huntback / IP intelligence
179.43.175.2
Intelligence
ASN / OrgAS51852 · Private Layer INC
CountryPanama
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 3128, 8080, 8888
ServiceSimpleHTTP/0.6 Python/3.11.2 · Directory listing for /
Loot harvested40 file(s), 2263 KB · exploit, exposed-secret, malware, pe-binary, webshell
Open directory contents (40)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| uac_bypass.exe | PE | 263 KB |
| UnifiedConsent_UAC_Bypass.exe | PE | 152 KB |
| QuickAssist_UAC_Bypass.exe | PE | 150 KB |
| TabTip_UAC_Bypass.exe | PE | 150 KB |
| uac_runner.exe | PE | 150 KB |
| Narrator_UAC_Bypass.exe | PE | 149 KB |
| runas_uac.exe | PE | 147 KB |
| Narrator_payload.dll | PE | 113 KB |
| Narrator_payload_diag.dll | PE | 113 KB |
| TabTip_payload.dll | PE | 113 KB |
| TabTip_payload_diag.dll | PE | 113 KB |
| EmbeddedBrowserWebView.dll | PE | 112 KB |
| UnifiedConsent_payload_diag2.dll | PE | 101 KB |
| UnifiedConsent_payload_v4.dll | PE | 101 KB |
| UnifiedConsent_payload_diag.dll | PE | 99 KB |
| UnifiedConsent_payload_wait.dll | PE | 99 KB |
| UnifiedConsent_payload.dll | PE | 99 KB |
| launcher_proof.ps1 | PS1 | 4 KB |
| ‹redacted›.cmd | CMD | 3 KB |
| bootstrap.ps1 | PS1 | 2 KB |
| token_check.ps1 | PS1 | 2 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| token_check2.ps1 | PS1 | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1 KB |
| ‹redacted›.cmd | CMD | 1015 B |
| ‹redacted›.cmd | CMD | 991 B |
| ‹redacted›.cmd | CMD | 979 B |
| ‹redacted›.cmd | CMD | 806 B |
| ‹redacted›.cmd | CMD | 734 B |
| ‹redacted›.cmd | CMD | 734 B |
| ‹redacted›.cmd | CMD | 473 B |
| ‹redacted›.cmd | CMD | 358 B |
| ‹redacted›.cmd | CMD | 278 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 101.36.112.205 | lead |
| 173.254.242.131 | lead |
| 208.87.131.125 | lead |
| 64.83.20.32 | lead |