Live findsCVE IntelConsoleStart free
huntback / IP intelligence

38.60.227.210

DATACENTERloot-ipc2coinminerelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS138915 · Kaopu Cloud HK Limited
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score54/100
Open ports22, 80, 81, 111, 443, 445, 4444, 4445, 5555, 8000, 8080, 8082, 8083, 8085, 8088, 8099
ServiceWelcome to nginx!
Productsgitlab, nginx
JARM2ad2ad0002ad2ad00042d42d00000000f78d2dc0ce6e5bbc5b8149a4872356
Loot harvested969 file(s), 2909480 KB · coinminer, elf-binary, exploit, exposed-secret, forced-loot, gafgyt

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
5.79.90.182_SYSTEM182_SY70.2 MB
backup1.torpit.dk_SYSTEMDK_SYS70.2 MB
https___37.19.9.143_SYSTEM143_SY28.1 MB
backup01.samoffice.com_SYSTEMCOM_SY27.2 MB
https___185.63.68.228_SYSTEM228_SY27.2 MB
81.24.199.225_SYSTEM225_SY23.8 MB
51.154.232.83_SYSTEM83_SYS23.4 MB
80.93.26.8_SYSTEM8_SYST23.1 MB
80.93.26.9_SYSTEM9_SYST23.1 MB
185.173.139.35_SYSTEM35_SYS22.7 MB
https___54.38.85.75_SYSTEM75_SYS22.2 MB
109.228.53.148_SYSTEM148_SY21.9 MB
https___185.194.169.22_SYSTEM22_SYS21.8 MB
213.236.150.55_SYSTEM55_SYS21.7 MB
5.186.77.109_SYSTEM109_SY20.6 MB
https___14.36.31.158_4433_SYSTEM158_4420.6 MB
32.223.192.138_SYSTEM138_SY20.6 MB
130.255.121.72_SYSTEM72_SYS20.5 MB
104.7.89.96_SYSTEM96_SYS20.4 MB
https___77.105.230.103_444_SYSTEM103_4420.3 MB
https___82.210.13.227_SYSTEM227_SY20.2 MB
185.237.96.208_SYSTEM208_SY20.2 MB
46.140.236.188_8083_SYSTEM188_8020.2 MB
https___195.204.7.98_SYSTEM98_SYS20.1 MB
https___137.74.94.174_SYSTEM174_SY20.0 MB
https___185.17.196.133_SYSTEM133_SY19.9 MB
https___142.132.140.12_SYSTEM12_SYS19.8 MB
51.137.134.84_SYSTEM84_SYS19.8 MB
85.17.181.143_SYSTEM143_SY19.8 MB
170.118.225.26_SYSTEM26_SYS19.6 MB
https___185.157.133.51_SYSTEM51_SYS19.6 MB
204.8.15.141_SYSTEM141_SY19.5 MB
5.132.116.208_SYSTEM208_SY19.4 MB
185.183.203.101_SYSTEM101_SY19.3 MB
https___176.20.24.211_SYSTEM211_SY19.3 MB
https___50.205.55.24_SYSTEM24_SYS19.1 MB
https___139.60.210.30_SYSTEM30_SYS19.0 MB
https___153.67.100.219_8081_SYSTEM219_8019.0 MB
162.55.127.152_SYSTEM152_SY18.8 MB
https___218.33.65.6_4443_SYSTEM6_444318.8 MB
84.254.116.137_SYSTEM137_SY18.7 MB
23.119.60.200_9443_SYSTEM200_9418.5 MB
23.119.60.200_9443_sys.hH18.5 MB
198.27.85.44_SYSTEM44_SYS18.4 MB
backup01.cdmsfirst.com_SYSTEMCOM_SY18.4 MB
https___146.59.210.114_SYSTEM114_SY18.2 MB
77.44.109.113_SYSTEM113_SY18.1 MB
77.44.109.116_SYSTEM116_SY18.1 MB
80.93.17.67_SYSTEM67_SYS18.0 MB
64.79.105.18_SYSTEM18_SYS17.9 MB
https___185.45.2.96_444_SYSTEM96_44417.9 MB
194.99.44.131_SYSTEM131_SY17.8 MB
194.99.44.153_SYSTEM153_SY17.8 MB
194.99.44.158_SYSTEM158_SY17.8 MB
https___194.99.44.156_SYSTEM156_SY17.8 MB
https___194.99.44.157_SYSTEM157_SY17.8 MB
185.138.167.147_SYSTEM147_SY17.8 MB
220.156.169.110_SYSTEM110_SY17.7 MB
https___62.24.34.227_SYSTEM227_SY17.6 MB
https___38.22.230.19_SYSTEM19_SYS17.5 MB
31.172.164.197_SYSTEM197_SY17.4 MB
46.18.226.191_SYSTEM191_SY17.4 MB
https___66.209.190.143_SYSTEM143_SY17.3 MB
194.99.44.132_SYSTEM132_SY17.3 MB
194.99.44.133_SYSTEM133_SY17.3 MB
backup.bogildit.dk_SYSTEMDK_SYS17.3 MB
https___103.2.196.89_SYSTEM89_SYS17.3 MB
51.89.113.99_SYSTEM99_SYS17.3 MB
91.203.75.232_SYSTEM232_SY17.3 MB
80.209.69.204_SYSTEM204_SY17.2 MB
213.216.13.130_SYSTEM130_SY17.2 MB
41.0.147.94_SYSTEM94_SYS17.2 MB
31.172.164.143_SYSTEM143_SY17.1 MB
81.30.71.164_9443_SYSTEM164_9417.1 MB
180.150.53.252_81_SYSTEM252_8117.0 MB
103.2.196.90_SYSTEM90_SYS16.9 MB
https___77.222.223.252_SYSTEM252_SY16.8 MB
185.177.70.144_SYSTEM144_SY16.8 MB
88.202.236.106_SYSTEM106_SY16.7 MB
https___62.24.34.223_SYSTEM223_SY16.7 MB
178.239.160.50_SYSTEM50_SYS16.6 MB
5.103.25.171_SYSTEM171_SY16.6 MB
185.232.24.38_SYSTEM38_SYS16.6 MB
160.223.212.132_SYSTEM132_SY16.6 MB
103.186.156.194_SYSTEM194_SY16.5 MB
https___145.14.10.193_SYSTEM193_SY16.5 MB
176.46.225.159_SYSTEM159_SY16.4 MB
https___185.232.24.36_SYSTEM36_SYS16.4 MB
https___82.139.83.19_9443_SYSTEM19_94416.4 MB
198.55.60.81_SYSTEM81_SYS16.4 MB
https___66.19.232.71_SYSTEM71_SYS16.3 MB
185.173.167.242_SYSTEM242_SY16.3 MB
203.150.121.86_7443_SYSTEM86_74416.2 MB
https___66.209.176.39_SYSTEM39_SYS16.2 MB
91.246.8.173_SYSTEM173_SY16.2 MB
135.181.31.135_SYSTEM135_SY16.2 MB
https___195.137.172.88_SYSTEM88_SYS16.1 MB
177.136.235.163_9443_SYSTEM163_9416.1 MB
https___149.143.122.216_446_SYSTEM216_4416.1 MB
https___62.2.198.188_SYSTEM188_SY16.0 MB
https___46.102.195.198_SYSTEM198_SY15.9 MB
52.164.216.123_SYSTEM123_SY15.9 MB
https___136.144.176.16_SYSTEM16_SYS15.9 MB
109.202.192.67_SYSTEM67_SYS15.6 MB
64.113.21.87_SYSTEM87_SYS15.6 MB
167.100.46.176_SYSTEM176_SY15.6 MB
91.226.119.210_81_SYSTEM210_8115.6 MB
https___195.224.17.11_SYSTEM11_SYS15.5 MB
92.246.15.166_8100_SYSTEM166_8115.5 MB
185.151.213.73_SYSTEM73_SYS15.3 MB
89.149.54.190_SYSTEM190_SY15.3 MB
78.111.167.245_SYSTEM245_SY15.2 MB
https___78.111.167.244_SYSTEM244_SY15.2 MB
220.119.122.227_4433_SYSTEM227_4415.2 MB
85.215.223.242_SYSTEM242_SY15.2 MB
65.21.91.106_SYSTEM106_SY15.1 MB
https___185.80.186.6_SYSTEM6_SYST15.0 MB
https___81.199.129.75_SYSTEM75_SYS15.0 MB
193.192.2.197_SYSTEM197_SY14.9 MB
138.201.173.101_8080_SYSTEM101_8014.4 MB
85.238.192.35_SYSTEM35_SYS14.4 MB
103.4.172.70_SYSTEM70_SYS14.4 MB
13.74.32.25_SYSTEM25_SYS14.3 MB
https___185.4.63.155_SYSTEM155_SY14.3 MB
89.38.160.241_9443_SYSTEM241_9414.2 MB
169.58.210.157_SYSTEM157_SY14.2 MB
71.89.38.26_SYSTEM26_SYS14.1 MB
149.40.12.142_SYSTEM142_SY14.0 MB
https___23.102.32.84_SYSTEM84_SYS14.0 MB
https___62.232.229.186_SYSTEM186_SY13.9 MB
185.152.201.30_SYSTEM30_SYS13.9 MB
https___178.32.144.52_SYSTEM52_SYS13.8 MB
74.80.32.180_SYSTEM180_SY13.7 MB
64.187.180.11_SYSTEM11_SYS13.4 MB
185.151.196.181_SYSTEM181_SY13.4 MB
https___77.68.110.36_SYSTEM36_SYS13.3 MB
47.84.127.37_SYSTEM37_SYS13.1 MB
81.170.242.4_SYSTEM4_SYST12.7 MB
66.161.240.116_SYSTEM116_SY12.7 MB
78.136.73.26_SYSTEM26_SYS12.6 MB
62.210.40.240_SYSTEM240_SY12.2 MB
46.182.204.40_SYSTEM40_SYS12.2 MB
https___46.182.204.38_SYSTEM38_SYS12.2 MB
84.215.97.114_SYSTEM114_SY12.1 MB
1.244.117.29_SYSTEM29_SYS12.0 MB
91.203.75.251_SYSTEM251_SY11.9 MB
backup.mtccloud.com_SYSTEMCOM_SY11.6 MB
https___82.223.210.39_448_SYSTEM39_44811.6 MB
81.173.1.227_SYSTEM227_SY11.5 MB
46.226.233.126_SYSTEM126_SY11.3 MB
https___31.149.66.243_SYSTEM243_SY11.0 MB
144.6.67.107_82_SYSTEM107_8210.9 MB
217.182.252.215_SYSTEM215_SY10.8 MB
178.251.26.204_SYSTEM204_SY10.0 MB
194.99.44.144_SYSTEM144_SY9.7 MB
81.199.136.234_SYSTEM234_SY9.7 MB
chisel_orig.exePE9.3 MB
cfg_cache.datELF8.9 MB
ad7.exePE8.0 MB
wp_assets.binBIN8.0 MB
javasELF8.0 MB
wp_assets.binBIN7.5 MB
javasELF7.5 MB
mod_extra.binBIN7.1 MB
vagent_win.exePE4.9 MB
msdtc_upd.exePE4.4 MB
agentv_w32.exePE4.4 MB
test3m.binBIN3.9 MB
chisel_upx.exePE3.6 MB
edge.exePE3.6 MB
javas.gzGZ3.3 MB
dual8082.logLOG2.9 MB
m.exePE1.3 MB
dc.binELF1.3 MB
c1M.binBIN1.0 MB
httpd.logLOG830 KB
cfg_theme.datELF776 KB
dajoke.exePE642 KB
plink.exePE602 KB
jpart_00ELF500 KB
vpart_00ELF500 KB
‹redacted›.sysPE482 KB
ccv.binPE482 KB
msedge.exePE404 KB
access.logLOG289 KB
all.logLOG207 KB
iis64.dllPE168 KB
Invoke-SMBExec.ps1PS1146 KB
Invoke-SMBClient.ps1PS1136 KB
iis32.dllPE132 KB
gp.b64B6476 KB
.cfg_cache.datELF71 KB
gp.exePE57 KB
harvest_20261013.jsonJSON50 KB
c49K.binBIN48 KB
83.168.228.21_y_000.binBIN46 KB
83.168.228.21_y_001.binBIN46 KB
83.168.228.21_y_002.binBIN46 KB
83.168.228.21_y_003.binBIN46 KB
83.168.228.21_y_004.binBIN46 KB
83.168.228.21_y_005.binBIN46 KB
83.168.228.21_y_006.binBIN46 KB
83.168.228.21_y_007.binBIN46 KB
83.168.228.21_y_008.binBIN46 KB
83.168.228.21_y_009.binBIN46 KB
83.168.228.21_y_010.binBIN46 KB
83.168.228.21_y_011.binBIN46 KB
83.168.228.21_y_012.binBIN46 KB
83.168.228.21_y_013.binBIN46 KB
83.168.228.21_y_014.binBIN46 KB
83.168.228.21_y_015.binBIN46 KB
83.168.228.21_y_016.binBIN46 KB
b64_2.txtTXT37 KB
‹redacted›.pycPYC37 KB
dump261.logLOG28 KB
ps.exeEXE26 KB
ahsay_stage2_all.pyPY24 KB
rce_shells.txtTXT24 KB
FULL_s_000.binBIN24 KB
pxv.binPE19 KB
pxv2.binPE19 KB
exfil2.logLOG18 KB
install_user.shSH15 KB
install_user.shSH15 KB
install.shSH15 KB
FINAL_REPORT.mdMD15 KB
stage2.logLOG14 KB
‹redacted›.sysPE14 KB
iu.shSH11 KB
install_user.shSH11 KB
install_orig.shSH11 KB
install_user.shSH11 KB
reprobe.logLOG10 KB
install_root_m.shSH10 KB
ahsay_massdep.pyPY9 KB
85.238.192.35_lsa.txtTXT7 KB
b8_adTXT7 KB
b8_agTXT7 KB
https___185.157.133.51_lsa.txtTXT7 KB
d8_012.txtTXT7 KB
d8_023.txtTXT7 KB
d8_036.txtTXT7 KB
d8_044.txtTXT7 KB
d8_047.txtTXT7 KB
d8_049.txtTXT7 KB
d8_054.txtTXT7 KB
d8_056.txtTXT7 KB
d8_058.txtTXT7 KB
d8_061.txtTXT7 KB
d8_064.txtTXT7 KB
d8_067.txtTXT7 KB
d8_070.txtTXT7 KB
d8_078.txtTXT7 KB
d8_080.txtTXT7 KB
d8_082.txtTXT7 KB
d8_084.txtTXT7 KB
d8_103.txtTXT7 KB
d8_110.txtTXT7 KB
https___77.105.230.103_444_lsa.txtTXT7 KB
PLAYBOOK.mdMD7 KB
excl_evict4.shSH6 KB
config.jsonJSON6 KB
config.jsonJSON6 KB
ahsay_213deploy2.pyPY6 KB
ahsay_rescue2.pyPY5 KB
ahsay_213deploy.pyPY5 KB
ahsay_final_wave.pyPY5 KB
config_p2s.jsonJSON5 KB
config.jsonJSON5 KB
ahsay_2008fix16.pyPY5 KB
Taskgmr.ps1PS15 KB
ahsay_gold8.pyPY5 KB
ahsay_finalize2.pyPY5 KB
https___185.194.169.22_lsa.txtTXT4 KB
003511.txtTXT4 KB
003530.txtTXT4 KB
003540.txtTXT4 KB
003549.txtTXT4 KB
003558.txtTXT4 KB
003608.txtTXT4 KB
ahsay_dump2.pyPY4 KB
deploy_iis_module.ps1PS14 KB
ahsay_rescue3.pyPY4 KB
ahsay_t35.pyPY4 KB
wkill.ps1PS14 KB
5.132.116.208_lsa.txtTXT4 KB
ahsay_213v6b.pyPY4 KB
ahsay_213v6e.pyPY4 KB
ahsay_213v5.pyPY4 KB
ahsay_213v6c.pyPY4 KB
ahsay_213v6d.pyPY4 KB
ahsay_213v6.pyPY4 KB
exfil.logLOG4 KB
dl_fleet.phpPHP4 KB
dataplane_all_creds.jsonJSON4 KB
ahsay_deploy.pyPY4 KB
ebs_deploy.shSH4 KB
ahsay_213v7.pyPY4 KB
ahsay_213v10.pyPY4 KB
ahsay_213v8b.pyPY4 KB
ahsay_213v9.pyPY4 KB
ahsay_213v8.pyPY4 KB
ahsay_t34.pyPY4 KB
ahsay_mega.pyPY4 KB
ahsay_t35c.pyPY4 KB
ahsay_t35b.pyPY3 KB
002253.txtTXT3 KB
002302.txtTXT3 KB
002312.txtTXT3 KB
002322.txtTXT3 KB
seg_agTXT3 KB
seg_anTXT3 KB
002331.txtTXT3 KB
ahsay_t39b.pyPY3 KB
ahsay_r2dep.pyPY3 KB
wbi_v10.phpPHP3 KB
234536.txtTXT3 KB
ora_fleet.phpPHP3 KB
ahsay_step2.pyPY3 KB
ahsay_step3.pyPY3 KB
ahsay_gold.pyPY3 KB
ebs_ext2.shSH3 KB
ahsay_t46.pyPY3 KB
ops.shSH3 KB
ahsay_2008probe.pyPY3 KB
46.140.236.188_8083_lsa.txtTXT3 KB
plaintext_creds.jsonJSON3 KB
ahsay_rescue5.pyPY3 KB
z_prepend.phpPHP3 KB
stage2d.logLOG3 KB
ahsay_localdep.pyPY3 KB
svc_body_v4.phpPHP3 KB
wa.batBAT3 KB
ahsay_t38.pyPY3 KB
wa1.batBAT2 KB
wa2.batBAT2 KB
ahsay_213v4a.pyPY2 KB
ebs_java.shSH2 KB
ebs_ext5.shSH2 KB
ahsay_rescue4.pyPY2 KB
223932.txtTXT2 KB
ahsay_pth_pilot2.pyPY2 KB
ahsay_213b.pyPY2 KB
024651.txtTXT2 KB
ahsay_t37.pyPY2 KB
ora_deploy.phpPHP2 KB
ebs_ext.shSH2 KB
223609.txtTXT2 KB
ahsay_step9.pyPY2 KB
ahsay_2008fix12.pyPY2 KB
miner_restart_verify.shSH2 KB
ahsay_213c.pyPY2 KB
ahsay_fleet.pyPY2 KB
backup01.samoffice.com_lsa.txtTXT2 KB
dp_64105e.logLOG2 KB
stddeploy.shSH2 KB
wk2.ps1PS12 KB
ahsay_197.pyPY2 KB
ahsay_dump.pyPY2 KB
ahsay_t37c.pyPY2 KB
ahsay_finalize.pyPY2 KB
ahsay_200x_v2.pyPY2 KB
ahsay_200x.pyPY2 KB
ahsay_final1.pyPY2 KB
ahsay_final2.pyPY2 KB
ahsay_2008fix15.pyPY2 KB
https___195.224.17.11_lsa.txtTXT2 KB
ahsay_diag5.pyPY2 KB
dataplane_pilot.pyPY2 KB
seodeploy.shSH2 KB
ahsay_step10.pyPY2 KB
ahsay_step5.pyPY2 KB
massdep.logLOG2 KB
ebs_ext3.shSH2 KB
dp_64105e.pyPY2 KB
ahsay_spawn77.pyPY2 KB
ahsay_step4.pyPY2 KB
ahsay_egress_68.pyPY2 KB
ahsay_rescue1.pyPY2 KB
ahsay_t37b.pyPY2 KB
ahsay_2008fix13.pyPY2 KB
ahsay_fixrig2.pyPY2 KB
loop.ps1PS12 KB
dataplane_pilot.jsonJSON2 KB
ahsay_redeploy2.pyPY2 KB
aspdep.ps1PS12 KB
ebs_verify.shSH2 KB
lat2.shSH2 KB
dp_full.pyPY2 KB
185.183.203.101_lsa.txtTXT2 KB
ahsay_sweep77.pyPY2 KB
ahsay_213d.pyPY2 KB
fin.ps1PS12 KB
ahsay_2008fix14.pyPY2 KB
ahsay_tlsfix8.pyPY2 KB
ahsay_egress100.pyPY2 KB
ahsay_secretry.pyPY2 KB
ebs_run.shSH2 KB
ebs_dep.shSH2 KB
ahsay_tlsverify.pyPY2 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

15.188.163.78confirmed
158.247.218.226confirmed
190.84.232.232confirmed
2.26.229.254confirmed
2.59.218.32confirmed
208.85.17.99confirmed
212.232.23.75confirmed
217.160.132.82confirmed
45.142.143.235confirmed
45.151.122.34confirmed
51.159.21.191confirmed
67.215.232.25confirmed
8.133.234.121confirmed
89.36.231.178confirmed
94.130.22.61confirmed