huntback / IP intelligence

198.44.38.209

DATACENTERoperator-submittedelf-binaryexploitexposed-secretmacho-binarymalware

Intelligence

ASN / OrgAS54290 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8888
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested134 file(s), 9827 KB · elf-binary, exploit, exposed-secret, macho-binary, malware, tunnel

Open directory contents (134)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
frpsELF9.5 MB
ldap_server.pyPY3 KB
ldap_server.pyPY2 KB
‹redacted›.classMACHO1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
‹redacted›.classMACHO975 B
Exploit0k0rq7hr%241.classMACHO955 B
Exploit0k0rq7hr%242.classMACHO955 B
Exploit0veb2urv%241.classMACHO955 B
Exploit0veb2urv%242.classMACHO955 B
Exploit1y7mebwz%241.classMACHO955 B
Exploit1y7mebwz%242.classMACHO955 B
Exploit2784yy5w%241.classMACHO955 B
Exploit2784yy5w%242.classMACHO955 B
Exploit2slxgsxu%241.classMACHO955 B
Exploit2slxgsxu%242.classMACHO955 B
Exploit44yvscse%241.classMACHO955 B
Exploit44yvscse%242.classMACHO955 B
Exploit8dkhb6iz%241.classMACHO955 B
Exploit8dkhb6iz%242.classMACHO955 B
Exploit9owwqqrl%241.classMACHO955 B
Exploit9owwqqrl%242.classMACHO955 B
Exploitahlxe3g6%241.classMACHO955 B
Exploitahlxe3g6%242.classMACHO955 B
Exploitcmfhyf2c%241.classMACHO955 B
Exploitcmfhyf2c%242.classMACHO955 B
Exploitdagu990z%241.classMACHO955 B
Exploitdagu990z%242.classMACHO955 B
Exploite4xh1q5j%241.classMACHO955 B
Exploite4xh1q5j%242.classMACHO955 B
Exploithwnmk66p%241.classMACHO955 B
Exploithwnmk66p%242.classMACHO955 B
Exploitixz6d8nt%241.classMACHO955 B
Exploitixz6d8nt%242.classMACHO955 B
Exploitiy42pcum%241.classMACHO955 B
Exploitiy42pcum%242.classMACHO955 B
Exploitizn4lgge%241.classMACHO955 B
Exploitizn4lgge%242.classMACHO955 B
Exploitjziwaiek%241.classMACHO955 B
Exploitjziwaiek%242.classMACHO955 B
Exploitna87963l%241.classMACHO955 B
Exploitna87963l%242.classMACHO955 B
Exploitprxymbl2%241.classMACHO955 B
Exploitprxymbl2%242.classMACHO955 B
Exploitqo7qtqr6%241.classMACHO955 B
Exploitqo7qtqr6%242.classMACHO955 B
Exploitw0h4ohzp%241.classMACHO955 B
Exploitw0h4ohzp%242.classMACHO955 B
Exploitwdh1py01%241.classMACHO955 B
Exploitwdh1py01%242.classMACHO955 B
Exploityyr2bdim%241.classMACHO955 B
Exploityyr2bdim%242.classMACHO955 B
‹redacted›.classMACHO951 B
‹redacted›.classMACHO947 B
‹redacted›.classMACHO943 B
‹redacted›.classMACHO939 B
‹redacted›.classMACHO939 B
‹redacted›.classMACHO939 B
‹redacted›.classMACHO939 B
X3vo1odue%242.classMACHO937 B
Exploit2%242.classMACHO934 B
Exploit%242.classMACHO931 B
Rmn0x12t5%241.classMACHO917 B
Rmn0x12t5%242.classMACHO917 B
Sajglda0e%241.classMACHO917 B
Sajglda0e%242.classMACHO917 B
Tbxtrrcz1%241.classMACHO917 B
Tbxtrrcz1%242.classMACHO917 B
U0a4npjzp%241.classMACHO917 B
U0a4npjzp%242.classMACHO917 B
Wyt0qlxdh%241.classMACHO917 B
Wyt0qlxdh%242.classMACHO917 B
Y3grkpvxh%242.classMACHO917 B
Zrpwffcuf%242.classMACHO917 B
‹redacted›.classMACHO915 B
‹redacted›.classMACHO915 B
‹redacted›.classMACHO915 B
X3vo1odue%241.classMACHO915 B
Exploit2%241.classMACHO912 B
Exploit%241.classMACHO909 B
Y3grkpvxh%241.classMACHO895 B
Zrpwffcuf%241.classMACHO895 B
.bash_historyBASH_H890 B
frpc.tomlTOML839 B
frps.tomlTOML787 B
setup.shSH659 B
virt-sysprep-firstboot.logLOG547 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

192.236.152.232confirmed