Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

168.144.251.199

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / Orgunknown
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 8080, 8081, 8096, 8100, 8181, 9001, 8103, 8104, 8124, 8137
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Productsapache, nginx
Loot harvested146 file(s), 14306 KB · c2, coinminer, elf-binary, exploit, exposed-secret, malware

Open directory contents (146)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
.bun-0-c2264302b7dfb1b7.soELF5.0 MB
mb246.zipZIP3.2 MB
a.binBIN1.0 MB
labbuild2.logLOG726 KB
‹redacted›.diffDIFF706 KB
.bun-0-71b650bef1b3e52c.nodeELF502 KB
dl1.binBIN227 KB
cart.htmlHTML227 KB
gh.htmlHTML170 KB
changes.txtTXT151 KB
c1.htmlHTML148 KB
functions.phpPHP133 KB
c2b.htmlHTML130 KB
co2.htmlHTML130 KB
co3.htmlHTML130 KB
co4.htmlHTML130 KB
checkout.htmlHTML129 KB
bing2.htmlHTML123 KB
labbuild.logLOG112 KB
bing.htmlHTML106 KB
qode-membership.zipZIP82 KB
srv.logLOG76 KB
srv.logLOG75 KB
‹redacted›.xmlXML45 KB
title.phpPHP42 KB
dbg.pyPY37 KB
login2.htmlHTML34 KB
login.htmlHTML25 KB
class-wp-user.phpPHP22 KB
hackergodd.pyPY22 KB
hg_helper.phpPHP20 KB
.ytg_1234_none.phpPHP20 KB
exhunterx_poc.pyPY19 KB
footer.phpPHP15 KB
jd.txtTXT11 KB
jsp.txtTXT11 KB
adm.htmlHTML11 KB
mangboard.phpPHP9 KB
landing_page.phpPHP8 KB
contact-page.phpPHP8 KB
article.htmlHTML8 KB
search.phpPHP8 KB
helper.phpPHP7 KB
fe.htmlHTML7 KB
j.htmlHTML7 KB
single-portfolio_page.phpPHP7 KB
blog-chequered.phpPHP7 KB
blog-masonry-date-in-image.phpPHP6 KB
blog-pinterest.phpPHP6 KB
blog-masonry.phpPHP6 KB
junaire_exploit.pyPY6 KB
blog-compound.phpPHP5 KB
blog-small-image.phpPHP5 KB
blog-large-image-simple.phpPHP5 KB
blog-large-image-with-dividers.phpPHP5 KB
page.phpPHP5 KB
blog-headlines.phpPHP5 KB
blog-large-image-whole-post.phpPHP5 KB
blog-large-image.phpPHP5 KB
full_width.phpPHP4 KB
bridge-core.phpPHP4 KB
header.phpPHP4 KB
woocommerce.phpPHP4 KB
br_sx.jsonJSON4 KB
single.phpPHP4 KB
junaire_readme.mdMD4 KB
event-template.phpPHP3 KB
full_screen.phpPHP3 KB
apt.logLOG3 KB
comments.phpPHP3 KB
blog-masonry-gallery.phpPHP3 KB
blog-masonry-full-width-date-in-image.phpPHP3 KB
blog-masonry-full-width.phpPHP3 KB
blog-gallery.phpPHP3 KB
art.htmlHTML3 KB
blog-vertical-loop.phpPHP3 KB
test_hg.pyPY2 KB
ig_rss.logLOG2 KB
home.phpPHP2 KB
index.phpPHP2 KB
theme-includes.phpPHP2 KB
archive.phpPHP2 KB
probe30.logLOG2 KB
tg_msg.jsonJSON2 KB
debug_build3.pyPY2 KB
run_real_build.pyPY2 KB
category.phpPHP2 KB
debug_build2.pyPY2 KB
sub_test.phpPHP1 KB
configTXT1 KB
hg_test.phpPHP1 KB
404.phpPHP1 KB
debug_build.pyPY1 KB
sidebar.phpPHP1 KB
hg_build.pyPY1 KB
uninstall.phpPHP1 KB
fromfile_test.phpPHP1 KB
save_exec_test.phpPHP1 KB
‹redacted›.jsonlJSONL1 KB
enc_test.phpPHP1 KB
run_dropper.txtTXT1 KB
run_final.txtTXT1 KB
qode-membership.phpPHP1 KB
probe_channels.phpPHP1 KB
com_finder.zipTXT1 KB
lab2.logLOG1 KB
bypass_test.phpPHP1 KB
poly_test.phpPHP1 KB
ig_run.logLOG1 KB
api_hdr.txtTXT987 B
ig2.logLOG959 B
real_build.pyPY952 B
dbg_mu.phpPHP785 B
diag.phpPHP782 B
lab-cve-2026-92885-proof.zipZIP778 B
chunk_test.phpPHP772 B
hdr.txtTXT758 B
load.phpPHP689 B
gen_test.pyPY679 B
constants.phpPHP666 B
jn2.txtTXT536 B
sesstest.phpPHP526 B
tg_doc_CVE-2026-111834_Hypothesis1.py.jsonJSON502 B
tg_doc_CVE-2026-111834_released.py.jsonJSON496 B
ig2_rss.logLOG479 B
body.txtTXT478 B
lab2_rss.logLOG472 B
gen2.pyPY453 B
rce-marker.phpPHP428 B
searchform.phpPHP397 B
dbgread.phpPHP335 B
activate-module.phpPHP325 B
pwnkit.phpPHP321 B
slider.phpPHP299 B
‹redacted›.cmdCMD282 B
probe29.logLOG265 B
const.phpPHP263 B
pwned.txtTXT239 B
‹redacted›.outOUT238 B
dbgdecode.phpPHP204 B
b2.binBIN194 B
ec.binBIN190 B
lab-cve-2026-92885-proof.phpPHP173 B
up.txtTXT72 B
com_finder2.zipZIP9 B
index.phpPHP9 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.214.172.114confirmed
118.25.25.81confirmed
142.93.57.244confirmed
153.75.81.83confirmed
156.245.146.226confirmed
163.52.135.151confirmed
173.212.244.40confirmed
177.4.12.11confirmed
195.178.110.48confirmed
198.44.116.69confirmed
198.46.252.28confirmed
222.186.57.10confirmed
39.109.100.126confirmed
43.161.243.73confirmed
45.151.122.34confirmed