Live findsCVE IntelConsoleStart free
huntback / IP intelligence

31.56.228.136

RESIDENTIALoperator-submittedc2exploitexposed-secretforced-lootmalware

Intelligence

ASN / OrgAS56971 · CGI GLOBAL LIMITED
CountryFrance
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 3306, 8443, 9999, 31337
Loot harvested385 file(s), 45730 KB · c2, exploit, exposed-secret, forced-loot, malware, tsunami

Open directory contents (385)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
lsg_beaconTXT21.6 MB
php-8.4.26.tar.gzGZ21.5 MB
subs2.txtTXT132 KB
cmd.htmlHTML106 KB
all_keys.txtTXT61 KB
exploit.pyPY32 KB
ll_aslr.binBIN32 KB
ll_file_after.binBIN32 KB
ll_file_first.binBIN32 KB
ll_spl.binBIN32 KB
‹redacted›.pycPYC29 KB
subs.txtTXT29 KB
poc.pyPY25 KB
bg_watch.logLOG25 KB
DISPLAY_ERRORS_OFF.mdMD22 KB
NOTES.mdMD22 KB
php2shell_core.pyPY21 KB
ASLR_PATHS.mdMD21 KB
NO_DISPLAY_ERRORS.mdMD21 KB
‹redacted›.respRESP20 KB
‹redacted›.gdbGDB15 KB
HTTP_HEAP_LEAK.mdMD15 KB
ASLR_PURE_HTTP.mdMD14 KB
NOTES_BG.mdMD14 KB
exp.htmlHTML13 KB
g15_uaf_memory.logLOG13 KB
oomcookie_AB_20261021.logLOG12 KB
‹redacted›.respRESP12 KB
‹redacted›.respRESP12 KB
bg_gi.logLOG11 KB
g16_system_trace.logLOG11 KB
admin_list.htmlHTML11 KB
g17_clean_mask.logLOG10 KB
bg_gf.logLOG10 KB
bg_gh.logLOG10 KB
ASLR_PURE_HTTP_RESEARCH.mdMD10 KB
bg_gj.logLOG10 KB
‹redacted›.respRESP10 KB
‹redacted›.respRESP10 KB
readme.mdMD10 KB
‹redacted›.respRESP10 KB
‹redacted›.respRESP10 KB
‹redacted›.respRESP10 KB
‹redacted›.respRESP10 KB
‹redacted›.respRESP10 KB
‹redacted›.respRESP10 KB
‹redacted›.respRESP9 KB
‹redacted›.respRESP9 KB
‹redacted›.respRESP9 KB
‹redacted›.respRESP9 KB
‹redacted›.respRESP9 KB
‹redacted›.respRESP9 KB
NOASLR_REPORT.mdMD8 KB
bans.htmlHTML8 KB
bans_after_login.htmlHTML8 KB
bans_debug.htmlHTML8 KB
bans_verbose.htmlHTML8 KB
debug_bans.htmlHTML8 KB
env_test.htmlHTML8 KB
race.pyPY8 KB
‹redacted›.gdb.logLOG7 KB
‹redacted›.gdb.logLOG7 KB
README.mdMD7 KB
send_b_open.pyPY7 KB
search.htmlHTML7 KB
search_page.htmlHTML7 KB
oomcookie_A_20261021.logLOG6 KB
‹redacted›.pycPYC6 KB
g19_BG_unserialize_103.mdMD6 KB
login_resp.htmlHTML5 KB
bans_resp.htmlHTML5 KB
ej2.htmlHTML5 KB
bans_login.htmlHTML5 KB
php2shell_exploit.pyPY5 KB
g18_ASLR_ZEND_103.mdMD5 KB
offsets.pyPY4 KB
pure_aslr_run.shSH4 KB
g20_php855_BG.mdMD4 KB
sup_poc.pyPY4 KB
pure_http_aslr_20261021.txtTXT4 KB
official-tests-fixed.txtTXT3 KB
mysql.plPL3 KB
send_a_oom5.pyPY3 KB
send_b_zif.pyPY3 KB
d_aslr_ev.phpPHP3 KB
d_aslr.phpPHP3 KB
‹redacted›.gdbGDB3 KB
mkpayload_zend_103.pyPY3 KB
http_heap_leak_20261021.txtTXT3 KB
calibrate.pyPY3 KB
demo_aslr_video.shSH3 KB
pure_poc.pyPY3 KB
evidence.mdMD3 KB
c2.pyPY3 KB
demo_de0_leak.shSH3 KB
send_a_oom4.pyPY2 KB
docker-compose.ymlYML2 KB
same_worker_trials.pyPY2 KB
‹redacted›.gdbGDB2 KB
README.mdMD2 KB
EXPLOIT.mdMD2 KB
noaslr_rce.logLOG2 KB
aslr_run2.pyPY2 KB
trial_ab.shSH2 KB
aslr_evidence.mdMD2 KB
leakfuzz2.phpPHP2 KB
send_b_rce.pyPY2 KB
ref_probe.pyPY2 KB
core_scan.pyPY2 KB
README.mdMD2 KB
b_htleak3s.pyPY2 KB
send_a_leak.pyPY2 KB
a2s_rules.pyPY2 KB
b_htleak3.pyPY2 KB
send_b_leak.pyPY2 KB
seed.shSH1 KB
leakfuzz.phpPHP1 KB
b_24hold.pyPY1 KB
send_a_leak4.pyPY1 KB
b_forge32_pad.pyPY1 KB
g18_aslr_zend_verify.logLOG1 KB
bds.tgzTGZ1 KB
c2_server.pyPY1 KB
send_a_cookie.pyPY1 KB
b_8tail.pyPY1 KB
b_24hdr.pyPY1 KB
send_a_oomcookie.pyPY1 KB
b_forge32_hdrK.pyPY1 KB
mkpayload.pyPY1 KB
b_numleak2.pyPY1 KB
b_htleak2.pyPY1 KB
send_a_id2.pyPY1 KB
send_a_id3.pyPY1 KB
b_forge64_httpN.pyPY1 KB
send_a_id1.pyPY1 KB
b_htleak.pyPY1 KB
send_a_100.pyPY1 KB
send_a_leak5.pyPY1 KB
b_forge64.pyPY1 KB
b_forge64_hdr.pyPY1 KB
lo_file.binBIN1 KB
b_forge64_hdrK.pyPY1 KB
b_24cookie.pyPY1 KB
send_a_tail.pyPY1 KB
send_a_oomcookie3.pyPY1 KB
canary.phpPHP1 KB
b_forge64_host.pyPY1 KB
send_a_id6.pyPY1 KB
b_forge64all.pyPY1 KB
redis_attack.plPL1 KB
b_forge64_http.pyPY1 KB
a2s_rules2.pyPY1 KB
send_b_rce2.pyPY1 KB
probe.pyPY1 KB
re2.plPL1 KB
findmark_trial2_112.pyPY1 KB
sweep_n1_p7.pyPY1 KB
b_forge64_first.pyPY1 KB
b_forge64_first17.pyPY1 KB
send_a_id4.pyPY1 KB
a2s_full.pyPY1 KB
aslr_run.pyPY1 KB
b_forge64_pre.pyPY1 KB
send_a_longhdr.pyPY1 KB
send_a_idmain.pyPY1 KB
send_a_plain.pyPY1 KB
send_a_bigfields.pyPY1 KB
send_a_pad.pyPY1 KB
b_forge64_pre1.pyPY1 KB
send_a_idhdr.pyPY1 KB
b_ht56.pyPY1 KB
send_a_oomreset.pyPY1 KB
apache2_aslr.confCONF1 KB
cs_check.pyPY1 KB
findmark_trial_112.pyPY1 KB
b_target.pyPY1 KB
send_a_mix.pyPY1 KB
aslr_demo.shSH1 KB
send_a_oomcookie2.pyPY1 KB
dyn.phpPHP1 KB
send_a_names.pyPY1 KB
rq.plPL1 KB
send_a_s56.pyPY1 KB
send_a_mixhdr2.pyPY1 KB
ab-summary.mdMD1 KB
cal_b.pyPY1 KB
b_consume.pyPY1 KB
send_a_leak2.pyPY1 KB
refraw_trial_112.pyPY1 KB
b0_fill.pyPY1 KB
send_a_leak3.pyPY1 KB
send_b_named.pyPY1 KB
b_numleak.pyPY1 KB
send_a_headers.pyPY1 KB
sweep_L_112.pyPY1 KB
bg_b_file.pyPY1 KB
setup.shSH1 KB
b_ht56_noforge.pyPY1 KB
send_a_mixhdr.pyPY1 KB
send_b_probe_long.pyPY1 KB
crash7_trial_112.pyPY1 KB
decode_leak.pyPY1 KB
send_a_bin128.pyPY1 KB
send_a_bin128_big.pyPY1 KB
send_b_align.pyPY1 KB
send_a_longfile.pyPY1 KB
d.phpPHP1 KB
send_b_probe.pyPY1 KB
r0_trial_112.pyPY1 KB
a2s_players.pyPY1 KB
r.plPL1 KB
root-cause.mdMD1 KB
b_nested9.pyPY1 KB
b_consume2.pyPY1 KB
leak_big.phpPHP1 KB
scan_a.pyPY1 KB
b_nested_key.pyPY1 KB
warn_probe.pyPY1 KB
leak_libc.phpPHP1 KB
bg_create.pyPY1 KB
docker-compose.ymlYML1 KB
scan_mix.pyPY1 KB
scan_ht18.pyPY1 KB
send_a_dup2.pyPY1 KB
test_multipart.pyPY1 KB
redis.plPL1 KB
trial_aslr.shSH1 KB
send_a_ps.pyPY1 KB
b_crash7.pyPY1 KB
send_a_dup.pyPY1 KB
scan_pages.pyPY1 KB
GITHUB.mdMD1 KB
sid_bin.pyPY1 KB
bg_a.pyPY1 KB
scan_s56b.pyPY1 KB
rop_noaslr.phpPHP1 KB
brute.pyPY1 KB
rop2_noaslr.phpPHP1 KB
‹redacted›.gdbGDB1 KB
‹redacted›.gdbGDB1 KB
scan_s56c.pyPY1 KB
inject_key.pyPY1 KB
bg_b_debug.pyPY1 KB
sweep_oomreset_112.pyPY1 KB
SECURITY.mdMD1 KB
leak_obj.phpPHP1 KB
bg_b.pyPY1 KB
align8.pyPY1 KB
DockerfileTXT1 KB
scan_s56.pyPY1 KB
‹redacted›.gdbGDB1013 B
bg_b_cookie.pyPY1005 B
bg_b_first.pyPY1005 B
cal_h1.shSH982 B
send_b_ps.pyPY975 B
probe_ref.shSH959 B
oom-trigger-vuln.txtTXT957 B
b_nested2.pyPY951 B
send_b_one.pyPY948 B
decrypt.pyPY944 B
‹redacted›.jarJAR938 B
‹redacted›.jarJAR938 B
scan_vl.pyPY930 B
la_aslr.binBIN929 B
leak1.binBIN929 B
leak2.binBIN929 B
leak3.binBIN929 B
leak_noaslr.binBIN929 B
b64_marker.pyPY928 B
‹redacted›.gdbGDB924 B
send_b_many.pyPY915 B
scan_nv.pyPY911 B
probe_hdr.pyPY910 B
‹redacted›.gdbGDB902 B
enc_leak3.phpPHP894 B
a2s_all.pyPY891 B
inject_partial.pyPY886 B
‹redacted›.gdbGDB873 B
trial_bins.shSH860 B
‹redacted›.respRESP853 B
a2s_more.pyPY846 B
‹redacted›.luaLUA829 B
enc_leak2.phpPHP821 B
docker-compose.ymlYML805 B
b_nested.pyPY799 B
redis_eval.plPL760 B
dyn_payload.phpPHP758 B
sweep_k6e.pyPY744 B
oom-trigger-fixed.txtTXT740 B
encrypt_payload.pyPY737 B
‹redacted›.gdbGDB737 B
‹redacted›.luaLUA717 B
sweep_k79.pyPY689 B
sweep_k79b.pyPY687 B
enc_leak.phpPHP686 B
sweep_forge64d.pyPY668 B
scan_pair_ht.pyPY662 B
‹redacted›.gdbGDB662 B
sweep_forge64b.pyPY655 B
‹redacted›.gdbGDB641 B
‹redacted›.gdbGDB636 B
test_targets.pyPY601 B
sweep_forge64.pyPY595 B
sweep_forge64c.pyPY592 B
d2.phpPHP563 B
‹redacted›.gdbGDB552 B
‹redacted›.gdbGDB551 B
‹redacted›.gdbGDB541 B
‹redacted›.gdbGDB534 B
inject2.pyPY533 B
‹redacted›.gdbGDB514 B
‹redacted›.gdbGDB511 B
bg_cookie_a.pyPY510 B
‹redacted›.gdbGDB500 B
‹redacted›.gdbGDB495 B
‹redacted›.gdbGDB490 B
‹redacted›.gdbGDB484 B
‹redacted›.gdbGDB483 B
‹redacted›.gdbGDB479 B
‹redacted›.gdbGDB478 B
‹redacted›.gdbGDB473 B
leak.phpPHP467 B
‹redacted›.gdbGDB450 B
c2_client.shSH445 B
‹redacted›.gdbGDB442 B
‹redacted›.gdbGDB433 B
oomcookie_leak_decode_20261021.txtTXT428 B
php.iniINI425 B
apache.confCONF424 B
nginx.confCONF420 B
‹redacted›.gdbGDB418 B
‹redacted›.gdbGDB417 B
‹redacted›.gdbGDB416 B
‹redacted›.gdbGDB401 B
‹redacted›.respRESP380 B
‹redacted›.gdbGDB368 B
‹redacted›.gdbGDB361 B
inject_root.pyPY342 B
user.sqlSQL334 B
u.sqlSQL325 B
subuser.sqlSQL324 B
test_exploit_builders.pyPY319 B
‹redacted›.gdbGDB304 B
nginx.confCONF300 B
‹redacted›.gdbGDB295 B
packed-refsTXT286 B
.gitignoreGITIGN285 B
configTXT285 B
‹redacted›.gdbGDB278 B
‹redacted›.gdbGDB277 B
‹redacted›.gdbGDB273 B
configTXT266 B
configTXT260 B
‹redacted›.respRESP259 B
‹redacted›.gdbGDB259 B
‹redacted›.gdbGDB237 B
‹redacted›.gdbGDB230 B
‹redacted›.gdbGDB229 B
.gitignoreGITIGN224 B
‹redacted›.gdbGDB214 B
sync.phpPHP188 B
toomanysecrets.shSH185 B
‹redacted›.gdbGDB179 B
cron_fallback.shSH173 B
‹redacted›.gdbGDB171 B
‹redacted›.gdbGDB169 B
zz-lab.iniINI162 B
‹redacted›.gdbGDB155 B
new_hlds_runTXT152 B
‹redacted›.gdbGDB146 B
wrap.shSH142 B
lo_arr.binBIN142 B
root.shSH135 B
‹redacted›.luaLUA134 B
extra_keys.txtTXT121 B
packed-refsTXT112 B
packed-refsTXT112 B
poly.phpPHP95 B
maps.phpPHP85 B
descriptionTXT73 B
sh.phpPHP60 B
sh.txtTXT52 B
pwn.phpPHP48 B
HEADTXT21 B
‹redacted›.luaLUA17 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

1.234.83.89confirmed
101.36.112.205confirmed
102.209.224.40confirmed
103.131.51.199confirmed
103.133.216.219confirmed
103.35.216.13confirmed
110.93.250.7confirmed
114.110.182.150confirmed
115.29.202.62confirmed
118.25.25.81confirmed
122.166.178.204confirmed
122.186.156.66confirmed
128.30.224.82confirmed
13.140.130.141confirmed
130.61.210.103confirmed