huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled malware
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 195.154.191.187 France · Scaleway SAS | malware mozi exploit c2 | PY, CSV, MD, HTML | 17 | 2026-09-30 |
| 178.104.146.251 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, TXT, MD, BACKUP | 48 | 2026-09-30 |
| 190.183.251.210 Argentina · Gigared S.A. | exploit exposed-secret malware gafgyt | MD, PY, JSON, SQLITE | 30 | 2026-09-30 |
| 176.65.148.59 The Netherlands · Pfcloud UG (haftungsbeschrankt) | exposed-secret exploit malware mozi | SH, MD, LOG, PY | 88 | 2026-09-30 |
| 91.92.40.65 The Netherlands · TechTies Inc. | malware elf-binary | ELF | 7 | 2026-09-30 |
| 162.19.79.99 France · OVH SAS | malware pe-binary | PE | 149 | 2026-09-30 |
| 184.168.31.120 United States · GoDaddy.com, LLC | exposed-secret exploit malware mozi | PHP, LOCK, TXT, HTML | 45 | 2026-09-30 |
| 32.236.62.30 Australia · Amazon.com, Inc. | malware mozi webshell exposed-secret | JSP, JS | 11 | 2026-09-30 |
| 178.104.231.250 Germany · Hetzner Online GmbH | exploit exposed-secret c2 malware | SQL, PY, TXT, SH | 125 | 2026-09-30 |
| 207.57.188.152 United States · Zillion Network Inc. | malware mozi exploit exposed-secret | PY, GO, ELF, PYC | 9 | 2026-09-30 |
| 95.85.232.60 Germany · WAIcore Ltd | malware elf-binary | ELF | 2 | 2026-09-29 |
| 109.238.87.111 United Kingdom · B2 Net Solutions Inc. | malware macho-binary | MACHO, TXT | 2 | 2026-09-28 |
| 91.92.40.165 The Netherlands · TechTies Inc. | malware elf-binary | ELF | 26 | 2026-09-28 |
| 178.16.54.55 The Netherlands · Omegatech LTD | malware macho-binary | MACHO | 5 | 2026-09-28 |
| 37.142.77.163 Israel · Hot-Net internet services Ltd. | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 88.8.20.75 Spain · TELEFONICA DE ESPANA S.A.U. | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 5.185.55.173 Poland · Orange Polska Spolka Akcyjna | ioc-match malware elf-binary | BIN, ELF | 2 | 2026-09-27 |
| 212.156.106.146 Turkey · Turk Telekomunikasyon Anonim Sirketi | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 88.86.246.233 France · ADISTA SAS | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 185.32.179.229 Israel · HOT Mobile Ltd. | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 2.54.85.90 Israel · Partner Communications Ltd. | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 2.54.89.92 Israel · Partner Communications Ltd. | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 2.55.94.142 Israel · Partner Communications Ltd. | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 2.136.203.189 Spain · TELEFONICA DE ESPANA S.A.U. | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 2.54.81.12 Israel · Partner Communications Ltd. | ioc-match malware elf-binary | BIN, ELF | 2 | 2026-09-27 |
| 185.166.91.145 The Netherlands · Critical Core BV | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 136.233.149.66 India · Reliance Jio Infocomm Limited | ioc-match malware elf-binary | ELF | 1 | 2026-09-27 |
| 176.65.139.250 The Netherlands · Offshore LC | malware exploit elf-binary | ELF, SH, TXT | 5 | 2026-09-27 |
| 176.65.134.121 Slovenia · Pfcloud UG (haftungsbeschrankt) | malware elf-binary | ELF, SE | 43 | 2026-09-27 |
| 193.143.1.99 Russia · Proton66 OOO | malware exposed-secret exploit elf-binary | ELF, C, GZ, SH | 41 | 2026-09-27 |
| 23.252.123.134 United States · WebNX, Inc. | exposed-secret malware c2 mozi | BIN, SH, ZIP, PY | 72 | 2026-09-27 |
| 45.74.3.24 United States · Nerushenko Vyacheslav Nikolaevich | malware elf-binary | ELF, TXT | 2 | 2026-09-27 |
| 51.159.21.191 France · Scaleway SAS | exposed-secret malware c2 exploit | PHP, PS1, EXE, PY | 286 | 2026-09-26 |
| 198.54.115.158 United States · Namecheap, Inc. | malware pe-binary | PE | 1 | 2026-09-26 |
| 93.157.253.209 Russia · JSC "Ufanet" | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 89.189.181.54 Russia · Sibirskie Seti Ltd. | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 94.156.166.84 Bulgaria · Gezim Cerri | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 94.156.166.167 Bulgaria · Gezim Cerri | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 95.56.232.109 Kazakhstan · JSC Kazakhtelecom | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 88.115.204.4 Finland · RIPE Network Coordination Centre | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 115.72.161.174 Vietnam · Viettel Group | malware mozi elf-binary | ELF, SH | 5 | 2026-09-26 |
| 91.190.84.93 Russia · Smart Telecom Limited | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 91.128.169.28 Sweden · Tele2 Sverige AB | malware elf-binary | ELF | 1 | 2026-09-26 |
| 88.249.100.137 Turkey · Turk Telekomunikasyon Anonim Sirketi | malware mozi elf-binary | 1 | 2026-09-26 | |
| 87.13.96.192 Italy · Telecom Italia S.p.A. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 85.15.114.111 Russia · Vostoktelecom Telephone Company Limited Liability Company | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 79.106.74.167 Albania · ONE ALBANIA SH.A. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 68.195.40.192 United States · Cablevision Systems Corp. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 85.219.201.2 Poland · T-Mobile Polska S.A. | malware mozi elf-binary | 1 | 2026-09-26 | |
| 81.227.54.149 Sweden · Telia Company AB | malware mozi elf-binary | 1 | 2026-09-26 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free