huntback / IP intelligence

83.172.138.182

VPNVPNoperator-submittedloot-ipc2exploitexposed-secretmacho-binary

Intelligence

ASN / OrgAS9009 · M247 Europe SRL
CountryGermany
NetworkVPN · risk 70/100
Threat score0/100
Open ports22, 8001, 8080, 8088, 9092
ServiceSimpleHTTP/0.6 Python/3.13.5 · Directory listing for /
Loot harvested301 file(s), 35771 KB · c2, exploit, exposed-secret, macho-binary, malware, mozi

Open directory contents (301)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.apkAPK6.2 MB
‹redacted›.apkAPK4.4 MB
‹redacted›.apkAPK4.1 MB
‹redacted›.apkAPK4.1 MB
‹redacted›.apkAPK3.9 MB
‹redacted›.mjsMJS1.8 MB
‹redacted›.apkAPK560 KB
mkt_header_dist_main_BZvGrPMK_web_js.jsJS497 KB
‹redacted›.apkAPK476 KB
‹redacted›.apkAPK448 KB
shell_main.jsJS422 KB
‹redacted›.apkAPK376 KB
‹redacted›.apkAPK360 KB
host_wallet.htmlHTML349 KB
http8001.logLOG347 KB
‹redacted›.mjsMJS314 KB
‹redacted›.mjsMJS278 KB
‹redacted›.apkAPK224 KB
sellerapi_swagger.jsonJSON211 KB
‹redacted›.apkAPK188 KB
‹redacted›.bodyBODY185 KB
‹redacted›.bodyBODY185 KB
‹redacted›.bodyBODY185 KB
www_solved.htmlHTML183 KB
‹redacted›.apkAPK168 KB
‹redacted›.apkAPK160 KB
‹redacted›.mjsMJS154 KB
‹redacted›.apkAPK148 KB
‹redacted›.apkAPK132 KB
‹redacted›.apkAPK128 KB
‹redacted›.apkAPK128 KB
bing2.htmlHTML127 KB
‹redacted›.mjsMJS126 KB
‹redacted›.apkAPK124 KB
‹redacted›.mjsMJS124 KB
‹redacted›.apkAPK120 KB
mf_paths.txtTXT117 KB
vue%403.5.44_8cc0b83cdbe8.mjsMJS117 KB
‹redacted›.apkAPK116 KB
‹redacted›.apkAPK116 KB
‹redacted›.apkAPK112 KB
‹redacted›.mjsMJS104 KB
‹redacted›.mjsMJS103 KB
‹redacted›.apkAPK92 KB
‹redacted›.apkAPK92 KB
‹redacted›.apkAPK92 KB
‹redacted›.apkAPK92 KB
‹redacted›.apkAPK92 KB
‹redacted›.apkAPK92 KB
gs.htmlHTML91 KB
copilot.zipZIP81 KB
‹redacted›.mjsMJS80 KB
cida_3f5d.txtTXT79 KB
‹redacted›.mjsMJS70 KB
og.htmlHTML67 KB
‹redacted›.mjsMJS55 KB
config.jsonJSON42 KB
ar.htmlHTML39 KB
‹redacted›.mjsMJS38 KB
wmch_6.jsJS30 KB
wmch_3.jsJS28 KB
auth.txtTXT24 KB
auth_flow.htmlHTML24 KB
authz_px.htmlHTML24 KB
cid_authz.htmlHTML24 KB
cid_flow.htmlHTML24 KB
f_11720.txtTXT24 KB
f_14739.txtTXT24 KB
f_1638.txtTXT24 KB
f_2167.txtTXT24 KB
f_23608.txtTXT24 KB
f_2485.txtTXT24 KB
f_25765.txtTXT24 KB
f_3190.txtTXT24 KB
f_6607.txtTXT24 KB
f_9060.txtTXT24 KB
gg.txtTXT24 KB
ir2.txtTXT24 KB
login2.htmlHTML24 KB
m_GET.txtTXT24 KB
s_25566.htmlHTML24 KB
sg.txtTXT24 KB
sp.htmlHTML24 KB
spsg.htmlHTML24 KB
sw_26438.txtTXT24 KB
sw_3462.txtTXT24 KB
sw_4690.txtTXT24 KB
sw_5060.txtTXT24 KB
f_1754.txtTXT23 KB
‹redacted›.outOUT22 KB
relay84.logLOG21 KB
wm_c1.jsJS21 KB
‹redacted›.mjsMJS21 KB
uts.txtTXT16 KB
wsec.txtTXT16 KB
cop_ua.txtTXT16 KB
sms.htmlHTML14 KB
cidaas_app_login.htmlHTML13 KB
‹redacted›.mjsMJS13 KB
wmch_2.jsJS12 KB
OPSTATE.mdMD9 KB
cfg.phpPHP9 KB
subs_clean.txtTXT8 KB
relay4.logLOG8 KB
pinia%403.0.4_d6ef429fce29.mjsMJS7 KB
scan.logLOG6 KB
batch2.logLOG5 KB
‹redacted›.mjsMJS4 KB
subs_live.txtTXT4 KB
pr_click.pyPY3 KB
cid_px.txtTXT3 KB
http8080.logLOG3 KB
cf_solve3.pyPY3 KB
ffuf_filiale.jsonJSON3 KB
solve_turnstile.pyPY3 KB
relay84.pyPY3 KB
relay.pyPY3 KB
s5relay.pyPY3 KB
relay2.logLOG3 KB
signup_multi.pyPY3 KB
sftp_paced.pyPY2 KB
‹redacted›.protoPROTO2 KB
solve2.pyPY2 KB
getwww4.pyPY2 KB
pr_long.pyPY2 KB
verified_contents.jsonJSON2 KB
cf_proxy_solve.pyPY2 KB
sip_login.htmlHTML2 KB
cf_us4.pyPY2 KB
cbt.phpPHP2 KB
login_probe.pyPY2 KB
dp_v2.pyPY2 KB
pr_mobile.pyPY2 KB
www_solve_long.pyPY2 KB
jadx-gui.batBAT2 KB
sp_session.pyPY2 KB
batch3.logLOG2 KB
cf_solve4.pyPY2 KB
batch3.shSH2 KB
cf_us3.pyPY2 KB
cf_persist.pyPY2 KB
relay_new.pyPY2 KB
probe_subs.pyPY2 KB
batch4.logLOG2 KB
jadx.batBAT2 KB
pr_last.pyPY2 KB
cf_key2.pyPY2 KB
cf_us.pyPY2 KB
cf_p2.pyPY2 KB
sftp_creds.pyPY2 KB
pr_test.pyPY1 KB
cf_solve_proxy.pyPY1 KB
‹redacted›.mjsMJS1 KB
batch4.shSH1 KB
crawler.pyPY1 KB
crush_http.pyPY1 KB
sftp_final.pyPY1 KB
batch2.shSH1 KB
cf_key3.pyPY1 KB
pr_test2.pyPY1 KB
ssh_raw.pyPY1 KB
cf_final.pyPY1 KB
cf_solve.pyPY1 KB
www_wait.pyPY1 KB
login_final.pyPY1 KB
cf_solve2.pyPY1 KB
sp_full_flow.pyPY1 KB
cf_us2.pyPY1 KB
cf_hybrid.pyPY1 KB
sp_login_render.pyPY1 KB
dp_test.pyPY1 KB
dp_test2.pyPY1 KB
DebugProbesKt.binMACHO1 KB
cf_solve_www.pyPY1 KB
cf_key.pyPY1 KB
user_enum.pyPY1 KB
cf_key7.pyPY1 KB
cf_transfer.pyPY1 KB
‹redacted›.bodyBODY1 KB
login_probe2.pyPY1 KB
seller_signup.pyPY1 KB
getwww3.pyPY1 KB
signup_direct.pyPY1 KB
sftp_banner.pyPY1 KB
app_api.pyPY1 KB
cf_clean.pyPY1 KB
op4.txtTXT1 KB
cid_solve.pyPY1 KB
ssh_raw2.pyPY1 KB
sellerapi7.pyPY1 KB
sftp_auth3.pyPY1 KB
kcx_brute.shSH1 KB
crush_http2222.pyPY1 KB
signup_click2.pyPY1 KB
cf_key5.pyPY1 KB
sftp_auth2.pyPY1 KB
dc_solve.pyPY1 KB
sftp_auth.pyPY1 KB
signup_probe.pyPY1 KB
sp_session2.pyPY1 KB
tc.pyPY1 KB
cf_iframe.pyPY1 KB
sftp_single.pyPY1 KB
solve3.pyPY1 KB
cf_key4.pyPY1 KB
media_probe.pyPY1 KB
cf_key8.pyPY1 KB
ssh_ver.pyPY1 KB
sellerapi8.pyPY1 KB
cid_dom.pyPY1 KB
sftp_round2.pyPY1 KB
relay_86.logLOG1 KB
relay_new.logLOG1 KB
solve_multi.pyPY1 KB
relay.logLOG1 KB
cf_diag.pyPY1 KB
signup_flow.pyPY1 KB
sqli_probe.shSH1 KB
cf_refs.pyPY1 KB
probe.shSH1 KB
sftp_auth4.pyPY1 KB
domxss_check.pyPY1 KB
proxycheck.shSH1 KB
seller_reg.pyPY1 KB
enum2.pyPY1 KB
summary33.pyPY1 KB
cf_key9.pyPY1 KB
crush2.pyPY1 KB
cf_solve10.pyPY1 KB
cf_key6.pyPY1 KB
getwww2.pyPY1 KB
wss_test.pyPY1 KB
getwww.pyPY1 KB
s7_final.pyPY1 KB
ats_probe.pyPY1 KB
relay3.logLOG1 KB
sftp_check.pyPY1 KB
‹redacted›.hdrHDR1 KB
‹redacted›.hdrHDR1 KB
‹redacted›.hdrHDR1 KB
ats3.pyPY1 KB
cidaas_login.pyPY1 KB
op1.txtTXT1 KB
op2.txtTXT1 KB
op_out.txtTXT1 KB
‹redacted›.bodyBODY1023 B
domxss2.pyPY994 B
cheetah.pyPY993 B
link_probe.pyPY979 B
cf_route.pyPY944 B
uts_deep.pyPY939 B
get_chunks.pyPY918 B
cid_xss.pyPY905 B
s7_ssrf_battery.shSH895 B
pproxy1.logLOG884 B
sellerapi5.pyPY880 B
sellerapi2.pyPY872 B
cf_ws.pyPY870 B
pl_api2.pyPY861 B
cf_cap.pyPY826 B
cf_imp.pyPY822 B
nat_probe.pyPY786 B
mkt_hosts.pyPY772 B
dl_mf.pyPY749 B
cf_auth.pyPY748 B
crush_probe.pyPY724 B
sfp4.pyPY719 B
ir_jar.txtTXT710 B
cf_bf.pyPY700 B
fuzz_words.txtTXT666 B
seller_api.pyPY639 B
pp_probe.pyPY624 B
sfp2.pyPY621 B
pl_api.pyPY593 B
sellerapi3.pyPY565 B
sellerapi6.pyPY559 B
sfp_deep.pyPY541 B
mkt_entry.pyPY535 B
cf_rel.pyPY497 B
ats_post.pyPY488 B
kcx_body.htmlHTML421 B
final_check.pyPY406 B
cmp.binBIN388 B
ats2.pyPY380 B
gwt.txtTXT317 B
trace.txtTXT317 B
tp_out.binBIN302 B
ats4.pyPY281 B
pxtest.shSH258 B
s1.logLOG239 B
t2c.jsonJSON236 B
sfp3.pyPY230 B
g1.txtTXT225 B
sellerapi4.pyPY224 B
conf.pyPY144 B
acc.txtTXT79 B
‹redacted›.propertiesPROPER78 B
relay1.logLOG68 B
marker_test.txtTXT33 B
tp2.binBIN27 B
ff.binBIN15 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

13.229.73.36confirmed
147.182.133.56confirmed
5.42.107.183confirmed
151.243.11.240lead
151.243.11.241lead
159.223.40.78lead
185.216.68.66lead
194.55.166.170lead
202.95.17.200lead
204.168.131.234lead
209.99.191.184lead
217.142.239.53lead
23.27.25.75lead
38.60.91.186lead
46.250.255.73lead