Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

147.182.133.56

DATACENTERoperator-submittedc2exploitexposed-secretgafgytmalware

Intelligence

ASN / OrgAS14061 · DigitalOcean, LLC
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 445, 8080, 8888
Loot harvested237 file(s), 34938 KB · c2, exploit, exposed-secret, gafgyt, malware, mirror

Open directory contents (237)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.ilIL8.8 MB
GxProgramsCommon.dllPE8.7 MB
smb.logLOG4.5 MB
agent-windows-amd64.exePE2.2 MB
p3000.htmlHTML1.2 MB
pz_play2.htmlHTML1.2 MB
play.htmlHTML1.2 MB
mprobe.htmlHTML1015 KB
n7.binBIN633 KB
wafbody.binBIN555 KB
‹redacted›.bodyBODY524 KB
b.binBIN290 KB
i008_unzip.logLOG277 KB
‹redacted›.ilIL267 KB
‹redacted›.ilIL255 KB
bpTXT167 KB
‹redacted›.ilIL130 KB
ad.binBIN121 KB
PetitPotam.exePE107 KB
auth_login.htmlHTML106 KB
i.binBIN104 KB
d.htmlHTML104 KB
p.htmlHTML104 KB
m.binBIN104 KB
l.binBIN104 KB
plesk_up.htmlHTML95 KB
b2.binBIN92 KB
xoxo2_full.phpPHP92 KB
asics_p.binBIN86 KB
mu.binBIN86 KB
i012_hotels_13.201.252.17_443.binBIN78 KB
be.binBIN71 KB
atb.binBIN58 KB
GodPotato-NET4.exeEXE56 KB
‹redacted›.outOUT47 KB
crm.binBIN41 KB
crm2.binBIN41 KB
i012_hotels_3.109.95.32_443.binBIN40 KB
iflpTXT38 KB
‹redacted›.outOUT36 KB
i015v.binBIN35 KB
i018_http.binBIN35 KB
‹redacted›.groovyGROOVY23 KB
asb.binBIN19 KB
hp.binBIN18 KB
‹redacted›.xmlXML17 KB
PetitPotam.pyPY16 KB
‹redacted›.login.htmlHTML15 KB
ss_sql_out5.txtTXT15 KB
t.binBIN14 KB
feat.binBIN13 KB
l8001.htmlHTML13 KB
l8003.htmlHTML13 KB
i018lg.htmlHTML13 KB
ehrms_i025_body.binBIN12 KB
i048_body.binBIN11 KB
‹redacted›.outOUT11 KB
elp.binBIN11 KB
s.binBIN9 KB
agh_install.batBAT8 KB
i018m.binBIN8 KB
i018b.binBIN8 KB
i018x.binBIN8 KB
agh_install.ps1PS18 KB
i015_body.binBIN8 KB
rams_home.htmlHTML7 KB
gxdec5.exePE7 KB
d.binBIN7 KB
gxdec.exePE7 KB
gxdec_final.exePE7 KB
gxcs.exePE6 KB
gxdec2.exePE6 KB
i018e.binBIN6 KB
hfsb.binBIN6 KB
vh80.binBIN6 KB
gxdec4.exePE6 KB
j.binBIN5 KB
ss_sql_out2.txtTXT5 KB
apk.binBIN5 KB
ssh_spray2.logLOG5 KB
p.binBIN5 KB
gxcheck.exePE5 KB
gxftp2.exePE5 KB
ss_sql_out1.txtTXT4 KB
my_root.htmlHTML4 KB
out.binBIN4 KB
auth_root.htmlHTML4 KB
gx2.exePE4 KB
gx3.exePE4 KB
gxdec_erp.exePE4 KB
gxlive2.exePE4 KB
gxdec_min.exePE4 KB
gxftp.exePE4 KB
gxlive.exePE4 KB
hfs-installed-head.binBIN4 KB
hfs-zip-head.binBIN4 KB
sa_fb.binBIN3 KB
‹redacted›.csCS3 KB
i015b.binBIN3 KB
config.goGO3 KB
‹redacted›.csCS2 KB
lbTXT2 KB
‹redacted›.protoPROTO2 KB
i038_doc.mdMD2 KB
‹redacted›.csCS2 KB
slogin.htmlHTML2 KB
sf.binBIN2 KB
i011_oidc.jsonJSON2 KB
i032_doc.mdMD2 KB
i018_doc.mdMD2 KB
i049_doc.mdMD2 KB
sendmail.goGO2 KB
‹redacted›.csCS2 KB
i041_doc.mdMD1 KB
bk.binBIN1 KB
i018a.binBIN1 KB
i017_probe.binBIN1 KB
ss_sql_cmds5.txtTXT1 KB
n4h.txtTXT1 KB
vh.binTXT1 KB
kr.dllDLL1 KB
ssh_spray.logLOG1 KB
ssh10_pws.txtTXT1 KB
ksei__actuator.binBIN1 KB
put.binBIN1 KB
ss_sql_cmds2.txtTXT1020 B
api_wl.txtTXT964 B
asx.binBIN932 B
.env.developmentDEVELO893 B
‹redacted›.bodyBODY874 B
ss_sql_cmds.txtTXT870 B
relay.logLOG851 B
‹redacted›.wlWL819 B
xoxo_mini.phpPHP814 B
.env.productionPRODUC793 B
gql.binBIN779 B
gqlg.binBIN771 B
ssh10_pws_clean.txtTXT684 B
i011_client.jsJS667 B
‹redacted›.aspxASPX650 B
base.goGO640 B
qnap_i049_pre.binBIN580 B
ksei__swagger-ui.html.binBIN564 B
mf.binBIN551 B
asiatech_body.bin520 B
i012_provider_13.206.71.205_443.binBIN474 B
post2.txtTXT470 B
i012_hotels_13.206.71.205_443.binBIN466 B
ob.binBIN454 B
post3.txtTXT434 B
o.binBIN413 B
f.binBIN394 B
sendmail_test.goGO393 B
i018l2.binBIN390 B
i018r.binBIN386 B
i012_provider_43.205.186.109_443.binBIN362 B
hta.binBIN358 B
i015_404.binTXT355 B
i015c.binBIN343 B
pobp.binBIN323 B
configTXT314 B
authdir.binBIN301 B
configTXT298 B
i015p.binBIN290 B
i029x.binBIN289 B
constants.goGO283 B
asics_g.binBIN282 B
main.goGO282 B
post1.txtTXT280 B
i012c.binBIN263 B
i012s3.binBIN263 B
ksei__service_iofiles_download_logo.binBIN239 B
ksei__service_demografis_updated-at.binBIN237 B
xoxo2.phpPHP217 B
ah.binBIN202 B
‹redacted›.aspxASPX181 B
words.txtTXT178 B
ksei__service_login.binBIN174 B
loginpost.txtTXT173 B
se.binBIN167 B
th.binBIN166 B
a.binBIN162 B
n4m.binBIN162 B
i030b.binBIN159 B
run_smb.shSH159 B
n4.binENV146 B
asics_git_configTXT134 B
ap.binTXT132 B
h.binBIN122 B
up2.binBIN119 B
packed-refsTXT119 B
asiatech_i033_probe2.binBIN118 B
q.binBIN115 B
packed-refsTXT114 B
baTXT112 B
g.binBODY111 B
i015q.binBIN107 B
errors.goGO101 B
garbodyTXT96 B
ksei__service_nab-reksadana_param_v2_.binBIN92 B
ksei__service_forgot-password_verify_image.binBIN89 B
apex_one.binBIN86 B
xoxo_marker.phpPHP86 B
absen.xls.phpPHP82 B
ksei__service_auth_login.binBIN76 B
cwh2.binBIN74 B
descriptionTXT73 B
fb.binBIN65 B
gxbody.binBIN57 B
i012php.binBIN55 B
‹redacted›.bodyBODY47 B
i017p.binBIN42 B
opt.binBODY42 B
shallowTXT41 B
shallowTXT41 B
i.phpPHP31 B
s.phpPHP30 B
xoxo_poly.gif.phpPHP30 B
xoxo_rce.phpPHP30 B
x.jpg.phpPHP28 B
HEADTXT28 B
‹redacted›.phtmlPHTML27 B
i021part.binBIN26 B
u.binBIN26 B
w185_8080.binBIN26 B
x.php5PHP526 B
x.phpPHP25 B
k.binBIN24 B
xoxo_t.phpPHP24 B
.gitignoreGITIGN24 B
HEADTXT23 B
cwh.binTXT19 B
c.binBIN16 B
w185_8000.binZIP9 B
i028_body.binPHP5 B
d6.binBIN2 B
aj.binTXT1 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

101.36.112.205confirmed
101.89.149.227confirmed
103.116.104.103confirmed
103.124.95.33confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.57.250.208confirmed
103.73.189.190confirmed
103.80.88.106confirmed
103.90.162.31confirmed
104.131.161.161confirmed
104.131.59.223confirmed
104.200.73.97confirmed