Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

39.107.106.210

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 1080, 3306, 5432, 7001, 8000, 8080, 8099, 8888, 8898
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested421 file(s), 66845 KB · c2, elf-binary, exploit, exposed-secret, malware, mozi

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
chiselELF8.9 MB
adminELF8.8 MB
fscanELF8.1 MB
fscanELF8.0 MB
agentELF7.7 MB
fscanELF6.8 MB
gitlab_agent_80.logLOG2.6 MB
i1691_http2.logLOG2.4 MB
adminELF2.4 MB
a2ELF2.1 MB
op.jsJS1.9 MB
suo5testELF1.0 MB
gitlab_agent_443.logLOG954 KB
butian-src-url.txtTXT409 KB
http8099.logLOG389 KB
‹redacted›.func.phpPHP294 KB
‹redacted›.xmlXML232 KB
r7TXT223 KB
‹redacted›.class.phpPHP152 KB
‹redacted›.xmlXML102 KB
‹redacted›.xmlXML102 KB
‹redacted›.func.phpPHP73 KB
gitlab_agent_5563.logLOG68 KB
admin_collect_news.phpPHP42 KB
admin_collect.phpPHP39 KB
http.logLOG32 KB
log3.htmlHTML31 KB
lg3.htmlHTML31 KB
admin_datarelate.phpPHP28 KB
admin_video.phpPHP24 KB
log6.htmlHTML23 KB
lg_out.htmlHTML23 KB
‹redacted›.func.phpPHP22 KB
‹redacted›.func.phpPHP21 KB
‹redacted›.class.phpPHP21 KB
ur.htmlHTML20 KB
admin_topic_vod.phpPHP20 KB
member.phpPHP20 KB
log5.htmlHTML20 KB
o2.htmlHTML20 KB
zz3.htmlHTML20 KB
admin_reslib.phpPHP20 KB
flag7.htmlHTML20 KB
function.jsJS19 KB
seacms.sqlSQL19 KB
ad_flag_hunt.shSH18 KB
admin_webgather.phpPHP18 KB
log1.htmlHTML18 KB
g1.htmlHTML17 KB
‹redacted›.class.phpPHP17 KB
env9TXT16 KB
index.phpPHP16 KB
upload.phpPHP15 KB
uploadg.phpPHP15 KB
uploads.phpPHP15 KB
config.phpPHP14 KB
‹redacted›.class.phpPHP14 KB
ex2.soELF13 KB
rev.soELF13 KB
ajpShooter.pyPY13 KB
shell50100.logLOG13 KB
gbook.phpPHP12 KB
index.phpPHP12 KB
admin_database.phpPHP11 KB
admin_update.phpPHP11 KB
r20031_full.txtTXT11 KB
h18888.logLOG11 KB
r20031_scroll.txtTXT11 KB
threading-CNVD-2020-10487-Tomcat-Ajp-lfi.pyPY11 KB
search.phpPHP11 KB
Tomcat-ROOT%E8%B7%AF%E5%BE%84%E4%B8%8B%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB%28CVE-2020-1938%29.pyPY10 KB
Tomcat-ROOT%E8%B7%AF%E5%BE%84%E4%B8%8B%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%28CVE-2020-1938%29.pyPY10 KB
CNVD-2020-10487-Tomcat-Ajp-lfi.pyPY10 KB
about.htmlHTML10 KB
g2.htmlHTML10 KB
‹redacted›.class.phpPHP10 KB
admin_news.phpPHP10 KB
admin_cron.phpPHP10 KB
phpS.logLOG9 KB
l.htmlHTML9 KB
apt.logLOG9 KB
admin_config.phpPHP9 KB
admin_makehtml.phpPHP9 KB
admin_tempvideo.phpPHP9 KB
index.phpPHP9 KB
index.phpPHP8 KB
admin_type.phpPHP8 KB
zyapi.phpPHP8 KB
inc_menu.phpPHP8 KB
admin_type_news.phpPHP8 KB
seacmsdata.sqlSQL8 KB
upload_back.phpPHP7 KB
uploadzt.phpPHP7 KB
http.logLOG6 KB
index.phpPHP6 KB
ajax.phpPHP6 KB
js6TXT6 KB
admin_playerdown.phpPHP6 KB
o.jsonJSON6 KB
admin_weixin.phpPHP5 KB
reg.phpPHP5 KB
‹redacted›.func.phpPHP5 KB
sw.pyPY5 KB
‹redacted›.outOUT5 KB
index.phpPHP5 KB
history.jsJS5 KB
admin_player.phpPHP5 KB
http21674.logLOG5 KB
h5080.logLOG5 KB
admin_template.phpPHP5 KB
h2.logLOG4 KB
‹redacted›.func.phpPHP4 KB
common.phpPHP4 KB
so.phpPHP4 KB
admin_comment.phpPHP4 KB
readme.mdMD4 KB
admin_jqtype.phpPHP4 KB
login.phpPHP4 KB
y.41124411244 KB
base64.jsJS4 KB
admin_link.phpPHP4 KB
lgTXT3 KB
admin_topic.phpPHP3 KB
p.pyPY3 KB
admin_pseudo.phpPHP3 KB
err.phpPHP3 KB
hist_i318.txtTXT3 KB
i1126_chisel.logLOG3 KB
index.phpPHP3 KB
login.phpPHP3 KB
cb_i178_9446.logLOG3 KB
index.phpPHP3 KB
admin_comment_news.phpPHP3 KB
‹redacted›.admin.phpPHP3 KB
admin_zyk.phpPHP3 KB
h7081.logLOG3 KB
admin_ads.phpPHP3 KB
poc.htmlHTML3 KB
‹redacted›.class.phpPHP3 KB
p11m_41124TXT3 KB
ssolog_20072.txtTXT2 KB
recv4.logLOG2 KB
chisel-server.logLOG2 KB
admin_members.phpPHP2 KB
mTXT2 KB
oob_http.txtTXT2 KB
login.jsJS2 KB
fscan_pull.logLOG2 KB
‹redacted›.func.phpPHP2 KB
api.phpPHP2 KB
‹redacted›.class.phpPHP2 KB
admin_manager.phpPHP2 KB
admin_ajax.phpPHP2 KB
‹redacted›.inc.phpPHP2 KB
‹redacted›.cache.bak.phpPHP2 KB
‹redacted›.cache.bak.phpPHP2 KB
i1126_http.logLOG2 KB
i948_http.logLOG2 KB
‹redacted›.inc.phpPHP2 KB
http5211.logLOG2 KB
admin_ip.phpPHP2 KB
admin_ping.phpPHP2 KB
tag.phpPHP2 KB
uploadpic.phpPHP2 KB
recv2.logLOG2 KB
h31337.logLOG2 KB
erl_poc.pyPY2 KB
admin_filecheck.phpPHP2 KB
admin_members_group.phpPHP2 KB
probe2.shSH1 KB
admin_isapi.phpPHP1 KB
threading-find-port-8009.pyPY1 KB
lTXT1 KB
l2TXT1 KB
admin_vcode.phpPHP1 KB
e2.binBIN1 KB
admin_i.phpPHP1 KB
erl2.pyPY1 KB
vdimgck.phpPHP1 KB
net2_pull.logLOG1 KB
admin_expand.phpPHP1 KB
README.mdMD1 KB
index.phpPHP1 KB
admin_config_mark.phpPHP1 KB
probe6.shSH1 KB
readme.mdMD1 KB
gs1390.shSH1 KB
admin_delunionid.phpPHP1 KB
admin_selflabel.phpPHP1 KB
index.phpPHP1 KB
gs_probe2.shSH1 KB
probe4.shSH1 KB
recv3.logLOG1 KB
i1716_srv.logLOG1 KB
r2.shSH1 KB
index.phpPHP1 KB
pubscan.logLOG1 KB
op9.pyPY1 KB
‹redacted›.inc.phpPHP1 KB
cb_i178_9448.logLOG1 KB
README.mdMD1 KB
‹redacted›.inc.phpPHP1 KB
op8.pyPY1 KB
ctrl.shSH1 KB
run.shSH1 KB
cap_stow.txtTXT1 KB
chisel_srv_6012.logLOG1 KB
i.phpPHP1 KB
sso_hits.logLOG1 KB
‹redacted›.inc.phpPHP1 KB
r.shSH1 KB
admin_pay.phpPHP1 KB
654getshell.pyPY1022 B
655getshell.pyPY1021 B
ssrf.shSH1018 B
hs.logLOG1002 B
nc6102.logLOG988 B
rd.shSH985 B
op7.pyPY966 B
i1710_sc4.pyPY962 B
shell.phpPHP956 B
s5test.pyPY949 B
fp2.shSH938 B
op2.pyPY932 B
comment.phpPHP931 B
scan.shSH930 B
httpd.logLOG924 B
645getshell.pyPY907 B
scan2.shSH905 B
dnsq2.pyPY903 B
op6.pyPY898 B
fp.shSH897 B
cb_i178_9447.logLOG896 B
i1612_shell.phpPHP873 B
op4.pyPY873 B
t9.shSH872 B
op.pyPY869 B
fwd2.pyPY863 B
chisel_srv.logLOG862 B
route_pull.logLOG840 B
bp.shSH836 B
t11.shSH836 B
‹redacted›.warWAR813 B
probe3.shSH802 B
fwd.pyPY795 B
met.shSH778 B
t12.shSH778 B
eo.shSH777 B
n1.shSH760 B
r3.shSH749 B
t514_server.logLOG746 B
lang.phpPHP746 B
admin_menu.phpPHP733 B
cb_i178_9449.logLOG729 B
probe.shSH723 B
probe9.shSH719 B
probe7.shSH715 B
admin_labelguide.phpPHP715 B
rp.binBIN713 B
sshprobe.shSH708 B
op3.pyPY697 B
pp.shSH679 B
e.binBIN675 B
dnsq1720.pyPY672 B
i1710_sc3.pyPY671 B
f4.binBIN664 B
.gitignoreGITIGN649 B
i1710_sc.pyPY635 B
http_log.pyPY630 B
op5.pyPY622 B
cs1_full.txtTXT609 B
scan30p.shSH605 B
.gitignoreGITIGN605 B
sh.shSH599 B
README.mdMD599 B
i1710_sc2.pyPY592 B
README.mdMD592 B
poc_resp.txtTXT587 B
o2428087.binBIN582 B
recv5.logLOG576 B
chisel5399_l1.logLOG571 B
i1716_payload.jsonJSON556 B
index_body.phpPHP555 B
tv.pyPY547 B
probe8.shSH533 B
p3.shSH529 B
cb_i178_9453.logLOG525 B
‹redacted›.outOUT521 B
t1.shSH515 B
an1720.pyPY507 B
t10.shSH505 B
l5563.pyPY501 B
dump1720.pyPY495 B
probe11b.shSH482 B
t9.shSH481 B
‹redacted›.inc.phpPHP464 B
scan30.shSH463 B
probe5.shSH412 B
‹redacted›.sldSLD404 B
t10.shSH396 B
probe10.shSH390 B
exit.phpPHP386 B
tf.binBIN384 B
.gitattributesGITATT378 B
clean_rev.shSH359 B
p2.shSH358 B
c1.shSH358 B
‹redacted›.warWAR353 B
index.phpPHP346 B
desktop.phpPHP339 B
probe1.shSH327 B
glchisel.shSH319 B
‹redacted›.xmlXML317 B
l5563.logLOG312 B
‹redacted›.xmlXML312 B
‹redacted›.xmlXML311 B
configTXT311 B
configTXT303 B
fs2.shSH300 B
t2.shSH292 B
‹redacted›.xmlXML291 B
configTXT291 B
ag1.shSH287 B
r7599.logLOG286 B
configTXT286 B
recv.logLOG283 B
configTXT281 B
t5.shSH279 B
t.shSH277 B
configTXT275 B
‹redacted›.xmlXML273 B
configTXT273 B
configTXT271 B
t13.shSH270 B
recv7599.logLOG269 B
configTXT266 B
cb_i178_9444.logLOG254 B
exit.phpPHP248 B
t3.shSH247 B
fs3.shSH239 B
‹redacted›.ftp.phpPHP237 B
test.txtTXT230 B
i1334_srv.logLOG224 B
‹redacted›.jarJAR216 B
stow_direct.logLOG214 B
fs1.shSH213 B
t7.shSH210 B
seg3_pull.logLOG208 B
seg4_pull.logLOG208 B
seg5_pull.logLOG208 B
seg6_pull.logLOG208 B
seg7_pull.logLOG208 B
seg8_pull.logLOG208 B
seg9_pull.logLOG208 B
‹redacted›.inc.phpPHP195 B
lsn.logLOG184 B
‹redacted›.inc.phpPHP181 B
t4.shSH167 B
admin_memberslist.phpPHP163 B
stow_10086b.logLOG141 B
stow_admin_10086.logLOG141 B
stow_c.logLOG141 B
‹redacted›.cache.phpPHP141 B
i1070_tcpdump.logLOG131 B
‹redacted›.jarTXT131 B
i1632_send.shSH128 B
aTXT115 B
test.phpPHP114 B
packed-refsTXT114 B
packed-refsTXT114 B
packed-refsTXT114 B
packed-refsTXT114 B
packed-refsTXT114 B
packed-refsTXT114 B
packed-refsTXT114 B
packed-refsTXT114 B
packed-refsTXT112 B
l18901_1793248646.logLOG106 B
l18902_1793248646.logLOG106 B
p13890.logLOG106 B
ssrf_50190.logLOG106 B
t8.shSH92 B
shell.logLOG90 B
probe2.jsonJSON87 B
ip_pull.logLOG84 B
tf2.binBIN75 B
serve.shSH73 B
descriptionTXT73 B
seg2_pull.logLOG70 B
seg_pull.logLOG70 B
net_pull.logLOG68 B
noping_pull.logLOG68 B
i1691_http.logLOG67 B
l20061.logLOG64 B
README.mdMD63 B
README.mdMD61 B
pc1765.confCONF58 B
raw19099.logLOG46 B
ap.shSH42 B
shallowTXT41 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
100.21.82.169confirmed
101.36.112.205confirmed
101.42.136.73confirmed
101.47.156.26confirmed
101.89.149.227confirmed
102.204.222.159confirmed
102.209.224.40confirmed
102.210.149.166confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.133.216.219confirmed
103.163.246.138confirmed
103.195.188.128confirmed
103.254.63.94confirmed