Live findsCVE IntelConsoleStart free
huntback / IP intelligence

194.233.72.68

DATACENTERioc-tweetfeedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS141995 · Contabo Asia Private Limited
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 9999
Servicenginx/1.24.0 (Ubuntu) · Welcome to nginx!
Productsnginx
JARM2ad2ad0002ad2ad00042d42d00000000f78d2dc0ce6e5bbc5b8149a4872356
Loot harvested285 file(s), 17800 KB · c2, elf-binary, exploit, exposed-secret, malware, mirai

Open directory contents (285)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
fofa_all.txtTXT2.8 MB
gsELF2.7 MB
cve68138_ubuntuELF925 KB
cve68138_genericELF921 KB
cloak_siomeksis.htmlHTML854 KB
dkpp_cloak_content.htmlHTML853 KB
dp_staticELF801 KB
dev_login_body_423645TXT626 KB
debug_log_mining_results.txtTXT607 KB
cloak_high.b64B64510 KB
clean_slims.txtTXT506 KB
194.233.72.68:999968:999441 KB
couk_tranco.csvCSV438 KB
cloak_high.htmlHTML378 KB
new_domains.txtTXT321 KB
alfa_patched.phpPHP309 KB
alfa.phpPHP309 KB
alfa_php81.phpPHP309 KB
c2.logLOG240 KB
cacti_login.htmlHTML229 KB
cloak_chunks.txtTXT180 KB
cloak_gz.b64B64180 KB
wp_wpcf7.txtTXT174 KB
conf_login.htmlHTML164 KB
chk_respTXT105 KB
lpe_ocos_docker.cC86 KB
cyberpanel_results.txtTXT67 KB
.wp_login2.htmlHTML53 KB
alfa_chunk_abTXT48 KB
alfap_abTXT48 KB
alfap_ahTXT48 KB
cloak_chunk_aaTXT48 KB
cloak_chunk_amTXT48 KB
DEF_CON_34_-_Gavin_Zhong%2C_Zhengyu_Liu%2C_Jianjia_Yu_-_Get_Set%2C.txtTXT42 KB
blueseed_test.binBIN41 KB
env_harvest_results.jsonJSON39 KB
cloak_bppdrd.b64B6432 KB
lpe_debian.6.12.95.cC31 KB
a81_aaTXT29 KB
alfagz_aaTXT29 KB
alfagz_abTXT29 KB
alfagz_acTXT29 KB
alive_grafana.txtTXT27 KB
exploit.cC27 KB
fofa_webmin.txtTXT26 KB
cacti_results.jsonJSON25 KB
DEF_CON_34_-_Barak_Sternberg%2C_Nevo_Poran%2C_Ron_Bobrov_-_Your_.txtTXT23 KB
current_tools.txtTXT21 KB
DEF_CON_34_-_Yaara_Shriki_-_OffGuard_Breaking_the_Most_Popul.txtTXT16 KB
ai_engine_fixed.pyPY16 KB
pwnkit_triggerELF15 KB
ai_engine_original.pyPY15 KB
spring_boot.txtTXT14 KB
bypass.soELF14 KB
bypass_df.soELF14 KB
bypass_helper.soELF14 KB
evil_gconv.soELF14 KB
ci_shodan_all.txtTXT13 KB
README.mdMD13 KB
fofa_roundcube.txtTXT12 KB
airflow_results.jsonJSON12 KB
cyberpanel_targets.txtTXT12 KB
cacti_dash.htmlHTML12 KB
cacti_resp2.htmlHTML12 KB
cve_2026_15282.pyPY12 KB
fofa_portainer.txtTXT11 KB
couchdb_noauth.txtTXT11 KB
DEF_CON_34_-_Ron_Ben_Yizhak_-_From_square_root_to_root_escal.txtTXT10 KB
CVE-2025-49113.phpPHP10 KB
fofa_nextcloud.txtTXT10 KB
index.phpPHP10 KB
da_scanner.pyPY9 KB
index.phpPHP9 KB
legacy_linux_rce.txtTXT8 KB
CVE-2026-0740.pyPY8 KB
DEF_CON_34_-_Gal_Bar_Nahum_-_The_Stream_Is_Dead%2C_Long_Live_t.txtTXT8 KB
batch_tech_check.pyPY8 KB
cacti_cve_exploit.pyPY8 KB
CVE-2025-49113.phpPHP8 KB
fofa_grafana.txtTXT8 KB
DEF_CON_34_-_Federico_Kirschbaum%2C_Gaston_Aznarez_-_Root_From.txtTXT7 KB
cloak_bppdrd_chunk_aaTXT7 KB
cloak_bppdrd_chunk_acTXT7 KB
cloak_thp_chunk_akTXT7 KB
cloak_thp_chunk_amTXT7 KB
trigger.cC7 KB
docker_api_exploit.pyPY7 KB
COPYINGTXT7 KB
exp.cC7 KB
elfinder_scan.pyPY7 KB
Tomcat_CVE-2025-24813_RCE.pyPY6 KB
cacti_cve_rce.pyPY6 KB
cloaking_unibabwi.phpPHP6 KB
.gitlab_recon_b64.txtTXT6 KB
cloaking_v2.phpPHP6 KB
‹redacted›.pycPYC6 KB
CVE-2024-12828.pyPY6 KB
DEF_CON_34_-_Ji%27an_Zhou%2C_Lei_Lu_-_One_Chain_to_Own_Them_All_.txtTXT6 KB
drupal_scan.pyPY5 KB
edi_lo_deploy.pyPY5 KB
couchdb_exploit.pyPY5 KB
cacti_rce_v2.pyPY5 KB
chamilo_upload.pyPY5 KB
oci_registry.txtTXT5 KB
airflow_rce.pyPY5 KB
censys_mass_v3.pyPY5 KB
.wp_exploit_b64.txtTXT5 KB
cacti_rce.pyPY5 KB
default_creds_results.txtTXT5 KB
adminer_spray.pyPY5 KB
cacti_auth_rce.pyPY4 KB
airflow_exploit.pyPY4 KB
edi_indonesia_exploit.pyPY4 KB
rc_install.shSH4 KB
docker_api_mass.pyPY4 KB
adminer_mysql.htmlHTML4 KB
adminer_out.htmlHTML4 KB
README.mdMD4 KB
.gitignoreGITIGN4 KB
‹redacted›.acAC4 KB
couchdb_mass.pyPY4 KB
README.mdMD4 KB
censys_mass_v2.pyPY4 KB
fofa_metabase.txtTXT4 KB
dbstorm.logLOG4 KB
bpdp_exploit.pyPY4 KB
cacti_exploit.pyPY3 KB
cleanup_aggressive.pyPY3 KB
cockpit_exploit.pyPY3 KB
alive_portainer.txtTXT3 KB
consul_exploit.pyPY3 KB
cyberpanel_rce.pyPY3 KB
cleanup_chats.pyPY3 KB
couchdb_results.txtTXT3 KB
litespeed_cache_poc.pyPY3 KB
btpanel_rce.pyPY3 KB
adminer_pg.htmlHTML3 KB
adminer_sqlite.htmlHTML3 KB
depok_ojs.pyPY3 KB
adminer_sql.htmlHTML3 KB
README.mdMD3 KB
eigen_pg_gs.pyPY3 KB
README.mdMD3 KB
env_harvest.pyPY3 KB
default_creds_check.pyPY3 KB
eapip_shell_check.pyPY3 KB
fofa_jenkins.txtTXT3 KB
adminer_v4.pyPY3 KB
adminer_rce2.pyPY2 KB
da_id_scan.pyPY2 KB
exploit.pyPY2 KB
files_user.confCONF2 KB
LICENSETXT2 KB
adminer_rce3.pyPY2 KB
dmesg_crash.txtTXT2 KB
SUBMISSION.mdMD2 KB
da_mass_scan.pyPY2 KB
cyberpanel_spray.pyPY2 KB
eapip_fix_shell.pyPY2 KB
adminer_rce.pyPY2 KB
dirtypipe.cC2 KB
README.mdMD2 KB
env_scan_fast.pyPY2 KB
adminer_debug.pyPY2 KB
decrypt_cookie.pyPY2 KB
README.mdMD2 KB
env_check.pyPY2 KB
.wm_spray_ext.pyPY1 KB
adminer_exploit.shSH1 KB
cpan_modules.plPL1 KB
confluence_results.txtTXT1 KB
cleanup.shSH1 KB
README.mdMD1 KB
check_counts.pyPY1 KB
fofa_adminer.txtTXT1 KB
check_agent.pyPY1 KB
batch_scan.phpPHP1 KB
apply_patch.pyPY1 KB
awx_mass.pyPY1 KB
elfinder_check.pyPY1 KB
.wp_headers_full.txtTXT1 KB
crack_yscrypt.pyPY1 KB
deploy.shSH1 KB
ai_engine.pyPY1 KB
depok_id_rsaTXT1 KB
adminer.logLOG1 KB
cloudpanel_rce.pyPY1 KB
craft_remember_cookie.phpPHP1 KB
cloaking_v3.phpPHP1 KB
poc.pyPY1 KB
README.mdMD1 KB
.wb_spray.pyPY1 KB
response.mdMD1 KB
antiddos_setup.shSH1 KB
decrypt_cookie.phpPHP1 KB
convert_kb.pyPY1 KB
crack_remote.pyPY1 KB
.wb2.pyPY1 KB
LICENSETXT1 KB
.gitignoreGITIGN1 KB
deploy_gs.pyPY1 KB
cloak_relay.pyPY1 KB
‹redacted›.warWAR1 KB
cookie_check.phpPHP1 KB
bypass_shell.phpPHP1008 B
README.mdMD996 B
check_targets.phpPHP919 B
‹redacted›.pharPHAR870 B
files_reseller.confCONF866 B
README.mdMD863 B
enum_npm.pyPY848 B
‹redacted›.warWAR822 B
decrypt_cookie2.phpPHP798 B
‹redacted›.jarJAR793 B
CMakeLists.txtTXT698 B
env_creds_harvest.txtTXT683 B
couchdb_results.jsonJSON681 B
.vs_check.pyPY676 B
bb_config.pyPY672 B
encrypt_session_v3.phpPHP619 B
.su_try.pyPY580 B
.su_spray.pyPY569 B
encrypt_session_v2.phpPHP552 B
alm_recon3.sqlSQL535 B
.gitignoreGITIGN518 B
‹redacted›.jspJSP490 B
encrypt_session.phpPHP470 B
alm_recon2.sqlSQL463 B
.gitignoreGITIGN463 B
‹redacted›.cookieCOOKIE462 B
‹redacted›.cookieCOOKIE450 B
‹redacted›.cookieCOOKIE441 B
CVE-2024-12828.txtTXT428 B
‹redacted›.tapeTAPE420 B
common_pw.txtTXT388 B
confluence_results.jsonJSON373 B
‹redacted›.jspJSP353 B
common.txtTXT353 B
alm_outbound.sqlSQL337 B
cloaking_final.phpPHP330 B
‹redacted›.jarJAR323 B
confluence_hits.txtTXT323 B
bypass_helper.cC304 B
cloak_inject.txtTXT298 B
‹redacted›.fragmentFRAGME270 B
build.shSH266 B
‹redacted›.cookieCOOKIE257 B
bypass.cC254 B
crontab_backup.txtTXT238 B
‹redacted›.cookiesCOOKIE236 B
‹redacted›.cookiesCOOKIE228 B
alm_gs1.sqlSQL227 B
‹redacted›.jarJAR224 B
‹redacted›.cookieCOOKIE224 B
‹redacted›.cookieCOOKIE224 B
bypass_df.cC209 B
almuslim_recon.sqlSQL204 B
alm_r.sqlSQL201 B
alm_gs2.sqlSQL191 B
s.shSH185 B
drupalstorm.logLOG132 B
‹redacted›.cookieTXT131 B
drupal_storm.logLOG131 B
alm_c.sqlSQL127 B
README.mdMD122 B
base.txtTXT120 B
almuslim_rce.sqlSQL112 B
.gitignoreGITIGN112 B
alm_recon.sqlSQL105 B
base_words.txtTXT102 B
cms_scan_20260808_133409.jsonJSON95 B
elfinder_shell.phpPHP86 B
README.mdMD86 B
adminer.txtTXT85 B
.gitignoreGITIGN78 B
.gitignoreGITIGN70 B
cacti_exploit_12195.jsonJSON58 B
ck_shell.jpg.phpPHP50 B
requirements.txtTXT33 B
.n1.phpPHP29 B
requirements.txtTXT28 B
.gitignoreGITIGN20 B
.gitignoreGITIGN17 B
.gitignoreGITIGN17 B
requirements.txtTXT8 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.160.169.204confirmed
194.11.226.41confirmed
198.46.158.18confirmed
203.194.115.12confirmed
3.84.186.180confirmed
45.12.18.80confirmed
45.142.143.235confirmed
47.102.192.23confirmed
1.55.92.39lead
102.134.50.57lead
102.210.149.141lead
103.114.160.232lead
103.117.100.93lead
103.120.218.130lead
103.124.105.205lead