Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

8.138.12.59

DATACENTERoperator-submittedc2exploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS37963 · Hangzhou Alibaba Advertising Co.,Ltd.
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8080, 9999
ServiceCyberStrikeAI
Loot harvested99 file(s), 3676 KB · c2, exploit, exposed-secret, malware, mozi, webshell

Open directory contents (99)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
listener.logLOG2.0 MB
‹redacted›.jarJAR370 KB
k4_app.jsJS292 KB
‹redacted›.wxssWXSS201 KB
app.8f7afc71.jsJS185 KB
traces_full.jsonJSON129 KB
chunk-2d2384c3.b15abda4.jsJS79 KB
chunk-2d0ab10b.ac22b31b.jsJS66 KB
app-config.jsonJSON28 KB
chunk-a2bc92ba.6d91f09d.jsJS21 KB
harvest_v2.logLOG8 KB
chunk-0a1eb934.367e84de.jsJS8 KB
chunk-f784bd74.027acbb0.jsJS6 KB
harvest_v3_out.logLOG5 KB
probe_sqli_priv.pyPY5 KB
harvest_daemon.pyPY5 KB
‹redacted›.pycPYC5 KB
chunk-0330a424.ed80e8a5.jsJS4 KB
chunk-7888f0d0.d0ae21e1.jsJS4 KB
probe_quartz_rce.pyPY4 KB
chunk-65603023.0f8c3570.jsJS4 KB
harvested_tokens.jsonJSON4 KB
probe_whitelist.pyPY3 KB
harvest_v2_out.logLOG3 KB
icc_upload_test.pyPY3 KB
probe_jmr_rce.pyPY3 KB
jeecg_login_test.pyPY3 KB
probe_sms_upload.pyPY3 KB
captcha1.txtTXT2 KB
probe_user_pass.pyPY2 KB
README_LOCAL_HARVEST.mdMD2 KB
probe_docs.pyPY2 KB
probe_sign_dict.pyPY2 KB
horizontal_weak.pyPY2 KB
jwt_brute.pyPY2 KB
shiro_check.pyPY2 KB
shiro_brute2.pyPY2 KB
probe_getdictitems.pyPY2 KB
branch_compare.pyPY2 KB
write_probe.pyPY2 KB
oauth_grant_test.pyPY2 KB
resetpw_test.pyPY2 KB
watch_traces.pyPY2 KB
gw_bypass_test.pyPY2 KB
sqli_probe.pyPY2 KB
rsa_login_flow.pyPY2 KB
evo_login_test2.pyPY2 KB
do_upload.pyPY2 KB
sqli_test.pyPY2 KB
probe_upload_ext.pyPY2 KB
evo_login_test.pyPY2 KB
skiposs_traversal.pyPY2 KB
winpath_test.pyPY2 KB
oracle_test.pyPY1 KB
probe_union_bool.pyPY1 KB
visitor_apis.pyPY1 KB
vuln_probe.pyPY1 KB
dump_traces.pyPY1 KB
log_jm_test.pyPY1 KB
getperson_test3.pyPY1 KB
idor_appt.pyPY1 KB
put_probe.pyPY1 KB
appt_test.pyPY1 KB
getperson_test2.pyPY1 KB
idor_test.pyPY1 KB
extract_data.pyPY1 KB
getperson_test4.pyPY1 KB
ssrf_probe2.shSH1 KB
idor_v2.pyPY1 KB
brute_admin.pyPY1 KB
gen_files.pyPY1 KB
third_token_test.pyPY1 KB
fastjson_probe.pyPY1 KB
test_skiposs.shSH1 KB
proc_captcha.pyPY1 KB
enum_side.pyPY1 KB
getperson_test.pyPY1 KB
qtd_bind.pyPY1 KB
probe_routes.shSH1 KB
config_test.pyPY1 KB
captcha_reuse_test.pyPY1 KB
oracle_recover.pyPY1 KB
ssrf_nacos.shSH1 KB
brute_admin2.pyPY1 KB
dl_h5.shSH1017 B
test_upload.shSH953 B
probe_file_url.shSH618 B
watch_out3.logLOG600 B
‹redacted›.jspJSP563 B
trace_watch.logLOG560 B
api_paths.txtTXT516 B
‹redacted›.jspJSP423 B
‹redacted›.jspJSP415 B
watch_out.logLOG238 B
watch_out2.logLOG238 B
pic_vc.binBIN135 B
‹redacted›.config.jsonJSON82 B
‹redacted›.config.jsonJSON62 B
trace_tokens.jsonTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

129.204.198.254confirmed
129.212.194.246confirmed
144.91.73.103confirmed
144.91.73.26confirmed
193.233.91.227confirmed
202.61.139.137confirmed
202.61.139.15confirmed
217.160.132.82confirmed
45.152.64.65confirmed
45.77.177.19confirmed
46.101.142.226confirmed
46.38.232.153confirmed
5.45.100.28confirmed
5.45.101.64confirmed
52.128.241.98confirmed