Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

43.133.242.81

DATACENTERshodan-opendirmalicious-opendirexploit-files:acct_token_poc.py,dumate_ip_exploit.py,exploit.log,exploit.pyloot-ipc2exploit

Intelligence

ASN / OrgAS132203 · Shenzhen Tencent Computer Systems Company Limited
CountrySouth Korea
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports8877, 22, 80, 443, 2096, 3000, 8000, 8010, 8081, 8082, 8090, 9000, 9090, 18080
ServiceBaseHTTP/0.6 Python/3.11.2 · HxEcho61Title9f3c
JARM28d28d28d2ad28d00042d42d000000c2e0293a1b1651a6ff2a5a0cba2b4d7f
Loot harvested441 file(s), 200423 KB · c2, exploit, exposed-secret, forced-loot, malware, mozi

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.newNEW38.4 MB
cloudflaredTXT38.3 MB
‹redacted›.jsonlJSONL28.4 MB
recv_9000.logLOG9.1 MB
recv_9000.logLOG9.1 MB
recv_9000.logLOG9.1 MB
recv_3000.logLOG7.5 MB
recv_3000.logLOG7.5 MB
recv_3000.logLOG7.5 MB
loot.logLOG5.5 MB
recv_8081.logLOG4.3 MB
recv_9090.logLOG4.0 MB
recv_9090.logLOG4.0 MB
recv_9090.logLOG4.0 MB
recv_9090.logLOG4.0 MB
receiver.logLOG3.8 MB
receiver.logLOG3.8 MB
recv_v6.logLOG2.4 MB
recv_8888.logLOG2.0 MB
acme.shSH294 KB
demo.logLOG87 KB
tickets.logLOG71 KB
server_poc.logLOG54 KB
hits.logLOG53 KB
access.logLOG36 KB
key4.dbDB36 KB
.bash_historyBASH_H29 KB
cert9.dbDB28 KB
synology_dsm.shSH21 KB
dns_baidu.shSH20 KB
truenas_websocat.shSH18 KB
tunnel.logLOG18 KB
access.logLOG18 KB
zyxel_gs1900.shSH18 KB
redfish.shSH18 KB
dns_pleskxml.shSH18 KB
byteplus_alb.shSH17 KB
dns_hetznercloud.shSH17 KB
ssh.shSH17 KB
dns_azure.shSH17 KB
beacon-20260828-223845-140112493012672.txtTXT17 KB
remote_exploit.pyPY16 KB
unifios.shSH16 KB
haproxy.shSH16 KB
dns_optidata.shSH16 KB
dns_netcup.shSH15 KB
dns_selectel.shSH15 KB
dns_edgedns.shSH15 KB
exploit_webview_chain.pyPY15 KB
dns_hostup.shSH14 KB
acct_token_poc.pyPY14 KB
hub8443.logLOG14 KB
dns_arubabusiness.shSH14 KB
dumate_ip_exploit.pyPY13 KB
server.pyPY13 KB
ssrf_echo_hub.pyPY13 KB
unifi.shSH13 KB
panos.shSH13 KB
dns_bergdns.shSH13 KB
server_pwn.pyPY12 KB
smtp.shSH12 KB
dns_aws.shSH12 KB
truenas.shSH12 KB
jetkvm.shSH12 KB
dns_freedns.shSH12 KB
dns_openstack.shSH11 KB
dns_kas.shSH11 KB
dns_omglol.shSH11 KB
dns_namecheap.shSH11 KB
dns_yandex360.shSH11 KB
docker.shSH11 KB
dns_inwx.shSH10 KB
dns_timeweb.shSH10 KB
dns_yc.shSH10 KB
dns_cyon.shSH10 KB
dns_oci.shSH10 KB
dns_huaweicloud.shSH10 KB
shelly.shSH10 KB
dns_bhosted.shSH10 KB
dns_1984hosting.shSH10 KB
truenas_ws.shSH9 KB
dns_sotoon.shSH9 KB
lighttpd.shSH9 KB
deeplink_leak_server.pyPY9 KB
multideploy.shSH9 KB
dumate_now.pyPY9 KB
dns_dnsservices.shSH9 KB
nginx_proxy_manager.shSH9 KB
dns_euserv.shSH9 KB
dns_openprovider.shSH9 KB
dumate_final.pyPY9 KB
exploit_bduss_theft.pyPY9 KB
pwn.pyPY8 KB
dns_hostingde.shSH8 KB
dns_dynv6.shSH8 KB
dns_volcengine.shSH8 KB
rce.pyPY8 KB
dns_gname.shSH8 KB
dns_comlaude.shSH8 KB
dns_jd.shSH8 KB
openstack.shSH8 KB
hub10032.logLOG8 KB
dns_conoha.shSH8 KB
dns_ovh.shSH8 KB
dns_cpanel_uapi.shSH8 KB
cpanel_uapi.shSH8 KB
dns_geoscaling.shSH7 KB
aws_ses.shSH7 KB
dns_loopia.shSH7 KB
dns_dyn.shSH7 KB
dns_hw.shSH7 KB
acme.sh.completionCOMPLE7 KB
dns_bunny.shSH7 KB
dns_dgon.shSH7 KB
dns_nexdns.shSH7 KB
remote_zhidao_server.pyPY7 KB
dns_world4you.shSH7 KB
dns_selfhost.shSH7 KB
dns_ispconfig.shSH7 KB
dns_beget.shSH7 KB
dns_infoblox_uddi.shSH7 KB
dns_cf.shSH7 KB
dns_opnsense.shSH7 KB
wenku_server.pyPY6 KB
dns_wedos.shSH6 KB
vault.shSH6 KB
dns_mythic_beasts.shSH6 KB
dns_eurodns.shSH6 KB
%E7%99%BE%E5%BA%A6%E4%BC%98%E9%80%89App%E6%B7%B1%E9%93%BE%E5%8F%AF%E7%AA%83%E5%8F%96%E5%95%86%E5%AE%B6%E7%99%BB%E5%BD%95MD6 KB
wenku_server.pyPY6 KB
dns_poweradmin.shSH6 KB
dns_dnsmint.shSH6 KB
youxuan_report_final.mdMD6 KB
dns_rcode0.shSH6 KB
dns_pdns.shSH6 KB
dns_opteamax.shSH6 KB
dns_clouddns.shSH6 KB
dns_spaceship.shSH6 KB
dns_ali.shSH6 KB
windows_rdp.shSH6 KB
dns_sitehost.shSH6 KB
dns_gd.shSH6 KB
dns_he.shSH6 KB
dns_rackspace.shSH6 KB
baidu_cdn.shSH6 KB
dns_autodns.shSH6 KB
dns_simply.shSH6 KB
dns_subreg.shSH6 KB
openmediavault.shSH6 KB
exploit.pyPY6 KB
dns_tencent.shSH6 KB
dns_dnsimple.shSH6 KB
dns_hestiacp.shSH6 KB
routeros.shSH6 KB
ruckus.shSH6 KB
redeem.pyPY6 KB
dns_one.shSH6 KB
fortigate.shSH5 KB
dns_exoscale.shSH5 KB
dns_hostinger.shSH5 KB
dns_qc.shSH5 KB
dns_constellix.shSH5 KB
calc_demo.pyPY5 KB
dns_glesys.shSH5 KB
dns_virakcloud.shSH5 KB
dns_cloudns.shSH5 KB
dns_mijnhost.shSH5 KB
dns_active24.shSH5 KB
mcp_0click_remote.shSH5 KB
dns_infomaniak.shSH5 KB
dns_miab.shSH5 KB
dns_openprovider_rest.shSH5 KB
dns_level27.shSH5 KB
dns_online.shSH5 KB
dns_czechia.shSH5 KB
dns_nic.shSH5 KB
dns_dynu.shSH5 KB
dns_nw.shSH5 KB
dns_linode_v4.shSH5 KB
dns_schlundtech.shSH5 KB
dns_transip.shSH5 KB
proxmoxve.shSH5 KB
dns_cpanel.shSH5 KB
dns_gandi_livedns.shSH5 KB
dns_azion.shSH5 KB
dns_mvmnet.shSH5 KB
dns_efficientip.shSH5 KB
beacon-20260828-223843-140112501405376.txtTXT5 KB
dns_websupport.shSH5 KB
dns_servercow.shSH5 KB
dns_desec.shSH5 KB
dns_creoline.shSH5 KB
dns_internetbs.shSH5 KB
dns_bh.shSH5 KB
localcopy.shSH5 KB
youxuan_poc.pyPY5 KB
dns_gcloud.shSH5 KB
dns_gcore.shSH5 KB
dns_artfiles.shSH5 KB
proxmoxbs.shSH4 KB
dns_namecom.shSH4 KB
dns_da.shSH4 KB
oss_ssrf_bridge.pyPY4 KB
dns_nsupdate.shSH4 KB
keyhelp.shSH4 KB
dns_joker.shSH4 KB
exploit_webview_payload.htmlHTML4 KB
dns_mydnsjp.shSH4 KB
dns_durabledns.shSH4 KB
dns_aurora.shSH4 KB
dns_curanet.shSH4 KB
dns_ultra.shSH4 KB
vps_attack.pyPY4 KB
dns_laodc.shSH4 KB
dns_linode.shSH4 KB
ssrf_hop_26662.pyPY4 KB
dns_njalla.shSH4 KB
gcore_cdn.shSH4 KB
dns_kappernet.shSH4 KB
fullchain.pemPEM4 KB
dns_pblin.shSH4 KB
dns_muumuu.shSH4 KB
dns_la.shSH4 KB
ctrip_jsonp_steal.pyPY4 KB
fritzbox.shSH4 KB
opsgenie.shSH4 KB
dns_porkbun.shSH4 KB
dns_alviy.shSH4 KB
dns_veesp.shSH4 KB
dns_unoeuro.shSH4 KB
dns_googledomains.shSH4 KB
dns_zoneedit.shSH4 KB
dns_neodigit.shSH4 KB
dns_easydns.shSH4 KB
peplink.shSH4 KB
dns_domeneshop.shSH4 KB
dns_mgwm.shSH4 KB
dns_pointhq.shSH4 KB
dns_abion.shSH4 KB
mcp_remote_poc.shSH4 KB
dns_netlify.shSH4 KB
attack_page_answer.htmlHTML4 KB
attack_page_box.htmlHTML4 KB
dns_scaleway.shSH4 KB
dns_ipv64.shSH4 KB
mailgun.shSH4 KB
dns_arvan.shSH4 KB
dns_hexonet.shSH4 KB
dns_acmedns.shSH4 KB
dns_ionos.shSH4 KB
dns_me.shSH4 KB
dns_ionos_cloud.shSH4 KB
dns_udr.shSH4 KB
dns_lua.shSH4 KB
dns_nsone.shSH3 KB
dns_edgecenter.shSH3 KB
dns_cn.shSH3 KB
dns_zone.shSH3 KB
dns_myloc.shSH3 KB
ikuai.shSH3 KB
dns_opusdns.shSH3 KB
dns_misaka.shSH3 KB
dns_vultr.shSH3 KB
dns_infoblox.shSH3 KB
dns_rltx.shSH3 KB
dns_namesilo.shSH3 KB
dns_dpi.shSH3 KB
dns_duckdns.shSH3 KB
dns_rackcorp.shSH3 KB
dns_dp.shSH3 KB
dns_regru.shSH3 KB
leak.logLOG3 KB
bark.shSH3 KB
dns_variomedia.shSH3 KB
dns_calrissia.shSH3 KB
dns_leaseweb.shSH3 KB
dns_freemyip.shSH3 KB
dns_vscale.shSH3 KB
dns_lexicon.shSH3 KB
srv.pyPY3 KB
vault_cli.shSH3 KB
dns_vercel.shSH3 KB
dns_ddnss.shSH3 KB
dns_ad.shSH3 KB
cleverreach.shSH3 KB
dns_rage4.shSH3 KB
dns_anx.shSH3 KB
dns_fornex.shSH3 KB
dns_dnsexit.shSH3 KB
dns_zilore.shSH3 KB
dns_nanelo.shSH3 KB
vps_trigger.pyPY3 KB
ctrip_jsonp_steal_https.pyPY3 KB
dns_acmeproxy.shSH3 KB
dns_nederhost.shSH3 KB
dns_bookmyname.shSH3 KB
exim4.shSH3 KB
qiniu.shSH3 KB
kemplm.shSH3 KB
mail.shSH3 KB
vsftpd.shSH3 KB
dns_cdmon.shSH3 KB
consul.shSH3 KB
dns_firestorm.shSH3 KB
dns_kinghost.shSH3 KB
ifttt.shSH2 KB
directadmin.shSH2 KB
edgio.shSH2 KB
full_remote3.shSH2 KB
dns_limacity.shSH2 KB
full_remote.shSH2 KB
remote_trigger.pyPY2 KB
dns_knot.shSH2 KB
dns_west_cn.shSH2 KB
kong.shSH2 KB
dns_mydevil.shSH2 KB
bos_debug.pyPY2 KB
steal.pemPEM2 KB
dns_zonomi.shSH2 KB
ali_dcdn.shSH2 KB
ali_cdn.shSH2 KB
telegram.shSH2 KB
strongswan.shSH2 KB
exploit_server.shSH2 KB
server.pyPY2 KB
dns_dnshome.shSH2 KB
repro_oneclick.shSH2 KB
keyhelp_api.shSH2 KB
pushover.shSH2 KB
server_poc.pyPY2 KB
vps_claim.pyPY2 KB
full_remote2.shSH2 KB
dns_maradns.shSH2 KB
dns_technitium.shSH2 KB
dns_dreamhost.shSH2 KB
dingtalk.shSH2 KB
sendgrid.shSH2 KB
full_remote4.shSH2 KB
dns_nm.shSH2 KB
cqhttp.shSH2 KB
auto_page.htmlHTML2 KB
mini_dns.pyPY2 KB
teams.shSH2 KB
acct_hits.txtTXT2 KB
netlify.shSH2 KB
gitlab.shSH2 KB
waha.shSH2 KB
dns_ipprojects.shSH1 KB
dl_page3.htmlHTML1 KB
postmark.shSH1 KB
dl_page.htmlHTML1 KB
xmpp.shSH1 KB
exploit_generate_qr.pyPY1 KB
poc-lattrip.htmlHTML1 KB
mailcow.shSH1 KB
dns_nsd.shSH1 KB
poc_run.logLOG1 KB
mattermost.shSH1 KB
dns_doapi.shSH1 KB
repro_noadb.shSH1 KB
poc_deeplink_v6_public.txtTXT1 KB
steal.keyKEY1 KB
dns_df.shSH1 KB
gotify.shSH1 KB
discord.shSH1 KB
leak_public_4313324281.logLOG1 KB
dns_tele3.shSH1 KB
pushbullet.shSH1 KB
ntfy.shSH1 KB
gen_link.pyPY1 KB
cachefly.shSH1 KB
mydevil.shSH1 KB
collect.logLOG1 KB
weixin_work.shSH1 KB
beacon-20260828-223845-140112501405376.txtTXT1 KB
slack.shSH1 KB
customscript.shSH1 KB
dns_he_ddns.shSH1 KB
dns_myapi.shSH1 KB
callmebotWhatsApp.shSH1 KB
slack_app.shSH1 KB
feishu.shSH1 KB
healthchecks.shSH1 KB
simvictim.pyPY1 KB
simvictim3.pyPY1 KB
acct_watch.logLOG1 KB
shortlink.pyPY1 KB
ATTACK_DEEPLINK.txtTXT1 KB
dl_page2.htmlHTML1 KB
sapi.htmlHTML1 KB
token.jsonJSON1015 B
token_remote.jsonJSON1005 B
token_0click.jsonJSON996 B
token_cn.jsonJSON992 B
atk_hits.logLOG948 B
vps_attack.logLOG938 B
probe.htmlHTML928 B
ATTACK_WEB_LINK.txtTXT879 B
stolen_token_verified.jsonJSON813 B
dl_page.htmlHTML744 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

168.144.85.125confirmed
207.56.221.47confirmed
212.103.62.205confirmed
213.136.79.115confirmed
38.60.91.186confirmed
87.199.203.242confirmed
95.182.88.43confirmed
103.103.245.13lead
104.103.159.41lead
104.194.141.56lead
104.68.246.179lead
107.173.38.112lead
109.248.231.212lead
118.193.69.59lead
128.1.186.187lead