huntback / IP intelligence

199.19.95.66

DATACENTERoperator-submittedioc-tweetfeedloot-ipexploitexposed-secretmacho-binary

Intelligence

ASN / OrgAS7040 · Netminders Server Hosting
CountryCanada
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 8095, 8099, 8100, 9443, 8080, 8081, 8888, 111, 8000, 18081
ServiceSimpleHTTP/0.6 Python/3.14.9 · Directory listing for /
Loot harvested57 file(s), 43104 KB · elf-binary, exploit, exposed-secret, macho-binary, malware, mozi

Open directory contents (57)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
wisp-http.binELF6.0 MB
wisp-new.binELF6.0 MB
a2ELF6.0 MB
b2ELF6.0 MB
b2_patchedELF6.0 MB
wisp-linux-amd64-c429e387e11bELF6.0 MB
wisp-linux-amd64-c6c63941a15fELF6.0 MB
‹redacted›.outOUT29 KB
hits.logLOG14 KB
harbor_jenkins.pyPY6 KB
vc_gops1b.pyPY6 KB
vc_role_scan_run.pyPY5 KB
vc_role_scan.pyPY5 KB
vc_h3_rootb.pyPY5 KB
vc_checkcreds2.pyPY5 KB
vc_h3_root.pyPY5 KB
vc_dos_scan.pyPY5 KB
vc_dos_verify.pyPY5 KB
vc_ann2.pyPY5 KB
vc_scan16b.pyPY5 KB
vc_builds.pyPY4 KB
jndi_srv.pyPY4 KB
vc_dos_pivot.pyPY4 KB
vc_ssh_pivot.pyPY4 KB
vc_detail3.pyPY4 KB
vc_scan16.pyPY4 KB
fp443b.pyPY4 KB
vc_detail2.pyPY4 KB
vc_ann.pyPY4 KB
vc_exec.pyPY3 KB
vc_extra.pyPY3 KB
topo_collect2.pyPY3 KB
vc_gops1.pyPY3 KB
topo_collect.pyPY3 KB
vc_gops_fix.pyPY3 KB
e1_gitlab_harbor.pyPY3 KB
vc_extra3.pyPY3 KB
vc_detail.pyPY3 KB
vc_checkcreds.pyPY3 KB
e4_mgmt.pyPY2 KB
e6_gitlab_secrets.pyPY2 KB
eks_cleanup.pyPY2 KB
fp443.pyPY2 KB
vc_raw.pyPY2 KB
ssh_topo2.pyPY1 KB
ssh_gcloud_ls.pyPY1 KB
ssh_probe.pyPY1 KB
ssh_adc.pyPY1 KB
vc_collect.pyPY1 KB
jk_rce.pyPY1 KB
ssh_gcpkeys2.pyPY1 KB
ssh_gcpkeys.pyPY1 KB
‹redacted›.outOUT763 B
‹redacted›.classMACHO597 B
‹redacted›.javaJAVA253 B
ldap.pyTXT14 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

199.19.95.67confirmed
199.19.95.68confirmed
111.223.247.165confirmed
178.16.52.154confirmed
18.136.195.202confirmed
213.177.179.14confirmed
4.193.248.52confirmed
45.152.149.32confirmed
94.130.22.61confirmed
100.21.82.169confirmed
101.36.112.205confirmed
101.42.136.73confirmed
101.47.156.26confirmed
102.204.222.159confirmed
102.210.149.166confirmed