huntback / IP intelligence

87.121.52.82

RESIDENTIALoperator-submittedexploitexposed-secretforced-lootmalwaremozi

Intelligence

ASN / OrgAS34224 · Neterra Ltd.
CountryBulgaria
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 443, 8088
Loot harvested60 file(s), 112249 KB · exploit, exposed-secret, forced-loot, malware, mozi, tunnel

Open directory contents (60)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
panel_d400.bakBAK32.1 MB
panel.bakBAK31.9 MB
data.dbDB23.8 MB
data.dbDB17.3 MB
gphish.logLOG2.3 MB
gphish.logLOG753 KB
matrix_crypto.dbDB344 KB
panel.logLOG254 KB
http_proxy.goGO221 KB
panel.goGO174 KB
terminal.goGO55 KB
config.goGO30 KB
phishlet.goGO30 KB
cloaker.goGO25 KB
extract_passwords.pyPY23 KB
project_rules.mdMD23 KB
matrix.goGO22 KB
extract_passwords.pyPY20 KB
billing.goGO18 KB
rotator.goGO16 KB
checker_google.goGO15 KB
puppet.goGO14 KB
modules.txtTXT14 KB
certdb.goGO13 KB
‹redacted›.local.jsonJSON11 KB
utils.goGO10 KB
password.htmlHTML9 KB
anonflare.goGO8 KB
wrongpassword.htmlHTML8 KB
data.dbDB8 KB
utls.goGO8 KB
cloudflare.goGO8 KB
database.goGO7 KB
db_session.goGO6 KB
google.yamlYAML6 KB
main.goGO5 KB
log.goGO4 KB
help.goGO4 KB
session.goGO3 KB
AGENTS.mdMD3 KB
table.goGO3 KB
microsoft.yamlYAML2 KB
gophish.goGO2 KB
blacklist.goGO2 KB
main.goGO2 KB
nameserver.goGO2 KB
config.jsonJSON1 KB
ca.keyKEY1 KB
ca.keyKEY1 KB
ca.keyKEY1 KB
http_server.goGO1 KB
parser.goGO1 KB
matrix_stub.goGO1 KB
config.jsonJSON1 KB
banner.goGO1 KB
shared.goGO991 B
scripts.goGO787 B
config.jsonJSON218 B
._http_proxy.goGO163 B
.gitignoreGITIGN11 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

167.71.19.245confirmed
8.212.181.6confirmed