huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,480
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 37.140.193.79 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 69.165.74.182 United States · VpsQuan L.L.C. | exposed-secret | TXT | 1 | 2026-11-05 |
| 89.108.69.204 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 194.58.127.32 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 37.140.193.250 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.94 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 43.164.138.101 South Korea · Shenzhen Tencent Computer Systems Company Limited | malware coinminer elf-binary | SH, GZ, ELF, CONF | 159 | 2026-11-05 |
| 212.116.240.46 Kazakhstan · Megahost Kazakhstan TOO | tunnel | SH, PAC, TXT | 4 | 2026-11-05 |
| 89.108.69.159 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.77 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 161.33.148.80 Japan · Oracle Corporation | exposed-secret malware mozi exploit | HDR, SH, TGZ, TXT | 294 | 2026-11-05 |
| 82.115.43.249 Kazakhstan · PS Internet Company LLP | tunnel | SH, PAC, TXT | 4 | 2026-11-05 |
| 193.124.58.29 Czechia · SmartApe OU | exposed-secret exploit | MOBILE, SH | 7 | 2026-11-05 |
| 31.31.194.141 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 43.161.243.73 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exploit malware exposed-secret mozi | LOG, PY, MACHO, SH | 417 | 2026-11-05 |
| 217.142.239.53 Japan · Oracle Corporation | exposed-secret exploit malware tunnel | BAT, CMD, PE, SH | 5 | 2026-11-05 |
| 43.156.67.29 Singapore · Shenzhen Tencent Computer Systems Company Limited | tunnel | 1 | 2026-11-05 | |
| 143.246.202.252 United States | exposed-secret exploit c2 malware | PS1, PY, HTML, PE | 8 | 2026-11-05 |
| 154.219.107.7 Hong Kong · cognetcloud INC | exposed-secret | TXT | 1 | 2026-11-05 |
| 64.93.12.85 United States · GTT Communications Inc. | c2 coinminer exposed-secret malware | LOG, TXT | 2 | 2026-11-05 |
| 95.9.233.235 Turkey · Turk Telekomunikasyon Anonim Sirketi | exposed-secret | TXT | 1 | 2026-11-05 |
| 90.160.135.217 Spain · Orange Espagne SA | files | ENV | 1 | 2026-11-05 |
| 85.133.132.47 Iran · Sepanta Communication Development Co. Ltd | exposed-secret | TXT | 1 | 2026-11-05 |
| 81.234.88.7 Sweden · Telia Company AB | exposed-secret | TXT | 2 | 2026-11-05 |
| 79.177.163.89 Israel · "Bezeq"- THE ISRAEL TELECOMMUNICATION CORP. LTD. | files | GZ, READY, TIMEST | 7 | 2026-11-05 |
| 78.135.111.5 Turkey · Yigit Hosting Bilisim E-Ticaret Gida Sanayi Ticaret Limited Sirketi | exposed-secret | TXT | 1 | 2026-11-05 |
| 67.83.44.203 United States · Cablevision Systems Corp. | files | BIN | 1 | 2026-11-05 |
| 66.9.5.73 Israel · Palestine Telecommunications Company (PALTEL) | files | BIN | 1 | 2026-11-05 |
| 62.60.232.149 Hong Kong · GLOBAL CONNECTIVITY SOLUTIONS LLP | exposed-secret | TXT | 1 | 2026-11-05 |
| 66.33.22.251 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 66.33.22.246 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 66.33.22.238 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 66.33.22.226 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 61.133.118.6 China · CHINA UNICOM China169 Backbone | files | BIN, ENV, JSON, PHP | 5 | 2026-11-05 |
| 64.90.7.157 Hong Kong · NetLab Global | exposed-secret | TXT, BIN, PHP | 4 | 2026-11-05 |
| 60.2.114.98 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-11-05 |
| 47.120.48.162 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-05 |
| 45.239.77.14 Mexico · Tu Casa Inalambrica de Mexico SA de CV | files | BIN | 1 | 2026-11-05 |
| 45.65.233.163 Colombia · COLOMBIA MAS TV S.A.S | files | BIN | 1 | 2026-11-05 |
| 45.140.192.10 United Kingdom · QNAX LTDA | files | JSON | 1 | 2026-11-05 |
| 43.250.252.68 India · Precious netcom pvt ltd | files | BIN | 1 | 2026-11-05 |
| 41.222.19.245 ZM · AfriConnect Zambia Ltd | files | BIN | 1 | 2026-11-05 |
| 41.153.30.124 Egypt · ETISALAT MISR | exposed-secret | JSON | 1 | 2026-11-05 |
| 41.133.143.229 South Africa · Dimension Data | exposed-secret | JSON | 1 | 2026-11-05 |
| 221.162.46.22 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-11-05 |
| 218.16.60.20 China · Chinanet | files | ENV, JSON, PHP | 3 | 2026-11-05 |
| 221.162.218.85 South Korea · Korea Telecom | exposed-secret | ENV | 1 | 2026-11-05 |
| 219.139.83.165 China · Chinanet | exposed-secret | PHP, TXT | 2 | 2026-11-05 |
| 212.192.41.80 Russia · LLC Digital Dialogue-Nets | exposed-secret | JSON, PHP | 2 | 2026-11-05 |
| 208.77.246.90 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free