huntback / IP intelligence

110.42.215.163

DATACENTERioc-tweetfeedloot-ipai-pentest-consolec2elf-binaryexploit

Intelligence

ASN / OrgAS45090 · Shenzhen Tencent Computer Systems Company Limited
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 111, 8787, 18080, 18081
ServiceARTEX — 自主渗透测试控制台
Loot harvested316 file(s), 78633 KB · c2, elf-binary, exploit, exposed-secret, macho-binary, malware

Open directory contents (316)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.jarJAR8.3 MB
fs64ELF8.1 MB
ff_64.exePE7.9 MB
ARTEX-main%281%29.zipZIP7.2 MB
monitorELF7.1 MB
configs.zipZIP6.2 MB
1792031748.htmlHTML4.3 MB
client3.exePE3.3 MB
Alive-windows-amd64-subnet.zipZIP2.4 MB
Alive-windows-amd64-progress.zipZIP2.4 MB
Alive-windows-amd64.zipZIP2.4 MB
cves.jsonJSON2.0 MB
evil-mysql-serverELF1.9 MB
linux_x64_agentELF1.4 MB
module_metadata_cache.jsonJSON1.4 MB
1792981925.htmlHTML1.2 MB
js1.jsJS1.1 MB
finger.yamlYAML1.1 MB
1787276526.htmlHTML735 KB
‹redacted›.jarJAR561 KB
artex.logLOG489 KB
1788405209.htmlHTML443 KB
1787043525.htmlHTML394 KB
1787230372.htmlHTML361 KB
1788488673.htmlHTML359 KB
uvxELF340 KB
TEMPLATES-STATS.jsonJSON294 KB
1786344550.htmlHTML222 KB
1787032079.htmlHTML216 KB
workflow.yamlYAML170 KB
Invoke-SMBEnum.ps1PS1156 KB
Invoke-SMBExec.ps1PS1146 KB
Invoke-SMBClient.ps1PS1136 KB
2026FastjsonPoC-main%20%281%29.zipZIP131 KB
‹redacted›.jarJAR120 KB
1782970483.htmlHTML115 KB
1788313273.htmlHTML102 KB
Invoke-WMIExec.ps1PS195 KB
tools.goGO91 KB
npmci.logLOG79 KB
CHANGELOG.mdMD75 KB
GodPotato-NET4.exeEXE56 KB
.bash_historyBASH_H54 KB
‹redacted›.sumSUM38 KB
containers.jsonJSON34 KB
LICENSETXT33 KB
planner.goGO32 KB
config.yamlYAML31 KB
‹redacted›.backupBACKUP31 KB
worker.goGO30 KB
‹redacted›.example.yamlYAML30 KB
tools_insert.goGO27 KB
jdbc_deser_pwn.pyPY26 KB
scan_target.pyPY26 KB
‹redacted›.pycPYC23 KB
README.mdMD22 KB
universal.pyPY22 KB
upadtes.exePE22 KB
css.exePE21 KB
provider.goGO20 KB
README.mdMD19 KB
CVE-2024-30085.exePE19 KB
rogue_443.logLOG19 KB
README_CN.mdMD18 KB
compaction.goGO17 KB
blackboard_inheritance_test.goGO17 KB
restcloud_jdbc_rce.pyPY16 KB
run.shSH15 KB
TEMPLATE-CREATION-GUIDE.mdMD14 KB
promptcatalog.goGO14 KB
insert_assets_test.goGO14 KB
rogue_run.pyPY14 KB
config.yamlYAML13 KB
init.pyPY13 KB
TEMPLATE-REVIEW-GUIDE.mdMD12 KB
mainagent.goGO12 KB
rogue_win.pyPY12 KB
win_rce.pyPY12 KB
Invoke-TheHash.ps1PS111 KB
CONTRIBUTING.mdMD11 KB
pull.logLOG11 KB
2026-10-28T05_34_45_165Z-debug-0.logLOG11 KB
upgrade.shSH11 KB
setup_env.pyPY10 KB
goals.goGO10 KB
pwn_read.pyPY10 KB
coldgraph.goGO10 KB
fake_live.logLOG10 KB
setup-env.ps1PS19 KB
EDRChoker.exePE9 KB
reset-password.shSH9 KB
‹redacted›.pycPYC9 KB
chat.goGO8 KB
build.shSH8 KB
wrapup.goGO8 KB
‹redacted›.outOUT8 KB
toolcatalog.goGO8 KB
dshv_shell.pyPY8 KB
capture.goGO8 KB
finding_workflow.goGO7 KB
toolchain.logLOG7 KB
rce.pyPY7 KB
coldgraph_test.goGO7 KB
udf64.dllPE7 KB
icmp2.logLOG6 KB
jdbc_verify.pyPY6 KB
‹redacted›.outOUT6 KB
README_JA.mdMD6 KB
replay_jdbc_rce.pyPY6 KB
rogue_urldns.pyPY6 KB
terminalreason_test.goGO6 KB
terminalreason.goGO6 KB
README_KR.mdMD6 KB
whoami_probe.pyPY6 KB
cancelcause.goGO5 KB
remote.pyPY5 KB
config.goGO5 KB
win_exec_probe.pyPY5 KB
review_context_test.goGO5 KB
tools_digest.goGO5 KB
SECURITY.mdMD5 KB
pull2.logLOG5 KB
fake_mysql.pyPY5 KB
README_CN.mdMD5 KB
‹redacted›.outOUT5 KB
retry_whoami.pyPY5 KB
Templates-Bounty-FAQ.mdMD5 KB
capture_approval_test.goGO5 KB
dual_server.pyPY4 KB
DEPLOY_DEBUG.mdMD4 KB
fake_mysql2.pyPY4 KB
fake_mysql4.pyPY4 KB
fake_mysql3.pyPY4 KB
probe_win.pyPY4 KB
MIGRATE.mdMD4 KB
install.shSH4 KB
side_questions_test.goGO4 KB
fake_mysql_live.pyPY4 KB
win_probe2.pyPY4 KB
provider_capture_e2e_test.goGO4 KB
networks.jsonJSON4 KB
parse_new.pyPY4 KB
provider_quota_test.goGO4 KB
2026-11-02T02_56_47_225Z-debug-0.logLOG4 KB
jdbc_deser.logLOG3 KB
README.mdMD3 KB
update.shSH3 KB
run_cmd.pyPY3 KB
dir.yamlYAML3 KB
capture_usage_test.goGO3 KB
assembly.goGO3 KB
provider_capture_test.goGO3 KB
finding_recorder_test.goGO3 KB
prompt_test.goGO3 KB
init.ps1PS13 KB
rogue_win_443.logLOG3 KB
.new-additionsNEW-AD3 KB
deferred_test.goGO3 KB
VERIFY.mdMD2 KB
config.yamlYAML2 KB
exploit.shSH2 KB
mysql_run.pyPY2 KB
toolcatalog_test.goGO2 KB
inspect_rogue_win.pyPY2 KB
prompt.goGO2 KB
‹redacted›.outOUT2 KB
‹redacted›.outOUT2 KB
restart-db.shSH2 KB
finding_workflow_test.goGO2 KB
tools_nil_store_test.goGO2 KB
start.shSH2 KB
sm2enc.pyPY2 KB
‹redacted›.classMACHO2 KB
deploy_client.pyPY2 KB
prompt_now_test.goGO2 KB
deploy_shellcode.pyPY2 KB
2026-11-02T02_41_24_245Z-debug-0.logLOG2 KB
start.batBAT2 KB
recv_server.pyPY2 KB
check_file.pyPY2 KB
retester.goGO2 KB
icmp.logLOG2 KB
session_header_test.goGO2 KB
read_hex.logLOG2 KB
taskclock.goGO2 KB
verify_vtest.pyPY2 KB
noa.goGO2 KB
relaunch.pyPY2 KB
scan.ps1PS11 KB
webbuild.logLOG1 KB
attack_dual.pyPY1 KB
2026-11-02T12_17_23_009Z-debug-0.logLOG1 KB
shell_listener.pyPY1 KB
tsql.pyPY1 KB
list_public.pyPY1 KB
ACKNOWLEDGEMENTS.mdMD1 KB
deferred.goGO1 KB
rce.binBIN1 KB
read_all_files.pyPY1 KB
2026-11-02T10_38_41_838Z-debug-0.logLOG1 KB
arl.shSH1 KB
i4.logLOG1 KB
start.batBAT1 KB
read_hex.pyPY1 KB
runinfo.goGO1 KB
constraints.goGO1 KB
read_hives.pyPY1 KB
‹redacted›.logoLOGO1 KB
PULL_REQUEST_TEMPLATE.mdMD1 KB
pull4.logLOG1 KB
docker-compose.ymlYML1 KB
‹redacted›.outOUT1 KB
.nuclei-ignore1 KB
‹redacted›.outOUT1 KB
config_test.goGO1 KB
sc.binBIN1 KB
finding_recorder.goGO1 KB
proxyenv_test.goGO1 KB
i1.logLOG1 KB
t.binBIN1 KB
cc6b.binBIN1 KB
cc6.binBIN1 KB
rw_run.logLOG1 KB
‹redacted›.bench.ymlYML1 KB
rw_check.logLOG1 KB
2026-11-02T12_17_22_410Z-debug-0.logLOG1 KB
2026-11-02T10_38_41_065Z-debug-0.logLOG1 KB
‹redacted›.example.jsonJSON1 KB
icmp3.logLOG1 KB
icmpw.logLOG1 KB
start_multi.shSH1 KB
rce.logLOG1 KB
fake_mysql.logLOG1 KB
httpl.pyPY1 KB
sql213.ps1PS11 KB
tools_overview_test.goGO1006 B
framework.logLOG990 B
provider_responses_test.goGO981 B
i3.logLOG971 B
i5.logLOG971 B
reporting-config.yamlYAML969 B
.gitignoreGITIGN957 B
test_ps.pyPY936 B
dnsl.pyPY906 B
‹redacted›.jarJAR888 B
multilisten.pyPY886 B
2026-11-02T02_56_46_585Z-debug-0.logLOG878 B
‹redacted›.outOUT873 B
sql213k.ps1PS1871 B
worker_intervention_test.goGO870 B
2026-11-02T02_41_16_527Z-debug-0.logLOG869 B
sql213j.ps1PS1862 B
pth2.ps1PS1851 B
urldns.logLOG851 B
sql213b.ps1PS1846 B
collector.pyPY808 B
dev.shSH804 B
sql213c.ps1PS1803 B
sql213l.ps1PS1798 B
sql213h.ps1PS1788 B
i2.logLOG787 B
2026-11-02T02_41_05_685Z-debug-0.logLOG775 B
sql213d.ps1PS1774 B
sql213e.ps1PS1752 B
test_ps2.pyPY746 B
fm5.logLOG745 B
2222.pyPY740 B
testmain_test.goGO738 B
sql213g.ps1PS1720 B
LICENSETXT710 B
start_exfil.shSH704 B
sql213i.ps1PS1679 B
side_questions.goGO671 B
sql213m.ps1PS1670 B
rogue_win_8423.logLOG653 B
pth.ps1PS1639 B
2026-10-28T05_34_46_609Z-debug-0.logLOG625 B
sql213f.ps1PS1617 B
‹redacted›.xmlXML602 B
fm_bad.logLOG600 B
vps_tcp.pyPY581 B
.templates-config.jsonJSON549 B
http_hits.txtTXT492 B
test_encwrap.pyPY473 B
exfil.txtTXT460 B
.gitignoreGITIGN400 B
requirements.txtTXT396 B
fm4.logLOG376 B
dual.logLOG346 B
read_hives.logLOG338 B
.envENV308 B
pull3.logLOG307 B
.env.exampleEXAMPL300 B
start_recon.shSH283 B
urldns_probe.binBIN274 B
gobuild.logLOG253 B
retry.logLOG251 B
config.jsonJSON224 B
start_rogue_sudo.shSH200 B
start_rogue.shSH197 B
provider-config.yamlYAML118 B
exploit_cookies.jsonJSON113 B
start.shSH110 B
TOKEN.txtTXT92 B
recv8080.logLOG84 B
recv9443.logLOG84 B
vps_tcp.logLOG84 B
recv443.logLOG82 B
fm3.logLOG60 B
ports.logLOG57 B
.gitignoreGITIGN49 B
‹redacted›.outOUT43 B
.gitattributesGITATT38 B
bad.binBIN28 B
nc1234.logLOG26 B
.admin-passwordADMIN-18 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

115.29.202.62confirmed
121.36.206.152confirmed
124.220.164.14confirmed
143.246.203.114confirmed
15.188.163.78confirmed
154.12.86.207confirmed
157.230.117.70confirmed
157.245.140.34confirmed
165.154.225.131confirmed
169.58.233.110confirmed
172.105.156.153confirmed
176.65.148.59confirmed
177.3.43.43confirmed
185.216.68.66confirmed
190.183.251.210confirmed