Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

152.42.193.28

DATACENTERloot-ipc2elf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS14061 · DigitalOcean, LLC
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8088
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested747 file(s), 248036 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
bpftool-staticELF8.8 MB
185.220.68.155.tgzTGZ4.6 MB
185.220.68.152.tgzTGZ4.5 MB
128.1.186.183.tgzTGZ4.4 MB
128.1.186.181.tgzTGZ4.4 MB
185.220.68.160.tgzTGZ4.4 MB
ov-patchedELF4.4 MB
128.1.186.60.tgzTGZ4.3 MB
128.1.186.58.tgzTGZ4.3 MB
185.220.68.22.tgzTGZ4.3 MB
185.220.68.10.tgzTGZ4.3 MB
185.220.68.154.tgzTGZ4.2 MB
185.220.68.12.tgzTGZ4.2 MB
128.1.186.180.tgzTGZ4.2 MB
185.220.68.148.tgzTGZ4.2 MB
128.1.186.182.tgzTGZ4.2 MB
185.220.68.18.tgzTGZ4.1 MB
185.220.68.163.tgzTGZ4.1 MB
128.1.186.63.tgzTGZ4.1 MB
185.220.68.17.tgzTGZ4.1 MB
128.1.186.184.tgzTGZ4.1 MB
185.220.68.23.tgzTGZ4.0 MB
185.220.68.14.tgzTGZ4.0 MB
185.220.68.21.tgzTGZ4.0 MB
185.220.68.156.tgzTGZ4.0 MB
185.220.68.150.tgzTGZ4.0 MB
185.220.68.164.tgzTGZ4.0 MB
185.220.68.100.tgzTGZ4.0 MB
128.1.186.61.tgzTGZ3.9 MB
185.220.68.161.tgzTGZ3.9 MB
185.220.68.19.tgzTGZ3.9 MB
128.1.186.59.tgzTGZ3.9 MB
185.220.68.159.tgzTGZ3.9 MB
128.1.186.56.tgzTGZ3.9 MB
185.220.68.13.tgzTGZ3.9 MB
185.220.68.162.tgzTGZ3.9 MB
185.220.68.16.tgzTGZ3.8 MB
185.220.68.15.tgzTGZ3.8 MB
185.220.68.158.tgzTGZ3.8 MB
185.220.68.157.tgzTGZ3.8 MB
185.220.68.151.tgzTGZ3.8 MB
185.220.68.153.tgzTGZ3.8 MB
185.220.68.149.tgzTGZ3.7 MB
128.1.186.57.tgzTGZ3.7 MB
128.1.186.55.tgzTGZ3.7 MB
128.1.186.62.tgzTGZ3.7 MB
185.220.68.20.tgzTGZ3.7 MB
185.220.68.11.tgzTGZ3.6 MB
138.199.42.95.tgzTGZ3.4 MB
98.98.79.235.tgzTGZ3.1 MB
146.70.131.103.tgzTGZ2.6 MB
37.120.140.24.tgzTGZ2.6 MB
bpftoolELF1.9 MB
45.128.37.165.tgzTGZ1.8 MB
138.199.42.94.tgzTGZ1.6 MB
98.98.79.234.tgzTGZ1.4 MB
146.70.46.239.tgzTGZ1.4 MB
174.138.24.153.tgzTGZ1.3 MB
138.199.42.95.tgzTGZ1.3 MB
206.189.147.60.tgzTGZ1.2 MB
45.128.37.137.tgzTGZ907 KB
79.110.53.70.tgzTGZ888 KB
146.70.30.38.tgzTGZ834 KB
146.70.29.11.tgzTGZ829 KB
146.70.29.9.tgzTGZ782 KB
146.70.131.103.tgzTGZ744 KB
146.70.52.134.tgzTGZ735 KB
146.70.29.12.tgzTGZ694 KB
146.70.29.4.tgzTGZ578 KB
138.199.42.94.tgzTGZ573 KB
146.70.46.239.tgzTGZ571 KB
146.70.29.7.tgzTGZ562 KB
bpftool54ELF538 KB
146.70.29.10.tgzTGZ514 KB
107.151.182.241.tgzTGZ507 KB
146.70.29.3.tgzTGZ493 KB
45.128.37.136.tgzTGZ428 KB
146.70.30.38.tgzTGZ383 KB
45.84.123.218.tgzTGZ380 KB
146.70.29.5.tgzTGZ352 KB
146.70.30.9.tgzTGZ347 KB
sni.tsvTSV320 KB
146.70.29.11.tgzTGZ318 KB
dns.tsvTSV314 KB
146.70.29.9.tgzTGZ306 KB
146.70.52.134.tgzTGZ301 KB
‹redacted›.unlock.shSH293 KB
146.70.29.12.tgzTGZ273 KB
217.148.140.9.tgzTGZ266 KB
remove_pro_102.logLOG261 KB
protocol_batch_check.logLOG243 KB
146.70.29.8.tgzTGZ228 KB
146.70.29.4.tgzTGZ227 KB
remove_turbo_104.logLOG227 KB
146.70.29.6.tgzTGZ226 KB
ru_front_back_manager.pyPY192 KB
45.128.37.166.tgzTGZ182 KB
146.70.29.3.tgzTGZ181 KB
146.70.29.7.tgzTGZ181 KB
146.70.29.5.tgzTGZ166 KB
146.70.29.10.tgzTGZ162 KB
146.70.52.135.tgzTGZ160 KB
exec_add_stream102_reg.txtTXT158 KB
146.70.30.9.tgzTGZ145 KB
dns.tsvTSV137 KB
107.151.182.241.tgzTGZ133 KB
remove_turbo_104_b.logLOG124 KB
45.84.121.90.tgzTGZ115 KB
run.logLOG113 KB
remove_pro_102_b.logLOG111 KB
146.70.29.6.tgzTGZ96 KB
lwq-ansible-playbook.logLOG72 KB
146.70.29.8.tgzTGZ71 KB
check_google_country.pyPY67 KB
id-am-probe.logLOG60 KB
146.70.52.135.tgzTGZ60 KB
id-ebpf-20261027-summary.jsonJSON58 KB
payload.jsonJSON37 KB
safesearch_watcher.pyPY35 KB
ansible-init-20260818-065230.logLOG32 KB
parent-cap-scan.tgzTGZ31 KB
parent-ctn-apptype.tgzTGZ30 KB
parent-create-cmds.tgzTGZ28 KB
parent-ctn-scripts.tgzTGZ27 KB
dry_add_stream102.txtTXT27 KB
miami_wam_age_dns_rollout.pyPY20 KB
fr_nl_dns_rollout.pyPY20 KB
remove_relay_masks.pyPY19 KB
rrc_cookiesTXT19 KB
elb-replace-schedule.pyPY19 KB
‹redacted›.pycPYC18 KB
deploy-five.logLOG17 KB
remote_deploy.shSH16 KB
dns_guard.shSH15 KB
recreate_84_20_17_101.shSH15 KB
gen_quic_initial.pyPY15 KB
run_id_probe.pyPY14 KB
cleanup_snoopy_stale_masks.pyPY13 KB
_remote_sni_egress_sfw_scan.pyPY12 KB
run.logLOG12 KB
google_probe.pyPY12 KB
dns_ab.pyPY12 KB
dns_video_safe.pyPY11 KB
protocol_batch_check.pyPY11 KB
recreate_84_20_17_104.shSH10 KB
run.pyPY10 KB
parent-mgmt-survey.tgzTGZ9 KB
mss_test.pyPY9 KB
malware_scan_out.tgzTGZ9 KB
replace_no_app102.logLOG8 KB
replace_co102.logLOG8 KB
analyze_id_ebpf_20261027.pyPY8 KB
our_dns_nodes_registry.pyPY8 KB
replace_co104.logLOG8 KB
replace_ph104.logLOG8 KB
four_filter_dns_20261103.pyPY8 KB
_remote_gbfr_age_scan.pyPY8 KB
deploy_tls_rest.pyPY7 KB
mss_proxy_test.pyPY7 KB
audit_all_vip_back_uuid.pyPY7 KB
107.151.188.102.add4.logLOG7 KB
128.14.65.151.add4.logLOG7 KB
185.220.68.101.add4.logLOG7 KB
fix-sf-two-dns.pyPY7 KB
107.151.188.102.add3.logLOG7 KB
128.14.65.151.add3.logLOG7 KB
185.220.68.101.add3.logLOG7 KB
_check_adult_unlock4.shSH7 KB
cross_run_ssh_attempts.pyPY7 KB
_remote_elb_replace_sfw_probe.pyPY6 KB
recreate_193_108_119_154.shSH6 KB
collect_landing_uuids.pyPY6 KB
audit_landing_uuid.pyPY6 KB
check_vip_back_20205.pyPY6 KB
patch_ops_bq.pyPY6 KB
‹redacted›.ovpnOVPN6 KB
‹redacted›.ovpnOVPN6 KB
replace_no_app104.logLOG6 KB
probe_elb_nginx_ss_v4v6.pyPY6 KB
add-acl-and-our-dns.pyPY6 KB
recreate_193_108_119_219.shSH6 KB
_remote_nl_sfw_probe.pyPY6 KB
protocol-check-service.pyPY5 KB
recreate_193_108_119_152.shSH5 KB
parent-kcfg-scan.tgzTGZ5 KB
ios_turbo_update_snoopy.pyPY5 KB
_remote_us_age_scan.pyPY5 KB
cross_run_ssh_attempts2.pyPY5 KB
patch_xray_loglevel_none.pyPY5 KB
check.shSH5 KB
ao_cpu_err.txtTXT5 KB
apply_common_tune.shSH5 KB
apply_raknet_udp_recycle.pyPY5 KB
ipsec_firstpkt3.pyPY5 KB
ftp_push_server.pyPY5 KB
fix-five-resolv.pyPY5 KB
deploy_fdc_raknet.pyPY4 KB
_check_adult_unlock3.shSH4 KB
_check_adult_unlock6.shSH4 KB
fix_ios_turbo_ipsec.shSH4 KB
ios_same_host.shSH4 KB
fix_relay_landing_uuid.pyPY4 KB
ios_53_host.shSH4 KB
_check_adult_unlock5.shSH4 KB
hs_fair2.shSH4 KB
batch_deploy_eth1.shSH4 KB
apply90.shSH4 KB
ios_turbo_autostart.shSH4 KB
‹redacted›.run.logLOG4 KB
apply_cloud_tune.shSH4 KB
batch_deploy.shSH4 KB
dns-src.pyPY4 KB
and_tmatrix_host.shSH4 KB
refresh_dns_guard.pyPY4 KB
ike_tmatrix_host.shSH4 KB
pair-114.pyPY4 KB
patch_ops_bearer.pyPY4 KB
hs_why.shSH4 KB
iptables_gid.shSH4 KB
_check_adult_unlock.shSH4 KB
fix-two-guard.pyPY4 KB
resolve-target-public.pyPY4 KB
ipsec_combo_inside.shSH4 KB
fix_stream_dns_loop.shSH4 KB
pro-swap-test.shSH4 KB
probe_perf_19226.pyPY3 KB
gc10.logLOG3 KB
probe12b.pyPY3 KB
diag_177_sg.pyPY3 KB
fix_dns_241.pyPY3 KB
check11.pyPY3 KB
cap-114-refresh.pyPY3 KB
deploy_our_dns_217.shSH3 KB
_check_adult_unlock2.shSH3 KB
resolve-33.pyPY3 KB
ipsec_aead_matrix.shSH3 KB
probe_94_repeat.pyPY3 KB
fix_proto2.shSH3 KB
ike_tmatrix_607.shSH3 KB
quic_bq_correlate_probe.pyPY3 KB
check-xnxx-nodes.pyPY3 KB
probe_perf_19226b.pyPY3 KB
diag_177_struct.pyPY3 KB
resolve-33-1111-8844.pyPY3 KB
probe12.pyPY3 KB
ios_xhttp_configs.tgzTGZ3 KB
probe_172_disney.pyPY3 KB
check-feedback-google.pyPY3 KB
fix-typo-dns.pyPY3 KB
phys_host_audit.shSH3 KB
fix_dnsloop_two.pyPY3 KB
resolve-33-9999.pyPY3 KB
patch_ops_bq_rows.pyPY3 KB
dns-egress.pyPY3 KB
install.shSH3 KB
count_doh_filter_products.pyPY3 KB
node_our_dns.shSH3 KB
fix_proto.shSH3 KB
fix_iprules_persist.shSH3 KB
run_vip_check_102.pyPY3 KB
check-dns-from-node.pyPY3 KB
hs_fair.shSH3 KB
quic_probe_9000.pyPY3 KB
run_video_safe.shSH3 KB
probe-user-nodes.pyPY3 KB
id-am-pull.logLOG2 KB
check-feedback-nodes.pyPY2 KB
check-clifton-xnxx.pyPY2 KB
check_snoopy_ip.pyPY2 KB
deploy-s9t-all.shSH2 KB
apply_fwd_tune.shSH2 KB
fix_dns_2327.pyPY2 KB
build_probe_cfg.pyPY2 KB
elb_replace_all.pyPY2 KB
ike_tmatrix_parse.pyPY2 KB
probe_tls_nic.pyPY2 KB
prefetch-first-dns.pyPY2 KB
check_ourdns_resolv.pyPY2 KB
sample-resolv-gen.pyPY2 KB
same-src-four-dns.pyPY2 KB
check_guard_target.pyPY2 KB
launch-retest.pyPY2 KB
run.shSH2 KB
direct_disney_prime_spotify.pyPY2 KB
apply_psclient_cpus_005.shSH2 KB
fix_snoopy_self_only.shSH2 KB
fix-165-dns.pyPY2 KB
fix-tls-one.shSH2 KB
patch_check_only.shSH2 KB
cache9.logLOG2 KB
patch_172_split.pyPY2 KB
fix101_common.shSH2 KB
ike_timing_host.shSH2 KB
check_dns_loop.shSH2 KB
sameport_echo.pyPY2 KB
run-fix-tls.shSH2 KB
check_snoopy.shSH2 KB
build_ipsec_607.shSH2 KB
probe_followup.pyPY2 KB
probe_172_parse.pyPY2 KB
q-now.pyPY2 KB
chk3.shSH2 KB
jump-rollout.shSH2 KB
ovpn-v2-server.keyKEY2 KB
ovpn-v2-ca.keyKEY2 KB
ovpn-v2-server.keyKEY2 KB
notrack194.shSH2 KB
fix_at_landing_uuid.shSH2 KB
egress_la.shSH2 KB
safe_probe.shSH2 KB
probe_raknet_backs.pyPY2 KB
inspect-resolv-gen.pyPY2 KB
probe-four.pyPY2 KB
inspect_relay_reality443.shSH2 KB
ebpf-loadtest.shSH2 KB
apply_auto_start.shSH2 KB
fix_at_landing_uuid2.shSH2 KB
clean_disk_4590.shSH2 KB
nba_probe.shSH2 KB
check_sb_dns_189b.shSH2 KB
fix101_reality.shSH2 KB
ipsec_android_combo.shSH2 KB
deploy-five.shSH2 KB
deploy-tls-flow-one.shSH2 KB
probe_172_unlock.pyPY2 KB
check_snoopy2.shSH2 KB
prefetch-second-dns.pyPY2 KB
ipsec_firstpkt2.shSH2 KB
fix_iprules_ports.shSH2 KB
dig-cdn.pyPY2 KB
brprobe.pyPY2 KB
check_402_15.pyPY2 KB
batch_proto.pyPY2 KB
sb_dnsloop.shSH2 KB
cpu_228_diag2.shSH2 KB
fix194.shSH2 KB
chk_ipsec_103.shSH2 KB
cachequeue.logLOG2 KB
sb_config.jsonJSON2 KB
retest-all.shSH2 KB
elb_health_once.pyPY2 KB
cpu-cleanup.shSH1 KB
frag4500.shSH1 KB
harden_ssh_3854.shSH1 KB
diag101.shSH1 KB
probe_172_path.pyPY1 KB
check_iprules.shSH1 KB
pull_id_ebpf_logs.pyPY1 KB
chk_xray_at.shSH1 KB
apply_tun_dns_fix_189.shSH1 KB
check_open_ph.pyPY1 KB
find_landings.pyPY1 KB
id-sum.pyPY1 KB
find_uuid2.shSH1 KB
apply_psclient_keep80.shSH1 KB
pcap-114.pyPY1 KB
chk_dnsloop_two.shSH1 KB
ipsec_cmp_run2.shSH1 KB
fix-tls-cleanup.shSH1 KB
fr_dns_bench.shSH1 KB
fix_sup.shSH1 KB
dns_diag_8782.shSH1 KB
cpu_find.shSH1 KB
check_our_dns_10.pyPY1 KB
dns_route_8782.shSH1 KB
inspect_xray_host.shSH1 KB
fix_udp_ephemeral.shSH1 KB
check-dns-acl.pyPY1 KB
and_tmatrix_authfix.shSH1 KB
deploy-s9t-kvm-ebpf.shSH1 KB
curl_chrome136TXT1 KB
ipsec_cmp_run.shSH1 KB
fix_at_xray_chk.shSH1 KB
find_uuid.shSH1 KB
restore_172_prev.pyPY1 KB
debug_reality_worker.shSH1 KB
diag_2327.pyPY1 KB
dump_default_prop.shSH1 KB
chk220b.shSH1 KB
cpu184kill.shSH1 KB
cpu_probe2.shSH1 KB
acl-legacy-unbound.pyPY1 KB
fix_ipsec_194.shSH1 KB
iptables_ssh_85.shSH1 KB
ovpn-v2-server.crtCRT1 KB
in_singbox_dns.shSH1 KB
page-stages.pyPY1 KB
check_169_containers.shSH1 KB
protocol_recheck.shSH1 KB
dns_tproxy_8782.shSH1 KB
chk_ipsec_103d.shSH1 KB
dns_geo_plan.pyPY1 KB
count_ssh_fail_20260922.pyPY1 KB
probe_94_local.pyPY1 KB
fix_ipsec_dh_103.shSH1 KB
multishot_echo.pyPY1 KB
recreate-five.shSH1 KB
overlap_fail_ourdns.pyPY1 KB
chk_ipsec_103c.shSH1 KB
sb_dns_nfx.shSH1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

188.166.206.102confirmed