Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

195.26.246.148

DATACENTERloot-ipexploitexposed-secretopen-directorytunnelwebshell

Intelligence

ASN / OrgAS40021 · Contabo Inc.
CountryUnited States
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 5432, 5900, 8001, 8088, 8443, 8898
Servicenginx/1.28.3 (Ubuntu) · Welcome to nginx!
Productsnginx
JARM29d2ad00029d29d00042d43d0000002059a3b916699461c5923779b77cf06b
Loot harvested54 file(s), 11626 KB · exploit, exposed-secret, tunnel, webshell

Open directory contents (54)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
http.logLOG7.1 MB
cve1086_build.tgzTGZ4.2 MB
cve_src.tgzTGZ12 KB
‹redacted›.sampleSAMPLE4 KB
‹redacted›.sampleSAMPLE4 KB
‹redacted›.sampleSAMPLE3 KB
‹redacted›.sampleSAMPLE2 KB
‹redacted›.sampleSAMPLE2 KB
launcher2.cC2 KB
‹redacted›.sampleSAMPLE1 KB
‹redacted›.sampleSAMPLE1 KB
‹redacted›.sampleSAMPLE1 KB
‹redacted›.sampleSAMPLE896 B
agent4.pyPY835 B
install.pyPY835 B
agent3.pyPY760 B
‹redacted›.sampleSAMPLE544 B
install.pyPY524 B
install.pyPY514 B
install.pyPY478 B
‹redacted›.sampleSAMPLE478 B
install.pyPY435 B
install.pyPY435 B
‹redacted›.sampleSAMPLE424 B
‹redacted›.sampleSAMPLE416 B
install.pyPY347 B
excludeTXT240 B
‹redacted›.sampleSAMPLE189 B
configTXT111 B
configTXT111 B
configTXT111 B
configTXT111 B
configTXT111 B
configTXT111 B
configTXT111 B
packed-refsTXT105 B
packed-refsTXT105 B
packed-refsTXT105 B
packed-refsTXT105 B
packed-refsTXT105 B
packed-refsTXT105 B
packed-refsTXT105 B
configTXT92 B
descriptionTXT73 B
refsTXT59 B
refsTXT59 B
refsTXT59 B
refsTXT59 B
refsTXT59 B
refsTXT59 B
refsTXT59 B
HEADTXT23 B
COMMIT_EDITMSGTXT2 B
configTXT2 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

100.21.82.169confirmed
101.36.112.205confirmed
101.42.136.73confirmed
101.47.156.26confirmed
101.89.149.227confirmed
102.204.222.159confirmed
102.210.149.166confirmed
103.131.51.199confirmed
103.131.61.143confirmed
103.163.246.138confirmed
103.35.216.13confirmed
103.46.185.169confirmed
103.73.189.190confirmed
103.80.88.106confirmed
104.131.161.161confirmed