Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

165.154.225.131

DATACENTERshodan-opendirmalicious-opendirexposed-secretloot-ipelf-binaryexploit

Intelligence

ASN / OrgAS142002 · Scloud Pte Ltd
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports18081, 22, 80, 443, 5000, 8008, 9001
ServiceDirectory listing for /
Loot harvested842 file(s), 79902 KB · elf-binary, exploit, exposed-secret, malware, mozi, pe-binary

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
pythonELF7.6 MB
‹redacted›.hardcopyHARDCO6.6 MB
cadvisor_metrics.txtTXT6.1 MB
hrc_beta_transcript_20261026.logLOG5.9 MB
chisel.gzGZ4.5 MB
beta_keys_export_transcript.logLOG4.3 MB
fcg_agent_main.jsJS3.9 MB
beta_url_export_transcript.logLOG3.6 MB
fcg-beta-target-shell-transcript-copy3.logLOG3.4 MB
fcg-beta-target-shell-transcript-copy2.logLOG3.3 MB
fcg-beta-target-shell-transcript-copy.logLOG3.3 MB
summary.jsonJSON1.9 MB
scsentry_evidence.tgzTGZ1.6 MB
plink-0.85-x64.exeEXE1012 KB
capture-efcore_relational_dll.binPE838 KB
wls_50_4_swagger.jsonJSON808 KB
dm1_wls_internal_swagger.jsonJSON806 KB
capture-agent_dpkg_status_20261024.binBIN620 KB
cadvisor_subcontainers.jsonJSON572 KB
sensitive_fields.csvCSV378 KB
events.csvCSV356 KB
ldap_directory_audit.jsonJSON354 KB
‹redacted›.outOUT325 KB
capture-app_project3_deps.binBIN276 KB
redmine-shell-44445.logLOG260 KB
capture-efcore_design_dll.binPE258 KB
vui123_routes_full.tgzTGZ255 KB
vui123_js.tgzTGZ231 KB
fcg-gcs-segment.logLOG226 KB
77075831.tar.gzGZ217 KB
capture-beta_proc_maps.binBIN205 KB
77075836.tar.gzGZ196 KB
77075431.tar.gzGZ176 KB
infosite_mysql_root_audit.jsonJSON165 KB
dm1-system-shell-44462.logLOG158 KB
_next__static__chunks__pages___app-4438214dd4954eb1.jsJS158 KB
77075435.tar.gzGZ149 KB
packets.pyPY140 KB
_next__static__chunks__framework-fe99aa755573eedd.jsJS138 KB
dm1_internal_service_fingerprint.jsonJSON120 KB
.bash_historyBASH_H114 KB
capture-gamesrc_project3_views_pdb.binBIN107 KB
capture-gamesrc_taifu_main_pdb.binBIN97 KB
‹redacted›.hardcopyHARDCO87 KB
‹redacted›.hardcopy.txtTXT87 KB
_next__static__chunks__727-20ec24accf1c40ab.jsJS86 KB
‹redacted›.hardcopy.txtTXT85 KB
‹redacted›.hardcopy.txtTXT82 KB
‹redacted›.hardcopy.txtTXT81 KB
‹redacted›.hardcopy.txtTXT81 KB
‹redacted›.hardcopy.txtTXT81 KB
‹redacted›.hardcopy.txtTXT81 KB
‹redacted›.hardcopy.txtTXT81 KB
‹redacted›.hardcopy.txtTXT81 KB
capture-gamesrc_deploy_project3_pdb.binBIN80 KB
‹redacted›.hardcopy.txtTXT80 KB
‹redacted›.hardcopy.txtTXT80 KB
‹redacted›.hardcopy.txtTXT79 KB
‹redacted›.hardcopy.txtTXT79 KB
‹redacted›.hardcopy.txtTXT79 KB
‹redacted›.hardcopy.txtTXT79 KB
‹redacted›.hardcopy.txtTXT79 KB
‹redacted›.hardcopy.txtTXT79 KB
‹redacted›.hardcopy.txtTXT79 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT78 KB
‹redacted›.hardcopy.txtTXT76 KB
‹redacted›.hardcopy.txtTXT76 KB
‹redacted›.hardcopy.txtTXT76 KB
‹redacted›.hardcopy.txtTXT76 KB
dm1_wls_admin_hashes.jsonJSON76 KB
141696.fcg-beta-shell-80.txtTXT76 KB
‹redacted›.hardcopy.txtTXT75 KB
‹redacted›.hardcopy.txtTXT73 KB
‹redacted›.hardcopyHARDCO72 KB
‹redacted›.hardcopyHARDCO72 KB
‹redacted›.hardcopy.txtTXT72 KB
‹redacted›.hardcopy.txtTXT71 KB
redmine_deploy_term_search.jsonJSON70 KB
‹redacted›.hardcopyHARDCO69 KB
‹redacted›.outOUT69 KB
‹redacted›.hardcopyHARDCO68 KB
‹redacted›.hardcopy.txtTXT68 KB
‹redacted›.resyncRESYNC68 KB
‹redacted›.stateSTATE68 KB
‹redacted›.hardcopy.txtTXT68 KB
‹redacted›.inspectINSPEC67 KB
‹redacted›.out.gzGZ67 KB
gitlab_internal_probe_screen2.txtTXT67 KB
‹redacted›.hardcopy.txtTXT67 KB
gitlab_internal_probe_screen.txtTXT67 KB
_next__static__chunks__e8ab3f79-c9ca3ba120ecccad.jsJS66 KB
ldap_scan_screenTXT65 KB
‹redacted›.hardcopy.txtTXT65 KB
ldap_scan_screen2TXT65 KB
‹redacted›.hardcopy.txtTXT65 KB
‹redacted›.hardcopy.txtTXT65 KB
‹redacted›.hardcopyHARDCO64 KB
‹redacted›.hardcopy.txtTXT64 KB
‹redacted›.hardcopy.txtTXT64 KB
‹redacted›.hardcopy.txtTXT64 KB
‹redacted›.hardcopy.txtTXT63 KB
‹redacted›.hardcopy.txtTXT62 KB
prod_screen_initial.txtTXT62 KB
‹redacted›.hardcopy.txtTXT62 KB
‹redacted›.hardcopy.txtTXT62 KB
‹redacted›.hardcopy.txtTXT62 KB
‹redacted›.hardcopy.txtTXT62 KB
‹redacted›.hardcopy.txtTXT61 KB
‹redacted›.hardcopy.txtTXT61 KB
‹redacted›.hardcopy.txtTXT61 KB
‹redacted›.hardcopy.txtTXT61 KB
‹redacted›.hardcopy.txtTXT60 KB
beta_direct_check.txtTXT60 KB
‹redacted›.hardcopy.txtTXT60 KB
beta_direct_check2.txtTXT60 KB
‹redacted›.hardcopy.txtTXT60 KB
‹redacted›.hardcopy.txtTXT60 KB
capture-beta_root_bash_history.binBIN60 KB
‹redacted›.hardcopy.txtTXT59 KB
‹redacted›.hardcopy.txtTXT59 KB
‹redacted›.hardcopy.txtTXT59 KB
‹redacted›.hardcopy.txtTXT59 KB
dm1-system-restored.txtTXT59 KB
dm1-system-now.txtTXT59 KB
‹redacted›.hardcopy.txtTXT59 KB
‹redacted›.hardcopyHARDCO59 KB
‹redacted›.hardcopy.txtTXT59 KB
raiseChild.pyPY58 KB
‹redacted›.hardcopy.txtTXT57 KB
‹redacted›.hardcopy.txtTXT57 KB
‹redacted›.hardcopy.txtTXT57 KB
‹redacted›.hardcopyHARDCO57 KB
‹redacted›.hardcopy.txtTXT56 KB
‹redacted›.hardcopy.txtTXT56 KB
‹redacted›.hardcopy.txtTXT56 KB
‹redacted›.hardcopy.txtTXT56 KB
ticketer.pyPY56 KB
GodPotato-NET4.exeEXE56 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
‹redacted›.hardcopy.txtTXT55 KB
fcg-shell-443-pre443.txtTXT54 KB
fcg-shell-443-after443.txtTXT54 KB
capture-gamesrc_taifu_mysql_pdb.binBIN54 KB
latest_backoffice_ingress_beta_20261027.txtTXT53 KB
‹redacted›.hardcopy.txtTXT53 KB
pg5433_recheck_poll.txtTXT53 KB
‹redacted›.hardcopy.txtTXT53 KB
‹redacted›.hardcopy.txtTXT53 KB
‹redacted›.hardcopy.txtTXT52 KB
‹redacted›.hardcopy.txtTXT52 KB
fcg_gitlab_repo_access_vps.tar.gzGZ50 KB
‹redacted›.jsonlJSONL49 KB
o49.txtTXT49 KB
ntfs-read.pyPY48 KB
goldenPac.pyPY47 KB
snap-fcg-beta-shell-80-1793206547.txtTXT47 KB
‹redacted›.hardcopyHARDCO46 KB
‹redacted›.hardcopyHARDCO45 KB
getST.pyPY45 KB
‹redacted›.outOUT45 KB
capture-addmigration_stage_designer.binBIN44 KB
CHANGELOG.mdMD44 KB
fc_native_nexcel_screen.txtTXT44 KB
nexcel-fcprobe-result2.txtTXT43 KB
nexcel-fcprobe-result.txtTXT43 KB
capture-shell_recovery_auth_log.binBIN43 KB
fcg-gcs-lab-segment.logLOG43 KB
nexcel-fcprobe-pre.txtTXT43 KB
nexcel-mysql-root.txtTXT43 KB
cadvisor_spec.jsonJSON43 KB
‹redacted›.outOUT42 KB
dm1-stage-http-18084.logLOG41 KB
nexcel-mysql-file.txtTXT41 KB
exchanger.pyPY41 KB
dacledit.pyPY40 KB
l2.txtTXT40 KB
nexcel-mysql-priv.txtTXT39 KB
‹redacted›.hardcopy.txtTXT38 KB
changepasswd.pyPY38 KB
describeTicket.pyPY36 KB
container_last_seen.jsonJSON36 KB
tstool.pyPY36 KB
capture-gamesrc_piranha_project2_pdb.binBIN36 KB
fcg_new_bucket_probe.tar.gzGZ36 KB
nexcel-su-check.txtTXT34 KB
LICENSETXT34 KB
nexcel-db-audit-screen.txtTXT34 KB
badsuccessor.pyPY34 KB
redmine-dsip.txtTXT34 KB
ntlmrelayx.pyPY32 KB
redmine-gltoken2.txtTXT31 KB
reg.pyPY31 KB
nexcel-wp-check.txtTXT31 KB
redmine-gltoken.txtTXT31 KB
dpapi.pyPY29 KB
psexec.pyPY29 KB
secretsdump.pyPY29 KB
dm1_telegram_canary_readonly.jsonJSON29 KB
Responder.pyPY28 KB
DumpNTLMInfo.pyPY28 KB
karmaSMB.pyPY27 KB
dcomexec.pyPY27 KB
internal_scan_screen2TXT27 KB
internal_scan_screenTXT27 KB
net.pyPY27 KB
redmine-deployrce.txtTXT27 KB
ldap_group_screenTXT27 KB
GetUserSPNs.pyPY27 KB
ldap_audit_screen2TXT26 KB
ldap_audit_screenTXT26 KB
utils.pyPY26 KB
prometheus_internal_dump.tgzTGZ26 KB
redmine-daprobe.txtTXT26 KB
nexcel_wp_enum2TXT25 KB
‹redacted›.jsonlJSONL25 KB
redmine-deployprobe2.txtTXT25 KB
_next__static__chunks__496-609d1371bb20230e.jsJS25 KB
dpapidump.pyPY24 KB
phabricator_probe_listener.logLOG24 KB
redmine-deployprobe.txtTXT23 KB
fc_redmine_attachments_20261029.tar.gzGZ23 KB
rdp_check.pyPY22 KB
ch-post-probe-18083.logLOG22 KB
redmine_pivot_issues.jsonJSON22 KB
README.mdMD22 KB
netview.pyPY21 KB
addcomputer.pyPY21 KB
dm1-upload-18085.logLOG21 KB
redmine-cadv.txtTXT20 KB
capture-dispatch_networkd_bin.binBIN19 KB
GetNPUsers.pyPY19 KB
_next__static__chunks__pages__partner-bc717d42535d5602.jsJS19 KB
wmiexec.pyPY19 KB
klyro-topic-shell-44464.logLOG19 KB
o64.txtTXT18 KB
klyro-tools2.txtTXT18 KB
fcg_gcp_bucket_project_pivot.tar.gzGZ18 KB
‹redacted›.hardcopyHARDCO18 KB
klyro-topic-config.txtTXT18 KB
capture-cooper_bash_history.binBIN18 KB
settings.pyPY18 KB
sshpassELF18 KB
‹redacted›.hardcopyHARDCO18 KB
attrib.pyPY17 KB
services.pyPY16 KB
smbexec.pyPY16 KB
rpcmap.pyPY16 KB
Responder.dbDB16 KB
rabbitmq_administrator_reflection_poc.pyPY15 KB
_next__static__chunks__pages__member-56d22c9e9dd838b3.jsJS14 KB
rbcd.pyPY14 KB
GetLAPSPassword.pyPY14 KB
owneredit.pyPY14 KB
filetime.pyPY14 KB
member.htmlHTML14 KB
Get-GPPPassword.pyPY14 KB
‹redacted›.outOUT14 KB
findDelegation.pyPY13 KB
beta_url_slow_cmdsTXT13 KB
containers_grouped.jsonJSON13 KB
mysql_reuse_probe2.jsonJSON13 KB
getPac.pyPY13 KB
‹redacted›.hardcopyHARDCO13 KB
klyro-topic-inventory.txtTXT12 KB
dm1-sql-shell-44463.logLOG12 KB
atexec.pyPY12 KB
sambaPipe.pyPY12 KB
capture-resident_proc_systemd_1_fdinfo_6_20261024.binBIN12 KB
keylistattack.pyPY12 KB
dm1-quick-ports.txtTXT12 KB
wmipersist.pyPY11 KB
redmine_db_deep_probe.jsonJSON11 KB
GetADComputers.pyPY11 KB
swarm_service_labels.jsonJSON11 KB
capture-proc_self_net_tcp_current2.binBIN11 KB
capture-consumer_initramfs_mkinitramfs.binBIN11 KB
nexaws_service_probe.jsonJSON11 KB
regsecrets.pyPY11 KB
‹redacted›.hardcopyHARDCO11 KB
samrdump.pyPY10 KB
‹redacted›.hardcopyHARDCO10 KB
metric_names.jsonJSON10 KB
kintercept.pyPY9 KB
beta_db_deep_targetcmd.txtTXT9 KB
mysql_reuse_probe.jsonJSON9 KB
‹redacted›.hardcopyHARDCO9 KB
dm1-sql-shell-live.txtTXT9 KB
vui123_routes.tgzTGZ9 KB
sentry_admin_pivot.pyPY9 KB
wls-hashes.txtTXT9 KB
‹redacted›.hardcopyHARDCO9 KB
GetADUsers.pyPY9 KB
mimikatz.pyPY8 KB
gamecal-scan.txtTXT8 KB
probe_agent_routing.pyPY8 KB
beta_internal_recon_targetcmd_chunked2.txtTXT8 KB
Activate.ps1PS18 KB
wmiquery.pyPY8 KB
fcg_gitlab_readonly_matrix.pyPY8 KB
summary.tsvTSV8 KB
hf-shell-launch.txtTXT8 KB
mysql_local_infile_server.pyPY8 KB
beta_internal_recon_targetcmd_chunked.txtTXT8 KB
‹redacted›.hardcopyHARDCO8 KB
beta_verify_targetcmd.txtTXT8 KB
dm1_hangfire_process_canary.ps1PS18 KB
hf-process.txtTXT8 KB
icmp_established_local_probe.pyPY8 KB
lookupsid.pyPY7 KB
rpcdump.pyPY7 KB
dm1_hangfire_method_canary.ps1PS17 KB
capture-shell_recovery_proc_net_unix.binBIN7 KB
capture-proc_self_net_unix_current2.binBIN7 KB
fcg_prod_lateral_20261026.tgzTGZ7 KB
hf-topics.txtTXT7 KB
smbserver.pyPY7 KB
dm1_hangfire_reverse_shell_launch.ps1PS17 KB
beta_internal_recon_targetcmd.txtTXT7 KB
shell.logLOG7 KB
hf-method3.txtTXT7 KB
nexaws_gitlab_storage_portainer_20261029.logLOG7 KB
machine_role.pyPY7 KB
hf-method.txtTXT7 KB
parse_sentry_evidence.pyPY7 KB
hf-schema.txtTXT6 KB
probe_new_buckets.shSH6 KB
dm1_internal_service_fingerprint.ps1PS16 KB
tds_ntlm_capture.pyPY6 KB
hf-fixed.txtTXT6 KB
target_audit.shSH6 KB
macOS_Launcher.shSH6 KB
fcg-cert-manager-ui-index.jsJS5 KB
beta_db_deep_and_candidates_20261026.shSH5 KB
beta_keys_history_logs_20261026.shSH5 KB
getTGT.pyPY5 KB
capture-agent_ops_fluent_main_conf_20261024.binBIN5 KB
hf-dotsource.txtTXT5 KB
‹redacted›.hardcopyHARDCO5 KB
881-game-preloadcheck.txtTXT5 KB
liveagent-admin.jsJS5 KB
prod_lateral_recon_20261026.shSH5 KB
checkMSSQLStatus.pyPY5 KB
CheckLDAPStatus.pyPY5 KB
beta_internal_recon_20261026.shSH5 KB
registry-read.pyPY5 KB
Report.pyPY5 KB
mssqlclient.pyPY5 KB
server.logLOG5 KB
hf-redirect.txtTXT5 KB
dm1_sql_readonly_inventory.ps1PS15 KB
smbclient.pyPY5 KB
gitlab_token_probe.jsonJSON5 KB
beta_verify_and_lateral_20261026.shSH5 KB
Responder.confCONF5 KB
‹redacted›.originalBAK4 KB
‹redacted›.bodyBODY4 KB
‹redacted›.ovpnOVPN4 KB
dm1_hangfire_compact.ps1PS14 KB
‹redacted›.checkCHECK4 KB
results.logLOG4 KB
dm1_hangfire_inventory.ps1PS14 KB
probe_same_cert_variants.pyPY4 KB
hf-tail.txtTXT4 KB
dm1_crypt_readonly_extract.ps1PS14 KB
split.pyPY4 KB
db_audit.rbRB4 KB
beta_db_url_cmdTXT4 KB
fcg-cert-Login-Drbt3l-r.jsJS4 KB
lab2-osapi-vps.tgzTGZ4 KB
getArch.pyPY4 KB
nmap-install.logLOG4 KB
dm1-sql-shell-44461.logLOG4 KB
beta_shell_snapshot.txtTXT4 KB
‹redacted›.hardcopyHARDCO4 KB
responder-mssql-1433.logLOG4 KB
samedit.pyPY3 KB
nexaws_socks_readonly_probe.shSH3 KB
‹redacted›.snapshotSNAPSH3 KB
dm1-sql-shell-now.logLOG3 KB
nexcel_wp_enum1TXT3 KB
capture-resident_proc_systemd_1_fdinfo_4_20261024.binBIN3 KB
‹redacted›.enumENUM3 KB
dm1_internal_openapi_klyro_probe.ps1PS13 KB
‹redacted›.hardcopyHARDCO3 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
101.89.149.227confirmed
103.121.94.25confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.200.73.97confirmed
104.233.217.66confirmed
106.116.230.110confirmed
107.189.1.175confirmed