Live findsCVE IntelConsoleStart free
huntback / IP intelligence

3.84.186.180

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS14618 · Amazon.com, Inc.
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 3306, 8088, 9090, 9443, 631, 2223, 9187, 9514, 9998
ServiceSimpleHTTP/0.6 Python/3.14.4 · Directory listing for /
Loot harvested467 file(s), 80828 KB · c2, elf-binary, exploit, exposed-secret, macho-binary, malware

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
scm-latest-compressing.zipZIP9.5 MB
agent_new_4443.binELF7.5 MB
t1.binELF7.5 MB
grpcurl.tgzTGZ7.5 MB
‹redacted›.in.jsJS3.5 MB
kyc_v3.jsJS3.5 MB
‹redacted›.in.jsJS2.2 MB
az_cs_bundle.jsJS2.2 MB
sba_main.jsJS2.1 MB
app.jsJS1.9 MB
‹redacted›.jsonlJSONL1.8 MB
‹redacted›.in.jsJS1.7 MB
db.txtTXT1.5 MB
testmakerutility.zipZIP1.5 MB
neoadmin_bundle.jsJS1.4 MB
src2.zipZIP1.2 MB
az_dh_bundle.jsJS1.2 MB
dh_b_plain.jsJS1.1 MB
dh_src.txtTXT1.1 MB
slotcloud_recon_20261012.tar.gzGZ1.0 MB
common_desktop.jsJS1008 KB
lobby_main.jsJS1007 KB
‹redacted›.jsonlJSONL918 KB
‹redacted›.live.htmlHTML750 KB
hashcatELF742 KB
configureTXT674 KB
bundle_merchant.jsJS564 KB
atadev_extra.jsonJSON474 KB
‹redacted›.jsonlJSONL420 KB
dev_rest_root.jsonJSON417 KB
ebz_authb.jsJS380 KB
‹redacted›.io.htmlHTML372 KB
mongo2_deep.jsonJSON341 KB
‹redacted›.jsonlJSONL327 KB
dcc2.logLOG310 KB
maven_server.logLOG282 KB
j.txtTXT276 KB
search1.htmlHTML268 KB
‹redacted›.net.htmlHTML257 KB
‹redacted›.com.htmlHTML240 KB
lobby_root.htmlHTML236 KB
lobby.htmlHTML236 KB
lobby_home.htmlHTML236 KB
‹redacted›.live.htmlHTML226 KB
dh_w175.jsJS218 KB
pp_main.jsJS205 KB
ops_ch.tar.gzGZ205 KB
‹redacted›.vip.htmlHTML203 KB
‹redacted›.com.htmlHTML198 KB
plat_dump.jsonJSON190 KB
db1_dump.jsonJSON167 KB
home-new.jsJS161 KB
r.jsJS149 KB
‹redacted›.co.htmlHTML145 KB
‹redacted›.com.htmlHTML144 KB
‹redacted›.com.htmlHTML144 KB
‹redacted›.com.htmlHTML144 KB
‹redacted›.com.htmlHTML144 KB
0h_93jl5hngtq.jsJS134 KB
‹redacted›.com.htmlHTML134 KB
‹redacted›.co.htmlHTML133 KB
dev_reports.htmlHTML133 KB
‹redacted›.net.htmlHTML132 KB
mdump.jsonJSON126 KB
api503.htmlHTML124 KB
credits.htmlHTML118 KB
reg.htmlHTML81 KB
‹redacted›.co.htmlHTML79 KB
mcwlink_home.htmlHTML75 KB
‹redacted›.co.htmlHTML75 KB
civ.htmlHTML73 KB
pl.txtTXT73 KB
‹redacted›.statusSTATUS72 KB
‹redacted›.co.htmlHTML72 KB
config.jsonJSON70 KB
‹redacted›.xyz.htmlHTML66 KB
‹redacted›.jsonlJSONL64 KB
cl_slotowl_message_signature.htmlHTML61 KB
cl_slotowl_message_signature_addr.htmlHTML61 KB
cl_slotowl_message_signature_wallet.htmlHTML61 KB
sb2.htmlHTML61 KB
sbt.htmlHTML61 KB
sb.htmlHTML61 KB
gsap.jsJS59 KB
cr1.htmlHTML59 KB
cr_addr-only.txtTXT59 KB
cr_json-msg.txtTXT59 KB
cr_v.txtTXT59 KB
reg2.htmlHTML58 KB
config.logLOG56 KB
a.htmlHTML53 KB
‹redacted›.jsonlJSONL49 KB
admarket.jsJS46 KB
2008ffcf9e5b170c.jsJS44 KB
aviatrix_loot3.txtTXT44 KB
ds.htmlHTML42 KB
casino_widget.jsJS41 KB
‹redacted›.jsonlJSONL41 KB
afc_root.htmlHTML40 KB
r2.htmlHTML39 KB
pg_admin_logs-affiliate-code.htmlHTML38 KB
pg_admin_affiliate-code.htmlHTML38 KB
pg_admin_scan-affiliate-code.htmlHTML38 KB
loginpage.htmlHTML37 KB
clA.htmlHTML37 KB
reg_page.htmlHTML37 KB
regcl.htmlHTML37 KB
jira_tokens_7.jsonJSON37 KB
o2TXT36 KB
reg.htmlHTML36 KB
regA.htmlHTML36 KB
bstg__forgot-password.htmlHTML35 KB
bstg__login.htmlHTML35 KB
bstg__.htmlHTML35 KB
‹redacted›.com.htmlHTML35 KB
bospin_resolve.htmlHTML35 KB
‹redacted›.com.htmlHTML35 KB
70cd2b185f52909e.jsJS34 KB
bospin_reg.htmlHTML31 KB
‹redacted›.jsonlJSONL31 KB
0foxkah8f3x4g.jsJS31 KB
0-7g9uw15_br2.jsJS29 KB
apidocs.jsonJSON27 KB
‹redacted›.classMACHO25 KB
atadev_project_management_user_models.jsonJSON24 KB
9e26d80e19e7051b.jsJS24 KB
0k0ph36k3krwg.jsJS24 KB
ass_extra.zipZIP23 KB
mongod_iamcfg.logLOG22 KB
h_profile2.jsonJSON21 KB
0ctohg46heuq0.jsJS21 KB
‹redacted›.outOUT20 KB
mut_scan_v3.logLOG20 KB
h_profile.jsonJSON20 KB
‹redacted›.jsonlJSONL19 KB
‹redacted›.jsonlJSONL19 KB
dh_re.jsJS18 KB
‹redacted›.amAM17 KB
42556424cad48f86.jsJS17 KB
mga.htmlHTML17 KB
‹redacted›.outOUT15 KB
mongod_iam32c.logLOG14 KB
dd.htmlHTML14 KB
‹redacted›.outOUT13 KB
live_routes.txtTXT12 KB
iam_idx.tar.gzGZ11 KB
lg_vpn3.htmlHTML11 KB
lg_vpn4.htmlHTML11 KB
mvnwTXT11 KB
full-story-843d65ba19be3cea60ba.jsJS11 KB
‹redacted›.acAC10 KB
live_probe_paths.txtTXT10 KB
mvnwTXT10 KB
mvnwTXT10 KB
turbopack-0fcl-wne_xu3m.jsJS10 KB
mains.txtTXT10 KB
mvnwTXT10 KB
‹redacted›.classMACHO10 KB
asset_shard.zipZIP9 KB
iam_shard.zipZIP9 KB
orbit_metrics.txtTXT8 KB
‹redacted›.classMACHO8 KB
‹redacted›.cmdCMD7 KB
iam_shard.tar.gzGZ7 KB
‹redacted›.classMACHO7 KB
‹redacted›.jsonlJSONL6 KB
mongod_asset36.logLOG6 KB
sg_out.jsonJSON6 KB
‹redacted›.cmdCMD6 KB
‹redacted›.cmdCMD6 KB
h_biz.jsonJSON6 KB
‹redacted›.cmdCMD6 KB
mut_scan_v3.pyPY6 KB
‹redacted›.com.htmlHTML6 KB
hashcat.logLOG5 KB
wiredtiger_config.hH5 KB
mongod_asset.logLOG4 KB
sunoy3.pyPY4 KB
mongod_shard.logLOG4 KB
‹redacted›.classMACHO4 KB
mongod_asset32c.logLOG4 KB
mongod_asset32b.logLOG4 KB
mongod_asset32d.logLOG4 KB
sunoy2.pyPY4 KB
mongo3_probe.jsonJSON4 KB
op2.jsonJSON4 KB
op7.jsonJSON4 KB
op4.jsonJSON4 KB
op6.jsonJSON4 KB
mongod_iam.logLOG4 KB
sg.pyPY4 KB
hc.logLOG4 KB
dh_wallet_re.jsJS4 KB
app_props.txtTXT4 KB
props_part1.txtTXT3 KB
‹redacted›.classMACHO3 KB
schema_bfs.pyPY3 KB
cat_parse3.pyPY3 KB
sub_enum2.pyPY3 KB
lc3.jsJS3 KB
fetch30.pyPY3 KB
‹redacted›.outOUT3 KB
jwt5_console.logLOG3 KB
‹redacted›.classMACHO3 KB
cat_parse2.pyPY3 KB
cf_io5.pyPY3 KB
cf_io8.pyPY3 KB
brute_gc.pyPY3 KB
cf_io6.pyPY3 KB
cf_io7.pyPY3 KB
fetch31.pyPY3 KB
mongod_fresh.logLOG3 KB
wl_scan2.pyPY3 KB
cf_io3.pyPY3 KB
.gitignoreGITIGN2 KB
op5.jsonJSON2 KB
fetch33.pyPY2 KB
rc_poll.pyPY2 KB
scan_multi.pyPY2 KB
mongod_iam36.logLOG2 KB
rc_full.pyPY2 KB
plat_dump.pyPY2 KB
batch_vms.pyPY2 KB
mongod_iam34.logLOG2 KB
biz_payload.jsonJSON2 KB
cf_io2.pyPY2 KB
fetch32.pyPY2 KB
cf_io4.pyPY2 KB
fetch35.pyPY2 KB
fetch25.pyPY2 KB
fetch34.pyPY2 KB
frenwall_net.pyPY2 KB
fetch28.pyPY2 KB
fetch26.pyPY2 KB
‹redacted›.classMACHO2 KB
cf_ws6.pyPY2 KB
sign_msg.pyPY2 KB
cf_io.pyPY2 KB
hc3.logLOG2 KB
‹redacted›.xmlXML2 KB
cf_ws.pyPY2 KB
fetch29.pyPY2 KB
wl_scan6.pyPY2 KB
ws_test.pyPY2 KB
az_store.pyPY2 KB
type_mine.pyPY2 KB
key5.pyPY2 KB
asset_users_dump.txtTXT2 KB
‹redacted›.classMACHO2 KB
sqli_test.pyPY2 KB
mongod_iam32b.logLOG2 KB
mlive.pyPY2 KB
wl_scan4.pyPY2 KB
nosql.pyPY2 KB
fetch27.pyPY1 KB
cve5204.yamlYAML1 KB
rc_run.pyPY1 KB
cf_pass.pyPY1 KB
cf_rest.pyPY1 KB
otp2.pyPY1 KB
cf_ws3.pyPY1 KB
ssrf_test.pyPY1 KB
introspect.pyPY1 KB
az_token.txtTXT1 KB
mut_test2.pyPY1 KB
cf_ws4.pyPY1 KB
poly_resp.jsonJSON1 KB
az_secrets.shSH1 KB
mongo_enum.pyPY1 KB
fetch24.pyPY1 KB
cf_ws5.pyPY1 KB
az_containers.shSH1 KB
mongo_creds.pyPY1 KB
cat_parse.pyPY1 KB
lobby_introspect.pyPY1 KB
wl_scan3.pyPY1 KB
poly_url.txtTXT1 KB
mongo_cands.pyPY1 KB
fetch36.pyPY1 KB
rc_take.pyPY1 KB
gh_check.pyPY1 KB
jira_deep_dump.pyPY1 KB
nt.logLOG1 KB
mut_probe.pyPY1 KB
ssrf_test2.pyPY1 KB
wl_scan5.pyPY1 KB
angular_table.jsJS1 KB
enum2.pyPY1 KB
fetch23.pyPY1 KB
viewer_battery.pyPY1 KB
ghapp2.pemPEM1 KB
gh_app.pemPEM1 KB
ghapp1.pemPEM1 KB
probe_din2.pyPY1 KB
cf_ws2.pyPY1 KB
ws_test2.pyPY1 KB
scan_db2.pyPY1 KB
prod_chain.pyPY1 KB
mut_probe2.pyPY1 KB
dev_players2.pyPY1 KB
‹redacted›.jsonlJSONL1 KB
wl_scan.pyPY1 KB
prod_pivot.pyPY1 KB
probe3.pyPY1 KB
enum_gamanza_emails.pyPY1 KB
probe_new.pyPY1 KB
dev_users.pyPY1 KB
gql_probe2.pyPY1 KB
launch_battery.pyPY1 KB
dev_players.pyPY1 KB
scan_envkeys.pyPY1 KB
scan_envkeys3.pyPY1 KB
pr_loot.pyPY1 KB
scan_envkeys2.pyPY1 KB
take_cristina.pyPY1 KB
scan_ciph2.pyPY1 KB
mdump.pyPY1 KB
prod_enum.pyPY1 KB
scan_td.pyPY1 KB
backend_check.pyPY1 KB
mongo_db1_dump.pyPY1 KB
gid_brute.pyPY1 KB
brute.shSH1 KB
lobby_diff.pyPY1 KB
type_mine.logLOG1 KB
xff_test.pyPY1 KB
az_listblob.shSH1 KB
ws_read.pyPY1 KB
rc2.pyPY1 KB
scan_ciph.pyPY1 KB
mongo_dump.pyPY1 KB
mongo_license2.pyPY1 KB
dl_chunks2.pyPY1 KB
gql_probe.pyPY1 KB
scan_live.pyPY1 KB
‹redacted›.jarJAR1 KB
enum_users.pyPY1 KB
agile_exfil.shSH1 KB
listener.logLOG1 KB
‹redacted›.jsonlJSONL1 KB
pr_loot.jsonJSON1 KB
mut_test.pyPY1 KB
kyc_matrix.shSH1 KB
pm_tokens.pyPY1 KB
az_enum.shSH1 KB
sunoy_check.pyPY1 KB
sub_enum.pyPY1 KB
fb_buckets.pyPY1 KB
fb_brands.pyPY1 KB
az_dl_blob.shSH1 KB
cr2_tenants.pyPY1 KB
check_ciph.pyPY1 KB
parse_iam.shSH1 KB
dl_named.pyPY1 KB
cmd2.txtTXT1 KB
dl_chunks.pyPY1 KB
probe_din.pyPY1 KB
sub_sigs.pyPY1 KB
prod_frontend.pyPY1007 B
az_vmexec.shSH1002 B
enum_all.pyPY974 B
f.htmlHTML961 B
gz_174ff6.txtTXT957 B
find_jira_oauth_config.pyPY950 B
‹redacted›.jarJAR947 B
‹redacted›.jarJAR947 B
‹redacted›.jarJAR947 B
‹redacted›.jarJAR946 B
‹redacted›.jarJAR946 B
‹redacted›.jarJAR946 B
gz_9849b1.txtTXT946 B
dump_jira_tokens.pyPY944 B
orbit.pyPY940 B
gz_02304a.txtTXT940 B
gz_3f1165.txtTXT936 B
wl.txtTXT934 B
gz_49f8c7.txtTXT932 B
subenum.pyPY932 B
viewer_probe.pyPY913 B
az_rg.shSH910 B
mfull.pyPY884 B
mongo_license.pyPY879 B
scrape_emails.pyPY874 B
lobby_test.pyPY872 B
sisters.pyPY867 B
parse_asset.shSH854 B
az_storage2.shSH849 B
fs_list.pyPY841 B
prcheck.pyPY835 B
mongo_lastlogin.pyPY834 B
find_jira_oauth_all.pyPY822 B
gcs_list.pyPY821 B
ssh_try.shSH768 B
probe4.pyPY756 B
mongo_cloud_dump.pyPY730 B
az_storage.shSH729 B
devmongo.pyPY711 B
dh_unpack.pyPY711 B
ataprod_dump.pyPY706 B
newfold_jira_dump.pyPY692 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

94.130.22.61confirmed
101.42.136.73confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.117.136.137confirmed
103.46.185.169confirmed
104.160.169.204confirmed
108.61.219.168confirmed
111.223.247.165confirmed
118.107.13.102confirmed
118.107.41.239confirmed
122.10.110.72confirmed
122.10.17.49confirmed
149.30.245.147confirmed
15.188.163.78confirmed