huntback / IP intelligence

130.94.44.130

RESIDENTIALoperator-submittedloot-ipexploitexposed-secretopen-directorytunnel

Intelligence

ASN / OrgAS2914 · NTT America, Inc.
CountrySingapore
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 7000, 8001
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested98 file(s), 6074 KB · exploit, exposed-secret, malware, mozi, tunnel, webshell

Open directory contents (98)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
OpenSSH-Win64.zipZIP5.7 MB
20261022_210306_127.0.0.1_index.php.txtTXT61 KB
20261023_183741_127.0.0.1_index.php.txtTXT20 KB
20261023_183658_127.0.0.1_index.php.txtTXT20 KB
20261023_183617_127.0.0.1_index.php.txtTXT19 KB
fix2.ps1PS16 KB
fix.ps1PS16 KB
fix3.ps1PS16 KB
fix4.ps1PS16 KB
20261021_085909_127.0.0.1_up_fail.txtTXT3 KB
20261021_085901_127.0.0.1_up_dbg_after.txtTXT3 KB
20261027_112910_127.0.0.1_login.txtTXT2 KB
20261024_101656_127.0.0.1_login.txtTXT2 KB
20261021_085852_127.0.0.1_up_perms.txtTXT2 KB
20261026_175052_127.0.0.1_geoserver_wms.txtTXT1 KB
20261024_101657_127.0.0.1_login.txtTXT1 KB
20261027_112911_127.0.0.1_login.txtTXT1 KB
20261021_085852_127.0.0.1_up_dbg_before.txtTXT1 KB
server.pyPY1 KB
20261022_132150_127.0.0.1_hello.world%3F%25ADd%2Ballow_url_include%253d1%2B%25ADd%2Bauto_prepend_file%253dphp%3A__input.TXT1 KB
20261026_175050_127.0.0.1_up.txtTXT1 KB
20261026_175103_127.0.0.1_XMLCHART.txtTXT1023 B
20261101_060234_127.0.0.1_XMLCHART.txtTXT1023 B
20261107_175001_127.0.0.1_XMLCHART.txtTXT1023 B
‹redacted›.cfm.txtTXT850 B
‹redacted›.cfm.txtTXT850 B
‹redacted›.cfm.txtTXT850 B
20261026_175051_127.0.0.1_user_register%3Felement_parents%3Daccount_mail_%2523value%26ajax_form%3D1%26_wrapper_format%3DTXT631 B
20261101_060154_127.0.0.1_developmentserver_metadatauploader%3FCONTENTTYPE%3DMODEL%26CLIENT%3D1.txtTXT521 B
20261026_175023_127.0.0.1_developmentserver_metadatauploader%3FCONTENTTYPE%3DMODEL%26CLIENT%3D1.txtTXT520 B
20261107_174921_127.0.0.1_developmentserver_metadatauploader%3FCONTENTTYPE%3DMODEL%26CLIENT%3D1.txtTXT520 B
‹redacted›.cgi.txtTXT507 B
‹redacted›.cgi.txtTXT507 B
‹redacted›.cgi.txtTXT507 B
20261106_070908_127.0.0.1_wp-admin_admin-ajax.php%3Faction%3Dupload_file_test_poc.txtTXT388 B
20261026_175055_127.0.0.1_Login.txtTXT358 B
20261101_060225_127.0.0.1_Login.txtTXT358 B
20261107_174953_127.0.0.1_Login.txtTXT358 B
‹redacted›.pyc.txtTXT334 B
‹redacted›.pyc.txtTXT334 B
‹redacted›.pyc.txtTXT334 B
20261026_175051_127.0.0.1_mgmt_shared_iapp_rpm-spec-creator.txtTXT278 B
20261101_060222_127.0.0.1_mgmt_shared_iapp_rpm-spec-creator.txtTXT278 B
20261107_174949_127.0.0.1_mgmt_shared_iapp_rpm-spec-creator.txtTXT278 B
frpc.tomlTOML276 B
20261026_175034_127.0.0.1_api_authentication_login.txtTXT260 B
20261026_175049_127.0.0.1_webtools_control_forgotPassword_%252e_%252e_ProgramExport.txtTXT260 B
20261026_175059_127.0.0.1_api_authentication_login.txtTXT260 B
20261101_060205_127.0.0.1_api_authentication_login.txtTXT260 B
20261101_060230_127.0.0.1_api_authentication_login.txtTXT260 B
20261107_174932_127.0.0.1_api_authentication_login.txtTXT260 B
20261107_174957_127.0.0.1_api_authentication_login.txtTXT260 B
20261026_175020_127.0.0.1_php_components_logs.php.txtTXT255 B
20261101_060151_127.0.0.1_php_components_logs.php.txtTXT255 B
20261107_174918_127.0.0.1_php_components_logs.php.txtTXT255 B
20261026_175032_127.0.0.1_content_forms_af_geometrixx-gov_application-for-assistance_jcr%3Acontent_guideContainer.af.intTXT238 B
20261029_140013_127.0.0.1_hello.world%3F%25ADd%2Ballow_url_include%253d1%2B%25ADd%2Bauto_prepend_file%253dphp%3A__input.TXT229 B
20261026_175020_127.0.0.1_webtools_control_forgotPassword_xmldsdump.txtTXT218 B
20261101_060151_127.0.0.1_webtools_control_forgotPassword_xmldsdump.txtTXT218 B
20261107_174918_127.0.0.1_webtools_control_forgotPassword_xmldsdump.txtTXT218 B
20261026_175051_127.0.0.1_CFIDE_wizards_common_utils.cfc%3Fmethod%3DwizardHash%2520inPassword%3Dbar%2520_cfclient%3DtrueTXT217 B
20261026_175057_127.0.0.1_CFIDE_wizards_common_utils.cfc%3Fmethod%3DwizardHash%2520inPassword%3Dbar%2520_cfclient%3DtrueTXT212 B
20261026_175021_127.0.0.1_v1_api.txtTXT203 B
20261101_060154_127.0.0.1_v1_api.txtTXT203 B
20261107_174919_127.0.0.1_v1_api.txtTXT203 B
20261026_175048_127.0.0.1_CFIDE_wizards_common_utils.cfc%3Fmethod%3DwizardHash%2520inPassword%3Dbar%2520_cfclient%3DtrueTXT198 B
20261026_175054_127.0.0.1_CFIDE_wizards_common_utils.cfc%3Fmethod%3DwizardHash%2520inPassword%3Dbar%2520_cfclient%3DtrueTXT192 B
20261026_175052_127.0.0.1_apps_zxtm_wizard.fcgi%3Ferror%3D1%26section%3DAccess%2BManagement%253ALocalUsers.txtTXT167 B
20261101_060223_127.0.0.1_apps_zxtm_wizard.fcgi%3Ferror%3D1%26section%3DAccess%2BManagement%253ALocalUsers.txtTXT167 B
20261107_174950_127.0.0.1_apps_zxtm_wizard.fcgi%3Ferror%3D1%26section%3DAccess%2BManagement%253ALocalUsers.txtTXT167 B
20261026_175057_127.0.0.1_api_v1_method.callAnon_getPasswordPolicy.txtTXT146 B
20261101_060229_127.0.0.1_api_v1_method.callAnon_getPasswordPolicy.txtTXT146 B
20261107_174956_127.0.0.1_api_v1_method.callAnon_getPasswordPolicy.txtTXT146 B
20261026_175018_127.0.0.1_sdwan_nitro_v1_config_get_package_file%3Faction%3Dfile_download.txtTXT142 B
20261026_175058_127.0.0.1_as_wapi_vmp.txtTXT141 B
20261026_175101_127.0.0.1_as_wapi_vmp.txtTXT141 B
20261026_182628_127.0.0.1_admin_config.php.txtTXT137 B
20261026_175042_127.0.0.1_Startup_Register.txtTXT133 B
20261101_060213_127.0.0.1_Startup_Register.txtTXT133 B
20261107_174940_127.0.0.1_Startup_Register.txtTXT133 B
20261026_175035_127.0.0.1_c_router.txtTXT130 B
20261107_174933_127.0.0.1_c_router.txtTXT130 B
20261026_175018_127.0.0.1_cf_scripts_scripts_ajax_ckeditor_plugins_filemanager_iedit.cfc%3Fmethod%3DwizardHash%26_cfclieTXT121 B
20261106_165411_127.0.0.1_GponForm_diag_Form%3Fimages.txtTXT118 B
20261026_175059_127.0.0.1_file-manager_backend_text.txtTXT103 B
20261101_060231_127.0.0.1_file-manager_backend_text.txtTXT103 B
20261107_174959_127.0.0.1_file-manager_backend_text.txtTXT103 B
‹redacted›.cgi.txtTXT89 B
20261026_175054_127.0.0.1_auth_token.txtTXT85 B
20261026_175057_127.0.0.1_sql.txtTXT55 B
20261026_175047_127.0.0.1_Token.txtTXT53 B
20261101_060218_127.0.0.1_Token.txtTXT53 B
20261107_174945_127.0.0.1_Token.txtTXT53 B
20261026_175023_127.0.0.1_bin_configurations_parsers_Checkpoint_CHECKPOINT.php.txtTXT52 B
20261026_175051_127.0.0.1_login_index.php%3Flogin%3D%24%28ping%24%7BIFS%7D-nc%24%7BIFS%7D2%24%7BIFS%7D%60whoami%60.dbfi4TXT40 B
20261027_215755_127.0.0.1_vendor_phpunit_phpunit_src_Util_PHP_eval-stdin.php.txtTXT38 B
20261026_175046_127.0.0.1_RP.txtTXT27 B
20261026_175037_127.0.0.1_public_index.php_material_Material__download_imgage%3Fmedia_id%3D1%26picUrl%3D._.._config_dataTXT5 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free