Live findsCVE IntelConsoleStart free
huntback / IP intelligence

66.154.127.156

DATACENTERoperator-submittedloot-ipc2elf-binaryexploitexposed-secret

Intelligence

ASN / OrgAS35916 · MULTACOM CORPORATION
CountryCanada
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports80, 443, 22223
Servicenginx · 恭喜，站点创建成功！
Productsnginx
JARM3fd3fd0003fd3fd21c42d42d000000bdfc58c9a46434368cf60aa440385763
Loot harvested110 file(s), 68571 KB · c2, elf-binary, exploit, exposed-secret, gafgyt, malware

Open directory contents (110)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
clientELF9.5 MB
cve-2026-29053.tar.gzGZ5.1 MB
telnet_brute_v15ELF3.9 MB
telnet_brute_v16ELF3.9 MB
telnet_brute_v14ELF3.9 MB
telnet_brute_v1.3ELF3.9 MB
telnet_bruteELF3.9 MB
adbELF2.6 MB
telnet_v15ELF2.6 MB
telnet_v16ELF2.6 MB
telnet_v17ELF2.6 MB
telnet_v18ELF2.6 MB
telnet_v19ELF2.6 MB
telnet_brute_v1.3_linux_amd64ELF2.6 MB
telnet_v14ELF2.6 MB
dnsglELF2.2 MB
cves.jsonJSON2.1 MB
pm2.logLOG2.0 MB
.checksumCHECKS1.4 MB
templates-checksum.txtTXT1.2 MB
.templates-indexTEMPLA1.1 MB
index.bb82c4e3.jsJS423 KB
TEMPLATES-STATS.jsonJSON308 KB
zmap.logLOG251 KB
dsh-full-remote-0.3.12.tgzTGZ113 KB
‹redacted›.jsonlJSONL103 KB
wife.arm7ELF70 KB
wzyp-chrome.htmlHTML61 KB
telnet_brute_v19.goGO46 KB
telnet_brute_v18.goGO45 KB
telnet_brute_v17.goGO44 KB
telnet_brute_v16.goGO43 KB
telnet_brute_v15.goGO42 KB
telnet_brute_v1.3.goGO38 KB
telnet_brute.goGO34 KB
exp.pyPY30 KB
.bash_historyBASH_H25 KB
prompt-inject.mdMD24 KB
dump.pm2.bakBAK22 KB
BOT_V2_DEV_DOC.mdMD20 KB
main.goGO18 KB
telnet_deploy.pyPY16 KB
TEMPLATE-CREATION-GUIDE.mdMD14 KB
telnet_post.pyPY14 KB
TEMPLATE-REVIEW-GUIDE.mdMD12 KB
%E6%93%8D%E4%BD%9C%E6%89%8B%E5%86%8C.mdMD12 KB
fake_telnetd.pyPY11 KB
wzyp-full.htmlHTML11 KB
wzyp-index.htmlHTML11 KB
wzyp-ua.htmlHTML11 KB
.new-additionsNEW-AD11 KB
CONTRIBUTING.mdMD11 KB
telnet_verify.pyPY10 KB
client.goGO9 KB
BOT_V2_PROMPT.mdMD9 KB
BOT_UPGRADE_RUNBOOK.mdMD8 KB
brute_loop.shSH8 KB
deploy_daemon.pyPY7 KB
52681.pyPY7 KB
server.goGO7 KB
%E4%BC%AA%E9%80%A0%E6%A3%80%E6%B5%8B%E5%B7%A5%E5%85%B7V2.0.tar.gzGZ7 KB
README.mdMD7 KB
fofo.jsJS6 KB
README_JA.mdMD6 KB
api-paths.txtTXT6 KB
README_KR.mdMD6 KB
README_CN.mdMD5 KB
reverse-proxy.jsonJSON4 KB
aliyun.pyPY4 KB
wt.pyPY4 KB
probe_linelen.pyPY4 KB
awsfilter.goGO4 KB
adb_trace.pyPY3 KB
mock_adbd.pyPY3 KB
port-experiment.shSH3 KB
spread.shSH2 KB
adb_exec.pyPY2 KB
fofo_test.pyPY2 KB
vps.pyPY2 KB
deploy-restart.shSH1 KB
ssh.shSH1 KB
banner_grab.pyPY1 KB
adbkeyTXT1 KB
bot_triage.pyPY1 KB
start.shSH1 KB
passwords_v14_full.txtTXT1 KB
PULL_REQUEST_TEMPLATE.mdMD1 KB
retarget.shSH1 KB
watchdog.shSH1 KB
tut.txtTXT1 KB
node-restart.shSH1 KB
‹redacted›.hdrHDR1 KB
‹redacted›.hdrHDR1 KB
status.shSH1 KB
passwords_v14_extra.txtTXT962 B
targeted-deliver.shSH924 B
unauth_scan.shSH769 B
passwords_v14.txtTXT628 B
check_proxy.pyPY588 B
payloads.txtTXT564 B
pcurl.shSH500 B
stop-spread.shSH327 B
.envENV314 B
.env.bak.1790947577179094314 B
setup-zmap.shSH279 B
.credentials.yamlYAML223 B
fake.logLOG82 B
probe.phpPHP28 B
passwds.txtTXT17 B
tmp_ajax.phpTXT14 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
157.230.117.70confirmed
157.245.140.34confirmed
169.58.233.110confirmed
176.65.148.59confirmed
190.183.251.210confirmed
2.24.204.250confirmed
203.194.115.12confirmed
34.254.202.253confirmed
43.163.124.78confirmed
45.115.26.30confirmed
64.111.92.149confirmed
8.138.166.206confirmed
8.217.24.92confirmed
89.124.67.72confirmed