huntback / IP intelligence

91.92.43.211

RESIDENTIALoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS207043 · DEDIK SERVICES LIMITED
CountryGermany
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 25, 80, 88, 111, 443, 465, 587, 993, 995, 3389, 4444, 8080, 8081, 8090, 8443
ServiceApache/2.4.66 (Ubuntu) · Apache2 Ubuntu Default Page: It works
Productsapache, nginx
Loot harvested703 file(s), 33832 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
argocd_main.jsJS2.3 MB
cad_full.jsonJSON1.7 MB
auth_app.jsJS1.6 MB
acb.jsJS1.6 MB
app-common-bundle.jsJS1.6 MB
acri.jsJS1.6 MB
contingent.jsJS1.5 MB
chunk6.jsJS1.0 MB
admin.jsJS856 KB
al.jsJS727 KB
asta_app.jsJS680 KB
app-bundle.jsJS673 KB
after_login.htmlHTML671 KB
login_page.htmlHTML671 KB
u1_dash.htmlHTML660 KB
u1_final.htmlHTML660 KB
u1_after_phone.htmlHTML660 KB
u1_no_password.htmlHTML660 KB
application.logLOG657 KB
collsaas__app-8f98bcda108b7a08.jsJS635 KB
legal44__app-4517ea2c36307234.jsJS635 KB
demo2.htmlHTML627 KB
chunk2.jsJS571 KB
claib.jsJS563 KB
dozzle143.jsJS491 KB
dozzle_main.jsJS434 KB
bitrixrec.htmlHTML384 KB
cap4_off.htmlHTML375 KB
cap3_off.htmlHTML372 KB
cap4_on.htmlHTML372 KB
cap2_off.htmlHTML371 KB
cap3_on.htmlHTML371 KB
cap_off.htmlHTML371 KB
cap2_on.htmlHTML370 KB
cap_on.htmlHTML370 KB
buser.htmlHTML370 KB
bitrix.htmlHTML367 KB
bonus.jsJS312 KB
app2.jsJS232 KB
chunk4.jsJS223 KB
heap.binBIN214 KB
b.htmlHTML211 KB
c.htmlHTML211 KB
creds_all_regions.jsonJSON154 KB
auth_doc.jsonJSON142 KB
cat.htmlHTML120 KB
admin.htmlHTML109 KB
confs.txtTXT100 KB
deploy_doc.jsonJSON98 KB
ann_bundle.jsJS87 KB
cart.htmlHTML87 KB
chk.htmlHTML85 KB
deploy54_doc.jsonJSON81 KB
captured_u1.jsonJSON73 KB
accounts_raw.txtTXT64 KB
addcart.htmlHTML53 KB
cart2.htmlHTML53 KB
chelyabinsk_all_lines.txtTXT48 KB
dbscan_stage1.jsonJSON47 KB
a.htmlHTML45 KB
cl.htmlHTML44 KB
apidoc.htmlHTML40 KB
allnuxt.jsJS39 KB
acct.htmlHTML39 KB
cp.htmlHTML38 KB
ced.jsJS36 KB
gerodot_metrics.txtTXT31 KB
base_pf.htmlHTML31 KB
chunk8.jsJS30 KB
all_hashes.txtTXT29 KB
api_admin.htmlHTML29 KB
apollon_login.htmlHTML29 KB
cf.txtTXT27 KB
devb_auth.htmlHTML27 KB
dp4.htmlHTML26 KB
dp2.htmlHTML25 KB
1ca.txtTXT24 KB
cve_2026_18963_poc.pyPY24 KB
bt2.txtTXT23 KB
a.txtTXT23 KB
ch_972.jsJS23 KB
adm.txtTXT23 KB
DUMP_GUIDE.mdMD22 KB
bitlogin.htmlHTML20 KB
‹redacted›.rawRAW19 KB
chunk21.jsJS19 KB
chsamdump.pyPY19 KB
cbr_viewer.htmlHTML18 KB
virtual%3Anuxt%3A%252Fbuilds%252Fkassir%252Fwebsite%252F.nuxt%252Froutes.mjsMJS17 KB
sig_probe.jsonJSON17 KB
ch23dump.pyPY17 KB
exploit_zitadel_cve_2026_109373.pyPY17 KB
cap_config.jsonJSON16 KB
appsettings-template.jsonJSON16 KB
audit.htmlHTML15 KB
deep_read_out.txtTXT14 KB
appsettings.jsonJSON12 KB
DUMP_AI_PROMPT.mdMD12 KB
crawler6.pyPY12 KB
crawler5.pyPY12 KB
appsettings-docker-local.jsonJSON12 KB
crawler4.pyPY11 KB
auth_page.htmlHTML11 KB
chunk88.jsJS10 KB
crawler3.pyPY10 KB
state_u1.jsonJSON10 KB
crawler2.pyPY10 KB
am.jsonJSON9 KB
adm3.htmlHTML9 KB
dump_tver.pyPY9 KB
auth.jsJS9 KB
abs_min.soELF8 KB
crawler.pyPY8 KB
adminer2_all.txtTXT8 KB
adminer.txtTXT8 KB
count_from8tb.pyPY8 KB
chunk943_09c35757.jsJS8 KB
cve_2026_42601.pyPY7 KB
dump_chuv.pyPY7 KB
db_stage2.pyPY7 KB
dump_kaluga.pyPY7 KB
as_dump.pyPY7 KB
config.htmlHTML7 KB
dlvry_test.htmlHTML7 KB
core_config.jsonJSON7 KB
check_creds.pyPY6 KB
virtual%3Anuxt%3A%252Fbuilds%252Fkassir%252Fwebsite%252F.nuxt%252Fnuxtjs-device.mjsMJS6 KB
dump_sources.pyPY6 KB
count3.pyPY6 KB
db_stage1b.pyPY6 KB
ch74.pyPY6 KB
count2.pyPY6 KB
virtual%3Anuxt%3A%252Fbuilds%252Fkassir%252Fwebsite%252F.nuxt%252Fplugins.client.mjsMJS6 KB
db_stage3.pyPY6 KB
appsettings.jsonJSON6 KB
ch23.pyPY6 KB
probe_full.pyPY6 KB
deti.pyPY6 KB
ab_root2.htmlHTML5 KB
cit_dump.pyPY5 KB
chsam.pyPY5 KB
‹redacted›.pycPYC5 KB
atl_templates.txtTXT5 KB
c1.jsonJSON5 KB
crm_tokens_results.jsonJSON5 KB
count4.pyPY5 KB
multilogin2.pyPY5 KB
alt_dump.ps1PS15 KB
login_and_capture.pyPY5 KB
multilogin.pyPY5 KB
dump_state.logLOG5 KB
classify.pyPY5 KB
rce2.pyPY4 KB
ml3.pyPY4 KB
ui_login2.pyPY4 KB
report.pyPY4 KB
dump_b24.pyPY4 KB
dump_rfc.pyPY4 KB
dump_tver_v4.pyPY4 KB
alerts2.jsonJSON4 KB
adpass_hunt.pyPY4 KB
deep_hunt.pyPY4 KB
ui_login3.pyPY4 KB
ui_login.pyPY4 KB
auth_brute.pyPY4 KB
legal44_login-c43197c8d8a8a7b4.jsJS4 KB
probe3.pyPY4 KB
clients.jsonJSON4 KB
c2_array_email.htmlHTML3 KB
db_stage1.pyPY3 KB
ak_dump.pyPY3 KB
ad.pyPY3 KB
cap_ann2.pyPY3 KB
deep_read.pyPY3 KB
rce4.pyPY3 KB
rce3.pyPY3 KB
al_dump2.pyPY3 KB
dump_tver_v3.pyPY3 KB
as.pyPY3 KB
cap_exfil17.pyPY3 KB
rce_probe.pyPY3 KB
cit_bypass.pyPY3 KB
c2.htmlHTML3 KB
al.pyPY3 KB
cap_ann_sync.pyPY3 KB
ch74login.pyPY3 KB
al_dump.pyPY3 KB
archivescheck.pyPY3 KB
cap_exfil13.pyPY3 KB
idor_test2.pyPY3 KB
db_test.pyPY3 KB
method_brute2.pyPY3 KB
auth_brute8.pyPY3 KB
auth_brute6.pyPY3 KB
archivescheck2.pyPY3 KB
auth_brute3.pyPY3 KB
cap_get_all.pyPY3 KB
scan_ids.pyPY3 KB
defcreds.shSH3 KB
auth_stealth2.pyPY3 KB
profile_hunt.pyPY3 KB
cit_bypass2.pyPY3 KB
new_batch1.pyPY3 KB
pwhunt.pyPY3 KB
crmtokens.pyPY3 KB
ch74_principal.jsonJSON3 KB
ch74_principal_active.jsonJSON3 KB
auth_probe.pyPY2 KB
mass_docs.pyPY2 KB
cap_announce.pyPY2 KB
method_brute.pyPY2 KB
dc_chain_check.pyPY2 KB
dump.pyPY2 KB
cors_check.pyPY2 KB
monitor_bg.pyPY2 KB
cap_exfil12.pyPY2 KB
virtual%3Anuxt%3A%252Fbuilds%252Fkassir%252Fwebsite%252F.nuxt%252Fnuxt.config.mjsMJS2 KB
ad_brute2.pyPY2 KB
sqli_post.pyPY2 KB
write_probe.pyPY2 KB
draft_probe.pyPY2 KB
ch74seria.pyPY2 KB
dbprobe.shSH2 KB
df.jsonJSON2 KB
check_all_rce.pyPY2 KB
rce5.pyPY2 KB
rce6.pyPY2 KB
ado_ntlm.pyPY2 KB
autoshell.pyPY2 KB
scan_ids2.pyPY2 KB
crawl_fuzz.pyPY2 KB
ad_brute3.pyPY2 KB
dbprobe2.shSH2 KB
auth_replay.pyPY2 KB
auth_brute4.pyPY2 KB
asrv.shSH2 KB
lfi2.pyPY2 KB
steps_dump.pyPY2 KB
backhunt.pyPY2 KB
creds_out.txtTXT2 KB
auth_brute7.pyPY2 KB
idor_test1.pyPY2 KB
dirall.pyPY2 KB
check_ssh.pyPY2 KB
ch74scan.pyPY2 KB
cap_exfil14.pyPY2 KB
curl_setup2.pyPY2 KB
auth_brute5.pyPY2 KB
amqp.pyPY2 KB
sqli_all.pyPY2 KB
cap_full_chain_test.pyPY2 KB
bypass2.pyPY2 KB
chdump.pyPY2 KB
auth_stealth.pyPY2 KB
cap_sess_dbg.pyPY2 KB
cap_exfil15.pyPY2 KB
collect3.pyPY2 KB
adminer2.shSH2 KB
cap_step2.pyPY2 KB
ch74addr.pyPY2 KB
ssrf_legal.pyPY2 KB
dbcheck2.pyPY2 KB
order_scan.pyPY2 KB
cap_relaunch.pyPY2 KB
cap_sess_test.pyPY2 KB
dc_relay.pyPY2 KB
rce_blind.pyPY2 KB
collect.pyPY2 KB
check_hooks.pyPY2 KB
corpadmin_check.pyPY2 KB
cap_exfil7.pyPY2 KB
al_sh2.pyPY2 KB
capsh.pyPY2 KB
bypass_login.pyPY2 KB
ssrf2.pyPY2 KB
af2.pyPY2 KB
capsh2.pyPY2 KB
crawl_fuzz2.pyPY2 KB
full_probe.pyPY2 KB
auth_brute2.pyPY2 KB
rce_alt2.pyPY2 KB
bitrixls.pyPY1 KB
cap_final2.pyPY1 KB
lfi.pyPY1 KB
cap_launch_dump.pyPY1 KB
capout2.pyPY1 KB
capcmd.pyPY1 KB
agr_scan.pyPY1 KB
fetch_idor_docs.pyPY1 KB
ch2.pyPY1 KB
check_access.shSH1 KB
cap_clean_launch.pyPY1 KB
cap_go4.pyPY1 KB
capout.pyPY1 KB
alt_recon.pyPY1 KB
ch.pyPY1 KB
to_csv.pyPY1 KB
cap.pyPY1 KB
cap_download_all.pyPY1 KB
agr2.pyPY1 KB
replay_auth.pyPY1 KB
bypass_full.pyPY1 KB
ad_brute.pyPY1 KB
up_full.pyPY1 KB
restore.pyPY1 KB
cap_relaunch2.pyPY1 KB
cit.pyPY1 KB
auth_two.pyPY1 KB
bi_write.pyPY1 KB
bridge_srv.pyPY1 KB
cap_exfil6.pyPY1 KB
dump_read.pyPY1 KB
collect.phpPHP1 KB
cfgsweep.shSH1 KB
alter8093.pyPY1 KB
dossier74.pyPY1 KB
collect2.pyPY1 KB
deep_read79.pyPY1 KB
capgofile.pyPY1 KB
dex_ldap2.htmlHTML1 KB
saaslegal.htmlHTML1 KB
rce_alt.pyPY1 KB
chdossier.pyPY1 KB
dump74.pyPY1 KB
creds_deep_b.pyPY1 KB
ch74b.pyPY1 KB
cap_go3.pyPY1 KB
cap_launch2.pyPY1 KB
cap_go2.pyPY1 KB
cap_fix_b64.pyPY1 KB
cap_go.pyPY1 KB
check.jsonJSON1 KB
fetch_js.pyPY1 KB
cap.pyPY1 KB
fetch_idor_docs3.pyPY1 KB
hash_probe.pyPY1 KB
collect_chunks.pyPY1 KB
mk_al2.pyPY1 KB
dbcheck.pyPY1 KB
rce_alt3.pyPY1 KB
cmt_p0_tail.pyPY1 KB
chd.pyPY1 KB
al_sh.pyPY1 KB
verify_xss2.pyPY1 KB
bi_write2.pyPY1 KB
fetch_idor_docs2.pyPY1 KB
ml3.logLOG1 KB
lfi_fuzz.pyPY1 KB
check_bitrix_rce.pyPY1 KB
cap_exfil3.pyPY1 KB
af4.pyPY1 KB
resume_up.pyPY1 KB
resume_up2.pyPY1 KB
sqli12.pyPY1 KB
af6.pyPY1 KB
cap_exfil2.pyPY1 KB
af.pyPY1 KB
af7.pyPY1 KB
capgofile2.pyPY1 KB
check_all_hooks.pyPY1 KB
bread_attack.pyPY1 KB
sqli10.pyPY1 KB
rce_recon4.pyPY1 KB
xss3.pyPY1 KB
ado_dbg.pyPY1 KB
a22probe.phpPHP1 KB
credtest.shSH1 KB
dirscheck.pyPY1 KB
cap_exfil5.pyPY1 KB
sqli3.pyPY1 KB
chsam_run.pyPY1 KB
caccess.shSH1 KB
alt_launch.pyPY1 KB
rce_recon2.pyPY1 KB
adminer.shSH1 KB
salogin_cit.pyPY1 KB
admin_test7.pyPY1 KB
admin_final.pyPY1 KB
admin_test4.pyPY1 KB
dump_parents.pyPY1 KB
sqli2.pyPY1 KB
credsweep.shSH1 KB
auth_check.pyPY1 KB
dbgp_listener.pyPY1 KB
auth_one.pyPY1 KB
al_go.pyPY1 KB
cap_keys12.pyPY1 KB
check_challenge.pyPY1 KB
rce_recon.pyPY1 KB
creds_deep_a.pyPY1 KB
clsqli3.pyPY1 KB
xss1.pyPY1 KB
ado_check.pyPY1 KB
check_contacts.shSH1 KB
rce_uids.pyPY1 KB
cap_final_launch.pyPY1 KB
cap_exfil4.pyPY1 KB
capntlm.pyPY1 KB
verify_xss.pyPY1 KB
curl_setup.pyPY1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.160.169.204confirmed
168.144.111.89confirmed
168.144.157.73confirmed
173.212.244.40confirmed
181.85.173.171confirmed
185.157.161.93confirmed
194.11.226.41confirmed
194.233.67.247confirmed
194.233.72.68confirmed
198.46.158.18confirmed
3.84.186.180confirmed
39.107.106.210confirmed
41.223.30.7confirmed
45.142.143.235confirmed
47.102.192.23confirmed