Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

146.19.213.192

DATACENTERoperator-submittedloot-iphot-cve-kitkit:php2shellc2elf-binary

Intelligence

ASN / OrgAS200019 · ALEXHOST SRL
CountryRussia
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports9999, 22, 80, 443
Loot harvested1270 file(s), 1113651 KB · c2, coinminer, elf-binary, exploit, exposed-secret, forced-loot

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
_scanner_scripts_20261031-0050.tar.gzGZ381.7 MB
listener.logLOG169.3 MB
_scanner_keep_20261031-0049.tar.gzGZ144.1 MB
qfs.dbDB102.0 MB
panel_watch.logLOG44.5 MB
jhaddix.txtTXT25.3 MB
top-1m.csvCSV21.6 MB
php-8.4.26.tar.gzGZ20.8 MB
tranco.csvCSV20.6 MB
php-8.3.35.tar.gzGZ18.4 MB
php-8.2.34.tar.gzGZ17.7 MB
soul-core-20261103-002222.tgzTGZ12.3 MB
‹redacted›.dart.jsJS10.0 MB
tranco.zipZIP9.2 MB
llm-scannerELF8.3 MB
llm-scanner-t7ELF8.3 MB
llm-scanner.bak-t7-20261108T123333ZELF8.3 MB
llm-scanner-t7-fix7-2f62eb58ELF8.3 MB
llm-scanner.bak-wallet-20261108-104654ELF8.2 MB
llm-scanner-newELF7.1 MB
tranco_com.txtTXT6.3 MB
com_cand2.txtTXT4.1 MB
‹redacted›.jsonlJSONL3.4 MB
‹redacted›.jsonlJSONL2.9 MB
‹redacted›.jsonlJSONL2.7 MB
‹redacted›.jsonlJSONL1.6 MB
‹redacted›.jsonlJSONL1.5 MB
tranco_slice2.txtTXT1.2 MB
qfs_passwords.csvCSV1.1 MB
c5.jsJS798 KB
com_live_10000.csvCSV670 KB
tranco_slice.txtTXT521 KB
brute10k.logLOG512 KB
sc.htmlHTML489 KB
hz.jsJS436 KB
batch1_usable.txtTXT330 KB
dl_script.binBIN304 KB
tranco_com_20k.txtTXT274 KB
py.jsJS238 KB
pm.bak-wstrict-1794037568BAK-WS207 KB
pm.bak-llm-1794013268BAK-LL205 KB
pm.bak-importf-1794008506BAK-IM202 KB
pm.bak-smtp-1794003167BAK-SM201 KB
pm.bak-3p-1794002705BAK-3P199 KB
pm.bak-perf-1794002449BAK-PE198 KB
mcp_tools.txtTXT198 KB
cd_app__metrics.txtTXT195 KB
pm.bak-group-1794002272BAK-GR193 KB
pm.bak-enrich-1794000210BAK-EN190 KB
pm.bak-pan-1793999424BAK-PA188 KB
pm.bak-strict-1793996485BAK-ST187 KB
pm.bak-junk-1793996157BAK-JU186 KB
pm.bak-live-1793995782BAK-LI184 KB
pm.bak-wal-1793994506BAK-WA182 KB
pm.bak-early-1793995426BAK-EA182 KB
pm.bak-db-1793994017BAK-DB182 KB
checkout_openapi.jsonJSON182 KB
pm.bak-1793993890BAK-17182 KB
panel_main.bak-1793988768BAK-17181 KB
creds.bak-sol-1794036758BAK-SO143 KB
creds.bak-tok-1794017733BAK-TO141 KB
com_live_10000.txtTXT140 KB
creds.bak-wtx-1794017623BAK-WT139 KB
creds.bak-gem-1794015727BAK-GE138 KB
creds.bak-api-1794004054BAK-AP134 KB
dom.txtTXT132 KB
creds.bak-smtp-1794003167BAK-SM132 KB
creds.bak-keys-1794001822BAK-KE130 KB
modules.goGO126 KB
creds.bak-q-1793999719BAK-Q-126 KB
creds.bak-pan-1793999424BAK-PA124 KB
creds.bak-1793997289BAK-17124 KB
nexo_wl.txtTXT123 KB
creds.py.bak-1793992310BAK-17123 KB
creds.py.bak-1793991031BAK-17118 KB
modules.go.bak-t7-20261108-102810BAK-T7114 KB
modules.go.bak-t6b-20261108-093500BAK-T6114 KB
auth.jsJS113 KB
modules.go.bak-t6-20261108-091536BAK-T6112 KB
panel-code.tgzTGZ111 KB
modules.go.bak-fp-20261108-080500GO111 KB
modules.go.bak-render-1793836563BAK-RE103 KB
modules.go.bak-dbg-1793835942BAK-DB102 KB
modules.go.bak-jsre-1793835820BAK-JS102 KB
modules.go.bak-nofast-1793833446BAK-NO101 KB
modules.go.bak-headless-1793835682BAK-HE101 KB
_scanner_src_20261031-0049.tar.gzGZ99 KB
widget.jsJS97 KB
modules.go.bak-more-1793832847BAK-MO94 KB
modules.go.bak-opt-1793832345BAK-OP93 KB
modules.go.bak-dedup-1793816908BAK-DE90 KB
modules.go.bak-catalog-1793815786BAK-CA89 KB
modules.go.bak-unify-1793815738BAK-UN87 KB
modules.go.bak-claim-1793814734BAK-CL86 KB
modules.go.bak-recon2-1793717714BAK-RE85 KB
modules.go.bak-step4f-1793750621BAK-ST85 KB
modules.go.bak-baseline-1793622297BAK-BA85 KB
modules.go.bak-wq-1793588519BAK-WQ84 KB
repair_long.csvCSV80 KB
poc.pyPY74 KB
fb_hist.txtTXT72 KB
npm.jsonJSON62 KB
ev_gf_loginTXT60 KB
panel-front.tgzTGZ59 KB
‹redacted›.min.jsJS52 KB
scan_dump.jsonJSON50 KB
api.pyPY47 KB
module.esm-Gwiu-WE_.jsJS40 KB
attack_cgn_suivi.logLOG39 KB
api.py.bak-immat-20261108T162025ZBAK-IM39 KB
php2shell.pyPY37 KB
high.logLOG37 KB
pkg.tgzTGZ36 KB
‹redacted›.jsonlJSONL34 KB
LICENSETXT33 KB
THIRD-PARTY-LICENSES.mdMD33 KB
‹redacted›.pycPYC33 KB
cd_app__login.txtTXT30 KB
scan_www.jsonJSON27 KB
chat3.jsJS26 KB
AGENTS.mdMD26 KB
bip39_gen.goGO26 KB
pw_mut.txtTXT25 KB
poc_109618.pyPY23 KB
fofa_hosts.txtTXT22 KB
README.mdMD22 KB
exploit_fb.pyPY19 KB
fb_hist.logLOG19 KB
‹redacted›.ja.mdMD19 KB
php2shell-maitrise-lab.mdMD18 KB
main.goGO18 KB
README.mdMD18 KB
php2shell-distro-builds.mdMD17 KB
attack_cgn_msg.logLOG17 KB
‹redacted›.fr.mdMD17 KB
‹redacted›.en.mdMD17 KB
README.mdMD17 KB
main.go.bak-t7-20261108-102810BAK-T717 KB
crawler.goGO16 KB
main.go.bak-t6b-20261108-093500BAK-T616 KB
README.zh_CN.mdMD16 KB
ps859.binBIN16 KB
pslive.binBIN16 KB
crawler.go.bak-caps2-1793835117BAK-CA15 KB
‹redacted›.jsonlJSONL15 KB
main.go.bak-t6-20261108-091536GO15 KB
modbench.pyPY15 KB
README.zh_TW.mdMD15 KB
main.go.bak-1793995765BAK-1715 KB
crawler.go.bak-opt-1793832345BAK-OP15 KB
crawler.go.bak-unify-1793815738BAK-UN15 KB
exploit_vllm.pyPY15 KB
crawler.go.bak-claim-1793814734BAK-CL15 KB
main.go.bak-nofast-1793833446BAK-NO15 KB
words.txtTXT15 KB
main.go.bak-headless-1793835682BAK-HE14 KB
modbench.py.bak-cert-1793706804BAK-CE14 KB
build_identity.pyPY14 KB
crawler.go.bak-noise-1793807493BAK-NO14 KB
crawler.go.bak-step4f-1793750621BAK-ST13 KB
p2s-matrix-harness.pyPY13 KB
ORDERS.mdMD13 KB
EVIDENCE.mdMD13 KB
scan_poupette.jsonJSON12 KB
catalog_gen.goGO12 KB
main.go.bak-recon2-1793717714BAK-RE12 KB
ins_form.htmlHTML12 KB
main.go.bak-targets-1793619102BAK-TA12 KB
h_a.logLOG12 KB
main.go.bak-probe-1793621596BAK-PR12 KB
main.goGO11 KB
qfs_schema.jsonJSON11 KB
README.mdMD11 KB
b.01_root01_ROO11 KB
php2shell-distros-etendues.mdMD11 KB
php2shell-port-82-83.mdMD11 KB
main.go.bak-down-20261101-131716BAK-DO11 KB
main.go.bak-fixes-20261101-134404BAK-FI11 KB
main.go.bak-probe-20261101-131133BAK-PR11 KB
main.go.bak-dial2-20261101-131042BAK-DI10 KB
enrich3.bak-1794001446BAK-1710 KB
load.pyPY10 KB
main.go.bak-dial-20261101-130940BAK-DI10 KB
scan.pyPY10 KB
enrich.bak2-1794001043BAK2-110 KB
main.go.bak-conc-20261101-130700BAK-CO10 KB
rfc_8.3.35.cC9 KB
rfc_8.2.34.cC9 KB
php2shell-alt-approach.mdMD9 KB
fb_flows.jsJS9 KB
php2shell-builds-etendus.mdMD8 KB
php2shell-distro-stage3.mdMD8 KB
cd_hosts_out.txtTXT8 KB
pma5.logLOG8 KB
cd_attack1_out.txtTXT8 KB
‹redacted›.jsonlJSONL7 KB
patch_annee.pyPY7 KB
ETAT-SESSION-soul-20261108-v2.mdMD7 KB
p2s-postex-harness.pyPY7 KB
enrich.bak-1794000232BAK-177 KB
php2shell-remote-rce.mdMD7 KB
qfs_schema.csvCSV7 KB
creds_valides_20261102-035142.jsonJSON7 KB
opticalcenter_report.mdMD7 KB
walletcheck.goGO7 KB
profiles.jsonJSON7 KB
disc_paths.txtTXT7 KB
m2.pyPY7 KB
probe3.logLOG7 KB
creds_valides_20261105-151849.jsonJSON7 KB
secretsguard.goGO7 KB
relay.pyPY7 KB
‹redacted›.modMOD6 KB
evidence.shSH6 KB
README-SOURCE.mdMD6 KB
patch_sites.pyPY6 KB
aws_probe.pyPY6 KB
docker-compose.ymlYML6 KB
ETAT-SCANNER.mdMD6 KB
shopta_probe.pyPY6 KB
aws_pair_pass.pyPY6 KB
fdesouche_report.mdMD6 KB
dump_keyset.pyPY6 KB
histoiredor_report.mdMD6 KB
probe2.logLOG6 KB
labtool.pyPY6 KB
ETAT-SESSION-soul-20261108-v3.mdMD6 KB
m1.pyPY5 KB
p2s-extras.pyPY5 KB
qfs_schema.logLOG5 KB
.env.exampleEXAMPL5 KB
dump_all.logLOG5 KB
cz_a.logLOG5 KB
run.logLOG5 KB
pma4.logLOG5 KB
patch_smtp_api.pyPY5 KB
evidence.shSH5 KB
verify_live.pyPY5 KB
ETAT-SESSION-soul-20261108.mdMD5 KB
cd_sni_out.txtTXT5 KB
panel_battery.pyPY5 KB
probe.logLOG5 KB
MODULES-REVUE.mdMD5 KB
patch_smtp_api2.pyPY5 KB
cd_min.pyPY5 KB
m6.pyPY4 KB
llm_gateway.pyPY4 KB
cd_attack2_out.txtTXT4 KB
m10.pyPY4 KB
soft404_test.goGO4 KB
FONCTIONNEMENT.mdMD4 KB
m9.pyPY4 KB
postex-both.logLOG4 KB
BENCH-MODULES.mdMD4 KB
‹redacted›.com.htmlHTML4 KB
m7.pyPY4 KB
DESKOIN_EVIDENCE.mdMD4 KB
aws_verify.pyPY4 KB
run_modbench.pyPY4 KB
signin.pyPY4 KB
27_all.pyPY4 KB
panel-schema.sqlSQL4 KB
‹redacted›.com.htmlHTML4 KB
patch_xrp_ton.pyPY4 KB
patch_front_sites.pyPY4 KB
patch_panel2.pyPY4 KB
m11.pyPY4 KB
lab_sury_rebuild.shSH4 KB
dump_cgn.pyPY4 KB
expired-password-rZBTzWAb.jsJS4 KB
dump_all2.pyPY4 KB
dump_all.pyPY4 KB
rejoindre_2026-11-02.mdMD4 KB
sc9.pyPY4 KB
panel_watch.pyPY4 KB
creds_valides_20261105-151849.csvCSV4 KB
drive.pyPY4 KB
audit_chaine.shSH4 KB
reset--tdd_IyR.jsJS4 KB
creds_valides_20261102-035142.csvCSV4 KB
12_secret.pyPY4 KB
enroll_tbp.pyPY4 KB
09_account.pyPY4 KB
patch_tables_tab.pyPY4 KB
catchall_test.goGO4 KB
28_secret.pyPY4 KB
leak_859.binBIN4 KB
patch_identity2.pyPY3 KB
walletcheck_test.goGO3 KB
11_order.pyPY3 KB
signin2.pyPY3 KB
patch_group.pyPY3 KB
load_all.pyPY3 KB
patch_quality.pyPY3 KB
dkev.pyPY3 KB
subsweep.pyPY3 KB
patch_panel.pyPY3 KB
ev_f9.pyPY3 KB
10_signed.pyPY3 KB
creds_valides_20261105-151849.txtTXT3 KB
probe_auto.pyPY3 KB
fpfilter.goGO3 KB
SWISSCOM_EVIDENCE.mdMD3 KB
m8.pyPY3 KB
add_env_pairs.pyPY3 KB
cf_solve.pyPY3 KB
creds_valides_20261102-035142.txtTXT3 KB
29_parent.pyPY3 KB
cve_audit.pyPY3 KB
aws_persist.pyPY3 KB
queue_bot.pyPY3 KB
cve9.pyPY3 KB
fd_nopriv.pyPY3 KB
errors.jsonJSON3 KB
cache_test.pyPY3 KB
xev.pyPY3 KB
15_order2.pyPY3 KB
13_hooks.pyPY3 KB
evidence2.shSH3 KB
ev.pyPY3 KB
schema.pyPY3 KB
36_finance.pyPY3 KB
b2bz_mass.pyPY3 KB
nova_flow.pyPY3 KB
export_creds.py.bak-1793891928BAK-173 KB
nova_verify.pyPY3 KB
ETAT-SESSION.mdMD3 KB
cd_hosts.shSH3 KB
probe_ps.pyPY3 KB
analyze_tbp.pyPY3 KB
patch_annee2.pyPY3 KB
export_creds.pyPY3 KB
35_trigger.pyPY3 KB
oc_waf.pyPY3 KB
dump_cols_range.pyPY3 KB
rce_dev84.logLOG3 KB
queue_bot.py.bak-boucle-20261107PY3 KB
patch_smtp_roles.pyPY3 KB
dump_user.pyPY3 KB
patch_3points.pyPY3 KB
patch_enrich_rest.pyPY3 KB
cd_min_out.txtTXT3 KB
cd_attack2.shSH3 KB
cd_attack1.shSH3 KB
cd_recon.shSH3 KB
21_authz.pyPY3 KB
repair_long.logLOG3 KB
SWISSCOM_CVE.mdMD3 KB
forgot-password-CkaPXsOl.jsJS3 KB
cd_bypass_out.txtTXT3 KB
34_ssrf.pyPY3 KB
44_sig.pyPY3 KB
pe_reg.pyPY3 KB
wp_bench.pyPY3 KB
cd_sni.shSH3 KB
proxy_hunt.pyPY3 KB
rce_dev85.logLOG3 KB
admin3_tbp.pyPY3 KB
rc_probe18.pyPY3 KB
harvest.pyPY3 KB
fd_pwn.pyPY3 KB
baback_signup.pyPY3 KB
final_8335.logLOG3 KB
39_var.pyPY3 KB
EXODUS_EVIDENCE.mdMD3 KB
RUNBOOK.mdMD3 KB
mutmap.pyPY3 KB
scan_pro.jsonJSON3 KB
notify2.pyPY3 KB
staff_enum.pyPY3 KB
XO_EVIDENCE.mdMD3 KB
code-DDtR2bRe.jsJS3 KB
14_idor.pyPY3 KB
secretsguard_test.goGO3 KB
rc_enum.pyPY3 KB
19_idor_order.pyPY2 KB
queue_next.pyPY2 KB
nova_adminprobe.pyPY2 KB
oc_raw.pyPY2 KB
nova_svgup.pyPY2 KB
lab_creds_server.pyPY2 KB
evidence6.shSH2 KB
nova_verify2.pyPY2 KB
oc_r2s3.pyPY2 KB
patch_targets_perf.pyPY2 KB
baback_step2.pyPY2 KB
nova_contact.pyPY2 KB
patch_identity_tabs.pyPY2 KB
aws_accounts.pyPY2 KB
fd_mail_reg.pyPY2 KB
40_trigger2.pyPY2 KB
cd_origin.pyPY2 KB
gdbtrace3.shSH2 KB
redirect2.pyPY2 KB
pw2.pyPY2 KB
oc_r2s2.pyPY2 KB
45_discriminant.pyPY2 KB
rc_fields.pyPY2 KB
38_exploit.pyPY2 KB
subsweep2.pyPY2 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

144.91.73.103confirmed
161.33.148.80confirmed
18.136.195.202confirmed
217.160.132.82confirmed
31.56.228.136confirmed
95.179.150.206confirmed