huntback / IP intelligence

78.130.211.168

RESIDENTIALoperator-submittedexposed-secretopen-directorywebshell

Intelligence

ASN / OrgAS9070 · "Cooolbox" AD
CountryBulgaria
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 53, 80, 443, 2222
ServiceApache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k · dSoft-Bulgaria Ltd. Web site
Productsapache
Loot harvested27 file(s), 6522 KB · exposed-secret, webshell

Open directory contents (27)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
hornetq-update.zipZIP3.0 MB
IPMICFG_1.31.0_build.200205.zipZIP1.9 MB
d97a6bebbf1f3f0af113e44c171e8f0f7f00e7521b4e569c230f08bc441de061-filelists.sqlite.bz2BZ2620 KB
‹redacted›.xml.gzGZ488 KB
‹redacted›.jarJAR209 KB
2df871fabb20e5b648baee079be95b89bf02b7e914dcc91098a3f7a7b54d9ba8-primary.sqlite.bz2BZ241 KB
livecd-iso-to-diskTXT28 KB
9edc265c6f8d942ebbdd586c6d63cc152e39ac23e8ddf86627e13013a1dc237a-other.sqlite.bz2BZ220 KB
‹redacted›.xml.gzGZ17 KB
‹redacted›.xml.gzGZ12 KB
0bb9c7715e6988996463660421989697f1f00aa294c5470bbc9d16c5bdfe1470-primary.sqlite.bz2BZ29 KB
install.logLOG8 KB
b6918c014d76ff0390e64e8f9638c713eccd99976199fbff83de98a5a75768af-filelists.sqlite.bz2BZ27 KB
20946b885886adafadafe8ede27a71a48f2c222a14d4a66794fb0c78d37e2715-filelists.sqlite.bz2BZ26 KB
bb120cfc2cd1cbd0bd540d9dd7e559f02fa486de2c96030ab6ede0616dffc493-primary.sqlite.bz2BZ26 KB
‹redacted›.xml.gzGZ5 KB
06769923ff19e002ca73aa2f0082e84b62eae665765d104efbf8d5b4dd2b2109-other.sqlite.bz2BZ24 KB
‹redacted›.xml.gzGZ3 KB
7e6835056ff4d1c2c3d85dfe2c34de1c0f9d839a9856eb7a13f5a4ce1d3b19f2-other.sqlite.bz2BZ23 KB
‹redacted›.xml.gzGZ3 KB
‹redacted›.xml.gzGZ2 KB
‹redacted›.xml.gzGZ2 KB
‹redacted›.xml.gzGZ2 KB
‹redacted›.xml.gzGZ1 KB
build_ssd.shSH1 KB
‹redacted›.xml.gzGZ1 KB
‹redacted›.xml.gzGZ1 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

103.1.209.115lead
141.147.75.79lead
146.190.16.219lead
162.248.54.166lead
164.177.132.122lead
173.248.144.34lead
185.125.188.26lead
209.38.33.180lead
217.11.48.241lead
217.11.49.195lead
47.131.96.202lead
68.171.216.26lead
68.171.216.27lead
83.142.232.242lead