huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
115
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 5.165.233.43 Russia · JSC "ER-Telecom Holding" | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 46.236.65.27 Sweden · Bredband2 AB | malware mozi elf-binary | 1 | 2026-10-15 | |
| 42.4.97.14 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 46.252.33.253 Albania · Vodafone Albania Sh.A. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 42.235.72.7 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 46.236.65.9 Sweden · Bredband2 AB | malware mozi elf-binary | 1 | 2026-10-15 | |
| 45.139.104.222 United States · 49.3 Networking LLC | exposed-secret | BIN, ENV, JSON, PHP | 5 | 2026-10-15 |
| 42.231.215.119 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 42.228.247.58 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 42.180.33.60 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 221.227.105.162 China · Chinanet | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 222.137.37.123 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 222.137.20.110 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 42.224.174.209 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 42.177.100.35 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 40.223.85.181 United States · 1GSERVERS, LLC | files | BIN, ENV, JSON, PHP | 5 | 2026-10-15 |
| 23.94.252.153 United States · DEDIK SERVICES LIMITED | files | BIN | 1 | 2026-10-15 |
| 38.190.222.108 United States · SonderCloud Limited | files | HTML, JS | 2 | 2026-10-15 |
| 38.55.133.49 United States · Uscloud Inc | exposed-secret | DONE | 1 | 2026-10-15 |
| 219.157.61.33 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 216.129.184.213 United States · Arvig Enterprises Inc. | malware mozi elf-binary | 1 | 2026-10-15 | |
| 222.127.251.169 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 219.155.208.94 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 221.15.14.153 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 31.40.204.4 Turkey · Fiba Cloud Operation Company, LLC | files | HTA | 1 | 2026-10-15 |
| 218.60.183.2 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 221.15.174.1 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 218.74.111.34 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 213.199.41.6 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-15 |
| 212.54.86.171 Denmark · Telenor A/S | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 216.126.86.64 Canada · Frontier Networks | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 177.3.213.149 United States | malware elf-binary | ELF, SH | 14 | 2026-10-15 |
| 183.12.167.180 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 202.71.14.31 The Netherlands · SOLLUTIUM EU Sp z.o.o. | exploit malware pe-binary | PE | 2 | 2026-10-15 |
| 182.121.137.144 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 196.210.57.231 South Africa · Dimension Data | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 15.204.85.94 United States · OVH SAS | malware coinminer elf-binary | ELF | 3 | 2026-10-15 |
| 175.165.84.140 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 185.113.10.26 Germany · Parsun Network Solutions PTY LTD | tunnel | LOG, SH | 4 | 2026-10-15 |
| 157.245.157.248 Singapore · DigitalOcean, LLC | exposed-secret malware mozi tunnel | TXT | 1 | 2026-10-15 |
| 182.127.68.131 China · CHINA UNICOM China169 Backbone | malware elf-binary | ELF | 1 | 2026-10-15 |
| 175.146.1.197 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 175.149.80.109 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 185.177.72.64 France · Bucklog SARL | exposed-secret | ENV | 1 | 2026-10-15 |
| 178.16.52.107 Germany · Omegatech LTD | files | BIN, ENV, JSON, PHP | 5 | 2026-10-15 |
| 171.227.32.90 Vietnam · Viettel Group | files | JSON | 1 | 2026-10-15 |
| 124.92.76.80 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 170.84.134.172 NI · XINWEI INTELCOM.NIC, S.A. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 170.84.133.235 NI · XINWEI INTELCOM.NIC, S.A. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 170.84.132.250 NI · XINWEI INTELCOM.NIC, S.A. | malware mozi elf-binary | A | 1 | 2026-10-15 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free