huntback / IP intelligence

39.99.242.80

DATACENTERoperator-submittedloot-ipelf-binaryexploitexposed-secretmalware

Intelligence

ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8080
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested128 file(s), 59296 KB · elf-binary, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (128)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
mongodb-scanner-linux-amd64ELF8.3 MB
prickingELF6.0 MB
state.sqlite3SQLITE5.4 MB
state.sqlite3SQLITE5.1 MB
state.sqlite3SQLITE3.7 MB
state.sqlite3SQLITE3.7 MB
state.sqlite3SQLITE3.7 MB
orchestrator_50w_v5.logLOG3.4 MB
ffuf_2.1.0_linux_amd64.tar.gzGZ3.3 MB
pricking_0.3.6_linux_amd64.tar.gzGZ2.5 MB
dirsearch.zipZIP1.9 MB
get-pip.pyPY1.8 MB
THIRD_PARTY_NOTICESTXT1.8 MB
targets.txtTXT1.5 MB
ser.tar.gzGZ653 KB
check1.jsonJSON644 KB
check.jsonJSON644 KB
‹redacted›.ndjson.gzGZ596 KB
‹redacted›.jarJAR450 KB
scanner.logLOG405 KB
.sbom.jsonJSON351 KB
errors.logLOG343 KB
rpmdb.sqliteSQLITE212 KB
orchestrator.pyPY201 KB
request_failed.csvCSV196 KB
‹redacted›.pycPYC134 KB
fail.txtTXT117 KB
worker_agent.pyPY70 KB
worker_agent.pyPY70 KB
forignerUser.txtTXT69 KB
CVE-2025-55182-main.zipZIP62 KB
state.sqlite3SQLITE48 KB
.bash_historyBASH_H47 KB
success.txt_1TXT_137 KB
req.pyPY37 KB
rpmdb.sqlite-shmSQLITE32 KB
.viminfoVIMINF27 KB
watcher.logLOG25 KB
watcher.pyPY23 KB
get-docker.shSH21 KB
test-docker.shSH21 KB
README.mdMD19 KB
README.mdMD17 KB
LICENSE-crypt-libraryTXT17 KB
dirtyELF16 KB
httpx.tar.gzGZ16 KB
sudo-hax-me-a-sandwichELF16 KB
P0P_SH3LLZ_%20.so.2ELF15 KB
prd.mdMD14 KB
.config.php.swpSWP12 KB
ohmybackup-master.zipZIP11 KB
‹redacted›.sumSUM10 KB
config.yamlYAML10 KB
README.mdMD9 KB
pwdstrange.txtTXT7 KB
mongosh.1.gzGZ6 KB
test.pyPY5 KB
config.jsonJSON5 KB
README.mdMD4 KB
dirty.cC4 KB
mongodb_unauth.pyPY4 KB
hax.cC4 KB
CVE-2021-3156-main.zipZIP4 KB
poc.pyPY4 KB
poc.pyPY4 KB
reportleak.pyPY3 KB
top500.txtTXT3 KB
config.ymlYML3 KB
version_check.pyPY3 KB
MSG.pyPY3 KB
check_wat_sizes.shSH3 KB
CHANGELOG.mdMD2 KB
payload.txtTXT2 KB
CONTRIBUTORS.mdMD2 KB
start.shSH2 KB
endecrypt.pyPY2 KB
config.yamlYAML2 KB
2025-12-10T07_47_58_111Z-debug-0.logLOG2 KB
passwordgen.pyPY2 KB
config.yamlYAML1 KB
brute.shSH1 KB
README.mdMD1 KB
scan_alive.shSH1 KB
run_scan.shSH1 KB
readfile.pyPY1 KB
id.pyPY1 KB
finalsplit.pyPY1 KB
requirements.txtTXT1 KB
main.goGO1 KB
dirsearch.pyPY1 KB
install.shSH1 KB
monitor_progress.shSH1 KB
config.phpPHP1 KB
clean_domains.shSH1 KB
check.pyPY1 KB
main.pyPY1 KB
README.mdMD1 KB
README.mdMD1 KB
config.jsonJSON1003 B
acsniff.pyPY918 B
fp_select_part1.zipZIP914 B
fp.zipZIP885 B
finalpass.txtTXT816 B
init-db.jsJS733 B
.gitignoreGITIGN506 B
config.yamlYAML504 B
test.pyPY460 B
run.shSH459 B
brute.shSH448 B
conf.tar.gzGZ437 B
provider-config.yamlYAML408 B
lib.cC407 B
docker-compose.ymlYML291 B
configTXT274 B
configTXT265 B
MakefileTXT264 B
.gitignoreGITIGN224 B
leaked_memory.binBIN163 B
leaked_memory.binBIN162 B
configTXT140 B
.gitignoreGITIGN136 B
.gitignoreGITIGN125 B
packed-refsTXT114 B
packed-refsTXT112 B
requirements.txtTXT82 B
descriptionTXT73 B
HEADTXT23 B
HEADTXT21 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
101.36.112.205confirmed
101.89.149.227confirmed
102.209.224.40confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.133.216.219confirmed
103.163.246.138confirmed
103.195.188.128confirmed
103.254.63.94confirmed
103.35.216.13confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed
104.131.59.223confirmed