Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

185.28.119.106

DATACENTERexploitexposed-secretopen-directoryloot-ipc2forced-loot

Intelligence

ASN / OrgAS62005 · BlueVPS OU
CountryUnited Kingdom
NetworkDATACENTER · risk 60/100
Threat score63/100
Open ports80, 8080, 8081, 8083, 56777, 443, 4444, 4445, 8443
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Productscitrix
JARM2ad2ad0002ad2ad00042d42d000000ad9bf51cc3f5a1e29eecb81d0c7b06eb
Loot harvested398 file(s), 151748 KB · c2, exploit, exposed-secret, forced-loot, gafgyt, malware

Open directory contents (398)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
779509f4c4504db586ebbeac2d0fb4a8-redwan__credential_stream_20251105T124544.jsonJSON69.6 MB
779509f4c4504db586ebbeac2d0fb4a8-redwan__CredentialStreamAPI_08-19-2025.xlsxXLSX23.1 MB
779509f4c4504db586ebbeac2d0fb4a8-redwan__Kyruus%20Extract%20-%20pde_v5_xp_fields_20250808-0553.csvCSV18.7 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__DexCare_PFD_Extract_2026-05-12.csvCSV3.9 MB
779509f4c4504db586ebbeac2d0fb4a8-redwan__Kyruus%20Extract%20-%20pde_v5_locations_20250808-0638.csvCSV2.9 MB
post_130754.logLOG2.2 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_09_08.csvCSV2.2 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_09_02.csvCSV2.2 MB
gh_grep.logLOG2.1 MB
loot-full-20261028-1045.zipZIP2.0 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_07_09.csvCSV1.8 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_07_15.csvCSV1.5 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_07_30.csvCSV1.5 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_07_24.csvCSV1.5 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_08_14.csvCSV1.4 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_08_21.csvCSV1.4 MB
package-lock.jsonJSON1.1 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_08_27.csvCSV1.1 MB
5f061a6dfa1f4f2aa92c611676ee632f-uat__PFD-EXTRACTS__PROVIDER_Extract_2026_08_26.csvCSV1.1 MB
package-lock.jsonJSON845 KB
package-lock.jsonJSON766 KB
package-lock.jsonJSON603 KB
yarn.lockLOCK521 KB
yarn.lockLOCK517 KB
package-lock.jsonJSON512 KB
‹redacted›.jsonlJSONL410 KB
package-lock.jsonJSON394 KB
package-lock.jsonJSON317 KB
yarn.lockLOCK226 KB
avconfig.b64B64161 KB
‹redacted›.xmlXML121 KB
779509f4c4504db586ebbeac2d0fb4a8-redwan__SER_2025_11_05.csvCSV111 KB
pc_476d2901.jsonJSON81 KB
package-lock.jsonJSON79 KB
ARCHITECTURE.mdMD75 KB
package-lock.jsonJSON70 KB
post_144157.logLOG58 KB
package-lock.jsonJSON50 KB
post_124935.logLOG48 KB
post_112522.logLOG42 KB
enc_classes.jsonJSON32 KB
dexqa_env.txtTXT31 KB
204_111_74_35_443_avc.b64B6427 KB
PLATFORM-BACKLOG.mdMD26 KB
CLAUDE.mdMD25 KB
README.mdMD22 KB
post_123846.logLOG22 KB
‹redacted›.tsTS21 KB
‹redacted›.ipynbIPYNB21 KB
encs.txtTXT20 KB
114_251_71_20_443_avc.b64B6419 KB
README.mdMD19 KB
CLAUDE.mdMD18 KB
‹redacted›.hclHCL18 KB
avb64.txtTXT17 KB
6517f5facc71429b8d4d800e9ba60562-magnoliaprod__provider_data_export_20260317.csvCSV16 KB
README.mdMD14 KB
post_162756.logLOG14 KB
post_162759.logLOG14 KB
post_162802.logLOG14 KB
CLAUDE.mdMD13 KB
gh_repos.txtTXT13 KB
CLAUDE.mdMD12 KB
package.jsonJSON12 KB
README.mdMD11 KB
72_73_65_189_443_avc.b64B6411 KB
http80.logLOG11 KB
http80.logLOG11 KB
process_splunk_data.pyPY11 KB
CHANGELOG.mdMD11 KB
CLAUDE.mdMD10 KB
NOTES_EXPRESS_CONFIG.mdMD10 KB
README.mdMD10 KB
README.mdMD10 KB
README.mdMD10 KB
.env.exampleEXAMPL9 KB
README.mdMD9 KB
README.mdMD9 KB
‹redacted›.hclHCL9 KB
README.mdMD8 KB
README.mdMD8 KB
eval_wait_times.pyPY7 KB
post_162923.logLOG7 KB
MTLS_AUTOMATED_TESTING.mdMD7 KB
CLAUDE.mdMD7 KB
http8080.logLOG7 KB
‹redacted›.tfTF7 KB
‹redacted›.gradleGRADLE6 KB
http8080.logLOG6 KB
TODO.mdMD6 KB
JenkinsfileTXT6 KB
azstorage_inventory.txtTXT6 KB
package.jsonJSON6 KB
rebuild-push.shSH5 KB
GET-STARTED-DAFYDD.mdMD5 KB
README.mdMD5 KB
README.mdMD5 KB
post_111751.logLOG5 KB
.gitignoreGITIGN5 KB
‹redacted›.hclHCL5 KB
README.mdMD4 KB
README.mdMD4 KB
post_124633.logLOG4 KB
post_124638.logLOG4 KB
post_124642.logLOG4 KB
post_111749.logLOG4 KB
README.mdMD4 KB
CLAUDE.mdMD4 KB
handler_old.pyPY4 KB
investigate_processed_data.pyPY4 KB
package.jsonJSON4 KB
README.mdMD4 KB
README.mdMD4 KB
‹redacted›.mjsMJS4 KB
post_125425.logLOG4 KB
post_163144.logLOG3 KB
bootstrap.shSH3 KB
README.mdMD3 KB
package.jsonJSON3 KB
serverless.ymlYML3 KB
id_rsa.b64B643 KB
README.mdMD3 KB
PRD.mdMD3 KB
‹redacted›.gradleGRADLE3 KB
README.mdMD3 KB
‹redacted›.tsTS2 KB
post_131101.logLOG2 KB
SETUP.mdMD2 KB
‹redacted›.hclHCL2 KB
deploy.shSH2 KB
‹redacted›.tsTS2 KB
README.mdMD2 KB
CLAUDE.mdMD2 KB
validate_lego_blocks.pyPY2 KB
.gitignoreGITIGN2 KB
README.mdMD2 KB
README.mdMD2 KB
118_189_112_92_443.jsonJSON2 KB
101_127_215_219_443.jsonJSON2 KB
204_111_74_35_443.jsonJSON2 KB
114_251_71_20_443.jsonJSON2 KB
114_251_71_21_443.jsonJSON2 KB
114_251_71_22_443.jsonJSON2 KB
package.jsonJSON2 KB
README.mdMD2 KB
‹redacted›.config.jsJS2 KB
README.mdMD2 KB
simple_gen.pyPY2 KB
post_145804.logLOG2 KB
gradlew.batBAT2 KB
README.mdMD2 KB
README.mdMD2 KB
post_123736.logLOG2 KB
post_123735.logLOG2 KB
setup-kube-docker.shSH2 KB
setup-kube-docker.shSH2 KB
143_246_0_36_443.jsonJSON2 KB
‹redacted›.mtsMTS2 KB
post_125420.logLOG2 KB
.gitignoreGITIGN1 KB
217_92_155_101_443.jsonJSON1 KB
106_120_70_156_8443.jsonJSON1 KB
make_a_flatten_view.pyPY1 KB
72_73_65_189_443.jsonJSON1 KB
71_179_14_37_443.jsonJSON1 KB
124_83_11_26_443.jsonJSON1 KB
.gitignoreGITIGN1 KB
172_177_12_200_443.jsonJSON1 KB
post_131050.logLOG1 KB
post_131054.logLOG1 KB
setup-kube-docker.shSH1 KB
‹redacted›.sonarqube.jsonJSON1 KB
‹redacted›.gradleGRADLE1 KB
post_121655.logLOG1 KB
post_121700.logLOG1 KB
post_112648.logLOG1 KB
aws_fresh_latest.jsonJSON1 KB
post_161340.logLOG1 KB
JenkinsfileTXT1 KB
post_131058.logLOG1 KB
README.mdMD1 KB
update-secrets.shSH1 KB
shell_54-189-21-137.logLOG1 KB
main.pyPY1 KB
post_115717.logLOG1 KB
tsconfig.jsonJSON1 KB
psjh_mirth_role.jsonJSON1 KB
post_120018.logLOG1 KB
post_112651.logLOG1 KB
post_124804.logLOG1 KB
‹redacted›.sonarqube.jsonJSON1 KB
dbt_project.ymlYML1 KB
‹redacted›.tsTS1 KB
tsconfig.jsonJSON1 KB
‹redacted›.cjsCJS1 KB
‹redacted›.tsTS1 KB
‹redacted›.cjsCJS1 KB
.gitignoreGITIGN1 KB
entrypoint.shSH1 KB
shell_212-201-114-50.logLOG1 KB
shell_20-225-51-143.logLOG1 KB
shell_32-187-105-249.logLOG1 KB
shell_34-214-140-123.logLOG1 KB
shell_54-191-210-239.logLOG1 KB
shell_13-85-80-145.logLOG1 KB
DockerfileTXT1 KB
‹redacted›.tsTS1 KB
‹redacted›.config.jsJS1 KB
post_123322.logLOG1 KB
‹redacted›.tsTS1 KB
package.jsonJSON1 KB
‹redacted›.config.jsJS1 KB
‹redacted›.tsTS1 KB
post_120626.logLOG1 KB
.editorConfigEDITOR1 KB
‹redacted›.base.jsonJSON1 KB
‹redacted›.mtsMTS1 KB
‹redacted›.config.jsonJSON1017 B
‹redacted›.config.jsonJSON1010 B
tsconfig.jsonJSON1010 B
.gitignoreGITIGN997 B
.gitignoreGITIGN981 B
README.mdMD961 B
package.jsonJSON910 B
.gitignoreGITIGN888 B
post_121705.logLOG860 B
tsconfig.jsonJSON846 B
‹redacted›.config.jsJS846 B
tsconfig.jsonJSON841 B
progress.txtTXT832 B
.gitignoreGITIGN828 B
tsconfig.jsonJSON793 B
tsconfig.jsonJSON790 B
‹redacted›.tsTS768 B
‹redacted›.tsTS764 B
‹redacted›.tfTF743 B
‹redacted›.tsTS713 B
DockerfileTXT698 B
post_123317.logLOG694 B
.gitignoreGITIGN686 B
tsconfig.jsonJSON676 B
‹redacted›.tsTS663 B
.gitignoreGITIGN656 B
docker-compose.ymlYML638 B
package.jsonJSON615 B
.gitignoreGITIGN601 B
post_125212.logLOG570 B
post_161410.logLOG564 B
post_161413.logLOG564 B
post_161416.logLOG564 B
DockerfileTXT522 B
setup-env-frosh.shSH520 B
‹redacted›.mtsMTS507 B
setup-env.shSH503 B
.editorconfigEDITOR503 B
requirements.txtTXT497 B
.gitignoreGITIGN479 B
.pre-commit-config.yamlYAML477 B
.profileAutomationPROFIL475 B
post_151207.logLOG451 B
post_163351.logLOG439 B
.env.exampleEXAMPL435 B
tsconfig.jsonJSON433 B
.gitignoreGITIGN413 B
tsconfig.jsonJSON411 B
post_125542.logLOG403 B
tsconfig.jsonJSON403 B
install.shSH389 B
DockerfileTXT376 B
.gitignoreGITIGN370 B
.gitignoreGITIGN369 B
post_123219.logLOG367 B
.gitignoreGITIGN367 B
tsconfig.jsonJSON361 B
.gitignoreGITIGN354 B
tsconfig.jsonJSON347 B
‹redacted›.config.jsJS332 B
pull_av3.logLOG327 B
post_160947.logLOG321 B
post_164050.logLOG321 B
post_124739.logLOG307 B
post_124744.logLOG307 B
‹redacted›.tfTF300 B
.gitignoreGITIGN281 B
post_123215.logLOG273 B
‹redacted›.testTEST266 B
‹redacted›.test.jsonJSON266 B
‹redacted›.test.jsonJSON257 B
post_130716.logLOG256 B
.gitignoreGITIGN256 B
tsconfig.jsonJSON250 B
‹redacted›.config.jsJS250 B
post_130342.logLOG246 B
.gitignoreGITIGN245 B
tsconfig.jsonJSON240 B
post_123609.logLOG229 B
.gitignoreGITIGN228 B
DockerfileTXT222 B
post_123353.logLOG219 B
post_161119.logLOG216 B
‹redacted›.testTEST212 B
entrypoint.shSH206 B
.gitignoreGITIGN191 B
‹redacted›.jsonlJSONL187 B
pull_av.logLOG186 B
‹redacted›.test.jsonJSON181 B
‹redacted›.test.jsonJSON175 B
main.pyPY174 B
post_162431.logLOG173 B
post_162434.logLOG173 B
post_162437.logLOG173 B
.gitignoreGITIGN172 B
post_162614.logLOG171 B
post_162617.logLOG171 B
post_162620.logLOG171 B
post_123313.logLOG169 B
post_130256.logLOG169 B
regions_run.logLOG169 B
setup.pyPY167 B
.gitignoreGITIGN165 B
.editorconfigEDITOR161 B
.gitignoreGITIGN152 B
.gitignoreGITIGN151 B
.gitignoreGITIGN149 B
README.mdMD140 B
.gitignoreGITIGN139 B
pull_av2.logLOG138 B
mirrchans2_run.logLOG132 B
.envENV131 B
mirrsch_run.logLOG129 B
.dockerignoreDOCKER127 B
‹redacted›.config.jsJS125 B
post_123851.logLOG124 B
post_123732.logLOG123 B
‹redacted›.config.jsJS123 B
.gitignoreGITIGN122 B
mirrchans4_run.logLOG117 B
mirrsch_run1.logLOG114 B
mirrsch_run2.logLOG114 B
post_124853.logLOG114 B
.gitignoreGITIGN113 B
.gitignoreGITIGN112 B
post_120627.logLOG111 B
mirrchans_run.logLOG109 B
automationComplementSecret.jsJS109 B
.gitignoreGITIGN108 B
post_124847.logLOG106 B
automationBasicSecret.jsJS104 B
post_124231.logLOG101 B
post_124236.logLOG100 B
post_171226.logLOG95 B
post_130213.logLOG92 B
post_123841.logLOG88 B
pull_enc.logLOG86 B
.gitignoreGITIGN86 B
.npmrcNPMRC82 B
.gitignoreGITIGN81 B
.gitattributesGITATT73 B
post_145807.logLOG71 B
pull_avb.logLOG64 B
‹redacted›.test.jsonJSON64 B
.gitignoreGITIGN60 B
.commitlintrc.jsonJSON49 B
.gitignoreGITIGN40 B
.gitignoreGITIGN40 B
ghclone_run.logLOG38 B
post_161724.logLOG37 B
post_130118.logLOG36 B
post_162056.logLOG35 B
post_162059.logLOG35 B
post_162102.logLOG35 B
.gitignoreGITIGN35 B
post_161914.logLOG32 B
post_161917.logLOG32 B
post_161920.logLOG32 B
post_123725.logLOG31 B
post_121646.logLOG30 B
.eslintignoreESLINT30 B
post_121641.logLOG29 B
post_121651.logLOG29 B
post_123454.logLOG29 B
.gitignoreGITIGN27 B
post_115051.logLOG26 B
post_130752.logLOG25 B
post_161718.logLOG25 B
post_161721.logLOG25 B
post_161210.logLOG23 B
post_162251.logLOG23 B
post_162254.logLOG23 B
post_162257.logLOG23 B
post_130122.logLOG20 B
post_162917.logLOG19 B
post_162920.logLOG19 B
.gitignoreGITIGN16 B
.gitignoreGITIGN14 B
.gitignoreGITIGN12 B
post_171228.logLOG7 B
.nvmrcNVMRC3 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.132.103.189lead
101.206.186.78lead
101.36.104.89lead
102.70.86.105lead
103.215.80.153lead
103.247.19.204lead
103.83.87.22lead
103.85.185.183lead
104.218.68.139lead
104.245.245.213lead
104.251.180.112lead
107.189.22.235lead
107.189.23.9lead
109.120.132.28lead
109.120.140.219lead