huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled malware
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 115.58.176.160 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 115.51.153.198 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 113.239.221.244 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 113.254.36.153 Hong Kong · HGC Global Communications Limited | malware elf-binary | ELF | 1 | 2026-10-15 |
| 112.238.27.166 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 105.225.151.155 South Africa · Telkom SA Ltd. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 103.170.217.170 India · WebHorizon Internet Services | malware exploit webshell elf-binary | ELF, PE, PHP, SH | 16 | 2026-10-14 |
| 194.163.148.133 France · Contabo GmbH | exposed-secret exploit malware mozi | PHP, TXT, MD, JS | 74 | 2026-10-14 |
| 38.54.88.188 United States · Kaopu Cloud HK Limited | malware exposed-secret mozi c2 | PY, SH, ELF, TGZ | 36 | 2026-10-14 |
| 217.6.46.91 Germany · Deutsche Telekom AG | c2 exploit exposed-secret malware | PS1 | 2 | 2026-10-14 |
| 58.62.144.229 China · Chinanet | malware exposed-secret mozi pe-binary | PE, OVPN, SH, TAR | 7 | 2026-10-14 |
| 61.166.61.44 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-14 |
| 47.236.199.243 United States · Alibaba (US) Technology Co., Ltd. | malware pe-binary | PE | 1 | 2026-10-13 |
| 196.190.224.62 ET · EthioNet | malware mozi elf-binary | A | 1 | 2026-10-13 |
| 60.23.238.248 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-13 |
| 66.154.127.156 Canada · MULTACOM CORPORATION | exposed-secret exploit malware c2 | PY, ELF, SH, MD | 110 | 2026-10-13 |
| 85.120.255.53 Moldova · AVA HOST SRL | malware elf-binary | ELF, SH | 2 | 2026-10-13 |
| 23.94.189.114 United States · HostPapa | malware elf-binary | ELF | 1 | 2026-10-13 |
| 2.27.249.100 United States · NTT America, Inc. | malware pe-binary | PE, BAT | 4 | 2026-10-12 |
| 69.46.46.62 United States · Railway | c2 exploit malware mozi | PS1 | 1 | 2026-10-12 |
| 27.124.17.6 Hong Kong · CTG Server Limited | malware pe-binary | PE | 2 | 2026-10-12 |
| 3.221.186.160 United States · Amazon.com, Inc. | exposed-secret malware mozi | TXT, PHP, SH, SQL | 5 | 2026-10-12 |
| 31.76.79.58 United States · PLAY2GO INTERNATIONAL LIMITED | exposed-secret exploit malware mozi | SH, PY, PL | 34 | 2026-10-12 |
| 4.227.214.227 United States · Microsoft Corporation | malware pe-binary | PE, PS1, ZIP, COM | 9 | 2026-10-10 |
| 36.50.134.86 Vietnam · VPSTTT COMPUTER COMPANY LIMITED | malware mozi elf-binary | ELF | 13 | 2026-10-10 |
| 213.136.79.115 France · Contabo GmbH | exposed-secret exploit malware c2 | SH, TXT, JSON, LOG | 460 | 2026-10-09 |
| 40.114.73.166 United States · Microsoft Corporation | malware exploit pe-binary | PE, PS1, MSI | 9 | 2026-10-09 |
| 154.12.83.188 Hong Kong · cognetcloud INC | malware mirai elf-binary | ELF, SH | 12 | 2026-10-08 |
| 178.128.125.255 Singapore · DigitalOcean, LLC | malware elf-binary | ELF, SH | 16 | 2026-10-08 |
| 112.113.175.13 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 45.166.188.48 Brazil · Falcon Net | malware mozi elf-binary | A, JSON | 2 | 2026-10-08 |
| 61.52.213.183 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 200.115.102.246 Brazil · FiberPon telecom | malware mozi elf-binary | A, JSON | 2 | 2026-10-08 |
| 42.234.99.214 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 42.229.175.66 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 222.138.78.101 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 222.160.220.86 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 187.110.223.227 Brazil · AS271724 | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 195.64.163.238 Ukraine · Physical person-businessman Bolotny Volodymyr Oleksiyovich | malware elf-binary | ELF | 1 | 2026-10-08 |
| 180.190.240.131 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 120.84.214.178 China · China Unicom IP network China169 Guangdong province | malware mozi elf-binary | ELF | 1 | 2026-10-08 |
| 123.8.8.177 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 125.162.15.66 Indonesia · Telekomunikasi Indonesia (PT) | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 125.47.218.42 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 175.169.236.217 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-08 |
| 81.229.105.156 Sweden · Telia Company AB | malware mozi elf-binary | ELF | 1 | 2026-10-08 |
| 94.183.174.69 Finland · CATERING UK LIMITED | malware elf-binary | ELF, SH | 7 | 2026-10-08 |
| 190.103.69.44 Bolivia · Cotel Ltda. | malware mozi elf-binary | 1 | 2026-10-08 | |
| 42.85.165.214 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-08 |
| 61.52.221.245 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free