huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 194.156.117.170 Russia · Beget LLC | c2 | HTML | 1 | 2026-09-30 |
| 45.12.18.80 Russia · Beget LLC | exposed-secret exploit tunnel | PY, TXT, ENV, GITIGN | 19 | 2026-09-30 |
| 122.166.178.204 India · Bharti Airtel Limited | exposed-secret exploit malware sliver | PY, TXT, ENV, GITIGN | 77 | 2026-09-30 |
| 193.168.46.184 Russia · Beget LLC | files | LOG | 2 | 2026-09-30 |
| 193.168.48.134 Russia · Beget LLC | malware pe-binary | PE | 1 | 2026-09-30 |
| 203.195.205.151 China · Shenzhen Tencent Computer Systems Company Limited | webshell | C, TXT, ZIP | 3 | 2026-09-30 |
| 51.79.251.75 Canada · OVH SAS | exposed-secret exploit malware tunnel | LOG, PY, TXT, BAK | 34 | 2026-09-30 |
| 84.46.247.54 France · Contabo GmbH | exposed-secret malware sliver | LOG | 1 | 2026-09-30 |
| 170.106.98.130 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit webshell tunnel | MD, SAMPLE, PY, TXT | 54 | 2026-09-30 |
| 23.94.223.7 United States · HostPapa | exposed-secret tunnel | LOG, YAML | 3 | 2026-09-30 |
| 173.254.242.131 United States · HostPapa | exposed-secret tunnel | YAML | 7 | 2026-09-30 |
| 114.132.70.220 China · Shenzhen Tencent Computer Systems Company Limited | tunnel | SH | 2 | 2026-09-30 |
| 132.226.90.98 United States · Oracle Corporation | exposed-secret tunnel | HTML, MD, YAML | 4 | 2026-09-30 |
| 64.83.20.32 United States · NetLab Global | exposed-secret tunnel | LOG, CONF | 4 | 2026-09-30 |
| 138.197.72.235 United States · DigitalOcean, LLC | webshell | PY | 1 | 2026-09-30 |
| 152.232.90.185 Canada · B2 Net Solutions Inc. | exposed-secret | HTML, ZIP | 20 | 2026-09-30 |
| 159.75.7.63 China · Shenzhen Tencent Computer Systems Company Limited | files | PS1, BIN, ZIP | 9 | 2026-09-30 |
| 183.177.228.152 Japan · ARTERIA Networks Corporation | exposed-secret | PY | 5 | 2026-09-30 |
| 172.245.219.235 United States · HostPapa | tunnel | TXT | 1 | 2026-09-30 |
| 103.102.46.53 Singapore · Kamatera, Inc. | files | PY | 1 | 2026-09-30 |
| 132.226.85.167 United States · Oracle Corporation | exposed-secret tunnel | CONF, YAML | 2 | 2026-09-30 |
| 20.45.43.57 United States · Microsoft Corporation | exploit | HTML | 1 | 2026-09-30 |
| 197.161.192.21 Egypt · LINKdotNET AS number | files | BAT, LOG, PY | 3 | 2026-09-30 |
| 67.205.163.197 United States · DigitalOcean, LLC | files | BAK, PY | 2 | 2026-09-30 |
| 154.12.56.159 United States · Zhihua Lu | exposed-secret | YAML | 1 | 2026-09-30 |
| 172.245.136.132 United States · HostPapa | exposed-secret exploit tunnel | LOG, JSON, ENV, JSONL | 23 | 2026-09-30 |
| 46.250.248.12 Japan · Contabo Asia Private Limited | files | ZIP, BBMODE | 25 | 2026-09-30 |
| 124.220.81.105 China · Shenzhen Tencent Computer Systems Company Limited | exploit | PY, JSON | 3 | 2026-09-30 |
| 70.39.196.94 United States · GTT Communications Inc. | exposed-secret | YAML | 1 | 2026-09-30 |
| 46.225.118.210 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, JSON, LOG, BAK | 45 | 2026-09-30 |
| 129.204.7.230 China · Shenzhen Tencent Computer Systems Company Limited | malware macho-binary | MACHO | 1 | 2026-09-30 |
| 146.56.201.102 China · Shenzhen Tencent Computer Systems Company Limited | files | GZ | 1 | 2026-09-30 |
| 124.221.101.41 China · Shenzhen Tencent Computer Systems Company Limited | malware mozi | JS, PY | 25 | 2026-09-30 |
| 101.35.210.248 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware mozi tunnel | JS, JSON, HTML, PL | 22 | 2026-09-30 |
| 95.169.19.113 Canada · IT7 Networks Inc | files | LOG | 1 | 2026-09-30 |
| 43.153.110.155 United States · Shenzhen Tencent Computer Systems Company Limited | files | ZIP | 1 | 2026-09-30 |
| 102.134.50.57 South Korea · VMISS Inc. | exposed-secret | TXT | 1 | 2026-09-30 |
| 45.92.216.240 Germany · Michael Sebastian Schinzel trading as IP-Projects GmbH & Co. KG | files | ZIP | 1 | 2026-09-30 |
| 43.157.202.180 Indonesia · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret | HTML | 1 | 2026-09-30 |
| 104.207.79.65 United States · Namecheap, Inc. | files | PNG | 1 | 2026-09-30 |
| 91.108.103.182 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-09-30 |
| 195.200.9.96 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 91.108.103.87 United Kingdom · Hostinger International Limited | files | COM | 2 | 2026-09-30 |
| 91.108.103.150 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-09-30 |
| 89.116.109.95 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-09-30 |
| 91.108.103.1 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 89.116.109.179 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 89.116.109.241 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 91.108.103.35 United Kingdom · Hostinger International Limited | files | COM, TXT | 2 | 2026-09-30 |
| 185.77.97.227 United States · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free