huntback / IP intelligence
198.44.38.209
Intelligence
ASN / OrgAS54290 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8888
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested134 file(s), 9827 KB · elf-binary, exploit, exposed-secret, macho-binary, malware, tunnel
Open directory contents (134)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| frps | ELF | 9.5 MB |
| ldap_server.py | PY | 3 KB |
| ldap_server.py | PY | 2 KB |
| ‹redacted›.class | MACHO | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| ‹redacted›.class | MACHO | 975 B |
| Exploit0k0rq7hr%241.class | MACHO | 955 B |
| Exploit0k0rq7hr%242.class | MACHO | 955 B |
| Exploit0veb2urv%241.class | MACHO | 955 B |
| Exploit0veb2urv%242.class | MACHO | 955 B |
| Exploit1y7mebwz%241.class | MACHO | 955 B |
| Exploit1y7mebwz%242.class | MACHO | 955 B |
| Exploit2784yy5w%241.class | MACHO | 955 B |
| Exploit2784yy5w%242.class | MACHO | 955 B |
| Exploit2slxgsxu%241.class | MACHO | 955 B |
| Exploit2slxgsxu%242.class | MACHO | 955 B |
| Exploit44yvscse%241.class | MACHO | 955 B |
| Exploit44yvscse%242.class | MACHO | 955 B |
| Exploit8dkhb6iz%241.class | MACHO | 955 B |
| Exploit8dkhb6iz%242.class | MACHO | 955 B |
| Exploit9owwqqrl%241.class | MACHO | 955 B |
| Exploit9owwqqrl%242.class | MACHO | 955 B |
| Exploitahlxe3g6%241.class | MACHO | 955 B |
| Exploitahlxe3g6%242.class | MACHO | 955 B |
| Exploitcmfhyf2c%241.class | MACHO | 955 B |
| Exploitcmfhyf2c%242.class | MACHO | 955 B |
| Exploitdagu990z%241.class | MACHO | 955 B |
| Exploitdagu990z%242.class | MACHO | 955 B |
| Exploite4xh1q5j%241.class | MACHO | 955 B |
| Exploite4xh1q5j%242.class | MACHO | 955 B |
| Exploithwnmk66p%241.class | MACHO | 955 B |
| Exploithwnmk66p%242.class | MACHO | 955 B |
| Exploitixz6d8nt%241.class | MACHO | 955 B |
| Exploitixz6d8nt%242.class | MACHO | 955 B |
| Exploitiy42pcum%241.class | MACHO | 955 B |
| Exploitiy42pcum%242.class | MACHO | 955 B |
| Exploitizn4lgge%241.class | MACHO | 955 B |
| Exploitizn4lgge%242.class | MACHO | 955 B |
| Exploitjziwaiek%241.class | MACHO | 955 B |
| Exploitjziwaiek%242.class | MACHO | 955 B |
| Exploitna87963l%241.class | MACHO | 955 B |
| Exploitna87963l%242.class | MACHO | 955 B |
| Exploitprxymbl2%241.class | MACHO | 955 B |
| Exploitprxymbl2%242.class | MACHO | 955 B |
| Exploitqo7qtqr6%241.class | MACHO | 955 B |
| Exploitqo7qtqr6%242.class | MACHO | 955 B |
| Exploitw0h4ohzp%241.class | MACHO | 955 B |
| Exploitw0h4ohzp%242.class | MACHO | 955 B |
| Exploitwdh1py01%241.class | MACHO | 955 B |
| Exploitwdh1py01%242.class | MACHO | 955 B |
| Exploityyr2bdim%241.class | MACHO | 955 B |
| Exploityyr2bdim%242.class | MACHO | 955 B |
| ‹redacted›.class | MACHO | 951 B |
| ‹redacted›.class | MACHO | 947 B |
| ‹redacted›.class | MACHO | 943 B |
| ‹redacted›.class | MACHO | 939 B |
| ‹redacted›.class | MACHO | 939 B |
| ‹redacted›.class | MACHO | 939 B |
| ‹redacted›.class | MACHO | 939 B |
| X3vo1odue%242.class | MACHO | 937 B |
| Exploit2%242.class | MACHO | 934 B |
| Exploit%242.class | MACHO | 931 B |
| Rmn0x12t5%241.class | MACHO | 917 B |
| Rmn0x12t5%242.class | MACHO | 917 B |
| Sajglda0e%241.class | MACHO | 917 B |
| Sajglda0e%242.class | MACHO | 917 B |
| Tbxtrrcz1%241.class | MACHO | 917 B |
| Tbxtrrcz1%242.class | MACHO | 917 B |
| U0a4npjzp%241.class | MACHO | 917 B |
| U0a4npjzp%242.class | MACHO | 917 B |
| Wyt0qlxdh%241.class | MACHO | 917 B |
| Wyt0qlxdh%242.class | MACHO | 917 B |
| Y3grkpvxh%242.class | MACHO | 917 B |
| Zrpwffcuf%242.class | MACHO | 917 B |
| ‹redacted›.class | MACHO | 915 B |
| ‹redacted›.class | MACHO | 915 B |
| ‹redacted›.class | MACHO | 915 B |
| X3vo1odue%241.class | MACHO | 915 B |
| Exploit2%241.class | MACHO | 912 B |
| Exploit%241.class | MACHO | 909 B |
| Y3grkpvxh%241.class | MACHO | 895 B |
| Zrpwffcuf%241.class | MACHO | 895 B |
| .bash_history | BASH_H | 890 B |
| frpc.toml | TOML | 839 B |
| frps.toml | TOML | 787 B |
| setup.sh | SH | 659 B |
| virt-sysprep-firstboot.log | LOG | 547 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 192.236.152.232 | confirmed |