huntback / IP intelligence

159.69.66.161

DATACENTERoperator-submittedloot-ipc2exploitexposed-secretmalware

Intelligence

ASN / OrgAS24940 · Hetzner Online GmbH

CountryGermany

NetworkDATACENTER · risk 60/100

Threat score0/100

Open ports22, 3000, 8091, 8765

Loot harvested705 file(s), 15562 KB · c2, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

File	Type	Size
cc-clear.json	JSON	1.6 MB
net-none.json	JSON	1.4 MB
nl-pack.json	JSON	1.4 MB
net.json	JSON	1.3 MB
cc-none.json	JSON	1.3 MB
nl-none.json	JSON	1.3 MB
net-all.json	JSON	1.2 MB
net-one.json	JSON	805 KB
h2d-netlog.json	JSON	672 KB
crd.html	HTML	435 KB
‹redacted›.cc	CC	381 KB
‹redacted›.crx.zip	ZIP	210 KB
bex-solve.json	JSON	150 KB
‹redacted›.cc	CC	107 KB
bex-score-4x-5.log	LOG	78 KB
bex-score-4x-4.log	LOG	75 KB
bindings.txt	TXT	74 KB
bundle_three.js	JS	74 KB
bex-score-4x-2.log	LOG	67 KB
bex-score-4x-3.log	LOG	66 KB
‹redacted›.cc	CC	55 KB
first_party_sets.db	DB	48 KB
first_party_sets.db	DB	48 KB
bex-score-4x.log	LOG	45 KB
probe_more.json	JSON	45 KB
eslint-media.json	JSON	42 KB
deep2.json	JSON	42 KB
deep1.json	JSON	41 KB
eslint-fix.json	JSON	37 KB
_browser_notwin.py	PY	37 KB
‹redacted›.jsonl	JSONL	31 KB
min_payload.json	JSON	31 KB
‹redacted›.head.js	JS	29 KB
‹redacted›.packed.js	JS	29 KB
‹redacted›.eslint.js	JS	26 KB
bex_iframe.json	JSON	24 KB
‹redacted›.jsonl	JSONL	20 KB
alone_twice.json	JSON	17 KB
hard11_egress_run.log	LOG	17 KB
confirm_ec_direct.log	LOG	16 KB
f.html	HTML	14 KB
network_vpn.js	JS	14 KB
probe_more.log	LOG	13 KB
deep2.log	LOG	13 KB
bip39-english.txt	TXT	12 KB
probe_gap12.py	PY	11 KB
probe_new_signal.py	PY	11 KB
probe_four.py	PY	10 KB
probe_fp_ntr.py	PY	10 KB
miner_proctor_score.json	JSON	9 KB
‹redacted›.container.py	PY	9 KB
bex_gap_probe.py	PY	9 KB
inspector-sinks.txt	TXT	9 KB
probe_misses.py	PY	8 KB
http8892.log	LOG	8 KB
probe_nodet.py	PY	8 KB
probe_justice5.py	PY	8 KB
probe_dns_cluster.py	PY	8 KB
probe_force_batch.py	PY	8 KB
probe_icon_pdf.py	PY	8 KB
probe_aha_mem.py	PY	8 KB
probe_hsts_dns.py	PY	8 KB
probe_force2.py	PY	8 KB
probe_nav_capability.py	PY	8 KB
probe_miss.py	PY	8 KB
probe_aha_iso.py	PY	8 KB
probe_fp_timing.py	PY	7 KB
active_force.log	LOG	7 KB
‹redacted›.mjs	MJS	7 KB
probe_aha_jumps.py	PY	7 KB
probe_arp_nontwin.py	PY	7 KB
probe_cc_packs.py	PY	7 KB
probe_add_blocks.py	PY	7 KB
probe_cookie_oracle.py	PY	7 KB
probe_auth_nav.py	PY	7 KB
probe_full_parallel.py	PY	7 KB
probe_hunt.py	PY	6 KB
probe_misses2.py	PY	6 KB
probe_five.py	PY	6 KB
probe_cc_fp.py	PY	6 KB
probe_iframe_dns.py	PY	6 KB
probe_clear_pack.py	PY	6 KB
probe_h264_theme.py	PY	6 KB
probe_arp_observe.py	PY	6 KB
probe_four_new.py	PY	6 KB
probe_ntr_gap2.py	PY	6 KB
probe_pair_pip.py	PY	6 KB
probe_aha_popup.py	PY	6 KB
probe_ntr_113.py	PY	6 KB
probe_aha_pack.py	PY	6 KB
probe_ear_click2.py	PY	6 KB
probe_bg_popup.py	PY	6 KB
probe_aha_steps.py	PY	6 KB
micro_all.log	LOG	6 KB
probe_missing_net.py	PY	6 KB
probe_force_hits.py	PY	6 KB
probe_pip_coi.py	PY	6 KB
probe_ntr_ga_pip.py	PY	6 KB
probe_clippers.py	PY	5 KB
confirm_ec_twins.log	LOG	5 KB
bex_iframe_probe.py	PY	5 KB
probe_1vpn_always_on.py	PY	5 KB
popup_windowproxy_run.log	LOG	5 KB
bex_all_gap.py	PY	5 KB
probe_ntr_afterfocus.py	PY	5 KB
probe_batch_fp.py	PY	5 KB
probe_aha_step.py	PY	5 KB
confirm_twins_map.log	LOG	5 KB
bait_all.log	LOG	5 KB
probe_arp_errmsg.py	PY	5 KB
probe_more.py	PY	5 KB
probe_h264.py	PY	5 KB
bex_install_len.py	PY	5 KB
probe_ntr2.py	PY	5 KB
‹redacted›.jsonl	JSONL	5 KB
probe_buddy_yield.py	PY	5 KB
probe_otp_hsts.py	PY	5 KB
probe_cc_half.py	PY	5 KB
probe_csp_dns.py	PY	5 KB
probe_ntp_viewport.py	PY	5 KB
probe_h264_why.py	PY	5 KB
probe_aha_script_timing.py	PY	5 KB
probe_ka_dns.py	PY	5 KB
probe_ear_force.py	PY	5 KB
probe_clearcache.py	PY	5 KB
probe_ntr_child.py	PY	5 KB
probe_aha_detect.py	PY	5 KB
probe_cors_ua_pip2.py	PY	5 KB
probe_mobility_focus.py	PY	5 KB
probe_miss2.py	PY	5 KB
probe_iframes.py	PY	5 KB
probe_nontime.py	PY	5 KB
probe_aha_surface.py	PY	5 KB
probe_ntr_fullpack.py	PY	5 KB
probe_arp_apex.py	PY	5 KB
probe_clean_commit.py	PY	5 KB
micro1.json	JSON	5 KB
probe_last.py	PY	5 KB
bex_behavior_probe.py	PY	5 KB
confirm_detectors.py	PY	5 KB
probe_msgs.py	PY	5 KB
probe_arp_channels.py	PY	5 KB
probe_ntr_miss.py	PY	5 KB
probe_bait_side.py	PY	5 KB
probe_1vpn_local.py	PY	5 KB
probe_arp_props.py	PY	5 KB
probe_parallel_idle.py	PY	5 KB
probe_ka_hsts.py	PY	5 KB
probe_ntr_flash.py	PY	5 KB
probe_active_gap.py	PY	5 KB
dns_probe_miss.py	PY	5 KB
probe_focus_close.py	PY	5 KB
bex_perms.py	PY	4 KB
probe_ntr_when.py	PY	4 KB
probe_cache_delta.py	PY	4 KB
probe_bait_frozen.py	PY	4 KB
probe_media.py	PY	4 KB
probe_gap_net.py	PY	4 KB
probe_chrome_dump.py	PY	4 KB
bex_hsts_probe.py	PY	4 KB
probe_foxy_auth.py	PY	4 KB
probe_def_ntr_vdh.py	PY	4 KB
probe_h264_sb.py	PY	4 KB
bex_focus_probe.py	PY	4 KB
probe_ntr_vdp_miss.py	PY	4 KB
probe_net_gmass.py	PY	4 KB
probe_daichi.py	PY	4 KB
probe_ntr_gap.py	PY	4 KB
probe_ear_click.py	PY	4 KB
probe_new_channels.py	PY	4 KB
probe_ka_piggy.py	PY	4 KB
probe_camel_ua.py	PY	4 KB
probe_ka_dns2.py	PY	4 KB
probe_arp_deadport.py	PY	4 KB
probe_foxy_401.py	PY	4 KB
bex_hist_back.py	PY	4 KB
probe_expand.py	PY	4 KB
probe_ntr_early.py	PY	4 KB
probe_display_media.py	PY	4 KB
bex_score_run_3.log	LOG	4 KB
probe_pack12_binary.py	PY	4 KB
probe_ka_rule.py	PY	4 KB
‹redacted›.jsonl	JSONL	4 KB
probe_bands.py	PY	4 KB
probe_install_cache_k12.py	PY	4 KB
probe_cache_delta2.py	PY	4 KB
probe_onenote_gmass_voices.py	PY	4 KB
probe_bools.py	PY	4 KB
probe_arp_nx.py	PY	4 KB
probe_latch.py	PY	4 KB
confirm_ec_twins2.log	LOG	4 KB
probe_live_media.py	PY	4 KB
probe_cache_confirm_repeat.py	PY	4 KB
bex_score_run_2.log	LOG	4 KB
bex_restore_probe.py	PY	4 KB
bex_score_run_1.log	LOG	4 KB
bex_hsts_hist.py	PY	4 KB
bex_http_leak.py	PY	4 KB
probe_h264_https.py	PY	4 KB
probe_inject.py	PY	4 KB
probe_h264_net.py	PY	4 KB
probe_ntr_switch.py	PY	4 KB
probe_h264_mixdiag.py	PY	4 KB
clippers_probe.log	LOG	4 KB
probe_fix2.py	PY	4 KB
probe_aha_artifact.py	PY	4 KB
probe_aha_full.py	PY	4 KB
probe_netlog_left.py	PY	4 KB
probe_cc_cache.py	PY	4 KB
probe_auth_hsts.py	PY	4 KB
probe_arp_retake.py	PY	4 KB
probe_all.py	PY	4 KB
probe_dump_bisect.py	PY	4 KB
force_batch.log	LOG	4 KB
bex_cookie_len.py	PY	3 KB
probe_ntr_focus.py	PY	3 KB
probe_arp_dom.py	PY	3 KB
h264_parent_api_run.log	LOG	3 KB
probe_ntr_parent.py	PY	3 KB
probe_install_cache_confirm.py	PY	3 KB
probe_dns_cuts.py	PY	3 KB
probe_cc_font.py	PY	3 KB
probe_arp_idle_run.log	LOG	3 KB
probe_auth_full.py	PY	3 KB
probe_gap_apis.py	PY	3 KB
probe_fix_rate.py	PY	3 KB
probe_idle_detect.py	PY	3 KB
probe_install_dns.py	PY	3 KB
diag_fathom.py	PY	3 KB
probe_font_pack.py	PY	3 KB
probe_cc_dns.py	PY	3 KB
probe_click_gmass.py	PY	3 KB
probe_fathom_pack12.py	PY	3 KB
probe_asset_cache.py	PY	3 KB
probe_cc_nocors.py	PY	3 KB
bex_outer_reps.py	PY	3 KB
probe_aha_popup_delta.py	PY	3 KB
probe_ka_quiet.py	PY	3 KB
probe_external_frames.py	PY	3 KB
probe_listener_timing.log	LOG	3 KB
fp_rounds.py	PY	3 KB
probe_ctx.py	PY	3 KB
probe_bait_jump.py	PY	3 KB
probe_fathom_miss.py	PY	3 KB
probe_cut.py	PY	3 KB
bex_popup_len.py	PY	3 KB
probe_foxy_webrtc.py	PY	3 KB
bex-focus-debug4.log	LOG	3 KB
probe_aha_heap.py	PY	3 KB
probe_dns_remain.py	PY	3 KB
‹redacted›.out	OUT	3 KB
probe_gate12.py	PY	3 KB
confirm_onenote.log	LOG	3 KB
diag_fathom_rows.py	PY	3 KB
probe_1vpn.py	PY	3 KB
probe_ntr_easy.log	LOG	3 KB
probe_aha_when.py	PY	3 KB
probe_arp_http.py	PY	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
Local%20State	TXT	3 KB
diag_fathom_retry.py	PY	3 KB
bex_gmass_hist.py	PY	3 KB
probe_other_ext.py	PY	3 KB
probe_intern4.py	PY	3 KB
probe_auth_commit.py	PY	3 KB
probe_history6.py	PY	3 KB
diag_vdh_fathom.py	PY	3 KB
probe_blank_cs.py	PY	3 KB
probe_font_cache.py	PY	3 KB
probe_ntr_split.py	PY	3 KB
probe_ab.py	PY	3 KB
probe_aha_settled.py	PY	3 KB
bex_gap_series.py	PY	3 KB
probe_net_diff.py	PY	3 KB
probe_coop.py	PY	3 KB
inventory_remaining.py	PY	3 KB
probe_ntr_morph.py	PY	3 KB
probe_oe.py	PY	3 KB
probe_messages.py	PY	3 KB
probe_pip_confirm.py	PY	3 KB
probe_arp_defender.py	PY	3 KB
probe_ntr_provoke.py	PY	3 KB
probe_img_closed.py	PY	3 KB
‹redacted›.out	OUT	3 KB
probe_arp_leak.py	PY	3 KB
probe_delivery.py	PY	3 KB
bex_cs_len.py	PY	3 KB
probe_cc_face.py	PY	3 KB
probe_aha_dom.py	PY	3 KB
probe_aha_repeat_delta.py	PY	3 KB
probe_aha_from_bait.py	PY	3 KB
probe_ntr_frame.py	PY	3 KB
probe_both_any.py	PY	3 KB
cors_ua_pip2.log	LOG	3 KB
bex_fathom_discover.py	PY	3 KB
probe_fp_dns.py	PY	3 KB
probe_arp_propdiff.py	PY	3 KB
probe_camel_dns.py	PY	3 KB
diag_loaded.py	PY	3 KB
probe_dns_quiet12.py	PY	3 KB
probe_iframe_cache.py	PY	3 KB
probe_fathom_timing.py	PY	3 KB
probe_aha_residue.py	PY	3 KB
bex_cookies.py	PY	3 KB
probe_gap9.py	PY	3 KB
probe_keep_awake.py	PY	3 KB
probe_arp_dead2.py	PY	3 KB
probe_clear_net.py	PY	3 KB
probe_devices.py	PY	3 KB
probe_pip_auto.py	PY	3 KB
bex_war_timing_fathom.py	PY	3 KB
bex_401.py	PY	3 KB
probe_arp_redirect_oracle.py	PY	3 KB
probe_id_oracle.py	PY	3 KB
probe_heap_n.py	PY	3 KB
diag_fathom_fp.py	PY	3 KB
probe_arp_welcome.py	PY	3 KB
probe_map.py	PY	3 KB
bex_docs_mark.py	PY	3 KB
probe_heap_growth.py	PY	3 KB
probe_arp_race.py	PY	3 KB
probe_arp_iframe_world.py	PY	3 KB
probe_dns_click_gmass.py	PY	3 KB
probe_fp_dns2.py	PY	3 KB
popups_safe.log	LOG	3 KB
probe_arp_trial.py	PY	3 KB
probe_auth_dns.py	PY	2 KB
probe_auth_sub.py	PY	2 KB
probe_focus.py	PY	2 KB
probe_auth_vis.py	PY	2 KB
probe_eid_gmass.py	PY	2 KB
probe_install_live.py	PY	2 KB
pool_names.tsv	TSV	2 KB
probe_aha_dispatch.py	PY	2 KB
minitest.log	LOG	2 KB
probe_camel.py	PY	2 KB
probe_pip_click.py	PY	2 KB
probe_icloud_bar.py	PY	2 KB
bex_163_reps.py	PY	2 KB
probe_crd.py	PY	2 KB
probe_aha_nav.py	PY	2 KB
probe_internals.py	PY	2 KB
probe_aha_delta.py	PY	2 KB
probe_arp_opaque.py	PY	2 KB
probe_gmass_vis.py	PY	2 KB
probe_heap_late.py	PY	2 KB
probe_opener_msgs.py	PY	2 KB
probe_hist.py	PY	2 KB
probe_coop_report.py	PY	2 KB
probe_arp_timing.py	PY	2 KB
confirm_new_heuristics.py	PY	2 KB
bex_search_provider.py	PY	2 KB
probe_mobility_print_timing.py	PY	2 KB
probe_h264_mix.py	PY	2 KB
probe_pie.py	PY	2 KB
probe_eco_pop.py	PY	2 KB
probe_ntr_newtab.py	PY	2 KB
probe_growth_live.py	PY	2 KB
probe_iframe_heap.py	PY	2 KB
probe_heap_jumps.py	PY	2 KB
frame_leak_run.log	LOG	2 KB
probe_cache_after_close.py	PY	2 KB
probe_auth_body.py	PY	2 KB
dockertoken	TXT	2 KB
probe_install_tab.py	PY	2 KB
probe_heap_fit.py	PY	2 KB

Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

124.220.164.14

confirmed