huntback / IP intelligence

39.106.13.235

DATACENTERoperator-submittedshodan-opendirmalicious-opendirexploit-files:exploit.class,exploit.java,exploit.py,sched_rce.pyloot-ipexploit

Intelligence

ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 111, 2222, 3000, 4444, 8000
ServiceSimpleHTTP/0.6 Python/3.6.8 · Directory listing for /
Productsnginx
Loot harvested21 file(s), 14267 KB · exploit, exposed-secret, macho-binary, malware, mozi, tunnel

Open directory contents (21)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
http.logLOG6.7 MB
http.logLOG6.7 MB
rmi.logLOG510 KB
shell.logLOG81 KB
exploit.pyPY8 KB
‹redacted›.pycPYC8 KB
sched_rce.pyPY2 KB
‹redacted›.outOUT2 KB
‹redacted›.outOUT1 KB
watch_job.pyPY1 KB
httpsrv.pyPY1 KB
server_rsa.pemPEM903 B
listen.pyPY877 B
‹redacted›.jarJAR716 B
‹redacted›.xmlXML583 B
‹redacted›.classMACHO565 B
listen1389.pyPY505 B
listen1099.pyPY459 B
httpsrv80.pyPY395 B
‹redacted›.javaJAVA254 B
accountnew_dl.logLOG75 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

129.226.71.134lead
141.147.89.101lead