Security Scan: Directory listing for /

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dada31b7-bdd5-4124-b43e-05e9d67c178c Domain and IP registration (RDAP)/api/v1/rdap/dada31b7-bdd5-4124-b43e-05e9d67c178cHow often this domain was scanned/api/v1/domain/stats/118.178.140.187 Scan history for this domain/api/v1/domain/history/118.178.140.187?limit=15

This website contacted 1 IP in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is 118.178.140.187.

Submitted URL: http://118.178.140.187:8000

AI Security Verdict

Moderate Risk

Confidence: 82%

Risk Score

Bare-IP open directory exposing offensive tooling: brute-force/RCE/SQLi scripts, captured admin sessions, token-reuse and SMS-leak artifacts. Not a normal site; treat as hostile attacker infrastructure.

Risk Factors (3)

Exposed open directory indexing attacker tooling and stolen-session/data artifacts

Hosted on a raw IP address with no legitimate web presence or reputation

Content contains exploit, brute-force and SQL-injection scripts (offensive infrastructure)

Safety Factors (5)

No credential or payment form on the page (0 forms, 0 password/payment fields)

No threat-intelligence Indicators of Compromise, YARA malware, or network IDS alerts detected

No brand impersonation or phishing kit detected

No concrete malicious signal (no IoC / YARA / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 8 to 5

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5

Domain age information unavailable

Details

Page Title

Directory listing for /other network

Scan Type

public

Domain Name Analysis

Domain '118.178.140.187:8000' uses an unknown top-level domain without a subdomain. Its registrable label '118.178.140.187' stretches across 15 characters holding 0 vowels versus 0 consonants; it also includes 12 digits. Word splitting yields four words: 118, 178, 140, 187. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.08s

Total Load Time

N/A

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:7 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	118.178.140.187	Hangzhou, Zhejiang, China	AS37963Hangzhou Alibaba Advertising Co.,Ltd.
1	1	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15ED2850374E8948B8366371C9C657B29AB23E6F3F76C1F2776111D5EAC427068E094AF

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:qxwK71UjPv976EYPB0gE937DFuo4DVGgScY1bye8Ps/S8TaobRebVEn7TDB8IyAu:dK71Ub976EGrE93Embye8P4TDB8Ik3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:28589:BAUFeGPoSQmoAgLsUSCTkV6MAIAxKghgMFAXYCkIJIRUBErAAMEIDsBpCcMYgIBzxGxILAFBZgFICvFOUBsaFIcAnC8AJi+3

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3e7f7f7f7f7f7f7f

Perceptual Hash:805f1717071f1f0f

Difference Hash:c080808080808080

Wavelet Hash:007e727272727272

Color Hash:#4c2d86

Other Hashes

Crop Resistant:c080808080808080

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 118.178.140.187