huntback / IP intelligence

156.239.47.147

DATACENTERoperator-submittedshodan-opendirmalicious-opendirmal-files:reverse_shells.logexploit-files:cve_poc.py,cve_poc_v2.py,cve_poc_v3.py,exploit.pyc2

Intelligence

ASN / OrgAS400619 · AROSSCLOUD INC.
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 443, 1080, 8081, 9999, 8889
Loot harvested33 file(s), 212 KB · c2, exploit, malware, mozi, tunnel

Open directory contents (33)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
check_full.logLOG60 KB
vuln_urls.txtTXT20 KB
exploit_noecho.jsonJSON11 KB
exploit_echo.jsonJSON10 KB
exploit_memshell.jsonJSON9 KB
cve_poc_v2.pyPY9 KB
exploit_oob.jsonJSON9 KB
cve_poc_v3.pyPY8 KB
memshell_full.logLOG5 KB
cve_poc.pyPY5 KB
noecho3.logLOG4 KB
oob_scan.logLOG4 KB
echo3.logLOG4 KB
memshell2.logLOG4 KB
echo_v4.logLOG4 KB
oob_v3.logLOG4 KB
echo_scan.logLOG4 KB
exploit.pyPY4 KB
gen.logLOG3 KB
internal_exploit.jsJS3 KB
internal_exploit_v2.jsJS3 KB
oob_v2.logLOG3 KB
noecho_full.logLOG3 KB
gen_targets.pyPY2 KB
k8s_scan.jsJS2 KB
echo_full.logLOG1 KB
noecho_full2.logLOG829 B
verify_all.logLOG732 B
memshell_verify.jsonJSON303 B
echo_final.logLOG294 B
targets_gen.pyPY273 B
memshell_verified.jsonJSON224 B
reverse_shells.logLOG218 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.132.103.189lead
101.206.186.78lead
101.36.104.89lead
102.70.86.105lead
103.215.80.153lead
103.247.19.204lead
103.83.87.22lead
103.85.185.183lead
104.218.68.139lead
104.245.245.213lead
104.251.180.112lead
107.189.22.235lead
107.189.23.9lead
109.120.132.28lead
109.120.140.219lead