huntback / IP intelligence

209.99.188.155

RESIDENTIALloot-ipelf-binaryexploitexposed-secretmalwaremozi

Intelligence

ASN / OrgAS402253 · SKN Subnet & Telecom Ltd
CountrySwitzerland
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80, 443, 3389, 8888
ServiceSimpleHTTP/0.6 Python/3.14.6 · Directory listing for /
Loot harvested347 file(s), 18017 KB · elf-binary, exploit, exposed-secret, malware, mozi, tunnel

Open directory contents (347)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
gotoschool-linux_armv5lELF8.5 MB
nas_engine_pro.zipZIP4.8 MB
state.jsonJSON875 KB
state.jsonJSON516 KB
state.jsonJSON410 KB
state.jsonJSON323 KB
state.jsonJSON230 KB
state.jsonJSON171 KB
state.jsonJSON145 KB
state.jsonJSON142 KB
state.jsonJSON123 KB
09_CONFIGS.txtTXT111 KB
05_CREDENTIALS.txtTXT87 KB
state.jsonJSON82 KB
05_CREDENTIALS.txtTXT69 KB
state.jsonJSON64 KB
09_CONFIGS.txtTXT59 KB
state.jsonJSON57 KB
05_CREDENTIALS.txtTXT56 KB
state.jsonJSON55 KB
09_CONFIGS.txtTXT48 KB
09_CONFIGS.txtTXT40 KB
05_CREDENTIALS.txtTXT28 KB
state.jsonJSON28 KB
step7_binary.pyPY27 KB
state.jsonJSON27 KB
09_CONFIGS.txtTXT25 KB
05_CREDENTIALS.txtTXT25 KB
filemanager.shSH23 KB
09_CONFIGS.txtTXT22 KB
05_CREDENTIALS.txtTXT19 KB
__main__.pyPY19 KB
09_CONFIGS.txtTXT18 KB
collect.pyPY17 KB
09_CONFIGS.txtTXT16 KB
03_SHELLS_FULL.txtTXT16 KB
09_CONFIGS.txtTXT14 KB
target.pyPY13 KB
step8_gotoschool.pyPY13 KB
binary.pyPY12 KB
summary.pyPY12 KB
05_CREDENTIALS.txtTXT11 KB
inside_scan.pyPY9 KB
shell.shSH9 KB
05_CREDENTIALS.txtTXT9 KB
ipsnew.txt.tar.gzGZ9 KB
05_CREDENTIALS.txtTXT9 KB
03_SHELLS_FULL.txtTXT9 KB
step5_deploy_cgi.pyPY8 KB
05_CREDENTIALS.txtTXT8 KB
engine.pyPY8 KB
09_CONFIGS.txtTXT7 KB
03_SHELLS_FULL.txtTXT7 KB
09_CONFIGS.txtTXT7 KB
09_CONFIGS.txtTXT7 KB
persist_all.pyPY6 KB
05_CREDENTIALS.txtTXT6 KB
step4_network.pyPY6 KB
03_SHELLS_FULL.txtTXT6 KB
fix_persist.pyPY5 KB
README.mdMD5 KB
add_persistence.pyPY5 KB
backends.pyPY5 KB
engine.pyPY5 KB
step9_verify.pyPY4 KB
05_CREDENTIALS.txtTXT4 KB
09_CONFIGS.txtTXT3 KB
09_CONFIGS.txtTXT3 KB
09_CONFIGS.txtTXT3 KB
http_server.pyPY3 KB
neighborhood_scan.pyPY3 KB
05_CREDENTIALS.txtTXT3 KB
config.pyPY3 KB
fresh_country_scan.pyPY3 KB
‹redacted›.pycPYC3 KB
03_SHELLS_FULL.txtTXT3 KB
03_SHELLS_FULL.txtTXT3 KB
fix_ids.pyPY2 KB
names.pyPY2 KB
03_SHELLS_FULL.txtTXT2 KB
deploy_one_by_one.pyPY2 KB
step3_recon.pyPY2 KB
02_SHELLS.txtTXT2 KB
step6_verify_cgi.pyPY2 KB
05_CREDENTIALS.txtTXT2 KB
02_SHELLS.txtTXT2 KB
02_SHELLS.txtTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backdoor_rsaTXT1 KB
backends.pyPY1 KB
05_CREDENTIALS.txtTXT1 KB
colors.pyPY1 KB
03_SHELLS_FULL.txtTXT1 KB
02_SHELLS.txtTXT1 KB
03_SHELLS_FULL.txtTXT1 KB
step1_rce.pyPY1 KB
02_SHELLS.txtTXT767 B
03_SHELLS_FULL.txtTXT753 B
03_SHELLS_FULL.txtTXT695 B
03_SHELLS_FULL.txtTXT692 B
ssh_backdoor.txtTXT598 B
step2_write.pyPY582 B
02_SHELLS.txtTXT552 B
ssh_backdoor.txtTXT552 B
ssh_backdoor.txtTXT505 B
ssh_backdoor.txtTXT502 B
ssh_backdoor.txtTXT502 B
ssh_backdoor.txtTXT500 B
ssh_backdoor.txtTXT500 B
ssh_backdoor.txtTXT500 B
ssh_backdoor.txtTXT499 B
nas_deploy.pyPY486 B
r9000303.shSH476 B
r9000304.shSH476 B
r9000305.shSH476 B
r9000306.shSH476 B
r9000307.shSH476 B
r9000308.shSH476 B
r9000309.shSH476 B
r9000310.shSH476 B
r9000311.shSH476 B
r9000312.shSH476 B
r9000313.shSH476 B
r9000314.shSH476 B
r9000315.shSH476 B
r9000316.shSH476 B
r9000317.shSH476 B
r9000318.shSH476 B
r9000319.shSH476 B
r9000320.shSH476 B
r9000321.shSH476 B
r9000322.shSH476 B
r9000323.shSH476 B
r9000324.shSH476 B
r9000325.shSH476 B
r9000326.shSH476 B
r9000327.shSH476 B
r9000328.shSH476 B
r9000329.shSH476 B
r9000330.shSH476 B
r9000331.shSH476 B
r9000332.shSH476 B
r9000333.shSH476 B
r9000334.shSH476 B
r9000335.shSH476 B
r9000336.shSH476 B
r9000337.shSH476 B
r9000338.shSH476 B
r9000339.shSH476 B
r9000340.shSH476 B
r9000341.shSH476 B
02_SHELLS.txtTXT467 B
02_SHELLS.txtTXT446 B
ssh_backdoor.txtTXT406 B
backdoor_rsa.pubPUB404 B
ssh_backdoor.txtTXT404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
backdoor_rsa.pubPUB404 B
ssh_backdoor.txtTXT401 B
ssh_backdoor.txtTXT399 B
02_SHELLS.txtTXT363 B
ssh_backdoor.txtTXT361 B
__init__.pyPY345 B
__init__.pyPY281 B
ssh_backdoor.txtTXT264 B
02_SHELLS.txtTXT250 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
09_CONFIGS.txtTXT230 B
pawn9000038.shSH223 B
pawn9000039.shSH223 B
pawn9000040.shSH223 B
pawn9000041.shSH223 B
pawn9000042.shSH223 B
pawn9000043.shSH223 B
pawn9000044.shSH223 B
pawn9000045.shSH223 B
pawn9000046.shSH223 B
pawn9000047.shSH223 B
pawn9000048.shSH223 B
pawn9000049.shSH223 B
pawn9000050.shSH223 B
pawn9000051.shSH223 B
pawn9000052.shSH223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
05_CREDENTIALS.txtTXT223 B
02_SHELLS.txtTXT209 B
__init__.pyPY207 B
r9000298.shSH200 B
r9000299.shSH200 B
r9000300.shSH200 B
r9000301.shSH200 B
r9000302.shSH200 B
r9000307.shSH200 B
r9000308.shSH200 B
r9000309.shSH200 B
r9000310.shSH200 B
r9000311.shSH200 B
r9000312.shSH200 B
r9000313.shSH200 B
r9000314.shSH200 B
r9000315.shSH200 B
r9000316.shSH200 B
r9000317.shSH200 B
r9000318.shSH200 B
r9000319.shSH200 B
r9000320.shSH200 B
r9000322.shSH200 B
r9000323.shSH200 B
r9000324.shSH200 B
r9000339.shSH200 B
r9000342.shSH200 B
r9000343.shSH200 B
r9000344.shSH200 B
r9000345.shSH200 B
r9000346.shSH200 B
r9000347.shSH200 B
r9000348.shSH200 B
r9000349.shSH200 B
r9000350.shSH200 B
r9000351.shSH200 B
r9000352.shSH200 B
r9000353.shSH200 B
r9000354.shSH200 B
r9000355.shSH200 B
r9000356.shSH200 B
r9000357.shSH200 B
r9000358.shSH200 B
r9000359.shSH200 B
r9000360.shSH200 B
r9000361.shSH200 B
r9000362.shSH200 B
r9000363.shSH200 B
r9000364.shSH200 B
r9000365.shSH200 B
r9000366.shSH200 B
r9000367.shSH200 B
r9000368.shSH200 B
r9000369.shSH200 B
r9000370.shSH200 B
r9000371.shSH200 B
r9000372.shSH200 B
r9000373.shSH200 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
03_SHELLS_FULL.txtTXT197 B
02_SHELLS.txtTXT187 B
02_SHELLS.txtTXT166 B
__init__.pyPY143 B
02_SHELLS.txtTXT142 B
02_SHELLS.txtTXT141 B
__init__.pyPY133 B
__init__.pyPY121 B
run.shSH106 B
zoomeye_exploitable.txtTXT98 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
02_SHELLS.txtTXT95 B
__init__.pyPY71 B
exploitable_real.txtTXT68 B
__init__.pyPY24 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

197.161.192.21lead
43.163.124.78lead