huntback / IP intelligence
154.89.148.84
Intelligence
ASN / OrgAS55933 · Cloudie Limited
CountryHK
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 8787, 9443, 12345, 8345, 8377, 8444, 9099
ServiceSimpleHTTP/0.6 Python/3.11.2 · Directory listing for /
Loot harvested78 file(s), 86176 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi
Open directory contents (78)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| nla_v2 | ELF | 4.4 MB |
| nla | ELF | 4.4 MB |
| t | ELF | 4.4 MB |
| nla_stripped | ELF | 3.6 MB |
| nla_fix | ELF | 3.6 MB |
| t13_nla_v3b | ELF | 3.2 MB |
| t13_nla_v3 | ELF | 3.2 MB |
| nla_v4 | ELF | 3.2 MB |
| nla_v5 | ELF | 3.2 MB |
| nla_v6 | ELF | 3.2 MB |
| t13_t13b | ELF | 3.2 MB |
| t13_t11 | ELF | 3.2 MB |
| t13_t12 | ELF | 3.2 MB |
| t13_t13 | ELF | 3.2 MB |
| probe2 | ELF | 3.2 MB |
| probe3 | ELF | 3.2 MB |
| t17 | ELF | 3.2 MB |
| nla_v7 | ELF | 3.2 MB |
| diag | ELF | 3.2 MB |
| t14 | ELF | 3.2 MB |
| t15 | ELF | 3.2 MB |
| t16 | ELF | 3.2 MB |
| relay | ELF | 637 KB |
| splice_l3_armel | ELF | 583 KB |
| r6_17933 | ELF | 583 KB |
| rrevh2_14747 | ELF | 583 KB |
| rrevh2d_14747 | ELF | 583 KB |
| rrevh3 | ELF | 583 KB |
| rrevh4 | ELF | 583 KB |
| rrev | ELF | 579 KB |
| i18190_splice_loop | ELF | 579 KB |
| splice18106c_armel | ELF | 579 KB |
| rrevh_i14711 | ELF | 579 KB |
| splice18106b_armel | ELF | 579 KB |
| i18190_splice_c | ELF | 579 KB |
| splice18106_armel | ELF | 579 KB |
| tcp14747 | ELF | 578 KB |
| t13_hello_static | ELF | 573 KB |
| http8377.log | LOG | 80 KB |
| nla.c | C | 12 KB |
| t13_hello_dyn | ELF | 7 KB |
| i14666_same.html | HTML | 5 KB |
| ‹redacted›.apk | APK | 5 KB |
| t2_idor_ssrf.py | PY | 4 KB |
| ‹redacted›.apk | APK | 4 KB |
| mint_bearer_roselen.py | PY | 3 KB |
| t3_ssrf_status.py | PY | 3 KB |
| t4_handlers.py | PY | 3 KB |
| full_chain_ja.py | PY | 2 KB |
| refresh_ja.py | PY | 2 KB |
| readprobe2_i14569.html | HTML | 2 KB |
| t1_contract.py | PY | 2 KB |
| i14666_x.html | HTML | 2 KB |
| sh15b90.py | PY | 1 KB |
| i17691_t.html | HTML | 1 KB |
| tk.pem | PEM | 1 KB |
| i14813_u1.html | HTML | 1 KB |
| i14893_p2.html | HTML | 1 KB |
| kyc_token_ja.json | JSON | 1 KB |
| e14909_widget.html | HTML | 1 KB |
| kyc_bearer_ja.txt.bak | BAK | 1 KB |
| probe14454b.html | HTML | 1 KB |
| tc.pem | PEM | 1 KB |
| probe14454.html | HTML | 1007 B |
| i14666_b.html | HTML | 977 B |
| readprobe14454.html | HTML | 861 B |
| e943390.tar.gz | GZ | 841 B |
| i14578_cross.html | HTML | 799 B |
| i13703_ota2.sh | SH | 742 B |
| i14666_evil.js | JS | 566 B |
| i14263_widget.html | HTML | 464 B |
| i13703_ota.sh | SH | 449 B |
| one16547c.sh | SH | 266 B |
| launch16547.sh | SH | 213 B |
| kill16547.sh | SH | 166 B |
| launch16547b.sh | SH | 144 B |
| fw_ads504hd.zip | ZIP | 47 B |
| config | TXT | 2 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 100.21.82.169 | confirmed |
| 101.42.136.73 | confirmed |
| 101.47.156.26 | confirmed |
| 102.204.222.159 | confirmed |
| 102.210.149.166 | confirmed |
| 103.46.185.169 | confirmed |
| 104.223.41.172 | confirmed |
| 104.233.150.138 | confirmed |
| 108.61.219.168 | confirmed |
| 111.223.247.165 | confirmed |
| 118.107.13.102 | confirmed |
| 118.107.41.239 | confirmed |
| 122.10.110.72 | confirmed |
| 122.10.17.49 | confirmed |
| 134.122.169.32 | confirmed |