huntback / IP intelligence
192.227.241.226
Intelligence
ASN / OrgAS36352 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 4444, 8080, 8888, 9001, 18080, 31337
Loot harvested538 file(s), 308173 KB · c2, exploit, exposed-secret, forced-loot, malware, mozi
Open directory contents (400)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| grpcurl | TXT | 23.3 MB |
| beacon2 | TXT | 14.6 MB |
| implant_modx | TXT | 14.6 MB |
| pack_101.tar.gz | GZ | 9.0 MB |
| pack_251.tar.gz | GZ | 8.9 MB |
| pack_351.tar.gz | GZ | 8.8 MB |
| pack_1001.tar.gz | GZ | 8.8 MB |
| pack_1201.tar.gz | GZ | 8.7 MB |
| pack_1601.tar.gz | GZ | 8.7 MB |
| pack_1301.tar.gz | GZ | 8.5 MB |
| pack_401.tar.gz | GZ | 8.4 MB |
| pack_1951.tar.gz | GZ | 8.4 MB |
| pack_1701.tar.gz | GZ | 8.4 MB |
| pack_1551.tar.gz | GZ | 8.4 MB |
| pack_1401.tar.gz | GZ | 8.3 MB |
| pack_151.tar.gz | GZ | 8.3 MB |
| pack_1851.tar.gz | GZ | 8.3 MB |
| pack_1751.tar.gz | GZ | 8.3 MB |
| pack_1651.tar.gz | GZ | 8.2 MB |
| pack_1501.tar.gz | GZ | 8.2 MB |
| pack_1351.tar.gz | GZ | 8.2 MB |
| pack_1.tar.gz | GZ | 8.2 MB |
| pack_201.tar.gz | GZ | 8.2 MB |
| pack_1801.tar.gz | GZ | 8.0 MB |
| pack_1251.tar.gz | GZ | 8.0 MB |
| pack_1451.tar.gz | GZ | 7.9 MB |
| pack_1901.tar.gz | GZ | 7.9 MB |
| pack_301.tar.gz | GZ | 7.8 MB |
| pack_1101.tar.gz | GZ | 7.8 MB |
| pack_1051.tar.gz | GZ | 7.8 MB |
| pack_1151.tar.gz | GZ | 7.8 MB |
| grpcurl.tar.gz | TGZ | 7.5 MB |
| http.log | LOG | 3.4 MB |
| mariadb.tar.gz | GZ | 2.7 MB |
| audio_pack.tar.gz | GZ | 1.5 MB |
| i88.js | JS | 543 KB |
| allcfg.json | JSON | 101 KB |
| addall.sql | SQL | 13 KB |
| jwts.txt | TXT | 7 KB |
| keycands.txt | TXT | 6 KB |
| monitor2.py | PY | 4 KB |
| monitor_cc.py | PY | 3 KB |
| inner_mon3.sh | SH | 3 KB |
| dify_pg_rce.py | PY | 3 KB |
| mapup.py | PY | 3 KB |
| inner_mon2.sh | SH | 2 KB |
| diag.py | PY | 2 KB |
| fix1.py | PY | 2 KB |
| cosfull.py | PY | 2 KB |
| fa.py | PY | 2 KB |
| lg.html | HTML | 2 KB |
| ccz4.json | JSON | 2 KB |
| inner_mon.sh | SH | 2 KB |
| cmd_payloadC.txt | TXT | 2 KB |
| bf2.py | PY | 2 KB |
| ccz8.json | JSON | 2 KB |
| mkf.py | PY | 2 KB |
| addx.py | PY | 2 KB |
| costitle.py | PY | 2 KB |
| doc1.py | PY | 2 KB |
| login2.py | PY | 2 KB |
| cosfind.py | PY | 1 KB |
| adm.py | PY | 1 KB |
| auto.py | PY | 1 KB |
| mkf4.py | PY | 1 KB |
| bak.py | PY | 1 KB |
| cospdf.py | PY | 1 KB |
| doc2.py | PY | 1 KB |
| bfdir.py | PY | 1 KB |
| clean.py | PY | 1 KB |
| cmd_payloadD.txt | TXT | 1 KB |
| h4.py | PY | 1 KB |
| h3.py | PY | 1 KB |
| htllm.sh | SH | 1 KB |
| h2.py | PY | 1 KB |
| newt.py | PY | 1 KB |
| cmd_payload3.txt | TXT | 1 KB |
| mods.py | PY | 1 KB |
| gc4.sh | SH | 1 KB |
| h5.py | PY | 1 KB |
| mapp.py | PY | 1 KB |
| findapp.py | PY | 1 KB |
| imp.py | PY | 1 KB |
| coszip.py | PY | 1 KB |
| cmd_payloadB.txt | TXT | 1 KB |
| fix2.py | PY | 1 KB |
| find.py | PY | 1 KB |
| k8s4.sql | SQL | 1 KB |
| exploit.sh | SH | 1 KB |
| cc1.py | PY | 1 KB |
| cossave.py | PY | 1 KB |
| doc3.py | PY | 1 KB |
| admform.py | PY | 1 KB |
| lfi.py | PY | 1 KB |
| links.py | PY | 1 KB |
| difylogin.sh | SH | 1 KB |
| addform.py | PY | 1 KB |
| doc.py | PY | 1 KB |
| coslist.py | PY | 1 KB |
| mon_lite.sh | SH | 1 KB |
| auth.sh | SH | 1 KB |
| modx_192.227.241.226.cfg | CFG | 1 KB |
| info1.py | PY | 1 KB |
| dm5.py | PY | 1 KB |
| ccz3.json | JSON | 1 KB |
| gpu5.sh | SH | 1 KB |
| klzrecon.sh | SH | 1 KB |
| atk.sh | SH | 1 KB |
| gc3.log | LOG | 1 KB |
| newappid.py | PY | 1 KB |
| gdl.py | PY | 1 KB |
| final.sh | SH | 1 KB |
| forged.json | JSON | 1 KB |
| k8sp.sh | SH | 1 KB |
| k8s2.sql | SQL | 1 KB |
| order_amt2.py | PY | 1 KB |
| final.py | PY | 1 KB |
| pack.py | PY | 1 KB |
| difyapi.sh | SH | 1 KB |
| md5crack.py | PY | 1 KB |
| cc2.py | PY | 1 KB |
| dm2.py | PY | 1 KB |
| gc5.sh | SH | 1 KB |
| gpu2.sh | SH | 1 KB |
| gps_sample.py | PY | 1 KB |
| azenum4.py | PY | 1 KB |
| gpu4.sh | SH | 1 KB |
| k8s.sh | SH | 1 KB |
| alltok.py | PY | 1 KB |
| cmd_payload7.txt | TXT | 1 KB |
| dify2.sh | SH | 1 KB |
| cleanup.py | PY | 1 KB |
| jwk.sh | SH | 1 KB |
| hit.py | PY | 1 KB |
| gpu.sh | SH | 1 KB |
| fix3.py | PY | 1 KB |
| cmd_payload6.txt | TXT | 1 KB |
| comp.py | PY | 1 KB |
| dchk.py | PY | 1 KB |
| cmd_payload8.txt | TXT | 1 KB |
| cmd_payloadA.txt | TXT | 1 KB |
| owhost.sh | SH | 1 KB |
| aid_inject.py | PY | 1 KB |
| admintok.py | PY | 1 KB |
| other_user.py | PY | 1 KB |
| dm4.py | PY | 1 KB |
| nokey.py | PY | 1 KB |
| azenum2.py | PY | 1 KB |
| azenum.py | PY | 1 KB |
| cosdl.py | PY | 1 KB |
| cosnew.py | PY | 1 KB |
| dm6.py | PY | 1 KB |
| aven12.py | PY | 1 KB |
| jwtforge.py | PY | 1 KB |
| llm.sh | SH | 1 KB |
| batch_jwt2.py | PY | 1 KB |
| n567.log | LOG | 1 KB |
| newtgt.sh | SH | 1 KB |
| aid_write.py | PY | 1 KB |
| evidence.txt | TXT | 1 KB |
| iv2.sh | SH | 1 KB |
| bf.py | PY | 1 KB |
| oss3.py | PY | 1 KB |
| enum_meth.py | PY | 1 KB |
| batch_jwt.py | PY | 1 KB |
| b2c.py | PY | 1 KB |
| azenum3.py | PY | 1 KB |
| getsecret.py | PY | 1 KB |
| dump7.py | PY | 1 KB |
| cosxlsx.py | PY | 1 KB |
| main_site.py | PY | 1 KB |
| dm3.py | PY | 1 KB |
| ccz.json | JSON | 1 KB |
| gpu6.sh | SH | 1 KB |
| cmd_payload5.txt | TXT | 1 KB |
| comp3ip.sh | SH | 1 KB |
| extract_upload.sh | SH | 1 KB |
| model.py | PY | 1 KB |
| hpp.py | PY | 1 KB |
| cmd_payload9.txt | TXT | 1 KB |
| ctx.sh | SH | 1 KB |
| luci2.pl | PL | 1 KB |
| aven9.py | PY | 1 KB |
| del_test.py | PY | 1 KB |
| kw.py | PY | 1 KB |
| k8s3.sql | SQL | 1 KB |
| cross.py | PY | 1 KB |
| dl_audio2.sh | SH | 1 KB |
| aven13.py | PY | 1 KB |
| beacon.sql | SQL | 1 KB |
| enum_ctrl.py | PY | 1 KB |
| jwtcrack.py | PY | 1 KB |
| cosdl2.py | PY | 1 KB |
| myphone.py | PY | 1020 B |
| dm.py | PY | 1012 B |
| fa2.py | PY | 1010 B |
| gpu3.sh | SH | 1010 B |
| killz.py | PY | 1010 B |
| nacosw.sh | SH | 1010 B |
| cross_token.py | PY | 1004 B |
| bulk_dl.sh | SH | 999 B |
| actok.py | PY | 996 B |
| add_neighbor.py | PY | 996 B |
| ccz5.json | JSON | 992 B |
| admin_probe.py | PY | 977 B |
| audit_artifacts.py | PY | 976 B |
| atk2.sh | SH | 975 B |
| eo.sh | SH | 973 B |
| dlmaizhi.py | PY | 971 B |
| allcfg.py | PY | 969 B |
| auto_dl_small.sh | SH | 966 B |
| enum_v.py | PY | 965 B |
| captcha_bypass.py | PY | 964 B |
| findrsa.sh | SH | 962 B |
| mkfilter.py | PY | 962 B |
| alive.py | PY | 961 B |
| multipart.pl | PL | 958 B |
| aven5.py | PY | 954 B |
| enum_v1m.py | PY | 953 B |
| js2.sh | SH | 952 B |
| newcred.sh | SH | 940 B |
| cal.sh | SH | 939 B |
| md5c.log | LOG | 939 B |
| eo2.sh | SH | 938 B |
| azlogin.py | PY | 935 B |
| chk.py | PY | 933 B |
| gc3.sh | SH | 926 B |
| gy_log.py | PY | 921 B |
| admin_msg.py | PY | 920 B |
| coupon_full.py | PY | 917 B |
| aid_probe.py | PY | 915 B |
| openapi.py | PY | 909 B |
| cmd_payload4.txt | TXT | 907 B |
| allapis.py | PY | 906 B |
| dumptoken.py | PY | 901 B |
| gv2.log | LOG | 901 B |
| comp2.sh | SH | 898 B |
| c2.py | PY | 895 B |
| AB.py | PY | 894 B |
| follow.py | PY | 890 B |
| gen_tok.py | PY | 889 B |
| dl_audio.sh | SH | 886 B |
| idor.py | PY | 885 B |
| mycoupons.py | PY | 880 B |
| open_apis.py | PY | 880 B |
| otherdb.py | PY | 880 B |
| getcomp2.sh | SH | 878 B |
| oss4.py | PY | 872 B |
| check_new.py | PY | 871 B |
| nacosdel.sh | SH | 870 B |
| keepfwd.log | LOG | 869 B |
| admin_db.py | PY | 868 B |
| ksf.py | PY | 867 B |
| order_amt.py | PY | 866 B |
| gv2.sh | SH | 864 B |
| my_member.py | PY | 856 B |
| dump8.py | PY | 849 B |
| brutekey.py | PY | 848 B |
| A_search.py | PY | 846 B |
| ouj.py | PY | 846 B |
| difyprobe.sh | SH | 843 B |
| b2cscan.py | PY | 839 B |
| brute2.sh | SH | 836 B |
| coupon2.py | PY | 832 B |
| kuaidi.py | PY | 832 B |
| cmd_payload2.txt | TXT | 829 B |
| moadx_login.py | PY | 825 B |
| net_json.py | PY | 823 B |
| bypass_eo.sh | SH | 821 B |
| findapi.sh | SH | 821 B |
| nestlejs.py | PY | 816 B |
| card_status.py | PY | 814 B |
| extract_tok.py | PY | 812 B |
| newsurface.py | PY | 810 B |
| jwt4.py | PY | 808 B |
| agent.py | PY | 807 B |
| gettoken_noauth.py | PY | 804 B |
| newsrv.py | PY | 801 B |
| aven.py | PY | 798 B |
| aven10.py | PY | 796 B |
| moadx.py | PY | 796 B |
| full_tok2.py | PY | 793 B |
| luci_login.pl | PL | 792 B |
| find_testcards.py | PY | 791 B |
| fresh_tok.py | PY | 791 B |
| luci3.pl | PL | 789 B |
| aven14.py | PY | 787 B |
| k8s.sql | SQL | 787 B |
| iv3.sh | SH | 786 B |
| esq.py | PY | 784 B |
| nestle_token.py | PY | 783 B |
| adminapi.py | PY | 779 B |
| order_amt3.py | PY | 774 B |
| mp_qr.sh | SH | 773 B |
| cmeid.py | PY | 772 B |
| cmeid2.py | PY | 761 B |
| owui_cmd.sh | SH | 761 B |
| aven6.py | PY | 754 B |
| ident2.sh | SH | 751 B |
| ledger2.py | PY | 751 B |
| find_jump.py | PY | 750 B |
| integral2.py | PY | 740 B |
| iv.sh | SH | 732 B |
| cq.py | PY | 729 B |
| jimu3.sh | SH | 729 B |
| mainjs2.py | PY | 729 B |
| model2.py | PY | 727 B |
| execute_xjvm-centor_202611030827213801730773.log | LOG | 726 B |
| p107.sh | SH | 721 B |
| dup_member.py | PY | 717 B |
| lateral1.py | PY | 717 B |
| newdom.py | PY | 713 B |
| neg_goods.py | PY | 708 B |
| addr_idor.py | PY | 704 B |
| dup_dist.py | PY | 699 B |
| aven8.py | PY | 695 B |
| mainjs.py | PY | 691 B |
| oss.py | PY | 689 B |
| addr_all.py | PY | 687 B |
| getsub.sh | SH | 686 B |
| generic.py | PY | 685 B |
| findledger.py | PY | 684 B |
| get_jwt.py | PY | 684 B |
| cnsim.log | LOG | 680 B |
| moadx_files.py | PY | 680 B |
| check_new2.py | PY | 679 B |
| dumpsecret.py | PY | 675 B |
| captcha_db.py | PY | 674 B |
| netdeep.sh | SH | 674 B |
| gc5.log | LOG | 670 B |
| oss2.py | PY | 670 B |
| apiphp.py | PY | 667 B |
| getaddr.py | PY | 667 B |
| integral.py | PY | 664 B |
| crmjs.py | PY | 663 B |
| addr_oracle.py | PY | 662 B |
| find_sign.py | PY | 657 B |
| lat.sh | SH | 657 B |
| opchain.py | PY | 655 B |
| jwt3.py | PY | 654 B |
| dump_full.sh | SH | 650 B |
| hw.sh | SH | 648 B |
| member_tbl.py | PY | 644 B |
| find_upload_tbl.py | PY | 641 B |
| hosthdr.sh | SH | 641 B |
| mytry.sh | SH | 639 B |
| brute_bg.sh | SH | 637 B |
| my_ids.py | PY | 628 B |
| dump5.py | PY | 626 B |
| aven7.py | PY | 622 B |
| ns.sh | SH | 621 B |
| final_check.py | PY | 618 B |
| ns.log | LOG | 616 B |
| content.py | PY | 615 B |
| lateral2.py | PY | 607 B |
| jwt2.py | PY | 606 B |
| moadx2.py | PY | 602 B |
| kefu.sh | SH | 600 B |
| mon.sh | SH | 599 B |
| lt.pl | PL | 596 B |
| 567text.sh | SH | 592 B |
| cnip.log | LOG | 592 B |
| oath.py | PY | 592 B |
| dump3.py | PY | 591 B |
| order_struct.py | PY | 590 B |
| gv.sh | SH | 588 B |
| escape.sh | SH | 587 B |
| n567.sh | SH | 587 B |
| minitest.py | PY | 586 B |
| hashes.py | PY | 585 B |
| find_defaults.sh | SH | 584 B |
| ledger3.py | PY | 584 B |
| cnsim2.sh | SH | 583 B |
| codeinfo.py | PY | 580 B |
| dup_time.py | PY | 578 B |
| find_test_card.py | PY | 577 B |
| aven3.py | PY | 575 B |
| gvfile.sh | SH | 575 B |
| id0.py | PY | 575 B |
| loginflow.py | PY | 575 B |
| aven2.py | PY | 571 B |
| brute_login.sh | SH | 570 B |
| check_addr.py | PY | 570 B |
| method.py | PY | 570 B |
| eo.log | LOG | 569 B |
| graf.sh | SH | 569 B |
| gy_api.py | PY | 567 B |
| aven11.py | PY | 566 B |
| allparams.py | PY | 565 B |
| c2b.sh | SH | 565 B |
| comp_cn.sh | SH | 563 B |
| check.sh | SH | 562 B |
| alfar_users.py | PY | 559 B |
| getunionid.py | PY | 557 B |
| api1.sh | SH | 556 B |
| code_tbl.py | PY | 556 B |
| hijack.sh | SH | 556 B |
| extract.sh | SH | 554 B |
| gc4.log | LOG | 552 B |
| get_luci_page.sh | SH | 551 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 103.117.136.137 | confirmed |
| 13.184.160.159 | confirmed |
| 168.144.157.73 | confirmed |
| 207.56.221.47 | confirmed |
| 3.84.186.180 | confirmed |