Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

198.46.252.28

DATACENTERoperator-submittedloot-ipelf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS36352 · HostPapa
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 2082, 2095, 8080, 18081
Loot harvested89 file(s), 8955 KB · coinminer, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (89)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
Win64OpenSSL_Light-3_3_0.exePE5.2 MB
makex-ui-src-diff.tar.gzGZ1.3 MB
sqlite-3.53.1.0-9f3c2596-1fee-42a1-ac75-911da0cee4a5-libsqlitejdbc.soELF1.0 MB
makex-ui-diff.tar.gzGZ122 KB
makex-ui.shSH100 KB
makex-ui.shSH96 KB
‹redacted›.newNEW91 KB
panel.htmlHTML72 KB
index2.htmlHTML67 KB
xx.htmlHTML62 KB
install.shSH60 KB
install.shSH56 KB
ob-patch.tar.gzGZ49 KB
nodes.htmlHTML45 KB
makex-ui-diff2.tar.gzGZ43 KB
rb-files.tgzTGZ36 KB
subService.goGO35 KB
xui-work.tgzTGZ26 KB
‹redacted›.sumSUM22 KB
‹redacted›.sumSUM22 KB
main.goGO18 KB
README.es_ES.mdMD18 KB
install-node.shSH16 KB
LICENSETXT16 KB
web.goGO16 KB
web.goGO15 KB
subJsonService.goGO12 KB
README.mdMD10 KB
makex-ui-reality-scanner-patch.tar.gzGZ10 KB
198_files.md5MD510 KB
dnsjc.shSH9 KB
api.goGO8 KB
web.go.tar.gzGZ6 KB
install-client.shSH5 KB
process.goGO5 KB
db.goGO4 KB
db.goGO4 KB
USAGE.txtTXT4 KB
‹redacted›.modMOD4 KB
‹redacted›.modMOD4 KB
cert_plugin.shSH4 KB
nft.goGO4 KB
sub.goGO3 KB
packed-refsTXT3 KB
process.goGO3 KB
subController.goGO2 KB
logger.goGO2 KB
config.goGO2 KB
main.goGO2 KB
history.goGO2 KB
log_writer.goGO1 KB
log_writer.goGO1 KB
main.goGO1 KB
config.goGO1 KB
key.pemTXT1 KB
termtest.tar.gzGZ1 KB
default.jsonJSON1 KB
wstest.goGO1 KB
DockerInit.shSH1 KB
cert.pemPEM1 KB
inbound.goGO1 KB
config.goGO980 B
test_template_load_test.goGO945 B
config.goGO920 B
COMMIT_EDITMSGTXT676 B
client_traffic.goGO661 B
.gitignoreGITIGN612 B
.gitignoreGITIGN600 B
vless.logLOG542 B
vless.jsonJSON505 B
client.jsonJSON458 B
vless2.jsonJSON447 B
update.sqlSQL389 B
configTXT313 B
configTXT262 B
alist_tokenTXT204 B
FETCH_HEADTXT203 B
httpsrv.logLOG147 B
config.jsonJSON128 B
traffic.goGO127 B
DockerEntrypoint.shSH126 B
packed-refsTXT112 B
xray_no_window.ps1PS195 B
descriptionTXT73 B
‹redacted›.vbsVBS67 B
ORIG_HEADTXT41 B
shallowTXT41 B
HEADTXT21 B
naive.tgzZIP9 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
101.36.112.205confirmed
102.209.224.40confirmed
103.131.51.199confirmed
103.133.216.219confirmed
103.195.188.128confirmed
103.214.172.114confirmed
103.254.63.94confirmed
103.35.216.13confirmed
104.192.42.94confirmed
104.200.73.97confirmed
104.223.62.197confirmed
106.52.174.151confirmed
107.150.20.139confirmed
107.191.102.241confirmed