huntback / IP intelligence
153.75.81.83
Intelligence
ASN / OrgAS14956 · RouterHosting LLC
CountryUnited Arab Emirates
NetworkDATACENTER · risk 60/100
Threat score2/100
Open ports22, 80, 2222, 8081, 8099, 8100, 9200
ServiceApache/2.4.58 (Ubuntu) · Apache2 Ubuntu Default Page: It works
Productsgitlab, citrix, apache
Loot harvested91 file(s), 48300 KB · c2, elf-binary, exploit, exposed-secret, havoc, malware
Open directory contents (91)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| ichunk_01_5 | TXT | 5.7 MB |
| ichunk_02_6 | TXT | 5.7 MB |
| ichunk_02_3 | TXT | 5.7 MB |
| ichunk_00_4 | TXT | 5.7 MB |
| ichunk_02_2 | TXT | 5.7 MB |
| ichunk_01_2 | TXT | 5.7 MB |
| ichunk_00_6 | TXT | 5.7 MB |
| h_massdns.log | LOG | 1.9 MB |
| f_massdns.log | LOG | 1.5 MB |
| a.bin | BIN | 1.0 MB |
| ‹redacted›.patch | PATCH | 684 KB |
| ha-109 | ELF | 618 KB |
| gh_CVE-2026-111497.json | JSON | 473 KB |
| h-1.1.0 | ELF | 382 KB |
| h-1.0.9 | ELF | 355 KB |
| gh_http2shell.json | JSON | 108 KB |
| php_all_hosts.txt | TXT | 76 KB |
| ha-1.0.9 | ELF | 68 KB |
| ha-1.2.0 | ELF | 68 KB |
| n2s_sample.txt | TXT | 59 KB |
| ct_all.txt | TXT | 46 KB |
| ct_probed.txt | TXT | 46 KB |
| apt.log | LOG | 37 KB |
| cands.txt | TXT | 33 KB |
| memscreen_hosts.txt | TXT | 19 KB |
| sess_hosts.txt | TXT | 16 KB |
| f-1.0.3 | ELF | 15 KB |
| f-1.0.9 | ELF | 15 KB |
| f-1.1.0 | ELF | 15 KB |
| off-1.1.0 | ELF | 15 KB |
| fresh_all.txt | TXT | 13 KB |
| wide400.txt | TXT | 7 KB |
| rest.txt | TXT | 5 KB |
| newitems.json | JSON | 3 KB |
| verify_ai.py | PY | 2 KB |
| k_massdns.log | LOG | 2 KB |
| xue_auto.log | LOG | 2 KB |
| xue_prod2.log | LOG | 2 KB |
| fpm_env.py | PY | 1 KB |
| fpm_shot.py | PY | 1 KB |
| leak_dbg.py | PY | 1 KB |
| leak_dbg_lab.py | PY | 1 KB |
| leak_dbg2.py | PY | 1 KB |
| fpm_verify_k.py | PY | 1 KB |
| fpm_full5.py | PY | 1 KB |
| fpm_refsid.py | PY | 1 KB |
| diag_host.py | PY | 1 KB |
| fpm_full4.py | PY | 1 KB |
| diff_sweep.py | PY | 1 KB |
| p1_run3.log | LOG | 1 KB |
| p1_run2.log | LOG | 1 KB |
| measure_k2.py | PY | 1 KB |
| fpm_hit.py | PY | 1 KB |
| fpm_full3.py | PY | 1 KB |
| leak_measure.py | PY | 1 KB |
| fpm_full2.py | PY | 1 KB |
| measure_k.py | PY | 1 KB |
| fpm_aim.py | PY | 1 KB |
| leak_scan.py | PY | 1 KB |
| fpm_full.py | PY | 1 KB |
| oa_check.py | PY | 1 KB |
| diff_live.py | PY | 1 KB |
| cmp.py | PY | 1 KB |
| p1_run.log | LOG | 1 KB |
| fpm_diag.py | PY | 954 B |
| cmp2.py | PY | 930 B |
| fpm_diag3.py | PY | 911 B |
| fpm_diag2.py | PY | 909 B |
| reclaim_sizes.py | PY | 884 B |
| a1sweep.py | PY | 822 B |
| reclaim_size2.py | PY | 772 B |
| n2s_hosts.txt | TXT | 585 B |
| armsize2.py | PY | 542 B |
| h_auto2.log | LOG | 514 B |
| armsize.py | PY | 494 B |
| verify_new.py | PY | 431 B |
| livecheck.py | PY | 410 B |
| a1show.py | PY | 351 B |
| xue_prod.log | LOG | 251 B |
| oom32b.log | LOG | 227 B |
| oom32.log | LOG | 211 B |
| leak_sweep.log | LOG | 177 B |
| fpm_rd.py | PY | 164 B |
| aws_pairs.json | JSON | 68 B |
| gate4.log | LOG | 53 B |
| php2shell-matrix.json | JSON | 40 B |
| .env | ENV | 37 B |
| leak_sweep2.log | LOG | 21 B |
| index.php | PHP | 17 B |
| index.php | PHP | 17 B |
| config | TXT | 2 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 168.144.251.199 | confirmed |
| 45.115.26.155 | confirmed |
| 45.39.190.176 | confirmed |