Live findsCVE IntelConsoleStart free
huntback / IP intelligence

124.220.164.14

DATACENTERoperator-submittedc2exploitexposed-secretmacho-binarymalware

Intelligence

ASN / OrgAS45090 · Shenzhen Tencent Computer Systems Company Limited
CountryChina
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 5432, 6379, 8001, 8080, 8090, 8888, 9001
ServiceBaseHTTP/0.6 Python/3.11.6
Loot harvested89 file(s), 6256 KB · c2, exploit, exposed-secret, macho-binary, malware, mozi

Open directory contents (89)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.jarJAR3.7 MB
‹redacted›.jarJAR595 KB
‹redacted›.jarJAR561 KB
‹redacted›.jarJAR533 KB
srcs2.tgzTGZ317 KB
srcs.tgzTGZ148 KB
changelog.txtTXT111 KB
big.tgzTGZ48 KB
‹redacted›.typesTYPES26 KB
out.txtTXT21 KB
ac_classes.txtTXT15 KB
en-mnemonic-word-list.txtTXT12 KB
adm_libs.txtTXT10 KB
‹redacted›.classMACHO6 KB
crk.shSH3 KB
redis_classes.txtTXT3 KB
‹redacted›.classMACHO3 KB
adm_gz.binBIN2 KB
‹redacted›.classMACHO2 KB
‹redacted›.javaJAVA2 KB
‹redacted›.classMACHO2 KB
.agkmgecw.jsonJSON2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
ctx.tgzTGZ2 KB
gen.pyPY2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO2 KB
‹redacted›.classMACHO1 KB
‹redacted›.classMACHO1 KB
‹redacted›.classMACHO1 KB
‹redacted›.classMACHO1 KB
diag4.shSH1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.classMACHO1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
‹redacted›.javaJAVA1 KB
diag2.shSH1 KB
‹redacted›.classMACHO1 KB
‹redacted›.classMACHO1 KB
‹redacted›.classMACHO1 KB
diag.shSH1 KB
‹redacted›.classMACHO1 KB
‹redacted›.classMACHO1 KB
‹redacted›.classMACHO1 KB
configBIN1 KB
‹redacted›.javaJAVA1 KB
bx_c.txtTXT984 B
‹redacted›.classMACHO964 B
‹redacted›.javaJAVA947 B
build_prep.shSH908 B
‹redacted›.javaJAVA765 B
diag3.shSH742 B
‹redacted›.javaJAVA708 B
‹redacted›.classMACHO667 B
RefTest%24Bean.classMACHO625 B
bfx_yml.txtTXT607 B
‹redacted›.classMACHO543 B
.rsRS541 B
ce_yml.txtTXT444 B
‹redacted›.classMACHO435 B
el1.shSH406 B
‹redacted›.classMACHO385 B
evil_yml.txtTXT344 B
brc.txtTXT343 B
generator.ymlYML342 B
acs.shSH339 B
bxp_c.txtTXT268 B
admin_gen.shSH263 B
dp.shSH240 B
defunct_payload.txtTXT211 B
cm_c.txtTXT190 B
cha_c.txtTXT150 B
rec.txtTXT142 B
cron_ctl.txtTXT90 B
a3dae41.binBIN85 B
a93c89c.binBIN69 B
chm_c.txtTXT69 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

159.69.66.161confirmed
198.23.209.17confirmed
8.138.166.206confirmed