Live findsCVE IntelConsoleStart free
huntback / IP intelligence

207.180.193.40

DATACENTERoperator-submittedc2exploitexposed-secretopen-directorytunnel

Intelligence

ASN / OrgAS51167 · Contabo GmbH
CountryFrance
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 3306, 8080, 8081
Servicenginx/1.24.0 (Ubuntu) · Aula Quest
Productsnginx, apache
JARM28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d
Loot harvested50 file(s), 28997 KB · c2, exploit, exposed-secret, tunnel, webshell

Open directory contents (50)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
‹redacted›.jarJAR3.5 MB
‹redacted›.jarJAR3.0 MB
‹redacted›.jarJAR2.9 MB
‹redacted›.jarJAR2.7 MB
‹redacted›.jarJAR2.1 MB
‹redacted›.jarJAR1.6 MB
‹redacted›.jarJAR1.6 MB
servercore-neoforge-1.5.19%2B1.21.1.jarJAR1.4 MB
‹redacted›.jarJAR1.4 MB
‹redacted›.jarJAR1.2 MB
‹redacted›.jarJAR1.1 MB
embeddium-1.0.15%2Bmc1.21.1.jarJAR1.0 MB
‹redacted›.jarJAR827 KB
‹redacted›.jarJAR764 KB
‹redacted›.jarJAR708 KB
‹redacted›.jarJAR615 KB
modernfix-neoforge-5.27.20%2Bmc1.21.1.jarJAR585 KB
‹redacted›.jarJAR484 KB
‹redacted›.jar.logLOG463 KB
‹redacted›.jarJAR272 KB
‹redacted›.jarJAR118 KB
pm2.logLOG75 KB
‹redacted›.jarJAR74 KB
.claude.jsonJSON42 KB
dump.pm2.bakBAK29 KB
.bash_historyBASH_H19 KB
‹redacted›.jsonlJSONL15 KB
CLAUDE.mdMD7 KB
SKILLS.mdMD7 KB
guia_modpack_1.21.1.mdMD6 KB
download_mods.pyPY5 KB
Setup-Lab2_3-MemoryLeakDemo.ps1PS13 KB
openclaw.jsonJSON2 KB
openclaw.json.bakBAK2 KB
openclaw.json.bak.112 KB
openclaw.json.bak.442 KB
openclaw.json.bak.222 KB
openclaw.json.bak.332 KB
setup_server_247.shSH1 KB
sync_server_mods.shSH1 KB
‹redacted›.propertiesPROPER1 KB
known_hostsTXT978 B
user_jvm_args.txtTXT793 B
.credentials.jsonJSON466 B
id_ed25519TXT411 B
id_ed25519_github_aulaquestTXT399 B
id_personalTXT399 B
run.batBAT359 B
run.shSH358 B
configTXT242 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Passive DNS

vmi3184031.contaboserver.net

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

204.168.225.59confirmed
101.34.209.211lead
101.53.135.104lead
103.112.185.51lead
103.112.185.93lead
103.127.99.152lead
103.151.5.208lead
103.159.50.137lead
103.226.249.70lead
103.248.25.149lead
103.31.78.47lead
106.55.243.186lead
108.165.233.230lead
109.122.196.145lead
109.122.196.149lead