Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

209.99.184.99

RESIDENTIALoperator-submittedexploitexposed-secretmalwaremoziopen-directory

Intelligence

ASN / OrgAS402253 · SKN Subnet & Telecom Ltd
CountrySwitzerland
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 8000
Productsnginx
JARM27d40d40d00040d00042d43d000000d2e61cae37a985f75ecafb81b33ca523
Loot harvested236 file(s), 14578 KB · exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (236)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
src_S2MF_23102026164857.zipZIP2.4 MB
ssrf.logLOG2.2 MB
getWebTrans.jsonJSON1.7 MB
src_S2MF_17102026162040.zipZIP1.7 MB
chunk-closure-startup.BhRt0mVc.jsJS1.5 MB
_nuxt_B2MDm7c4.1793880591493.jsJS586 KB
e2.htmlHTML404 KB
idx.htmlHTML391 KB
t.htmlHTML391 KB
‹redacted›.BymXAhOe.jsJS312 KB
11138_cg6_co.htmlHTML303 KB
common.ab7f0f.jsJS271 KB
5179vvvooo_cg6_co.htmlHTML218 KB
ra.shSH176 KB
cocos_config.jsonJSON164 KB
b.htmlHTML142 KB
elb_root.htmlHTML142 KB
_nuxt_P2wCJl5_.1793880591493.jsJS128 KB
base.jsJS85 KB
gg88daily_com.htmlHTML82 KB
wssBase.jsJS81 KB
_nuxt_BStHesIm.1793880591493.jsJS72 KB
_nuxt_B0rPAfwg2.1793880591493.jsJS68 KB
_nuxt_BrN-gvye.1793880591493.jsJS56 KB
s190.logLOG51 KB
getAITrans.jsonJSON49 KB
‹redacted›.DuGjlqbN.jsJS40 KB
_hall_api_lobby_platformGameConfig.jsonJSON34 KB
apt.logLOG33 KB
_hall_api_lobby_injectedDataConfig.jsonJSON31 KB
follow.htmlHTML29 KB
get_hall_api_backstage_system_status.txtTXT25 KB
o_112957TXT22 KB
o_112931TXT22 KB
ru.shSH20 KB
rd.shSH17 KB
rq2.shSH14 KB
rqA.shSH13 KB
get_hall_api_agent_promote_config_sensitiveData.txtTXT11 KB
rf.shSH10 KB
rs.shSH10 KB
rqB.shSH9 KB
rv.shSH9 KB
rqH.shSH8 KB
rq5.shSH8 KB
rq6.shSH8 KB
scan_fp.csvCSV7 KB
rq.shSH7 KB
vps_scanner.pyPY7 KB
rqF.shSH7 KB
r2.shSH6 KB
stable_scan.csvCSV6 KB
_nuxt_DyWgT7T8.1793880591493.jsJS6 KB
rq8.shSH5 KB
rq7.shSH5 KB
_nuxt_DRyruDB_.1793880591493.jsJS5 KB
rqG.shSH5 KB
rqC.shSH4 KB
usdt_activity.pyPY4 KB
rv_api2.pyPY4 KB
rt.shSH3 KB
rv_api.pyPY3 KB
rates.jsonJSON3 KB
_hall_api_domain_lobby_union_unionConfigData.txtTXT3 KB
_nuxt_DtmUuBj92.1793880591493.jsJS3 KB
rqE.shSH3 KB
rqD.shSH3 KB
rv_admin.shSH3 KB
usdt_signal.pyPY2 KB
rv_site.shSH2 KB
rv_wt2.shSH2 KB
bs_stat.pyPY2 KB
rqJ.shSH2 KB
kf_test2.shSH2 KB
rv_wt.shSH2 KB
pull_urlscan.pyPY2 KB
kf_test.shSH2 KB
rq9.shSH2 KB
rv_usdt2.shSH2 KB
live2.shSH2 KB
rv_usdt.shSH2 KB
cp.binBIN2 KB
rq3.shSH2 KB
rqI.shSH2 KB
ms.shSH2 KB
e2.csvCSV2 KB
rv_internal.shSH2 KB
rv_bro.shSH2 KB
find567.shSH2 KB
rl2.shSH1 KB
rv_usdtscan.shSH1 KB
rv_new.shSH1 KB
static_api.shSH1 KB
an_elb2.shSH1 KB
rv_elb.shSH1 KB
rv_usdt3.shSH1 KB
rv_567ent.shSH1 KB
kf_test3.shSH1 KB
db.shSH1 KB
pentest1579.shSH1 KB
rv_567.shSH1 KB
rq4.shSH1 KB
rv_kfadmin.shSH1 KB
rv_ws2.shSH1 KB
find1579gw.shSH1 KB
xf.shSH1 KB
as.shSH1 KB
pp.shSH1 KB
ps.shSH1 KB
_nuxt_CRL8Qjkt2.1793880591493.jsJS1 KB
hs2.logLOG1 KB
probe_page.shSH1 KB
apk_scan.pyPY1 KB
rv_try2.shSH1 KB
rv_key.shSH1 KB
rv_kf.shSH1 KB
gw_hunt.shSH1 KB
hs2.shSH1 KB
rv_ocs.shSH1 KB
pscan.pyPY1 KB
rv_huione2.shSH1 KB
rv_active.shSH1 KB
analyze_scan.shSH1 KB
ah.shSH1 KB
kf_scan.shSH1 KB
bver.shSH1 KB
src_addr.pyPY1 KB
aj.shSH1 KB
an_elb3.shSH1 KB
hb.shSH1 KB
act.shSH1 KB
rv_scan_site.shSH1 KB
rv_fe.shSH1 KB
src_pa.pyPY1 KB
apk_unzip.pyPY1 KB
an.pyPY1 KB
kf_scan2.shSH1 KB
stable_fp.shSH1 KB
apk_dig2.shSH1 KB
huione.shSH1 KB
_nuxt_WkWK4rER.1793880591493.jsJS1 KB
apk_dig.shSH1 KB
rv_ocs2.shSH1 KB
scan_fp.shSH1 KB
rv_ws.shSH1 KB
urlscan_fp.shSH1 KB
src_grep.pyPY1 KB
sp.shSH1 KB
content_scan.shSH1 KB
dfa.shSH1 KB
dm.shSH1 KB
crt_hunt.shSH1 KB
rv_js.shSH1 KB
sa.pyPY1 KB
rv_wd.shSH1 KB
rv_probe.shSH1 KB
rv_dec.shSH1 KB
rv_scan2.shSH1 KB
probe.shSH1 KB
tf.shSH1 KB
kf_detail.shSH1 KB
apk_dig3.shSH1 KB
rv_bs.shSH1 KB
an_elb1.shSH1 KB
urlscan_fp2.shSH1021 B
apk_dig4.shSH1020 B
rv_configs.shSH1014 B
ck2.shSH1010 B
gw.shSH1009 B
bt.shSH1002 B
rv_kfjs.shSH991 B
probe_structure.shSH990 B
pt.shSH979 B
apk_api.shSH929 B
gk_hunt.shSH912 B
fv.shSH903 B
gk_hunt2.shSH899 B
unpack_apk.shSH897 B
fp2.shSH895 B
ug.shSH885 B
bs_shape.pyPY883 B
an3.pyPY882 B
src_reg.pyPY877 B
b_type_fp.shSH861 B
search_usdt_url.shSH838 B
grep_key.shSH807 B
bver_scan.csvCSV802 B
bver_scan.shSH795 B
tb.shSH783 B
rl.shSH757 B
fp.shSH698 B
scan_stable.shSH628 B
verify.shSH627 B
seed.csvCSV618 B
cm.shSH599 B
an2.pyPY548 B
ap.shSH539 B
h0.txtTXT531 B
hh0.txtTXT531 B
h1.txtTXT530 B
h2.txtTXT530 B
hh1.txtTXT530 B
rh0.txtTXT530 B
rh1.txtTXT530 B
rh2.txtTXT530 B
pip.shSH514 B
chk.shSH452 B
pm.shSH450 B
tp_fix.shSH445 B
alias_hall_home_maxChargeRate.txtTXT408 B
wait.shSH403 B
get_hall_api_club_manager_gameRate.txtTXT396 B
new1.csvCSV365 B
_hall_api_agent_promote_config_sensitiveData.txtTXT309 B
k2.shSH305 B
tp_go.shSH280 B
ps2.shSH267 B
k.shSH226 B
alias_hall_api_gohal_staffConfig.txtTXT185 B
alias_hall_customer_staffconfig.txtTXT185 B
q.binBIN173 B
_hall_api_lobby_withdrawTypesConfig.txtTXT172 B
hall_api_domain_lobby_union_unionConfigData.txtTXT172 B
go2.shSH155 B
dl.shSH150 B
p.binBODY111 B
seed.txtTXT98 B
o.binBIN97 B
a.binBIN94 B
g.binBIN94 B
hall_api_lobby_finance_getSiteCurrencyExchangeRateForOss.txtTXT89 B
alias_hall_api_lobby_injectedDataConfig.txtTXT89 B
alias_hall_api_lobby_webapi_optimizationV2_site_config.txtTXT89 B
s.binBIN86 B
tp.logLOG73 B
hall_api_agent_promote_config_index.txtZIP9 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.214.172.114confirmed
118.25.25.81confirmed
13.184.160.159confirmed
147.182.133.56confirmed
156.245.146.226confirmed
163.52.135.151confirmed
168.144.251.199confirmed
173.212.244.40confirmed
177.4.12.11confirmed
195.178.110.48confirmed
198.44.116.69confirmed
198.46.252.28confirmed
222.186.57.10confirmed
39.109.100.126confirmed
43.161.243.73confirmed