Live findsCVE IntelConsoleStart free
huntback / IP intelligence

203.194.115.12

RESIDENTIALoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS58487 · Rumahweb
CountryIndonesia
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 2222, 3306, 8080, 8888, 9876
Servicenginx/1.18.0 (Ubuntu) · Apache2 Ubuntu Default Page: It works
Productsapache, nginx
JARM2ad2ad0002ad2ad00042d42d000000301510f56407964db9434a9bb0d4ee4a
Loot harvested160 file(s), 6265 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (160)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
gs-netcat_linux-x86_64ELF2.7 MB
gsnxELF884 KB
umn_ultra_cron.logLOG672 KB
slims_install.sqlSQL260 KB
‹redacted›.min.jsJS217 KB
‹redacted›.pcapPCAP148 KB
gs-netcat-centosELF146 KB
rogue3306.logLOG83 KB
sttipal.logLOG83 KB
fake_mysql_v4.logLOG62 KB
‹redacted›.min.jsJS55 KB
gsc_chunk_aaTXT48 KB
gsc_chunk_acTXT48 KB
d.shSH42 KB
writes.phpPHP40 KB
COPYINGTXT34 KB
ojs3_install_page.htmlHTML32 KB
RELEASETXT29 KB
kemlu_admin_resp.htmlHTML28 KB
body_login.htmlHTML28 KB
kemlu_login_form.htmlHTML28 KB
kemlu_login_resp.txtTXT28 KB
login_page.htmlHTML28 KB
login_pg.htmlHTML28 KB
login_resp2.htmlHTML28 KB
login_v3.htmlHTML28 KB
PHPGGC.phpPHP27 KB
rogue2.logLOG19 KB
README.mdMD18 KB
‹redacted›.inc.phpPHP16 KB
‹redacted›.inc.phpPHP16 KB
test-gc-compatibility.pyPY13 KB
‹redacted›.xmlXML12 KB
README-DEVTXT11 KB
RELEASETXT9 KB
READMETXT8 KB
ssrf_hits.logLOG8 KB
README.mdMD7 KB
‹redacted›.xmlXML6 KB
stftkijne_persist.pyPY6 KB
copyAccessLogFileTool.phpPHP6 KB
rogue_mysql2.pyPY5 KB
bcrypt_hc.logLOG5 KB
release.shSH4 KB
rogue_mysql.pyPY4 KB
release.shSH4 KB
startSubmodulesTRAVIS.shSH4 KB
stftkijne_restore.pyPY4 KB
solve_waf.pyPY3 KB
stftkijne_bypass.pyPY3 KB
spread_deploy.pyPY3 KB
stftkijne_fma_deploy.pyPY3 KB
stftkijne_fix_db.pyPY3 KB
bf_admin.pyPY3 KB
poToCurrencies.phpPHP3 KB
stftkijne_gsocket.pyPY3 KB
find_creds.pyPY3 KB
cleanReviewerInterests.phpPHP3 KB
poToCountries.phpPHP3 KB
redeploy.pyPY2 KB
index.phpPHP2 KB
rce_chain.pyPY2 KB
index.phpPHP2 KB
deploy_shells.pyPY2 KB
dump_pack.pyPY2 KB
final_deploy.pyPY2 KB
fix_ts.pyPY2 KB
stftkijne_cleanup.pyPY2 KB
stftkijne_deploy.pyPY2 KB
rebuildSearchIndex.phpPHP2 KB
mergeUsers.phpPHP2 KB
stftkijne_poc.logLOG2 KB
sttipal2.logLOG2 KB
slims_exploit2.pyPY2 KB
stftkijne_verify.pyPY2 KB
deleteSubmissions.phpPHP1 KB
rebuildSearchIndex.phpPHP1 KB
slims_eval.pyPY1 KB
test_rce_fire.pyPY1 KB
importExport.phpPHP1 KB
importExport.phpPHP1 KB
stftkijne_test2.pyPY1 KB
find_slims_db.pyPY1 KB
grant_via_socket.pyPY1 KB
grant_hex.sqlSQL1 KB
stftkijne_inline.pyPY1 KB
rogue3.pyPY1 KB
rogue3306.pyPY1 KB
slims_exploit.pyPY1 KB
setup_evil.pyPY1 KB
slims_fgc.pyPY1 KB
test_slims_creds2.pyPY1 KB
setup_mysql57_akfar.pyPY1 KB
diagnose_payload.phpPHP1 KB
deleteSubmissions.phpPHP1 KB
sttipal_exploit.logLOG1 KB
gsinstall.pyPY1 KB
scan_creds.pyPY1 KB
exploit_stftkijne.pyPY1 KB
probe_api.pyPY1 KB
install.phpPHP1 KB
vps_test.pyPY1 KB
exploit_run.logLOG1 KB
install.phpPHP1 KB
test_payload.phpPHP1 KB
stftkijne_test.pyPY1 KB
setup_stftkijne.pyPY1 KB
create_mysql_user.pyPY985 B
probe2.pyPY979 B
cmu.pyPY971 B
slims_exploit.shSH949 B
test_stftkijne.pyPY913 B
dbXMLtoSQL.phpPHP906 B
cmu2.pyPY864 B
runScheduledTasks.phpPHP862 B
runScheduledTasks.phpPHP848 B
set_cron.shSH834 B
laravel_rce22.binBIN829 B
grant_evil.pyPY826 B
ssrf_srv.pyPY819 B
upgrade.phpPHP746 B
create_user.pyPY690 B
grant_evil2.sqlSQL662 B
test_slims_creds.pyPY619 B
create_fgc_user.pyPY580 B
upgrade.phpPHP542 B
‹redacted›.inc.phpPHP521 B
‹redacted›.inc.phpPHP519 B
mergeUsers.phpPHP498 B
listener.pyPY464 B
laravel_rce20.binBIN462 B
rogue_mysql.logLOG422 B
ro.txtTXT373 B
grant_evil.sqlSQL339 B
sample.phpPHP301 B
sr_administrator.txtTXT295 B
setup_8900.sqlSQL288 B
chain.phpPHP246 B
slims_exploit.txtTXT231 B
wl.txtTXT198 B
revshell.logLOG197 B
install_resp.txtTXT142 B
configTXT137 B
sc_administrator.txtTXT136 B
fw1_relative.binBIN125 B
shell_content.phpPHP78 B
socat443.logLOG77 B
ws_p3.phpPHP75 B
john_bcrypt.logLOG62 B
ws.phpPHP51 B
ws_sq.phpPHP50 B
beacon_log.txtLOG27 B
beacon2.txtTXT26 B
nc.logLOG26 B
nc9999.logLOG26 B
rogue3.logLOG25 B
stolen_config.phpPHP19 B
slims_schema.sqlTXT14 B
gadgets.phpPHP7 B
tshell.phpENV5 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
103.117.136.137confirmed
14.29.208.101confirmed
147.139.163.146confirmed
176.65.148.59confirmed
194.233.72.68confirmed
212.232.23.75confirmed
213.136.79.115confirmed
34.254.202.253confirmed
38.60.91.186confirmed
41.223.30.7confirmed
45.115.26.30confirmed
45.142.143.235confirmed
47.102.192.23confirmed
49.51.230.17confirmed