huntback / IP intelligence
39.96.205.8
Intelligence
ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 1080, 8081, 8180, 8898, 9001
Loot harvested576 file(s), 56302 KB · c2, elf-binary, exploit, exposed-secret, malware, mirai
Open directory contents (400)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| iox3.log | LOG | 8.5 MB |
| chisel | ELF | 8.3 MB |
| p1src.zip | ZIP | 8.1 MB |
| fscan | ELF | 6.8 MB |
| gost_3.3.2.tar.gz | GZ | 3.0 MB |
| livepyre.zip | ZIP | 2.7 MB |
| iox | ELF | 2.4 MB |
| linux_x64_admin | ELF | 2.4 MB |
| linux_x64_agent | ELF | 2.1 MB |
| http9001.log | LOG | 1.9 MB |
| httpd.log | LOG | 1.1 MB |
| httpd.log | LOG | 1.1 MB |
| bk.bin | BIN | 674 KB |
| bk_open.tar.gz | GZ | 674 KB |
| ‹redacted›.aa | ELF | 195 KB |
| ia.html | HTML | 178 KB |
| server.go | GO | 140 KB |
| ‹redacted›.sum | SUM | 116 KB |
| artex_build2.log | LOG | 113 KB |
| tools.go | GO | 105 KB |
| idx.js | JS | 98 KB |
| tools.go | GO | 91 KB |
| schema.sql | SQL | 75 KB |
| manager.go | GO | 71 KB |
| traffic.go | GO | 70 KB |
| exploration.go | GO | 69 KB |
| server_mgmt.go | GO | 67 KB |
| httpserver9999.log | LOG | 60 KB |
| engine.go | GO | 53 KB |
| CHANGELOG.md | MD | 52 KB |
| assets.go | GO | 51 KB |
| r_lang.js | JS | 48 KB |
| exp.so | ELF | 45 KB |
| orchestration.go | GO | 43 KB |
| config.go | GO | 40 KB |
| worker.go | GO | 36 KB |
| iox.log | LOG | 34 KB |
| LICENSE | TXT | 34 KB |
| LICENSE | TXT | 33 KB |
| http_shell.go | GO | 33 KB |
| planner.go | GO | 33 KB |
| db.go | GO | 33 KB |
| planner.go | GO | 32 KB |
| task_archives.go | GO | 31 KB |
| worker.go | GO | 31 KB |
| assets_test.go | GO | 30 KB |
| findings.go | GO | 29 KB |
| task_archives_restore.go | GO | 29 KB |
| reverse.go | GO | 28 KB |
| conversations.go | GO | 28 KB |
| http_shell_test.go | GO | 28 KB |
| tools_insert.go | GO | 27 KB |
| tools_insert.go | GO | 26 KB |
| task_admission_test.go | GO | 25 KB |
| task_llm.go | GO | 25 KB |
| companies.go | GO | 24 KB |
| tasks.go | GO | 24 KB |
| intranet.go | GO | 24 KB |
| task_llm_test.go | GO | 24 KB |
| session.go | GO | 23 KB |
| intercept.go | GO | 23 KB |
| tasks_test.go | GO | 23 KB |
| dto.go | GO | 22 KB |
| INTRANET-PIVOT-DESIGN.md | MD | 21 KB |
| provider.go | GO | 20 KB |
| task_scope.go | GO | 20 KB |
| task_archives.go | GO | 20 KB |
| provider.go | GO | 20 KB |
| task_archive_package.go | GO | 20 KB |
| HONEYPOT-DETECTION-DESIGN.md | MD | 20 KB |
| artex_build.log | LOG | 19 KB |
| deploy.go | GO | 19 KB |
| finding_assets.go | GO | 19 KB |
| tunnel.go | GO | 18 KB |
| side_questions_test.go | GO | 18 KB |
| recon.go | GO | 18 KB |
| findings_test.go | GO | 18 KB |
| intercept.go | GO | 18 KB |
| asset_dsl.go | GO | 17 KB |
| blackboard_inheritance_test.go | GO | 17 KB |
| finding_traffic_test.go | GO | 16 KB |
| customtool.go | GO | 16 KB |
| exploration_sources_test.go | GO | 16 KB |
| compaction.go | GO | 16 KB |
| task_context.go | GO | 16 KB |
| side_questions.go | GO | 16 KB |
| task_archives_test.go | GO | 16 KB |
| o | TXT | 16 KB |
| finding_traffic.go | GO | 16 KB |
| README.md | MD | 15 KB |
| assets.go | GO | 15 KB |
| client.go | GO | 15 KB |
| prompt.go | GO | 15 KB |
| auth.go | GO | 15 KB |
| payload.so | ELF | 15 KB |
| traffic_store_test.go | GO | 15 KB |
| task_context_lock_test.go | GO | 15 KB |
| goals.go | GO | 15 KB |
| intercept.go | GO | 14 KB |
| promptcatalog.go | GO | 14 KB |
| finding_workflow_test.go | GO | 14 KB |
| mw.html | HTML | 14 KB |
| assembly.go | GO | 14 KB |
| sync_scopesentry.go | GO | 14 KB |
| insert_assets_test.go | GO | 14 KB |
| p1panel.zip | ZIP | 14 KB |
| task_assets.go | GO | 14 KB |
| finding_merge_test.go | GO | 14 KB |
| recon_test.go | GO | 13 KB |
| side_questions_test.go | GO | 13 KB |
| ‹redacted›.mod | MOD | 13 KB |
| traffic_test.go | GO | 13 KB |
| selfupdate_test.go | GO | 13 KB |
| company_scope_test.go | GO | 13 KB |
| http_shell_enc_test.go | GO | 13 KB |
| finding_merge.go | GO | 13 KB |
| http_shell_enc.go | GO | 13 KB |
| context_test.go | GO | 13 KB |
| mainagent.go | GO | 12 KB |
| finding_traffic.go | GO | 12 KB |
| suo5.go | GO | 12 KB |
| store.go | GO | 12 KB |
| commands.go | GO | 12 KB |
| platform_tools.go | GO | 12 KB |
| probe.go | GO | 12 KB |
| chat_mentions_test.go | GO | 12 KB |
| mainagent.go | GO | 12 KB |
| findings_groups_test.go | GO | 12 KB |
| context.go | GO | 12 KB |
| companies_test.go | GO | 12 KB |
| stage.go | GO | 12 KB |
| finding_retests_test.go | GO | 11 KB |
| intranet_test.go | GO | 11 KB |
| exploration_sources.go | GO | 11 KB |
| gate.go | GO | 11 KB |
| llmrec.go | GO | 11 KB |
| pool_test.go | GO | 11 KB |
| README.md | MD | 11 KB |
| finding_checks.go | GO | 11 KB |
| update.go | GO | 11 KB |
| scheduler.go | GO | 11 KB |
| FUTURE.md | MD | 11 KB |
| goals.go | GO | 11 KB |
| triggers.go | GO | 11 KB |
| conversation.go | GO | 11 KB |
| LICENSE | TXT | 11 KB |
| mj.js | JS | 10 KB |
| toolcatalog.go | GO | 10 KB |
| pool.go | GO | 10 KB |
| store_test.go | GO | 10 KB |
| task_delete_barrier_test.go | GO | 10 KB |
| stage.go | GO | 10 KB |
| ROADMAP.md | MD | 10 KB |
| engine_timeout.go | GO | 10 KB |
| side_questions.go | GO | 10 KB |
| finding_checks.go | GO | 10 KB |
| sidequestion_test.go | GO | 10 KB |
| coldgraph.go | GO | 10 KB |
| bootstrap.go | GO | 10 KB |
| finding_retests.go | GO | 10 KB |
| stuck_test.go | GO | 10 KB |
| CVE-2025-54424.py | PY | 10 KB |
| fakeshell_test.go | GO | 9 KB |
| tools_digest.go | GO | 9 KB |
| goals.go | GO | 9 KB |
| wrapup.go | GO | 9 KB |
| reverse_e2e_test.go | GO | 9 KB |
| health.go | GO | 9 KB |
| POSTMORTEM-RED-SUN-3.md | MD | 9 KB |
| plan.go | GO | 9 KB |
| guard.go | GO | 9 KB |
| reset-password.sh | SH | 9 KB |
| credentials.go | GO | 9 KB |
| gate_test.go | GO | 9 KB |
| manager_delete_files_test.go | GO | 9 KB |
| task_assets_context.go | GO | 9 KB |
| llm_usage.go | GO | 9 KB |
| calltimeout_test.go | GO | 9 KB |
| intent_control_test.go | GO | 9 KB |
| auth_test.go | GO | 8 KB |
| build.sh | SH | 8 KB |
| stage.go | GO | 8 KB |
| stuck.go | GO | 8 KB |
| README-FORK.md | MD | 8 KB |
| reverse_test.go | GO | 8 KB |
| finding_assets_test.go | GO | 8 KB |
| fs_main.html | HTML | 8 KB |
| task_control.go | GO | 8 KB |
| chains_etl.py | PY | 8 KB |
| toolcatalog.go | GO | 8 KB |
| assets_scope_test.go | GO | 8 KB |
| taskproxy.go | GO | 8 KB |
| ldpreload_x86_64.so | ELF | 8 KB |
| company_scope_consistency_test.go | GO | 8 KB |
| chat.go | GO | 8 KB |
| task_categories.go | GO | 8 KB |
| stage_test.go | GO | 8 KB |
| llmpool.go | GO | 8 KB |
| session_recon.go | GO | 8 KB |
| config.go | GO | 8 KB |
| company_scope.go | GO | 8 KB |
| review_context_test.go | GO | 8 KB |
| workspace.go | GO | 8 KB |
| capture.go | GO | 8 KB |
| tools.go | GO | 8 KB |
| finding_workflow.go | GO | 7 KB |
| skill_upload_test.go | GO | 7 KB |
| udf.so | ELF | 7 KB |
| finding_retests_test.go | GO | 7 KB |
| fact_confidence_test.go | GO | 7 KB |
| finding_retests.go | GO | 7 KB |
| digest.go | GO | 7 KB |
| finding_workflow.go | GO | 7 KB |
| exploration_test.go | GO | 7 KB |
| findings.go | GO | 7 KB |
| task_templates.go | GO | 7 KB |
| auth_test.go | GO | 7 KB |
| archive.go | GO | 7 KB |
| task_archive_package_test.go | GO | 7 KB |
| pw.txt | TXT | 7 KB |
| enrich.go | GO | 7 KB |
| credentials.go | GO | 7 KB |
| sessions.go | GO | 7 KB |
| bypass_test.go | GO | 7 KB |
| intranet_probe_test.go | GO | 7 KB |
| coldgraph_test.go | GO | 7 KB |
| task_categories.go | GO | 6 KB |
| shellgen.go | GO | 6 KB |
| skill_usage.go | GO | 6 KB |
| probe_test.go | GO | 6 KB |
| task_assets_test.go | GO | 6 KB |
| engine_cancelcause_test.go | GO | 6 KB |
| honeydetect.go | GO | 6 KB |
| calltimeout.go | GO | 6 KB |
| terminalreason_test.go | GO | 6 KB |
| install.sh | SH | 6 KB |
| intercept_live_test.go | GO | 6 KB |
| cancelcause.go | GO | 6 KB |
| finding_anchor.go | GO | 6 KB |
| config_test.go | GO | 6 KB |
| terminalreason.go | GO | 6 KB |
| tools-manifest.json | JSON | 6 KB |
| selfupdate.go | GO | 6 KB |
| tunnels.go | GO | 6 KB |
| autoallow_test.go | GO | 6 KB |
| task_delete_concurrency_test.go | GO | 5 KB |
| health.go | GO | 5 KB |
| trace.go | GO | 5 KB |
| task_templates_test.go | GO | 5 KB |
| review_context_test.go | GO | 5 KB |
| findings_groups.go | GO | 5 KB |
| core_test.go | GO | 5 KB |
| task_categories_test.go | GO | 5 KB |
| suo5_test.go | GO | 5 KB |
| chat_mentions.go | GO | 5 KB |
| CHAINS-INTEGRATION-DESIGN.md | MD | 5 KB |
| credstore_test.go | GO | 5 KB |
| logsink.go | GO | 5 KB |
| bypass.go | GO | 5 KB |
| taskproxy_test.go | GO | 5 KB |
| capture.go | GO | 5 KB |
| chatupload.go | GO | 5 KB |
| plan_test.go | GO | 5 KB |
| engine_emptyturn_test.go | GO | 5 KB |
| intercept_detail_test.go | GO | 5 KB |
| session.go | GO | 5 KB |
| AB-REPORT-RED-SUN-3.md | MD | 5 KB |
| intent_delete_test.go | GO | 5 KB |
| pendingscope.go | GO | 5 KB |
| customtool_test.go | GO | 5 KB |
| activity_page_test.go | GO | 5 KB |
| trace_test.go | GO | 5 KB |
| roe.go | GO | 5 KB |
| socks5.go | GO | 5 KB |
| handoff.go | GO | 5 KB |
| archive_test.go | GO | 5 KB |
| egress_test.go | GO | 5 KB |
| intercept_execution_test.go | GO | 5 KB |
| goals_api.go | GO | 5 KB |
| CODE_OF_CONDUCT.md | MD | 5 KB |
| prompt_test.go | GO | 5 KB |
| constraints_api.go | GO | 5 KB |
| capture_approval_test.go | GO | 5 KB |
| sessions_test.go | GO | 4 KB |
| update_test.go | GO | 4 KB |
| tools_dispatch.go | GO | 4 KB |
| commands.go | GO | 4 KB |
| minisign.go | GO | 4 KB |
| intent_intervention.go | GO | 4 KB |
| intercept_filter_test.go | GO | 4 KB |
| manifest.go | GO | 4 KB |
| intercept_detail_test.go | GO | 4 KB |
| README.md | MD | 4 KB |
| intercept_detail.go | GO | 4 KB |
| minisign_test.go | GO | 4 KB |
| credential_score.go | GO | 4 KB |
| llmrec_raw_test.go | GO | 4 KB |
| honeydetect_test.go | GO | 4 KB |
| github.go | GO | 4 KB |
| llmretry.go | GO | 4 KB |
| fs_admin.html | HTML | 4 KB |
| llmretry.go | GO | 4 KB |
| capture.go | GO | 4 KB |
| shellgen_test.go | GO | 4 KB |
| portaudit.go | GO | 4 KB |
| task_templates.go | GO | 4 KB |
| passthrough_test.go | GO | 4 KB |
| chat_mentions.go | GO | 4 KB |
| call_timeout_test.go | GO | 4 KB |
| llmretry_test.go | GO | 4 KB |
| finding_anchor_test.go | GO | 4 KB |
| side_questions_test.go | GO | 4 KB |
| skill_zip.go | GO | 4 KB |
| exploration_tokens_test.go | GO | 4 KB |
| provider_capture_e2e_test.go | GO | 4 KB |
| triggers.go | GO | 4 KB |
| intercept_execution.go | GO | 4 KB |
| scope.go | GO | 4 KB |
| assembly.go | GO | 4 KB |
| provider_quota_test.go | GO | 4 KB |
| extract.go | GO | 4 KB |
| llmrec_test.go | GO | 3 KB |
| request.go | GO | 3 KB |
| trigger_merge_test.go | GO | 3 KB |
| scope_test.go | GO | 3 KB |
| update.sh | SH | 3 KB |
| nkey.go | GO | 3 KB |
| tools_wire_test.go | GO | 3 KB |
| inheritance_dto_test.go | GO | 3 KB |
| capture_usage_test.go | GO | 3 KB |
| erl33.py | PY | 3 KB |
| tarpit.go | GO | 3 KB |
| assembly.go | GO | 3 KB |
| CHANGELOG | TXT | 3 KB |
| intent_watchdog.go | GO | 3 KB |
| honeypot.go | GO | 3 KB |
| erl33.zip | ZIP | 3 KB |
| provider_capture_test.go | GO | 3 KB |
| pending_scope.go | GO | 3 KB |
| task_metadata_test.go | GO | 3 KB |
| prompt.go | GO | 3 KB |
| findings_test.go | GO | 3 KB |
| intercept_filter_test.go | GO | 3 KB |
| chat_llm_resolve_test.go | GO | 3 KB |
| pending_scope_test.go | GO | 3 KB |
| finding_recorder_test.go | GO | 3 KB |
| task_templates_test.go | GO | 3 KB |
| mgmt_test.go | GO | 3 KB |
| llmretry_test.go | GO | 3 KB |
| task_list_performance_test.go | GO | 3 KB |
| intent_dispatch.go | GO | 3 KB |
| task_resolution.go | GO | 3 KB |
| config_max_tokens_test.go | GO | 3 KB |
| roe_test.go | GO | 3 KB |
| egress.go | GO | 3 KB |
| prompt_test.go | GO | 3 KB |
| intercept_review_test.go | GO | 3 KB |
| api22.json | JSON | 3 KB |
| db_test.go | GO | 3 KB |
| capture_test.go | GO | 3 KB |
| redis_rogue.log | LOG | 3 KB |
| evidence.go | GO | 3 KB |
| g_rtcp.log | LOG | 3 KB |
| tools_dispatch_test.go | GO | 3 KB |
| autoallow.go | GO | 3 KB |
| honeypot.go | GO | 3 KB |
| manager_lifecycle_test.go | GO | 3 KB |
| autoallow_test.go | GO | 3 KB |
| lw_payload.json | JSON | 3 KB |
| deferred_test.go | GO | 3 KB |
| README.md | MD | 2 KB |
| finding_traffic_export.go | GO | 2 KB |
| intent_dispatch_test.go | GO | 2 KB |
| client_sse_test.go | GO | 2 KB |
| skill_usage_test.go | GO | 2 KB |
| task_assets.go | GO | 2 KB |
| portaudit_test.go | GO | 2 KB |
| browser_mcp_proxy_test.go | GO | 2 KB |
| intent_watchdog_test.go | GO | 2 KB |
| task_categories_test.go | GO | 2 KB |
| assembly_test.go | GO | 2 KB |
| k.py | PY | 2 KB |
| inheritance_api_test.go | GO | 2 KB |
| livewire_exploit.py | PY | 2 KB |
| task_metadata_test.go | GO | 2 KB |
| task_archive_aggregate_stats.go | GO | 2 KB |
| egress.go | GO | 2 KB |
| toolcatalog_test.go | GO | 2 KB |
| task_archives_test.go | GO | 2 KB |
| mcpdiscover.go | GO | 2 KB |
| credscore_test.go | GO | 2 KB |
| constraints.go | GO | 2 KB |
| fs_crack.py | PY | 2 KB |
| verifier.go | GO | 2 KB |
| skill_usage.go | GO | 2 KB |
| review_context.go | GO | 2 KB |
| untrusted.go | GO | 2 KB |
| intercept_rules_v4_test.go | GO | 2 KB |
| report.go | GO | 2 KB |
| proxy_test.go | GO | 2 KB |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 1.234.83.89 | confirmed |
| 101.36.112.205 | confirmed |
| 102.209.224.40 | confirmed |
| 103.117.136.137 | confirmed |
| 103.131.51.199 | confirmed |
| 103.133.216.219 | confirmed |
| 103.195.188.128 | confirmed |
| 103.254.63.94 | confirmed |
| 103.35.216.13 | confirmed |
| 104.192.42.94 | confirmed |
| 104.200.73.97 | confirmed |
| 104.223.62.197 | confirmed |
| 104.233.217.108 | confirmed |
| 104.248.244.66 | confirmed |
| 106.52.174.151 | confirmed |