Live findsCVE IntelConsoleStart free
huntback / IP intelligence

54.169.109.7

DATACENTERoperator-submittedc2elf-binaryexploitexposed-secretgafgyt

Intelligence

ASN / OrgAS16509 · Amazon.com, Inc.
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8000, 8080, 9001, 9443
ServiceSimpleHTTP/0.6 Python/3.9.25 · Directory listing for /
Loot harvested55 file(s), 10265 KB · c2, elf-binary, exploit, exposed-secret, gafgyt, malware

Open directory contents (55)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
chiselELF8.3 MB
http.logLOG497 KB
make.logLOG266 KB
php_make.logLOG266 KB
rebuild_make.logLOG235 KB
s_new.cC100 KB
s_old.cC98 KB
asan_make.logLOG55 KB
cert_out.txtTXT40 KB
configure.logLOG22 KB
rebuild_conf.logLOG21 KB
asan_conf.logLOG21 KB
sep_dial4.logLOG17 KB
sep_dial2.logLOG15 KB
sep_dial.logLOG14 KB
gdb_out.logLOG14 KB
rev_tcp.logLOG9 KB
sep_direct.logLOG9 KB
poc_mikrotrick.pyPY8 KB
poc_mt.pyPY8 KB
v2_1194.logLOG7 KB
poc1.pyPY6 KB
nfs_230b.pyPY5 KB
nfs_read_cron.pyPY5 KB
nfs_read_mark.pyPY5 KB
‹redacted›.ovpnOVPN4 KB
‹redacted›.ovpnOVPN4 KB
nfs_230.pyPY4 KB
nfs_grep.pyPY4 KB
‹redacted›.ovpnOVPN4 KB
‹redacted›.ovpnOVPN4 KB
‹redacted›.ovpnOVPN4 KB
‹redacted›.ovpnOVPN4 KB
‹redacted›.ovpnOVPN4 KB
piso_dial.logLOG3 KB
chisel_srv.logLOG2 KB
sep_dial3.logLOG1 KB
test_144_ssh.pyPY1 KB
test_ssh.pyPY1 KB
asan_conf2.logLOG1 KB
rev_http.logLOG1 KB
test_ver.shSH1 KB
v2_direct.logLOG1 KB
brute2.pyPY858 B
ovf_payload.txtTXT819 B
brute.pyPY791 B
vitro2_udp.logLOG691 B
rev_http.pyPY564 B
clean.logLOG501 B
makeclean.logLOG501 B
clean2.logLOG485 B
php_server.logLOG425 B
rev_tcp.pyPY420 B
brute2.logLOG68 B
configTXT6 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

104.248.244.66confirmed
15.188.163.78confirmed
152.232.90.185lead
190.183.251.210lead
64.111.92.149lead