huntback / IP intelligence
47.108.208.69
Intelligence
ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports21, 80, 81, 88, 443, 3389, 7000
ServiceApache/2.4.34 (Win64) OpenSSL/1.1.0i PHP/7.4.33 · 房屋征收管理系统v3.0
Productsapache
Loot harvested37 file(s), 1635 KB · exposed-secret, malware, mozi, pe-binary, tunnel
Open directory contents (37)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| ‹redacted›.min.js | JS | 491 KB |
| DirCompare.exe | PE | 471 KB |
| pw-work2.0.sql | SQL | 208 KB |
| ‹redacted›.map | MAP | 192 KB |
| ‹redacted›.map | MAP | 112 KB |
| ‹redacted›.min.js | JS | 91 KB |
| jieyun.js | JS | 17 KB |
| ‹redacted›.min.js | JS | 13 KB |
| %e6%95%b0%e6%8d%ae%e5%ba%93%e7%bb%93%e6%9e%84.md | MD | 6 KB |
| loader_Area.js | JS | 5 KB |
| loader_Create%20-%20%e6%8b%b7%e8%b4%9d.js | JS | 5 KB |
| Template.php | PHP | 3 KB |
| login.php | PHP | 2 KB |
| .travis.yml | YML | 1 KB |
| GetOldhomeTree.php | PHP | 1 KB |
| GetNewHouse.php | PHP | 1 KB |
| SaveToken.php | PHP | 1 KB |
| inc_getAppMenus.php | PHP | 1 KB |
| Ajax.php | PHP | 1 KB |
| console.php | PHP | 227 B |
| route.php | PHP | 212 B |
| app.php | PHP | 210 B |
| b.php | PHP | 131 B |
| GetFullAreaName.php | PHP | 128 B |
| testToken.php | PHP | 126 B |
| GetPhotoTilt.php | PHP | 125 B |
| GetAreaName.php | PHP | 124 B |
| GetUser.php | PHP | 120 B |
| Report.php | PHP | 119 B |
| Survey.php | PHP | 119 B |
| .gitignore | GITIGN | 84 B |
| .gitignore | GITIGN | 54 B |
| mm.php | PHP | 54 B |
| a.php | PHP | 50 B |
| Logout.php | PHP | 13 B |
| .gitignore | GITIGN | 13 B |
| function.php | PHP | 1 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 111.171.214.66 | lead |
| 8.208.14.194 | lead |