Live findsCVE IntelConsoleStart free
huntback / IP intelligence

103.117.136.137

DATACENTERoperator-submittedexposed-secretloot-ipc2exploitforced-loot

Intelligence

ASN / OrgAS401696 · cognetcloud INC
CountryHong Kong
NetworkDATACENTER · risk 60/100
Threat score0/100
Open ports22, 80, 443, 1080, 8080, 8081, 12345, 18080, 8443
JARM2ad2ad0002ad2ad00042d42d00000045d9c61f898d3d72d7a153fdd2347f3c
Loot harvested637 file(s), 3356084 KB · c2, exploit, exposed-secret, forced-loot, malware, mozi

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
ru_cypherpunk-symposium__security-pentesting-toolkit.tgzTGZ524.9 MB
ru_koutto__jok3r-pocs.tgzTGZ251.5 MB
l8080.logLOG250.3 MB
l8080.logLOG249.6 MB
ru_Elite588__Hacker.tgzTGZ200.3 MB
ru_koutto__java-binary-deserializer.tgzTGZ177.2 MB
ru_chrisneagu__FTC-Skystone-Dark-Angels-Romania-2020.tgzTGZ157.6 MB
rockyou.txtTXT133.4 MB
ru_DrunkenShells__Disclosures.tgzTGZ127.3 MB
l12345.logLOG117.3 MB
l12345.logLOG115.4 MB
‹redacted›.msiMSI112.1 MB
ru_DERE-ad2001__Frida-Labs.tgzTGZ81.0 MB
‹redacted›.asmASM80.1 MB
ru_koutto__hacktricks.tgzTGZ76.7 MB
go.tgzTGZ65.8 MB
ru_luckyPipewrench__pipelock.tgzTGZ48.1 MB
ru_mattifestation__WMI_Backdoor.tgzTGZ46.6 MB
ru_koutto__hardware-hacking.tgzTGZ34.4 MB
ru_koutto__pentest-scripts.tgzTGZ34.2 MB
ru_koutto__web-brutator.tgzTGZ33.7 MB
ru_3516634930__Payloader.tgzTGZ29.0 MB
ru_0vercl0k__CVE-2019-11708.tgzTGZ23.2 MB
ru_f0cker__pypal.tgzTGZ19.1 MB
lan.zipZIP18.9 MB
ru_4l3x777__dse_pg_bypass.tgzTGZ17.0 MB
ru_koutto__pi-pwnbox-rogueap.tgzTGZ13.7 MB
ru_In3tinct__See-SURF.tgzTGZ13.0 MB
udp.zipZIP12.1 MB
ru_hfiref0x__KDU.tgzTGZ10.8 MB
ru_mgeeky__msi-shenanigans.tgzTGZ10.8 MB
server.zipZIP10.7 MB
ru_aramosf__CVE-2026-64468.tgzTGZ10.5 MB
cn100w.txtTXT8.6 MB
ru_mgeeky__cobalt-arsenal.tgzTGZ8.0 MB
gf_925.dllPE8.0 MB
gf_new.dllPE7.8 MB
ru_alanvivona__pwnshop.tgzTGZ7.6 MB
ru_mgeeky__expdevBadChars.tgzTGZ7.5 MB
g.tgzTGZ7.5 MB
ru_M01N-Team__HeaderLessPE.tgzTGZ6.9 MB
ru_koutto__reversing.tgzTGZ6.8 MB
ru_mattifestation__PSSysmonTools.tgzTGZ6.5 MB
ru_kwilczynski__packer-templates.tgzTGZ5.1 MB
ru_koutto__dotnet-binary-deserializer.tgzTGZ4.2 MB
ru_mattifestation__BHUSA2018_Sysmon.tgzTGZ3.8 MB
ru_dhn__exploits.tgzTGZ3.8 MB
ru_0vercl0k__udmp-parser-rs.tgzTGZ3.7 MB
na.zipZIP3.3 MB
ru_Exploit-Garbage__0day-Rubbish.tgzTGZ3.3 MB
l.tgzTGZ3.2 MB
ru_NaC-L__Mergen.tgzTGZ3.2 MB
ru_Coff0xc__AutoRedTeam-Orchestrator.tgzTGZ3.0 MB
huabu.jsJS2.9 MB
ru_mattifestation__AntimalwareBlight.tgzTGZ2.9 MB
ru_Cr4sh__secretnet_expl.tgzTGZ2.8 MB
fj.jsJS2.8 MB
fi.jsJS2.7 MB
part0.binBIN2.6 MB
ru_4l3x777__wkhttp_lib.tgzTGZ2.4 MB
ru_4l3x777__shell_maker.tgzTGZ2.4 MB
ru_demon-i386__pop_n_bubble.tgzTGZ2.3 MB
ru_alexander-pick__shannon_modem_loader.tgzTGZ2.2 MB
index-DT0ZYBMc.jsJS2.1 MB
ru_0vercl0k__udmp-parser.tgzTGZ2.1 MB
ru_0vercl0k__kdmp-parser-rs.tgzTGZ1.8 MB
ru_mattifestation__CatalogTools.tgzTGZ1.4 MB
ru_hlldz__Phant0m.tgzTGZ1.3 MB
ru_hlldz__pickl3.tgzTGZ1.2 MB
ru_0vercl0k__symbolizer-rs.tgzTGZ1.2 MB
ru_0vercl0k__lockmem.tgzTGZ1.1 MB
ru_mgeeky__decode-spam-headers.tgzTGZ1.1 MB
ru_hfiref0x__ETWX.tgzTGZ1.0 MB
ru_0vercl0k__kdmp-parser.tgzTGZ1.0 MB
ru_hfiref0x__WubbabooMark.tgzTGZ996 KB
‹redacted›.restoreRESTOR868 KB
ru_mattifestation__PoCSubjectInterfacePackage.tgzTGZ828 KB
ru_htrgouvea__spellbook.tgzTGZ793 KB
pw100k.txtTXT763 KB
ru_hlldz__CVE-2021-1675-LPE.tgzTGZ744 KB
sncc0_00220010_expl_amd64.exePE605 KB
ru_hfiref0x__RpcView.tgzTGZ594 KB
final_dict.txtTXT531 KB
ru_koutto__vulners-lookup.tgzTGZ487 KB
ru_0vercl0k__addr-symbolizer-rs.tgzTGZ478 KB
adm.jsJS476 KB
ru_hlldz__wildPwn.tgzTGZ466 KB
i3.jsJS423 KB
i2.jsJS404 KB
‹redacted›.rs.tgzTGZ373 KB
ru_koutto__ioctlbf.tgzTGZ329 KB
ru_koutto__compression-identifier.tgzTGZ326 KB
hb.jsJS323 KB
ops_index.jsJS320 KB
ru_hfiref0x__NtCall64.tgzTGZ299 KB
client_main.jsJS266 KB
ru_emrekybs__AD-AssessmentKit.tgzTGZ259 KB
ru_koutto__cvedetails-lookup.tgzTGZ227 KB
ru_0vercl0k__snapshot.tgzTGZ209 KB
mon.logLOG192 KB
idx.jsJS187 KB
ru_hlldz__APC-PPID.tgzTGZ145 KB
ru_mattifestation__CimSweep.tgzTGZ138 KB
ru_hfiref0x__WDSigEx.tgzTGZ133 KB
ru_curtishoughton__Penetration-Testing-Cheat-Sheet.tgzTGZ132 KB
ru_MrMasterbay__proxmox-security-hardening.tgzTGZ129 KB
ru_HomeSecExplorer__Proxmox-Hardening-Guide.tgzTGZ118 KB
c111.jsJS114 KB
ru_HackSpeak__CVE-2026-64531.tgzTGZ112 KB
c114.jsJS111 KB
client_fw.jsJS110 KB
c104.jsJS108 KB
body2_16456TXT107 KB
ru_dragonked2__Egyscan.tgzTGZ93 KB
appjs.txtTXT93 KB
ru_0vercl0k__lockmem-rs.tgzTGZ91 KB
b.jsJS91 KB
ru_mattifestation__PIC_Bindshell.tgzTGZ86 KB
ru_0vercl0k__windbg-scripts.tgzTGZ82 KB
redis_mon.logLOG82 KB
ru_mgeeky__SharpWebServer.tgzTGZ79 KB
ru_hfiref0x__SXSEXP.tgzTGZ78 KB
ru_hfiref0x__LightFTP.tgzTGZ78 KB
ru_mattifestation__WDACTools.tgzTGZ77 KB
ru_mgeeky__AzureRT.tgzTGZ77 KB
ru_mgeeky__VisualBasicObfuscator.tgzTGZ75 KB
ck_import.sqlSQL75 KB
ru_gyptazy__ProxPatch.tgzTGZ72 KB
ru_f0cker__pyhashcat.tgzTGZ70 KB
exploit.cC67 KB
ru_jettbrains__-L-.tgzTGZ65 KB
StudioShell-D0e7f5RG.jsJS63 KB
ru_mattifestation__BCD.tgzTGZ59 KB
wkhttp_tests.cC55 KB
‹redacted›.configCONFIG54 KB
ru_mattifestation__TCGLogTools.tgzTGZ52 KB
ImageStoryboardPage-Ckvtd-B0.jsJS51 KB
khttp_lib.cC50 KB
hk-config-move.tgzTGZ49 KB
ru_mattifestation__WDACPolicies.tgzTGZ48 KB
build_capsfix4.logLOG45 KB
idx.htmlHTML44 KB
ApiStudio-r2bbeLBA.jsJS43 KB
doc.htmlHTML41 KB
‹redacted›.outOUT41 KB
ktls_lib.cC38 KB
ImageGeneralGeneratePage-D63FhsAj.jsJS38 KB
ru_hlldz__pengyhash.tgzTGZ37 KB
Table-BexyxzP6.jsJS36 KB
SeedAudioGenerationPage-K17yTKyj.jsJS36 KB
binder_chain_64468.cC36 KB
Input-BkrwwqwT.jsJS35 KB
UserAuthPage-03Hxm7J_.jsJS35 KB
LICENSETXT34 KB
image-generation-workflow-aQxzIxtU.jsJS31 KB
rift.zipZIP31 KB
README.mdMD29 KB
Tabs-DRQu_S2D.jsJS28 KB
c103.jsJS28 KB
ru_mattifestation__WinPETools.tgzTGZ27 KB
reqs.jsonJSON25 KB
README_RU.mdMD23 KB
khttp_lib.hH21 KB
guard_proxy.pyPY21 KB
ru_41yn14__CVE-2024-0039-Exploit.tgzTGZ20 KB
JobDetailPage-CGhsgi4o.jsJS19 KB
ru_alexandreravelli__Securing-SSH-Access-on-Proxmox-VE-9.tgzTGZ18 KB
exploit.pyPY18 KB
reference-limits-5auirCIl.jsJS17 KB
shannon_mpu.pyPY17 KB
shannon_pal_reconstructor.pyPY17 KB
shannon_scatterload.pyPY17 KB
MaterialLibraryPagination-BwIVlW42.jsJS17 KB
rift.pyPY16 KB
body_55271TXT16 KB
ru_mrmtwoj__0day-mikrotik.tgzTGZ16 KB
Slider-DsbwtWks.jsJS16 KB
job-display-copy-BUJ2U8qL.jsJS16 KB
README.mdMD15 KB
README_EN.mdMD15 KB
README.mdMD15 KB
body_27036TXT14 KB
README.mdMD14 KB
README.mdMD14 KB
ru_hlldz__misc.tgzTGZ14 KB
README.mdMD12 KB
shannon_postprocess.pyPY12 KB
README.mdMD11 KB
README.mdMD11 KB
LICENSETXT11 KB
README.mdMD10 KB
kdns_lib.cC10 KB
README.mdMD10 KB
shannon_generic.pyPY10 KB
c117.jsJS10 KB
CVE-2025-54424.pyPY10 KB
h64deep.pyPY9 KB
jimeng_deploy1.logLOG9 KB
h64deep2.pyPY9 KB
riftscan.zipZIP9 KB
kdns_tdi.cC9 KB
shannon_load.pyPY9 KB
TeamPage-FhpAl5Qc.jsJS9 KB
status_now.jsonJSON9 KB
_b.40089984008999 KB
aTXT9 KB
patch_official_prices.pyPY9 KB
redir2.logLOG8 KB
CHANGELOG.mdMD8 KB
shannon_structs.pyPY8 KB
poc.pyPY8 KB
c101.jsJS8 KB
references.mdMD8 KB
README.mdMD8 KB
image-model-config-ksEkwpXg.jsJS8 KB
kdns_packet.cC7 KB
‹redacted›.origORIG7 KB
create-D3Vn69pI.jsJS7 KB
.gitignoreGITIGN7 KB
README.mdMD7 KB
README.mdMD7 KB
c105.jsJS7 KB
AudioGenerationJobPanel-DEmNCGii.jsJS7 KB
shannon_funcs.pyPY7 KB
CONTRIBUTING.mdMD6 KB
shannon_names.pyPY6 KB
SUBMISSION.mdMD6 KB
assets_host.txtTXT6 KB
README_zh_CN.mdMD6 KB
h64deep3.pyPY6 KB
CHANGELOG.txtTXT6 KB
ckj.jsonJSON6 KB
AGENTS.mdMD6 KB
ck.txtTXT6 KB
menu_fix.pyPY6 KB
build_capsfix6.logLOG6 KB
body2_17736TXT6 KB
build_capsfix5.logLOG5 KB
platforms16.goGO5 KB
build_capsfix7.logLOG5 KB
body_11529TXT5 KB
PackMyPayload.pyPY5 KB
client_code.binBIN5 KB
client_fn.binBIN5 KB
relay_poll.logLOG5 KB
CODE_OF_CONDUCT.mdMD5 KB
dist_brute2.pyPY5 KB
pyproject.tomlTOML5 KB
probe_register.pyPY5 KB
poc2.pyPY5 KB
probe_aboutyou.pyPY5 KB
CODE_OF_CONDUCT.mdMD5 KB
find-spray-landing.pyPY5 KB
probe_sentinel.pyPY5 KB
README.mdMD5 KB
mm_probe.pyPY4 KB
‹redacted›.outOUT4 KB
relay.pyPY4 KB
brute-sweep.pyPY4 KB
shannon_indirect_xref.pyPY4 KB
dist_brute.pyPY4 KB
dist_brute3.pyPY4 KB
api_reg2.pyPY4 KB
kdns_cache.cC4 KB
diag_aboutyou.pyPY4 KB
LAB-RCE-PROOF.mdMD4 KB
diag_ay2.pyPY4 KB
verify.shSH4 KB
diag_otp.pyPY4 KB
fuzz1.pyPY4 KB
lb.txtTXT4 KB
README.mdMD4 KB
full_run.pyPY4 KB
mcp_stdio_server.pyPY4 KB
billing-sBfiMUCI.jsJS4 KB
mkoffsets.shSH4 KB
perf1.pyPY4 KB
CLAUDE.mdMD4 KB
setup.shSH4 KB
probe_register3.pyPY4 KB
api_reg_ssrf.pyPY4 KB
probe_register2.pyPY4 KB
payload_decrypter.pyPY3 KB
relay_pong.pyPY3 KB
lg_inject.pyPY3 KB
ns.shSH3 KB
validation-issues-CnwOIGyj.jsJS3 KB
lg_shell.pyPY3 KB
install.shSH3 KB
basic.pyPY3 KB
ops_unauth.pyPY3 KB
pc.goGO3 KB
relay_first.pyPY3 KB
exploit.pyPY3 KB
‹redacted›.gradleGRADLE3 KB
relay_hijack.pyPY3 KB
api_guerrilla.pyPY3 KB
README.mdMD3 KB
origin5.pyPY3 KB
hm_admin_slow.pyPY3 KB
hm_nonbrute.pyPY3 KB
relay_poll2.pyPY3 KB
proxy_brute.pyPY3 KB
login2.pyPY3 KB
tkbrute.pyPY3 KB
relay_poll.pyPY3 KB
na_brute.pyPY3 KB
IPerf3-v5Tu3W81.jsJS3 KB
lg_rpc2.pyPY3 KB
README.mdMD3 KB
SECURITY.mdMD3 KB
api_fix.pyPY3 KB
relay_selftest.pyPY3 KB
na8881.pyPY3 KB
run.shSH3 KB
proto_attack2.pyPY3 KB
ssh_brute.pyPY3 KB
hk_mysql.pyPY3 KB
kdns_ip.cC3 KB
relay_hb.pyPY3 KB
origin.pyPY3 KB
csubnet.pyPY3 KB
fuzz8578.pyPY3 KB
na8881_big.pyPY3 KB
reg_chain.pyPY3 KB
relay_final.pyPY3 KB
login_test.pyPY3 KB
crib_drag.pyPY3 KB
lg_exploit.pyPY3 KB
relay_online.pyPY3 KB
probe_poc1.pyPY2 KB
relay_action.pyPY2 KB
origin3.pyPY2 KB
asset.pyPY2 KB
fuzz2.pyPY2 KB
tkbrute2.pyPY2 KB
‹redacted›.slnSLN2 KB
hm_admin_intel.pyPY2 KB
origin2.pyPY2 KB
ms.jsonJSON2 KB
bt.pyPY2 KB
basic2.pyPY2 KB
tk.pyPY2 KB
hk_8888.pyPY2 KB
Space-C0lU9FxA.jsJS2 KB
enum_users.pyPY2 KB
discover-addresses.shSH2 KB
proto_attack.pyPY2 KB
relay_exec.pyPY2 KB
grab_blacklist.pyPY2 KB
probe_net.pyPY2 KB
relay_agent.pyPY2 KB
origin4.pyPY2 KB
tk4.pyPY2 KB
cross_auth.pyPY2 KB
relay_full.pyPY2 KB
proto_attack5.pyPY2 KB
dirbrute.pyPY2 KB
tk3.pyPY2 KB
relay_real.pyPY2 KB
probe_actions.pyPY2 KB
hm_protocol.pyPY2 KB
hm_brute.pyPY2 KB
hm_deep_probe.shSH2 KB
multi.pyPY2 KB
hp.pyPY2 KB
probe_otp.pyPY2 KB
relay_ctrl.pyPY2 KB
tk2.pyPY2 KB
p8578.pyPY2 KB
probe_upstream.pyPY2 KB
pwlogin.logLOG2 KB
pg.pyPY2 KB
lg_rpc.pyPY2 KB
grab_domains.pyPY2 KB
fuzz3.pyPY2 KB
hk_mysql2.pyPY2 KB
basic_brute.pyPY2 KB
perf2.pyPY2 KB
DockerfileTXT2 KB
gradlew.batBAT2 KB
proto_attack3.pyPY2 KB
login_test.logLOG2 KB
pt_bypass.pyPY2 KB
ctrl_email.pyPY2 KB
qo.pyPY2 KB
grab_all.pyPY2 KB
newface.pyPY2 KB
multi_exit.pyPY2 KB
probe2.pyPY2 KB
shannon_debug_traces.pyPY2 KB
hm_brute_v2.pyPY2 KB
r8.pyPY2 KB
ops_hunt.pyPY2 KB
newface2.pyPY2 KB
final_probe.pyPY2 KB
bt2.pyPY2 KB
SECURITY.mdMD2 KB
tk5.pyPY2 KB
.banditBANDIT2 KB
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

176.65.148.59confirmed
185.216.68.66confirmed
198.44.46.122confirmed
203.194.115.12confirmed
213.136.79.115confirmed
3.84.186.180confirmed
31.128.39.24confirmed
38.60.91.186confirmed
41.223.30.7confirmed
45.115.26.30confirmed
64.111.92.149confirmed
8.217.24.92confirmed
103.197.25.222lead
103.214.172.101lead
103.214.172.18lead