Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

115.159.204.46

DATACENTERshodan-opendirmalicious-opendirhot:php2shell:php2shellhot-cve-kitkit:php2shellelf-binary

Intelligence

ASN / OrgAS45090 · Shenzhen Tencent Computer Systems Company Limited
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports18096, 22, 18081
ServiceDirectory listing for /
Loot harvested111 file(s), 16937 KB · elf-binary, exploit, exposed-secret, gafgyt, malware, mozi

Open directory contents (111)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
agent.log.225.0 MB
state.dbDB2.7 MB
agent.logLOG2.3 MB
cli.pyPY1015 KB
uv.lockLOCK705 KB
hermes_state.pyPY705 KB
run_agent.pyPY427 KB
uvxELF338 KB
2026-09-07T03_14_40_476Z-debug-0.logLOG257 KB
agentcore_last_request_body.jsonJSON246 KB
php_ctf_8511_exp.pyPY228 KB
skills_store_cli.pyPY221 KB
rolling_closed_loop.pyPY159 KB
agentcore_redacted_capture.pyPY152 KB
agentcore_runtime_main.js.gzGZ119 KB
kanban.dbDB116 KB
hermes_state_search.pyPY111 KB
‹redacted›.exampleEXAMPL105 KB
AGENTS.mdMD93 KB
connector-runtime.17491751.shSH84 KB
hermes_state_schema.pyPY74 KB
model_tools.pyPY74 KB
hermes_constants.pyPY72 KB
trajectory_compressor.pyPY70 KB
wp2shell_article.txtTXT65 KB
batch_runner.pyPY58 KB
errors.logLOG56 KB
gateway.logLOG50 KB
pipelined_nb_terminal.pyPY49 KB
CONTRIBUTING.mdMD47 KB
executions.dbDB44 KB
resilient_fullchain.pyPY43 KB
toolsets.pyPY38 KB
utils.pyPY37 KB
hermes_logging.pyPY37 KB
hermes_state_common.pyPY37 KB
.bash_historyBASH_H37 KB
mcp_serve.pyPY37 KB
hermes_state_portability.pyPY36 KB
agentcore_sandbox_state_extract.txtTXT36 KB
pyproject.tomlTOML33 KB
2026-09-21T16_57_22_695Z-debug-0.logLOG29 KB
‹redacted›.es.mdMD28 KB
mini_swe_runner.pyPY27 KB
.envENV26 KB
DockerfileTXT26 KB
.env.exampleEXAMPL25 KB
2026-09-07T03_15_31_410Z-debug-0.logLOG22 KB
iceberg-18091.logLOG22 KB
agentcore_runtime_source_extract.txtTXT18 KB
setup-hermes.shSH18 KB
‹redacted›.es.mdMD18 KB
kcon2026.htmlHTML17 KB
README.mdMD17 KB
last_byte_fanout.pyPY17 KB
‹redacted›.es.mdMD16 KB
icbc_contentgetter_safe_probe.pyPY16 KB
2026-09-07T03_16_55_725Z-debug-0.logLOG16 KB
SECURITY.mdMD15 KB
tool_discovery_cache.jsonJSON13 KB
toolset_distributions.pyPY11 KB
gateway-shutdown-diag.logLOG11 KB
icbc_portlettracker_getmail_safe_probe.pyPY10 KB
hermes_bootstrap.pyPY10 KB
postgres_probe_server.pyPY9 KB
skills_upgrade.pyPY7 KB
icbc_psnetworkinfo_vps_safe_probe.pyPY6 KB
.gitignoreGITIGN6 KB
iceberg_probe_server.pyPY6 KB
ubuntu-directpair-75x150-20261031-003653.logLOG6 KB
ubuntu-directpair-75x150-20261031-003701.logLOG6 KB
mysql_probe_server.pyPY6 KB
hermes_time.pyPY5 KB
.mailmapMAILMA5 KB
icbc_portlettracker_waf_route_probe.pyPY5 KB
psigw_connector_lab_probe.pyPY4 KB
registration_lifecycle.pyPY4 KB
gateway-exit-diag.logLOG4 KB
psigw_connector_lab_probe.pyPY4 KB
config.yamlYAML3 KB
icbc_safe_empty_pop3.pyPY3 KB
docker-compose.ymlYML3 KB
‹redacted›.mjsMJS3 KB
icbc_contentgetter_redirect_getmail_safe_probe.pyPY3 KB
2026-09-07T03_14_53_445Z-debug-0.logLOG3 KB
setup.pyPY2 KB
psigw_chain_redirect_server.pyPY2 KB
jdbc_multiport_probe.pyPY2 KB
safe_http_capture_server.pyPY2 KB
safe_fixed_redirect_server.pyPY2 KB
.dockerignoreDOCKER2 KB
icbc_safe_getmail_redirect_server.pyPY1 KB
.curator_ledger.jsonlJSONL1 KB
.gitattributesGITATT1 KB
icbc_safe_redirect_server.pyPY1 KB
2026-09-21T16_57_11_944Z-debug-0.logLOG1 KB
cfp_countdown.pyPY937 B
2026-09-07T03_16_57_742Z-debug-0.logLOG806 B
ubuntu-directpair-20x40-20261031-004100.logLOG730 B
2026-09-07T03_16_55_366Z-debug-0.logLOG603 B
2026-09-07T03_16_55_483Z-debug-0.logLOG603 B
flag_callback.phpPHP562 B
agentcore_csi_jwtauth_canary_redacted.jsonJSON509 B
.envrcENVRC372 B
.curator_stateCURATO326 B
ubuntu-terminal-sync150x250-p107-20261031-004225.logLOG215 B
config.jsonJSON153 B
ubuntu-integrated-20x40-fire4x32x64-20261031-005140.logLOG105 B
gateway-starts.logLOG90 B
ubuntu-directpair-75x150-20261031-003708.logLOG34 B
.gitignoreGITIGN1 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.131.51.199confirmed
104.233.217.108confirmed
154.12.86.207confirmed
169.58.233.110confirmed
2.24.204.250confirmed
212.103.62.205confirmed
213.136.79.115confirmed
41.223.30.7confirmed
43.129.51.137confirmed
61.185.204.20confirmed