Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

168.144.111.89

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS14061 · DigitalOcean, LLC
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 1080, 4444, 8888, 9876
ServiceApache/2.4.58 (Ubuntu) · Apache2 Ubuntu Default Page: It works
Productsapache
Loot harvested296 file(s), 52627 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (296)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
boat.zipZIP9.4 MB
aioseo.zipZIP7.4 MB
BANNER.zipZIP7.3 MB
123indo_assets.tar.gzGZ7.3 MB
backup2.tgzTGZ3.0 MB
.gsnew_uploadELF2.7 MB
.bun-1001-b8b4789fcd6de580.nodeELF1.4 MB
.bun-1001-61c01c5e5cdf6745.nodeELF1.4 MB
atmi_monitor.logLOG1.3 MB
abpf_backup.sqlSQL1014 KB
exploitELF979 KB
refluxfsELF902 KB
refluxfs_fixedELF902 KB
arthepsy_pwnkitELF766 KB
agustoto_source.htmlHTML612 KB
b64_lp2.txtTXT547 KB
b64_lp1.txtTXT523 KB
b64_lp4.txtTXT522 KB
angkasa138-raw.htmlHTML481 KB
angkasa138-template.htmlHTML478 KB
angkasa138-nolink.htmlHTML477 KB
b64_full.txtTXT235 KB
alfa_shell.htmlHTML151 KB
adspc_phpinfo_wget.htmlHTML141 KB
10k-passwords.txtTXT71 KB
exploit.cC61 KB
ap_826171TXT60 KB
.wpconfCOM56 KB
adminer_full.htmlHTML54 KB
regresshion.txtTXT52 KB
b64_chunk_aaTXT48 KB
b64_chunk_acTXT48 KB
LICENSETXT34 KB
.slims_member_formSLIMS_28 KB
admin_dashboard.htmlHTML28 KB
1.pyPY27 KB
eq12.pyPY27 KB
2.pyPY27 KB
aula_loginTXT25 KB
binus_resp.htmlHTML25 KB
accounts_login.htmlHTML24 KB
al.htmlHTML23 KB
apps_login.htmlHTML23 KB
aero_phpinfo.htmlHTML22 KB
regresshionELF21 KB
.subprobeSUBPRO21 KB
amp_upload.shSH20 KB
CVE-2026-31635.cC16 KB
7etsuo-regreSSHion.cC15 KB
bad_dash.htmlHTML13 KB
bad_dashboard.htmlHTML13 KB
badilag_dashboard.htmlHTML13 KB
badilag_step3.htmlHTML13 KB
bad_template_view.htmlHTML13 KB
bad_site_templates.htmlHTML13 KB
badilag_article.htmlHTML13 KB
bad_template.htmlHTML13 KB
bad_install.htmlHTML13 KB
bad_templates.htmlHTML13 KB
badilag_templates.htmlHTML13 KB
badilag_sysinfo.htmlHTML13 KB
badilag_users.htmlHTML13 KB
rotary3271_USER.txtTXT13 KB
badilag_media.htmlHTML13 KB
bad_login.htmlHTML13 KB
bad_login2.htmlHTML13 KB
badilag_admin.htmlHTML13 KB
badilag_login.htmlHTML13 KB
badilag_step1.htmlHTML13 KB
bl.htmlHTML13 KB
bl1.htmlHTML13 KB
47parts_ru_ROOT.txtTXT13 KB
alnoor_tec_resp.htmlHTML12 KB
alnoor_resp.htmlHTML12 KB
backup.sqlSQL11 KB
db.sqlSQL11 KB
backup.zipZIP11 KB
adminer_plesk.htmlHTML11 KB
changmunhakkyo_ROOT.txtTXT11 KB
CVE-2026-43503.cC11 KB
advokasi_login.htmlHTML11 KB
all_domains_complete.txtTXT10 KB
bali_login.htmlHTML10 KB
ALL_ROOT_FORTRESS_BACKUP.txtTXT10 KB
aureate_full_pivot_report.txtTXT10 KB
ORIGIN.mdMD9 KB
chunk_ahTXT9 KB
aqua_final.htmlHTML9 KB
alt-persist.phpPHP9 KB
biro_result.htmlHTML9 KB
aureate_final_access_report.txtTXT9 KB
aureate_labs_report.txtTXT8 KB
bf_login.htmlHTML8 KB
backend_dashboard.htmlHTML8 KB
amp-original.htmlHTML8 KB
amp-final.htmlHTML8 KB
baron_samedit.pyPY7 KB
bali_login.txtTXT7 KB
74_208_233_225_ROOT.txtTXT7 KB
startco_br_USER.txtTXT7 KB
atmi-pivot-summary.txtTXT7 KB
atmi-fortress-report.txtTXT7 KB
baliprov_full_data.txtTXT7 KB
admin_step2.htmlHTML7 KB
admin_step1.htmlHTML7 KB
all_secrets.txtTXT7 KB
.uajy_bodyUAJY_B6 KB
aureate_pivot_report.txtTXT6 KB
.probe_mxPROBE_6 KB
av_bcrypt_body.htmlHTML6 KB
av_login2.htmlHTML6 KB
av_login.htmlHTML6 KB
av_sysops_body.htmlHTML6 KB
badilum_login.htmlHTML6 KB
.helpdesk_formHELPDE6 KB
index.phpPHP6 KB
abs_dash.htmlHTML6 KB
abs_login.htmlHTML6 KB
fuse.cC5 KB
admin-ajax-new.phpPHP5 KB
refluxfs.cC5 KB
app-skkni.kemnaker.go.id_backup.sqlSQL5 KB
anri_intel_20260903.txtTXT4 KB
ads_library_with_cache.phpPHP4 KB
backup1.tgzTGZ4 KB
alfa_out.htmlHTML4 KB
admin-ajax-orig.phpPHP4 KB
abelpc_USER.txtTXT4 KB
add_backlinks.phpPHP4 KB
beewine_backup_20261022_0826.txtTXT4 KB
agenda_sql.htmlHTML4 KB
adm_now_result.htmlHTML4 KB
admin123_resp.htmlHTML4 KB
adm_tor_resp.htmlHTML4 KB
adm_response.htmlHTML4 KB
adminer_login.htmlHTML4 KB
beam-lms-backupshell-20261103.txtTXT4 KB
adm_now_init.htmlHTML4 KB
acs_db_list.htmlHTML4 KB
.shSH4 KB
backup_shells_asiantrucker_20261024.txtTXT4 KB
adminer_db.htmlHTML4 KB
launchmyroom_wp.txtTXT4 KB
installTXT4 KB
README.mdMD4 KB
ads_library_modified.phpPHP3 KB
README.mdMD3 KB
README.mdMD3 KB
aktivasi.htmlHTML3 KB
batch_ahTXT3 KB
all_new_secrets.txtTXT3 KB
all_container_secrets.txtTXT3 KB
batch_aqTXT3 KB
batch_aiTXT3 KB
batch_aoTXT3 KB
batch_ajTXT3 KB
batch_alTXT3 KB
acl_ssh.phpPHP3 KB
batch_abTXT3 KB
batch_akTXT3 KB
batch_agTXT3 KB
iavfurniture_wp.txtTXT3 KB
anri-pivot-summary.txtTXT3 KB
doctum_edu_br_ROOT.txtTXT3 KB
batch_aaTXT3 KB
active-secrets-update.mdMD3 KB
avnation_wp.txtTXT3 KB
CVE-2024-6387.pyPY3 KB
.siak_formSIAK_F3 KB
.siak_form2SIAK_F3 KB
.siak_form_enumSIAK_F3 KB
binwasdak_admin.htmlHTML3 KB
backup_meta.txtTXT3 KB
ads_library_current.phpPHP3 KB
aggro_output.txtTXT3 KB
avnation_gs_installer.phpPHP3 KB
exp.cC3 KB
README.MDMD2 KB
all_wp_configs.txtTXT2 KB
alfa_raw.htmlHTML2 KB
inject.shSH2 KB
README.mdMD2 KB
analyze_urls.shSH2 KB
.attempt_1.txtTXT2 KB
CONTENTS.txtTXT2 KB
adspc_recon_summary.txtTXT1 KB
all_domains.txtTXT1 KB
README.mdMD1 KB
all.phpPHP1 KB
baliprov_credentials.txtTXT1 KB
a.shSH1 KB
history.txtTXT1 KB
academics_mnnit_key.pemPEM1 KB
adminer_probe.htmlHTML1 KB
baliprov_verified_creds.txtTXT1 KB
beam-lms-final-202611031811.txtTXT1 KB
akun-yankes.kemkes.go.id_backup.zipZIP1 KB
QUICK_START.mdMD1 KB
attack_adspc.shSH1 KB
melcontrol_USER.txtTXT1 KB
README.mdMD1 KB
baron_nss.pyPY1 KB
all_pass.txtTXT1 KB
all_wl.txtTXT1 KB
academics.its.ac.id_backup.sqlSQL1 KB
CVE-2026-52943.mdMD1 KB
baron_c.cC1 KB
auth_gr_sensitive.txtTXT1 KB
assert_bypass.phpPHP1 KB
all_shells.txtTXT1 KB
MakefileTXT1 KB
LICENSETXT1 KB
.shell_testSHELL_990 B
.env.exampleEXAMPL945 B
bcheck.zipZIP917 B
probe.shSH911 B
addkey.phpPHP907 B
backup_all.phpPHP866 B
all_good_domains.jsonJSON838 B
.gitcheckGITCHE787 B
big_wordlist.txtTXT753 B
biglist.txtTXT740 B
backupshell_session.shSH656 B
‹redacted›.expEXP655 B
.x1.txtTXT651 B
adspc_attack.shSH587 B
attack_summary_20260901.txtTXT569 B
server.phpPHP563 B
getshell.cC549 B
active_secrets_only.txtTXT538 B
bigger_wordlist.txtTXT508 B
bali_session.txtTXT474 B
blasty_pwnkit.cC465 B
vps_tunnelTXT452 B
configTXT447 B
bali_adminer.txtTXT438 B
class-wp-reset.phpPHP436 B
aws_root_keyTXT411 B
adminer_cookie.txtTXT387 B
.gitcfgTXT355 B
DockerfileTXT354 B
adminer_headers.txtTXT322 B
.wp-cache-handler.phpPHP300 B
.class-wp-session.phpPHP271 B
.wp-object-cache.phpPHP270 B
configTXT265 B
big_words.txtTXT259 B
avproof.phpPHP252 B
badilum_shell.txtTXT244 B
adminer_cook.txtTXT236 B
api_key.txtTXT236 B
.editorconfigEDITOR230 B
.gitprobeGITPRO223 B
creds.txtTXT221 B
.editorconfigEDITOR220 B
.mu-loader.phpPHP216 B
.cred_55408CRED_5215 B
.cC211 B
.gitignoreGITIGN207 B
‹redacted›.vbsVBS188 B
all_creds.txtTXT188 B
.msmtprcMSMTPR181 B
README.mdMD180 B
0-direct.phpPHP179 B
.cmd.phpPHP156 B
MakefileTXT150 B
.gitPHP146 B
backup_shell.phpPHP145 B
adminer2_cookies.txtTXT131 B
.test_script.shSH130 B
.health.phpPHP112 B
article.pdf.phpPHP108 B
base_words.txtTXT107 B
assert_shell.txtTXT92 B
bappeda_shell.phpPHP89 B
atmi_new_secrets.txtTXT86 B
.cmds2.shSH84 B
.privesc_cmds.shSH82 B
README.mdMD79 B
.multicmd.shSH74 B
backdoor_hashes.txtTXT66 B
.sys.phpPHP63 B
.run.shSH42 B
.c.shSH39 B
app_configTXT38 B
.cache.phtmlPHTML29 B
.config.phpPHP28 B
requirements.txtTXT23 B
backup_jurnal.tar.gzGZ22 B
.sqli_testSQLI_T18 B
.cbshellBIN16 B
.privesc_full.shSH16 B
.cmds_privesc.shSH15 B
dirtyfrag.cTXT14 B
.gitignoreGITIGN13 B
.p.shSH3 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
104.160.169.204confirmed
104.200.73.97confirmed
104.21.53.99confirmed
108.61.161.224confirmed
111.68.4.13confirmed
152.42.162.237confirmed
156.245.146.226confirmed
163.52.135.151confirmed
168.144.157.73confirmed
172.67.211.156confirmed
173.212.244.40confirmed
18.136.195.202confirmed
185.148.144.99confirmed
185.28.119.18confirmed