huntback / IP intelligence

49.77.137.146

RESIDENTIALioc-tweetfeedmalwareopen-directorype-binarytunneloperator-submitted

Intelligence

ASN / OrgAS4134 · Chinanet
CountryChina
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports21, 53, 7000, 8008, 8010, 8086, 11211, 2222, 5555
Servicenginx/1.20.1 · Index of /
Productsnginx
Loot harvested31 file(s), 61778 KB · malware, pe-binary, tunnel

Open directory contents (31)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
WinSCP.zipZIP9.2 MB
apache-maven-3.8.4-bin.zipZIP8.7 MB
CrystalDiskInfo8_17_14.zipZIP5.9 MB
WinHex%2021.2%20%E5%8D%95%E6%96%87%E4%BB%B6_x86_x64.exePE5.2 MB
WebpCodecSetup.exePE4.9 MB
mmtool64.exePE4.8 MB
Fiddler5.0.20202.18177.exePE4.3 MB
cpu-z_1.96-cn.zipZIP3.2 MB
idea2020.1.2%E7%A0%B4%E8%A7%A3.zipZIP2.6 MB
JetBrains%E6%BF%80%E6%B4%BB%E6%89%80%E9%9C%80.zipZIP2.6 MB
IDM.exePE1.5 MB
7z2107-x64.exePE1.5 MB
ChromeSetup.exePE1.3 MB
2023%E5%B9%B4%E5%AD%A6%E4%BD%8D%E8%8B%B1%E8%AF%AD%E8%80%83%E8%AF%95%E5%A4%A7%E7%BA%B2%E5%92%8C%E6%A8%A1%E6%8B%9F%E9%A2%9ZIP1.2 MB
thphn150.zipZIP844 KB
Thaiphoon%20Burner.zipZIP815 KB
HDDRawCopy1.10Portable.zipZIP767 KB
MVT.exePE449 KB
pve_source.tar.gzGZ291 KB
asssdbenchmark2.0.7316.34247.zipZIP248 KB
‹redacted›.jarJAR30 KB
IDEA2020.3.x%E4%BB%A5%E4%B8%8B%E7%89%88%E6%9C%AC%E6%BF%80%E6%B4%BB%EF%BC%88%E6%97%A0%E9%99%90%E9%87%8D%E7%BD%AE%E4%B8%89ZIP30 KB
pycharm_ide-eval-resetter-2.1.6.zipZIP30 KB
GitHub%E5%8A%A0%E9%80%9F%E5%99%A81.6.rarRAR18 KB
RustDesk_ID_Changer.batBAT6 KB
la-add.rarRAR5 KB
apk%E6%9F%A5%E5%A3%B3%E7%A5%9E%E5%99%A8.zipZIP4 KB
lib_mysqludf_json-master.zipZIP3 KB
%E8%A7%86%E9%A2%91%E6%8D%A2%E8%84%B8%E5%B7%A5%E4%BD%9C%E6%B5%81%20%281%29.rarRAR3 KB
gpedit.batBAT383 B
aria2cm.shSH241 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

43.162.216.212lead