huntback / IP intelligence
91.224.92.16
Intelligence
ASN / OrgAS209605 · UAB Host Baltic
CountryUnited Kingdom
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 8080, 8088, 9000, 18081, 18128, 8787, 8789
Servicenginx · ARTEX — 自主渗透测试控制台
Productsnginx
Loot harvested62 file(s), 1216 KB · c2, elf-binary, exploit, exposed-secret, macho-binary, malware
Open directory contents (62)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| met.bin | ELF | 1.1 MB |
| ‹redacted›.jar | JAR | 5 KB |
| ‹redacted›.java | JAVA | 4 KB |
| i5017m.sh | SH | 4 KB |
| i4586a.sh | SH | 3 KB |
| i4532r.sh | SH | 3 KB |
| i5180ms.sh | SH | 3 KB |
| i4559b.sh | SH | 3 KB |
| i5180as4.sh | SH | 3 KB |
| i5017d.sh | SH | 3 KB |
| i4532m.sh | SH | 2 KB |
| i5180bh.sh | SH | 2 KB |
| i4562j.sh | SH | 2 KB |
| i4585d.sh | SH | 2 KB |
| i4562s.sh | SH | 2 KB |
| i5180as3.sh | SH | 2 KB |
| ‹redacted›.jspx | JSPX | 2 KB |
| i4577w.sh | SH | 2 KB |
| probe_body.bin | BIN | 2 KB |
| ‹redacted›.class | MACHO | 2 KB |
| i4465m3.sh | SH | 2 KB |
| i5180as2.sh | SH | 2 KB |
| i5180as.sh | SH | 2 KB |
| i5180cmd.sh | SH | 2 KB |
| i4512m.sh | SH | 2 KB |
| a.sh | SH | 1 KB |
| b.sh | SH | 1 KB |
| probe.py | PY | 1 KB |
| i4465m2.sh | SH | 1 KB |
| i4532f.sh | SH | 1 KB |
| i4583d.sh | SH | 1 KB |
| p2.sh | SH | 1 KB |
| i4465m.sh | SH | 1 KB |
| i5180jsp.sh | SH | 1 KB |
| p3.sh | SH | 1 KB |
| i4577d.sh | SH | 1 KB |
| i4438all.sh | SH | 1 KB |
| i4438m.sh | SH | 1 KB |
| ‹redacted›.java | JAVA | 1 KB |
| i4562x.sh | SH | 1 KB |
| i5180p.sh | SH | 1 KB |
| i4471m.sh | SH | 1 KB |
| ‹redacted›.jsp | JSP | 971 B |
| 91.224.92.16:18128 | 16:181 | 959 B |
| p4.sh | SH | 745 B |
| i4585r.sh | SH | 504 B |
| tunloop.sh | SH | 503 B |
| p.sh | SH | 490 B |
| i4438p.sh | SH | 445 B |
| config | TXT | 433 B |
| i4438r.sh | SH | 425 B |
| i4438c.sh | SH | 421 B |
| i4438_id | TXT | 399 B |
| i4471t.sh | SH | 236 B |
| sh.bin | ELF | 194 B |
| credentials | TXT | 86 B |
| config | TXT | 81 B |
| config.json | JSON | 81 B |
| phpinfo.php | PHP | 81 B |
| HEAD | TXT | 79 B |
| .env | ENV | 74 B |
| config | TXT | 7 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 101.99.61.154 | lead |
| 124.222.192.148 | lead |
| 140.238.214.81 | lead |
| 152.53.129.174 | lead |
| 154.36.156.126 | lead |
| 154.36.188.133 | lead |
| 154.94.226.26 | lead |
| 156.239.236.42 | lead |
| 158.220.107.65 | lead |
| 158.247.253.149 | lead |
| 168.93.199.186 | lead |
| 182.92.185.200 | lead |
| 185.139.214.156 | lead |
| 192.238.245.122 | lead |
| 217.142.243.156 | lead |