Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

92.246.129.98

RESIDENTIALloot-ipc2elf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS208951 · ITGLOBAL.COM NL B.V.
CountryBrazil
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 8099
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested347 file(s), 35876 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (347)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
pdf.fbdfe016.jsJS3.5 MB
argo_main.jsJS2.3 MB
allf.jsonJSON2.0 MB
b.jsJS1.5 MB
es.htmlHTML1.1 MB
app.jsJS1.1 MB
all.jsJS1.0 MB
b_msa-front-credit-service.jsJS1022 KB
e0e23a57.jsJS958 KB
e5317c02.jsJS813 KB
4190bc2c.jsJS794 KB
7329219d.jsJS765 KB
74af0622.jsJS761 KB
7dbf5813.jsJS720 KB
5f870e8f.jsJS685 KB
60297be7.jsJS581 KB
21cd2cfb.jsJS576 KB
026e9877.jsJS572 KB
cb31d629.jsJS570 KB
aad32903.jsJS570 KB
cbTXT568 KB
react-dom.7b80fdcd.jsJS566 KB
tanstack.5a4265b3.jsJS544 KB
actual_file.binBIN404 KB
all.jsonJSON380 KB
scripts.jsJS346 KB
331d.ba23c9cadc.jsJS341 KB
b18.jsJS340 KB
‹redacted›.min.jsJS338 KB
‹redacted›.cabCAB324 KB
.5eff5676ffd7dfcb-00000001.nodeELF320 KB
2173ad16.jsJS319 KB
f1.binBIN301 KB
assets2.jsonJSON275 KB
9cbc6aed.jsJS274 KB
assets3.jsonJSON274 KB
configview.jsonJSON270 KB
.5ef7d676bff7ff4f-00000001.nodeELF264 KB
b35.jsJS251 KB
b2.binBIN237 KB
clusters_full.jsonJSON235 KB
b8.jsJS214 KB
‹redacted›.jsonlJSONL203 KB
chunk_framework.3692c541.jsJS185 KB
‹redacted›.outOUT152 KB
b21.jsJS147 KB
‹redacted›.bodyBODY141 KB
‹redacted›.bodyBODY141 KB
‹redacted›.bodyBODY141 KB
b22.jsJS135 KB
react.05661944.jsJS133 KB
‹redacted›.jsonlJSONL130 KB
3428-8a69df4890ccf80b.jsJS125 KB
el.jsonJSON124 KB
f1_plainTXT123 KB
exp.jsonJSON117 KB
clusters.txtTXT115 KB
f.jsonJSON107 KB
app.815236df.jsJS105 KB
‹redacted›.jsonlJSONL102 KB
allfindings.jsonJSON102 KB
main.jsJS100 KB
b33.jsJS98 KB
0899.265d8fdd9e.jsJS98 KB
clusters_readable.txtTXT94 KB
f.txtTXT88 KB
big.jsonJSON88 KB
all_items.jsonJSON88 KB
chk_plainTXT87 KB
2879.a33a80e83b.jsJS85 KB
75b6bb98-b916-460d-b2cb-4a9e124a4c46.jsJS84 KB
b13.jsJS79 KB
b17.jsJS79 KB
308c.a399d1631a.jsJS78 KB
b7.jsJS77 KB
af_0.jsonJSON75 KB
f1.jsonJSON75 KB
b6.jsJS72 KB
b38.jsJS72 KB
all_findings.jsonJSON67 KB
child_findings.jsonJSON66 KB
8852-1d87f24c3b21cfca.jsJS63 KB
00b9439e.jsJS62 KB
2161-912f038aaf43b35c.jsJS59 KB
b3.jsJS57 KB
b2.jsJS57 KB
all_assets.jsonJSON55 KB
bundle1.jsJS53 KB
b20.jsJS53 KB
b5.jsJS53 KB
52a0.0063c75385.jsJS50 KB
dedup_clusters_formatted.jsonJSON47 KB
d2d159f7.jsJS46 KB
b9.jsJS46 KB
f2.jsonJSON46 KB
brp2.logLOG39 KB
32cdb407.jsJS39 KB
2df7.a91211d7c6.jsJS37 KB
af.jsonJSON37 KB
clusters_pretty.jsonJSON37 KB
6f95.f26c75c957.jsJS37 KB
9653-1f74bd70044d77dd.jsJS35 KB
b23.jsJS34 KB
b1.jsJS32 KB
apiresp.jsonJSON30 KB
aes_rest.jsJS30 KB
a.binBIN29 KB
‹redacted›.jsonlJSONL23 KB
cl.jsonJSON22 KB
a.bB21 KB
dl_rateplan-pricing-apis.jsonJSON21 KB
dl_standard-pricing-apis.jsonJSON21 KB
dl_los-pricing-apis.jsonJSON20 KB
dl_activities-api.jsonJSON20 KB
dl_airbnb-api-1.jsonJSON20 KB
dl_airbnb-api.jsonJSON20 KB
brief.txtTXT20 KB
‹redacted›.jsonlJSONL18 KB
dedup_clusters_pretty.jsonJSON17 KB
e2.jsonJSON16 KB
submit_findings.pyPY15 KB
‹redacted›.bodyBODY15 KB
f10.jsonJSON14 KB
confirmed.jsonJSON14 KB
cp.htmlHTML14 KB
dedup_pretty.jsonJSON13 KB
.._.._.._packages_core_generated_share-backend.generated.tsTS12 KB
aes.jsJS11 KB
build_exploration.pyPY11 KB
close_exploration.shSH11 KB
exp.shSH10 KB
close_map.pyPY10 KB
aes_full.jsJS9 KB
dTXT9 KB
adm.txtTXT9 KB
api.txtTXT9 KB
dp.txtTXT9 KB
dq.txtTXT9 KB
bak.txtTXT9 KB
‹redacted›.cabCAB9 KB
‹redacted›.jarJAR9 KB
scanpage.htmlHTML9 KB
slim_ver.txtTXT9 KB
aes_full2.jsJS9 KB
cluster_19.jsonJSON8 KB
aes_mod.jsJS8 KB
crypto.jsJS8 KB
all_verdicts.jsonJSON7 KB
e_airbnb.htmlHTML7 KB
e_administrator.htmlHTML7 KB
‹redacted›.jsonlJSONL7 KB
expl_recon_backup.jsonJSON7 KB
cors_proof.txtTXT5 KB
exploit_clickjack.pyPY5 KB
cs_hosts.txtTXT5 KB
browser_proxy2.pyPY5 KB
browser_proxy.pyPY5 KB
cert.pemPEM5 KB
exploit_clickjack3.pyPY5 KB
clusters_pretty.txtTXT4 KB
build_explore.pyPY4 KB
exploration.jsonJSON4 KB
‹redacted›.bodyBODY4 KB
cors.binBIN4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.bodyBODY4 KB
all_subdomains.txtTXT4 KB
close.pyPY4 KB
cfcd5b97.jsJS4 KB
c0.jsonJSON4 KB
brute2.jsJS4 KB
newfinding.jsonJSON4 KB
emit_exploration.shSH4 KB
clickjack_result3.jsonJSON4 KB
close_exploration.pyPY4 KB
exploit_clickjack2.pyPY4 KB
bigbrute.jsJS3 KB
addnodes.shSH3 KB
close_nodes.pyPY3 KB
emit_findings.shSH3 KB
brute.jsJS3 KB
dedup_plan.jsonJSON3 KB
fwdproxy.pyPY3 KB
‹redacted›.jqJQ3 KB
confirm.pyPY3 KB
api_probe.pyPY3 KB
chunk_test.pyPY3 KB
cluster_17.jsonJSON3 KB
advance_exploration.shSH2 KB
cs_body.htmlHTML2 KB
asset.jsonJSON2 KB
apq_probe.pyPY2 KB
exploit1.pyPY2 KB
cve2011_1473b.pyPY2 KB
api.htmlHTML2 KB
brute3.shSH2 KB
breach_probe.pyPY2 KB
expl_dedup.jsonJSON2 KB
breach_final.pyPY1 KB
apq2.pyPY1 KB
breach_probe2.pyPY1 KB
brute4.shSH1 KB
ck.txtTXT1 KB
capture400.pyPY1 KB
cve2011_1473.pyPY1 KB
es_full.pyPY1 KB
aes_login.jsJS1 KB
cors_users_body.jsonJSON1 KB
breach_confirm.pyPY1 KB
exp_audit.jsonJSON1 KB
clickjack_result.jsonJSON1 KB
enum.shSH1 KB
c09ddf86.jsJS1 KB
daw-cf-rsa-key.pemPEM1 KB
enum_files.shSH1 KB
blind.shSH1 KB
breach_final.shSH1 KB
ajax_enum.shSH1 KB
cluster_7.jsonJSON1 KB
cluster_6.jsonJSON1 KB
cluster_8.jsonJSON1 KB
cluster_10.jsonJSON1 KB
cluster_14.jsonJSON1 KB
cluster_16.jsonJSON1 KB
cluster_12.jsonJSON1 KB
d.jsonJSON1 KB
cluster_9.jsonJSON1 KB
.._.._.._packages_ride-hailing_App.tsxTSX1 KB
chgrab.pyPY1 KB
1595fa41.jsonJSON1 KB
csrf_driver.pyPY1 KB
cors_poc.htmlHTML1 KB
creds.shSH1 KB
breach_noise.shSH1 KB
cors_poc.pyPY1 KB
breach_test.shSH1 KB
1595fa41-6d9f-403e-9908-90ad2cfcad78.jsonJSON1 KB
login.jsJS1 KB
enum_batch.shSH1 KB
ews_probe.shSH1 KB
authprobe.shSH1 KB
4637e006.jsonJSON1 KB
csrf_driver2.pyPY1 KB
exploit2.pyPY1 KB
cluster_4.jsonJSON1 KB
cluster_11.jsonJSON1 KB
brute.shSH1 KB
cluster_5.jsonJSON1 KB
ab.shSH1 KB
creds3.shSH1 KB
c.pemPEM1 KB
emit2.shSH1 KB
clickjack_result2.jsonJSON1 KB
creds2.shSH1 KB
burst.shSH1 KB
csrf_driver3.pyPY1 KB
brute_secret.pyPY1 KB
append_grade.pyPY1 KB
brute2.pyPY1 KB
brute2.shSH1 KB
clean.shSH1 KB
dns_recon.shSH992 B
csrf_driver4.pyPY980 B
es_probe.pyPY977 B
appauth.shSH970 B
cors_poc.htmlHTML894 B
brute.pyPY885 B
‹redacted›.jsonlJSONL857 B
‹redacted›.jsonlJSONL851 B
cluster_15.jsonJSON847 B
7d3ca704-ef7d-4773-9183-92c7d4187302.jsonJSON845 B
cluster_13.jsonJSON804 B
test_aes.jsJS780 B
jwt_result.jsonJSON770 B
4637e006-12a4-4ab5-8e05-af60e5572bb2.jsonJSON731 B
creds.txtTXT697 B
probe2.htmlHTML663 B
echk.pyPY650 B
‹redacted›.jsonlJSONL639 B
amp.jsonJSON635 B
cred_test.shSH629 B
headers_poc.htmlHTML617 B
bh.shSH612 B
extract3.pyPY581 B
8afe97f7-ab49-453e-9bfd-ba7ae60712ae.jsonJSON566 B
60763c89-e8f8-4798-8b61-ea4327d324ab.jsonJSON548 B
extract4.pyPY541 B
extract5.pyPY535 B
03acc0cf-058d-4834-ac03-65dc50c1da68.jsonJSON526 B
extract2.pyPY512 B
browser_clickjack.jsonJSON509 B
extract.pyPY507 B
ad9dd23e-9512-4f3b-85bc-680e21f8ca94.jsonJSON503 B
browser_file.jsonJSON481 B
‹redacted›.jarJAR468 B
dnsall.shSH465 B
.._.._.._packages_core_i18n_config.tsTS463 B
cj_administratorTXT428 B
dedup_commands.shSH418 B
brp.logLOG415 B
brl.logLOG414 B
‹redacted›.outOUT392 B
add_findings.shSH390 B
cspw.txtTXT370 B
ch.binBIN357 B
access.jsJS256 B
h.txtTXT220 B
reg.hH218 B
enc.jsJS210 B
brproxy.logLOG200 B
cshell.jsBIN196 B
chunk.pyPY170 B
chunk.binBIN161 B
addfinding.pyPY155 B
append.shSH151 B
wrapper-prefix.shSH150 B
af.shSH146 B
append_findings.shSH146 B
cf7fb.jsonJSON118 B
envelope_item.jsonJSON118 B
addfinding.shSH111 B
brf.logLOG111 B
fwdproxy.logLOG98 B
base.binBIN53 B
b2.txtTXT36 B
emit.pyPY14 B
argo_api_v1_cluster-configTXT10 B
build_triage.pyPY8 B
build_plan.py2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

185.148.144.99confirmed
198.46.158.18confirmed
207.246.71.158confirmed
217.160.132.82confirmed
45.133.18.50confirmed
45.76.122.33confirmed
45.76.22.13confirmed
45.77.156.210confirmed
78.111.90.130confirmed
89.124.67.72confirmed