huntback / IP intelligence

168.144.85.125

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS14061 · DigitalOcean, LLC
CountryIndia
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 3306, 8888
ServiceSimpleHTTP/0.6 Python/3.11.2 · Directory listing for /
Loot harvested500 file(s), 572486 KB · c2, elf-binary, exploit, exposed-secret, forced-loot, malware

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.debDEB135.4 MB
‹redacted›.apkAPK100.8 MB
xxe_server.logLOG77.5 MB
chromium_155.0.8059.79-1~deb12u1_amd64.debDEB77.1 MB
‹redacted›.apkAPK68.2 MB
chromium-common_155.0.8059.79-1~deb12u1_amd64.debDEB29.8 MB
libllvm15_1%253a15.0.6-4%2Bb1_amd64.debDEB22.0 MB
‹redacted›.debDEB10.3 MB
ffufELF8.0 MB
ucp.jsJS6.8 MB
sezzle_dashboard.jsJS3.8 MB
‹redacted›.jarJAR2.8 MB
sezzle_modal.jsJS1.9 MB
fm_vpsin.logLOG1.8 MB
plugin.logLOG1.8 MB
hov_js.jsJS1.7 MB
‹redacted›.debDEB1.4 MB
passwd_1%253a4.13%2Bdfsg1-1%2Bdeb12u2_amd64.debDEB949 KB
fonts-liberation_1%253a1.07.4-11_all.debDEB808 KB
bbpay.jsJS459 KB
‹redacted›.debDEB438 KB
‹redacted›.debDEB376 KB
‹redacted›.debDEB307 KB
acme.shSH280 KB
‹redacted›.debDEB211 KB
‹redacted›.debDEB187 KB
crt_all_names.txtTXT178 KB
‹redacted›.debDEB177 KB
chunk.df04df98deff2fb9ee96.jsJS147 KB
‹redacted›.debDEB145 KB
pwdbg.logLOG136 KB
‹redacted›.debDEB130 KB
pwdbg2.logLOG126 KB
‹redacted›.debDEB112 KB
bfc_chunks.jsJS100 KB
‹redacted›.debDEB88 KB
okta.htmlHTML72 KB
‹redacted›.debDEB53 KB
rave_android.zipZIP53 KB
‹redacted›.debDEB50 KB
‹redacted›.rpcRPC49 KB
chunk.84e42d7be605ee5fb063.jsJS47 KB
login.htmlHTML43 KB
‹redacted›.debDEB43 KB
quickhits.txtTXT39 KB
common.txtTXT37 KB
LICENSE.mdTXT34 KB
a3TXT33 KB
README.mdMD33 KB
ssrf_hits.logLOG28 KB
‹redacted›.debDEB27 KB
dns_baidu.shSH20 KB
synology_dsm.shSH20 KB
res_ac.txtTXT20 KB
zyxel_gs1900.shSH18 KB
dns_pleskxml.shSH18 KB
byteplus_alb.shSH17 KB
dns_hetznercloud.shSH17 KB
‹redacted›.debDEB17 KB
i2TXT17 KB
telstraid.htmlHTML17 KB
testorg.htmlHTML17 KB
‹redacted›.xmlXML16 KB
ssh.shSH16 KB
dns_azure.shSH16 KB
kbTXT16 KB
unifios.shSH16 KB
ejTXT16 KB
ics.htmlHTML16 KB
haproxy.shSH16 KB
dns_selectel.shSH15 KB
part_acTXT15 KB
dns_edgedns.shSH15 KB
s3_res_ab.txtTXT15 KB
dns_hostup.shSH14 KB
dns_arubabusiness.shSH14 KB
libsensors-config_1%253a3.6.0-7.1_all.debDEB13 KB
unifi.shSH13 KB
panos.shSH13 KB
smtp.shSH12 KB
dns_aws.shSH12 KB
truenas.shSH12 KB
dns_freedns.shSH12 KB
dns_openstack.shSH11 KB
dns_kas.shSH11 KB
dns_omglol.shSH11 KB
dns_namecheap.shSH11 KB
dns_yandex360.shSH11 KB
docker.shSH11 KB
dns_inwx.shSH10 KB
dns_timeweb.shSH10 KB
dns_cyon.shSH10 KB
dns_oci.shSH10 KB
dns_yc.shSH10 KB
dns_huaweicloud.shSH10 KB
chunk.c88cbf3755457f14e5f4.jsJS10 KB
dns_bhosted.shSH10 KB
dns_1984hosting.shSH10 KB
s3_abTXT9 KB
dns_sotoon.shSH9 KB
lighttpd.shSH9 KB
truenas_ws.shSH9 KB
multideploy.shSH9 KB
‹redacted›.xmlXML9 KB
dns_dnsservices.shSH9 KB
shelly.shSH9 KB
dns_euserv.shSH9 KB
dns_openprovider.shSH9 KB
‹redacted›.ovpnOVPN9 KB
mp_headers.txtTXT9 KB
dns_hostingde.shSH8 KB
dns_dynv6.shSH8 KB
dns_volcengine.shSH8 KB
dns_gname.shSH8 KB
dns_comlaude.shSH8 KB
dns_jd.shSH8 KB
openstack.shSH8 KB
dns_conoha.shSH8 KB
copilot-instructions.mdMD8 KB
dns_ovh.shSH8 KB
dns_cpanel_uapi.shSH8 KB
cpanel_uapi.shSH8 KB
dns_geoscaling.shSH7 KB
aws_ses.shSH7 KB
jsfixTXT7 KB
ip_login.htmlHTML7 KB
ews_full.htmlHTML7 KB
ews_login.htmlHTML7 KB
redirTXT7 KB
sp_respTXT7 KB
dns_loopia.shSH7 KB
dns_dyn.shSH7 KB
acme.sh.completionCOMPLE7 KB
dns_hw.shSH7 KB
dns_bunny.shSH7 KB
dns_dgon.shSH7 KB
dns_nexdns.shSH7 KB
dns_world4you.shSH7 KB
dns_ispconfig.shSH7 KB
dns_beget.shSH7 KB
‹redacted›.jspJSP7 KB
dns_infoblox_uddi.shSH7 KB
dns_cf.shSH7 KB
test_all_28.shSH7 KB
dns_opnsense.shSH7 KB
wordlist_setup.shSH7 KB
dns_wedos.shSH6 KB
vault.shSH6 KB
dns_mythic_beasts.shSH6 KB
dns_eurodns.shSH6 KB
dns_rcode0.shSH6 KB
dns_pdns.shSH6 KB
dns_clouddns.shSH6 KB
dns_spaceship.shSH6 KB
dns_ali.shSH6 KB
windows_rdp.shSH6 KB
dns_sitehost.shSH6 KB
dns_gd.shSH6 KB
dns_he.shSH6 KB
dns_poweradmin.shSH6 KB
dns_rackspace.shSH6 KB
baidu_cdn.shSH6 KB
dns_autodns.shSH6 KB
dns_simply.shSH6 KB
dns_subreg.shSH6 KB
openmediavault.shSH6 KB
pldeps.txtTXT6 KB
dns_tencent.shSH6 KB
dns_hestiacp.shSH6 KB
routeros.shSH6 KB
ruckus.shSH6 KB
dns_one.shSH6 KB
fortigate.shSH5 KB
dns_exoscale.shSH5 KB
dns_hostinger.shSH5 KB
dns_qc.shSH5 KB
dns_constellix.shSH5 KB
dns_glesys.shSH5 KB
dns_dnsimple.shSH5 KB
dns_netcup.shSH5 KB
dns_virakcloud.shSH5 KB
dns_cloudns.shSH5 KB
dns_mijnhost.shSH5 KB
dns_active24.shSH5 KB
dns_infomaniak.shSH5 KB
dns_miab.shSH5 KB
dns_openprovider_rest.shSH5 KB
dns_level27.shSH5 KB
dns_online.shSH5 KB
dns_czechia.shSH5 KB
dns_nic.shSH5 KB
dns_dynu.shSH5 KB
dns_nw.shSH5 KB
dns_linode_v4.shSH5 KB
dns_schlundtech.shSH5 KB
i4TXT5 KB
dns_transip.shSH5 KB
proxmoxve.shSH5 KB
dns_cpanel.shSH5 KB
dns_gandi_livedns.shSH5 KB
dns_azion.shSH5 KB
dns_efficientip.shSH5 KB
dns_websupport.shSH5 KB
dns_servercow.shSH5 KB
dns_desec.shSH5 KB
dns_creoline.shSH5 KB
dns_internetbs.shSH5 KB
final_creative.pyPY5 KB
dns_bh.shSH5 KB
localcopy.shSH5 KB
fakemysql_fixed.pyPY5 KB
dns_gcloud.shSH5 KB
dns_gcore.shSH5 KB
dns_artfiles.shSH5 KB
proxmoxbs.shSH4 KB
dns_namecom.shSH4 KB
dns_da.shSH4 KB
dns_nsupdate.shSH4 KB
keyhelp.shSH4 KB
dns_joker.shSH4 KB
dns_mydnsjp.shSH4 KB
dns_durabledns.shSH4 KB
dns_aurora.shSH4 KB
dns_curanet.shSH4 KB
dns_ultra.shSH4 KB
dns_selfhost.shSH4 KB
dns_laodc.shSH4 KB
dns_njalla.shSH4 KB
gcore_cdn.shSH4 KB
dns_kappernet.shSH4 KB
dns_muumuu.shSH4 KB
dns_la.shSH4 KB
fritzbox.shSH4 KB
opsgenie.shSH4 KB
dns_porkbun.shSH4 KB
dns_alviy.shSH4 KB
dns_veesp.shSH4 KB
dns_unoeuro.shSH4 KB
dns_googledomains.shSH4 KB
dns_zoneedit.shSH4 KB
dns_neodigit.shSH4 KB
dns_easydns.shSH4 KB
peplink.shSH4 KB
dns_domeneshop.shSH4 KB
dns_mgwm.shSH4 KB
dns_pointhq.shSH4 KB
dns_netlify.shSH4 KB
dns_scaleway.shSH4 KB
dns_ipv64.shSH4 KB
mailgun.shSH4 KB
dns_arvan.shSH4 KB
dns_hexonet.shSH4 KB
dns_acmedns.shSH4 KB
payment_deep.pyPY4 KB
dns_ionos.shSH4 KB
dns_me.shSH4 KB
dns_ionos_cloud.shSH4 KB
dns_udr.shSH4 KB
sitecore_deep.pyPY4 KB
checkout_final.pyPY4 KB
dns_lua.shSH4 KB
dns_nsone.shSH3 KB
dns_edgecenter.shSH3 KB
dns_cn.shSH3 KB
dns_zone.shSH3 KB
dns_myloc.shSH3 KB
ikuai.shSH3 KB
dns_opusdns.shSH3 KB
ssrf_deep.pyPY3 KB
dns_misaka.shSH3 KB
dns_vultr.shSH3 KB
dns_infoblox.shSH3 KB
dns_rltx.shSH3 KB
dns_namesilo.shSH3 KB
dns_dpi.shSH3 KB
dns_duckdns.shSH3 KB
dns_rackcorp.shSH3 KB
dns_dp.shSH3 KB
dns_regru.shSH3 KB
bark.shSH3 KB
dns_variomedia.shSH3 KB
gql_tests2.shSH3 KB
dns_calrissia.shSH3 KB
dns_leaseweb.shSH3 KB
dns_freemyip.shSH3 KB
dns_vscale.shSH3 KB
dns_lexicon.shSH3 KB
vault_cli.shSH3 KB
discover_new_ops.shSH3 KB
dns_vercel.shSH3 KB
dns_ddnss.shSH3 KB
capture_login.pyPY3 KB
cw_phase5.pyPY3 KB
dns_ad.shSH3 KB
cleverreach.shSH3 KB
dns_rage4.shSH3 KB
dns_anx.shSH3 KB
dns_fornex.shSH3 KB
dns_dnsexit.shSH3 KB
dns_zilore.shSH3 KB
dns_nanelo.shSH3 KB
wcd_co.txtTXT3 KB
wcd_co1.txtTXT3 KB
dns_acmeproxy.shSH3 KB
dns_nederhost.shSH3 KB
dns_bookmyname.shSH3 KB
‹redacted›.jspJSP3 KB
exim4.shSH3 KB
qiniu.shSH3 KB
kemplm.shSH3 KB
mail.shSH3 KB
vsftpd.shSH3 KB
dns_cdmon.shSH3 KB
consul.shSH3 KB
dns_firestorm.shSH3 KB
dns_kinghost.shSH3 KB
us_test.pyPY3 KB
cw_final.pyPY3 KB
ato_test.pyPY3 KB
ifttt.shSH2 KB
directadmin.shSH2 KB
edgio.shSH2 KB
otp_bypass.pyPY2 KB
dns_limacity.shSH2 KB
dns_knot.shSH2 KB
dns_west_cn.shSH2 KB
kong.shSH2 KB
dns_mydevil.shSH2 KB
test_mobile_auth.shSH2 KB
dns_zonomi.shSH2 KB
ali_dcdn.shSH2 KB
ali_cdn.shSH2 KB
cors_init.txtTXT2 KB
sbul_headers.txtTXT2 KB
cors_shop.txtTXT2 KB
cors_test.txtTXT2 KB
telegram.shSH2 KB
strongswan.shSH2 KB
test_smuggle.shSH2 KB
terms_brute.pyPY2 KB
discover_fields.shSH2 KB
test_nextjs.shSH2 KB
discover_ops.shSH2 KB
param_tools.shSH2 KB
‹redacted›.jspJSP2 KB
dns_dnshome.shSH2 KB
keyhelp_api.shSH2 KB
pushover.shSH2 KB
‹redacted›.propertiesPROPER2 KB
dns_maradns.shSH2 KB
dns_technitium.shSH2 KB
dns_dreamhost.shSH2 KB
dingtalk.shSH2 KB
vcc_mass_test.shSH2 KB
sendgrid.shSH2 KB
dk_bypass.pyPY2 KB
dns_nm.shSH2 KB
cqhttp.shSH2 KB
redir.txtTXT2 KB
teams.shSH2 KB
h72_login.txtTXT2 KB
ma_login2.txtTXT2 KB
szl_h.txtTXT2 KB
ma_otp.txtTXT2 KB
luno_login.pyPY2 KB
netlify.shSH2 KB
test_apis.pyPY2 KB
h72_otp.txtTXT2 KB
t100_otp.txtTXT2 KB
gitlab.shSH2 KB
waha.shSH2 KB
dns_ipprojects.shSH1 KB
gql_tests.shSH1 KB
postmark.shSH1 KB
t100_phone3.txtTXT1 KB
xmpp.shSH1 KB
test_ops.shSH1 KB
elevate_final.txtTXT1 KB
re_elevate.txtTXT1 KB
test_embed.pyPY1 KB
mailcow.shSH1 KB
ssrf_server.pyPY1 KB
dns_nsd.shSH1 KB
mattermost.shSH1 KB
dns_doapi.shSH1 KB
h1TXT1 KB
param_fix.shSH1 KB
dns_df.shSH1 KB
gotify.shSH1 KB
discord.shSH1 KB
dns_tele3.shSH1 KB
pushbullet.shSH1 KB
ntfy.shSH1 KB
bw_read.shSH1 KB
cachefly.shSH1 KB
mydevil.shSH1 KB
ato2.pyPY1 KB
weixin_work.shSH1 KB
js_analyze.pyPY1 KB
slack.shSH1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
8.215.192.157confirmed
101.89.149.227confirmed
103.117.136.137confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.200.73.97confirmed
104.233.217.108confirmed
104.233.217.66confirmed