Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

8.215.31.102

DATACENTERoperator-submittedgafgytmalwareopen-directory

Intelligence

ASN / OrgAS45102 · Alibaba (US) Technology Co., Ltd.
CountrySingapore
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 81, 443, 8000
Servicenginx/1.20.1 · phpMyAdmin
Productsnginx
JARM15d3fd16d29d29d00042d43d000000fe02290512647416dcf0a400ccbc0b6b
Loot harvested55 file(s), 43139 KB · gafgyt, malware

Open directory contents (55)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
GhostLocker.exe.zipZIP4.0 MB
AgentTesla.exe.zipZIP3.8 MB
Neshta-0b.zipZIP3.0 MB
Qilin-0xb.zipZIP2.9 MB
Qilin-0b.zipZIP2.9 MB
Cactus.exe.zipZIP2.7 MB
Chaos-0b.zipZIP2.7 MB
Albabat03-0xxb.exe.zipZIP2.3 MB
Albabat-fake-loader.zipZIP2.3 MB
Fog.exe.zipZIP2.1 MB
xWorm-0xb.zipZIP1.3 MB
S409.exe.zipZIP1.2 MB
RedPizza-0xb.zipZIP876 KB
VanHelsing.exe.zipZIP805 KB
Vanhelsing-0b.zipZIP744 KB
Expiro-0b.zipZIP606 KB
J-0xb.zipZIP544 KB
Albabat02-0xb.exe.zipZIP542 KB
Albabat-0xb.zipZIP490 KB
Nitrogen.zipZIP450 KB
Rhysida.exe.zipZIP437 KB
Akira.exe.zipZIP415 KB
Akira-2xb.zipZIP415 KB
Vanhelsing-3xb.zipZIP392 KB
Vanhelsing-cxb.zipZIP390 KB
CryptoLocker-0b.zipZIP377 KB
Nitrogen.exe.zipZIP376 KB
Helldown-0b.zipZIP337 KB
Arm-0b.zipZIP232 KB
Tro-0b.zipZIP231 KB
Jigsaw-0b.zipZIP228 KB
DBatLoader-0xb.zipZIP201 KB
Trigona-0b.zipZIP186 KB
RaLord-0xb.zipZIP167 KB
Zeppelin-0b.zipZIP114 KB
HiddenTear-0b.zipZIP113 KB
NLockbit.exe.zipZIP100 KB
Mamona-fxb.zipZIP97 KB
BlackMatter-0xb.zipZIP96 KB
Conti-0xb.zipZIP94 KB
Dragonforce.zipZIP94 KB
BlackMatter.exe.zipZIP94 KB
SuperBlack-0xb.zipZIP93 KB
Mamona-0xb.zipZIP89 KB
INC-0b.zipZIP89 KB
Lynx-0b.zipZIP89 KB
HelloKitty.exe.zipZIP88 KB
PureLogStealer-0xb.zipZIP85 KB
Skid-0b.zipZIP77 KB
Apos.exe.zipZIP62 KB
Fog-0xb.zipZIP59 KB
Botox-0xb.zipZIP54 KB
Lockbit4.zipZIP48 KB
xXx-0xb.zipZIP39 KB
Morphues-oxb.zipZIP8 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

147.139.136.66confirmed
1.55.221.70lead
101.133.173.242lead
101.32.109.156lead
101.34.21.76lead
101.46.48.150lead
101.50.0.34lead
101.99.47.147lead
101.99.84.176lead
102.210.148.98lead
103.125.181.96lead
103.127.132.75lead
103.150.101.143lead
103.154.62.139lead
103.158.54.94lead