huntback / IP intelligence
217.198.6.226
Intelligence
ASN / OrgAS9123 · JSC "TIMEWEB"
CountryRussia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 2096, 8000, 8443, 9999
Servicenginx/1.24.0 (Ubuntu) · 403
Productsnginx
Loot harvested262 file(s), 125184 KB · c2, elf-binary, exploit, exposed-secret, gafgyt, malware
Open directory contents (262)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| c2_fifo2 | ELF | 9.0 MB |
| c2fix | ELF | 9.0 MB |
| c_c2 | ELF | 6.0 MB |
| ws_fw_linux | ELF | 5.6 MB |
| webshell_linux | ELF | 5.6 MB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5Crenderer.old.log | LOG | 5.0 MB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5Cmain.old.log | LOG | 5.0 MB |
| fresh_loot.tar.gz | GZ | 5.0 MB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5Cmain.log | LOG | 4.6 MB |
| auto_loot.tar.gz | GZ | 3.8 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp36-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp37-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp313-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp312-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp311-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp310-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp39-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Cxtquant_250807%5Cxtquant%5Cdatacenter.cp38-win_amd64.pyd | PE | 3.7 MB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5Cdaemon.log | LOG | 3.2 MB |
| diphuket_v1_working_db_20260310.sql | SQL | 2.1 MB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5C2026-11-09%5CworkbuddyMainThread__a2567bd533f6066f1dd8c6b2a4f61c5f.log | LOG | 2.1 MB |
| C_%5CUsers%5Cboscoma%5C.cua-driver%5Cpackages%5Creleases%5C0.19.3-x86_64-pc-windows-msvc%5Ccua-cursor-theme.exe | PE | 1.9 MB |
| C_%5CUsers%5Cboscoma%5C.cua-driver%5Cpackages%5Creleases%5C0.10.0-x86_64-pc-windows-msvc%5Ccua-cursor-theme.exe | PE | 1.9 MB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5C2026-11-08%5CworkbuddyMainThread__a2567bd533f6066f1dd8c6b2a4f61c5f.log | LOG | 1.7 MB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Clxml%5Cobjectify.cp311-win_amd64.pyd | PE | 1.7 MB |
| C_%5CUsers%5Cboscoma%5Cupg2.log | LOG | 1.6 MB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5CFeishu%5CFeishu.exe | PE | 1.6 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5CLenovo%20Vantage%20Installer.exe | PE | 1.4 MB |
| C_%5CUsers%5Cboscoma%5CDownloads%5Ctailscale-setup-1.98.9.exe | PE | 1.3 MB |
| C_%5CUsers%5Cboscoma%5Ctailscale_install.exe | PE | 1.3 MB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5C2026-11-08%5C2026-11-08-22-45-18__30f915f7463366488e753261e70b8884.log | LOG | 962 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5C_brotli.cp311-win_amd64.pyd | PE | 836 KB |
| C_%5CUsers%5Cboscoma%5C.cua-driver%5Cpackages%5Creleases%5C0.10.0-x86_64-pc-windows-msvc%5Ccua_driver_node_runtime.node | PE | 511 KB |
| c2-state.json | JSON | 483 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 439 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Ccache%5Cconversation-product-spill%5Cacc-product-config-v3-d61cf1e0f0156220.json | JSON | 432 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Ccache%5Cacc-product-config-v3-19524-28dfd793-dda5-496b-8089-0415b0fe7550.json | JSON | 401 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5CTemp%5C1cd1004f-7dd7-40a5-b160-425bec95be9e.tmp.node | PE | 369 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Ccache%5Cacc-product-config-v3-14376-b59abdbb-3bf3-45f2-bd6f-a007bbe92d99.json | JSON | 361 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Clxml%5Chtml%5C_difflib.cp311-win_amd64.pyd | PE | 338 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile2%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 305 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Caiohttp%5C_http_parser.cp311-win_amd64.pyd | PE | 294 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Cpip%5C_vendor%5Ccertifi%5Ccacert.pem | PEM | 275 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CScripts%5Cpython.exe | PE | 256 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Cyaml%5C_yaml.cp311-win_amd64.pyd | PE | 252 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CScripts%5Cpythonw.exe | PE | 244 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5C2026-11-09%5C2026-11-08-22-45-18__30f915f7463366488e753261e70b8884.log | LOG | 242 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Ccompletions%5Copenclaw.fish | FISH | 239 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Ccertifi%5Ccacert.pem | PEM | 234 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-trade%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 225 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Cdb_backup_20260525_191738.db | DB | 216 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Ccc-switch.db | DB | 212 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Ccharset_normalizer%5Cmd.cp311-win_amd64.pyd | PE | 210 KB |
| C_%5CUsers%5Cboscoma%5CCDP_Session%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 199 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cworkbuddy.db | DB | 184 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Cdb_backup_20260524_121533.db | DB | 180 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Ccompletions%5Copenclaw.zsh | ZSH | 168 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5Csandbox%5C20261108%5Csandbox_center_22608_000.log | LOG | 157 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Cbrowser%5Copenclaw%5Cuser-data%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 152 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Caiohttp%5C_websocket%5Creader_c.cp311-win_amd64.pyd | PE | 148 KB |
| argparse.js | JS | 126 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-sgr-debug%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 114 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Ccharset_normalizer%5Ccd.cp311-win_amd64.pyd | PE | 114 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Csystem-ca-bundle.pem | PEM | 112 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile3%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 98 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-sgr-dbg2%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 96 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug%5CDefault%5Cshared_proto_db%5C000003.log | LOG | 81 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Cmemory%5Cmain.sqlite | SQLITE | 68 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 58 KB |
| binding.c | C | 50 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 44 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 44 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5C2026-11-08%5Cunknown-workspace__0943646edce6afd40ba580bf0ccd807a.log | LOG | 42 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 40 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Csettings.json | JSON | 36 KB |
| key4.db | DB | 36 KB |
| cert9.db | DB | 28 KB |
| README.md | MD | 26 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cjavascript- | MD | 25 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 25 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 24 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5CCryptodome%5CPublicKey%5C_ed25519.pyd | PE | 24 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-sgr-dbg2%5CDefault%5CPreferences | TXT | 24 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cjavascript- | MD | 24 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile%5CDefault%5CPreferences | TXT | 23 KB |
| binding.c | C | 22 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 22 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 22 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak | BAK | 21 KB |
| C_%5CUsers%5Cboscoma%5C.agent-reach-venv%5CLib%5Csite-packages%5Cpillow-12.3.0.dist-info%5Csboms%5Cpillow-12.3.0.cdx.jso | JSON | 21 KB |
| README.md | MD | 21 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cpython-deve | MD | 21 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cmcp-builder | MD | 21 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-pre-downgrade | BAK-PR | 21 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-providers | BAK-PR | 20 KB |
| pm2.log | LOG | 20 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-pre-hp-fix | BAK-PR | 20 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 18 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 18 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile3%5CDefault%5CPreferences | TXT | 18 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile2%5CDefault%5CPreferences | TXT | 18 KB |
| C_%5CUsers%5Cboscoma%5CCDP_Session%5CDefault%5CPreferences | TXT | 17 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cpython-deve | MD | 17 KB |
| config.conf | CONF | 17 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 17 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cdeveloper-e | MD | 17 KB |
| conversions.js | JS | 16 KB |
| README.md | MD | 16 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-sgr-debug%5CDefault%5CPreferences | TXT | 15 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Capi-scaffol | MD | 15 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Clogs%5Cconfig-audit.jsonl | JSONL | 15 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-trade%5CDefault%5CPreferences | TXT | 15 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 15 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 15 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cpayload%5Cs | MD | 14 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 14 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cdeveloper-e | MD | 14 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 14 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 14 KB |
| C_%5CUsers%5Cboscoma%5Cchrome-debug%5CDefault%5CPreferences | TXT | 14 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cobservabili | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cbackend-dev | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cdeployment- | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cpayment-pro | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cpayment-pro | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccb_teams_marketplace%5Cplugins%5Cgeneral-skills%5Cskills%5C | MD | 13 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cpayment-pro | MD | 12 KB |
| README.md | MD | 12 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 12 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-fallback-20261101_195452 | BAK-FA | 12 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Ckubernetes- | MD | 12 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml | YAML | 12 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-tmpmodel | BAK-TM | 11 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 11 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-siliconflow | BAK-SI | 11 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Copenclaw.json | JSON | 11 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 11 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 11 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 11 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260525_001027.json5 | JSON5 | 11 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cllm-applica | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260524_235316.json5 | JSON5 | 10 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak.glm-5.3 | 3 | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cconductor%5 | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260525_001026.json5 | JSON5 | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cdeveloper-e | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260525_000717.json5 | JSON5 | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cblockchain- | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 10 KB |
| 2026-03-21T09_48_11_525Z-debug-0.log | LOG | 10 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260524_235315.json5 | JSON5 | 10 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260524_235302.json5 | JSON5 | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 10 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 9 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 9 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 9 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccb_teams_marketplace%5Cplugins%5Cagent-sdk-dev%5Ccommands%5 | MD | 9 KB |
| 2026-03-10T13_32_38_202Z-debug-0.log | LOG | 9 KB |
| C_%5CUsers%5Cboscoma%5CDocuments%5CHP%E4%BA%A4%E6%8E%A5%E6%96%87%E6%A1%A3.md | MD | 9 KB |
| index.js | JS | 9 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 8 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260524_235249.json5 | JSON5 | 8 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260524_191745.json5 | JSON5 | 8 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Copenclaw.json.bak | BAK | 8 KB |
| C_%5CUsers%5Cboscoma%5C.cc-switch%5Cbackups%5Copenclaw%5Copenclaw_20260524_235301.json5 | JSON5 | 8 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 8 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Copenclaw.json.bak.1 | 1 | 8 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 8 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Copenclaw.json.bak.2 | 2 | 8 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Copenclaw.json.bak.3 | 3 | 8 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Copenclaw.json.bak.4 | 4 | 8 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-20260928-providerpush | BAK-20 | 8 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cnextjs-expe | MD | 8 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-doctor-20260927-153701 | BAK-DO | 8 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak-pre-dgp-20260924-233500 | BAK-PR | 8 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccb_teams_marketplace%5Cplugins%5Cagent-sdk-dev%5CREADME.md | MD | 7 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cjavascript- | MD | 7 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cconfig.yaml.bak.envmigrate | ENVMIG | 7 KB |
| C_%5CUsers%5Cboscoma%5Cproviders_new.yaml | YAML | 7 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 7 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5Cstartup%5C2026-11-05%5C18028-204450.log | LOG | 7 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cnextjs-expe | MD | 7 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Ccicd-automa | MD | 7 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Clogs%5Cstartup%5C2026-11-08%5C14376-224229.log | LOG | 6 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 6 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 5 KB |
| e2e_test.js | JS | 5 KB |
| semver | TXT | 4 KB |
| CHANGELOG.md | MD | 4 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 4 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 4 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Call-command | MD | 4 KB |
| dump.pm2.bak | BAK | 3 KB |
| binding.c | C | 3 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CRoaming%5CAnyDesk%5Cservice.conf | CONF | 3 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cnextjs-expe | MD | 3 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Chp_default_run.log | LOG | 2 KB |
| README.md | MD | 2 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cplugins%5Cmarketplaces%5Ccodebuddy-plugins-official%5Cexternal_plugins%5Cscientific- | MD | 2 KB |
| esgenerate | TXT | 2 KB |
| test_bx24.js | JS | 2 KB |
| ‹redacted›.ts | TS | 2 KB |
| C_%5CUsers%5Cboscoma%5C.workbuddy%5Cextension-registry%5Caudience-index.json | JSON | 2 KB |
| ‹redacted›.ts | TS | 1 KB |
| 2026-03-10T13_39_54_607Z-debug-0.log | LOG | 1 KB |
| 2026-03-21T09_47_41_455Z-debug-0.log | LOG | 1 KB |
| ‹redacted›.ts | TS | 1 KB |
| 2026-03-21T09_48_03_719Z-debug-0.log | LOG | 1 KB |
| 2026-03-18T14_31_30_061Z-debug-0.log | LOG | 1 KB |
| 2026-03-21T09_50_59_945Z-debug-0.log | LOG | 1 KB |
| 2026-03-21T09_49_26_374Z-debug-0.log | LOG | 1 KB |
| 2026-03-18T14_31_22_146Z-debug-0.log | LOG | 1 KB |
| 2026-03-10T15_55_33_113Z-debug-0.log | LOG | 1 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5Cdepalign.log | LOG | 1 KB |
| 2026-03-20T04_29_27_884Z-debug-0.log | LOG | 1 KB |
| package.json | JSON | 1 KB |
| diphuket-presentation-out.log | LOG | 1 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5C.env.bak-pre-downgrade | BAK-PR | 1 KB |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Clogs%5Cconfig-health.json | JSON | 1 KB |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5C.env | ENV | 1008 B |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile%5CDefault%5CBrowsingTopicsState | TXT | 884 B |
| ‹redacted›.ts | TS | 854 B |
| setup.sh | SH | 726 B |
| C_%5CUsers%5Cboscoma%5CCDP_Session%5CDefault%5CBrowsingTopicsState | TXT | 649 B |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile2%5CDefault%5CBrowsingTopicsState | TXT | 649 B |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5C.env.bak.20260709_004316 | 202607 | 583 B |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5C.env.bak.volc_agent_fix | VOLC_A | 573 B |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5C.env.bak.ai_exchange | AI_EXC | 492 B |
| tsconfig.json | JSON | 427 B |
| C_%5CUsers%5Cboscoma%5C.openclaw-user%5Cidentity%5Cdevice.json | JSON | 416 B |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Cidentity%5Cdevice.json | JSON | 416 B |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Cbrowser%5Copenclaw%5Cuser-data%5CDefault%5CBrowsingTopicsState | OPENCL | 414 B |
| C_%5CUsers%5Cboscoma%5Cchrome-debug-profile3%5CDefault%5CBrowsingTopicsState | TXT | 414 B |
| C_%5CUsers%5Cboscoma%5Cchrome-debug%5CDefault%5CBrowsingTopicsState | TXT | 414 B |
| C_%5CUsers%5Cboscoma%5C.ssh%5Cid_ed25519 | SSH%5C | 411 B |
| c2-config.json | JSON | 244 B |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Cagents%5Cmain%5Cagent%5Cauth-profiles.json | JSON | 178 B |
| c2-audit.log | LOG | 164 B |
| C_%5CUsers%5Cboscoma%5C.openclaw%5Cworkspace%5C.git%5Cconfig | GIT%5C | 130 B |
| C_%5CUsers%5Cboscoma%5C.mcporter%5Ccredentials.json | JSON | 94 B |
| C_%5CUsers%5Cboscoma%5C.config%5Cbrowser-harness%5Cruntime%5Cbu-default.port | PORT | 92 B |
| C_%5CUsers%5Cboscoma%5C.config%5Cbrowser-harness%5Cruntime%5Cbu-inv7001.port | PORT | 92 B |
| C_%5CUsers%5Cboscoma%5C.config%5Cbrowser-harness%5Cruntime%5Cbu-invest1.port | PORT | 92 B |
| C_%5CUsers%5Cboscoma%5C.config%5Cbrowser-harness%5Cruntime%5Cbu-wb.port | PORT | 92 B |
| C_%5CUsers%5Cboscoma%5C.config%5Cbrowser-harness%5Cruntime%5Cp-e2c07e70eae0%5Cbu-default.port | PORT | 92 B |
| .env | ENV | 62 B |
| diphuket-pres-out.log | LOG | 41 B |
| auto_loot.tar.gz | GZ | 32 B |
| loot.txt | TXT | 29 B |
| win_exfil.txt | TXT | 27 B |
| C_%5CUsers%5Cboscoma%5C.config%5Cyt-dlp%5Cconfig | CONFIG | 20 B |
| exfil_linux.txt | TXT | 20 B |
| C_%5CUsers%5Cboscoma%5CAppData%5CLocal%5Chermes%5C.env.lock | LOCK | 7 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 114.132.61.189 | confirmed |
| 13.239.40.119 | confirmed |
| 37.60.248.174 | confirmed |
| 45.139.104.36 | confirmed |
| 1.14.93.149 | lead |
| 1.15.114.102 | lead |
| 101.32.108.79 | lead |
| 101.36.118.185 | lead |
| 101.47.134.222 | lead |
| 101.47.15.229 | lead |
| 102.203.200.45 | lead |
| 102.68.86.43 | lead |
| 103.111.114.29 | lead |
| 103.113.104.49 | lead |
| 103.116.52.164 | lead |