huntback / IP intelligence

172.105.156.153

DATACENTERshodan-opendirmalicious-opendirexploit-files:nuclei-high-nuclei-targets1.txt,nuclei-targets.txt,nuclei-templates/loot-ipc2exploit

Intelligence

ASN / OrgAS63949 · Akamai Technologies, Inc.
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports8000, 22
ServiceSimpleHTTP/0.6 Python/3.14.5 · Directory listing for /
Loot harvested163 file(s), 925448 KB · c2, exploit, exposed-secret, forced-loot, gafgyt, malware

Open directory contents (163)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
katana-seeds-out.txtTXT621.6 MB
thread_history_1.sqliteSQLITE193.4 MB
logs_2.sqliteSQLITE71.8 MB
logs_2.sqlite-walSQLITE4.7 MB
cves.jsonJSON2.1 MB
.checksumCHECKS1.4 MB
state_5.sqliteSQLITE1.4 MB
.templates-indexTEMPLA1.2 MB
templates-checksum.txtTXT1.2 MB
low.txtTXT1.1 MB
.zsh_historyZSH_HI367 KB
‹redacted›.jarJAR327 KB
katana-seeds.txtTXT326 KB
TEMPLATES-STATS.jsonJSON318 KB
known_hosts.bak-bb-teardownBAK-BB155 KB
nvm.shSH145 KB
nuclei-unknown-nuclei-targets1.txtTXT145 KB
kali%3A1.logLOG130 KB
workbook-v2.1-full-dump.txtTXT126 KB
RUNBOOK.mdMD102 KB
unknown.txtTXT91 KB
web-app-audit-llm-playbook.mdMD91 KB
.claude.jsonJSON84 KB
CLAUDE.mdMD63 KB
.sshconfig.new24818NEW24854 KB
zcompdumpTXT53 KB
linode-functions.shSH47 KB
nuclei-medium-nuclei-targets1.txtTXT45 KB
memories_1.sqliteSQLITE44 KB
UserConfig.jsonJSON42 KB
medium.txtTXT41 KB
queue_1.sqliteSQLITE40 KB
.sshconfig.new6257NEW62539 KB
WorkspaceConfig.jsonJSON38 KB
axiom-configureTXT33 KB
axiom-accountTXT32 KB
goals_1.sqliteSQLITE32 KB
queue_1.sqlite-shmSQLITE32 KB
logs_2.sqlite-shmSQLITE32 KB
aws-functions.shSH26 KB
manual-methodology-research.txtTXT26 KB
axiom-buildTXT25 KB
nmaptocsv.pyPY23 KB
exoscale-functions.shSH22 KB
azure-functions.shSH21 KB
hetzner-functions.shSH19 KB
axiom-fleet3TXT18 KB
axiom-vantageTXT17 KB
ibm-vpc-functions.shSH17 KB
fleet-methodology-research.txtTXT17 KB
axiom-execTXT17 KB
gcp-functions.shSH16 KB
axiom-fleet4TXT16 KB
.sshconfig.new27977NEW27916 KB
install.shSH16 KB
.zshrcZSHRC16 KB
do-functions.shSH16 KB
ibm-classic-functions.shSH15 KB
axiom-resolversTXT15 KB
TEMPLATE-CREATION-GUIDE.mdMD14 KB
scaleway-functions.shSH14 KB
axiom-fleet2TXT13 KB
TEMPLATE-REVIEW-GUIDE.mdMD12 KB
axiom-initTXT12 KB
.zshrcbakZSHRCB12 KB
high.txtTXT12 KB
provision-screen-notify.shSH11 KB
CONTRIBUTING.mdMD11 KB
nuclei-high-nuclei-targets1.txt-2026-11-02_02-47-21TXT-2010 KB
.sshconfig.new3330NEW33310 KB
.sshconfig.new24458NEW24410 KB
portfolio-methodology-research.txtTXT8 KB
.sshconfig.new22091NEW2207 KB
axiom-sshTXT7 KB
CODE_OF_CONDUCT.mdMD7 KB
install.shSH6 KB
README_JA.mdMD6 KB
.bashrcBASHRC6 KB
README_KR.mdMD6 KB
README.mdMD5 KB
README.mdMD5 KB
README.mdMD5 KB
.sshconfig.new28132NEW2815 KB
.sshconfig.new5511NEW5515 KB
.sshconfig.new26953NEW2695 KB
SESSION-STATE-2026-10-28.mdMD5 KB
README_CN.mdMD5 KB
Templates-Bounty-FAQ.mdMD5 KB
MakefileTXT4 KB
nMap_Merger.pyPY4 KB
.bash_historyBASH_H4 KB
env.shSH4 KB
nuclei-high-nuclei-targets1.txtTXT4 KB
auth.jsonJSON4 KB
‹redacted›.local.jsonJSON3 KB
.travis.ymlYML3 KB
DockerfileTXT3 KB
.sshconfig.new5495NEW5493 KB
axiom-mirror.shSH2 KB
.new-additionsNEW-AD2 KB
git-autocommit.shSH2 KB
sshd_configTXT2 KB
.gitignoreGITIGN2 KB
update_test_mocks.shSH2 KB
config.jsonJSON2 KB
expand_cidr.pyPY2 KB
README.mdMD1 KB
generate_packerTXT1 KB
.crates2.jsonJSON1 KB
axiom_rsaTXT1 KB
jwttool_custom_private_RSA.pemPEM1 KB
PULL_REQUEST_TEMPLATE.mdMD1 KB
.env-toolsENV-TO1 KB
desktop.jsonJSON1 KB
rename_test.shSH1 KB
sudoersTXT765 B
interestingEXT.jsonJSON735 B
.editorconfigEDITOR658 B
rce.jsonJSON609 B
covenant.jsonJSON577 B
config.tomlTOML559 B
.sshconfig.bak-1790245695BAK-17535 B
nxc.confCONF524 B
.credentials.jsonJSON523 B
xss.jsonJSON451 B
jwttool_custom_public_RSA.pemPEM450 B
jwtconf.iniINI443 B
.sshconfig.linode.bakBAK418 B
‹redacted›.com.jsonJSON409 B
‹redacted›.linode.bakBAK394 B
‹redacted›.do.bakBAK384 B
‹redacted›.exampleEXAMPL378 B
.crates.tomlTOML372 B
‹redacted›.exampleEXAMPL357 B
‹redacted›.exampleEXAMPL354 B
‹redacted›.exampleEXAMPL325 B
FETCH_HEADTXT304 B
.sshconfigSSHCON298 B
.gitignoreGITIGN291 B
jsfetch-resume.jsonJSON282 B
.gitignoreGITIGN277 B
configTXT262 B
openredirex.jsonJSON252 B
jsfetch.jsonJSON247 B
jwttool_custom_private_EC.pemPEM240 B
gorgo.jsonJSON230 B
.editorconfigEDITOR229 B
jwttool_custom_public_EC.pemPEM177 B
secretfinder.jsonJSON167 B
env.ps1PS1132 B
.gitignoreGITIGN127 B
tmux-splash.shSH123 B
packed-refsTXT114 B
.gitmodulesGITMOD103 B
descriptionTXT73 B
.gitignoreGITIGN63 B
ORIG_HEADTXT41 B
HEADTXT23 B
.gitattributesGITATT19 B
‹redacted›.linode.bakBAK16 B
‹redacted›.stateSTATE13 B
passwdTXT8 B
.personality_migrationPERSON3 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.126.4.50confirmed
101.36.112.205confirmed
101.89.149.227confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.200.73.97confirmed
104.233.217.66confirmed
106.116.230.110confirmed
107.189.1.175confirmed