huntback / IP intelligence
154.12.86.207
Intelligence
ASN / OrgAS401696 · cognetcloud INC
CountryHong Kong
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 8787, 18080
Servicenginx/1.24.0 (Ubuntu) · Welcome to nginx!
Productsnginx
Loot harvested138 file(s), 16178 KB · exploit, exposed-secret, gafgyt, malware, mozi, tunnel
Open directory contents (138)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| state.db | DB | 4.1 MB |
| agent.log | LOG | 3.6 MB |
| errors.log.1 | 1 | 2.0 MB |
| uv.lock | LOCK | 1.2 MB |
| errors.log | LOG | 1009 KB |
| plugin-catalog.json | JSON | 462 KB |
| tasks-index.sqlite | SQLITE | 248 KB |
| shared-state.db | DB | 152 KB |
| hermes_state_messages.py | PY | 125 KB |
| config.yaml | YAML | 122 KB |
| config.yaml.bak-20261005-085300 | BAK-20 | 121 KB |
| kanban.db | DB | 116 KB |
| ashare_mcp.tgz | TGZ | 111 KB |
| ashare_src2.tgz | TGZ | 108 KB |
| ashare_src.tgz | TGZ | 108 KB |
| hermes_state_sessions.py | PY | 95 KB |
| hermes_state.py | PY | 90 KB |
| run_agent.py | PY | 86 KB |
| gateway.log | LOG | 82 KB |
| cli.py | PY | 78 KB |
| hermes_state_schema.py | PY | 78 KB |
| hermes_state_search.py | PY | 75 KB |
| hermes_state_repair.py | PY | 65 KB |
| hermes_state_common.py | PY | 63 KB |
| hermes_constants.py | PY | 62 KB |
| token-ledger.json | JSON | 57 KB |
| CONTRIBUTING.md | MD | 55 KB |
| hermes_state_gateway.py | PY | 54 KB |
| model_tools.py | PY | 49 KB |
| batch_runner.py | PY | 47 KB |
| pyproject.toml | TOML | 47 KB |
| gateway-shutdown-diag.log | LOG | 46 KB |
| trajectory_compressor.py | PY | 45 KB |
| hermes_state_compression.py | PY | 44 KB |
| hermes_install.sh | SH | 42 KB |
| hermes_logging.py | PY | 42 KB |
| hermes_state_dbfile.py | PY | 41 KB |
| hermes_state_wal.py | PY | 37 KB |
| hermes_state_portability.py | PY | 37 KB |
| utils.py | PY | 32 KB |
| tasks-index.sqlite-shm | SQLITE | 32 KB |
| hermes_state_maintenance.py | PY | 31 KB |
| Dockerfile | TXT | 30 KB |
| mcp_serve.py | PY | 30 KB |
| ‹redacted›.es.md | MD | 28 KB |
| hermes_state_holders.py | PY | 27 KB |
| .env.example | EXAMPL | 27 KB |
| hermes_bootstrap.py | PY | 26 KB |
| toolsets.py | PY | 24 KB |
| tool_discovery_cache.json | JSON | 24 KB |
| hermes_state_usage.py | PY | 24 KB |
| executions.db | DB | 24 KB |
| hermes_state_fts.py | PY | 22 KB |
| README.ur-pk.md | MD | 22 KB |
| hermes_startup_watchdog.py | PY | 20 KB |
| hermes_state_registry.py | PY | 20 KB |
| hermes_state_profile_repair.py | PY | 20 KB |
| mini_swe_runner.py | PY | 19 KB |
| hermes_state_telegram.py | PY | 18 KB |
| ‹redacted›.es.md | MD | 18 KB |
| README.md | MD | 16 KB |
| gateway-exit-diag.log | LOG | 16 KB |
| ‹redacted›.es.md | MD | 15 KB |
| SECURITY.md | MD | 15 KB |
| hermes_state_errors.py | PY | 14 KB |
| hermes_state_coverage.py | PY | 14 KB |
| setup-hermes.sh | SH | 12 KB |
| hermes_state_readpool.py | PY | 12 KB |
| hermes_state_titles.py | PY | 11 KB |
| AGENTS.md | MD | 11 KB |
| connectivity.py | PY | 11 KB |
| .gitignore | GITIGN | 9 KB |
| hermes_install_1.log | LOG | 9 KB |
| hermes_state_lockguard.py | PY | 8 KB |
| hermes_state_rewind.py | PY | 8 KB |
| hermes_state_timeline.py | PY | 7 KB |
| setup-hermes.ps1 | PS1 | 7 KB |
| hermes_constants_scratch.py | PY | 7 KB |
| hermes_install.log | LOG | 7 KB |
| hermes_state_guard.py | PY | 7 KB |
| proxy_pool.py | PY | 6 KB |
| activate.ps1 | PS1 | 6 KB |
| hermes_time.py | PY | 6 KB |
| hermes_state_identity.py | PY | 5 KB |
| .mailmap | MAILMA | 5 KB |
| toolset_distributions.py | PY | 5 KB |
| .curator_ledger.jsonl | JSONL | 5 KB |
| hermes_state_pidns.py | PY | 5 KB |
| hermes_state_user_copy.py | PY | 4 KB |
| hermes_state_lockowners.py | PY | 4 KB |
| hermes_state_health.py | PY | 4 KB |
| setup.py | PY | 3 KB |
| registration_lifecycle.py | PY | 3 KB |
| gateway.log | LOG | 3 KB |
| ‹redacted›.mjs | MJS | 3 KB |
| docker-compose.yml | YML | 3 KB |
| provider_config.json | JSON | 3 KB |
| hermes_yaml.py | PY | 3 KB |
| state.json | JSON | 3 KB |
| openrouter_curated_catalog.json | JSON | 3 KB |
| channel-credentials.json | JSON | 3 KB |
| ashare_src3.tgz | TGZ | 3 KB |
| malicious_test.py | PY | 3 KB |
| hermes_state_ids.py | PY | 3 KB |
| fs_version.py | PY | 2 KB |
| .dockerignore | DOCKER | 2 KB |
| start.sh | SH | 2 KB |
| fs_messages.py | PY | 2 KB |
| mcp-stderr.log | LOG | 2 KB |
| migrate_docker.sh | SH | 2 KB |
| channel-credentials.json.bak-import | BAK-IM | 2 KB |
| docker_mig.log | LOG | 1 KB |
| docker-compose.yml | YML | 1 KB |
| credentials.json | JSON | 1 KB |
| import_qoder.py | PY | 1 KB |
| docker-compose.yml.bak.20261028191308 | 202610 | 1 KB |
| fs_scopes.py | PY | 1 KB |
| state.json.bak-import | BAK-IM | 1 KB |
| step1.log | LOG | 1 KB |
| .gitattributes | GITATT | 1 KB |
| step1.sh | SH | 1 KB |
| ‹redacted›.example.json | JSON | 1 KB |
| test_proxy2.sh | SH | 902 B |
| test_clean.sh | SH | 725 B |
| test_proxy.sh | SH | 680 B |
| proxy_test.log | LOG | 595 B |
| test_final.sh | SH | 560 B |
| test_all.sh | SH | 517 B |
| .env | ENV | 489 B |
| .env.bak.1791197298 | 179119 | 467 B |
| gateway-starts.log | LOG | 432 B |
| install-stamp.json | JSON | 400 B |
| .envrc | ENVRC | 372 B |
| .curator_state | CURATO | 314 B |
| .env | ENV | 190 B |
| bot-config.v3.json | JSON | 33 B |
| .bash_history | BASH_H | 31 B |
| .gitignore | GITIGN | 1 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freePassive DNS
abc.zhangzixuan2007.cn
Related infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 103.131.51.199 | confirmed |
| 104.233.217.108 | confirmed |
| 110.42.215.163 | confirmed |
| 115.159.204.46 | confirmed |
| 122.166.178.204 | confirmed |
| 169.58.233.110 | confirmed |
| 172.105.156.153 | confirmed |
| 2.24.204.250 | confirmed |
| 209.38.235.232 | confirmed |
| 212.103.62.205 | confirmed |
| 213.136.79.115 | confirmed |
| 38.49.210.117 | confirmed |
| 39.96.205.8 | confirmed |
| 39.99.242.80 | confirmed |
| 41.223.30.7 | confirmed |