huntback / IP intelligence

95.111.226.157

DATACENTERloot-ipexploitexposed-secretmacho-binarymalwareopen-directory

Intelligence

ASN / OrgAS51167 · Contabo GmbH
CountryFrance
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 445, 8000, 8082, 8443, 8888, 8898, 18080, 31337
Servicenginx/1.24.0 (Ubuntu) · Welcome to nginx!
Productsnginx
Loot harvested49 file(s), 50 KB · exploit, exposed-secret, macho-binary, malware, tunnel

Open directory contents (49)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
s9.shSH2 KB
s7.shSH2 KB
s13a.shSH2 KB
s6.shSH2 KB
s8.shSH2 KB
s2.shSH1 KB
s5.shSH1 KB
s10.shSH1 KB
s12.shSH1 KB
configTXT1 KB
s13c.shSH1 KB
‹redacted›.classMACHO1 KB
s14.shSH1 KB
s13d.shSH1 KB
s13b.shSH1 KB
s4b.shSH1 KB
s_pz3.shSH1 KB
‹redacted›.javaJAVA1 KB
s11.shSH1 KB
s3.shSH1 KB
s13h.shSH1 KB
s13e.shSH1015 B
s1.shSH962 B
s4.shSH936 B
s_pz5.shSH861 B
s12f.shSH796 B
s_pz4.shSH775 B
s12h.shSH761 B
s13g.shSH756 B
‹redacted›.classMACHO659 B
s12m.shSH657 B
s12l.shSH645 B
s12o.shSH627 B
s_pz7.shSH608 B
s12k.shSH600 B
s_pz6.shSH587 B
s13f.shSH576 B
s12i.shSH566 B
s12e.shSH542 B
‹redacted›.javaJAVA513 B
s12d.shSH419 B
s12j.shSH396 B
s12n.shSH325 B
s12g.shSH285 B
HEADTXT268 B
s12b.shSH247 B
s10b.shSH245 B
s11b.shSH245 B
s12c.shSH222 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.127.31.183confirmed
139.59.90.109confirmed
2.57.122.202confirmed
202.155.90.206confirmed
60.204.209.60confirmed
65.109.15.18confirmed
91.215.85.163confirmed
1.14.93.149lead
1.15.114.102lead
101.32.108.79lead
101.36.118.185lead
101.47.134.222lead
101.47.15.229lead
102.203.200.45lead
102.68.86.43lead