Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

111.68.4.13

RESIDENTIALshodanartex-consoleai-pentest-consoleelf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS45753 · Netsec Limited
CountryHong Kong
NetworkRESIDENTIAL · risk 80/100
Threat score0/100
Open ports8787, 22, 80, 443, 3000, 3306, 8443, 9876, 18080
Serviceopenresty
JARM1dd40d40d00040d00042d43d000000e1ea2a807a629b496b664cf07ad7c08d
Loot harvested58 file(s), 13709 KB · elf-binary, exploit, exposed-secret, malware, tunnel, webshell

Open directory contents (58)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
httpd.logLOG6.8 MB
runnerELF895 KB
runnerxELF890 KB
sweep2ELF879 KB
sweepELF879 KB
sweep3ELF879 KB
sudo-hax-me-a-sandwichELF772 KB
hax3156.tgzTGZ322 KB
h_56_18.binBIN132 KB
h_56_21.binBIN132 KB
h_56_24.binBIN132 KB
h_82_4.binBIN132 KB
heap_48_44.binBIN132 KB
heap_56_48.binBIN132 KB
heap_56_54_63_212.binBIN132 KB
heap_60_50.binBIN132 KB
ws_out.logLOG30 KB
P0P_SH3LLZ_FULL.so.2ELF16 KB
suidpay.soELF16 KB
P0P_SH3LLZ_%20.so.2ELF15 KB
exploit_defaults_mailer.pyPY12 KB
centos65-rootfs.tar.xzXZ8 KB
exploit_nss.pyPY7 KB
ws_status.txtTXT7 KB
hax.cC4 KB
sudoersTXT3 KB
sudo-ldap.confCONF3 KB
sweep.cC3 KB
ws_relay.pyPY3 KB
sweep2.cC2 KB
sweep3.cC2 KB
README_worawit.mdMD2 KB
ws_session.pyPY2 KB
ws_session2.pyPY1 KB
sudo.confCONF1 KB
analyze.pyPY1 KB
brute_local.shSH1 KB
runner.cC1 KB
brute2.shSH1 KB
analyze2.pyPY1017 B
ws_cmd.pyPY994 B
brute3.shSH987 B
ws_probe.pyPY964 B
gdbgo2.shSH881 B
smashtest.shSH837 B
‹redacted›.gdbGDB822 B
brute.shSH625 B
gdbgo.shSH605 B
ws_watchdog.shSH594 B
sweep_nl.shSH569 B
prep.shSH512 B
ptywrap.pyPY483 B
lib.cC407 B
lib_suid.cC397 B
ws_watchdog.logLOG343 B
gdb2.shSH224 B
configTXT29 B
exploit_bypassfh.cTXT14 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
152.42.162.237confirmed
163.52.135.151confirmed
168.144.111.89confirmed
173.212.244.40confirmed
18.136.195.202confirmed
185.28.119.18confirmed
203.194.115.12confirmed
217.160.132.82confirmed
34.254.202.253confirmed
38.60.157.55confirmed
39.99.242.80confirmed
45.115.26.30confirmed
45.39.190.176confirmed
49.51.187.59confirmed