Live findsCVE IntelConsoleStart free
huntback / IP intelligence

45.142.143.235

RESIDENTIALoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS39287 · Materialism s.r.l.
CountryFinland
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 8000
ServiceSimpleHTTP/0.6 Python/3.12.3 · Directory listing for /
Loot harvested643 file(s), 61224 KB · c2, elf-binary, exploit, exposed-secret, gafgyt, malware

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
chisel.exePE9.3 MB
chiselELF8.9 MB
dump10032022.sqlSQL7.6 MB
dump08032022.sqlSQL7.6 MB
z_candidatos_insert.sqlSQL5.0 MB
z_resultados_ps_insert.sqlSQL5.0 MB
rockyou_500k.txtTXT4.0 MB
dump10032022.sql.gzGZ1.5 MB
dump08032022.sql.gzGZ1.5 MB
hc_da.logLOG837 KB
ipb_login.htmlHTML691 KB
ipb_post.htmlHTML688 KB
ign_err.htmlHTML568 KB
broker_auth.jsJS468 KB
cognito_spray5_log.txtTXT413 KB
imp_ldap_out.txtTXT373 KB
‹redacted›.xmlXML337 KB
bb_phpinfo_full.htmlHTML213 KB
bb_phpinfo.htmlHTML213 KB
bb_lang_edit.htmlHTML174 KB
bb_install_page.htmlHTML174 KB
bb_up3_resp.htmlHTML174 KB
security_b64.txtTXT170 KB
bb_admin_page.htmlHTML138 KB
bb_upg2.htmlHTML138 KB
bb_page_tmpTXT137 KB
bb_install7.htmlHTML129 KB
bb_draft_dlTXT128 KB
bb_ptestTXT128 KB
cognito_spray5.txtTXT127 KB
bb_body4TXT124 KB
bb_esc_homeTXT124 KB
bb_pa_homeTXT124 KB
otp_w3.logLOG122 KB
‹redacted›.configCONFIG92 KB
‹redacted›.min.jsJS84 KB
10k_common.txtTXT71 KB
hc_targeted.logLOG70 KB
bb_omtoken_page.htmlHTML42 KB
bb_password_form.htmlHTML42 KB
bb_admtoken_page.htmlHTML42 KB
COPYING.txtTXT34 KB
bb_forgot_o_page.htmlHTML32 KB
bb_forgot_page.htmlHTML32 KB
bb_forgot_v_page.htmlHTML32 KB
bb_token_page.htmlHTML32 KB
bp.jsonJSON28 KB
fp_resp.htmlHTML28 KB
pluginfile_test.txtTXT28 KB
signup.htmlHTML28 KB
bb_forgot3_resp.htmlHTML27 KB
bb_forgot4_resp.htmlHTML27 KB
bb_forgot_o_resp.htmlHTML27 KB
bb_forgot_resp.htmlHTML27 KB
bb_forgot_v_resp.htmlHTML27 KB
bb_setpass.htmlHTML27 KB
bb_adminusr_bodyTXT27 KB
bb_sqli_results_1790277179.logLOG26 KB
Thumbs.dbDB25 KB
bb_adm_login.htmlHTML24 KB
login_page.htmlHTML24 KB
canary.logLOG24 KB
dump_bb_psicometric.pyPY23 KB
bb_js_cambiosFronEnd.jsJS23 KB
apreqs.txtTXT22 KB
efex_3vectors.pyPY18 KB
dump_bb_v2.pyPY17 KB
‹redacted›.maskMoney.jsJS17 KB
mtelcel_phone_creds.txtTXT17 KB
exploit.pyPY14 KB
bb_takeover_1790288488.logLOG14 KB
SP_CONFIGURACION.sqlSQL11 KB
pfx230.pyPY11 KB
r2.shSH10 KB
retys_panel.htmlHTML10 KB
SP_OBTENER_RESULTADOS_CLEAVER.sqlSQL10 KB
SP_OBTENER_RESULTADOS_TERMAN_08112020.sqlSQL10 KB
fix79.pyPY10 KB
‹redacted›.pycPYC10 KB
dual_task.pyPY9 KB
app.phpPHP9 KB
‹redacted›.pycPYC9 KB
decrypt_all79.pyPY9 KB
crm_java79.pyPY9 KB
company_id_hunt.pyPY9 KB
‹redacted›.configCONFIG9 KB
pfx229.pyPY8 KB
‹redacted›.pycPYC8 KB
database.phpPHP8 KB
pfx_hunt208.pyPY8 KB
final.shSH7 KB
quick_final8.pyPY7 KB
‹redacted›.pycPYC7 KB
crm_pivot79.pyPY7 KB
pfx231.pyPY7 KB
pfx228.pyPY7 KB
loader.phpPHP7 KB
pfx_hunt215.pyPY7 KB
decode_bats.pyPY7 KB
masterpw79.pyPY7 KB
‹redacted›.pycPYC7 KB
quick_final7.pyPY7 KB
chain2.pyPY7 KB
company_id_hunt2.pyPY7 KB
company_identifier_hunt.pyPY7 KB
multi_v2.pyPY7 KB
ntfs_extract_pfx.pyPY7 KB
pfx_hunt214.pyPY7 KB
quick_final9.pyPY7 KB
r3.shSH7 KB
pfx_hunt173.pyPY6 KB
quick_final12.pyPY6 KB
pfx_hunt211.pyPY6 KB
mtelcel_f5_spray.shSH6 KB
pfx_hunt216.pyPY6 KB
pfx_hunt206.pyPY6 KB
quick_pivot6.pyPY6 KB
bb_r2_1790277487.logLOG6 KB
session.phpPHP6 KB
bf.shSH6 KB
pfx_hunt178.pyPY6 KB
deploy_dual.pyPY6 KB
efex_results.txtTXT6 KB
pfx_hunt95.pyPY6 KB
sandbox_gamble2.pyPY6 KB
pfx_hunt218.pyPY6 KB
pfx_hunt212.pyPY6 KB
pfx_hunt207.pyPY6 KB
apt.logLOG6 KB
pfx_hunt209.pyPY6 KB
pfx_hunt210.pyPY6 KB
quick_final11.pyPY6 KB
pfx_hunt177.pyPY6 KB
pfx_hunt102.pyPY6 KB
pfx_hunt213.pyPY6 KB
pfx_hunt202.pyPY6 KB
new_subdomains_probe.pyPY6 KB
bb_extract_1790277736.logLOG6 KB
banbajio_eval_psicom_ch_metadata.sqlSQL6 KB
sandbox_gamble3.pyPY5 KB
pfx_hunt179.pyPY5 KB
pfx_hunt217.pyPY5 KB
company_identifier_hunt2.pyPY5 KB
pfx_hunt205.pyPY5 KB
dbg.shSH5 KB
pfx_hunt176.pyPY5 KB
SP_OBTENER_RESULTADOS_16FP5_22062020.sqlSQL5 KB
pfx_hunt190.pyPY5 KB
obj_d1e32091.binBIN5 KB
ig_idor_auth.pyPY5 KB
pfx_hunt175.pyPY5 KB
pfx_hunt197.pyPY5 KB
pfx_hunt204.pyPY5 KB
quick_final13.pyPY5 KB
crm_simple79.pyPY5 KB
last_try79.pyPY5 KB
gcp.shSH5 KB
multi_vector.pyPY5 KB
pfx_hunt167.pyPY5 KB
quick_usrsir.pyPY5 KB
pfx_hunt181.pyPY5 KB
origin_ip_hunt.pyPY5 KB
dist_brute.pyPY5 KB
sandbox_gamble.pyPY5 KB
dev_checkout_config.pyPY4 KB
pfx_hunt196.pyPY4 KB
crm_all79.pyPY4 KB
parse_apreq.pyPY4 KB
pfx_hunt200.pyPY4 KB
pfx_hunt189.pyPY4 KB
pfx_hunt149.pyPY4 KB
r4.shSH4 KB
quick_final10.pyPY4 KB
pfx_hunt203.pyPY4 KB
pfx_hunt144.pyPY4 KB
netlas_broad.pyPY4 KB
gen_wl.pyPY4 KB
direct_access.pyPY4 KB
company_id_hunt3.pyPY4 KB
gdb.shSH4 KB
netlas_correct.pyPY4 KB
masterpw_cb.txtTXT4 KB
extract_e_config.pyPY4 KB
chain_check.pyPY4 KB
‹redacted›.pycPYC4 KB
bypass.shSH4 KB
bb_pw_result.htmlHTML4 KB
pfx_hunt104.pyPY4 KB
cognito_spray5.shSH4 KB
pfx_hunt99.pyPY4 KB
SP_OBTENER_RESULTADOS_IRT.sqlSQL4 KB
bypass.pyPY4 KB
pfx_hunt93.pyPY4 KB
pfx_hunt103.pyPY4 KB
netlas_origin_hunt.pyPY4 KB
pfx_hunt187.pyPY4 KB
forge_order.pyPY4 KB
pfx_hunt198.pyPY4 KB
pfx_hunt193.pyPY4 KB
extract_webconfig.pyPY4 KB
probe_new_ips.pyPY4 KB
pfx_hunt169.pyPY4 KB
pfx_hunt201.pyPY4 KB
gitdump.pyPY4 KB
admin_spray79.pyPY4 KB
pfx_hunt96.pyPY3 KB
pfx_hunt185.pyPY3 KB
otp_worker_v2.pyPY3 KB
shell_pivot2.pyPY3 KB
cve.pyPY3 KB
pfx_hunt191.pyPY3 KB
pfx_hunt161.pyPY3 KB
firestore_dump_config.pyPY3 KB
restart_iis.pyPY3 KB
pfx_hunt98.pyPY3 KB
extract_config.pyPY3 KB
firestore_complete.pyPY3 KB
pfx_hunt188.pyPY3 KB
roast2.pyPY3 KB
pfx_hunt195.pyPY3 KB
search_creds.pyPY3 KB
cve2.pyPY3 KB
extract_iis.pyPY3 KB
pfx_hunt164.pyPY3 KB
pfx_hunt183.pyPY3 KB
pg220_79.pyPY3 KB
dcc2_crack.pyPY3 KB
pfx_hunt199.pyPY3 KB
shell_nuclear.pyPY3 KB
extract_iis_deep.pyPY3 KB
crm_net79.pyPY3 KB
otp_worker.pyPY3 KB
shell_openrowset.pyPY3 KB
crm1_79.pyPY3 KB
extract_iis_config.pyPY3 KB
pfx_hunt194.pyPY3 KB
final_out.logLOG3 KB
jwt_cryptokey_test.pyPY3 KB
pfx_hunt180.pyPY3 KB
fix_cb.txtTXT3 KB
mail.phpPHP3 KB
shell_st3.pyPY3 KB
pfx_hunt162.pyPY3 KB
bb_phase2_1790288827.logLOG3 KB
jwt_decode.pyPY3 KB
shell_php.pyPY3 KB
pfx_hunt184.pyPY3 KB
pfx_hunt174.pyPY3 KB
dual_remote.phpPHP3 KB
pfx_run131.pyPY3 KB
pfx_hunt105.pyPY3 KB
quick_enable.pyPY3 KB
roast.pyPY3 KB
pfx_hunt192.pyPY3 KB
pfx_hunt127.pyPY2 KB
shell_lsa.pyPY2 KB
filesystems.phpPHP2 KB
checkout_proxy.pyPY2 KB
shell_linked.pyPY2 KB
jwt_test2.pyPY2 KB
pfx_hunt132.pyPY2 KB
bb_phase3.txtTXT2 KB
pfx_hunt100.pyPY2 KB
origin_hunt.pyPY2 KB
dns_recon.pyPY2 KB
pfx_hunt126.pyPY2 KB
pl.shSH2 KB
mtelcel_oracle_test.shSH2 KB
quick_env_read.pyPY2 KB
shell_iis74.pyPY2 KB
mtelcel_personal_spray.shSH2 KB
pfx_hunt125.pyPY2 KB
fz_spray.shSH2 KB
shell_schtask2.pyPY2 KB
prov_auth.pyPY2 KB
reg6.pyPY2 KB
cf_strip_proof.pyPY2 KB
sc.shSH2 KB
bb_final_1790279370.logLOG2 KB
bb_final_1790281099.logLOG2 KB
bb_final_1790283187.logLOG2 KB
imp_ldap.pyPY2 KB
shell_resolve.pyPY2 KB
pfx_hunt172.pyPY2 KB
pfx_hunt133.pyPY2 KB
ke.shSH2 KB
reg4.pyPY2 KB
esxi_spray.pyPY2 KB
pfx_hunt136.pyPY2 KB
SP_OBTENER_RESULTADOS_RAZONAMIENTO.sqlSQL2 KB
enum_vhosts.pyPY2 KB
shell_pivot.pyPY2 KB
nc_spray.shSH2 KB
nc_domain.shSH2 KB
shell_schtask.pyPY2 KB
pfx_hunt134.pyPY2 KB
mail_mine3.pyPY2 KB
bb_debug_1790279235.logLOG2 KB
retys_brute.pyPY2 KB
pfx_hunt145.pyPY2 KB
shell_portscan2.pyPY2 KB
shell_dbsvc.pyPY2 KB
shell_remote.pyPY2 KB
retys_pwd2.pyPY2 KB
zmsg_envio.sqlSQL2 KB
shell_lsa2.pyPY2 KB
shell_sql2.pyPY2 KB
SP_OBTENER_RESULTADOS_LIFO.sqlSQL2 KB
pfx_hunt163.pyPY2 KB
pfx_hunt115.pyPY2 KB
shell_portscan.pyPY2 KB
pfx_hunt114.pyPY2 KB
laps_gpp.pyPY2 KB
pma_setup.pyPY2 KB
pfx_hunt186.pyPY2 KB
shell_creds.pyPY2 KB
mtelcel_dehashed_phones.shSH2 KB
reg5.pyPY2 KB
pfx_hunt166.pyPY2 KB
SP_CONFIGURACION.sql.gzGZ2 KB
check_pma.pyPY2 KB
check_pma2.pyPY2 KB
shell_local_sql.pyPY2 KB
pfx_hunt160.pyPY2 KB
br.shSH2 KB
crm_safe79.pyPY2 KB
fetch_blobs.pyPY2 KB
pfx_hunt148.pyPY2 KB
pfx_hunt97.pyPY2 KB
pma_bypass.pyPY2 KB
dev_exploit.pyPY2 KB
bb_extract2_1790278154.logLOG2 KB
pfx_hunt94.pyPY2 KB
pfx_hunt159.pyPY2 KB
pfx_hunt121.pyPY2 KB
pfx_hunt154.pyPY2 KB
bb_wordlist.txtTXT1 KB
pfx_hunt124.pyPY1 KB
obj_59fc6784.binBIN1 KB
forge_tun4.pyPY1 KB
pfx_hunt146.pyPY1 KB
pfx_hunt182.pyPY1 KB
retys_pwd.pyPY1 KB
read_configs.pyPY1 KB
ldap_enum.pyPY1 KB
reg3.pyPY1 KB
auth_strip_test.pyPY1 KB
pfx_hunt150.pyPY1 KB
netlas_endpoints.pyPY1 KB
shell_creds2.pyPY1 KB
SP_OBTENER_RESULTADOS_16FP5_22062020.sql.gzGZ1 KB
brute_worker_v2.shSH1 KB
retys_mail.pyPY1 KB
bd.shSH1 KB
shell_iis.pyPY1 KB
pth_attack.pyPY1 KB
shell_envs.pyPY1 KB
pfx_hunt135.pyPY1 KB
shell_read.pyPY1 KB
pfx_hunt108.pyPY1 KB
probe_live.pyPY1 KB
pfx_hunt118.pyPY1 KB
pfx_hunt143.pyPY1 KB
fast_brute.pyPY1 KB
shell_sql.pyPY1 KB
brute_worker_v3.shSH1 KB
bb_phase3_1790290910.logLOG1 KB
s.shSH1 KB
pack_fetch.pyPY1 KB
pfx_hunt101.pyPY1 KB
index.phpPHP1 KB
pfx_hunt106.pyPY1 KB
pfx_hunt142.pyPY1 KB
pfx_hunt113.pyPY1 KB
quick_check.pyPY1 KB
.envENV1 KB
pfx_hunt152.pyPY1 KB
cmdshell_test.pyPY1 KB
reg7.pyPY1 KB
mail_mine2.pyPY1 KB
extract_sentry.pyPY1 KB
pfx_hunt153.pyPY1 KB
shell_smb.pyPY1 KB
bb_php_error.logLOG1 KB
pfx_hunt158.pyPY1 KB
pfx_run123.pyPY1 KB
apicna_enum.pyPY1 KB
enum_vhosts.shSH1 KB
pfx_hunt141.pyPY1 KB
pfx_hunt112.pyPY1 KB
forge_tun4b.pyPY1 KB
pfx_hunt139.pyPY1 KB
pfx_hunt140.pyPY1 KB
pr.pyPY1 KB
pfx_hunt171.pyPY1 KB
cache.phpPHP1 KB
find_pago.pyPY1 KB
prov_login.pyPY1 KB
pfx_hunt155.pyPY1 KB
bb_reset_page.htmlHTML1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
103.131.51.199confirmed
103.163.246.138confirmed
103.73.189.190confirmed
104.160.169.204confirmed
107.189.1.175confirmed
114.80.34.158confirmed
115.29.202.62confirmed
117.196.219.39confirmed
118.25.25.81confirmed
122.166.178.204confirmed
128.30.224.82confirmed
129.121.75.86confirmed
13.203.145.129confirmed
13.203.202.168confirmed