Live findsCVE IntelConsoleStart free
huntback / IP intelligence

49.51.230.17

DATACENTERoperator-submittedc2exploitexposed-secretopen-directorywebshell

Intelligence

ASN / OrgAS132203 · Shenzhen Tencent Computer Systems Company Limited
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 3000, 8888, 9001, 50050
ServiceGift Hub
Productsnginx
Loot harvested56 file(s), 80757 KB · c2, elf-binary, exploit, exposed-secret, forced-loot, macho-binary

Open directory contents (56)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
http8888.logLOG74.0 MB
rogue4.logLOG1.8 MB
teamserver.logLOG1.4 MB
‹redacted›.jarJAR655 KB
upxELF549 KB
‹redacted›.jarJAR123 KB
clean.dllDLL87 KB
payload.dllDLL86 KB
‹redacted›.task.dllDLL86 KB
3484041BIN32 KB
PwnKitBIN16 KB
PwnKit32BIN16 KB
payload_v2.dllDLL12 KB
rce_bypass.dllDLL12 KB
rce_payload.dllDLL12 KB
jndi.logLOG9 KB
min.dllDLL4 KB
rogue3.logLOG3 KB
‹redacted›.classCLASS3 KB
PwnKit.cC3 KB
tiny.dllDLL3 KB
‹redacted›.javaJAVA2 KB
‹redacted›.classCLASS2 KB
pyhttp8000.logLOG1 KB
‹redacted›.javaJAVA1 KB
ydeye_install.logLOG985 B
README.mdMD969 B
http.logLOG873 B
‹redacted›.jarJAR841 B
sgdaemon.logLOG831 B
serve.pyPY723 B
‹redacted›.classMACHO545 B
‹redacted›.classCLASS506 B
evil8000BIN495 B
evil80BIN493 B
py1389.logLOG436 B
payload.cC269 B
configTXT255 B
payload_clean.cC224 B
payload_v2.cC200 B
server.logLOG200 B
tiny.cC198 B
payload_min.cC194 B
rce_dll.cC193 B
payload_tiny.cC163 B
PwnKit.shSH150 B
rogue.logLOG150 B
ftp2.logLOG123 B
packed-refsTXT112 B
ldap_capture2.logLOG96 B
rogue2.logLOG77 B
descriptionTXT73 B
nc1389.logLOG27 B
ldap_capture.logLOG26 B
HEADTXT21 B
b4.binBIN4 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
101.36.112.205confirmed
102.209.224.40confirmed
103.131.51.199confirmed
103.133.216.219confirmed
103.35.216.13confirmed
110.93.250.7confirmed
114.110.182.150confirmed
115.29.202.62confirmed
118.25.25.81confirmed
122.166.178.204confirmed
122.186.156.66confirmed
128.30.224.82confirmed
13.140.130.141confirmed
130.61.210.103confirmed