huntback / IP intelligence
104.168.111.208
Intelligence
ASN / OrgAS36352 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 8787
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested352 file(s), 67433 KB · exploit, exposed-secret, forced-loot, malware, mozi, tunnel
Open directory contents (352)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| loot_all.tar.gz | GZ | 58.6 MB |
| loot_ikea_tms.tar.gz | GZ | 1.9 MB |
| ALL.txt | TXT | 1.0 MB |
| ikea_all.tar.gz | GZ | 676 KB |
| 01_items_brands_designs.json | JSON | 643 KB |
| main-BIPGPFV6_js.txt | TXT | 298 KB |
| main-DJmEUUob_js.txt | TXT | 298 KB |
| main-AGhCerEc_js.txt | TXT | 294 KB |
| spec__ordercaptureapi_v3_api_docs.json | JSON | 218 KB |
| card_scan_v3.log | LOG | 213 KB |
| giftee_all.tar.gz | GZ | 200 KB |
| main-C357m7jO_js.txt | TXT | 165 KB |
| 07_gcbalance_main.js | JS | 164 KB |
| card_hits.json | JSON | 100 KB |
| gc_scan.log | LOG | 93 KB |
| probe_cf.log | LOG | 32 KB |
| wayback_v2.log | LOG | 24 KB |
| caps_pii.log | LOG | 23 KB |
| iops_full.log | LOG | 19 KB |
| scan2.log | LOG | 17 KB |
| loot_ikea_final.tar.gz | GZ | 14 KB |
| email_swagger.json | JSON | 11 KB |
| gc_mine2.log | LOG | 11 KB |
| tms2.log | LOG | 10 KB |
| gcgrep.log | LOG | 9 KB |
| main_f2a57722_chunk_js.txt | TXT | 9 KB |
| payctx.log | LOG | 9 KB |
| oracle_v2.log | LOG | 8 KB |
| item_test.log | LOG | 8 KB |
| iops_deep.log | LOG | 8 KB |
| prep_live.log | LOG | 7 KB |
| gc_surface.log | LOG | 7 KB |
| cloudflared.log | LOG | 7 KB |
| card_scan.log | LOG | 7 KB |
| order_capture_v2.log | LOG | 6 KB |
| probe3.py | PY | 6 KB |
| cloudflared.log | LOG | 6 KB |
| cloudflared.log | LOG | 6 KB |
| loot_ikea_i439.tar.gz | GZ | 6 KB |
| ‹redacted›.pyc | PYC | 6 KB |
| unlock.log | LOG | 5 KB |
| iops_deep.py | PY | 5 KB |
| ‹redacted›.pyc | PYC | 5 KB |
| act_probe.py | PY | 5 KB |
| takeover.log | LOG | 5 KB |
| bal2.py | PY | 5 KB |
| order_capture_v2.py | PY | 5 KB |
| gc_report.py | PY | 5 KB |
| iops_full.py | PY | 5 KB |
| slow.log | LOG | 5 KB |
| issue.py | PY | 5 KB |
| sameorigin.py | PY | 5 KB |
| archive_ca.py | PY | 5 KB |
| v2_run.sh | SH | 5 KB |
| act2.py | PY | 5 KB |
| deep_cart.log | LOG | 5 KB |
| iss_probe.py | PY | 5 KB |
| order_extract.py | PY | 5 KB |
| las_probe.py | PY | 4 KB |
| ‹redacted›.pyc | PYC | 4 KB |
| unlock.py | PY | 4 KB |
| matched.py | PY | 4 KB |
| bin_cards.log | LOG | 4 KB |
| expand.py | PY | 4 KB |
| card_scan.py | PY | 4 KB |
| scan2.py | PY | 4 KB |
| bypass.py | PY | 4 KB |
| master.py | PY | 4 KB |
| report.py | PY | 4 KB |
| mut_probe.py | PY | 4 KB |
| issue2.py | PY | 4 KB |
| card_scan_v2.py | PY | 4 KB |
| card_scan_v3.py | PY | 4 KB |
| wb_expand.py | PY | 4 KB |
| ‹redacted›.pyc | PYC | 4 KB |
| cc_harvest.log | LOG | 4 KB |
| tmatrix.py | PY | 4 KB |
| route.py | PY | 4 KB |
| bal_v2.py | PY | 4 KB |
| ts_pair.py | PY | 4 KB |
| igift.log | LOG | 4 KB |
| balance_enum.py | PY | 4 KB |
| qs_probe.py | PY | 4 KB |
| gc_surface.py | PY | 4 KB |
| ‹redacted›.pyc | PYC | 4 KB |
| prep_live.py | PY | 4 KB |
| run.sh | SH | 4 KB |
| bal_oracle.py | PY | 4 KB |
| slow.py | PY | 4 KB |
| orc2.py | PY | 4 KB |
| ts_live.py | PY | 4 KB |
| family_derive.py | PY | 4 KB |
| gce.log | LOG | 4 KB |
| probe_cf.py | PY | 4 KB |
| probe3.log | LOG | 4 KB |
| ctx_multi.py | PY | 4 KB |
| live_bal.py | PY | 4 KB |
| cart_hunt3.py | PY | 3 KB |
| payctx_probe.py | PY | 3 KB |
| oracle_matrix.py | PY | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| idor_probe.py | PY | 3 KB |
| takeover.sh | SH | 3 KB |
| ts_clean.py | PY | 3 KB |
| custcard.py | PY | 3 KB |
| bin_cards.py | PY | 3 KB |
| arq_harvest.py | PY | 3 KB |
| cart_hunt2.py | PY | 3 KB |
| cart_hunt.py | PY | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| scan_range.py | PY | 3 KB |
| fast_scan.py | PY | 3 KB |
| ocguest.py | PY | 3 KB |
| ctx_wb.py | PY | 3 KB |
| recon.py | PY | 3 KB |
| cfclear.py | PY | 3 KB |
| ctx_quick.py | PY | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| wbcart.py | PY | 3 KB |
| cc_harvest.py | PY | 3 KB |
| tms_admin.log | LOG | 3 KB |
| occhain.py | PY | 3 KB |
| micro.log | LOG | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| sqlmap_output.tar.gz | GZ | 3 KB |
| harvest_logs.py | PY | 3 KB |
| disc.py | PY | 3 KB |
| combo.py | PY | 3 KB |
| run.log | LOG | 3 KB |
| socart.py | PY | 3 KB |
| mut_probe.log | LOG | 3 KB |
| cartflow.py | PY | 3 KB |
| resume.py | PY | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| item_test.py | PY | 3 KB |
| archive_ca.log | LOG | 3 KB |
| deep2.py | PY | 3 KB |
| deep2.log | LOG | 3 KB |
| lc.py | PY | 3 KB |
| occhain2.py | PY | 3 KB |
| qs_probe.log | LOG | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| loot_final_all.tar.gz | GZ | 3 KB |
| wayback_v2.py | PY | 3 KB |
| ‹redacted›.pyc | PYC | 3 KB |
| igift3.py | PY | 2 KB |
| ‹redacted›.pyc | PYC | 2 KB |
| cartflow2.py | PY | 2 KB |
| oracle_v2.py | PY | 2 KB |
| tms2.py | PY | 2 KB |
| caps_pii.py | PY | 2 KB |
| archive_tms.py | PY | 2 KB |
| oracle_v3.py | PY | 2 KB |
| micro.py | PY | 2 KB |
| diag_ts.py | PY | 2 KB |
| order_oc_probe.py | PY | 2 KB |
| surface.py | PY | 2 KB |
| pwcart.py | PY | 2 KB |
| ‹redacted›.pyc | PYC | 2 KB |
| order_oc.log | LOG | 2 KB |
| cart_hunt2.log | LOG | 2 KB |
| cart_hunt3.log | LOG | 2 KB |
| order_oracle_real.py | PY | 2 KB |
| csshit.py | PY | 2 KB |
| tor_check.py | PY | 2 KB |
| cartlist.py | PY | 2 KB |
| bal_v2.log | LOG | 2 KB |
| gce.py | PY | 2 KB |
| check2.py | PY | 2 KB |
| ‹redacted›.pyc | PYC | 2 KB |
| analyze_agentid.py | PY | 2 KB |
| ts_server.py | PY | 2 KB |
| cart_hunt.log | LOG | 2 KB |
| aicfg.py | PY | 2 KB |
| live_bal.log | LOG | 2 KB |
| ‹redacted›.pyc | PYC | 2 KB |
| ocspec.log | LOG | 2 KB |
| lang_sweep.py | PY | 2 KB |
| ‹redacted›.pyc | PYC | 2 KB |
| lite.py | PY | 2 KB |
| gc_mine2.py | PY | 2 KB |
| tms_pii.py | PY | 2 KB |
| mine_refs.py | PY | 2 KB |
| igift.py | PY | 2 KB |
| csshit.log | LOG | 2 KB |
| lite3.py | PY | 2 KB |
| occhain.log | LOG | 2 KB |
| cartlist.log | LOG | 2 KB |
| css_fields.py | PY | 2 KB |
| oracle_matrix.log | LOG | 2 KB |
| deep_cart.py | PY | 2 KB |
| keycheck.py | PY | 2 KB |
| ocspec.py | PY | 2 KB |
| crack_jwt.py | PY | 2 KB |
| prefix_test.py | PY | 2 KB |
| igift_spec.py | PY | 2 KB |
| agg_tms.py | PY | 2 KB |
| gcgrep.py | PY | 2 KB |
| css_pay.py | PY | 2 KB |
| occhain2.log | LOG | 2 KB |
| auth_probe.py | PY | 2 KB |
| mega.py | PY | 2 KB |
| expand.log | LOG | 2 KB |
| mine_refs.log | LOG | 1 KB |
| introspect_cssom.py | PY | 1 KB |
| hdr_matrix.py | PY | 1 KB |
| v2_run.log | LOG | 1 KB |
| tms_admin.py | PY | 1 KB |
| wb_expand.log | LOG | 1 KB |
| wb_ca.py | PY | 1 KB |
| lite2.py | PY | 1 KB |
| gc_mine.py | PY | 1 KB |
| combo.log | LOG | 1 KB |
| crack_jwt2.py | PY | 1 KB |
| wb_carts.py | PY | 1 KB |
| ‹redacted›.pyc | PYC | 1 KB |
| tms_probe.log | LOG | 1 KB |
| emailms.py | PY | 1 KB |
| admin_probe.py | PY | 1 KB |
| ctx_wb.log | LOG | 1 KB |
| iss_probe.log | LOG | 1 KB |
| lang_sweep.log | LOG | 1 KB |
| socart.log | LOG | 1 KB |
| read_cand.sh | SH | 1 KB |
| ‹redacted›.pyc | PYC | 1 KB |
| las_probe.log | LOG | 1 KB |
| order_extract.log | LOG | 1 KB |
| gc_scan.py | PY | 1 KB |
| pull_arch.py | PY | 1 KB |
| chk_jwks.sh | SH | 1 KB |
| pull_pi_latest.sh | SH | 1 KB |
| setup_proxy.py | PY | 1 KB |
| ocguest.log | LOG | 1 KB |
| custcard.log | LOG | 1 KB |
| probe_tms.py | PY | 1 KB |
| detail_probe.py | PY | 1 KB |
| probe_tms_detail.py | PY | 1 KB |
| diag_loot.py | PY | 1 KB |
| email_probe.py | PY | 1 KB |
| route.log | LOG | 1 KB |
| check_poc.sh | SH | 1 KB |
| trace1941.sh | SH | 1 KB |
| css_schema.py | PY | 1 KB |
| ctx_multi.log | LOG | 1 KB |
| sameorigin.log | LOG | 1 KB |
| ts_server.log | LOG | 1 KB |
| write_probe.py | PY | 1 KB |
| dump226.sh | SH | 1 KB |
| ts_live.log | LOG | 1 KB |
| disc.log | LOG | 1 KB |
| probe_ms.py | PY | 1 KB |
| final_chk.sh | SH | 1 KB |
| chk_prefix.sh | SH | 1 KB |
| igift_spec2.py | PY | 1 KB |
| hdr_matrix.log | LOG | 1 KB |
| loot_ikea_master.tar.gz | GZ | 1 KB |
| tgt_probe.sh | SH | 1 KB |
| hpp_capture.py | PY | 1 KB |
| read_swagger.py | PY | 1 KB |
| check_i286.sh | SH | 1004 B |
| bypass.log | LOG | 999 B |
| read_carts.sh | SH | 995 B |
| find60.sh | SH | 979 B |
| list_feat.py | PY | 975 B |
| ts_pair.log | LOG | 969 B |
| mine_axios.py | PY | 966 B |
| tms_detail.log | LOG | 965 B |
| matched.log | LOG | 957 B |
| mine_config.py | PY | 870 B |
| parse_tms2.py | PY | 865 B |
| ikea_balance_results.json | JSON | 859 B |
| mint.log | LOG | 858 B |
| diag_ts.log | LOG | 855 B |
| deep363.sh | SH | 839 B |
| card_scan_v2.log | LOG | 834 B |
| mine_routes.py | PY | 819 B |
| diag_sweep.py | PY | 806 B |
| arc_final.sh | SH | 789 B |
| search_pii.sh | SH | 772 B |
| pwcart.log | LOG | 726 B |
| pull_i439.sh | SH | 704 B |
| tms_pii.log | LOG | 704 B |
| read_i290.sh | SH | 691 B |
| tor_iso.sh | SH | 679 B |
| grep_gc.sh | SH | 669 B |
| read_i320.sh | SH | 650 B |
| diagproxy.sh | SH | 633 B |
| ts_clean.log | LOG | 625 B |
| check_harvest.sh | SH | 624 B |
| chk_tor.sh | SH | 606 B |
| act_probe.log | LOG | 565 B |
| extract_i226.py | PY | 555 B |
| read439.sh | SH | 552 B |
| proxytest.sh | SH | 550 B |
| read_misc.sh | SH | 544 B |
| bal_oracle.log | LOG | 542 B |
| parse_tms3.py | PY | 528 B |
| parse_multi.py | PY | 524 B |
| wb_ca.log | LOG | 518 B |
| find_latest.sh | SH | 488 B |
| wbcart.log | LOG | 484 B |
| act2.log | LOG | 482 B |
| guest_token.txt | TXT | 465 B |
| guest_token2.txt | TXT | 465 B |
| jwks_http.log | LOG | 462 B |
| chk_jp.sh | SH | 461 B |
| inspect_oracle.py | PY | 456 B |
| igift_spec.log | LOG | 407 B |
| read_i286.sh | SH | 383 B |
| read_cssom.sh | SH | 372 B |
| crack.log | LOG | 364 B |
| cartflow.log | LOG | 363 B |
| chk_cdp.sh | SH | 361 B |
| run_oracle_v2.sh | SH | 350 B |
| diag_sweep.sh | SH | 339 B |
| bal2.log | LOG | 338 B |
| readsess.sh | SH | 331 B |
| arq_harvest.log | LOG | 321 B |
| pkg.sh | SH | 314 B |
| readproxy.sh | SH | 304 B |
| family_derive.log | LOG | 299 B |
| grep_cssom.sh | SH | 291 B |
| step2.log | LOG | 286 B |
| cartflow2.log | LOG | 283 B |
| jwks.log | LOG | 279 B |
| orc2.log | LOG | 278 B |
| recon.log | LOG | 277 B |
| scan_range.log | LOG | 265 B |
| ctx_quick.log | LOG | 262 B |
| full_config.py | PY | 248 B |
| issue.log | LOG | 247 B |
| step4.log | LOG | 240 B |
| wb_carts.log | LOG | 207 B |
| read_cdx.py.sh | SH | 206 B |
| issue2.log | LOG | 190 B |
| gc_mine.log | LOG | 182 B |
| wb_carts2.log | LOG | 180 B |
| fast_scan.log | LOG | 178 B |
| oracle_real.log | LOG | 155 B |
| mega.log | LOG | 154 B |
| step4.log | LOG | 150 B |
| step2.log | LOG | 108 B |
| tmatrix.log | LOG | 103 B |
| https.log | LOG | 102 B |
| ua.txt | TXT | 101 B |
| step1.log | LOG | 79 B |
| step2.log | LOG | 77 B |
| css_seed.json | JSON | 31 B |
| step3.log | LOG | 19 B |
| step1.log | LOG | 18 B |
| step1.log | LOG | 15 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free