huntback / IP intelligence

43.163.124.78

DATACENTERloot-ipc2elf-binaryexploitexposed-secretforced-loot

Intelligence

ASN / OrgAS132203 · Shenzhen Tencent Computer Systems Company Limited
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 8085, 8081
ServiceSimpleHTTP/0.6 Python/3.14.6 · Directory listing for /
Loot harvested81 file(s), 35707 KB · c2, elf-binary, exploit, exposed-secret, forced-loot, gafgyt

Open directory contents (81)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
npcamd64TXT14.6 MB
modules_metadata.jsonJSON10.7 MB
cves.jsonJSON2.1 MB
‹redacted›.elfELF1.6 MB
.checksumCHECKS1.4 MB
.templates-indexTEMPLA1.2 MB
templates-checksum.txtTXT1.1 MB
module_metadata_cache.jsonJSON939 KB
npcamd64TXT398 KB
TEMPLATES-STATS.jsonJSON305 KB
framework.logLOG59 KB
zcompdumpTXT52 KB
development.logLOG42 KB
zabbix.txtTXT37 KB
link.txtTXT36 KB
interpreter.pyPY25 KB
.zsh_historyZSH_HI19 KB
.zsh_historyZSH_HI19 KB
scan.logLOG19 KB
TEMPLATE-CREATION-GUIDE.mdMD14 KB
config.yamlYAML14 KB
exploit.pyPY13 KB
TEMPLATE-REVIEW-GUIDE.mdMD12 KB
run_exploit.shSH11 KB
CONTRIBUTING.mdMD11 KB
.zshrcZSHRC10 KB
poc.pyPY9 KB
README.mdMD7 KB
output.txtTXT7 KB
linksys_themoon_exec.rbRB7 KB
README_JA.mdMD6 KB
README_KR.mdMD6 KB
setup_venv.shSH5 KB
.bashrcBASHRC5 KB
README_CN.mdMD5 KB
.new-additionsNEW-AD4 KB
README.mdMD3 KB
test_module_info.pyPY2 KB
conftest.pyPY2 KB
packed-refsTXT1 KB
reporting-config.yaml1 KB
test_exploit_scenarios.pyPY1 KB
upload_safe.shSH1 KB
CONTRIBUTING.mdMD1 KB
default_config.jsonJSON1 KB
PULL_REQUEST_TEMPLATE.mdMD1 KB
setup.pyPY1 KB
.nuclei-ignore1 KB
upload.shSH1 KB
zabbix-default-login.yamlYAML1 KB
historyTXT1 KB
MakefileTXT1 KB
.gitignoreGITIGN888 B
rsf.pyPY846 B
20260927000057_default_161.81.118.121_dlink.dir850l.lo_589874.txtTXT726 B
20260926235925_default_39.127.125.110_dlink.dir850l.lo_211766.txtTXT723 B
PULL_REQUEST_TEMPLATE.mdMD693 B
.templates-config.jsonJSON586 B
install.shSH510 B
921.pyPY390 B
activate_exploit.shSH367 B
configTXT333 B
‹redacted›.elfELF272 B
‹redacted›.elfELF272 B
‹redacted›.elfELF268 B
‹redacted›.elfELF268 B
‹redacted›.elfELF268 B
‹redacted›.elfELF268 B
configTXT268 B
‹redacted›.elfELF256 B
‹redacted›.elfELF256 B
‹redacted›.elfELF256 B
provider-config.yaml219 B
run.shSH211 B
‹redacted›.elfELF194 B
deactivate_exploit.shSH172 B
packed-refsTXT114 B
descriptionTXT73 B
requirements.txtTXT48 B
HEADTXT23 B
meterpreter_historyTXT6 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
103.131.51.199confirmed
103.163.246.138confirmed
103.73.189.190confirmed
107.189.1.175confirmed
114.80.34.158confirmed
115.29.202.62confirmed
117.196.219.39confirmed
118.25.25.81confirmed
122.166.178.204confirmed
128.30.224.82confirmed
129.121.75.86confirmed
13.203.145.129confirmed
13.203.202.168confirmed
137.184.111.86confirmed