Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

13.184.160.159

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / Orgunknown
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 1337, 4444, 4445, 8000, 8080, 8888, 9001, 7777, 8898, 4443, 4447, 4448, 4450
ServiceSimpleHTTP/0.6 Python/3.9.25 · Directory listing for /
Loot harvested1029 file(s), 1461496 KB · c2, coinminer, elf-binary, exploit, exposed-secret, forced-loot

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.mv.dbDB449.6 MB
j3exfil_metabase_dbTXT449.6 MB
‹redacted›.rpmRPM297.2 MB
‹redacted›.pcapPCAP62.4 MB
.kworker-netNEW38.4 MB
grpcurlTXT23.3 MB
j3trace.dbDB10.9 MB
alas.htmlHTML10.0 MB
ffufELF7.8 MB
grpcurl.tar.gzTGZ7.5 MB
j3trace.dbDB6.2 MB
upi_survey_dump.sqlSQL4.7 MB
regpit_mongo_stg.jsonJSON4.5 MB
phantom_vault.tgzTGZ4.5 MB
ffuf.tar.gzGZ3.3 MB
regpit_mongo_dev.jsonJSON3.3 MB
gsnetcat_amd64ELF2.7 MB
j3btf.binBIN2.3 MB
libc.so.6ELF2.1 MB
exploit_regpitELF1.6 MB
au1_exploitELF1.2 MB
test_kaslrELF1.1 MB
exploit-passwdELF972 KB
x90sELF971 KB
cf_testELF891 KB
chk.binELF889 KB
rfxv3ELF885 KB
refluxELF885 KB
cf_probeELF876 KB
probe_rxELF851 KB
dfELF816 KB
expELF805 KB
exp2ELF805 KB
exp3ELF805 KB
exploitELF791 KB
vulnerableELF790 KB
sufireELF785 KB
dumps_rx.sql.gzELF781 KB
kprobeELF771 KB
xfsprobe2ELF756 KB
ovldioELF756 KB
sctpdiagELF756 KB
‹redacted›.jarJAR655 KB
a2_http4443.logLOG622 KB
yarn.lockLOCK580 KB
apkidx324.tar.gzGZ516 KB
apkidx.tar.gzGZ457 KB
CVE-2026-98385-arch.cC437 KB
cf_check_a64.b64B64409 KB
grid_hits.logLOG409 KB
cf_exp_a64.b64B64401 KB
ea_j2.binELF390 KB
cf_watch_a64.b64B64381 KB
package-lock.jsonJSON332 KB
j2_config_68090TXT329 KB
http_wh_save.logLOG327 KB
.http.logLOG313 KB
.http.logLOG313 KB
package-lock.jsonJSON293 KB
chatwoot-v3app.jsJS272 KB
spark-daemon.logLOG271 KB
rpcserver.goGO270 KB
.http.logLOG223 KB
‹redacted›.jarJAR221 KB
server.goGO193 KB
59db79b0b2ae7b6d.jsJS173 KB
chatwoot-index-BlSjgUWe.jsJS171 KB
chatwoot-vue.esm-bundler-D9G7PuHL.jsJS168 KB
CVE-2026-80775-ubuntu.cC163 KB
gs-netcatELF154 KB
8db67c9e54caaa31.jsJS152 KB
ALAS2023-2026-1882.htmlHTML152 KB
stage2_wordlist.txtTXT152 KB
lightning_pb2_grpc.pyPY133 KB
validator-0.1.0.tgzTGZ130 KB
rfb.jsJS119 KB
ALAS2023-2026-1754.htmlHTML115 KB
a2http_new.logLOG110 KB
lightning_pb2.pyPY109 KB
vm.goGO108 KB
307d9ebbe6d69553.jsJS108 KB
config.goGO104 KB
j2r3.logLOG101 KB
j2r3.logLOG101 KB
j2r3.logLOG100 KB
j2r3.logLOG99 KB
wa-debug.htmlHTML97 KB
wa-traceback.htmlHTML97 KB
compiler_test.goGO96 KB
ALAS2023-2026-1753.htmlHTML89 KB
pymysql.tar.gzGZ87 KB
j2r3.logLOG87 KB
sample-lnd.confCONF86 KB
j2m1.logLOG85 KB
compiler_expr.goGO80 KB
runtime.goGO78 KB
ui.jsJS65 KB
config_builder.goGO65 KB
poc_cve_2026_98432.pyPY62 KB
j2scan.logLOG61 KB
‹redacted›.sumSUM59 KB
poc.pyPY59 KB
60a105bf3c6ab917.jsJS59 KB
builtin_typedarrays.goGO57 KB
runtime_test.goGO55 KB
j2harv.logLOG55 KB
EXPLOIT_NOTES.mdMD48 KB
gs-install.shTXT47 KB
webhook_listener.logLOG46 KB
CVE-2026-98256-ubuntu.cC44 KB
object.goGO44 KB
package-lock.jsonJSON42 KB
.widb.tar.gzGZ42 KB
6b4ae6d50c5b03b6.jsJS41 KB
h2_cb.logLOG41 KB
builtin_array.goGO40 KB
poc.pyPY39 KB
CVE-2026-98260-ubuntu.cC38 KB
lnd.goGO38 KB
package-lock.jsonJSON37 KB
j2shell.logLOG37 KB
compiler.goGO34 KB
plaus_integrations.htmlHTML34 KB
keysym.jsJS33 KB
cve80521.htmlHTML33 KB
builtin_regexp.goGO33 KB
subs_wl.txtTXT32 KB
21e617d02bde6cf4.jsJS32 KB
proxy.goGO31 KB
comms-schema.jsonJSON31 KB
7ce00089921a9e09.jsJS30 KB
README.mdMD29 KB
aad0b16da6f298eb.jsJS29 KB
object_goreflect_test.goGO29 KB
builtin_date.goGO29 KB
fd0d7d30af562359.jsJS29 KB
af673494783c83dc.jsJS29 KB
typedarrays.goGO28 KB
regexp_test.goGO27 KB
compiler_stmt.goGO27 KB
tc39_test.goGO27 KB
builtin_string.goGO26 KB
builtin_proxy_test.goGO26 KB
scanner.pyPY26 KB
281112e3047089ba.jsJS26 KB
j3harv.logLOG25 KB
rgpzm.logLOG25 KB
exploit_ref.pyPY25 KB
profiles.jsonJSON25 KB
value.goGO25 KB
func.goGO24 KB
6fccc4ed3d580e85.jsJS24 KB
accessman_test.goGO23 KB
README.mdMD23 KB
date_parser.goGO23 KB
poc_ref.pyPY23 KB
MakefileTXT23 KB
README.mdMD23 KB
20be4d171e7c1f97.jsJS22 KB
fablej2.logLOG22 KB
object_dynamic.goGO21 KB
lpe.mM21 KB
a2http_new.logLOG20 KB
‹redacted›.ccCC20 KB
README.mdMD19 KB
fable-f1.logLOG19 KB
README.mdMD19 KB
builtin_promise.goGO19 KB
accessman.goGO19 KB
rce_cb.logLOG18 KB
rce_cb.logLOG18 KB
a2http_new.logLOG18 KB
CVE-2026-89754-ubuntu.cC18 KB
vnc.htmlHTML18 KB
cve43499.htmlHTML18 KB
builtin_object.goGO18 KB
display.jsJS17 KB
tier70.shSH17 KB
README.mdMD17 KB
pipe_leak_regpitELF17 KB
tls_manager.goGO17 KB
plausible_goal_xss.pyPY17 KB
j3harv.logLOG17 KB
README.mdMD17 KB
object_goreflect.goGO16 KB
plaus_login.htmlHTML16 KB
LICENSE.MPL-2.0016 KB
README.mdMD15 KB
nc4449.logLOG15 KB
API.mdMD15 KB
regexp.goGO15 KB
subrpcserver_config.goGO15 KB
PAYLOAD_REFERENCE.mdMD15 KB
node2shell_rce.cC14 KB
jshell1.logLOG14 KB
plausible_goals_xss_idor.pyPY14 KB
rgpz.logLOG14 KB
server_test.goGO14 KB
README.mdMD14 KB
7ee005ac6b26be55.jsJS13 KB
builtin_proxy.goGO13 KB
otp_race_log.txtTXT13 KB
array.goGO13 KB
chanrestore.goGO13 KB
tls_manager_test.goGO12 KB
alas1752.htmlHTML12 KB
rs2.logLOG12 KB
log.goGO12 KB
des.jsJS12 KB
‹redacted›.outOUT12 KB
ra2.jsJS12 KB
walletunlocker_pb2_grpc.pyPY12 KB
plausible_liveview_idor.pyPY12 KB
object_test.goGO12 KB
array_sparse.goGO11 KB
typedarrays_test.goGO11 KB
builtin_json.goGO11 KB
CVE-2026-97941-arch.cC11 KB
CHANGELOG.mdMD11 KB
config_test.goGO11 KB
scan.pyPY11 KB
‹redacted›.browser.jsJS11 KB
builtin_global.goGO11 KB
websock.jsJS10 KB
README.mdMD10 KB
‹redacted›.modMOD10 KB
ba4fdf7ba4f84053.jsJS10 KB
string_unicode.goGO10 KB
turbopack-43c0ad14065d65ba.jsJS10 KB
builtin_math.goGO10 KB
USAGE.mdMD10 KB
.envENV10 KB
CLAUDE.mdMD10 KB
harv.logLOG10 KB
otp_bruteforce.pyPY10 KB
.gl_respGL_RES9 KB
builtin_function.goGO9 KB
poc-exploit.cC9 KB
‹redacted›.poPO9 KB
README.mdMD9 KB
alnz.logLOG9 KB
lp118.htmlHTML9 KB
browser.jsJS9 KB
builtin_map.goGO9 KB
h264.jsJS9 KB
object_goslice_reflect_test.goGO9 KB
README.mdMD9 KB
date_test.goGO9 KB
README.mdMD8 KB
pilot.goGO8 KB
builtin_set.goGO8 KB
otp_bruteforce_v3.pyPY8 KB
string.goGO8 KB
README.mdMD8 KB
grpc-web-moonpay-poc.htmlHTML8 KB
j2r2.logLOG8 KB
jenv.logLOG8 KB
exploit_stock.pyPY8 KB
object_goarray_reflect.goGO8 KB
poc.pyPY8 KB
vuln_server.cC8 KB
ads_brute_capsolver.pyPY8 KB
test.h264.jsJS8 KB
internal_scan.shSH8 KB
shell.shSH8 KB
object_dynamic_test.goGO8 KB
otp_race_brute.pyPY8 KB
ads_brute.logLOG7 KB
test_oob.cC7 KB
builtin_string_test.goGO7 KB
README.mdMD7 KB
builtin_arrray_test.goGO7 KB
statewatch.logLOG7 KB
README.mdMD7 KB
fable-f2.logLOG7 KB
‹redacted›.poPO7 KB
object_goslice.goGO7 KB
destruct.goGO7 KB
‹redacted›.poPO7 KB
novnc_proxyTXT7 KB
j2p1.logLOG7 KB
stateservice_pb2_grpc.pyPY7 KB
object_lazy.goGO7 KB
builtin_typedarrays_test.goGO7 KB
probe_targets.pyPY7 KB
rpcserver_test.goGO7 KB
builtin_error.goGO7 KB
‹redacted›.poPO7 KB
profiler.goGO6 KB
‹redacted›.poPO6 KB
j3c2d.logLOG6 KB
t1f.logLOG6 KB
object_gomap_reflect.goGO6 KB
‹redacted›.poPO6 KB
‹redacted›.poPO6 KB
sqli_bypass2.pyPY6 KB
otp_race_verify.pyPY6 KB
jharvest.logLOG6 KB
j3c2d.logLOG6 KB
j3c2d.logLOG6 KB
‹redacted›.poPO6 KB
webutil.jsJS6 KB
j3c2d.logLOG6 KB
otp_bruteforce_v2.pyPY6 KB
witness_beacon.goGO6 KB
j3c2d.logLOG6 KB
‹redacted›.poPO6 KB
‹redacted›.poPO6 KB
‹redacted›.tightpng.jsJS6 KB
vnc_lite.htmlHTML6 KB
exfil-file.shSH6 KB
alzor.logLOG6 KB
el.jsonJSON6 KB
builtin_number.goGO6 KB
lndhub_bypass_mint.pyPY6 KB
‹redacted›.ovpnOVPN6 KB
‹redacted›.poPO6 KB
util.jsJS5 KB
string_ascii.goGO5 KB
‹redacted›.poPO5 KB
README.mdMD5 KB
drain_albyhub_144.shSH5 KB
step1_otp_recon.pyPY5 KB
object_gomap_test.goGO5 KB
object_goarray_reflect_test.goGO5 KB
func_test.goGO5 KB
string_imported.goGO5 KB
channel_notifier.goGO5 KB
array_sparse_test.goGO5 KB
object_gomap_reflect_test.goGO5 KB
‹redacted›.poPO5 KB
‹redacted›.poPO5 KB
‹redacted›.poPO5 KB
‹redacted›.poPO5 KB
‹redacted›.poPO5 KB
amm_auth.pyPY5 KB
amm_deep.pyPY5 KB
shodan_scan.pyPY5 KB
amm_exploit.pyPY5 KB
‹redacted›.poPO5 KB
cf_test.cC5 KB
mac_harvest1.shSH5 KB
probe_variants.pyPY5 KB
‹redacted›.poPO5 KB
builtin_reflect.goGO5 KB
tcc_profile.shSH5 KB
t70_install.shSH5 KB
exploit-urlencoded.shSH4 KB
object_goslice_test.goGO4 KB
HANDOFF.mdMD4 KB
‹redacted›.potPOT4 KB
exp.cC4 KB
‹redacted›.ovpnOVPN4 KB
‹redacted›.sampleSAMPLE4 KB
builtin_weakmap.goGO4 KB
‹redacted›.stateSTATE4 KB
enumerate-actions.shSH4 KB
j2p2.logLOG4 KB
walletunlocker_pb2.pyPY4 KB
uk.jsonJSON4 KB
builtin_symbol.goGO4 KB
t70_payload.shSH4 KB
j2p2.logLOG4 KB
map_test.goGO4 KB
‹redacted›.sampleSAMPLE4 KB
j2p2.logLOG4 KB
vm_test.goGO4 KB
README.mdMD4 KB
playback.jsJS4 KB
mac_harvest3.shSH4 KB
mac_h3b.shSH4 KB
exploit-reflect.shSH4 KB
sqli_bypass.pyPY4 KB
nl.jsonJSON4 KB
j3exfil_capjsonTXT4 KB
j3exfil_cap2TXT4 KB
EMBEDDING.mdMD4 KB
j3c2.logLOG4 KB
amm_full.pyPY4 KB
exploit_v2.pyPY4 KB
string_test.goGO4 KB
builtin_map_test.goGO4 KB
otp_brute_progress.logLOG4 KB
ja.jsonJSON4 KB
ks.cC4 KB
base64.jsJS4 KB
mb_dis.pyPY3 KB
exp112445.cC3 KB
step2_otp_test.pyPY3 KB
exploit-redirect.shSH3 KB
LN-Invoice-Watch.jsJS3 KB
zh_CN.jsonJSON3 KB
assertions.jsJS3 KB
fr.jsonJSON3 KB
hu.jsonJSON3 KB
deploy_statewatch.pyPY3 KB
‹redacted›.mjsMJS3 KB
ru.jsonJSON3 KB
chatwoot-super-admin.htmlHTML3 KB
sv.jsonJSON3 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
100.21.82.169confirmed
101.35.210.248confirmed
101.36.112.205confirmed
101.42.136.73confirmed
101.43.25.15confirmed
101.47.156.26confirmed
101.89.149.227confirmed
102.204.222.159confirmed
102.209.224.40confirmed
102.210.149.166confirmed
103.117.136.137confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.133.216.219confirmed