huntback / IP intelligence
193.143.1.99
Intelligence
ASN / OrgAS198953 · Proton66 OOO
CountryRussia
NetworkVPN · risk 70/100
Threat score0/100
Open ports22, 80, 443, 4444, 8000, 31337, 7000, 8080
Servicenginx/1.18.0 (Ubuntu) · Element
Productsnginx
Loot harvested41 file(s), 40402 KB · elf-binary, exploit, exposed-secret, malware
Open directory contents (41)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| ‹redacted›.cpio.gz | GZ | 4.7 MB |
| ‹redacted›.cpio.gz | GZ | 4.3 MB |
| ‹redacted›.cpio.gz | GZ | 3.8 MB |
| ‹redacted›.cpio.gz | GZ | 3.8 MB |
| ‹redacted›.cpio.gz | GZ | 3.8 MB |
| ‹redacted›.cpio.gz | GZ | 3.8 MB |
| ‹redacted›.cpio.gz | GZ | 3.5 MB |
| ‹redacted›.cpio.gz | GZ | 3.4 MB |
| repro | ELF | 887 KB |
| repro | ELF | 887 KB |
| qemu_kqx_ata | ELF | 862 KB |
| cea_iopl_test | ELF | 856 KB |
| stack_inspect | ELF | 856 KB |
| iret_iopl_test | ELF | 852 KB |
| qemu_helper | ELF | 851 KB |
| ‹redacted›.new | ELF | 815 KB |
| repro_fresh | ELF | 815 KB |
| ‹redacted›.small | ELF | 788 KB |
| repro.c | C | 61 KB |
| qemu_ata_solve | ELF | 29 KB |
| pow29 | ELF | 17 KB |
| ‹redacted›.ko | ELF | 14 KB |
| qemu_kqx_ata.c | C | 8 KB |
| sp0_rip_test.c | C | 6 KB |
| pow29.c | C | 6 KB |
| qemu_ata_solve.c | C | 5 KB |
| cea_iopl_test.c | C | 3 KB |
| stack_inspect.c | C | 3 KB |
| iret_iopl_test.c | C | 2 KB |
| run_pid1traptest.log | LOG | 1 KB |
| config.json | JSON | 1 KB |
| qemu_helper.c | C | 1 KB |
| ‹redacted›.bgtrapfake.sh | SH | 1 KB |
| run_bgtrapfake.log | LOG | 1 KB |
| init | TXT | 1 KB |
| init.pid1traptest.sh | SH | 1 KB |
| ‹redacted›.qemuatasolve.sh | SH | 942 B |
| run_qemuatasolve.log | LOG | 348 B |
| run.sh | SH | 292 B |
| ._run.sh | SH | 249 B |
| ._initramfs.test-solve.cpio.gz | GZ | 163 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 101.132.21.226 | lead |
| 103.173.66.91 | lead |
| 104.248.148.135 | lead |
| 138.201.253.154 | lead |
| 14.225.205.58 | lead |
| 149.56.192.144 | lead |
| 157.230.117.116 | lead |
| 157.230.117.158 | lead |
| 159.223.77.102 | lead |
| 167.99.157.173 | lead |
| 172.105.156.128 | lead |
| 177.72.80.14 | lead |
| 182.162.143.56 | lead |
| 187.188.105.74 | lead |
| 188.165.241.88 | lead |