Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

52.172.140.8

DATACENTERioc-tweetfeedloot-ipc2exploitexposed-secretforced-loot

Intelligence

ASN / OrgAS8075 · Microsoft Corporation
CountryIndia
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports3389, 5000, 8000, 9000
ServiceSimpleHTTP/0.6 Python/3.14.8 · Directory listing for /
Productsnginx
Loot harvested297 file(s), 75676 KB · c2, exploit, exposed-secret, forced-loot, malware, mozi

Open directory contents (297)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
darkwhisper.dbDB55.8 MB
profile.zipZIP9.3 MB
backup-files.tar.gzGZ7.1 MB
1791431847_cbc7f32e.logLOG462 KB
dashboard.pyPY174 KB
dashboard.py.bak-unguBAK-UN158 KB
backup-ctfd.sqlSQL88 KB
audit.logLOG65 KB
agent-src.zipZIP59 KB
1791339730_ef8405f2.pyPY58 KB
‹redacted›.rsRS38 KB
‹redacted›.out.logLOG38 KB
‹redacted›.err.logLOG35 KB
c2_server.pyPY33 KB
registry.jsonJSON27 KB
‹redacted›.rsRS27 KB
watchdog.logLOG26 KB
‹redacted›.rsRS23 KB
‹redacted›.rsRS23 KB
gen_web.pyPY19 KB
README.mdMD17 KB
verify.pyPY13 KB
buat_rekap_docx.pyPY10 KB
bot-patch.zipZIP9 KB
kantor-data.zipZIP9 KB
dism.logLOG9 KB
gen_foren.pyPY8 KB
verify2.pyPY8 KB
gen_misc.pyPY8 KB
‹redacted›.err.logLOG7 KB
gen_crypto.pyPY7 KB
gen_pwn.pyPY7 KB
gen_rev.pyPY7 KB
‹redacted›.rsRS7 KB
‹redacted›.rsRS6 KB
‹redacted›.rsRS6 KB
gen_web2.pyPY6 KB
gen_foren2.pyPY6 KB
‹redacted›.rsRS6 KB
‹redacted›.err.logLOG5 KB
watchdog.ps1PS15 KB
‹redacted›.rsRS5 KB
install-on-new.ps1PS15 KB
‹redacted›.rsRS5 KB
1791431924_eca9cdfd.logLOG5 KB
gen_misc2.pyPY4 KB
install-offline.ps1PS14 KB
test_dashboard.pyPY4 KB
gen_rev2.pyPY4 KB
files-linked.tsvTSV4 KB
‹redacted›.rsRS4 KB
verify_live.pyPY3 KB
gen_crypto2.pyPY3 KB
gen_pwn2.pyPY3 KB
‹redacted›.rsRS3 KB
‹redacted›.rsRS3 KB
WRITEUPS.mdMD3 KB
README.mdMD3 KB
‹redacted›.rsRS3 KB
verify_pwn.pyPY3 KB
‹redacted›.err.logLOG3 KB
ensure-core.shSH2 KB
stack-serve.shSH2 KB
resume-on-new.ps1PS12 KB
decode-morse.pyPY2 KB
gen_opencode_config.ps1PS12 KB
sync_ctfd.pyPY2 KB
‹redacted›.rsRS2 KB
start-kantor.ps1PS12 KB
resume-offline.ps1PS12 KB
import-missing.pyPY2 KB
patch_sanitize.pyPY2 KB
README-MIGRASI.txtTXT2 KB
README.mdMD2 KB
start-kantor-tunnel.ps1PS11 KB
‹redacted›.err.logLOG1 KB
‹redacted›.rsRS1 KB
import_ctfd.pyPY1 KB
‹redacted›.err.logLOG1 KB
patch_ctfd.pyPY1 KB
add_user.pyPY1 KB
ocr-image.ps1PS11 KB
‹redacted›.err.logLOG1 KB
_probe.pyPY1 KB
add-kantor-proxy.shSH1 KB
‹redacted›.err.logLOG1 KB
final56.pyPY1 KB
switch-unix-sock.shSH1 KB
fix-stack.shSH1 KB
test_student.pyPY1 KB
setup_ctfd.shSH1 KB
‹redacted›.err.logLOG1 KB
hold-foreground.shSH1 KB
health-now.shSH1 KB
‹redacted›.err.logLOG1 KB
fix-redis.shSH1 KB
patch_p04.pyPY1 KB
dbgc12.pyPY1 KB
common.pyPY1 KB
inspect-9router-db.shSH1 KB
patch-nginx-files.shSH1 KB
start-semua.batBAT1 KB
.env.exampleEXAMPL1 KB
patch-nginx-static.shSH1 KB
guni-env-restart.shSH1 KB
test-jail-payload.pyPY1010 B
‹redacted›.err.logLOG996 B
diag-slow.shSH967 B
stack-start.shSH958 B
dbgprime.pyPY929 B
boot.ps1PS1923 B
r9dump.pyPY918 B
clean-web.ps1PS1892 B
kantor-recon.shSH858 B
audit.pyPY844 B
r9models.ps1PS1838 B
fixw08.pyPY836 B
ctfd-restart.shSH829 B
fix-kantor-proxy.shSH819 B
start-new.ps1PS1801 B
start.logLOG792 B
setup-nginx.shSH778 B
q-user8-rel2.sqlSQL738 B
who-owns-9000.shSH730 B
gunifresh.shSH726 B
scan-flag-mismatch.shSH717 B
pxsocat.shSH693 B
validate_docx.pyPY689 B
guni-start.shSH681 B
verify-files.shSH668 B
rawdbg.pyPY667 B
r9sess.ps1PS1666 B
test-db-guard.shSH662 B
check-disk.shSH659 B
verify-pass.pyPY655 B
dbg_tok.pyPY628 B
test-kantor-proxy.shSH622 B
stop-semua.batBAT616 B
test-selfheal-sock.shSH616 B
final-check.shSH593 B
check-missing.pyPY590 B
p05local.shSH587 B
‹redacted›.err.logLOG585 B
test-ensure-nginx.shSH582 B
test-morse-15.shSH581 B
jprobe.pyPY574 B
dbg08.pyPY571 B
inspect-nginx-instances.shSH570 B
‹redacted›.out.logLOG568 B
px.pyPY565 B
chkpwn.pyPY561 B
rekap_db.pyPY557 B
test-files.shSH553 B
check-http2.shSH549 B
settheme.pyPY547 B
verify_users.sqlSQL546 B
diag-db.shSH535 B
‹redacted›.err.logLOG529 B
check-stack.shSH524 B
restart-nginx-clean.shSH522 B
check-nginx2.shSH520 B
dbfix.shSH517 B
rekap_registry.pyPY513 B
q-user8-rel.sqlSQL511 B
dbg06.pyPY506 B
r9db.pyPY506 B
dbgfiles.pyPY503 B
diag2.shSH496 B
test-repeat2.shSH496 B
check-http.shSH488 B
diag-nginx.shSH475 B
pwn-up.shSH474 B
ctfd-start.shSH468 B
check-morse-dl.shSH457 B
nginx-reload.shSH453 B
‹redacted›.err.logLOG451 B
kill-old.shSH450 B
verify-pass2.pyPY446 B
mktoken.pyPY439 B
patch_sanitize2.pyPY421 B
spygen.shSH419 B
dbnet2.shSH415 B
check-timeouts.shSH408 B
audit2.pyPY406 B
dbgfiles.shSH400 B
test-repeat.shSH398 B
diag-hang.shSH396 B
count_ctfd.pyPY392 B
redir-check.shSH391 B
patch-nginx-sendfile.shSH390 B
q-morse.sqlSQL390 B
who-hog.shSH382 B
backup.shSH368 B
p05nuke.shSH366 B
ctfd-fg.shSH361 B
test-proxy-stall.shSH358 B
web-start.batBAT354 B
who3471.shSH353 B
p06t.shSH336 B
kill-old2.shSH331 B
tw04.pyPY319 B
pxlocal.shSH317 B
check-nginx-pgrep.shSH315 B
dbgbis.pyPY313 B
del_users.sqlSQL312 B
count.pyPY303 B
check-9000.shSH297 B
re-demo.shSH290 B
dbg_setup.pyPY289 B
q-verify-user8.sqlSQL287 B
pwnrebuild.shSH285 B
check-distro.shSH283 B
whop.shSH283 B
ctfd-check.shSH276 B
who8000.shSH273 B
dbtcp.shSH272 B
test_app.shSH267 B
dbup.shSH263 B
p05fresh.shSH260 B
killgen.shSH257 B
mktoken.shSH257 B
q-penjara-files.sqlSQL257 B
q_counts.sqlSQL254 B
pnuke.shSH253 B
q-find-user.sqlSQL253 B
.envENV250 B
findperm.pyPY235 B
check_cache.shSH232 B
guniclean.shSH225 B
dbg4.pyPY220 B
clean-fg.shSH217 B
p05t.shSH207 B
pwnclean.shSH205 B
ashtest.shSH202 B
p03up.shSH198 B
p04up.shSH198 B
dbverify.shSH193 B
clean-sqlite.shSH189 B
pwninfo.shSH186 B
musltest.shSH185 B
q_delrule.sqlSQL182 B
ctfd-seg.shSH179 B
pwnaddr.shSH177 B
q_fk.sqlSQL173 B
q-penjara.sqlSQL167 B
q-all-files.sqlSQL159 B
pwnserve.shSH158 B
q-user-cols.sqlSQL158 B
q-compare-flags.sqlSQL147 B
who05.shSH147 B
dbnet.shSH146 B
fixdeps.shSH144 B
jcheck.pyPY139 B
test_san.pyPY139 B
web07up.shSH139 B
q-files-linked.sqlSQL133 B
listp05.shSH127 B
run_sql.shSH126 B
do_patch.shSH123 B
.gitignoreGITIGN120 B
.gitignoreGITIGN120 B
whoweb.shSH112 B
dbnet3.shSH110 B
count-chal.sqlSQL103 B
pwnchk.shSH101 B
pwnup.shSH97 B
‹redacted›.err.logLOG94 B
test_app.pyPY93 B
p05up.shSH86 B
bridge.logLOG85 B
err.logLOG83 B
dbchk.shSH80 B
q_users.sqlSQL74 B
‹redacted›.out.logLOG72 B
.gitignoreGITIGN71 B
.gitignoreGITIGN69 B
web07.shSH69 B
.secret_keySECRET64 B
pwn-start.batBAT62 B
pwnkill.shSH60 B
p05fg.shSH59 B
‹redacted›.out.logLOG58 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG54 B
‹redacted›.out.logLOG49 B
q-files-schema.sqlSQL43 B
p05b.shSH41 B
spy.shSH37 B
.gitignoreGITIGN37 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

115.159.204.46confirmed
164.68.118.218confirmed
23.81.35.61confirmed
38.133.142.39confirmed
103.106.191.40lead
139.84.162.69lead
64.177.33.68lead