Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

38.54.88.171

DATACENTERoperator-submittedc2exploitexposed-secretforced-lootgafgyt

Intelligence

ASN / OrgAS138915 · Kaopu Cloud HK Limited
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8087
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested200 file(s), 5239121 KB · c2, exploit, exposed-secret, forced-loot, gafgyt, malware

Open directory contents (200)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
t3_corpus.sqlite3SQLITE1223.4 MB
m38_corpus.sqlite3SQLITE1164.0 MB
t1_corpus.sqlite3SQLITE955.3 MB
o172_corpus.sqlite3SQLITE878.8 MB
corpus.sqlite3SQLITE874.0 MB
dl_ever.logLOG5.4 MB
local_results.csvCSV3.7 MB
cves.jsonJSON2.1 MB
‹redacted›.jarJAR2.1 MB
.checksumCHECKS1.4 MB
templates-checksum.txtTXT1.2 MB
.templates-indexTEMPLA1.1 MB
fill2.logLOG1.1 MB
bigflush.logLOG881 KB
gitlab_v1_partial.csvCSV473 KB
.public_cache.jsonJSON373 KB
TEMPLATES-STATS.jsonJSON308 KB
xato.zipZIP259 KB
tar_upload.logLOG40 KB
krepos.txtTXT26 KB
‹redacted›.pycPYC24 KB
nate_login_gui.pyPY20 KB
app.pyPY17 KB
auth_dl3.pyPY17 KB
fill_upload.logLOG15 KB
jre_install.logLOG15 KB
auth_dl2.pyPY15 KB
TEMPLATE-CREATION-GUIDE.mdMD14 KB
.viminfoVIMINF14 KB
config.yamlYAML13 KB
TEMPLATE-REVIEW-GUIDE.mdMD12 KB
stack.tgzTGZ11 KB
url_survey.pyPY11 KB
‹redacted›.pycPYC11 KB
.new-additionsNEW-AD11 KB
CONTRIBUTING.mdMD11 KB
txt-service-detect.yaml9 KB
vpn_urls.txtTXT9 KB
targets_own.txtTXT8 KB
acorpus.pyPY8 KB
‹redacted›.pycPYC7 KB
full_survey.pyPY7 KB
preflight.pyPY6 KB
README_JA.mdMD6 KB
README_KR.mdMD6 KB
afilter.pyPY5 KB
vpn_alive_result.txtTXT5 KB
README_CN.mdMD5 KB
import.logLOG5 KB
import_more.pyPY5 KB
fin_stats.pyPY4 KB
import_data.pyPY4 KB
svc_tags2.txtTXT4 KB
headless-open-redirect.yaml3 KB
gen_license.pyPY3 KB
web3_stats2.pyPY3 KB
glscan2.pyPY3 KB
dkim-record-detect.yaml3 KB
glscan.pyPY3 KB
kc1.txtTXT2 KB
glscan3.pyPY2 KB
vpn_alive.pyPY2 KB
vpn_fin_web3.pyPY2 KB
glshard.pyPY2 KB
kc_local2.txtTXT2 KB
fetch_k5.shSH2 KB
analyze_new.pyPY2 KB
elasticbeanstalk-takeover.yaml1 KB
recommended.yml1 KB
remain_inv.pyPY1 KB
inspect_dirs.pyPY1 KB
tar_upload.shSH1 KB
fetch_ch2.shSH1 KB
fetch_ch3.shSH1 KB
google-api-enumeration-workflow.yaml1 KB
license_private.pemPEM1 KB
fetch_ch1.shSH1 KB
build_fts.pyPY1 KB
mozilla-pdfjs-content-spoofing.yaml1 KB
fetch_k4.shSH1 KB
web3_stats.pyPY1 KB
PULL_REQUEST_TEMPLATE.mdMD1 KB
reporting-config.yamlYAML1 KB
web3_q.pyPY1 KB
ms_count.pyPY1 KB
backend_q.pyPY1 KB
.nuclei-ignore1 KB
mega_hosts.txtTXT1 KB
dvwa-headless-automatic-login.yaml1 KB
scan2.logLOG1 KB
fetch_luce2.shSH1 KB
chain2_q.pyPY1 KB
srv-service-detect.yaml1 KB
deprecated-tls.yaml1 KB
audit_pick.pyPY1 KB
npm_helm_q.pyPY1 KB
audit_inv.pyPY1 KB
aso_inv.pyPY1 KB
smallcase_inv.pyPY1 KB
scanE.logLOG1 KB
fill2.shSH1 KB
vpn_stats.pyPY1 KB
fetch_l3.shSH1 KB
aso_inv2.pyPY1 KB
chain_rem_q.pyPY1 KB
revoked-ssl-certificate.yaml1 KB
full_survey.logLOG1 KB
rclone_debug.logLOG1 KB
finapi_q.pyPY1 KB
privilege-escalation.yml990 B
scan_krepos.shSH989 B
merge_corpus.pyPY979 B
import_site_info.pyPY939 B
url_stats.pyPY937 B
dell-idrac-workflow.yaml926 B
screenshot.yaml920 B
fill_upload_loop.shSH919 B
audit_repo4.pyPY914 B
tf_inv2.pyPY907 B
sap-netweaver-workflow.yaml901 B
alibaba-cloud-config.yml881 B
bbva_dev_inv.pyPY855 B
aws-cloud-config.yml848 B
bbva_dev2.pyPY844 B
npm_q.pyPY819 B
finapi_inv.pyPY811 B
azure-cloud-config.yml799 B
audit_repo7.pyPY794 B
mainjar.pyPY782 B
bigflush.sh.bakBAK777 B
bigflush.shSH775 B
audit_repo2.pyPY770 B
tf_inv.pyPY760 B
tx_watchdog.shSH755 B
audit_big.pyPY743 B
decomp3.shSH714 B
audit_x.pyPY702 B
tags2.shSH688 B
newtags.shSH678 B
gcp-cloud-config.yml663 B
docker_inv.pyPY660 B
audit_repo.pyPY649 B
other_inv.pyPY648 B
misconfigurations.yml648 B
dk_cfg.pyPY647 B
default-login.yml641 B
kev.yml621 B
import2.logLOG618 B
helm_q.pyPY600 B
audit_repo5.pyPY585 B
batch_fetch2.shSH570 B
decomp_app.shSH562 B
batch_fetch.shSH552 B
tags_lsj.shSH551 B
.templates-config.jsonJSON551 B
audit_repo6.pyPY550 B
pom_q.pyPY518 B
npm_q2.pyPY513 B
batch_fetch3.shSH497 B
audit_repo3.pyPY493 B
vpn_urls.pyPY489 B
smallfirst.shSH480 B
lotus-domino-workflow.yaml468 B
vnc-workflow.yaml467 B
movable-workflow.yaml456 B
solarwinds-orion-workflow.yaml451 B
gsd_pkgs.pyPY446 B
cleanup_go.shSH443 B
cockpit-workflow.yaml441 B
cisco-asa-workflow.yaml431 B
fetch_luce.shSH396 B
ctrl.txtTXT394 B
autorestart_dl.shSH389 B
jellyfin-workflow.yaml373 B
size_probe.shSH370 B
artica-web-proxy-workflow.yaml358 B
rconfig-workflow.yaml343 B
micro-focus-workflow.yaml336 B
go_small.shSH335 B
scan3.logLOG332 B
bigip-workflow.yaml325 B
fetch_dir.shSH322 B
hikvision-workflow.yaml318 B
liferay-workflow.yaml316 B
microstrategy-workflow.yaml312 B
docker-compose.ymlYML311 B
harbor-workflow.yaml308 B
zeroshell-workflow.yaml293 B
adminer-workflow.yaml283 B
run_downloader.shSH268 B
DockerfileTXT266 B
list_retry.shSH262 B
.bash_historyBASH_H252 B
survey.logLOG213 B
scan.logLOG210 B
kev-workflow.yaml202 B
start_flush.shSH181 B
provider-config.yamlYAML177 B
build_fts.logLOG170 B
.token_seedTOKEN_74 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

110.42.215.163confirmed
143.246.203.114confirmed
157.230.117.70confirmed
157.245.140.34confirmed
169.58.233.110confirmed
172.105.156.153confirmed
176.65.148.59confirmed
190.183.251.210confirmed
2.24.204.250confirmed
217.160.132.82confirmed
23.149.28.46confirmed
43.163.124.78confirmed
64.111.92.149confirmed
64.118.151.226confirmed
66.154.127.156confirmed