huntback / IP intelligence

192.236.229.229

DATACENTERoperator-submittedexploitexposed-secretmalwaremoziopen-directory

Intelligence

ASN / OrgAS54290 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 389, 443, 4444, 7777, 8000, 8080, 9999, 111, 8088, 18080, 8443, 8899, 9001, 49229
Productsnginx
Loot harvested33 file(s), 6535 KB · elf-binary, exploit, exposed-secret, malware, mirror, mozi

Open directory contents (33)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
.n3_cache_9f21.binELF5.8 MB
wayback_full.txtTXT474 KB
cust.htmlHTML20 KB
diff_rce.pyPY8 KB
diff_rce2.pyPY7 KB
oid_scan.logLOG6 KB
r1_babk.pyPY4 KB
config_probe.shSH4 KB
vcs_probe2.shSH4 KB
‹redacted›.pycPYC3 KB
aia_probe.shSH3 KB
prop_diff.pyPY3 KB
backup_parallel.pyPY3 KB
extract_fnol.pyPY2 KB
vcs_probe.shSH2 KB
backup_probe.shSH2 KB
cde_lib.pyPY2 KB
FINAL_DELIVERABLES.mdMD2 KB
oid_scan.pyPY2 KB
r2_oob.pyPY2 KB
r1b_proposal.pyPY2 KB
race_test.pyPY2 KB
backup_targeted.shSH2 KB
vcs_bypass.shSH1 KB
oid_scan_ext.pyPY1 KB
cloud_probe.shSH1 KB
js_cred_scan.pyPY1 KB
portal_js_scan.pyPY1 KB
parse_crt.pyPY732 B
oid_scan_ext.logLOG308 B
oid_ext_stdout.logLOG16 B
aia_probe_run.log5 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.42.136.73confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.46.185.169confirmed
108.61.219.168confirmed
111.223.247.165confirmed
118.107.13.102confirmed
118.107.41.239confirmed
122.10.110.72confirmed
122.10.17.49confirmed
149.30.245.147confirmed
15.188.163.78confirmed
151.243.11.241confirmed
153.52.111.73confirmed
154.217.251.226confirmed