Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

202.95.14.69

DATACENTERloot-ipc2elf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS152194 · CTG Server Limited
CountryHong Kong
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 8000, 443
ServiceApache/2.4.58 (Ubuntu) · Apache2 Ubuntu Default Page: It works
Productsapache
JARM20d08b20d21d20d20c42d08b20b41d1ec49a4b64df0a9e9f328abd60285841
Loot harvested417 file(s), 11738 KB · elf-binary, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
pythonELF7.6 MB
‹redacted›.pycPYC135 KB
dede_getshell_playbook.pyPY114 KB
phpcms_getshell_detect.pyPY99 KB
‹redacted›.bakpackBAKPAC65 KB
godzilla_shells.txtTXT51 KB
payload.phpPHP38 KB
dedecms_probe.pyPY35 KB
dedecms_safe_probe.pyPY25 KB
dedecms_probe_test.pyPY19 KB
‹redacted›.lib.phpPHP19 KB
_payload_vlx42j_gz_m6nq32.phpPHP15 KB
_payload_vyema9_gz_20dd8i.phpPHP15 KB
_payload_6nimq8_gz_s08cii.phpPHP15 KB
_payload_watch4s_fix56.phpPHP15 KB
_payload_spt429_gz_183xf6.phpPHP15 KB
_payload_7b90gs_gz_p2zd8z.phpPHP15 KB
_payload_3z7lzj_gz_u6d5cb.phpPHP15 KB
_payload_segrl4_gz_8wxqks.phpPHP15 KB
_payload_yr0bvu_gz_tck42s.phpPHP15 KB
_payload_jtb4xh_gz_wj6475.phpPHP15 KB
_payload_d2sz8x_gz_znitni.phpPHP15 KB
_payload_r16n7j_gz_9d1eb0.phpPHP15 KB
_payload_y65c2l_gz_7ghkxq.phpPHP15 KB
_payload_p0f7pz_gz_5xugo7.phpPHP15 KB
_payload_scbkwr_gz_kyyedt.phpPHP15 KB
_payload_41ni9h_gz_3kbqs8.phpPHP15 KB
_payload_jcpolp_gz_aprahe.phpPHP15 KB
_payload_upfoym_gz_tkgh6i.phpPHP15 KB
_payload_4s9d1y_gz_uc0cy5.phpPHP15 KB
_payload_o6iphw_gz_xommz3.phpPHP15 KB
_payload_stf8hm_gz_td4lpu.phpPHP15 KB
_payload_wxyz1d_gz_la4jwg.phpPHP15 KB
_payload_k13yc1_gz_e13w20.phpPHP15 KB
_payload_1o8p9z_gz_r6f737.phpPHP15 KB
_payload_294iu4_gz_d85ue2.phpPHP15 KB
_payload_tnst0h_gz_0puw5c.phpPHP15 KB
_payload_4b7eu0_gz_8boek6.phpPHP15 KB
_payload_933029_gz_3hu0dw.phpPHP15 KB
_payload_hasfd7_gz_27pxza.phpPHP15 KB
_payload_igcveg_gz_6odq5p.phpPHP15 KB
_payload_kj3mwp_gz_t5d9b7.phpPHP15 KB
_payload_2gk6lu_gz_1aa9f9.phpPHP15 KB
_payload_vaaj72_gz_408h37.phpPHP15 KB
_payload_wl01xw_gz_1e3com.phpPHP15 KB
_payload_r5ei4q_gz_zioml2.phpPHP15 KB
_payload_w81crm_gz_c430rt.phpPHP15 KB
_payload_44ywbb_gz_yh3vk7.phpPHP15 KB
_payload_5yxg0s_gz_0ol8gg.phpPHP15 KB
_payload_n3th06_gz_ch4fkj.phpPHP15 KB
_payload_kcvfoz_gz_ry3vtn.phpPHP15 KB
_payload_5wqk38_gz_7sb79o.phpPHP15 KB
_payload_e620jy_gz_lr6ybr.phpPHP15 KB
_payload_8dugvu_gz_l1z257.phpPHP15 KB
_payload_e8c0ml_gz_7jj71t.phpPHP15 KB
_payload_eji4gx_gz_pbf3uc.phpPHP15 KB
_payload_kifcu0_gz_kca05p.phpPHP15 KB
_payload_6dwmzs_gz_xzy136.phpPHP15 KB
_payload_n3wmly_gz_wpvm0u.phpPHP15 KB
_payload_5vm1fo_gz_1mca7h.phpPHP15 KB
_payload_aur58h_gz_offj0y.phpPHP15 KB
_payload_rozo8b_gz_bhs07v.phpPHP15 KB
_payload_0cu50e_gz_u1tegc.phpPHP15 KB
_payload_ajt07s_gz_msywy2.phpPHP15 KB
_payload_zq3t7q_gz_hfiufk.phpPHP15 KB
_payload_0ln7bf_gz_mbcpd0.phpPHP15 KB
_payload_bes2se_gz_qmmbfo.phpPHP15 KB
_payload_eciuog_gz_3u0mvf.phpPHP15 KB
_payload_r2vvz7_gz_ldsdiy.phpPHP15 KB
_payload_7q6flp_gz_9chicq.phpPHP15 KB
_payload_xbrydy_gz_qarkqn.phpPHP15 KB
_payload_xq0yk3_gz_7aw1wb.phpPHP15 KB
_payload_vjymaq_gz_egenyh.phpPHP15 KB
_payload_sykoed_gz_xqjklt.phpPHP15 KB
_payload_bc5ixx_gz_l03l4o.phpPHP15 KB
_payload_eqlco9_gz_dq5jkt.phpPHP15 KB
_payload_jnmdh5_gz_cdmqub.phpPHP15 KB
_payload_p890sk_gz_676fz9.phpPHP15 KB
_payload_v54l2b_gz_zkdnky.phpPHP15 KB
_payload_bdic9y_gz_6yzqt8.phpPHP15 KB
_payload_qontb9_gz_6rwpr5.phpPHP15 KB
_payload_sk1chb_gz_nfbqrr.phpPHP15 KB
_payload_tb0s69_gz_lggk3v.phpPHP15 KB
_payload_1l5hc0_gz_b0vriz.phpPHP15 KB
_payload_4sjkf3_gz_gyzrab.phpPHP15 KB
_payload_7blzdr_gz_felmx4.phpPHP15 KB
_payload_frifn6_gz_z8buek.phpPHP15 KB
_payload_8o3xy4_gz_nir551.phpPHP15 KB
_payload_n19s0m_gz_5b9jrx.phpPHP15 KB
_payload_lxnaqn_gz_nnkkec.phpPHP15 KB
_payload_hnjt33_gz_r7r3zr.phpPHP15 KB
_payload_v7ftqc_gz_m63wpv.phpPHP15 KB
_payload_3nyl1r_gz_msrkn4.phpPHP15 KB
_payload_j3pli6_gz_56hvfk.phpPHP15 KB
_payload_yxj60l_gz_ynmkwy.phpPHP15 KB
_payload_wa0eky_gz_0m6q1k.phpPHP15 KB
_payload_3ixbl0_gz_d92jqe.phpPHP15 KB
_payload_el49yu_gz_p4svrg.phpPHP15 KB
_payload_fo9cea_gz_sp52pc.phpPHP15 KB
_payload_lx18w0_gz_29uhkt.phpPHP15 KB
_payload_sco1zy_gz_e8cbs7.phpPHP15 KB
_payload_xfazer_gz_tsdcur.phpPHP15 KB
_payload_dmy9vk_gz_tye00j.phpPHP15 KB
_payload_t5p9ap_gz_bskrhr.phpPHP15 KB
_payload_rkjns6_gz_muvv7s.phpPHP15 KB
_payload_fk851l_gz_p53eq2.phpPHP15 KB
_payload_rnb3er_gz_xmg94v.phpPHP15 KB
_payload_ydx8hd_gz_o8ygw4.phpPHP15 KB
_payload_bf7zw9_gz_vhd4yp.phpPHP15 KB
_payload_42s8gn_gz_94vzsl.phpPHP15 KB
_payload_9z61pg_gz_f6isk2.phpPHP15 KB
_payload_ngtrlu_gz_lv3h16.phpPHP15 KB
_payload_rjlj9f_gz_r3t1t1.phpPHP15 KB
_payload_mon7to_gz_swciyq.phpPHP15 KB
_payload_d9vk73_gz_uv4l8q.phpPHP15 KB
_payload_288wyc_gz_f3ulm4.phpPHP15 KB
_payload_3t2iez_gz_i1v6zk.phpPHP15 KB
_payload_dx4h0j_gz_qpxj4f.phpPHP15 KB
_payload_lqdrks_gz_f4y0zt.phpPHP15 KB
_payload_ky3n1j_gz_l2hl8u.phpPHP15 KB
_payload_m6e8cf_gz_pb7tpi.phpPHP15 KB
_payload_5phrf9_gz_nbxogf.phpPHP15 KB
_payload_jzlssx_gz_s25khr.phpPHP15 KB
_payload_s1ds26_gz_hgxscj.phpPHP15 KB
_payload_0n37cy_gz_u2g488.phpPHP15 KB
_payload_7wuzq5_gz_9up9lp.phpPHP15 KB
_payload_976xpn_gz_pgqa1l.phpPHP15 KB
_payload_oskyqk_gz_iowz06.phpPHP15 KB
_payload_s8p1lj_gz_cjau4e.phpPHP15 KB
_payload_y665hb_gz_7ambkz.phpPHP15 KB
_payload_ul3xvd_gz_lb8a0y.phpPHP15 KB
_payload_uvfuxj_gz_7qv1gu.phpPHP15 KB
_payload_p3w4w6_gz_ldy3bz.phpPHP15 KB
_payload_jr78pi_gz_2tcrh4.phpPHP15 KB
_payload_tk638c_gz_lrygus.phpPHP15 KB
_payload_eicjed_gz_4eoqqe.phpPHP15 KB
_payload_i3kmhv_gz_qwaawg.phpPHP15 KB
_payload_slk0yr_gz_3j6cia.phpPHP15 KB
_payload_yuwkih_gz_k6d7g5.phpPHP15 KB
_payload_r9f4nw_gz_pkviwi.phpPHP15 KB
_payload_mjwrm2_gz_swmgry.phpPHP15 KB
_payload_iaxgqx_gz_szh2p6.phpPHP15 KB
_payload_zw8pap_gz_nvacc1.phpPHP15 KB
_payload_7o3voo_gz_kmzhrd.phpPHP15 KB
_payload_fh2grh_gz_igbspz.phpPHP15 KB
_payload_kthpc8_gz_jlwrk3.phpPHP15 KB
_payload_97ve6c_gz_0qi4c0.phpPHP15 KB
_payload_i2d75k_gz_4lvpis.phpPHP15 KB
_payload_u31sin_gz_3v1oh8.phpPHP15 KB
_payload_j51eob_gz_804gox.phpPHP15 KB
_payload_djxcd8_gz_axughw.phpPHP15 KB
_payload_wzux5d_gz_ok12aq.phpPHP15 KB
_payload_z6rxry_gz_k6jxgu.phpPHP15 KB
_payload_a8gdpv_gz_ibtuu9.phpPHP15 KB
‹redacted›.lib.phpPHP15 KB
_payload_bunw90_gz_6rjtp6.phpPHP15 KB
_payload_mb4zk1_gz_ww218j.phpPHP15 KB
_payload_j6uhcu_gz_0xgpse.phpPHP15 KB
_payload_wc14fw_gz_0zlsx9.phpPHP15 KB
_payload_uxjwjp_gz_36pjle.phpPHP15 KB
_payload_08tifc_gz_sfpsvs.phpPHP15 KB
_payload_dzzeei_gz_b0kpqx.phpPHP15 KB
_payload_sja7sx_gz_hvbnpt.phpPHP15 KB
_payload_rcbft7_gz_9hzmw2.phpPHP15 KB
_minge_narrow6.pyPY13 KB
php_compat.pyPY12 KB
_minge_narrow.pyPY11 KB
_minge_narrow5.pyPY11 KB
_minge_more2.pyPY10 KB
_minge_narrow3.pyPY10 KB
fx_restore2.pyPY10 KB
_minge_narrow4.pyPY10 KB
_minge_narrow2.pyPY9 KB
README.mdMD9 KB
fx_restore4.pyPY9 KB
Activate.ps1PS18 KB
_huihuang_drop.pyPY8 KB
_minge_narrow7.pyPY8 KB
stager.pyPY8 KB
_minge_js_restore.pyPY7 KB
_yoneihan_aa_variant.pyPY7 KB
_hrhkj_probe.pyPY7 KB
shell_builder.pyPY7 KB
fx_restore5.pyPY7 KB
_ty_fm4.pyPY7 KB
fx_cleanup.pyPY7 KB
_kubao_probe.pyPY7 KB
fx_restore3.pyPY7 KB
_jsn_surf.pyPY6 KB
fx_restore.pyPY6 KB
_minge_narrow8.pyPY6 KB
fx_up3.pyPY6 KB
_payload_56c7r8_gz_eerrjw.phpPHP6 KB
_payload_q8q4b2_gz_n7gokq.phpPHP6 KB
_yoneihan_mod_redrop.pyPY6 KB
_ty_fm5.pyPY6 KB
fx_up4.pyPY6 KB
dede_fill_gaps.pyPY6 KB
_payload_k3030g_gz_cm9tc7.phpPHP6 KB
_payload_ql4epu_gz_uhf4xr.phpPHP6 KB
‹redacted›.lib.phpPHP6 KB
_minge_more1.pyPY6 KB
_hljjj_drop.pyPY6 KB
fx_esc2.pyPY5 KB
_yoneihan_probe.pyPY5 KB
‹redacted›.javaJAVA5 KB
_ty_fm_drop.pyPY5 KB
dede_notes_remainder.pyPY5 KB
_hrhkj_cont4.pyPY5 KB
fx_gs.pyPY5 KB
_huihuang_drop2.pyPY5 KB
_hrhkj_cont5.pyPY5 KB
_yoneihan_exec_drop.pyPY5 KB
_hrhkj_cfg_mkdir.pyPY5 KB
mutate.pyPY5 KB
_hrhkj_cfg_inject.pyPY5 KB
_hrhkj_probe2.pyPY5 KB
_jyt_clean2.pyPY5 KB
fx_up.pyPY5 KB
_kubao_probe3.pyPY5 KB
_yoneihan_module.pyPY5 KB
dede_explore_followup.pyPY5 KB
fx_up2.pyPY5 KB
_hrhkj_cfg_num.pyPY5 KB
_hrhkj_cfg_write.pyPY5 KB
fx_gs2.pyPY5 KB
dede_explore_continue.pyPY5 KB
dede_explore_more.pyPY5 KB
dede_param_probe.pyPY5 KB
copy_err_taglib.pyPY5 KB
_yoneihan_redrop.pyPY5 KB
_tssi_probe.pyPY5 KB
fx_shell2.pyPY4 KB
_kubao_probe2.pyPY4 KB
_yoneihan_exec_drop2.pyPY4 KB
_hrhkj_sql_alt.pyPY4 KB
_hrhkj_overwrite_aa.pyPY4 KB
_ty_fm3.pyPY4 KB
_yoneihan_module2.pyPY4 KB
dede_notes_surface.pyPY4 KB
_qiyeim_probe2.pyPY4 KB
_huihuang_ued.pyPY4 KB
_hrhkj_cont3.pyPY4 KB
_ty_fm2.pyPY4 KB
dede_deny_diskcheck.pyPY4 KB
dede_copy_replay.pyPY4 KB
_huihuang_ren.pyPY4 KB
_jyt_clean_fix.pyPY4 KB
_yoneihan_scan_drop.pyPY4 KB
fx_ck.pyPY4 KB
fx_ad.pyPY4 KB
_qiyeim_paths.pyPY4 KB
_yoneihan_err_q.pyPY4 KB
_hrhkj_sql_find.pyPY4 KB
fx_ck2.pyPY4 KB
_yoneihan_drop_safe.pyPY4 KB
fx_login.pyPY4 KB
_vipxfj_redrop.pyPY4 KB
_hljjj_drop3.pyPY4 KB
fx_shell.pyPY4 KB
_jsn_surf2.pyPY4 KB
_huihuang_more.pyPY3 KB
fx_ck3.pyPY3 KB
_yoneihan_redrop3.pyPY3 KB
_huihuang_img.pyPY3 KB
_hrhkj_cfg_check.pyPY3 KB
_yoneihan_aa.pyPY3 KB
_leshan_more.pyPY3 KB
‹redacted›.lib.phpPHP3 KB
_qiyeim_probe3.pyPY3 KB
reup_index.pyPY3 KB
dede_swfupload_probe.pyPY3 KB
_huihuang_fix.pyPY3 KB
_yoneihan_mod_redrop2.pyPY3 KB
aa_var_a156d2.phpPHP3 KB
_qiyeim_probe.pyPY3 KB
_hrhkj_cont2.pyPY3 KB
_gz_test_128.pyPY3 KB
_yoneihan_b4.pyPY3 KB
_leshan_cleanup_surface.pyPY3 KB
fx_esc.pyPY3 KB
aa_php52_multikey.phpPHP3 KB
xm_mod3.pyPY3 KB
aa_php52_sessfix.phpPHP3 KB
fx_media_clean2.pyPY3 KB
‹redacted›.lib.phpPHP3 KB
fx_gs3.pyPY3 KB
aa_php53.phpPHP3 KB
aa_php53_nc.phpPHP3 KB
_jyt_clean3.pyPY3 KB
aa_zz.phpPHP3 KB
_hrhkj_cfg_inject2.pyPY3 KB
_huihuang_surf.pyPY3 KB
_jsn_drop.pyPY3 KB
_yoneihan_aa2.pyPY3 KB
_hljjj_drop2.pyPY3 KB
aa_newsess.phpPHP3 KB
aa_exit.phpPHP3 KB
aa_fixed_post.phpPHP3 KB
‹redacted›.lib.phpPHP3 KB
dede_templets_list.pyPY3 KB
cli.pyPY3 KB
_hljjj_clean.pyPY3 KB
xm_mod2.pyPY3 KB
_hrhkj_upload_inspect.pyPY3 KB
dede_templets_write_probe.pyPY3 KB
_cqjz_fix52b.pyPY2 KB
_hrhkj_cont6.pyPY2 KB
fx_sess.pyPY2 KB
aa_php52_gzfix.phpPHP2 KB
_cfa_diag3.pyPY2 KB
_yoneihan_check_redrop.pyPY2 KB
_gz_debug_128.pyPY2 KB
_hrhkj_cont1.pyPY2 KB
fx_media_clean.pyPY2 KB
_cqjz_https.pyPY2 KB
_yoneihan_fast_drop.pyPY2 KB
aa_php52_filecache.phpPHP2 KB
_yoneihan_why404.pyPY2 KB
‹redacted›.lib.phpPHP2 KB
_ty_clean.pyPY2 KB
fx_final.pyPY2 KB
_cqjz_posttest2.pyPY2 KB
fx_verify.pyPY2 KB
_cfa_diag.pyPY2 KB
_qiyeim_tips.pyPY2 KB
_ty_csrf.pyPY2 KB
_hrhkj_emergency_restore.pyPY2 KB
_leshan_del_png.pyPY2 KB
_hrhkj_sql_inspect.pyPY2 KB
_hrhkj_confirm.pyPY2 KB
aa_php52_gz_official.phpPHP2 KB
_hrhkj_del2.pyPY2 KB
xm_mod.pyPY2 KB
_cqjz_fix52.pyPY2 KB
_cqjz_chk.pyPY2 KB
_cfa_clean.pyPY2 KB
_jsn_probe.pyPY2 KB
_dec_debug.pyPY2 KB
_cfa_diag2.pyPY2 KB
_cqjz_fix52c.pyPY2 KB
_cqjz_chk2.pyPY1 KB
err_b4_mcrypt.phpPHP1 KB
aa_php52_xor_ek.phpPHP1 KB
_hrhkj_diag_fix.pyPY1 KB
_fx_probe.pyPY1 KB
_hrhkj_del.pyPY1 KB
hy_sess.pyPY1 KB
_jsn_fix.pyPY1 KB
fx_priv.pyPY1 KB
_cqjz_rundiag.pyPY1 KB
jtekt_waf2.pyPY1 KB
jtekt_sess.pyPY1 KB
jtekt_sess4.pyPY1 KB
dede_swf_post.pyPY1 KB
dede_swf_extract.pyPY1 KB
crypto.pyPY1 KB
_hrhkj_hunt_fix.pyPY1 KB
six_sess.pyPY1 KB
dede_new_ok_extract.pyPY1 KB
_cqjz_posttest.pyPY1 KB
_fx_biz.pyPY1 KB
jtekt_waf.pyPY1 KB
_hrhkj_mysql_try.pyPY1 KB
dede_spec_extract.pyPY1 KB
jtekt_sess2.pyPY1 KB
explore.phpPHP1 KB
‹redacted›.lib.phpPHP1 KB
jtekt_sess3.pyPY1 KB
hm_probe.pyPY1 KB
_hrhkj_read_cfg.pyPY1 KB
_huihuang_health.pyPY1 KB
_huihuang_bak.pyPY988 B
kd_elf.phpPHP825 B
‹redacted›.lib.phpPHP783 B
dh_plus_probeok.php.zipZIP783 B
dh_probeok.php.zipZIP778 B
probe_dbg.zipZIP778 B
dhfd7f_plus_probeok.php.zipZIP767 B
dhfd7f_probeok.php.zipZIP762 B
kd_env.phpPHP745 B
‹redacted›.README.txtTXT727 B
‹redacted›.lib.phpPHP722 B
gen_fuylsk_52.pyPY713 B
‹redacted›.src.phpPHP671 B
USAGE.txtTXT609 B
probeok2.zipZIP594 B
_cqjz_diag.phpPHP573 B
probeok1.zipZIP562 B
‹redacted›.lib.phpPHP554 B
_cqjz_diag2.phpPHP456 B
‹redacted›.lib.phpPHP438 B
fx_shell_meta.txtTXT254 B
numpy-configTXT231 B
dede_tpl_playbook.pyPY197 B
kd_cl.phpPHP193 B
cleanup_probe.phpPHP100 B
‹redacted›.lib.phpPHP97 B
‹redacted›.lib.phpPHP95 B
‹redacted›.lib.phpPHP94 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

202.95.14.60confirmed
202.95.14.76confirmed
103.121.94.25confirmed
114.132.61.189confirmed
158.247.218.226confirmed
165.154.225.131confirmed
23.81.35.61confirmed
46.225.118.210confirmed
5.78.205.230confirmed
116.202.28.215lead