Live findsCVE IntelConsoleStart free
huntback / IP intelligence

101.36.112.205

DATACENTERoperator-submittedelf-binaryexploitexposed-secretforced-lootmacho-binary

Intelligence

ASN / OrgAS135377 · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
CountryHong Kong
NetworkDATACENTER · risk 80/100
Threat score0/100
Open ports22, 80, 1080, 8000, 8001, 8080, 8088, 18080
ServiceSimpleHTTP/0.6 Python/3.11.2 · Directory listing for /
Loot harvested161 file(s), 29682 KB · elf-binary, exploit, exposed-secret, forced-loot, macho-binary, malware

Open directory contents (161)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
srv.logLOG13.0 MB
pwnbeaconELF5.8 MB
beaconELF5.8 MB
1panel_index.jsJS1.9 MB
bda40ab4-465678c6543fde64.jsJS465 KB
82720-15e8b1227f1f2280.jsJS231 KB
layout-6d749dbf8d80cbf0.jsJS177 KB
f115fc96-55f803a530837eb8.jsJS174 KB
3427-ef8a79ac34cbc378.jsJS167 KB
0b8e744a-f97d59b4d2660f5e.jsJS119 KB
langflow_openapi.jsonJSON116 KB
60752-974a90f5f500fef3.jsJS81 KB
fc43f782-7a39dd9ad803b5ba.jsJS75 KB
43526-f5a3fc99c4c39c6f.jsJS55 KB
page-6a2d2fa1068372ed.jsJS49 KB
18036-1d1b9500ad779fbb.jsJS41 KB
‹redacted›.pycPYC34 KB
86812-f67430629c87ac5a.jsJS34 KB
76000-602003f57984ae7d.jsJS34 KB
1ae6eb87-fbd91af7eb89156d.jsJS28 KB
scanner.pyPY26 KB
challs.jsonJSON26 KB
chal.jsonJSON26 KB
chal2.jsonJSON26 KB
challenges.jsonJSON26 KB
jdwp-shellifier.pyPY22 KB
‹redacted›.classMACHO14 KB
86799-9b64f6aafae46dfa.jsJS13 KB
openvpn.logLOG12 KB
jdwp_hugegraph.pyPY12 KB
cve_2024_36104.pyPY11 KB
login.htmlHTML10 KB
openvpn.logLOG9 KB
parse_class.pyPY9 KB
login_form.jsJS8 KB
mc90.phpPHP7 KB
axios.jsJS6 KB
‹redacted›.ovpnOVPN6 KB
disasm2.pyPY6 KB
jdwp2.pyPY6 KB
jdwp4.pyPY6 KB
mc92.phpPHP5 KB
jdwp_full.pyPY5 KB
mc96.phpPHP4 KB
jdwp_rce3.pyPY4 KB
jdwp_exploit.pyPY4 KB
append_kb_instances.pyPY4 KB
ovpn.logLOG4 KB
README.mdMD4 KB
mc95.phpPHP4 KB
mc97.phpPHP4 KB
mc70_local.phpPHP4 KB
mc94.phpPHP4 KB
mc63.phpPHP4 KB
mc93.phpPHP4 KB
jdwp_one.pyPY4 KB
mc51.phpPHP3 KB
mc91.phpPHP3 KB
mc98.phpPHP3 KB
rogue_server.phpPHP3 KB
mcA.phpPHP3 KB
mc50.phpPHP3 KB
mysql_auth.plPL3 KB
‹redacted›.groovyGROOVY3 KB
mc52.phpPHP3 KB
rogue.phpPHP3 KB
mc58.phpPHP3 KB
mysql_auth2.plPL3 KB
jdwp_rce2.pyPY3 KB
mc53.phpPHP3 KB
mc55.phpPHP3 KB
mc59.phpPHP3 KB
mc54.phpPHP2 KB
admin.zipZIP2 KB
setting.jsJS2 KB
mc60.phpPHP2 KB
mc57.phpPHP2 KB
mc62.phpPHP2 KB
forge.pyPY2 KB
mc48.phpPHP2 KB
mc49.phpPHP2 KB
redis4.plPL2 KB
jdwp_client.pyPY2 KB
telnet_cli.pyPY2 KB
b01_backup.sqlSQL2 KB
jdwp_rce.pyPY1 KB
exploit.pyPY1 KB
mysql_handshake.plPL1 KB
forge2.pyPY1 KB
jdwp5.pyPY1 KB
mh2.plPL1 KB
redisdump.plPL1 KB
test_mh2.pyPY1 KB
oaenum.shSH1 KB
rce2.pyPY1 KB
rce.pyPY1 KB
find_shell.pyPY1 KB
rce.pyPY1 KB
mc61.phpPHP1 KB
oainj.shSH1 KB
test_gremlin.pyPY1 KB
redis2.plPL1 KB
oasqli.shSH1 KB
test_iso.pyPY1 KB
errlog_rce2.pyPY1 KB
dbg_bp.pyPY1 KB
errlog_rce.pyPY1 KB
redis.plPL1 KB
test_gs.pyPY1 KB
redis3.plPL1 KB
rawhttp.pyPY1 KB
oausers.shSH1 KB
diag.pyPY1006 B
test_bypass2.pyPY998 B
oatest.shSH978 B
jdwp_debug2.pyPY974 B
test_read.pyPY960 B
mc99.phpPHP932 B
test_mh.pyPY926 B
test_file.pyPY920 B
inject_check.pyPY906 B
inject.pyPY904 B
test_read2.pyPY882 B
jdwp3.pyPY853 B
oaroutes.shSH837 B
oa2.shSH819 B
enum.shSH818 B
oa.shSH787 B
oabf.shSH787 B
lfi_rce.pyPY777 B
test_exec2.pyPY755 B
test_suspend.pyPY744 B
jdwp_dbg3.pyPY706 B
jdwp_dbg4.pyPY686 B
jdwp_debug.pyPY669 B
jdwp_dbg5.pyPY641 B
wl.txtTXT588 B
arthas_telnet.pyPY542 B
analyze_log.pyPY524 B
readconf.pyPY520 B
mc56.phpPHP501 B
run_cmd.pyPY500 B
portscan.shSH483 B
test_exec.pyPY483 B
test_bp.pyPY401 B
fuzz.shSH391 B
scan.shSH384 B
test_read3.pyPY363 B
configTXT287 B
s1.phpPHP236 B
c06_poc.txtTXT184 B
packed-refsTXT114 B
descriptionTXT73 B
t.txtTXT63 B
shallowTXT41 B
kb_token.txtTXT37 B
test.phpPHP31 B
shell.txtTXT28 B
HEADTXT23 B
‹redacted›.groovyTXT14 B
.gitignoreGITIGN5 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.131.51.199confirmed
103.163.246.138confirmed
103.73.189.190confirmed
107.189.1.175confirmed
114.80.34.158confirmed
115.29.202.62confirmed
117.196.219.39confirmed
118.25.25.81confirmed
122.166.178.204confirmed
128.30.224.82confirmed
129.121.75.86confirmed
13.203.145.129confirmed
13.203.202.168confirmed
137.184.111.86confirmed
137.184.118.119confirmed