSH1 KB
launch_round2.shSH1 KB
id_rsaTXT1 KB
gotify.shSH1 KB
discord.shSH1 KB
dns_tele3.shSH1 KB
pushbullet.shSH1 KB
ntfy.shSH1 KB
cachefly.shSH1 KB
mydevil.shSH1 KB
weixin_work.shSH1 KB
slack.shSH1 KB
customscript.shSH1 KB
dns_he_ddns.shSH1 KB
dns_myapi.shSH1 KB
callmebotWhatsApp.shSH1 KB
targets.txtTXT1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.117.136.137confirmed
103.131.51.199confirmed
104.233.217.108confirmed
2.24.204.250confirmed
203.194.115.12confirmed
38.60.91.186confirmed
41.223.30.7confirmed
43.129.51.137confirmed
45.115.26.30confirmed
61.185.204.20confirmed
87.199.203.242confirmed
95.182.88.43confirmed
128.199.95.197lead
34.82.20.146lead
8.208.25.167lead