huntback / IP intelligence

178.62.235.52

DATACENTERoperator-submittedloot-ipc2exploitexposed-secretmalware

Intelligence

ASN / OrgAS14061 · DigitalOcean, LLC
CountryThe Netherlands
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 8443, 8765
Servicenginx/1.24.0 (Ubuntu) · Octa CRM — Вход
Productsnginx
Loot harvested209 file(s), 18754 KB · c2, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (209)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
yt_search.htmlHTML1.9 MB
gf_last.htmlHTML1.7 MB
yt_ey.htmlHTML1.3 MB
‹redacted›.dom.htmlHTML1.2 MB
ug_eed69f.htmlHTML940 KB
l2.htmlHTML915 KB
yt_chan.htmlHTML879 KB
ug_2cced6.htmlHTML865 KB
ug_a3c453.htmlHTML865 KB
kb_route.htmlHTML667 KB
gf.htmlHTML646 KB
l3.htmlHTML550 KB
l1.htmlHTML523 KB
tt_271671.htmlHTML460 KB
av_r6.htmlHTML379 KB
wk.htmlHTML280 KB
‹redacted›.min.jsJS276 KB
wip-server-rename.jsJS266 KB
wip-server-equipment.jsJS265 KB
server-ship.jsJS265 KB
wip-server.jsJS254 KB
k28-server-wip.jsJS245 KB
‹redacted›.ship.jsJS244 KB
seo_as_dep.htmlHTML234 KB
rt.htmlHTML234 KB
ae_UGREEN%2520NAS.htmlHTML232 KB
ae_UGREEN%2520HomeAgent.htmlHTML232 KB
hermes-config-example.yamlYAML128 KB
win_ovh.logLOG103 KB
bing.htmlHTML92 KB
‹redacted›.min.jsJS85 KB
wk_stl_es.htmlHTML78 KB
wk_stl.htmlHTML78 KB
‹redacted›.min.jsJS68 KB
hermes-install-raw.shSH65 KB
t_tutu.htmlHTML61 KB
tt_85ae6e.htmlHTML61 KB
first_party_sets.dbDB48 KB
first_party_sets.dbDB48 KB
class-router.phpPHP36 KB
skills_readme.mdMD26 KB
pr.htmlHTML25 KB
durable_inbox.pyPY23 KB
backup_watch.pyPY21 KB
‹redacted›.pycPYC16 KB
test_durable_inbox.pyPY15 KB
test_router.pyPY15 KB
test_router.pyPY13 KB
vpnlab_reality_diag.pyPY12 KB
clients.phpPHP12 KB
__init__.pyPY11 KB
install_or_balance.pyPY11 KB
lane_final.pyPY11 KB
__init__.pyPY10 KB
inbox_bridge.pyPY10 KB
octa_full_audit.pyPY10 KB
athena_delegate_setup.pyPY10 KB
work.pyPY9 KB
install_inbox.pyPY9 KB
work.pyPY9 KB
staff.phpPHP9 KB
patch_hermes_router.pyPY9 KB
setup-studio-demo.pyPY9 KB
router.pyPY9 KB
octa-attachments.phpPHP8 KB
lane.pyPY8 KB
router.pyPY8 KB
phone_watch.logLOG8 KB
octa-layout.phpPHP8 KB
bench_qwen.pyPY8 KB
bench_a3b.pyPY8 KB
bookings.phpPHP8 KB
‹redacted›.min.jsJS8 KB
av2_r6.htmlHTML8 KB
athena_octalight_profile.pyPY7 KB
layout-http3.logLOG7 KB
mtproto_probe.pyPY7 KB
fix_model_ladder.pyPY7 KB
‹redacted›.mjsMJS7 KB
finish_tunnel.pyPY6 KB
hermes_tools.pyPY6 KB
test_inbox_bridge.pyPY6 KB
measure_fp_hello.pyPY6 KB
continue_tunnel.pyPY6 KB
athena_octalight_finish.pyPY6 KB
site_watch.pyPY6 KB
hermes_kernel_runner.pyPY5 KB
fix_bot_stability.pyPY5 KB
or_balance_watch.pyPY5 KB
lane_probe.pyPY5 KB
qwen32-ctx.pyPY5 KB
ru_cdp_mac.pyPY4 KB
athena-checkup.pyPY4 KB
test_hermes_fixes.pyPY4 KB
seed-rental-demo.sqlSQL4 KB
seed-studio-demo.pyPY4 KB
xhttp_speed.pyPY4 KB
google_imap.pyPY4 KB
crm_watch.pyPY4 KB
probe_safe.pyPY4 KB
patch_cfg_safe.pyPY3 KB
id_router2.pyPY3 KB
Local%20StateTXT3 KB
phase3a-joiner.logLOG3 KB
deploy_date_fix.shSH3 KB
ae_st2.logLOG3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
wire_adapted.pyPY3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
Local%20StateTXT3 KB
ae_dev2.logLOG3 KB
apt.logLOG3 KB
ae_ex2.logLOG3 KB
k28-pass-check.pyPY3 KB
restore_octa_config.pyPY3 KB
patch_sa_auth.pyPY3 KB
apt-venv.logLOG3 KB
probe_models.pyPY3 KB
ae_st1.logLOG3 KB
check_octa_memory2.pyPY3 KB
patch_cloud.pyPY3 KB
bookings-table.phpPHP3 KB
ae_ex1.logLOG3 KB
ae_dev1.logLOG3 KB
check_octa_memory.pyPY3 KB
chrome-debug.logLOG3 KB
google_imap.jsJS2 KB
k28-office-check.pyPY2 KB
mtproto_variants.pyPY2 KB
k28-shot30.logLOG2 KB
ae_red1.logLOG2 KB
local_image_plugin.pyPY2 KB
k28-bot-check.pyPY2 KB
ae_n300.logLOG2 KB
ae_nvme.logLOG2 KB
ae_hdd2.logLOG2 KB
restore_codex_primary.pyPY2 KB
k28-shot.logLOG2 KB
k28-shot29.logLOG2 KB
k28-office-nginx.pyPY2 KB
k28-staff-check.pyPY2 KB
fallback_openai.pyPY2 KB
imap_probe.jsJS2 KB
vv_bodyTXT2 KB
‹redacted›.zshZSH2 KB
chrome-phone.logLOG2 KB
proxy_probe2.pyPY2 KB
patch_cfg_now.pyPY1 KB
ae_iron1.logLOG1 KB
patch-demo-space.pyPY1 KB
‹redacted›.errERR1 KB
check-hold.pyPY1 KB
id_router.pyPY1 KB
proxy_probe.pyPY1 KB
fix_fallback_dup.pyPY1 KB
stage18b-verify.jsonJSON1 KB
pull_a3b.shSH1 KB
gh-device-login.pyPY1 KB
show_threshold.pyPY1 KB
ru_cdp.pyPY1 KB
fix_octa_fallback.pyPY1 KB
‹redacted›.zshZSH1 KB
apply_xhttp_realname.shSH1 KB
ru_avito.logLOG1 KB
test_router_models.pyPY1 KB
bench_athena.pyPY1 KB
fix_xray_perm.shSH1 KB
stage18c-dryrun.logLOG1 KB
athena-image.pyPY1 KB
check-grid.pyPY1 KB
ae_v4800.logLOG1 KB
ae_vmg08.logLOG1 KB
ae_vwolf.logLOG1 KB
ae_vpurp.logLOG1 KB
check-halls.pyPY1 KB
patch_egress.pyPY1 KB
patch-studio-demo.pyPY983 B
check-glink.pyPY922 B
check-label.pyPY898 B
k28-http.logLOG873 B
check-lines.pyPY870 B
warm-athena-models.pyPY837 B
gh-pexpect.logLOG803 B
ae_hdd1.logLOG772 B
check_stuck_msgs.pyPY707 B
check-day.pyPY624 B
stage18c-secret.logLOG584 B
layout-http2.logLOG556 B
mask.pyPY509 B
ru_avito2.logLOG504 B
rf_fetch.shSH470 B
ru_ym.logLOG431 B
gh-login.txtTXT333 B
rf_jina.shSH282 B
update_client.pyPY275 B
phase2c_host_apply.shSH247 B
run_hermes_tests.pyPY218 B
list_models.pyPY200 B
ru_dns.logLOG184 B
dbg.pyPY156 B
gh-transcript.txtTXT85 B
ae_cm1.logLOG27 B
.gitignoreGITIGN1 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.131.51.199confirmed
104.233.217.108confirmed
115.159.204.46confirmed
142.93.57.244confirmed
154.12.86.207confirmed
16.59.36.98confirmed
169.58.233.110confirmed
198.44.116.69confirmed
2.24.204.250confirmed
204.168.225.59confirmed
207.56.221.47confirmed
212.103.62.205confirmed
213.136.79.115confirmed
39.104.70.157confirmed
41.223.30.7confirmed