Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

142.93.57.244

DATACENTERoperator-submittedc2elf-binaryexploitexposed-secretgafgyt

Intelligence

ASN / OrgAS14061 · DigitalOcean, LLC
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 8765
Loot harvested217 file(s), 54550 KB · c2, elf-binary, exploit, exposed-secret, gafgyt, havoc

Open directory contents (217)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
cc.jsJS6.2 MB
.bun-0-e83060072c005618.soELF6.0 MB
37d5ba1e.jsJS4.3 MB
main.jsJS4.0 MB
ms.zipZIP3.5 MB
b.jsJS2.4 MB
b.jsJS2.4 MB
b.jsJS2.4 MB
acr-list.txtTXT1.9 MB
acr_all.txtTXT1.9 MB
acr_prod.txtTXT1.9 MB
alc_live.jsJS1.4 MB
alc_int_live.jsJS1.4 MB
allhosts.txtTXT954 KB
agentpai-index.jsJS891 KB
d365bap.tools.psm1PSM1872 KB
ai.jsJS777 KB
is_city.jsonJSON652 KB
is.jsonJSON652 KB
chaos.txtTXT616 KB
intigriti_data.jsonJSON594 KB
.bun-0-71b650bef1b3e52c.nodeELF502 KB
afd-all.txtTXT381 KB
000001.logLOG369 KB
_EN-US_tsipartnerdesk_.htmlHTML279 KB
merged.tsvTSV277 KB
session-2026-10-17T07-46-55-287Z-809216-1.logLOG218 KB
q15-azure200.jsonJSON205 KB
q14-microsoft200.jsonJSON194 KB
fresh-candidates.txtTXT192 KB
fresh-filtered.txtTXT189 KB
pageq.htmlHTML185 KB
issue.htmlHTML185 KB
q16-azuresamples200.jsonJSON183 KB
records4.tsvTSV165 KB
1l-tvc13rxkdt.jsJS158 KB
payload.jsJS135 KB
all_locks.mdMD132 KB
records.tsvTSV131 KB
0rzytlihws3fc.jsJS129 KB
‹redacted›.com.txtTXT127 KB
q19-azsdkengsys.jsonJSON124 KB
yeswehack_data.jsonJSON119 KB
decoded.txtTXT107 KB
q3-microsoftdocs.jsonJSON105 KB
q2-azure.jsonJSON103 KB
438passdwy4-n.jsJS102 KB
‹redacted›.com.txtTXT97 KB
q1-microsoft.jsonJSON96 KB
26oq0wubvpy__.jsJS93 KB
3z9lp81z7wp-h.jsJS93 KB
q10-azuresamples.jsonJSON92 KB
‹redacted›.hostsHOSTS92 KB
all-live.txtTXT90 KB
q12-dotnet.jsonJSON85 KB
q4-yaml.jsonJSON82 KB
‹redacted›.org.jsonJSON77 KB
‹redacted›.net.txtTXT73 KB
fresh-filtered2.txtTXT73 KB
q5-dockerfile.jsonJSON72 KB
‹redacted›.jsonlJSONL65 KB
‹redacted›.org.jsonJSON54 KB
host_summary.tsvTSV51 KB
all_fresh_hosts.txtTXT49 KB
first_party_sets.dbDB48 KB
aad.htmlHTML46 KB
aad3.htmlHTML46 KB
ap.htmlHTML46 KB
aad-meg-valid.htmlHTML43 KB
aad-ctl-04b07795-8ddb-461a-bbee-02f9e1bf7b46.htmlHTML43 KB
31552dp98k8m5.jsJS43 KB
aad-meg-default-invalid.htmlHTML42 KB
aad-meg-invalid.htmlHTML42 KB
aad-ctl-00000003-0000-0000-c000-000000000000.htmlHTML42 KB
afd.205000620500042 KB
afd.205002720500242 KB
afd.204997220499741 KB
afd.204994620499441 KB
aad-dt-invalid.htmlHTML41 KB
aad-matrix-invalid.htmlHTML41 KB
records3.tsvTSV39 KB
‹redacted›.tsxTSX37 KB
_EN-US_MicrosoftCloudforNonprofitATBRegister_registration_.htmlHTML36 KB
am.binBIN34 KB
ap_10312TXT32 KB
sep-applike.txtTXT29 KB
agenthosts.txtTXT28 KB
ms-records.tsvTSV26 KB
‹redacted›.config.jsonJSON25 KB
abcd_hosts.txtTXT24 KB
‹redacted›.config.jsonJSON23 KB
sep-names.txtTXT22 KB
session-2026-10-17T07-43-36-596Z-806632-1.logLOG21 KB
fixexploit.pyPY21 KB
q11a-docker.jsonJSON20 KB
records2.tsvTSV20 KB
3.jsonJSON20 KB
cohort-live.txtTXT20 KB
hot.txtTXT20 KB
q11c-image.jsonJSON17 KB
session-2026-10-17T07-40-44-096Z-804048-1.logLOG15 KB
sonic-api-deep-trace.mdMD13 KB
all_pass_md.txtTXT12 KB
final-pass-triage.txtTXT12 KB
0k0o4a6c_zvxz.jsJS12 KB
q9-microsoftgraph.jsonJSON11 KB
afdscan-hosts.txtTXT11 KB
artifact_2bbbdccc-fa4c-4f81-b9fd-12cd0234701c_buddy_disconnected-scenario-artifacts.tgzTGZ10 KB
agentsettings.jsonJSON9 KB
all_registry_files.txtTXT9 KB
‹redacted›.nuspecNUSPEC8 KB
d365bap.tools.psd1PSD18 KB
new-hosts.txtTXT7 KB
Local%20StateTXT7 KB
5.jsonJSON7 KB
filtered.txtTXT7 KB
4.jsonJSON7 KB
REPORT.mdMD7 KB
acr_filecounts.txtTXT7 KB
000001.logLOG6 KB
sandbox-hosts.txtTXT6 KB
‹redacted›.config.jsonJSON6 KB
‹redacted›.config.jsonJSON6 KB
results.txtTXT6 KB
ai-hosts.txtTXT5 KB
cop.txtTXT5 KB
aa.hH5 KB
ap.hH4 KB
FINDINGS.mdMD4 KB
all-hosts.txtTXT4 KB
mcp2.txtTXT4 KB
FINDINGS.mdMD4 KB
ph-config.jsJS3 KB
new-hosts.txtTXT3 KB
sel.txtTXT3 KB
q13-officedev.jsonJSON3 KB
socks5.txtTXT3 KB
NOTES.mdMD3 KB
afTXT3 KB
1.jsonJSON3 KB
session-2026-10-17T07-39-46-421Z-802824-1.logLOG3 KB
secrets_raw.txtTXT3 KB
field_names.txtTXT3 KB
ad_batch_10.txtTXT3 KB
acr-new2-out.tsvTSV2 KB
ad_batch_01.txtTXT2 KB
‹redacted›.cookiesCOOKIE2 KB
acr_alltags_credscan.pyPY2 KB
batch2.txtTXT2 KB
acr_history.pyPY2 KB
ado_probe.shSH2 KB
dropped-dcr.txtTXT1 KB
‹redacted›.bodyBODY1 KB
‹redacted›.bodyBODY1 KB
‹redacted›.bodyBODY1 KB
merge.pyPY1 KB
extract.pyPY1 KB
a.binBIN1 KB
ab.hH1 KB
fingerprint.logLOG1 KB
ado_probe2.shSH1 KB
‹redacted›.bodyBODY1 KB
session-2026-10-17T07-40-49-695Z-804136-1.logLOG1 KB
session-2026-10-17T07-43-39-944Z-806679-1.logLOG1 KB
session-2026-10-17T07-47-03-607Z-809325-1.logLOG1 KB
‹redacted›.hdrHDR1 KB
‹redacted›.hdrHDR1 KB
‹redacted›.body.binBIN1 KB
‹redacted›.bodyBODY1 KB
_fp3bHTML1 KB
crp-l11.tgzTGZ1 KB
_k.pemPEM1 KB
_ak.pemPEM1 KB
src_373_msal_authConfig.jsJS839 B
a1-root.shSH761 B
7z1.logLOG711 B
artifact_2bbbdccc-fa4c-4f81-b9fd-12cd0234701c_buddy_agent-config-update.tgzTGZ484 B
aad.pemPEM451 B
.well-known_openid-configuration.hdrHDR447 B
‹redacted›.hdrHDR447 B
actprobe.shSH415 B
7z2.logLOG335 B
‹redacted›.bodyBODY239 B
‹redacted›.hdrHDR229 B
crp-l2.tgzTGZ209 B
sitemap_first200.binBIN200 B
‹redacted›.bodyBODY196 B
‹redacted›.bodyBODY192 B
‹redacted›.bodyBODY189 B
‹redacted›.bodyBODY188 B
‹redacted›.bodyBODY185 B
‹redacted›.bodyBODY184 B
ap_10153TXT166 B
‹redacted›.hdrHDR166 B
‹redacted›.hdrHDR166 B
‹redacted›.hdrHDR166 B
‹redacted›.bodyBODY149 B
000001.logLOG136 B
‹redacted›.bodyBODY135 B
‹redacted›.errERR107 B
‹redacted›.errERR107 B
‹redacted›.errERR106 B
‹redacted›.errERR106 B
‹redacted›.errERR106 B
‹redacted›.errERR106 B
‹redacted›.errERR105 B
‹redacted›.errERR105 B
‹redacted›.errERR105 B
‹redacted›.errERR105 B
‹redacted›.errERR104 B
‹redacted›.errERR103 B
crp-l7.tgzTGZ102 B
crp-l9.tgzTGZ92 B
‹redacted›.body.binBIN75 B
7z.logLOG43 B
‹redacted›.bodyBODY19 B
‹redacted›.body.binBIN7 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

168.144.251.199confirmed
89.124.67.72confirmed