huntback / IP intelligence

202.61.139.137

DATACENTERloot-ipexploitexposed-secretmalwaremoziopen-directory

Intelligence

ASN / OrgAS152194 · CTG Server Limited
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8000, 9000, 443, 8443
Loot harvested130 file(s), 10115 KB · exploit, exposed-secret, malware, mozi, tunnel, webshell

Open directory contents (130)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
intra-http.logLOG8.8 MB
dump_01_08.txtTXT180 KB
p_proj_001.txtTXT65 KB
‹redacted›.outOUT62 KB
http-rce.logLOG62 KB
p_proj_008.txtTXT52 KB
i051-collect-exfil.logLOG42 KB
‹redacted›.outOUT36 KB
i051-privesc2.logLOG36 KB
‹redacted›.outOUT34 KB
mssql-exact.logLOG34 KB
i051-auto-exec.logLOG26 KB
‹redacted›.outOUT25 KB
‹redacted›.outOUT25 KB
i051-privesc-exfil.logLOG25 KB
i051-exfil.logLOG25 KB
i051-sudoers-outTXT23 KB
i051-sudoers.logLOG23 KB
i051_shock_rce.pyPY19 KB
ly.zipZIP13 KB
sakip_i061.tgzTGZ13 KB
‹redacted›.outOUT13 KB
i051-privesc4.logLOG13 KB
sim_server2.pyPY11 KB
update_index_ui.pyPY11 KB
i051-privesc3.logLOG9 KB
b3.txtTXT8 KB
b1.txtTXT8 KB
b2.txtTXT7 KB
chat_gen_context.pyPY5 KB
update_backend_limits_precise.pyPY4 KB
update_backend_limits.pyPY4 KB
patch_switcher2.pyPY4 KB
p028_ws.tgzTGZ4 KB
setup_chat.shSH4 KB
patch_switcher_fallback.pyPY3 KB
cairn_guard.shSH3 KB
tokstat.pyPY3 KB
docker_pull.logLOG3 KB
move_docker_to_data.shSH3 KB
verify_provider2.pyPY3 KB
submit_hint.pyPY3 KB
tokstat3.pyPY3 KB
tokstat2.pyPY3 KB
diag_073.pyPY2 KB
verify_provider.pyPY2 KB
ab_audit.pyPY2 KB
i051-collect-smtp.logLOG2 KB
i051-privesc-smtp.logLOG2 KB
chat.shSH2 KB
patch_scheduler_stall.pyPY2 KB
cairn_disk_guard.shSH2 KB
live_tasks.pyPY1 KB
chat_list.pyPY1 KB
tokbig.pyPY1 KB
patch_switcher3.pyPY1 KB
base14.pyPY1 KB
chat_setup.shSH1 KB
fix_cairn_stability.pyPY1 KB
intra_banner.pyPY1 KB
q9.pyPY1 KB
dump_session.pyPY1 KB
f14_new2.pyPY1 KB
i051-sudo-test.logLOG1 KB
probe_sw.pyPY1 KB
inflight.pyPY1 KB
add_js_helper.pyPY1 KB
hist.pyPY1 KB
check14.pyPY1 KB
check_summary.pyPY1 KB
sim2.logLOG1 KB
enum_redis.shSH1 KB
add_js_helper2.pyPY1 KB
scan_findings.pyPY1 KB
f14_new.pyPY1 KB
testcb8997.logLOG1 KB
cred_scan.pyPY1 KB
config_cred_scan.pyPY1 KB
show014.pyPY1 KB
test_diff.pyPY1 KB
check14b.pyPY1 KB
q9b.pyPY1020 B
i051-pkg.logLOG1011 B
pause_all.pyPY996 B
q2.pyPY996 B
check_completed.pyPY964 B
webxml_dbscan.pyPY941 B
i051-privesc2-smtp.logLOG936 B
i051-privesc3-smtp.logLOG914 B
kill_test.pyPY900 B
i051-privesc4-smtp.logLOG887 B
inspect_codex_req.pyPY887 B
test_pi_cairn.shSH876 B
diag.pyPY819 B
‹redacted›.javaJAVA817 B
nfs_probe.pyPY815 B
intra_scan.pyPY814 B
q_intents.pyPY809 B
save_cc_stream.pyPY800 B
test_client_cline.pyPY792 B
check_bal.pyPY782 B
test_pi.shSH760 B
sim_server.pyPY737 B
fix_switcher.pyPY717 B
inspect_full_codex.pyPY712 B
dedup.pyPY670 B
dump014.pyPY592 B
f14_chan.pyPY563 B
claim_counts.pyPY555 B
test_health.pyPY504 B
sqlfile-smtp.logLOG458 B
sqlfile2-smtp.logLOG458 B
i051-sudo-smtp.logLOG438 B
i051-sudoers-smtp.logLOG438 B
f14.pyPY410 B
test_pi2.shSH398 B
i110.pyPY388 B
list_mounts.pyPY361 B
map_intents.shSH353 B
f84.pyPY326 B
mssql-exact-smtp.logLOG239 B
mssql-probe-smtp.logLOG239 B
i051-pkg-smtp.logLOG232 B
i051-exec.logLOG219 B
probe_db_hosts.pyPY209 B
probe235.pyPY188 B
sibling.logLOG70 B
sim.logLOG70 B
testprint.pyPY21 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

202.61.139.15confirmed
193.233.91.227confirmed
52.128.241.98confirmed
61.91.159.242confirmed
89.116.31.49confirmed
97.68.27.90confirmed
104.194.153.46lead
144.172.118.88lead
176.120.22.127lead
176.120.22.129lead
185.136.15.82lead
185.213.208.196lead
198.46.158.18lead
213.97.25.94lead
45.82.179.236lead