huntback / IP intelligence

151.243.11.241

RESIDENTIALioc-tweetfeedloot-ipc2exploitexposed-secretforced-loot

Intelligence

ASN / OrgAS209630 · LLC VASH KREDIT BANK
CountryGermany
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80
ServiceSimpleHTTP/0.6 Python/3.13.5 · Directory listing for /
Loot harvested439 file(s), 125635 KB · c2, exploit, exposed-secret, forced-loot, malware, mirai

Open directory contents (400)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
fsrv80b.logLOG56.7 MB
hits_us.txtTXT17.8 MB
ms_it_80.txtTXT12.6 MB
‹redacted›.jsonlJSONL11.7 MB
‹redacted›.jsonlJSONL6.1 MB
‹redacted›.jsonlJSONL5.5 MB
‹redacted›.jsonlJSONL2.5 MB
zmap_run.logLOG1.6 MB
workspace-index.txtTXT1.3 MB
‹redacted›.jsonlJSONL993 KB
‹redacted›.jsonlJSONL915 KB
ms_boafrm.logLOG766 KB
ms_boa93.logLOG761 KB
kb-digest-boa93.mdMD310 KB
findings-chat-boa93.mdMD285 KB
findings-chat-github.mdMD239 KB
fsrv.logLOG189 KB
‹redacted›.jsonlJSONL178 KB
ms_vimar.logLOG160 KB
scan_mxco.logLOG145 KB
‹redacted›.jsonlJSONL109 KB
vimar_fire_w4uo.logLOG108 KB
vimar2_fire_w4uo.logLOG88 KB
‹redacted›.jsonlJSONL82 KB
kb-digest-github.mdMD64 KB
vimar3_curl_w4uo.logLOG64 KB
‹redacted›.pycPYC62 KB
vimar4_wget_w4uo.logLOG56 KB
‹redacted›.jsonlJSONL54 KB
‹redacted›.jsonlJSONL51 KB
fiberhome_fire_w4uo.logLOG51 KB
_engine.pyPY47 KB
adb_mxco_result.logLOG39 KB
adb_mxco_result2.logLOG39 KB
adbfull_out.tsvTSV36 KB
poc_84434.pyPY35 KB
LOADER-ARSENAL.mdMD35 KB
BOA-FAMILY-KB.mdMD33 KB
deliver.pyPY27 KB
kb-digest-other.mdMD18 KB
CVE-REPOSITORY-KB.mdMD18 KB
poc.pyPY18 KB
vimar_fire3.tsvTSV18 KB
LS.txtTXT17 KB
poc_82901.pyPY16 KB
loader_dorks.txtTXT15 KB
‹redacted›.jsonlJSONL15 KB
DELIVERY-PLAYBOOK.mdMD14 KB
gen_readmes.pyPY12 KB
README-DELIVER.mdMD10 KB
backlog.tsvTSV10 KB
‹redacted›.jsonlJSONL10 KB
TRAINING-kbscrape-proven-recipes.mdMD10 KB
‹redacted›.pycPYC10 KB
CHECKPOINT.mdMD9 KB
102425.logLOG9 KB
poc.pyPY8 KB
linksysG.logLOG7 KB
loader.pyPY7 KB
LOADER-ACCEPTANCE.mdMD7 KB
loader.pyPY7 KB
jaws_fresh.txtTXT6 KB
README.mdMD6 KB
loader.pyPY6 KB
ASSIGNMENT_HANDOFF_ia42.mdMD6 KB
tgt_inv.txtTXT6 KB
loader_common.pyPY6 KB
CHECKPOINT_egix_loader-acceptance.mdMD6 KB
loader_common.py.bak-wrz0BAK-WR6 KB
FINAL-REPORT.mdMD6 KB
lsgx.txtTXT5 KB
loader.pyPY5 KB
loader.pyPY5 KB
CHECKPOINT-wave2-loaders-ug3j.mdMD5 KB
loader.pyPY5 KB
adb5555.pyPY5 KB
weed_creds2.pyPY5 KB
weed_scan.pyPY5 KB
CVE-MAPPING.mdMD5 KB
WAVE2-STATE.mdMD5 KB
loader.pyPY5 KB
loader.pyPY5 KB
loader.pyPY5 KB
weed_creds.pyPY4 KB
loader.pyPY4 KB
weed_creds3.pyPY4 KB
WAVE-A-STATE-helper-y3ck.mdMD4 KB
CHECKPOINT_egix_FINAL.mdMD4 KB
loader.pyPY4 KB
loader.pyPY4 KB
dorks_needed.txtTXT4 KB
adb_exec.logLOG4 KB
README.mdMD4 KB
loader.pyPY4 KB
CHECKPOINT-wave2-coverage-ug3j.mdMD4 KB
WAVE_F_TASKABC_SUMMARY.mdMD4 KB
tvt_inject.pyPY4 KB
tvt_inject2.pyPY4 KB
CHECKPOINT-loader-acceptance.mdMD4 KB
‹redacted›.jsonlJSONL4 KB
EXEC_SESSION_SUMMARY_5mh2.mdMD4 KB
loader.pyPY4 KB
TRAINING-loaders-wave2.mdMD4 KB
loader_boafrm_71946.pyPY4 KB
‹redacted›.jsonlJSONL4 KB
WAVE-BC-HANDOFF-2x7f.mdMD4 KB
loader.pyPY4 KB
adb5555_loader.pyPY4 KB
FINAL-REPORT-helper-zpc9.mdMD4 KB
loader_boa93_formping.pyPY4 KB
loader.pyPY4 KB
adb_loader.pyPY4 KB
cdata_val.pyPY4 KB
CHECKPOINT-w5mh2-WRAP.mdMD4 KB
loader.pyPY4 KB
loader.pyPY4 KB
adb_spray.pyPY4 KB
loader.pyPY4 KB
loader_hikvision_36260.pyPY4 KB
kb_reports-egix-CVE-2026-84434.mdMD4 KB
acct_run5.logLOG3 KB
‹redacted›.jsonlJSONL3 KB
zyxel_fire.pyPY3 KB
tvt_dump_success.binBIN3 KB
waveA_battery.pyPY3 KB
CHECKPOINT-wave2fire-FINAL-2026-10-03.mdMD3 KB
‹redacted›.xmlXML3 KB
WAVE1-STATE.mdMD3 KB
zmap_direct2.logLOG3 KB
acct_probe.txtTXT3 KB
CHECKPOINT-waveBC-intake.mdMD3 KB
tvt_test.pyPY3 KB
CHECKPOINT-CVE-2026-102425.mdMD3 KB
loader.pyPY3 KB
README.mdMD3 KB
FINAL_REPORT_asusw1.mdMD3 KB
adb_beacon2.pyPY3 KB
tvt_enum2.pyPY3 KB
zyxel_probe.pyPY3 KB
loader.pyPY3 KB
‹redacted›.jsonlJSONL3 KB
loader.pyPY3 KB
jaws_probe.pyPY3 KB
adb_dl2b.pyPY3 KB
ping9_run.logLOG3 KB
tvt_step2.pyPY3 KB
acct_run6.logLOG3 KB
CHECKPOINT_waveF_ia42.mdMD3 KB
loader.pyPY3 KB
CHECKPOINT_ia42_wrapup.mdMD3 KB
kb_reports-zpc9-backlog-loaders.mdMD3 KB
soap_probe.pyPY3 KB
tvt_probe.pyPY3 KB
adb_v2.pyPY3 KB
acct_dump.txtTXT3 KB
WAVE-C-LOADER-REPORT.mdMD3 KB
boafrm.pyPY3 KB
LOADER-ACCEPTANCE-MATRIX.mdMD3 KB
CHECKPOINT-waveB-B3-final.mdMD3 KB
ACCEPTANCE_w4uo.mdMD3 KB
CHECKPOINT-W2-LOADERS.mdMD3 KB
tvt_fire2.pyPY3 KB
CHECKPOINT-helper-zpc9-cstecgi.mdMD3 KB
CVE-2026-82384-roller-notes.mdMD3 KB
cdata.pyPY3 KB
tvt_enum.pyPY3 KB
boa93.pyPY3 KB
ACCEPTANCE.mdMD3 KB
HANDOFF-NEXT-SESSIONS-2x7f.mdMD3 KB
SAMPLE_RESULTS_wave2.mdMD3 KB
waveF_checkpoint_helper-ia42.mdMD3 KB
linksys.pyPY3 KB
hikvision.pyPY3 KB
README.mdMD3 KB
PROBE_DISCOVERED_0610.mdMD3 KB
README.mdMD3 KB
boa93_fresh2.pyPY3 KB
mb_magic.pyPY2 KB
WAVE-C-NOTES.mdMD2 KB
WAVE1-RESOLUTION.mdMD2 KB
adb_nohup.pyPY2 KB
adb_diag.pyPY2 KB
CHECKPOINT-WAVE1-2x7f.mdMD2 KB
CHECKPOINT_wrapup.mdMD2 KB
CHECKPOINT-WAVE1-2x7f-FINAL.mdMD2 KB
adb_size.pyPY2 KB
tvt_lab.pyPY2 KB
README.mdMD2 KB
B3-CHECKPOINT.mdMD2 KB
‹redacted›.jsonlJSONL2 KB
README.mdMD2 KB
README.mdMD2 KB
README.mdMD2 KB
README.mdMD2 KB
NOTES.mdMD2 KB
adb_exec.pyPY2 KB
loader.pyPY2 KB
faith.pyPY2 KB
adb_wave2b_FINDINGS.mdMD2 KB
loader.pyPY2 KB
adb_enum.pyPY2 KB
WAVE_B_SUMMARY.mdMD2 KB
accept_boafrm.pyPY2 KB
CHECKPOINT_dqsg_wrapup.mdMD2 KB
VALIDATION_ia42_wrz0_cstecgi.mdMD2 KB
loader.pyPY2 KB
adb_hop.pyPY2 KB
loader.pyPY2 KB
BAICELLS-ORACLE-FINDING.mdMD2 KB
README.mdMD2 KB
loader.pyPY2 KB
vimar.pyPY2 KB
RESULT-adb-mxco-egix.mdMD2 KB
README.mdMD2 KB
wave2_mxco_final.txtTXT2 KB
cstecgi_fire.pyPY2 KB
WAVE-A-FRESH-FINDINGS-helper-y3ck.mdMD2 KB
acct_run2a.logLOG2 KB
CHECKPOINT-WAVE2-PROBE-2x7f.mdMD2 KB
adb_final.pyPY2 KB
tree_dump.txtTXT2 KB
weed_probe.pyPY2 KB
adb_hop3.pyPY2 KB
SAMPLE_HSXW.mdMD2 KB
rebuild_mxco.pyPY2 KB
adb_hop2.pyPY2 KB
adb_readback.pyPY2 KB
NOTES.mdMD2 KB
fqpull.pyPY2 KB
FORGE_FIRE_wave2.mdMD2 KB
CHECKPOINT-egix-loader-acceptance.mdMD2 KB
SAMPLE-TEST-RESULTS.txtTXT2 KB
proc_check.txtTXT2 KB
lp2.txtTXT2 KB
RESULT-adb-mxco-delivery.mdMD2 KB
README.mdMD2 KB
hik_fresh.pyPY2 KB
roller_gate.pyPY2 KB
CHECKPOINT-helper-1790919179539-2x7f.mdMD2 KB
loader.pyPY2 KB
acct_run.logLOG2 KB
kb_reports-2x7f-wave1-wrapup.mdMD2 KB
kb_reports-2x7f-wave2-probe.mdMD1 KB
baicells_beacon.pyPY1 KB
README.mdMD1 KB
cdata_exploit2.pyPY1 KB
cnxntest.pyPY1 KB
CHK.txtTXT1 KB
pulls.logLOG1 KB
kb_reports-egix-loader-acceptance.mdMD1 KB
CHECKPOINT-wave2-loaders-final.mdMD1 KB
cdata_exploit.pyPY1 KB
fp.pyPY1 KB
acceptance_audit.pyPY1 KB
avtech_cam.txt.logLOG1 KB
jaws_sink.pyPY1 KB
hunt_82901.pyPY1 KB
svctest.pyPY1 KB
‹redacted›.jsonlJSONL1 KB
avtech_dvr.txt.logLOG1 KB
jaws.txt.logLOG1 KB
kb_reports-2x7f-wave1-final.mdMD1 KB
boa93_chain.shSH1 KB
scan5555.pyPY1 KB
README.mdMD1 KB
README-waveB-B3.mdMD1 KB
wave.shSH1 KB
README.mdMD1 KB
‹redacted›.jsonlJSONL1 KB
‹redacted›.jsonlJSONL1 KB
rawnc.logLOG1 KB
runner_waveb.shSH1 KB
README.mdMD1 KB
README.mdMD1 KB
adb_enum_result.logLOG1 KB
README.mdMD1 KB
acct_run.shSH1 KB
portscan_keep.pyPY1 KB
‹redacted›.jsonlJSONL1 KB
README.mdMD1 KB
cdata_exploit3.pyPY1 KB
README.mdMD1 KB
README.mdMD1 KB
pull_classes.logLOG1 KB
cdata_test.pyPY1 KB
RESULTS.mdMD1 KB
NOTES.mdMD1 KB
force_fire.pyPY1 KB
patch_delivery_url.pyPY1 KB
wp_vc_fire.pyPY1 KB
acct_run2a.shSH1 KB
‹redacted›.README.mdMD1 KB
acct_dump.shSH1 KB
fix_marker.pyPY1 KB
‹redacted›.README.mdMD1 KB
‹redacted›.README.mdMD1 KB
acct_probe.shSH1 KB
FORGE_FIRE_wave2.mdMD1 KB
‹redacted›.jsonlJSONL1 KB
acct_run4.logLOG1 KB
adb_probe.shSH1 KB
waveb_runner.logLOG1 KB
fsrv2.logLOG1 KB
acct_run5.shSH1 KB
CHECKPOINT-waveB-B3-ADDENDUM.mdMD1 KB
README_wave2.mdMD1 KB
jaws_creds.pyPY1 KB
RESULTS-waveB-B3.mdMD1 KB
zmap_direct.logLOG1 KB
fire22.pyPY1 KB
gf_inspect.pyPY1 KB
LICENSETXT1 KB
bu.txtTXT1 KB
pull2.shSH1 KB
README.mdMD1 KB
acct_run6.shSH1 KB
CHECKPOINT-egix-2026-10-02.mdMD1 KB
tree_dump.shSH1 KB
‹redacted›.README.mdMD994 B
pulls_waveA.shSH988 B
fire_vimar.pyPY984 B
pull_classes.shSH974 B
‹redacted›.jsonlJSONL969 B
acct_run3.logLOG963 B
‹redacted›.README.mdMD956 B
acct_run4.shSH930 B
‹redacted›.README.mdMD897 B
add_fsurl.pyPY887 B
boa93_fresh_fire.shSH880 B
pull2.logLOG857 B
‹redacted›.jsonlJSONL850 B
w4uo_pull.shSH843 B
README.mdMD839 B
‹redacted›.jsonlJSONL835 B
dorks_needed.shSH788 B
class_fresh.txtTXT763 B
NOTES.mdMD754 B
ping9.shSH739 B
tgt_inv.shSH733 B
pull2.shSH728 B
adb_probe_fast.shSH713 B
scan_mxco.shSH697 B
scan2.shSH696 B
acct_run3.shSH673 B
dorks_dump.shSH663 B
status.txtTXT660 B
analyze_waveb.shSH646 B
creds_all.txtTXT635 B
adb_probe_one.shSH631 B
pull2.logLOG601 B
sample40.txtTXT581 B
ln.txtTXT572 B
run_hik.shSH522 B
scan_waveA.shSH508 B
flowiq_fc1.txtTXT491 B
‹redacted›.jsonlJSONL472 B
dbg_verify.pyPY435 B
fire_hot.shSH435 B
class_union.txtTXT424 B
stage2.shSH422 B
esver_stdout.logLOG394 B
adb_shells.txtTXT391 B
proc_check.shSH383 B
scan3.shSH368 B
scan_batched.shSH367 B
s_b.txtTXT362 B
s_a.txtTXT354 B
-TXT338 B
fresh.txtTXT290 B
uall.txtTXT286 B
flowiq_fc2.txtTXT272 B
acc.logLOG240 B
wave_f_sample.txtTXT236 B
faith_pull.logLOG228 B
82901.logLOG218 B
hik_fresh.logLOG217 B
hik_int.logLOG210 B
vimarG.logLOG202 B
bp.txtTXT193 B
hik_beacon.logLOG190 B
boa93_fresh.logLOG185 B
‹redacted›.jsonlJSONL184 B
cdata_run.logLOG183 B
boa93_tracert.logLOG182 B
boa93_int.logLOG181 B
boafrm_fire.logLOG179 B
boafrm_fire2.logLOG179 B
boafrm_run.logLOG177 B
boa93_beacon.logLOG175 B
hik3_fire.logLOG168 B
cstec_w4uo.logLOG159 B
cdata_beacon.logLOG159 B
fire.logLOG157 B
sample_gen_run.logLOG157 B
hik_fire.logLOG150 B
hik_fire2.logLOG146 B
poc_up.phpPHP145 B
vimar_run2.logLOG142 B
vimar_fire.logLOG142 B
fire4.logLOG142 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

192.236.229.229confirmed
218.3.160.34confirmed
89.124.67.72confirmed
151.243.11.240lead
159.223.40.78lead
185.216.68.66lead
46.250.255.73lead
66.42.33.224lead
89.19.223.126lead