huntback / IP intelligence
87.121.52.82
Intelligence
ASN / OrgAS34224 · Neterra Ltd.
CountryBulgaria
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 443, 8088
Loot harvested60 file(s), 112249 KB · exploit, exposed-secret, forced-loot, malware, mozi, tunnel
Open directory contents (60)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| panel_d400.bak | BAK | 32.1 MB |
| panel.bak | BAK | 31.9 MB |
| data.db | DB | 23.8 MB |
| data.db | DB | 17.3 MB |
| gphish.log | LOG | 2.3 MB |
| gphish.log | LOG | 753 KB |
| matrix_crypto.db | DB | 344 KB |
| panel.log | LOG | 254 KB |
| http_proxy.go | GO | 221 KB |
| panel.go | GO | 174 KB |
| terminal.go | GO | 55 KB |
| config.go | GO | 30 KB |
| phishlet.go | GO | 30 KB |
| cloaker.go | GO | 25 KB |
| extract_passwords.py | PY | 23 KB |
| project_rules.md | MD | 23 KB |
| matrix.go | GO | 22 KB |
| extract_passwords.py | PY | 20 KB |
| billing.go | GO | 18 KB |
| rotator.go | GO | 16 KB |
| checker_google.go | GO | 15 KB |
| puppet.go | GO | 14 KB |
| modules.txt | TXT | 14 KB |
| certdb.go | GO | 13 KB |
| ‹redacted›.local.json | JSON | 11 KB |
| utils.go | GO | 10 KB |
| password.html | HTML | 9 KB |
| anonflare.go | GO | 8 KB |
| wrongpassword.html | HTML | 8 KB |
| data.db | DB | 8 KB |
| utls.go | GO | 8 KB |
| cloudflare.go | GO | 8 KB |
| database.go | GO | 7 KB |
| db_session.go | GO | 6 KB |
| google.yaml | YAML | 6 KB |
| main.go | GO | 5 KB |
| log.go | GO | 4 KB |
| help.go | GO | 4 KB |
| session.go | GO | 3 KB |
| AGENTS.md | MD | 3 KB |
| table.go | GO | 3 KB |
| microsoft.yaml | YAML | 2 KB |
| gophish.go | GO | 2 KB |
| blacklist.go | GO | 2 KB |
| main.go | GO | 2 KB |
| nameserver.go | GO | 2 KB |
| config.json | JSON | 1 KB |
| ca.key | KEY | 1 KB |
| ca.key | KEY | 1 KB |
| ca.key | KEY | 1 KB |
| http_server.go | GO | 1 KB |
| parser.go | GO | 1 KB |
| matrix_stub.go | GO | 1 KB |
| config.json | JSON | 1 KB |
| banner.go | GO | 1 KB |
| shared.go | GO | 991 B |
| scripts.go | GO | 787 B |
| config.json | JSON | 218 B |
| ._http_proxy.go | GO | 163 B |
| .gitignore | GITIGN | 11 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 167.71.19.245 | confirmed |
| 8.212.181.6 | confirmed |