Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

209.99.191.184

RESIDENTIALoperator-submittedloot-ipc2coinminerexploitexposed-secret

Intelligence

ASN / OrgAS402253 · SKN Subnet & Telecom Ltd
CountrySwitzerland
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 53, 80, 3000, 8888
ServiceSimpleHTTP/0.6 Python/3.13.5 · Directory listing for /
Loot harvested533 file(s), 124879 KB · c2, coinminer, exploit, exposed-secret, forced-loot, malware

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
painel.dbDB43.0 MB
backup_pre_rescore_20261111.dbDB42.9 MB
‹redacted›.jarJAR7.4 MB
layer1.tarTAR5.3 MB
main.jsJS4.9 MB
allstrings.txtTXT4.6 MB
mp_main.jsJS3.1 MB
dev.logLOG1.3 MB
bundle.jsJS1.1 MB
dev_novo.logLOG1.0 MB
pd64.exePE726 KB
fofa_night_novos.txtTXT710 KB
ag4d_OutSystems.jsJS623 KB
‹redacted›.rawRAW512 KB
pm.tgzTGZ443 KB
r08_fdsm_index.jsJS359 KB
ag4d_OutSystemsReactView.jsJS293 KB
report_page.htmlHTML242 KB
night_reprobe.txtTXT228 KB
onda_night.logLOG178 KB
‹redacted›.tsbuildinfoTSBUIL176 KB
c650.txtTXT159 KB
dsm_assets_polyfills-legacy-D0Ec9Fl7.jsJS155 KB
c640.txtTXT154 KB
watchdog.logLOG154 KB
funcoes.jsJS107 KB
pix_envconfig.jsJS103 KB
‹redacted›.apkAPK101 KB
config_perfil_page.htmlHTML92 KB
‹redacted›.javaJAVA85 KB
‹redacted›.javaJAVA82 KB
tokenenvia.jsJS59 KB
‹redacted›.apkAPK56 KB
zcompdumpTXT49 KB
report_follow.htmlHTML48 KB
‹redacted›.zeus.htmlHTML48 KB
forge_roles_page.htmlHTML48 KB
xr_sitef1.htmlHTML48 KB
xr_sitef2.htmlHTML47 KB
tenant_page_after_js.htmlHTML44 KB
tenant_report.htmlHTML44 KB
mpcfg_results.txtTXT37 KB
server.pyPY36 KB
js_configdyna.jsJS34 KB
js_configprod.jsJS34 KB
‹redacted›.rawRAW28 KB
changed_all.txtTXT28 KB
fepas_watch.logLOG27 KB
rmq_trace3.txtTXT20 KB
carat.jsJS19 KB
lloyds.jsJS18 KB
tenant_firstfederalbanknc.htmlHTML15 KB
firstcapitalbank.htmlHTML15 KB
thebankofthewest.htmlHTML15 KB
centralbankops.htmlHTML15 KB
iowatrustbank.htmlHTML15 KB
reliancebank.htmlHTML15 KB
tenant_chemungcanal.htmlHTML15 KB
mybanktx.htmlHTML15 KB
fnbmwc.htmlHTML15 KB
loomis.htmlHTML15 KB
‹redacted›.outOUT15 KB
micsb.htmlHTML15 KB
sdccu.htmlHTML15 KB
verifica_nicho.pyPY15 KB
sc_post_result.htmlHTML14 KB
.zshrcZSHRC10 KB
‹redacted›.com.htmlHTML9 KB
‹redacted›.rawRAW9 KB
verifica_vazamentos.pyPY9 KB
‹redacted›.outOUT8 KB
‹redacted›.outOUT8 KB
‹redacted›.outOUT8 KB
rmq_analysis.txtTXT7 KB
‹redacted›.outOUT7 KB
cve_match.pyPY7 KB
‹redacted›.com.htmlHTML7 KB
mpsso_results.txtTXT6 KB
‹redacted›.rawRAW6 KB
devportal_analysis.txtTXT6 KB
portal_register_page.htmlHTML6 KB
fingerprint_vps.pyPY6 KB
reg__login.htmlHTML6 KB
reg__pt-br_register.htmlHTML6 KB
reg__register.htmlHTML6 KB
reg__signup.htmlHTML6 KB
‹redacted›.outOUT6 KB
‹redacted›.outOUT6 KB
fingerprint_vps_v3.pyPY6 KB
fingerprint_vps_v4.pyPY6 KB
fingerprint_vps_v5.pyPY5 KB
‹redacted›.outOUT5 KB
‹redacted›.outOUT5 KB
fingerprint_vps_v2.pyPY5 KB
.bashrcBASHRC5 KB
grava_verificacao.pyPY5 KB
new_classes.txtTXT5 KB
hits.logLOG5 KB
coleta_fofa_crypto_v5.pyPY4 KB
‹redacted›.outOUT4 KB
‹redacted›.outOUT4 KB
‹redacted›.rawRAW4 KB
sweep5.shSH4 KB
faimg_sinks.txtTXT4 KB
cli_login.htmlHTML4 KB
‹redacted›.rawRAW4 KB
loD.shSH4 KB
valid.shSH4 KB
aplica_fingerprint.pyPY4 KB
ag1.shSH4 KB
loE.shSH4 KB
sweep1.shSH3 KB
gql15_results.txtTXT3 KB
classifica_resto.pyPY3 KB
f_pages.jsonJSON3 KB
importa_novos_night.pyPY3 KB
‹redacted›.outOUT3 KB
‹redacted›.outOUT3 KB
coleta_fofa_crypto_v3.pyPY3 KB
‹redacted›.outOUT3 KB
grava_verificacao2.pyPY3 KB
ag4c.shSH3 KB
‹redacted›.outOUT3 KB
pw_config_perfil.pyPY3 KB
reprobe_vps.pyPY3 KB
ag4b_shell.htmlHTML3 KB
pa_shell.htmlHTML3 KB
f_testruns.jsonJSON3 KB
sweep2.shSH3 KB
fepas_token.txtTXT3 KB
fepas_token_old.txtTXT3 KB
reclassifica_score.pyPY3 KB
f_ptags.jsonJSON3 KB
pw_tenant_report2.pyPY3 KB
sweep4.shSH3 KB
‹redacted›.warWAR3 KB
rmq1.shSH3 KB
w88.ps1PS13 KB
w89.ps1PS13 KB
pw_tenant_explore.pyPY3 KB
‹redacted›.rawRAW3 KB
rescore_v3.pyPY3 KB
mpmain_results.txtTXT3 KB
carat_uat_analysis.txtTXT3 KB
sweep3.shSH2 KB
wave1.shSH2 KB
f_tenant.jsonJSON2 KB
f_tenants.jsonJSON2 KB
carat-uat_fiservapp_com.hH2 KB
carat_uat.hH2 KB
certs_invest2.shSH2 KB
reg5.pyPY2 KB
f_solutions.jsonJSON2 KB
probe_vps.pyPY2 KB
certs_invest.shSH2 KB
reg4.pyPY2 KB
pw_tenant_report.pyPY2 KB
kc2_results.txtTXT2 KB
aplica_lote4.pyPY2 KB
ag4b.shSH2 KB
newgen2.shSH2 KB
aplica_lote3.pyPY2 KB
db.pyPY2 KB
aplica_lote2.pyPY2 KB
caixa_results.txtTXT2 KB
cm1.shSH2 KB
aplica_lote5.pyPY2 KB
store_record.shSH2 KB
watchdog_rce.shSH2 KB
aplica_inde10.pyPY2 KB
cap_token.txtTXT2 KB
cap5.shSH2 KB
resync_nicho.pyPY2 KB
forge_roles.shSH2 KB
saneia_indeciso.pyPY2 KB
loF.shSH2 KB
wave2.shSH2 KB
aplica_lote6.pyPY2 KB
reg3.pyPY2 KB
rce_baseline.shSH2 KB
newgen1.shSH2 KB
gql7.shSH2 KB
‹redacted›.rawRAW2 KB
loB.shSH2 KB
iss_probe.shSH2 KB
loC.shSH2 KB
ml.jsJS2 KB
rmq_trace2.txtTXT2 KB
‹redacted›.warWAR2 KB
crossrealm.shSH2 KB
cap1.shSH2 KB
pair1.shSH2 KB
r2.shSH2 KB
forge_scope2.shSH2 KB
forge_scope.txtTXT2 KB
loA.shSH2 KB
‹redacted›.outOUT1 KB
dp3_results.txtTXT1 KB
kc_recon.shSH1 KB
wave4.shSH1 KB
watchdog_jwt.shSH1 KB
caratgatewaytest_fiservapp_com.hH1 KB
forge_scope.shSH1 KB
‹redacted›.rawRAW1 KB
pull160.shSH1 KB
carat_uat2_results.txtTXT1 KB
faimg_sinks.shSH1 KB
ag4d.shSH1 KB
higieniza_vaz.pyPY1 KB
forge_others.shSH1 KB
gq2.hH1 KB
gql1.hH1 KB
watchdog_fepas.shSH1 KB
ag1f.shSH1 KB
gql5.shSH1 KB
rcej.shSH1 KB
dp7_results.txtTXT1 KB
sqli.shSH1 KB
rcei.shSH1 KB
reg1.pyPY1 KB
forge_clone.shSH1 KB
pair2.shSH1 KB
rcea.shSH1 KB
newgen3.shSH1 KB
saneia_academia.pyPY1 KB
pw_report_errlog.pyPY1 KB
gql.shSH1 KB
report_post.shSH1 KB
smoke_op.shSH1 KB
forge_identity.shSH1 KB
newgen12.shSH1 KB
se500.shSH1 KB
ag1b.shSH1 KB
iss_sitef1.shSH1 KB
adbkeyTXT1 KB
fepas_reescalada.shSH1 KB
ag1d.shSH1 KB
fa_pull12.shSH1 KB
reg2.pyPY1 KB
portreg.shSH1 KB
aplica_night_reprobe.pyPY1 KB
rmq5.shSH1 KB
console1.shSH1 KB
day2_1.shSH1 KB
gql5_results.txtTXT1 KB
atualiza_reprobe.pyPY1 KB
preprod2-sso-login_fiservapp_com.hH1 KB
cap4.shSH1 KB
newgen5.shSH1 KB
newgen11.shSH1 KB
recipe_-412.logLOG1 KB
preprod-sso-login_fiservapp_com.hH1 KB
dp2_results.txtTXT1 KB
cap7.shSH1 KB
recipe_-166.logLOG1 KB
ag4.shSH1 KB
atualiza_proxy.pyPY1 KB
ag5.shSH1 KB
atualiza_probe_principal.pyPY1 KB
newgen7.shSH1 KB
mailtm.shSH1 KB
‹redacted›.outOUT1 KB
s100.ps1PS11 KB
puf_hunt.txtTXT1 KB
cap6.shSH1 KB
esitef1.shSH1 KB
loD2.shSH1 KB
ms-mercadopago_fiservapp_com.hH1 KB
mp_root.hH1 KB
devreg.shSH1 KB
rmq4.shSH1 KB
dp1_results.txtTXT1 KB
console2.shSH1 KB
pixqr.shSH1 KB
fepas_kc_recon.txtTXT1 KB
‹redacted›.outOUT1 KB
wave3.shSH1 KB
jwt_detail.shSH1 KB
‹redacted›.outOUT1 KB
cm2.shSH1 KB
regchain.shSH1 KB
r12_resp.binBIN1 KB
r13_resp.binBIN1 KB
gql16.shSH1 KB
newgen6.shSH1 KB
aplica_proxy_final.pyPY1 KB
rcec.shSH1 KB
gql14.shSH1 KB
fdsm1.shSH1 KB
gql4.shSH1 KB
mc.shSH1 KB
caratgateway-api_fiservapp_com.hH1 KB
caratgatewaytest-api_fiservapp_com.hH1 KB
loB2.shSH1 KB
gql2.shSH1 KB
loE2.shSH1 KB
fin.sqlSQL1 KB
fepas_kc_master2.txtTXT1 KB
caratgateway_fiservapp_com.hH1 KB
gql17_results.txtTXT1 KB
dma2.shSH1 KB
‹redacted›.outHTML1 KB
devreg2.shSH1 KB
rcee.shSH1 KB
gql17.shSH1 KB
rcem.shSH1 KB
‹redacted›.tsTS1 KB
rceg.shSH1 KB
loE3.shSH1 KB
newgen10.shSH1 KB
dp2.shSH1 KB
report_follow.shSH1 KB
gql3.shSH1 KB
rcel.shSH1 KB
mpmain.shSH1 KB
was.shSH1 KB
wave7.shSH1 KB
rmq2.shSH1 KB
caixa.shSH1 KB
ag1e.shSH1 KB
fa_pull.shSH1 KB
env-config.jsJS1 KB
ag1c.shSH1 KB
und.shSH1 KB
ag3.shSH1 KB
screens.shSH1 KB
gql10.shSH1 KB
gql_results.txtTXT1 KB
rceb.shSH1 KB
jsf.shSH1 KB
cap2.shSH1 KB
portal-carat_fiservapp_com.hH1 KB
rceJ_results.txtTXT1 KB
fa_diff.shSH1 KB
kc2.shSH1 KB
carat_prod_env.jsJS1 KB
rcef.shSH1 KB
apicat.shSH1 KB
valid_results.txtTXT1 KB
night.shSH1 KB
homol_gestao_sicredi_fiserv_com_br.hH1 KB
dp4.shSH1 KB
gbin2.shSH1 KB
console3.shSH1 KB
mailtm2.shSH1 KB
ag5y.shSH1 KB
gestao.shSH1 KB
fepas_pair2.txtTXT1 KB
kc3.shSH1 KB
carat_fiserv_com_br.hH1 KB
carat_br.hH1 KB
esitef3.shSH1 KB
rceo.shSH1 KB
fa_pull3.shSH1 KB
loE6.shSH1 KB
newgen9.shSH1021 B
prod_gestao_sicredi_fiserv_com_br.hH1021 B
gql13.shSH1017 B
cm3.shSH1013 B
sweep1b.shSH1013 B
rced.shSH1009 B
shot1.shSH997 B
dp3.shSH995 B
dp1.shSH989 B
gql22.shSH987 B
loE4.shSH986 B
kc.shSH981 B
portal-carat-static_fiservapp_com.hH981 B
rmq6.shSH973 B
client_record.shSH971 B
esitef1_results.txtTXT971 B
esitef2.shSH970 B
status_nicho.shSH970 B
cli.shSH968 B
merge.logLOG958 B
ag3_login.shSH956 B
ag4e.shSH952 B
kc_master2.shSH947 B
gql9.shSH946 B
gm.shSH942 B
gql11.shSH940 B
rmq3.shSH939 B
loE7.shSH938 B
wave5.shSH926 B
gql12.shSH920 B
pixapi.shSH912 B
puf_hunt.shSH909 B
gql8.shSH908 B
gql18.shSH905 B
fdsm3.shSH902 B
newgen4.shSH900 B
gql23.shSH896 B
client_record2.shSH895 B
dma.shSH890 B
fdsm4.shSH883 B
gql6.shSH881 B
s3.batBAT876 B
br.shSH876 B
fepas_re2.shSH875 B
k8s.shSH872 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

38.60.91.186confirmed
104.131.123.136confirmed
122.166.178.204confirmed
142.93.57.244confirmed
157.90.175.209confirmed
184.154.107.45confirmed
212.232.23.75confirmed
23.248.226.186confirmed
23.248.226.187confirmed
23.248.226.188confirmed
23.248.226.189confirmed
23.248.226.190confirmed
3.128.117.168confirmed
32.236.62.30confirmed
38.76.208.29confirmed