huntback / IP intelligence
82.180.145.166
Intelligence
ASN / OrgAS141995 · Contabo Asia Private Limited
CountryIndia
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 8000
ServiceApache/2.4.58 (Ubuntu) · Apache2 Ubuntu Default Page: It works
Productsapache
Loot harvested50 file(s), 1325 KB · c2, exploit, exposed-secret, malware, mozi, pe-binary
Open directory contents (50)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| 9.txt | TXT | 223 KB |
| newscan5.php | PHP | 151 KB |
| RedSun.exe | PE | 131 KB |
| newscan4.php | PHP | 116 KB |
| Api.php | PHP | 60 KB |
| test2.txt | TXT | 51 KB |
| scanner4.php | PHP | 47 KB |
| 509.php | PHP | 47 KB |
| 5.php | PHP | 45 KB |
| mainloggg.txt | TXT | 41 KB |
| default.conf.php | PHP | 39 KB |
| manager.php | PHP | 37 KB |
| test3.txt | TXT | 35 KB |
| bsp.php | PHP | 30 KB |
| ‹redacted›.cpp | CPP | 26 KB |
| ‹redacted›.jsp | JSP | 23 KB |
| ‹redacted›.ashx | ASHX | 19 KB |
| 1.php | PHP | 19 KB |
| up.py | PY | 19 KB |
| zipmaker.php | PHP | 18 KB |
| 2.php | PHP | 17 KB |
| 3.php | PHP | 16 KB |
| maker.php | PHP | 14 KB |
| ‹redacted›.asp | ASP | 14 KB |
| ‹redacted›.asa.txt | TXT | 12 KB |
| ‹redacted›.config.php | PHP | 10 KB |
| rev.txt | TXT | 9 KB |
| ‹redacted›.jsp | JSP | 7 KB |
| scan-file.php | PHP | 7 KB |
| check.php | PHP | 5 KB |
| callback.py | PY | 4 KB |
| configasp1.txt | TXT | 3 KB |
| ‹redacted›.asp.txt | TXT | 3 KB |
| configasp2.txt | TXT | 3 KB |
| loop.php | PHP | 3 KB |
| upload.txt | TXT | 1 KB |
| ep.ps1 | PS1 | 1 KB |
| godzilla.txt | TXT | 842 B |
| shell_gif.php | PHP | 808 B |
| README.md | MD | 654 B |
| ling.php | PHP | 585 B |
| default.php | PHP | 423 B |
| shell_jpg.php | PHP | 375 B |
| s.ps1 | PS1 | 359 B |
| ok.txt | TXT | 348 B |
| ok.py | PY | 201 B |
| shell.php | PHP | 106 B |
| ant.txt | TXT | 79 B |
| ‹redacted›.aspx | ASPX | 73 B |
| shell_prepend.php | PHP | 63 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 159.65.168.239 | lead |
| 167.88.175.254 | lead |
| 173.249.7.242 | lead |
| 45.61.183.70 | lead |