Live findsCVE IntelConsoleStart free
huntback / IP intelligence

39.109.100.126

RESIDENTIALoperator-submittedc2exploitexposed-secretmalwaremozi

Intelligence

ASN / Orgunknown
CountryHong Kong
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 8080, 8082, 8083, 8085, 8086, 8087, 8088, 18080, 18081
Loot harvested440 file(s), 35733 KB · c2, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
git.tar.xzXZ7.2 MB
cdpyz-345u.tgzTGZ4.9 MB
cdpyz-compile-win.tgzTGZ4.2 MB
cdpyz-344m.tgzTGZ4.2 MB
cdpyz-node-3.4.71.tgzTGZ3.7 MB
px_ob.tgzTGZ3.1 MB
caddy-vb.logLOG852 KB
bmjs.binBIN558 KB
magai_bm.jsJS527 KB
firefox_zzbrowser.tgzTGZ252 KB
curlbody.txtTXT230 KB
‹redacted›.bodyBODY228 KB
fedex_ctx_fetch_20x100.logLOG200 KB
fedex_ctx_close_cycronet_10x100.logLOG193 KB
cma_zzbrowser_ctx.tar.gzGZ188 KB
serve.py.gzGZ132 KB
cdpyz345.tgzTGZ125 KB
cdpyz340.tgzTGZ125 KB
ff_mach_build.logLOG121 KB
cdpyz343.tgzTGZ117 KB
cdpyz344.tgzTGZ117 KB
cdpyz341.tgzTGZ117 KB
cdpyz342.tgzTGZ117 KB
rbp_root.txtTXT117 KB
fedex_ctx_close_si2.logLOG99 KB
fedex_ctx_fetch_10.logLOG95 KB
fedex_ctx_close_cycronet_si2.logLOG79 KB
v430_ios_sensor_gen_v2.pyPY76 KB
ajet-bc-sync.tgzTGZ69 KB
moz-proxy.logLOG65 KB
fedex_ctx_fetch_10x50.logLOG64 KB
cdp.pyPY61 KB
virginaustralia.pyPY57 KB
‹redacted›.outOUT50 KB
interceptor.pyPY50 KB
first_party_sets.dbDB48 KB
perimeterx.pyPY41 KB
px_hold_ab.logLOG38 KB
dd_ff_net.pyPY37 KB
akamai_bmp_probe.htmlHTML33 KB
perimeterx_app.pyPY32 KB
‹redacted›.pycPYC31 KB
fedex_prod_win.logLOG31 KB
chrome-heap-capture.logLOG29 KB
fedex_demo_payload.logLOG28 KB
px_hold_y.logLOG28 KB
ajet_invisible_reuse_tls.pyPY26 KB
fedex_noua.pyPY24 KB
fedex_nopixel.pyPY24 KB
cma_node_live_index.txtTXT24 KB
fedex_demo_payload.pyPY24 KB
fedex_noua.logLOG24 KB
fedex_nopixel.logLOG24 KB
fedex_android_login.pyPY23 KB
edge_linux_leak_probe.jsonJSON23 KB
perimeterx_invisible.pyPY22 KB
‹redacted›.pycPYC20 KB
pp_rbp_android_cycronet.pyPY20 KB
‹redacted›.pycPYC20 KB
fedex_stab.logLOG19 KB
waf_ff_probe.pyPY19 KB
ib_ns8.pyPY19 KB
‹redacted›.pycPYC19 KB
ib_ns6.pyPY19 KB
ib_ns4.pyPY19 KB
os_hard_probe.jsonJSON19 KB
ib_ns7.pyPY19 KB
ib_nsflow.pyPY19 KB
ajet_linux_hold.pyPY18 KB
traveloka_rbp.pyPY18 KB
pp_bc_signin.logLOG18 KB
measure_three.logLOG17 KB
ib_rgo_h2.pyPY17 KB
ib_withck.pyPY17 KB
patch_android_surface.pyPY17 KB
cma_va_ubuntu_netdiag.pyPY16 KB
measure_linux.logLOG16 KB
ib_dyn.pyPY15 KB
ctx_extras_verify.pyPY15 KB
ib_split.pyPY15 KB
ajet_demo.pyPY14 KB
ib_bjretry.pyPY14 KB
ib_bothjs.pyPY14 KB
ib_cy.pyPY14 KB
patch_formfactors_layout.pyPY14 KB
edge_linux_leak_probe2.jsonJSON14 KB
ib_minhtml.pyPY14 KB
ib_nocookie.pyPY13 KB
fedex_ctx_close_si2.pyPY13 KB
chrome-android-rebuild2.logLOG13 KB
ib_dublk2.pyPY13 KB
ib_dublk.pyPY13 KB
collect_bmp_probe.pyPY13 KB
fedex_ctx_close_cycronet_si2.pyPY13 KB
ib_dublk3.pyPY13 KB
ib_reeseonly.pyPY13 KB
ib_realblk.pyPY13 KB
cma_hf_probe3.pyPY13 KB
ib_directus.pyPY12 KB
akm_B_magai_android_v4.jsonJSON12 KB
akm_B_magai_android_rebuild.jsonJSON12 KB
akm_B_magai_android_v5.jsonJSON12 KB
akm_B_magai_android_v3.jsonJSON12 KB
chrome-android-rebuild.logLOG12 KB
ib_hdr.pyPY12 KB
html_load_lifecycle.pyPY12 KB
ff_cma_compare.pyPY12 KB
chrome-android-rebuild3.logLOG12 KB
ajet_bc_engine_holdloop.pyPY12 KB
chrome_inc_ninja.logLOG11 KB
ajet_rbp_rgo.pyPY11 KB
iberia_345u.pyPY11 KB
iberia_consist_344m.pyPY11 KB
v430_cf_sdk_dynamic.jsJS11 KB
fedex_rbp_cycronet_si2.pyPY11 KB
chrome-android-rebuild4.logLOG11 KB
fedex_ctx_fetch_10.pyPY11 KB
akm_B_magai_macos.jsonJSON11 KB
fedex_same_ctx_login.pyPY11 KB
ajet6_page.pyPY10 KB
ajet_demo.tgzTGZ10 KB
iberia_linux_hold.pyPY10 KB
‹redacted›.pycPYC10 KB
ajet6_hold.pyPY10 KB
ajet6_tn.pyPY10 KB
akm_B_magai_android.jsonJSON10 KB
ajet6_royal.pyPY10 KB
ajet6_royal_os.pyPY9 KB
ajet_wechat_official.pyPY9 KB
lang_leak_probe.pyPY9 KB
ff_package.logLOG9 KB
iberiaexpress.pyPY9 KB
dd_js_fp.pyPY9 KB
kasada.pyPY9 KB
px_hold_render_linux.pyPY9 KB
ib_smoke_rgo.pyPY8 KB
ajet_press_after_restart.logLOG8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
ajet_linux_fp_windows.jsonJSON8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
fp_android_probe.pyPY8 KB
Local%20StateTXT8 KB
llvm.shSH8 KB
iberia_demo_run.pyPY8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT8 KB
Local%20StateTXT7 KB
‹redacted›.outOUT7 KB
Local%20StateTXT7 KB
Local%20StateTXT7 KB
Local%20StateTXT7 KB
Local%20StateTXT7 KB
‹redacted›.outOUT7 KB
Local%20StateTXT7 KB
cma_chrome_ctx_fetch.pyPY7 KB
pp_bc_signin.pyPY7 KB
ajet_linux_fp_android.jsonJSON7 KB
fedex_si2_50.pyPY7 KB
cma_px_android_pnr_local.pyPY7 KB
ib_cookie_ab.pyPY7 KB
ajet_android_hold_probe.pyPY7 KB
fedex_chicago_10x5.logLOG6 KB
cma_va_ubuntu_ip_then_rgo.pyPY6 KB
verify_android_surface.pyPY6 KB
cma_va_ubuntu_netdiag_arms.pyPY6 KB
cma_va_ubuntu_rgo_mitm_tls.pyPY6 KB
ib_mitm_run.pyPY6 KB
fp_sync_verify.pyPY5 KB
fp_webrtc_verify.pyPY5 KB
cma_hf_probe.pyPY5 KB
patch_chrome_fp.pyPY5 KB
cma_ajet_px_ios_reuse.pyPY5 KB
patch_moz_proxy_log.pyPY5 KB
cma_ajet_px_ios_live_check.pyPY5 KB
ib_compile_target_node.pyPY5 KB
wt_gl_ab.pyPY5 KB
fedex_win_50.pyPY5 KB
kasada_fp_dump.pyPY5 KB
fedex_win_100.pyPY5 KB
patch_offscreen_webgl.pyPY4 KB
ib_3419_cookies.jsonJSON4 KB
k3433_smoke.pyPY4 KB
ajet_press_newtok2.logLOG4 KB
apt-redis.logLOG4 KB
ajet_press_retry.logLOG4 KB
k3433_swiftshader.pyPY4 KB
k3433_online.pyPY4 KB
cdp_ua_speed.pyPY4 KB
cma_va_ubuntu_ctx.pyPY4 KB
ib_mitm_cyc.pyPY4 KB
ib_rgo_custom.pyPY4 KB
ajet_press_fetchfix.logLOG4 KB
cma_px_android_okhttp_local.pyPY4 KB
fedex_ab_payloads.pyPY4 KB
kasada_chrome_9633.logLOG3 KB
akm_B_magai_android_sent_fp.jsonJSON3 KB
ib_alts.pyPY3 KB
akm_B_magai_macos_sent_fp.jsonJSON3 KB
ib_8765_client.pyPY3 KB
patch_live_translated.pyPY3 KB
ib_du_hold.pyPY3 KB
vb8088_app.pyPY3 KB
fedex_tz_hm.pyPY3 KB
v339_body.txtTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
android-geometry-share.jsonJSON3 KB
android-geometry-tls.jsonJSON3 KB
cdp_ua_speed.logLOG3 KB
fedex_linux_hm.pyPY3 KB
fedex_tz_hm.logLOG3 KB
ib_8765_nov_es.pyPY3 KB
.tmp_pp_tags_login.pyPY3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
fedex_win_hm.pyPY3 KB
ib_mitm_rgo_only.pyPY3 KB
Local%20StateTXT3 KB
cma_va_ubuntu_rgo_dummy.pyPY3 KB
ib_caller_payload.jsonJSON3 KB
cma_ubuntu_patch_start.shSH3 KB
pp_slider_signin.logLOG3 KB
cma_va_ubuntu_ip_match.pyPY3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
ts_kernel.pyPY3 KB
Local%20StateTXT3 KB
pp_probe_endpoints.pyPY3 KB
px_hold_w.logLOG3 KB
zz_watch_btn.logLOG3 KB
sub2api-ui.htmlHTML3 KB
kasada_chrome_19929.logLOG3 KB
ib_cyc.pyPY3 KB
apt-msitools.logLOG3 KB
ib_mitm_addon.pyPY2 KB
cma_ubuntu_3473_restart.pyPY2 KB
cma_ubuntu_workers_restart.pyPY2 KB
fedex_win_hm.logLOG2 KB
cma_ubuntu_start_serve.pyPY2 KB
fedex_linux_hm.logLOG2 KB
rdp_stoploop.pyPY2 KB
akm_B_magai_android_v5_sent_fp.jsonJSON2 KB
rdp_gn_err.pyPY2 KB
cma_ubuntu_restart_keepenv.pyPY2 KB
akm_B_magai_android_rebuild_sent_fp.jsonJSON2 KB
akm_B_magai_android_v4_sent_fp.jsonJSON2 KB
rdp_nj_diag.pyPY2 KB
akm_B_magai_android_v3_sent_fp.jsonJSON2 KB
kasada_tl_livecheck.logLOG2 KB
rdp_ninja_err.pyPY2 KB
cma_ubuntu_bootstrap.shSH2 KB
fedex_tz_hm2.logLOG2 KB
rdp_oobe.pyPY2 KB
rdp_njstat.pyPY2 KB
rdp_siso_err.pyPY2 KB
ib_compile_caller.pyPY2 KB
cma_px_find_daemon.shSH2 KB
rdp_winr.pyPY2 KB
rdp_boot.pyPY2 KB
rdp_resize.pyPY2 KB
rdp_startbuild.pyPY2 KB
rdp_g_full.pyPY2 KB
enable_ssh.ps1PS12 KB
rdp_logloop.pyPY2 KB
rdp_ninja_tail.pyPY2 KB
kasada_pjs_fp_cache.logLOG2 KB
fedex_diffcult.pyPY2 KB
cma_ubuntu_bootstrap2.shSH2 KB
ff_wd_check.pyPY2 KB
cma_ubuntu_restore_9800_9802.shSH2 KB
cma_ubuntu_3474_restart_serve.pyPY2 KB
rdp_crlog_task.pyPY2 KB
cma_ubuntu_dd_classify.pyPY2 KB
release_rebuild.ps1PS12 KB
rdp_unlock_rbp.pyPY2 KB
rdp_ajet.pyPY2 KB
rdp_k.pyPY2 KB
rdp_go_acls.pyPY2 KB
rdp_ps.pyPY2 KB
rdp_logtail.pyPY2 KB
zz_peek_form2.pyPY2 KB
zz_watch_btn.pyPY2 KB
rdp_pack2.pyPY2 KB
patch_akm_mouse.pyPY2 KB
cma_px_node_probe.shSH2 KB
cma_check_live_tasks.pyPY2 KB
rdp_gn_retry.pyPY2 KB
rdp_dbg_fix.pyPY2 KB
rdp_gn_boot.pyPY2 KB
cma_va_ubuntu_rgo_probe.pyPY2 KB
cma_hf_probe4.pyPY2 KB
rdp_go_continue.pyPY1 KB
rdp_pack.pyPY1 KB
rdp_go_ninja.pyPY1 KB
rdp_go_dbg.pyPY1 KB
cma_ti_ubuntu_inspect.pyPY1 KB
rdp_go_gn.pyPY1 KB
rdp_win_rbp.pyPY1 KB
ff_inc_build.logLOG1 KB
cma_ctx_bootstrap.shSH1 KB
ajet_press.pyPY1 KB
zz_peek_form.pyPY1 KB
ff_probe.shSH1 KB
watch_ifood_10m.pyPY1 KB
rdp_wps1.pyPY1 KB
rdp_refresh_crlog.pyPY1 KB
rdp_allow2.pyPY1 KB
cma_ubuntu_hb_cpu_patch.pyPY1 KB
xfr.logLOG1 KB
patch_bc_akm_dump.pyPY1 KB
ff_run_dd_js.shSH1 KB
cma_px_node_primp.shSH1 KB
fix_fp_protocol.pyPY1 KB
cma_px_node_verify.shSH1 KB
cma_ubuntu_find_ports.pyPY1 KB
ff_probe4.shSH1 KB
kasada_tl_diag.logLOG1 KB
measure_linux.shSH1 KB
cma_va_ubuntu_probe.shSH1 KB
dd_android_tags.pyPY1 KB
ff_check_webgl_patch.pyPY1 KB
ajet_press_newtok.logLOG1 KB
cma_hf_diag.shSH1 KB
rdp_unlock.pyPY1 KB
gl_probe.pyPY1 KB
ff_run_dd_net.shSH1 KB
kasada_verify.shSH1 KB
dump_ua.pyPY1 KB
rdp_allow.pyPY1 KB
px_fixed.pyPY1 KB
winupload.pyPY1 KB
cma_px_node_install.shSH1 KB
ib_smoke_dump.pyPY1 KB
scan_siso_output.pyPY1 KB
cma_ubuntu_dd_bv.pyPY1 KB
ubuntu_diag.shSH1 KB
ff_probe3.shSH1 KB
traveloka_3x.pyPY1 KB
.tmp_measure_three.shSH1 KB
_pp_parse_html.pyPY1 KB
cma_va_ubuntu_mitm_run.shSH1 KB
fedex_ab.logLOG1 KB
cma_px_node_maps.shSH1 KB
kasada_node_livecode.txtTXT1 KB
patch_akm_dump.pyPY1 KB
dump_ck.pyPY1016 B
_inv_build.pyPY976 B
kill_bc_chrome.pyPY964 B
rdsk.logLOG962 B
cma_ctx_build.shSH938 B
decode_px_captcha.pyPY937 B
cma_ubuntu_status.pyPY916 B
cma_px_node_safe_probe.shSH891 B
cma_px_serve_okhttp_truth.shSH883 B
pp_scan_serve.pyPY878 B
find_px_node.shSH876 B
cma_va_ubuntu_probe2.shSH875 B
cma_va_ubuntu_run.shSH851 B
find_px_app.shSH836 B
ubuntu_serve_keys.shSH834 B
cma_deploy_ajet_px_ios.shSH822 B
pp_retry.logLOG822 B
ff_probe2.shSH819 B
rdp_shot2.pyPY803 B
‹redacted›.CaddyfileCADDYF803 B
cma_va_ubuntu_mitm_dummy.pyPY779 B
rdp_shot.pyPY756 B
rdp_shot_rbp.pyPY752 B
kasada_verify.logLOG741 B
cma_ctx_fix_gn.pyPY735 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.214.172.114confirmed
104.233.217.108confirmed
118.25.25.81confirmed
156.245.146.226confirmed
177.4.12.11confirmed
195.178.110.48confirmed
222.186.57.10confirmed
43.161.243.73confirmed
45.151.122.34confirmed
47.102.192.23confirmed
8.217.24.92confirmed
81.70.21.248confirmed