huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled mirai
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 23.149.28.46 United States · NetLab Global | exploit malware mozi exposed-secret | PY, SH, LOG, GZ | 1,262 | 2026-11-12 |
| 217.160.132.82 Spain · IONOS SE | exposed-secret exploit malware mozi | PY, SH, PHP, TXT | 911 | 2026-11-12 |
| 51.89.98.132 Germany · OVH SAS | malware mirai | SH | 1 | 2026-11-10 |
| 163.52.135.151 unknown network | exposed-secret exploit webshell malware | PY, HTML, TXT, PHP | 611 | 2026-11-09 |
| 146.19.213.192 Russia · ALEXHOST SRL | malware exposed-secret mozi exploit | PY, SH, LOG, TXT | 1,270 | 2026-11-09 |
| 13.215.184.109 Singapore · Amazon.com, Inc. | exposed-secret malware exploit mozi | JSON, TXT, SH, PY | 136 | 2026-11-07 |
| 110.42.215.163 China · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret malware mozi | GO, LOG, PY, PS1 | 317 | 2026-11-06 |
| 94.130.22.61 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, EML, JSON, TXT | 1,209 | 2026-11-05 |
| 38.54.88.171 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, SH, LOG, TXT | 200 | 2026-11-04 |
| 39.96.205.8 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit webshell malware | GO, LOG, PY, TXT | 576 | 2026-11-03 |
| 185.28.119.106 United Kingdom · BlueVPS OU | exposed-secret exploit c2 malware | LOG, JSON, MD, GITIGN | 398 | 2026-11-03 |
| 172.105.156.153 United States · Akamai Technologies, Inc. | exposed-secret exploit malware mozi | TXT, JSON, SH, MD | 163 | 2026-11-03 |
| 194.233.67.247 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware mozi | TXT, PHP, HTML, PY | 354 | 2026-11-02 |
| 169.58.233.110 United States · TerraTransit AG | exploit exposed-secret malware mozi | LOG, JSON, MD, SH | 125 | 2026-11-02 |
| 64.118.151.226 Hong Kong · Eons Data Communications Limited | exploit exposed-secret malware mozi | SH, LOG, MD, JSON | 147 | 2026-11-02 |
| 96.126.130.81 United States · Evoxt Sdn. Bhd. | malware mozi exploit webshell | EML, SH, PY, LOG | 1,568 | 2026-10-31 |
| 143.246.203.114 United States | exploit exposed-secret malware mozi | LOG, MD, PY, RB | 85 | 2026-10-29 |
| 108.61.161.224 Japan · The Constant Company, LLC | exposed-secret exploit malware mozi | SH, HTML, LOG, PY | 197 | 2026-10-26 |
| 104.160.169.204 United States · Sharktech | exposed-secret exploit malware tsunami | SH, LOG, TXT, PY | 170 | 2026-10-24 |
| 151.242.30.142 South Africa · Internet Magnate (Pty) Ltd | exploit malware mozi exposed-secret | JS, ZIP, C, PY | 454 | 2026-10-23 |
| 157.245.140.34 United States · DigitalOcean, LLC | exposed-secret malware mozi exploit | PY, LOG, SH, JSON | 1,680 | 2026-10-21 |
| 151.243.11.241 Germany · LLC VASH KREDIT BANK | exploit c2 exposed-secret malware | PY, MD, LOG, TXT | 439 | 2026-10-21 |
| 2.24.204.250 United States · Hostinger International Limited | exposed-secret exploit malware mozi | GZ, DB, MD, JSON | 136 | 2026-10-21 |
| 64.111.92.149 United States · BL Networks | exposed-secret exploit malware mozi | PY, YAML, TXT, MD | 108 | 2026-10-21 |
| 157.230.117.70 Germany · DigitalOcean, LLC | exploit exposed-secret malware mozi | PY, MD, JSON, CFG | 79 | 2026-10-21 |
| 194.233.72.68 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware webshell | PY, TXT, PHP, MD | 285 | 2026-10-16 |
| 182.253.221.146 Indonesia · BIZNET | exposed-secret malware mirai | CSV | 22 | 2026-10-16 |
| 45.153.34.235 The Netherlands · TechTies Inc. | malware mirai exploit exposed-secret | ELF, C, SH, H | 68 | 2026-10-15 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 66.154.127.156 Canada · MULTACOM CORPORATION | exposed-secret exploit malware c2 | PY, ELF, SH, MD | 110 | 2026-10-13 |
| 213.136.79.115 France · Contabo GmbH | exposed-secret exploit malware c2 | SH, TXT, JSON, LOG | 460 | 2026-10-09 |
| 154.12.83.188 Hong Kong · cognetcloud INC | malware mirai elf-binary | ELF, SH | 12 | 2026-10-08 |
| 43.163.124.78 Singapore · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret malware meterpreter | TXT, ELF, MD, PY | 81 | 2026-10-03 |
| 176.65.139.218 The Netherlands · Offshore LC | malware mirai elf-binary | ELF, SH | 12 | 2026-10-02 |
| 89.124.67.72 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit malware mozi | PY, MD, LOG, JSON | 10,428 | 2026-10-01 |
| 190.183.251.210 Argentina · Gigared S.A. | exploit exposed-secret malware gafgyt | MD, PY, JSON, SQLITE | 30 | 2026-09-30 |
| 176.65.148.59 The Netherlands · Pfcloud UG (haftungsbeschrankt) | exposed-secret exploit malware mozi | SH, MD, LOG, PY | 88 | 2026-09-30 |
| 176.65.148.10 The Netherlands · Pfcloud UG (haftungsbeschrankt) | malware mirai elf-binary | ARM, ARM64, ARM7HF, MIPS | 8 | 2026-09-26 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free