huntback / IP intelligence

47.102.192.23

DATACENTERoperator-submittedloot-ipelf-binaryexploitexposed-secretgafgyt

Intelligence

ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8180, 8880, 9876, 9999, 80, 9094, 19877, 111, 2049
Servicenginx/1.18.0 (Ubuntu)
Productsnginx, apache
Loot harvested484 file(s), 3134327 KB · elf-binary, exploit, exposed-secret, gafgyt, malware, mozi

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
http8888.logLOG2197.6 MB
ai-pentest-frameworks.tar.gzGZ570.2 MB
ai-pentest-frameworks.tar.gzGZ123.1 MB
‹redacted›.jarJAR56.8 MB
fsELF32.5 MB
http1ELF17.2 MB
Supershell.tar.gzGZ7.7 MB
Ali4ELF6.1 MB
hijackELF5.7 MB
okoELF5.6 MB
devELF5.0 MB
browserELF4.1 MB
s5ELF3.9 MB
Nxploited.zipZIP3.3 MB
akELF3.2 MB
l_sgELF2.7 MB
l_pmELF1.8 MB
aksk10_out.txtTXT1.7 MB
amd64ELF1.3 MB
dnslogELF920 KB
cn.exePE815 KB
msvcr100.dllPE809 KB
lldb.dllPE582 KB
systemd-helperELF469 KB
lua51.dllPE441 KB
urls.txtTXT429 KB
deploy.zipZIP415 KB
classELF412 KB
class1ELF389 KB
amass.logLOG324 KB
sqli_scan_v2.logLOG285 KB
libepsbase.dllPE256 KB
whhra_findtable.logLOG237 KB
whhra_guess.logLOG209 KB
whhra_findtable_out.logLOG183 KB
AI_PENTEST_ALL_PROMPTS.mdMD182 KB
e5_twostep_run.logLOG179 KB
gitlab_passwords.txtTXT158 KB
.bash_historyBASH_H146 KB
whhra_guess_out.logLOG145 KB
url.txtTXT126 KB
189cn_pentest_log.txtTXT122 KB
nmap_all_results.txtTXT115 KB
wp-config-sample.phpPHP114 KB
settings.phpPHP114 KB
aa.tar.gzGZ108 KB
e5_jsp_run.logLOG107 KB
aaa.tar.gzGZ106 KB
ssout2_wzegtTXT84 KB
ssout1_wzegtTXT84 KB
03-17-x64.binELF84 KB
ds_full_log.txtTXT72 KB
sqli_org.logLOG72 KB
111.binELF62 KB
sqli_precise.logLOG61 KB
sqli_v3_org.logLOG54 KB
output.tar.gzGZ51 KB
e5_nohit_run.logLOG49 KB
nmap_svc_101.226.7.143.txtTXT45 KB
e5_twostep_results.jsonJSON44 KB
aksk12_out.txtTXT36 KB
nb.txtTXT35 KB
lloader.exePE35 KB
whhra_blind2.logLOG32 KB
CORUNA_PER_CVE_DEEP_ANALYSIS.mdMD32 KB
10yan.zipZIP31 KB
docker_build.logLOG30 KB
cve-2026-23918-rce.pyPY27 KB
sqli_org.pyPY25 KB
whhra_blind.logLOG24 KB
CORUNA_DEEP_ANALYSIS.mdMD22 KB
full_recon_output.txtTXT21 KB
‹redacted›.jspJSP21 KB
ng.txtTXT21 KB
sqli_precise.pyPY21 KB
AI_PENTEST_METHODOLOGY.mdMD20 KB
manual_verify.logLOG20 KB
1.zipZIP19 KB
sqli_v3_org.pyPY19 KB
sqli_v3.pyPY19 KB
‹redacted›.pycPYC19 KB
sqli_v3.logLOG16 KB
nmap_112.64.213.194.txtTXT15 KB
nmap_file_dcl.txtTXT15 KB
123.txtTXT14 KB
sqli_scan.pyPY14 KB
whhra_blind3.logLOG13 KB
founder_e5_cookie_ntfs_upload.pyPY13 KB
cve-2026-23918-batch.pyPY13 KB
sma_test_result.txtTXT13 KB
deep_verify.pyPY13 KB
cmstop_fix3.pyPY12 KB
build_v2.pyPY12 KB
ver.htmlHTML12 KB
union.htmlHTML12 KB
normal.htmlHTML12 KB
cve-2026-33032-scan.pyPY11 KB
cve-2026-41409-batch.pyPY11 KB
sqlmap_cows.txtTXT10 KB
dama_build.pyPY10 KB
waf_bypass.pyPY9 KB
manual_verify.pyPY9 KB
111.pyPY9 KB
bttmp.pyPY9 KB
whhra_guess3.logLOG9 KB
sqli_scan_v2.pyPY9 KB
whhra_findtable.pyPY9 KB
cmstop_focus.pyPY9 KB
sma_v3.pyPY8 KB
known_hostsTXT8 KB
cmstop_final.pyPY8 KB
aksk11_out.txtTXT8 KB
sma_vuln_test.pyPY8 KB
e5_waf_dropper.pyPY8 KB
sqlmap_itss.txtTXT8 KB
cmstop_analyze.pyPY8 KB
sqlmap_jtqy.txtTXT8 KB
cmstop_diag.pyPY8 KB
e5_include_upload.pyPY7 KB
e5_nohit_results.jsonJSON7 KB
full_recon.shSH7 KB
foton_recon.shSH7 KB
sma_v2.pyPY7 KB
hebtdxh_exploit.pyPY7 KB
sc_aksk14.pyPY6 KB
‹redacted›.jspJSP6 KB
sc_aksk13.pyPY6 KB
cmstop_genlog.pyPY6 KB
cmstop_batch.pyPY6 KB
sma_deep_test.pyPY6 KB
sc_aksk17.pyPY6 KB
whhra_guess2.pyPY6 KB
whhra_guess.pyPY6 KB
sc_aksk7.pyPY6 KB
db_more24.pyPY6 KB
TRS_WCM_V6_AUDIT.mdMD6 KB
cmstop_last.pyPY5 KB
blind_extract.pyPY5 KB
e5_waf_bypass_exploit.pyPY5 KB
shiro_fast.pyPY5 KB
gitlab_explore.pyPY5 KB
cmstop_exploit_final.pyPY5 KB
sc_aksk12.pyPY5 KB
db_more26.pyPY5 KB
db_more27.pyPY5 KB
whhra_guess3.pyPY5 KB
foton_jenkins_dump.pyPY5 KB
e5_jsp_results.jsonJSON5 KB
e5_nohit_uploadicon.pyPY5 KB
‹redacted›.min.phpPHP5 KB
AUDIT_REPORT.mdMD5 KB
db_more35.pyPY5 KB
cve_deep.pyPY5 KB
db_more34.pyPY5 KB
cve_trace.pyPY5 KB
cmstop_direct.pyPY5 KB
e5v6_zipslip_remote.pyPY5 KB
db_more19.pyPY5 KB
sc_aksk10.pyPY4 KB
e5_batch_twostep.pyPY4 KB
db_more11.pyPY4 KB
db_more20.pyPY4 KB
db_more22.pyPY4 KB
5157.tar.gzGZ4 KB
gitlab_final.pyPY4 KB
db_more28.pyPY4 KB
cve_2026_debug.pyPY4 KB
gitlab_explore2.pyPY4 KB
db_more25.pyPY4 KB
cnki_recon.shSH4 KB
sc27.pyPY4 KB
db_more36.pyPY4 KB
sc14.pyPY4 KB
foton_recon_out.txtTXT4 KB
e5_batch_targets.txtTXT4 KB
sc32.pyPY4 KB
db_more14.pyPY4 KB
sc28.pyPY4 KB
cmstop_jxntv.pyPY4 KB
gitlab_login.pyPY4 KB
cve_final.pyPY4 KB
db_more15.pyPY4 KB
whhra_guess3_out.logLOG4 KB
sc26.pyPY4 KB
gitlab_getfiles.pyPY4 KB
db_more31.pyPY4 KB
sc50.pyPY4 KB
sc_aksk16.pyPY4 KB
123.shSH4 KB
sc_aksk11.pyPY4 KB
e5_batch_jsp_upload.pyPY3 KB
sc13.pyPY3 KB
sc_aksk3.pyPY3 KB
cve_2026_1340_poc.pyPY3 KB
db_more33.pyPY3 KB
sc25.pyPY3 KB
whhra_blind3.pyPY3 KB
cmstop_bypass.pyPY3 KB
e5_waf_xpcmd.pyPY3 KB
sc_aksk15.pyPY3 KB
sc24.pyPY3 KB
e5_waf_bypass_test.pyPY3 KB
db_more12.pyPY3 KB
whhra_blind2.pyPY3 KB
db_more29.pyPY3 KB
sqlmap_bicc.txtTXT3 KB
whhra_blind.pyPY3 KB
gitlab_download.pyPY3 KB
db_more30.pyPY3 KB
db_44_more6.pyPY3 KB
sc_aksk4.pyPY3 KB
cnki_recon2.shSH3 KB
db_more10.pyPY3 KB
ssout1_wzegt.tar.gzGZ3 KB
ssout2_wzegt.tar.gzGZ3 KB
db_more38.pyPY3 KB
sma_v4.pyPY3 KB
sc_ssh_key.shSH3 KB
db_more7.pyPY3 KB
e5_sqli_read.pyPY3 KB
sc27_out.txtTXT3 KB
db_more13.pyPY3 KB
sc15.pyPY3 KB
search_js.pyPY3 KB
sc_aksk2.pyPY3 KB
db_more32.pyPY3 KB
db_more8.pyPY3 KB
db_more17.pyPY3 KB
.bashrcBASHRC3 KB
sc45.pyPY3 KB
db_full2.pyPY3 KB
sc_aksk.pyPY3 KB
db_more23.pyPY3 KB
sc11.pyPY3 KB
sc49.pyPY3 KB
db_44_more3c.pyPY3 KB
sc16.pyPY3 KB
sc36.shSH3 KB
db_44_more3b.pyPY2 KB
sc31_out.txtTXT2 KB
sc46.pyPY2 KB
db_44_more4.pyPY2 KB
sc_aksk9.pyPY2 KB
sc48.pyPY2 KB
e5_waitfor_batch.pyPY2 KB
e5_xpcmd_test.pyPY2 KB
sc22.shSH2 KB
db_more9.pyPY2 KB
sc29.pyPY2 KB
sc_aksk6.pyPY2 KB
dbtype_check.pyPY2 KB
sc12.pyPY2 KB
sc25_out.txtTXT2 KB
db_full14.pyPY2 KB
e5_sqli_detect.pyPY2 KB
sc31.pyPY2 KB
ssh_key_out.txtTXT2 KB
sc51.pyPY2 KB
sc_aksk5.pyPY2 KB
sc41.pyPY2 KB
cve_test.pyPY2 KB
sc44.pyPY2 KB
e5_auth_verify.pyPY2 KB
e5_waf_upload_test.pyPY2 KB
tool_install_summary.tsvTSV2 KB
sqlmap_jtqy2.txtTXT2 KB
db_44_more2.pyPY2 KB
sqlmap_bicc3.txtTXT2 KB
sc30.pyPY2 KB
sc18.shSH2 KB
sc43.pyPY2 KB
id_rsa_raoheTXT2 KB
id_rsa_snaiTXT2 KB
exploit_keyTXT2 KB
sqlmap_shicinet.txtTXT2 KB
sqlmap_bicc2.txtTXT2 KB
sc9.pyPY2 KB
sc42.pyPY2 KB
dbtype_results.txtTXT2 KB
db_full15.pyPY2 KB
sqlmap_itss2.txtTXT2 KB
aksk13_out.txtTXT2 KB
sc38.pyPY2 KB
db_44_more5.pyPY2 KB
sc40.pyPY2 KB
sqlmap_itss3.txtTXT2 KB
db_more18.pyPY2 KB
db_more16.pyPY2 KB
sc10.pyPY2 KB
db_more37.pyPY2 KB
sc23.shSH2 KB
sc19.shSH2 KB
db_full4.pyPY2 KB
sc7.pyPY2 KB
foton_gitlab.pyPY2 KB
cnki_r2.txtTXT2 KB
db_full18.pyPY2 KB
sc53.shSH2 KB
db_full11.pyPY2 KB
nsout_wzegtTXT2 KB
sc39.pyPY2 KB
known_hosts.oldOLD2 KB
db_more21.pyPY2 KB
db_redis44.pyPY2 KB
db_full20.pyPY2 KB
db_44_more3.pyPY2 KB
db_full8.pyPY2 KB
deep_verify_results.txtTXT2 KB
cnki_recon_out.txtTXT2 KB
foton_jenkins.shSH2 KB
sc52.pyPY2 KB
find_webroot.pyPY1 KB
e5_sqli_test_single.pyPY1 KB
db_full9.pyPY1 KB
db_full5.pyPY1 KB
db_44_more.pyPY1 KB
sc20.shSH1 KB
exec2.pyPY1 KB
sc8.pyPY1 KB
aksk7_out.txtTXT1 KB
db_mysql3.pyPY1 KB
db_full7.pyPY1 KB
sc34.pyPY1 KB
db_mysql8.pyPY1 KB
sc35.pyPY1 KB
sc21.shSH1 KB
id_rsa_yarnTXT1 KB
id_rsa_ymddTXT1 KB
db_full6.pyPY1 KB
load.shSH1 KB
db_full3.pyPY1 KB
e5_twostep_test.pyPY1 KB
db_full17.pyPY1 KB
remote_go_retry.shSH1 KB
sc_aksk8.pyPY1 KB
db_full12.pyPY1 KB
sc37.pyPY1 KB
sc19_out.txtTXT1 KB
db_full10.pyPY1 KB
esnai_keyTXT1 KB
server.keyKEY1 KB
sc47.shSH1 KB
db_creds4.pyPY1 KB
db_full13.pyPY1 KB
db_creds6.pyPY1 KB
get_web_shell.pyPY1 KB
sc17.shSH1 KB
sc24_out.txtTXT1 KB
db_full1.pyPY1 KB
whhra_result3.txtTXT1 KB
db_full19.pyPY1 KB
db_creds3.pyPY1 KB
alm_login.pyPY1 KB
exec3.pyPY1 KB
remote_go_install.shSH1 KB
db_mysql.pyPY1 KB
sc33.pyPY1 KB
e5_include_single.pyPY1 KB
sc30_out.txtTXT1 KB
sc17_out.txtTXT1 KB
exec5.pyPY1 KB
db_creds5.pyPY1 KB
db_mysql4.pyPY1 KB
fofa_search.pyPY1 KB
waf_bypass.logLOG1 KB
sc28_out.txtTXT1 KB
from6_ssh92.pyPY1 KB
sc22_out.txtTXT1 KB
from6.pyPY1 KB
db_mysql7.pyPY1 KB
ck3.pyPY1 KB
db_creds2.pyPY1 KB
remote_pip_install.shSH1 KB
sc12_out.txtTXT1 KB
disc_f.txtTXT1 KB
ck2.pyPY1 KB
getshell14.pyPY1 KB
server.crtCRT1 KB
remote_pip_retry.shSH987 B
from92.pyPY980 B
exec4.pyPY977 B
dc_shell.pyPY976 B
ck.pyPY970 B
aksk16_out.txtTXT961 B
ck5.pyPY957 B
db_creds7.pyPY951 B
db_creds.pyPY935 B
sc13_out.txtTXT935 B
ck4.pyPY878 B
john.logLOG857 B
sc16_out.txtTXT856 B
db_mysql5.pyPY850 B
aksk17_out.txtTXT801 B
remote_inventory.shSH795 B
BUILD_INFO.jsonJSON773 B
from6to92.pyPY741 B
1.pyPY732 B
sc20_out.txtTXT696 B
nsout_wzegt.tar.gzGZ691 B
gitlab_服务器安装_yunpan.txtTXT680 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.214.172.114confirmed
104.160.169.204confirmed
118.25.25.81confirmed
147.139.163.146confirmed
156.245.146.226confirmed
177.4.12.11confirmed
185.157.161.93confirmed
194.11.226.41confirmed
194.233.72.68confirmed
195.178.110.48confirmed
198.46.158.18confirmed
203.194.115.12confirmed
204.168.225.59confirmed
222.186.57.10confirmed
3.84.186.180confirmed