huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,198
hosts
117,767
files
133
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3144malware 1279exploit 1205mozi 964c2 344webshell 308ioc-match 92coinminer 77gafgyt 64tsunami 47mirai 42sliver 33havoc 18meterpreter 18

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
113.231.202.211
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-09-26
113.231.208.144
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-09-26
113.231.116.128
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-09-26
113.230.103.110
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-09-26
113.230.20.235
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-09-26
113.221.11.64
China · Chinanet
malware mozi elf-binaryA12026-09-26
113.228.113.161
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-09-26
112.248.186.181
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-09-26
112.85.183.82
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-09-26
112.198.238.18
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-09-26
112.198.195.68
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-09-26
112.225.176.130
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-09-26
112.93.136.28
China · China Unicom IP network China169 Guangdong province
malware mozi elf-binaryELF12026-09-26
112.198.193.5
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-09-26
105.186.74.236
South Africa · Telkom SA Ltd.
malware mozi elf-binaryA12026-09-26
112.198.194.175
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-09-26
111.88.7.48
Pakistan · Connect Communication
malware mozi elf-binary12026-09-26
110.81.120.188
China · Chinanet
malware mozi elf-binaryA12026-09-26
110.138.15.199
Indonesia · Telekomunikasi Indonesia (PT)
malware mozi elf-binaryA12026-09-26
111.178.127.215
China · Chinanet
malware mozi elf-binaryA12026-09-26
110.138.112.212
Indonesia · Telekomunikasi Indonesia (PT)
malware mozi elf-binaryA12026-09-26
107.172.235.217
United States · HostPapa
filesJPG12026-09-26
110.136.42.161
Indonesia · Telekomunikasi Indonesia (PT)
malware mozi elf-binaryA12026-09-26
109.235.7.1
Czechia · ISP Alliance a.s.
malware mozi elf-binary12026-09-26
109.63.128.197
Russia · PJSC MegaFon
malware mozi elf-binary12026-09-26
107.174.33.14
United States · HostPapa
filesPNG12026-09-26
106.58.126.123
China · Chinanet
malware mozi elf-binaryA12026-09-26
108.187.43.222
United States · Antbox Networks Limited
malware pe-binaryPE12026-09-26
109.236.44.241
Albania · Abissnet sh.a.
malware mozi elf-binaryA12026-09-26
103.87.194.116
Pakistan · Orbit Internet Service Provider Pvt Ltd
malware mozi elf-binaryA, JSON22026-09-26
105.184.78.209
South Africa · Telkom SA Ltd.
malware mozi elf-binaryA12026-09-26
105.184.188.211
South Africa · Telkom SA Ltd.
malware mozi elf-binaryA12026-09-26
103.68.95.197
India · softnet network
malware mozi elf-binaryELF12026-09-26
105.184.236.68
South Africa · Telkom SA Ltd.
malware mozi elf-binaryA12026-09-26
105.184.58.187
South Africa · Telkom SA Ltd.
malware mozi elf-binaryA12026-09-26
103.249.199.5
Philippines · Switch Fiber
malware mozi elf-binaryA12026-09-26
101.108.11.84
Thailand · TOT Public Company Limited
malware mozi elf-binaryA12026-09-26
103.126.201.130
Indonesia · PT Amron Citinet
malware mozi elf-binary12026-09-26
103.179.240.227
Pakistan · PLAY BROADBAND (PRIVATE) LIMITED
malware mozi elf-binary12026-09-26
101.59.79.119
Italy · Sky Italia srl
malware mozi elf-binaryA12026-09-26
102.214.109.147
South Africa · Wild Peach Trading 52 (PTY) LTD
malware mozi elf-binary12026-09-26
104.168.70.171
United States · HostPapa
filesPNG12026-09-26
101.205.70.39
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-09-26
1.70.76.87
China · Chinanet
malware mozi elf-binaryA12026-09-26
101.108.105.139
Thailand · TOT Public Company Limited
malware mozi elf-binaryA12026-09-26
101.58.112.120
Italy · Sky Italia srl
malware mozi elf-binaryA12026-09-26
101.109.81.209
Thailand · TOT Public Company Limited
malware mozi elf-binaryA12026-09-26
103.167.175.121
India · Fibre Air Services Private Limited
malware mozi elf-binary12026-09-26
217.217.233.97
China · TeraSwitch Networks Inc.
malware coinminer webshell c2SH, GZ, ELF, PS1182026-09-26
103.163.117.83
Bangladesh · Moghbazar Dot Net
exposed-secretJSON12026-09-26
← NewerPage 123 of 124Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free