huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled malware
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 39.99.242.80 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | PY, TXT, SH, MD | 128 | 2026-11-03 |
| 39.96.205.8 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit webshell malware | GO, LOG, PY, TXT | 576 | 2026-11-03 |
| 198.44.116.69 United States · HostPapa | exposed-secret malware mozi exploit | PY, SH, JSON, LOG | 733 | 2026-11-03 |
| 47.112.221.124 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware exploit webshell | PY, JSON, LOG, BAT | 141 | 2026-11-03 |
| 198.23.145.14 United States · HostPapa | exposed-secret exploit c2 webshell | SH, PY, SQL, MD | 792 | 2026-11-03 |
| 39.100.86.251 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware tunnel | SH, PY, XML, JAR | 107 | 2026-11-03 |
| 198.46.252.28 United States · HostPapa | exposed-secret exploit malware mozi | GO, TXT, SH, GZ | 89 | 2026-11-03 |
| 45.225.135.92 Panama · RACK SPHERE HOSTING S.A. | malware exposed-secret exploit meterpreter | PE, TXT, BIN, JAR | 7 | 2026-11-03 |
| 107.175.39.140 United States · HostPapa | malware elf-binary pe-binary | ELF, PE, PHP, SH | 27 | 2026-11-03 |
| 192.210.228.111 United States · HostPapa | malware exposed-secret pe-binary elf-binary | GZ, PE, BAT, ELF | 65 | 2026-11-03 |
| 69.12.64.195 United States · HostPapa | exposed-secret malware mozi webshell | PHP, JS, ASP, LOG | 112 | 2026-11-03 |
| 192.227.241.226 United States · HostPapa | exposed-secret exploit malware mozi | PY, SH, LOG, GZ | 538 | 2026-11-03 |
| 198.44.46.122 United States · HostPapa | exposed-secret exploit malware elf-binary | ELF, TXT, PY, JAR | 48 | 2026-11-03 |
| 45.194.90.57 Seychelles · CtrlS | malware elf-binary | ELF | 1 | 2026-11-03 |
| 159.203.225.195 United States · DigitalOcean, LLC | malware exploit exposed-secret mozi | PE, EXE, BAT, ZIP | 147 | 2026-11-03 |
| 152.42.193.28 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 188.166.206.102 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 101.126.4.50 China · Beijing Volcano Engine Technology Co., Ltd. | exploit webshell exposed-secret malware | LOG, SH, PY, JSON | 175 | 2026-11-03 |
| 168.144.85.125 India · DigitalOcean, LLC | exposed-secret exploit malware mozi | SH, TXT, PY, DEB | 500 | 2026-11-03 |
| 185.228.168.10 United States · Daniel Cid | exposed-secret malware mozi | TXT | 1 | 2026-11-03 |
| 185.228.168.168 United States · Daniel Cid | exposed-secret malware mozi | ENV, TXT | 2 | 2026-11-03 |
| 104.168.111.208 United States · HostPapa | malware mozi exploit exposed-secret | PY, LOG, SH, PYC | 352 | 2026-11-03 |
| 185.28.119.106 United Kingdom · BlueVPS OU | exposed-secret exploit c2 malware | LOG, JSON, MD, GITIGN | 398 | 2026-11-03 |
| 172.105.156.153 United States · Akamai Technologies, Inc. | exposed-secret exploit malware mozi | TXT, JSON, SH, MD | 163 | 2026-11-03 |
| 194.233.67.247 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware mozi | TXT, PHP, HTML, PY | 354 | 2026-11-02 |
| 173.212.244.40 France · Contabo GmbH | exposed-secret exploit webshell c2 | PY, HTML, MD, PHP | 523 | 2026-11-02 |
| 203.194.115.12 Indonesia · Rumahweb | exposed-secret exploit malware webshell | PY, LOG, PHP, JAR | 360 | 2026-11-02 |
| 83.172.138.182 Germany · M247 Europe SRL | exposed-secret malware mozi exploit | PY, TXT, APK, HTML | 301 | 2026-11-02 |
| 147.93.159.0 Singapore · Contabo Asia Private Limited | exposed-secret exploit webshell malware | PY, PHP, SH, C | 86 | 2026-11-02 |
| 169.58.233.110 United States · TerraTransit AG | exploit exposed-secret malware mozi | LOG, JSON, MD, SH | 125 | 2026-11-02 |
| 45.148.10.183 AD · TECHOFF SRV LIMITED | malware exploit mozi webshell | PE, CMD, PS1, VBS | 18 | 2026-11-02 |
| 176.53.159.37 Turkey · ZORNTECH WEB SOLUTIONS | malware macho-binary | MACHO | 3 | 2026-11-02 |
| 92.246.129.98 Brazil · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | JS, JSON, PY, SH | 347 | 2026-11-02 |
| 78.111.90.130 Canada · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | TXT, SH, JSON, LOG | 243 | 2026-11-02 |
| 27.131.106.133 Australia · Micron21 Datacentre Pty Ltd | exposed-secret exploit coinminer malware | SAMPLE, TXT, GZ, PY | 29 | 2026-11-02 |
| 64.118.151.226 Hong Kong · Eons Data Communications Limited | exploit exposed-secret malware mozi | SH, LOG, MD, JSON | 147 | 2026-11-02 |
| 38.60.157.55 United States · Kaopu Cloud HK Limited | exposed-secret exploit malware webshell | SH, C, ELF, TXT | 42 | 2026-11-02 |
| 111.68.4.13 Hong Kong · Netsec Limited | exploit exposed-secret malware webshell | SH, PY, ELF, BIN | 58 | 2026-11-02 |
| 181.41.194.136 The Netherlands · OVH SAS | malware mozi c2 exposed-secret | HTA, CMD, BAT, JS | 23 | 2026-11-02 |
| 18.136.195.202 Singapore · Amazon.com, Inc. | exploit exposed-secret malware mozi | PY, LOG, TXT, SH | 213 | 2026-11-02 |
| 31.56.228.136 France · CGI GLOBAL LIMITED | exploit exposed-secret webshell c2 | PY, GDB, MD, PHP | 386 | 2026-11-02 |
| 107.175.85.215 United States · HostPapa | exploit exposed-secret malware mozi | TXT, BIN, BODY, PY | 28 | 2026-11-02 |
| 101.36.112.205 Hong Kong · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | exposed-secret exploit malware webshell | PY, PHP, JS, SH | 161 | 2026-11-02 |
| 43.133.242.81 South Korea · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware mozi | SH, PY, LOG, TXT | 441 | 2026-11-02 |
| 103.106.191.40 Hong Kong · cognetcloud INC | malware elf-binary | ELF | 1 | 2026-11-02 |
| 212.103.62.205 United States · CNSERVERS LLC | exposed-secret malware exploit mozi | SH, PY, ELF, JSON | 387 | 2026-11-02 |
| 38.76.208.29 United States · cognetcloud INC | exploit malware exposed-secret c2 | LOG, PY, JAVA, MACHO | 78 | 2026-11-02 |
| 39.106.13.235 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit malware mozi exposed-secret | PY, LOG, OUT, JAR | 21 | 2026-11-02 |
| 66.42.33.224 Japan · The Constant Company, LLC | malware exposed-secret mozi sliver | JSON, PS1, PY, LOG | 21 | 2026-11-02 |
| 74.161.43.26 Switzerland · Microsoft Corporation | exposed-secret malware exploit mozi | C, PS1, ELF, PY | 18 | 2026-11-02 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free