Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

38.76.208.29

DATACENTERshodan-opendirmalicious-opendirexploit-files:exp.log,exp_retest.log,exploit.class,exploit.javac2elf-binaryexploit

Intelligence

ASN / OrgAS401696 · cognetcloud INC
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports8002, 22, 80, 389, 443, 8090, 18080, 18081
ServiceSimpleHTTP/0.6 Python/3.8.10 · Directory listing for /
Loot harvested78 file(s), 29904 KB · c2, elf-binary, exploit, exposed-secret, forced-loot, macho-binary

Open directory contents (78)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
nps.bakBAK11.7 MB
chromeUpdateELF5.3 MB
http8002.logLOG4.1 MB
dns1232312ELF4.1 MB
000001.logLOG2.2 MB
bashELF1.1 MB
000001.logLOG473 KB
000001.logLOG124 KB
000001.logLOG68 KB
exp.logLOG27 KB
jhun-fastjson-fd2.pyPY15 KB
nps_strace.logLOG15 KB
apt.logLOG15 KB
serldap3.logLOG14 KB
rev_final.logLOG11 KB
sysinfoELF9 KB
exploit.pyPY8 KB
‹redacted›.classMACHO4 KB
‹redacted›.classMACHO3 KB
‹redacted›.javaJAVA3 KB
‹redacted›.javaJAVA3 KB
fd2.logLOG2 KB
‹redacted›.classMACHO2 KB
jndi.zipZIP2 KB
exp_retest.logLOG2 KB
access.logLOG1 KB
nps.confCONF1 KB
etc_nps.conf.bakBAK1 KB
nps.conf.bakBAK1 KB
xbean2.binBIN1 KB
xbean.binBIN1 KB
apt_upx.logLOG1 KB
‹redacted›.classMACHO1 KB
server.keyKEY1 KB
payload.binBIN1 KB
server.pemPEM1 KB
‹redacted›.javaJAVA1 KB
fd2b.logLOG1 KB
compile_all.logLOG1 KB
‹redacted›.classMACHO1 KB
rev_server2.pyPY1 KB
‹redacted›.javaJAVA1 KB
relay.pyPY1007 B
‹redacted›.jarJAR886 B
runA.logLOG851 B
runB.logLOG851 B
out.logLOG851 B
‹redacted›.javaJAVA827 B
rev_server.pyPY805 B
build_rest.shSH709 B
lsrv.pyPY650 B
rev_server_final.pyPY642 B
t1.logLOG635 B
t2.logLOG635 B
‹redacted›.classMACHO610 B
l.pyPY522 B
dnsprobe.pyPY502 B
build_rest.logLOG427 B
hits.logLOG426 B
nc8080.logLOG341 B
‹redacted›.javaJAVA272 B
rev2.logLOG248 B
rmi.logLOG226 B
chk.pyPY205 B
shell.logLOG152 B
access.logLOG124 B
serldap.logLOG90 B
serldap2.logLOG90 B
nc4444.logLOG68 B
ldap.logLOG54 B
p.jsonJSON46 B
bf.logLOG28 B
shell3.txtLOG27 B
shell.txtLOG26 B
shell2.txtTXT26 B
shell4.txtTXT26 B
configTXT2 B
‹redacted›.errJSP1 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

100.21.82.169confirmed
101.42.136.73confirmed
101.47.156.26confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.46.185.169confirmed
104.131.123.136confirmed
104.223.41.172confirmed
104.233.150.138confirmed
108.61.219.168confirmed
111.223.247.165confirmed
118.107.13.102confirmed
118.107.41.239confirmed
122.10.110.72confirmed
122.10.17.49confirmed