huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled malware

HostLabelsFile typesFilesLast seen
45.168.132.19
Brazil · N.F.F.NETWORK SERVICOS DE TELECOMUNICACOES LTDA
malware mozi elf-binaryA12026-10-08
42.237.57.159
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
36.88.136.194
Indonesia · Telekomunikasi Indonesia (PT)
malware mozi elf-binaryA12026-10-08
39.63.156.12
Pakistan · Pakistan Telecommuication company limited
malware mozi elf-binary12026-10-08
39.82.142.95
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
27.44.147.208
China · China Unicom IP network China169 Guangdong province
malware mozi elf-binaryELF12026-10-08
27.206.175.175
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-08
27.202.187.80
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
222.127.73.15
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-10-08
208.102.160.191
United States · Cincinnati Bell Telephone Company LLC
malware mozi elf-binaryELF12026-10-08
27.197.62.42
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-08
222.134.173.157
China · CHINA UNICOM China169 Backbone
malware elf-binaryELF12026-10-08
220.201.98.115
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-08
219.157.239.239
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
222.137.93.208
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
182.127.177.231
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
175.30.44.142
China · Chinanet
malware mozi elf-binaryA12026-10-08
163.142.94.154
China · China Unicom IP network China169 Guangdong province
malware mozi elf-binaryELF12026-10-08
123.14.222.197
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
125.40.153.124
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
125.42.122.31
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-08
125.43.34.132
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
123.11.96.21
China · CHINA UNICOM China169 Backbone
malware elf-binaryELF12026-10-08
176.65.139.40
The Netherlands · Offshore LC
malware elf-binaryELF72026-10-08
175.169.0.215
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-08
176.65.149.45
The Netherlands · Pfcloud UG (haftungsbeschrankt)
malware elf-binaryELF, SH112026-10-08
123.10.70.76
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-08
120.28.164.12
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-10-08
115.51.182.83
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-08
119.187.197.115
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
120.28.161.60
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-10-08
115.52.197.166
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
112.248.162.236
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
115.206.110.121
China · Chinanet
malware mozi elf-binaryA12026-10-08
120.28.144.161
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-10-08
105.184.179.135
South Africa · Telkom SA Ltd.
malware mozi elf-binaryA12026-10-08
139.28.220.253
Finland · IHOR HOSTING LTD
exposed-secret exploit c2 malwareGZ, TXT, ALL, AUS362026-10-08
167.233.36.82
Germany · Hetzner Online GmbH
exposed-secret malware mozi webshellPHP, SH, JS, PY252026-10-08
23.254.195.48
United States · HostPapa
malware exposed-secret elf-binary pe-binaryELF, PE, TXT122026-10-08
104.18.54.45
United States · Cloudflare, Inc.
malware pe-binaryPE22026-10-08
104.18.50.34
United States · Cloudflare, Inc.
malware pe-binaryPE22026-10-08
50.6.202.214
United States · Network Solutions, LLC
exposed-secret malware moziPHP, HTML, TXT72026-10-07
182.129.144.48
China · Chinanet
malware mozi elf-binaryA12026-10-07
119.109.210.22
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-07
185.216.68.66
Seychelles · ALEXHOST SRL
exploit exposed-secret webshell c2PY, TXT, SH, JS3392026-10-07
118.69.78.91
Vietnam · FPT Telecom Company
exposed-secret malware pe-binary tunnelSH, ZIP, BAT, JSON202026-10-07
38.60.157.86
United States · Kaopu Cloud HK Limited
malware mozi exposed-secretPY, LOG, TGZ, TXT202026-10-07
83.142.234.66
Ukraine · Sky Vision Ukraine Ltd
malware mozi pe-binaryPE, ZIP, RAR, BAT272026-10-06
202.152.201.166
Indonesia · PT. Eka Mas Republik
malware moziPHP, BAT32026-10-06
119.59.103.186
Thailand · Metrabyte Co.,Ltd
malware tsunami mozi exposed-secretHTM, DOWNLO, HTML, PHP162026-10-06
← NewerPage 14 of 25Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free