huntback / IP intelligence

96.126.130.81

RESIDENTIALoperator-submittedloot-ipc2exploitexposed-secretforced-loot

Intelligence

ASN / OrgAS149440 · Evoxt Sdn. Bhd.
CountryUnited States
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports9999, 888, 8080, 53, 443, 5555, 111
ServiceBaseHTTP/0.6 Python/3.14.4
Loot harvested1568 file(s), 1169132 KB · c2, exploit, forced-loot, gafgyt, malware, mirai

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.mdfMDF233.0 MB
‹redacted›.mdfMDF233.0 MB
ip71s3.bakBAK176.0 MB
laundry.bakBAK60.7 MB
mails.tar.gzGZ57.7 MB
KyBackups.exeEXE55.2 MB
me.bakBAK38.2 MB
kycsfa.bakBAK36.8 MB
hb2.7z7Z36.5 MB
_push_tmpTXT36.2 MB
dbfs.7z7Z20.1 MB
c-wge.bakBAK17.0 MB
wrr.bakBAK14.1 MB
fmcs.bakBAK11.3 MB
member_mails.txtTXT9.8 MB
‹redacted›.emlEML6.1 MB
‹redacted›.emlEML4.8 MB
‹redacted›.emlEML3.3 MB
‹redacted›.emlEML2.9 MB
‹redacted›.emlEML2.5 MB
‹redacted›.emlEML2.1 MB
‹redacted›.emlEML1.8 MB
‹redacted›.emlEML1.7 MB
‹redacted›.emlEML1.6 MB
‹redacted›.emlEML1.6 MB
‹redacted›.emlEML1.6 MB
‹redacted›.emlEML1.4 MB
‹redacted›.emlEML1.4 MB
‹redacted›.emlEML1.4 MB
‹redacted›.emlEML1.3 MB
‹redacted›.emlEML1.3 MB
‹redacted›.emlEML1.3 MB
‹redacted›.emlEML1.2 MB
‹redacted›.emlEML1.2 MB
‹redacted›.emlEML1.1 MB
‹redacted›.emlEML1.0 MB
‹redacted›.emlEML1.0 MB
‹redacted›.emlEML1012 KB
‹redacted›.emlEML987 KB
‹redacted›.emlEML978 KB
‹redacted›.emlEML945 KB
‹redacted›.emlEML835 KB
‹redacted›.emlEML822 KB
‹redacted›.emlEML821 KB
‹redacted›.emlEML808 KB
‹redacted›.emlEML774 KB
‹redacted›.emlEML766 KB
‹redacted›.emlEML763 KB
‹redacted›.emlEML740 KB
‹redacted›.emlEML689 KB
‹redacted›.emlEML681 KB
‹redacted›.emlEML680 KB
‹redacted›.emlEML540 KB
‹redacted›.emlEML494 KB
‹redacted›.emlEML476 KB
‹redacted›.emlEML475 KB
‹redacted›.emlEML474 KB
‹redacted›.emlEML459 KB
‹redacted›.emlEML453 KB
‹redacted›.emlEML437 KB
‹redacted›.emlEML433 KB
‹redacted›.emlEML420 KB
‹redacted›.emlEML409 KB
‹redacted›.emlEML398 KB
‹redacted›.emlEML387 KB
‹redacted›.emlEML359 KB
‹redacted›.emlEML337 KB
‹redacted›.emlEML331 KB
‹redacted›.emlEML307 KB
‹redacted›.efiPE304 KB
‹redacted›.emlEML276 KB
‹redacted›.emlEML261 KB
kawasaki-a-best.sql.gzGZ258 KB
cloud_scan2.txtTXT255 KB
cloud_scan3.txtTXT255 KB
‹redacted›.emlEML247 KB
‹redacted›.emlEML225 KB
‹redacted›.emlEML220 KB
‹redacted›.emlEML218 KB
‹redacted›.emlEML216 KB
‹redacted›.emlEML214 KB
‹redacted›.emlEML210 KB
‹redacted›.emlEML203 KB
‹redacted›.emlEML196 KB
‹redacted›.emlEML195 KB
‹redacted›.emlEML193 KB
beacon.logLOG189 KB
‹redacted›.emlEML186 KB
‹redacted›.emlEML183 KB
‹redacted›.emlEML175 KB
‹redacted›.emlEML172 KB
‹redacted›.emlEML171 KB
‹redacted›.emlEML170 KB
‹redacted›.emlEML165 KB
‹redacted›.emlEML164 KB
‹redacted›.emlEML164 KB
‹redacted›.emlEML164 KB
‹redacted›.emlEML164 KB
‹redacted›.emlEML164 KB
‹redacted›.emlEML162 KB
‹redacted›.emlEML162 KB
‹redacted›.emlEML161 KB
‹redacted›.emlEML160 KB
‹redacted›.emlEML160 KB
‹redacted›.emlEML158 KB
‹redacted›.emlEML157 KB
‹redacted›.emlEML157 KB
‹redacted›.emlEML157 KB
‹redacted›.emlEML157 KB
cloud_scan.txtTXT156 KB
‹redacted›.emlEML155 KB
‹redacted›.emlEML153 KB
‹redacted›.emlEML153 KB
‹redacted›.emlEML150 KB
‹redacted›.emlEML150 KB
‹redacted›.emlEML150 KB
pipeline_hits_falsepos_1022_0807.bakBAK149 KB
‹redacted›.emlEML149 KB
‹redacted›.emlEML145 KB
‹redacted›.emlEML140 KB
‹redacted›.emlEML140 KB
‹redacted›.emlEML140 KB
‹redacted›.emlEML138 KB
‹redacted›.emlEML137 KB
‹redacted›.emlEML136 KB
‹redacted›.emlEML136 KB
‹redacted›.emlEML134 KB
‹redacted›.emlEML132 KB
‹redacted›.emlEML131 KB
fp_loop.logLOG129 KB
‹redacted›.emlEML129 KB
‹redacted›.emlEML129 KB
‹redacted›.emlEML129 KB
jp.logLOG128 KB
‹redacted›.emlEML128 KB
‹redacted›.emlEML128 KB
‹redacted›.emlEML128 KB
‹redacted›.emlEML128 KB
‹redacted›.emlEML128 KB
‹redacted›.emlEML128 KB
‹redacted›.emlEML127 KB
‹redacted›.emlEML127 KB
‹redacted›.emlEML126 KB
‹redacted›.emlEML125 KB
‹redacted›.emlEML124 KB
‹redacted›.emlEML123 KB
‹redacted›.emlEML123 KB
‹redacted›.emlEML123 KB
‹redacted›.emlEML123 KB
‹redacted›.emlEML123 KB
‹redacted›.emlEML122 KB
r2.htmlHTML122 KB
‹redacted›.emlEML122 KB
‹redacted›.emlEML121 KB
‹redacted›.emlEML120 KB
‹redacted›.emlEML119 KB
‹redacted›.emlEML119 KB
‹redacted›.emlEML119 KB
‹redacted›.emlEML118 KB
‹redacted›.emlEML118 KB
‹redacted›.emlEML117 KB
‹redacted›.emlEML116 KB
‹redacted›.emlEML116 KB
‹redacted›.emlEML116 KB
‹redacted›.emlEML115 KB
‹redacted›.emlEML113 KB
‹redacted›.emlEML112 KB
‹redacted›.emlEML111 KB
‹redacted›.emlEML111 KB
‹redacted›.emlEML111 KB
‹redacted›.emlEML110 KB
‹redacted›.emlEML110 KB
‹redacted›.emlEML110 KB
‹redacted›.emlEML110 KB
‹redacted›.emlEML110 KB
‹redacted›.emlEML109 KB
‹redacted›.emlEML109 KB
‹redacted›.emlEML109 KB
‹redacted›.emlEML109 KB
‹redacted›.emlEML109 KB
‹redacted›.emlEML109 KB
‹redacted›.emlEML109 KB
‹redacted›.emlEML108 KB
‹redacted›.emlEML106 KB
fp_stdout.logLOG103 KB
‹redacted›.emlEML103 KB
‹redacted›.emlEML102 KB
‹redacted›.emlEML102 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML101 KB
‹redacted›.emlEML100 KB
‹redacted›.emlEML100 KB
‹redacted›.emlEML100 KB
‹redacted›.emlEML100 KB
‹redacted›.emlEML100 KB
‹redacted›.emlEML100 KB
‹redacted›.emlEML97 KB
‹redacted›.emlEML97 KB
r3.htmlHTML96 KB
‹redacted›.emlEML96 KB
‹redacted›.emlEML96 KB
‹redacted›.emlEML96 KB
‹redacted›.emlEML96 KB
‹redacted›.emlEML96 KB
‹redacted›.emlEML95 KB
‹redacted›.emlEML95 KB
b_test.htmlHTML95 KB
‹redacted›.emlEML95 KB
‹redacted›.emlEML95 KB
‹redacted›.emlEML94 KB
‹redacted›.emlEML94 KB
‹redacted›.emlEML94 KB
‹redacted›.emlEML94 KB
r1.htmlHTML93 KB
‹redacted›.emlEML92 KB
‹redacted›.emlEML92 KB
‹redacted›.emlEML91 KB
‹redacted›.emlEML91 KB
‹redacted›.emlEML90 KB
‹redacted›.emlEML90 KB
‹redacted›.emlEML90 KB
‹redacted›.emlEML90 KB
harvest.logLOG90 KB
‹redacted›.emlEML88 KB
‹redacted›.emlEML88 KB
‹redacted›.emlEML88 KB
‹redacted›.emlEML88 KB
‹redacted›.emlEML88 KB
‹redacted›.emlEML88 KB
‹redacted›.emlEML88 KB
‹redacted›.emlEML87 KB
‹redacted›.emlEML86 KB
‹redacted›.emlEML86 KB
‹redacted›.emlEML86 KB
‹redacted›.emlEML84 KB
‹redacted›.emlEML84 KB
‹redacted›.emlEML83 KB
‹redacted›.emlEML83 KB
‹redacted›.emlEML81 KB
‹redacted›.emlEML81 KB
‹redacted›.emlEML80 KB
‹redacted›.emlEML79 KB
‹redacted›.emlEML79 KB
‹redacted›.emlEML79 KB
‹redacted›.emlEML78 KB
‹redacted›.emlEML78 KB
‹redacted›.emlEML77 KB
‹redacted›.emlEML76 KB
‹redacted›.emlEML76 KB
‹redacted›.emlEML75 KB
‹redacted›.emlEML73 KB
‹redacted›.emlEML73 KB
‹redacted›.emlEML73 KB
‹redacted›.emlEML73 KB
‹redacted›.emlEML72 KB
‹redacted›.emlEML72 KB
‹redacted›.emlEML72 KB
‹redacted›.emlEML72 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML71 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML70 KB
‹redacted›.emlEML69 KB
‹redacted›.emlEML69 KB
‹redacted›.emlEML69 KB
‹redacted›.emlEML68 KB
‹redacted›.emlEML68 KB
‹redacted›.emlEML68 KB
‹redacted›.emlEML68 KB
‹redacted›.emlEML67 KB
‹redacted›.emlEML67 KB
‹redacted›.emlEML67 KB
‹redacted›.emlEML67 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
‹redacted›.emlEML66 KB
cloud_scan2.logLOG66 KB
cloud_scan3.logLOG66 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML65 KB
‹redacted›.emlEML64 KB
batch_run.logLOG64 KB
‹redacted›.emlEML64 KB
‹redacted›.emlEML64 KB
‹redacted›.emlEML64 KB
‹redacted›.emlEML64 KB
cloud_scan.logLOG64 KB
cloud_dump.logLOG63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML63 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML62 KB
‹redacted›.emlEML61 KB
‹redacted›.emlEML61 KB
‹redacted›.emlEML61 KB
‹redacted›.emlEML60 KB
‹redacted›.emlEML60 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML59 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML58 KB
‹redacted›.emlEML57 KB
‹redacted›.emlEML57 KB
‹redacted›.emlEML57 KB
‹redacted›.emlEML57 KB
‹redacted›.emlEML57 KB
‹redacted›.emlEML57 KB
‹redacted›.emlEML56 KB
‹redacted›.emlEML56 KB
‹redacted›.emlEML56 KB
‹redacted›.emlEML56 KB
‹redacted›.emlEML56 KB
‹redacted›.emlEML56 KB
‹redacted›.emlEML56 KB
‹redacted›.emlEML55 KB
‹redacted›.emlEML55 KB
‹redacted›.emlEML55 KB
‹redacted›.emlEML55 KB
‹redacted›.emlEML54 KB
‹redacted›.emlEML54 KB
‹redacted›.emlEML54 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

100.21.82.169confirmed
101.42.136.73confirmed
101.47.156.26confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.46.185.169confirmed
104.223.41.172confirmed
104.233.150.138confirmed
108.61.219.168confirmed
111.223.247.165confirmed
118.107.13.102confirmed
118.107.41.239confirmed
122.10.110.72confirmed
122.10.17.49confirmed
134.122.169.32confirmed