huntback / IP intelligence

185.216.68.66

DATACENTERloot-ipc2elf-binaryexploitexposed-secretgafgyt

Intelligence

ASN / OrgAS200019 · ALEXHOST SRL
CountrySeychelles
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 8000
ServiceSimpleHTTP/0.6 Python/3.13.5 · Directory listing for /
Loot harvested339 file(s), 30460 KB · c2, elf-binary, exploit, exposed-secret, gafgyt, malware

Open directory contents (339)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
stfe.jsJS3.6 MB
cedex-harbor-operator.jsJS2.9 MB
index_new.jsJS2.8 MB
index.jsJS2.8 MB
cedex-operator.jsJS2.6 MB
business.jsJS2.0 MB
copyfailELF2.0 MB
dfragELF1.9 MB
cedex-harbor.jsJS1.1 MB
mysql3306_full.logLOG1.0 MB
mysql_cred_tested.txtTXT937 KB
nstestELF740 KB
masscan_full.logLOG694 KB
account.jsJS665 KB
tbchat_addrs.jsonJSON421 KB
‹redacted›.rawRAW309 KB
openapi.jsonJSON309 KB
redisinsight.dbDB304 KB
templates.jsonJSON251 KB
Stage3_VariantB.jsJS178 KB
wallet.jsJS151 KB
ptr_all.txtTXT79 KB
cardano_final.txtTXT62 KB
TradeAndEarnPage.jsJS62 KB
AGENTS.mdMD60 KB
TronProvider-CxuZtKeQ.jsJS53 KB
tron_nodes_ranked.txtTXT40 KB
tronenergycontract-master.zipZIP39 KB
LICENSETXT33 KB
platform_module.jsJS32 KB
knight_api.jsonJSON32 KB
template_appleid-login.htmlHTML30 KB
Stage2_17.0_17.2.1_seedbell.jsJS29 KB
utility_module.jsJS27 KB
nmap_94_16.txtTXT25 KB
poc.pyPY25 KB
poc.pyPY25 KB
poc.pyPY25 KB
poc-last-run.txtTXT24 KB
poc-last-run.txtTXT24 KB
‹redacted›.pycPYC23 KB
poc-last-run.txtTXT23 KB
poc-last-run.txtTXT23 KB
poc-last-run.txtTXT23 KB
poc-last-run.txtTXT23 KB
poc-last-run.txtTXT23 KB
Stage1_15.2_15.5_jacurutu.jsJS23 KB
poc-last-run.txtTXT22 KB
poc-last-run.txtTXT22 KB
poc-last-run.txtTXT22 KB
poc-last-run.txtTXT22 KB
poc-last-run.txtTXT22 KB
poc-last-run.txtTXT22 KB
poc.pyPY21 KB
poc.pyPY21 KB
poc.pyPY21 KB
poc.pyPY21 KB
poc.pyPY21 KB
poc.pyPY19 KB
poc.pyPY19 KB
poc.pyPY19 KB
poc.pyPY19 KB
poc.pyPY19 KB
exploit.pyPY18 KB
BuyA7A5Page-CBIVu-id.jsJS17 KB
A_exploit_stock_alp.pyPY17 KB
A_exploit_stock.pyPY17 KB
P86_exploit.pyPY17 KB
‹redacted›.jsonlJSONL16 KB
stbe_openapi.jsonJSON16 KB
T88_exploit.pyPY15 KB
watch_82.logLOG15 KB
libcrc64.soELF15 KB
P74_stack_stop.pyPY14 KB
P74_stack_fast.pyPY14 KB
P74_fast.pyPY14 KB
P74_stack.pyPY14 KB
P74_stop.pyPY13 KB
P74_exploit.pyPY13 KB
P74_probe.pyPY13 KB
P74_exploit.py.bakBAK13 KB
packed-refsTXT13 KB
‹redacted›.jsonlJSONL13 KB
G2_arbread.pyPY13 KB
SellA7A5Page-Df89SGX0.jsJS11 KB
poc_rce_aslr_selfcal.pyPY11 KB
WRITEUP.mdMD9 KB
mysql-install-component-scheme-Abraxas-Labs.pyPY9 KB
mysql-set-role-leftover-Abraxas-Labs.pyPY9 KB
poc_rce_aslr_nodebug.pyPY9 KB
mysql-jdv-definer-sqli-Abraxas-Labs.pyPY9 KB
P88W_exploit.pyPY9 KB
README.mdMD9 KB
poc_rce_aslr_pie_rop.pyPY9 KB
crcspeed.cC9 KB
SUMMARY.mdMD8 KB
‹redacted›.templateTEMPLA8 KB
references.mdMD8 KB
poc_rce_aslr.pyPY8 KB
‹redacted›.origORIG7 KB
idor3.pyPY7 KB
reg_final.pyPY6 KB
forgot2.pyPY6 KB
forgot_flow.pyPY6 KB
crc64.cC5 KB
calib_alpine.pyPY5 KB
calib_748alp.pyPY5 KB
full_reg4.pyPY5 KB
scripts.jsonJSON5 KB
poc_rce_aslr_off.pyPY5 KB
full_reg5.pyPY5 KB
login_flow.pyPY5 KB
find-spray-landing.pyPY5 KB
reset_test.pyPY5 KB
full_reg2.pyPY4 KB
brute-sweep.pyPY4 KB
P88W_corrupt.pyPY4 KB
poc_typeconfusion.pyPY4 KB
LAB-RCE-PROOF.mdMD4 KB
login_flow2.pyPY4 KB
P74_g2.pyPY4 KB
README.mdMD4 KB
full_reg.pyPY4 KB
rank_scan.pyPY4 KB
fresh_probe.pyPY4 KB
README.mdMD4 KB
deep82.pyPY4 KB
README.mdMD4 KB
mk_order.pyPY4 KB
rank_scan2.pyPY4 KB
P88W_lib.pyPY4 KB
full_reg3.pyPY4 KB
poc_dos_overread.pyPY4 KB
mysql_credhunt.pyPY4 KB
poc_doublefree.pyPY4 KB
mysql_banner_grab.pyPY3 KB
versions.shSH3 KB
harbor2.pyPY3 KB
A_lib.pyPY3 KB
probe_carriers.pyPY3 KB
rank_final.pyPY3 KB
HARDENING.mdMD3 KB
generate-stackbrew-library-mac.shSH3 KB
wave2.pyPY3 KB
doswap.pyPY3 KB
generate-stackbrew-library.shSH3 KB
biz_login2.pyPY3 KB
brute_slider.pyPY3 KB
calib_fresh.pyPY3 KB
regain.pyPY3 KB
brute2.pyPY3 KB
LoginPage2.jsJS2 KB
swap4.pyPY2 KB
xrpl_crawl3.pyPY2 KB
regain2.pyPY2 KB
measure.pyPY2 KB
discover-addresses.shSH2 KB
mkwallet.pyPY2 KB
run.shSH2 KB
dbg_slider.pyPY2 KB
swap5.pyPY2 KB
quote2.pyPY2 KB
swap6.pyPY2 KB
witness_sweep.pyPY2 KB
solve_slider.pyPY2 KB
order_test.pyPY2 KB
biz_api3.pyPY2 KB
swap2.pyPY2 KB
kyb_submit.pyPY2 KB
kyb5.pyPY2 KB
order_test2.pyPY2 KB
mysql_pipeline_status.logLOG2 KB
kyb4.pyPY2 KB
calib_shift.pyPY2 KB
idor2.pyPY2 KB
run.shSH2 KB
run.shSH2 KB
run.shSH2 KB
run.shSH2 KB
SECURITY.mdMD2 KB
biz_probe.pyPY2 KB
biz_api.pyPY2 KB
ws_probe.pyPY1 KB
btc_probe.pyPY1 KB
kyb3.pyPY1 KB
mysql_hit_enrich.pyPY1 KB
swap3.pyPY1 KB
swap7.pyPY1 KB
P74_dual_loop.pyPY1 KB
analyze_full.pyPY1 KB
verify.shSH1 KB
debug-free-selfcal-8runs.txtTXT1 KB
mysql_fp.pyPY1 KB
kyc_page.pyPY1 KB
redis_brute.pyPY1 KB
clean_residue.pyPY1 KB
deposit1.pyPY1 KB
quote3.pyPY1 KB
cedex_auth.pyPY1 KB
harbor_probe.pyPY1 KB
watch_13140.logLOG1 KB
deposit2.pyPY1 KB
DockerfileTXT1 KB
LICENSETXT1 KB
panel_probe.pyPY1 KB
idor_test.pyPY1 KB
swap_quote.pyPY1 KB
grafana_check.pyPY1 KB
P74_fl_138.pyPY1 KB
watch_db118.logLOG1 KB
P74_reconloop.pyPY1 KB
type-confusion-proof.txtTXT1 KB
P74_fastloop.pyPY1 KB
op_sso.pyPY1 KB
redis_dirs.pyPY1 KB
watch_10381.shSH1 KB
watch_13140.shSH1 KB
P74_fastloop6325.pyPY1 KB
P74_fl_6327.pyPY1 KB
P74_fastloop3.pyPY1 KB
providers.jsonJSON1 KB
activate.pyPY1 KB
quote4.pyPY1 KB
db_probe.pyPY1 KB
chal_dump.pyPY1 KB
bsc_pwn.pyPY1 KB
act3.pyPY1 KB
mongo_watch.shSH1 KB
P74_fastloop2.pyPY1 KB
jetty_sweep.pyPY1 KB
kyb_doc_get.pyPY1 KB
P74_fl_6372.pyPY1 KB
P74_revshell.pyPY1 KB
mysql_brute.pyPY1 KB
rshell_handler3.pyPY1 KB
reg_flow.pyPY1 KB
calibrate.shSH1 KB
demo.shSH1 KB
P74_stack_leakloop.pyPY1 KB
P74_stack_leakloop2.pyPY1 KB
rshell_handler4.pyPY1 KB
rshell_handler5.pyPY1 KB
rshell_handler6.pyPY1 KB
rshell_handler7.pyPY1 KB
watch_82.shSH1 KB
act2.pyPY1 KB
xrpl_crawl.logLOG1 KB
rshell_handler.pyPY1 KB
redis_pwn.pyPY1 KB
biz_login.pyPY1 KB
ssh_banners.pyPY1 KB
server.pyPY1 KB
mysql_watchdog.shSH1 KB
zk_influx.pyPY1 KB
apply-templates.shSH1 KB
docker2376.pyPY1015 B
cosmos_check.pyPY1006 B
redis_keys.pyPY996 B
db_watch.shSH986 B
biz_api2.pyPY966 B
pie-rop-libc-free-run.txtTXT963 B
rce-proof.txtTXT944 B
apisix_exec.pyPY939 B
corp_sso.pyPY933 B
watch_hydra_mainnet.shSH932 B
recon6327.pyPY909 B
P74_firefast.shSH885 B
‹redacted›.plistPLIST867 B
sh2.pyPY815 B
redis_recon.pyPY769 B
watch_mongo118.logLOG748 B
make_probe.pyPY722 B
labtest3.pyPY711 B
labtest4.pyPY710 B
labtest5.pyPY710 B
labtest6.pyPY710 B
labtest7.pyPY710 B
labtest8.pyPY710 B
P74_loop.shSH693 B
calib.logLOG690 B
labtest2.pyPY689 B
labtest.pyPY688 B
session-rce-aslr-on.txtTXT677 B
session-selfcal-nodebug.txtTXT675 B
‹redacted›.cppCPP669 B
docker-entrypoint.shSH661 B
fire.pyPY654 B
cw_probe.pyPY654 B
setup.shSH619 B
rc.pyPY607 B
P86_run.shSH592 B
session-pie-rop.txtTXT521 B
sh.pyPY514 B
wallet.htmlHTML436 B
scan2.pyPY419 B
xmpp.pyPY387 B
scan1.pyPY384 B
docker-compose.ymlYML383 B
session-reliability.txtTXT379 B
mailbox_token.txtTXT361 B
scan4.pyPY344 B
scan3.pyPY318 B
smartcaptcha_token.txtTXT312 B
sso_access_token.txtTXT305 B
configTXT282 B
.gitignoreGITIGN278 B
configTXT278 B
docker-compose.ymlYML272 B
configTXT271 B
configTXT270 B
configTXT268 B
configTXT265 B
configTXT265 B
script_wallets-extract.txtTXT263 B
mysql_credhunt.logLOG263 B
docker-compose.ymlYML238 B
entrypoint.shSH203 B
script_keychain-scan.txtTXT191 B
exchange_user_token.txtTXT187 B
.gitattributesGITATT151 B
update.shSH134 B
mysql_banner_grab.logLOG130 B
packed-refsTXT112 B
packed-refsTXT112 B
packed-refsTXT112 B
packed-refsTXT112 B
packed-refsTXT112 B
packed-refsTXT112 B
anchorConfig-DhxCJRKA.jsJS110 B
FETCH_HEADTXT100 B
descriptionTXT73 B
watch_10381.logLOG48 B
.gitignoreGITIGN46 B
HEADTXT41 B
ORIG_HEADTXT41 B
.gitignoreGITIGN31 B
.gitignoreGITIGN31 B
HEADTXT21 B
.gitignoreGITIGN17 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

46.250.255.73confirmed
1.234.83.89confirmed
101.36.112.205confirmed
102.209.224.40confirmed
103.117.136.137confirmed
103.131.51.199confirmed
103.133.216.219confirmed
103.35.216.13confirmed
110.93.250.7confirmed
114.110.182.150confirmed
115.29.202.62confirmed
118.25.25.81confirmed
118.69.78.91confirmed
122.166.178.204confirmed
122.186.156.66confirmed