huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled gafgyt
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 41.223.30.7 CM · Creolink Communications | exploit exposed-secret malware mozi | PY, JSON, BIN, LOG | 712 | 2026-11-12 |
| 217.198.6.226 Russia · JSC "TIMEWEB" | exposed-secret malware exploit webshell | MD, LOG, PE, TXT | 262 | 2026-11-12 |
| 202.162.109.6 Australia · CTG Server Limited | exploit exposed-secret malware mozi | LOG, SH, PY, BIN | 116 | 2026-11-12 |
| 143.92.57.247 Hong Kong · CTG Server Limited | exploit exposed-secret malware mozi | LOG, SH, PY, BIN | 116 | 2026-11-12 |
| 202.162.109.5 Australia · CTG Server Limited | exploit exposed-secret malware mozi | LOG, PY, SH, BIN | 161 | 2026-11-12 |
| 23.149.28.46 United States · NetLab Global | exploit malware mozi exposed-secret | PY, SH, LOG, GZ | 1,262 | 2026-11-12 |
| 144.91.73.103 France · Contabo GmbH | exposed-secret malware mozi exploit | PY, SH, TXT, PS1 | 563 | 2026-11-12 |
| 115.159.204.46 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware gafgyt | PY, LOG, JSON, MD | 167 | 2026-11-12 |
| 163.52.135.151 unknown network | exposed-secret exploit webshell malware | PY, HTML, TXT, PHP | 611 | 2026-11-09 |
| 147.182.133.56 United States · DigitalOcean, LLC | exposed-secret malware exploit c2 | BIN, TXT, PE, HTML | 237 | 2026-11-09 |
| 154.12.86.207 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, LOG, JSON, SH | 140 | 2026-11-08 |
| 124.198.131.63 United States · 1337 Services GmbH | exposed-secret malware exploit mozi | PY, SH, PE, RAR | 217 | 2026-11-08 |
| 3.84.186.180 United States · Amazon.com, Inc. | exposed-secret malware mozi exploit | PY, HTML, JS, TXT | 829 | 2026-11-07 |
| 94.130.22.61 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, EML, JSON, TXT | 1,209 | 2026-11-05 |
| 38.54.88.171 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, SH, LOG, TXT | 200 | 2026-11-04 |
| 38.60.227.210 United States · Kaopu Cloud HK Limited | exposed-secret malware mozi c2 | PY, TXT, SH, PS1 | 1,000 | 2026-11-04 |
| 185.28.119.106 United Kingdom · BlueVPS OU | exposed-secret exploit c2 malware | LOG, JSON, MD, GITIGN | 398 | 2026-11-03 |
| 172.105.156.153 United States · Akamai Technologies, Inc. | exposed-secret exploit malware mozi | TXT, JSON, SH, MD | 163 | 2026-11-03 |
| 194.233.67.247 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware mozi | TXT, PHP, HTML, PY | 354 | 2026-11-02 |
| 64.118.151.226 Hong Kong · Eons Data Communications Limited | exploit exposed-secret malware mozi | SH, LOG, MD, JSON | 147 | 2026-11-02 |
| 212.103.62.205 United States · CNSERVERS LLC | exposed-secret malware exploit mozi | SH, PY, ELF, JSON | 387 | 2026-11-02 |
| 104.233.217.108 United States · PEG TECH INC | exposed-secret exploit malware mozi | PY, TXT, JS, JSON | 699 | 2026-11-02 |
| 96.126.130.81 United States · Evoxt Sdn. Bhd. | malware mozi exploit webshell | EML, SH, PY, LOG | 1,568 | 2026-10-31 |
| 31.128.39.24 Russia · Beget LLC | malware mozi exploit exposed-secret | JS, PY, SH, TXT | 455 | 2026-10-30 |
| 209.99.184.246 Switzerland · SKN Subnet & Telecom Ltd | exploit exposed-secret c2 webshell | TXT, MD, PY, JSON | 866 | 2026-10-29 |
| 143.246.203.114 United States | exploit exposed-secret malware mozi | LOG, MD, PY, RB | 85 | 2026-10-29 |
| 23.19.231.52 United States · Leaseweb USA, Inc. | malware mozi exposed-secret exploit | PY, GZ, JS, SH | 577 | 2026-10-27 |
| 191.217.250.227 United States | malware c2 coinminer exploit | PHP, GZ, BIN, SH | 33 | 2026-10-27 |
| 45.77.131.98 Japan · The Constant Company, LLC | malware mozi webshell exposed-secret | JSON, LOG, SH, PY | 311 | 2026-10-27 |
| 95.216.224.44 Finland · Hetzner Online GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-25 |
| 209.38.235.232 Germany · DigitalOcean, LLC | exposed-secret malware mozi exploit | JSON, JS, LOG, MD | 118 | 2026-10-25 |
| 139.162.97.181 Japan · Akamai Technologies, Inc. | malware mozi exposed-secret gafgyt | MICROH, TXT | 53 | 2026-10-24 |
| 151.242.30.142 South Africa · Internet Magnate (Pty) Ltd | exploit malware mozi exposed-secret | JS, ZIP, C, PY | 454 | 2026-10-23 |
| 54.169.109.7 Singapore · Amazon.com, Inc. | exposed-secret exploit malware mozi | LOG, PY, OVPN, TXT | 55 | 2026-10-22 |
| 93.123.85.46 Germany · dataforest GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-21 |
| 142.93.57.244 United States · DigitalOcean, LLC | exposed-secret exploit malware c2 | TXT, JSON, JS, BODY | 217 | 2026-10-21 |
| 2.24.204.250 United States · Hostinger International Limited | exposed-secret exploit malware mozi | GZ, DB, MD, JSON | 136 | 2026-10-21 |
| 64.111.92.149 United States · BL Networks | exposed-secret exploit malware mozi | PY, YAML, TXT, MD | 108 | 2026-10-21 |
| 8.215.31.102 Singapore · Alibaba (US) Technology Co., Ltd. | gafgyt malware | ZIP | 55 | 2026-10-21 |
| 157.230.117.70 Germany · DigitalOcean, LLC | exploit exposed-secret malware mozi | PY, MD, JSON, CFG | 79 | 2026-10-21 |
| 147.139.136.66 United States · Alibaba (US) Technology Co., Ltd. | gafgyt malware | ZIP | 55 | 2026-10-21 |
| 88.99.208.237 Germany · Hetzner Online GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-21 |
| 45.142.143.235 Finland · Materialism s.r.l. | exposed-secret malware mozi exploit | PY, SQL, GZ, SH | 643 | 2026-10-19 |
| 94.237.73.153 Singapore · UpCloud Ltd | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 191 | 2026-10-19 |
| 47.76.239.114 United States · Alibaba (US) Technology Co., Ltd. | malware coinminer exposed-secret exploit | PE, BIN, PEM, CMD | 25 | 2026-10-19 |
| 47.102.192.23 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware exploit mozi | PY, TXT, LOG, SH | 484 | 2026-10-15 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 66.154.127.156 Canada · MULTACOM CORPORATION | exposed-secret exploit malware c2 | PY, ELF, SH, MD | 110 | 2026-10-13 |
| 185.216.68.66 Seychelles · ALEXHOST SRL | exploit exposed-secret webshell c2 | PY, TXT, SH, JS | 339 | 2026-10-07 |
| 43.163.124.78 Singapore · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret malware meterpreter | TXT, ELF, MD, PY | 81 | 2026-10-03 |
Page 1 of 2Older →
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free