huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,483
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled malware
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 103.249.199.5 Philippines · Switch Fiber | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 101.108.11.84 Thailand · TOT Public Company Limited | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 103.126.201.130 Indonesia · PT Amron Citinet | malware mozi elf-binary | 1 | 2026-09-26 | |
| 103.179.240.227 Pakistan · PLAY BROADBAND (PRIVATE) LIMITED | malware mozi elf-binary | 1 | 2026-09-26 | |
| 101.59.79.119 Italy · Sky Italia srl | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 102.214.109.147 South Africa · Wild Peach Trading 52 (PTY) LTD | malware mozi elf-binary | 1 | 2026-09-26 | |
| 101.205.70.39 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 1.70.76.87 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 101.108.105.139 Thailand · TOT Public Company Limited | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 101.58.112.120 Italy · Sky Italia srl | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 101.109.81.209 Thailand · TOT Public Company Limited | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 103.167.175.121 India · Fibre Air Services Private Limited | malware mozi elf-binary | 1 | 2026-09-26 | |
| 217.217.233.97 China · TeraSwitch Networks Inc. | malware coinminer webshell c2 | SH, GZ, ELF, PS1 | 18 | 2026-09-26 |
| 101.91.170.71 China · China Telecom (Group) | malware elf-binary | BIN, ELF | 9 | 2026-09-26 |
| 196.189.40.159 ET · EthioNet | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 117.245.139.85 India · Bharat Sanchar Nigam Ltd | malware mozi elf-binary | 1 | 2026-09-26 | |
| 175.160.126.38 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 120.28.194.204 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 81.230.148.181 Sweden · Telia Company AB | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 176.65.148.10 The Netherlands · Pfcloud UG (haftungsbeschrankt) | malware mirai elf-binary | ARM, ARM64, ARM7HF, MIPS | 8 | 2026-09-26 |
| 45.13.239.249 Germany · Florian Kolb | exposed-secret malware c2 adaptix | JSON, TXT, BIN, EXE | 141 | 2026-09-26 |
| 101.42.136.73 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware mozi | TXT, LOG, PY, XML | 5 | 2026-09-26 |
| 138.197.174.121 Canada · DigitalOcean, LLC | coinminer malware exposed-secret c2 | GZ, SH, JS | 9 | 2026-09-22 |
| 66.179.31.191 United States · BL Networks | exposed-secret exploit malware mozi | PY, HTML, SH, TXT | 60 | 2026-09-15 |
| 223.26.62.95 Hong Kong · CTG Server Limited | malware elf-binary | BIN, B | 10 | 2026-09-14 |
← NewerPage 25 of 25
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free