huntback / IP intelligence
151.243.11.241
Intelligence
ASN / OrgAS209630 · LLC VASH KREDIT BANK
CountryGermany
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 80
ServiceSimpleHTTP/0.6 Python/3.13.5 · Directory listing for /
Loot harvested439 file(s), 125635 KB · c2, exploit, exposed-secret, forced-loot, malware, mirai
Open directory contents (400)
Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.
| File | Type | Size |
|---|---|---|
| fsrv80b.log | LOG | 56.7 MB |
| hits_us.txt | TXT | 17.8 MB |
| ms_it_80.txt | TXT | 12.6 MB |
| ‹redacted›.jsonl | JSONL | 11.7 MB |
| ‹redacted›.jsonl | JSONL | 6.1 MB |
| ‹redacted›.jsonl | JSONL | 5.5 MB |
| ‹redacted›.jsonl | JSONL | 2.5 MB |
| zmap_run.log | LOG | 1.6 MB |
| workspace-index.txt | TXT | 1.3 MB |
| ‹redacted›.jsonl | JSONL | 993 KB |
| ‹redacted›.jsonl | JSONL | 915 KB |
| ms_boafrm.log | LOG | 766 KB |
| ms_boa93.log | LOG | 761 KB |
| kb-digest-boa93.md | MD | 310 KB |
| findings-chat-boa93.md | MD | 285 KB |
| findings-chat-github.md | MD | 239 KB |
| fsrv.log | LOG | 189 KB |
| ‹redacted›.jsonl | JSONL | 178 KB |
| ms_vimar.log | LOG | 160 KB |
| scan_mxco.log | LOG | 145 KB |
| ‹redacted›.jsonl | JSONL | 109 KB |
| vimar_fire_w4uo.log | LOG | 108 KB |
| vimar2_fire_w4uo.log | LOG | 88 KB |
| ‹redacted›.jsonl | JSONL | 82 KB |
| kb-digest-github.md | MD | 64 KB |
| vimar3_curl_w4uo.log | LOG | 64 KB |
| ‹redacted›.pyc | PYC | 62 KB |
| vimar4_wget_w4uo.log | LOG | 56 KB |
| ‹redacted›.jsonl | JSONL | 54 KB |
| ‹redacted›.jsonl | JSONL | 51 KB |
| fiberhome_fire_w4uo.log | LOG | 51 KB |
| _engine.py | PY | 47 KB |
| adb_mxco_result.log | LOG | 39 KB |
| adb_mxco_result2.log | LOG | 39 KB |
| adbfull_out.tsv | TSV | 36 KB |
| poc_84434.py | PY | 35 KB |
| LOADER-ARSENAL.md | MD | 35 KB |
| BOA-FAMILY-KB.md | MD | 33 KB |
| deliver.py | PY | 27 KB |
| kb-digest-other.md | MD | 18 KB |
| CVE-REPOSITORY-KB.md | MD | 18 KB |
| poc.py | PY | 18 KB |
| vimar_fire3.tsv | TSV | 18 KB |
| LS.txt | TXT | 17 KB |
| poc_82901.py | PY | 16 KB |
| loader_dorks.txt | TXT | 15 KB |
| ‹redacted›.jsonl | JSONL | 15 KB |
| DELIVERY-PLAYBOOK.md | MD | 14 KB |
| gen_readmes.py | PY | 12 KB |
| README-DELIVER.md | MD | 10 KB |
| backlog.tsv | TSV | 10 KB |
| ‹redacted›.jsonl | JSONL | 10 KB |
| TRAINING-kbscrape-proven-recipes.md | MD | 10 KB |
| ‹redacted›.pyc | PYC | 10 KB |
| CHECKPOINT.md | MD | 9 KB |
| 102425.log | LOG | 9 KB |
| poc.py | PY | 8 KB |
| linksysG.log | LOG | 7 KB |
| loader.py | PY | 7 KB |
| LOADER-ACCEPTANCE.md | MD | 7 KB |
| loader.py | PY | 7 KB |
| jaws_fresh.txt | TXT | 6 KB |
| README.md | MD | 6 KB |
| loader.py | PY | 6 KB |
| ASSIGNMENT_HANDOFF_ia42.md | MD | 6 KB |
| tgt_inv.txt | TXT | 6 KB |
| loader_common.py | PY | 6 KB |
| CHECKPOINT_egix_loader-acceptance.md | MD | 6 KB |
| loader_common.py.bak-wrz0 | BAK-WR | 6 KB |
| FINAL-REPORT.md | MD | 6 KB |
| lsgx.txt | TXT | 5 KB |
| loader.py | PY | 5 KB |
| loader.py | PY | 5 KB |
| CHECKPOINT-wave2-loaders-ug3j.md | MD | 5 KB |
| loader.py | PY | 5 KB |
| adb5555.py | PY | 5 KB |
| weed_creds2.py | PY | 5 KB |
| weed_scan.py | PY | 5 KB |
| CVE-MAPPING.md | MD | 5 KB |
| WAVE2-STATE.md | MD | 5 KB |
| loader.py | PY | 5 KB |
| loader.py | PY | 5 KB |
| loader.py | PY | 5 KB |
| weed_creds.py | PY | 4 KB |
| loader.py | PY | 4 KB |
| weed_creds3.py | PY | 4 KB |
| WAVE-A-STATE-helper-y3ck.md | MD | 4 KB |
| CHECKPOINT_egix_FINAL.md | MD | 4 KB |
| loader.py | PY | 4 KB |
| loader.py | PY | 4 KB |
| dorks_needed.txt | TXT | 4 KB |
| adb_exec.log | LOG | 4 KB |
| README.md | MD | 4 KB |
| loader.py | PY | 4 KB |
| CHECKPOINT-wave2-coverage-ug3j.md | MD | 4 KB |
| WAVE_F_TASKABC_SUMMARY.md | MD | 4 KB |
| tvt_inject.py | PY | 4 KB |
| tvt_inject2.py | PY | 4 KB |
| CHECKPOINT-loader-acceptance.md | MD | 4 KB |
| ‹redacted›.jsonl | JSONL | 4 KB |
| EXEC_SESSION_SUMMARY_5mh2.md | MD | 4 KB |
| loader.py | PY | 4 KB |
| TRAINING-loaders-wave2.md | MD | 4 KB |
| loader_boafrm_71946.py | PY | 4 KB |
| ‹redacted›.jsonl | JSONL | 4 KB |
| WAVE-BC-HANDOFF-2x7f.md | MD | 4 KB |
| loader.py | PY | 4 KB |
| adb5555_loader.py | PY | 4 KB |
| FINAL-REPORT-helper-zpc9.md | MD | 4 KB |
| loader_boa93_formping.py | PY | 4 KB |
| loader.py | PY | 4 KB |
| adb_loader.py | PY | 4 KB |
| cdata_val.py | PY | 4 KB |
| CHECKPOINT-w5mh2-WRAP.md | MD | 4 KB |
| loader.py | PY | 4 KB |
| loader.py | PY | 4 KB |
| adb_spray.py | PY | 4 KB |
| loader.py | PY | 4 KB |
| loader_hikvision_36260.py | PY | 4 KB |
| kb_reports-egix-CVE-2026-84434.md | MD | 4 KB |
| acct_run5.log | LOG | 3 KB |
| ‹redacted›.jsonl | JSONL | 3 KB |
| zyxel_fire.py | PY | 3 KB |
| tvt_dump_success.bin | BIN | 3 KB |
| waveA_battery.py | PY | 3 KB |
| CHECKPOINT-wave2fire-FINAL-2026-10-03.md | MD | 3 KB |
| ‹redacted›.xml | XML | 3 KB |
| WAVE1-STATE.md | MD | 3 KB |
| zmap_direct2.log | LOG | 3 KB |
| acct_probe.txt | TXT | 3 KB |
| CHECKPOINT-waveBC-intake.md | MD | 3 KB |
| tvt_test.py | PY | 3 KB |
| CHECKPOINT-CVE-2026-102425.md | MD | 3 KB |
| loader.py | PY | 3 KB |
| README.md | MD | 3 KB |
| FINAL_REPORT_asusw1.md | MD | 3 KB |
| adb_beacon2.py | PY | 3 KB |
| tvt_enum2.py | PY | 3 KB |
| zyxel_probe.py | PY | 3 KB |
| loader.py | PY | 3 KB |
| ‹redacted›.jsonl | JSONL | 3 KB |
| loader.py | PY | 3 KB |
| jaws_probe.py | PY | 3 KB |
| adb_dl2b.py | PY | 3 KB |
| ping9_run.log | LOG | 3 KB |
| tvt_step2.py | PY | 3 KB |
| acct_run6.log | LOG | 3 KB |
| CHECKPOINT_waveF_ia42.md | MD | 3 KB |
| loader.py | PY | 3 KB |
| CHECKPOINT_ia42_wrapup.md | MD | 3 KB |
| kb_reports-zpc9-backlog-loaders.md | MD | 3 KB |
| soap_probe.py | PY | 3 KB |
| tvt_probe.py | PY | 3 KB |
| adb_v2.py | PY | 3 KB |
| acct_dump.txt | TXT | 3 KB |
| WAVE-C-LOADER-REPORT.md | MD | 3 KB |
| boafrm.py | PY | 3 KB |
| LOADER-ACCEPTANCE-MATRIX.md | MD | 3 KB |
| CHECKPOINT-waveB-B3-final.md | MD | 3 KB |
| ACCEPTANCE_w4uo.md | MD | 3 KB |
| CHECKPOINT-W2-LOADERS.md | MD | 3 KB |
| tvt_fire2.py | PY | 3 KB |
| CHECKPOINT-helper-zpc9-cstecgi.md | MD | 3 KB |
| CVE-2026-82384-roller-notes.md | MD | 3 KB |
| cdata.py | PY | 3 KB |
| tvt_enum.py | PY | 3 KB |
| boa93.py | PY | 3 KB |
| ACCEPTANCE.md | MD | 3 KB |
| HANDOFF-NEXT-SESSIONS-2x7f.md | MD | 3 KB |
| SAMPLE_RESULTS_wave2.md | MD | 3 KB |
| waveF_checkpoint_helper-ia42.md | MD | 3 KB |
| linksys.py | PY | 3 KB |
| hikvision.py | PY | 3 KB |
| README.md | MD | 3 KB |
| PROBE_DISCOVERED_0610.md | MD | 3 KB |
| README.md | MD | 3 KB |
| boa93_fresh2.py | PY | 3 KB |
| mb_magic.py | PY | 2 KB |
| WAVE-C-NOTES.md | MD | 2 KB |
| WAVE1-RESOLUTION.md | MD | 2 KB |
| adb_nohup.py | PY | 2 KB |
| adb_diag.py | PY | 2 KB |
| CHECKPOINT-WAVE1-2x7f.md | MD | 2 KB |
| CHECKPOINT_wrapup.md | MD | 2 KB |
| CHECKPOINT-WAVE1-2x7f-FINAL.md | MD | 2 KB |
| adb_size.py | PY | 2 KB |
| tvt_lab.py | PY | 2 KB |
| README.md | MD | 2 KB |
| B3-CHECKPOINT.md | MD | 2 KB |
| ‹redacted›.jsonl | JSONL | 2 KB |
| README.md | MD | 2 KB |
| README.md | MD | 2 KB |
| README.md | MD | 2 KB |
| README.md | MD | 2 KB |
| NOTES.md | MD | 2 KB |
| adb_exec.py | PY | 2 KB |
| loader.py | PY | 2 KB |
| faith.py | PY | 2 KB |
| adb_wave2b_FINDINGS.md | MD | 2 KB |
| loader.py | PY | 2 KB |
| adb_enum.py | PY | 2 KB |
| WAVE_B_SUMMARY.md | MD | 2 KB |
| accept_boafrm.py | PY | 2 KB |
| CHECKPOINT_dqsg_wrapup.md | MD | 2 KB |
| VALIDATION_ia42_wrz0_cstecgi.md | MD | 2 KB |
| loader.py | PY | 2 KB |
| adb_hop.py | PY | 2 KB |
| loader.py | PY | 2 KB |
| BAICELLS-ORACLE-FINDING.md | MD | 2 KB |
| README.md | MD | 2 KB |
| loader.py | PY | 2 KB |
| vimar.py | PY | 2 KB |
| RESULT-adb-mxco-egix.md | MD | 2 KB |
| README.md | MD | 2 KB |
| wave2_mxco_final.txt | TXT | 2 KB |
| cstecgi_fire.py | PY | 2 KB |
| WAVE-A-FRESH-FINDINGS-helper-y3ck.md | MD | 2 KB |
| acct_run2a.log | LOG | 2 KB |
| CHECKPOINT-WAVE2-PROBE-2x7f.md | MD | 2 KB |
| adb_final.py | PY | 2 KB |
| tree_dump.txt | TXT | 2 KB |
| weed_probe.py | PY | 2 KB |
| adb_hop3.py | PY | 2 KB |
| SAMPLE_HSXW.md | MD | 2 KB |
| rebuild_mxco.py | PY | 2 KB |
| adb_hop2.py | PY | 2 KB |
| adb_readback.py | PY | 2 KB |
| NOTES.md | MD | 2 KB |
| fqpull.py | PY | 2 KB |
| FORGE_FIRE_wave2.md | MD | 2 KB |
| CHECKPOINT-egix-loader-acceptance.md | MD | 2 KB |
| SAMPLE-TEST-RESULTS.txt | TXT | 2 KB |
| proc_check.txt | TXT | 2 KB |
| lp2.txt | TXT | 2 KB |
| RESULT-adb-mxco-delivery.md | MD | 2 KB |
| README.md | MD | 2 KB |
| hik_fresh.py | PY | 2 KB |
| roller_gate.py | PY | 2 KB |
| CHECKPOINT-helper-1790919179539-2x7f.md | MD | 2 KB |
| loader.py | PY | 2 KB |
| acct_run.log | LOG | 2 KB |
| kb_reports-2x7f-wave1-wrapup.md | MD | 2 KB |
| kb_reports-2x7f-wave2-probe.md | MD | 1 KB |
| baicells_beacon.py | PY | 1 KB |
| README.md | MD | 1 KB |
| cdata_exploit2.py | PY | 1 KB |
| cnxntest.py | PY | 1 KB |
| CHK.txt | TXT | 1 KB |
| pulls.log | LOG | 1 KB |
| kb_reports-egix-loader-acceptance.md | MD | 1 KB |
| CHECKPOINT-wave2-loaders-final.md | MD | 1 KB |
| cdata_exploit.py | PY | 1 KB |
| fp.py | PY | 1 KB |
| acceptance_audit.py | PY | 1 KB |
| avtech_cam.txt.log | LOG | 1 KB |
| jaws_sink.py | PY | 1 KB |
| hunt_82901.py | PY | 1 KB |
| svctest.py | PY | 1 KB |
| ‹redacted›.jsonl | JSONL | 1 KB |
| avtech_dvr.txt.log | LOG | 1 KB |
| jaws.txt.log | LOG | 1 KB |
| kb_reports-2x7f-wave1-final.md | MD | 1 KB |
| boa93_chain.sh | SH | 1 KB |
| scan5555.py | PY | 1 KB |
| README.md | MD | 1 KB |
| README-waveB-B3.md | MD | 1 KB |
| wave.sh | SH | 1 KB |
| README.md | MD | 1 KB |
| ‹redacted›.jsonl | JSONL | 1 KB |
| ‹redacted›.jsonl | JSONL | 1 KB |
| rawnc.log | LOG | 1 KB |
| runner_waveb.sh | SH | 1 KB |
| README.md | MD | 1 KB |
| README.md | MD | 1 KB |
| adb_enum_result.log | LOG | 1 KB |
| README.md | MD | 1 KB |
| acct_run.sh | SH | 1 KB |
| portscan_keep.py | PY | 1 KB |
| ‹redacted›.jsonl | JSONL | 1 KB |
| README.md | MD | 1 KB |
| cdata_exploit3.py | PY | 1 KB |
| README.md | MD | 1 KB |
| README.md | MD | 1 KB |
| pull_classes.log | LOG | 1 KB |
| cdata_test.py | PY | 1 KB |
| RESULTS.md | MD | 1 KB |
| NOTES.md | MD | 1 KB |
| force_fire.py | PY | 1 KB |
| patch_delivery_url.py | PY | 1 KB |
| wp_vc_fire.py | PY | 1 KB |
| acct_run2a.sh | SH | 1 KB |
| ‹redacted›.README.md | MD | 1 KB |
| acct_dump.sh | SH | 1 KB |
| fix_marker.py | PY | 1 KB |
| ‹redacted›.README.md | MD | 1 KB |
| ‹redacted›.README.md | MD | 1 KB |
| acct_probe.sh | SH | 1 KB |
| FORGE_FIRE_wave2.md | MD | 1 KB |
| ‹redacted›.jsonl | JSONL | 1 KB |
| acct_run4.log | LOG | 1 KB |
| adb_probe.sh | SH | 1 KB |
| waveb_runner.log | LOG | 1 KB |
| fsrv2.log | LOG | 1 KB |
| acct_run5.sh | SH | 1 KB |
| CHECKPOINT-waveB-B3-ADDENDUM.md | MD | 1 KB |
| README_wave2.md | MD | 1 KB |
| jaws_creds.py | PY | 1 KB |
| RESULTS-waveB-B3.md | MD | 1 KB |
| zmap_direct.log | LOG | 1 KB |
| fire22.py | PY | 1 KB |
| gf_inspect.py | PY | 1 KB |
| LICENSE | TXT | 1 KB |
| bu.txt | TXT | 1 KB |
| pull2.sh | SH | 1 KB |
| README.md | MD | 1 KB |
| acct_run6.sh | SH | 1 KB |
| CHECKPOINT-egix-2026-10-02.md | MD | 1 KB |
| tree_dump.sh | SH | 1 KB |
| ‹redacted›.README.md | MD | 994 B |
| pulls_waveA.sh | SH | 988 B |
| fire_vimar.py | PY | 984 B |
| pull_classes.sh | SH | 974 B |
| ‹redacted›.jsonl | JSONL | 969 B |
| acct_run3.log | LOG | 963 B |
| ‹redacted›.README.md | MD | 956 B |
| acct_run4.sh | SH | 930 B |
| ‹redacted›.README.md | MD | 897 B |
| add_fsurl.py | PY | 887 B |
| boa93_fresh_fire.sh | SH | 880 B |
| pull2.log | LOG | 857 B |
| ‹redacted›.jsonl | JSONL | 850 B |
| w4uo_pull.sh | SH | 843 B |
| README.md | MD | 839 B |
| ‹redacted›.jsonl | JSONL | 835 B |
| dorks_needed.sh | SH | 788 B |
| class_fresh.txt | TXT | 763 B |
| NOTES.md | MD | 754 B |
| ping9.sh | SH | 739 B |
| tgt_inv.sh | SH | 733 B |
| pull2.sh | SH | 728 B |
| adb_probe_fast.sh | SH | 713 B |
| scan_mxco.sh | SH | 697 B |
| scan2.sh | SH | 696 B |
| acct_run3.sh | SH | 673 B |
| dorks_dump.sh | SH | 663 B |
| status.txt | TXT | 660 B |
| analyze_waveb.sh | SH | 646 B |
| creds_all.txt | TXT | 635 B |
| adb_probe_one.sh | SH | 631 B |
| pull2.log | LOG | 601 B |
| sample40.txt | TXT | 581 B |
| ln.txt | TXT | 572 B |
| run_hik.sh | SH | 522 B |
| scan_waveA.sh | SH | 508 B |
| flowiq_fc1.txt | TXT | 491 B |
| ‹redacted›.jsonl | JSONL | 472 B |
| dbg_verify.py | PY | 435 B |
| fire_hot.sh | SH | 435 B |
| class_union.txt | TXT | 424 B |
| stage2.sh | SH | 422 B |
| esver_stdout.log | LOG | 394 B |
| adb_shells.txt | TXT | 391 B |
| proc_check.sh | SH | 383 B |
| scan3.sh | SH | 368 B |
| scan_batched.sh | SH | 367 B |
| s_b.txt | TXT | 362 B |
| s_a.txt | TXT | 354 B |
| - | TXT | 338 B |
| fresh.txt | TXT | 290 B |
| uall.txt | TXT | 286 B |
| flowiq_fc2.txt | TXT | 272 B |
| acc.log | LOG | 240 B |
| wave_f_sample.txt | TXT | 236 B |
| faith_pull.log | LOG | 228 B |
| 82901.log | LOG | 218 B |
| hik_fresh.log | LOG | 217 B |
| hik_int.log | LOG | 210 B |
| vimarG.log | LOG | 202 B |
| bp.txt | TXT | 193 B |
| hik_beacon.log | LOG | 190 B |
| boa93_fresh.log | LOG | 185 B |
| ‹redacted›.jsonl | JSONL | 184 B |
| cdata_run.log | LOG | 183 B |
| boa93_tracert.log | LOG | 182 B |
| boa93_int.log | LOG | 181 B |
| boafrm_fire.log | LOG | 179 B |
| boafrm_fire2.log | LOG | 179 B |
| boafrm_run.log | LOG | 177 B |
| boa93_beacon.log | LOG | 175 B |
| hik3_fire.log | LOG | 168 B |
| cstec_w4uo.log | LOG | 159 B |
| cdata_beacon.log | LOG | 159 B |
| fire.log | LOG | 157 B |
| sample_gen_run.log | LOG | 157 B |
| hik_fire.log | LOG | 150 B |
| hik_fire2.log | LOG | 146 B |
| poc_up.php | PHP | 145 B |
| vimar_run2.log | LOG | 142 B |
| vimar_fire.log | LOG | 142 B |
| fire4.log | LOG | 142 B |
Hunt this IP
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting freeRelated infrastructure
Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.
| 192.236.229.229 | confirmed |
| 218.3.160.34 | confirmed |
| 89.124.67.72 | confirmed |
| 151.243.11.240 | lead |
| 159.223.40.78 | lead |
| 185.216.68.66 | lead |
| 46.250.255.73 | lead |
| 66.42.33.224 | lead |
| 89.19.223.126 | lead |