huntback / IP intelligence
39.99.242.80
Intelligence
ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8080
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested128 file(s), 59296 KB · elf-binary, exploit, exposed-secret, malware, mozi, tunnel
Open directory contents (128)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| mongodb-scanner-linux-amd64 | ELF | 8.3 MB |
| pricking | ELF | 6.0 MB |
| state.sqlite3 | SQLITE | 5.4 MB |
| state.sqlite3 | SQLITE | 5.1 MB |
| state.sqlite3 | SQLITE | 3.7 MB |
| state.sqlite3 | SQLITE | 3.7 MB |
| state.sqlite3 | SQLITE | 3.7 MB |
| orchestrator_50w_v5.log | LOG | 3.4 MB |
| ffuf_2.1.0_linux_amd64.tar.gz | GZ | 3.3 MB |
| pricking_0.3.6_linux_amd64.tar.gz | GZ | 2.5 MB |
| dirsearch.zip | ZIP | 1.9 MB |
| get-pip.py | PY | 1.8 MB |
| THIRD_PARTY_NOTICES | TXT | 1.8 MB |
| targets.txt | TXT | 1.5 MB |
| ser.tar.gz | GZ | 653 KB |
| check1.json | JSON | 644 KB |
| check.json | JSON | 644 KB |
| ‹redacted›.ndjson.gz | GZ | 596 KB |
| ‹redacted›.jar | JAR | 450 KB |
| scanner.log | LOG | 405 KB |
| .sbom.json | JSON | 351 KB |
| errors.log | LOG | 343 KB |
| rpmdb.sqlite | SQLITE | 212 KB |
| orchestrator.py | PY | 201 KB |
| request_failed.csv | CSV | 196 KB |
| ‹redacted›.pyc | PYC | 134 KB |
| fail.txt | TXT | 117 KB |
| worker_agent.py | PY | 70 KB |
| worker_agent.py | PY | 70 KB |
| forignerUser.txt | TXT | 69 KB |
| CVE-2025-55182-main.zip | ZIP | 62 KB |
| state.sqlite3 | SQLITE | 48 KB |
| .bash_history | BASH_H | 47 KB |
| success.txt_1 | TXT_1 | 37 KB |
| req.py | PY | 37 KB |
| rpmdb.sqlite-shm | SQLITE | 32 KB |
| .viminfo | VIMINF | 27 KB |
| watcher.log | LOG | 25 KB |
| watcher.py | PY | 23 KB |
| get-docker.sh | SH | 21 KB |
| test-docker.sh | SH | 21 KB |
| README.md | MD | 19 KB |
| README.md | MD | 17 KB |
| LICENSE-crypt-library | TXT | 17 KB |
| dirty | ELF | 16 KB |
| httpx.tar.gz | GZ | 16 KB |
| sudo-hax-me-a-sandwich | ELF | 16 KB |
| P0P_SH3LLZ_%20.so.2 | ELF | 15 KB |
| prd.md | MD | 14 KB |
| .config.php.swp | SWP | 12 KB |
| ohmybackup-master.zip | ZIP | 11 KB |
| ‹redacted›.sum | SUM | 10 KB |
| config.yaml | YAML | 10 KB |
| README.md | MD | 9 KB |
| pwdstrange.txt | TXT | 7 KB |
| mongosh.1.gz | GZ | 6 KB |
| test.py | PY | 5 KB |
| config.json | JSON | 5 KB |
| README.md | MD | 4 KB |
| dirty.c | C | 4 KB |
| mongodb_unauth.py | PY | 4 KB |
| hax.c | C | 4 KB |
| CVE-2021-3156-main.zip | ZIP | 4 KB |
| poc.py | PY | 4 KB |
| poc.py | PY | 4 KB |
| reportleak.py | PY | 3 KB |
| top500.txt | TXT | 3 KB |
| config.yml | YML | 3 KB |
| version_check.py | PY | 3 KB |
| MSG.py | PY | 3 KB |
| check_wat_sizes.sh | SH | 3 KB |
| CHANGELOG.md | MD | 2 KB |
| payload.txt | TXT | 2 KB |
| CONTRIBUTORS.md | MD | 2 KB |
| start.sh | SH | 2 KB |
| endecrypt.py | PY | 2 KB |
| config.yaml | YAML | 2 KB |
| 2025-12-10T07_47_58_111Z-debug-0.log | LOG | 2 KB |
| passwordgen.py | PY | 2 KB |
| config.yaml | YAML | 1 KB |
| brute.sh | SH | 1 KB |
| README.md | MD | 1 KB |
| scan_alive.sh | SH | 1 KB |
| run_scan.sh | SH | 1 KB |
| readfile.py | PY | 1 KB |
| id.py | PY | 1 KB |
| finalsplit.py | PY | 1 KB |
| requirements.txt | TXT | 1 KB |
| main.go | GO | 1 KB |
| dirsearch.py | PY | 1 KB |
| install.sh | SH | 1 KB |
| monitor_progress.sh | SH | 1 KB |
| config.php | PHP | 1 KB |
| clean_domains.sh | SH | 1 KB |
| check.py | PY | 1 KB |
| main.py | PY | 1 KB |
| README.md | MD | 1 KB |
| README.md | MD | 1 KB |
| config.json | JSON | 1003 B |
| acsniff.py | PY | 918 B |
| fp_select_part1.zip | ZIP | 914 B |
| fp.zip | ZIP | 885 B |
| finalpass.txt | TXT | 816 B |
| init-db.js | JS | 733 B |
| .gitignore | GITIGN | 506 B |
| config.yaml | YAML | 504 B |
| test.py | PY | 460 B |
| run.sh | SH | 459 B |
| brute.sh | SH | 448 B |
| conf.tar.gz | GZ | 437 B |
| provider-config.yaml | YAML | 408 B |
| lib.c | C | 407 B |
| docker-compose.yml | YML | 291 B |
| config | TXT | 274 B |
| config | TXT | 265 B |
| Makefile | TXT | 264 B |
| .gitignore | GITIGN | 224 B |
| leaked_memory.bin | BIN | 163 B |
| leaked_memory.bin | BIN | 162 B |
| config | TXT | 140 B |
| .gitignore | GITIGN | 136 B |
| .gitignore | GITIGN | 125 B |
| packed-refs | TXT | 114 B |
| packed-refs | TXT | 112 B |
| requirements.txt | TXT | 82 B |
| description | TXT | 73 B |
| HEAD | TXT | 23 B |
| HEAD | TXT | 21 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 1.234.83.89 | confirmed |
| 101.36.112.205 | confirmed |
| 101.89.149.227 | confirmed |
| 102.209.224.40 | confirmed |
| 103.131.51.199 | confirmed |
| 103.131.61.143 | confirmed |
| 103.133.216.219 | confirmed |
| 103.163.246.138 | confirmed |
| 103.195.188.128 | confirmed |
| 103.254.63.94 | confirmed |
| 103.35.216.13 | confirmed |
| 103.73.189.190 | confirmed |
| 103.80.88.106 | confirmed |
| 104.131.161.161 | confirmed |
| 104.131.59.223 | confirmed |