huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,484
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 202.95.14.60 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 156.251.11.204 Hong Kong · Tcloudnet | exposed-secret | TXT | 1 | 2026-11-04 |
| 130.94.31.86 South Korea · NTT America, Inc. | malware mozi exposed-secret tunnel | TXT, PY, ENV, JSON | 11 | 2026-11-04 |
| 156.251.11.32 Hong Kong · Tcloudnet | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-04 |
| 154.255.225.214 DZ · Telecom Algeria | exploit malware elf-binary | ELF, LRC | 2 | 2026-11-04 |
| 5.175.192.232 The Netherlands · Simon Mariacher | malware elf-binary | ELF | 9 | 2026-11-04 |
| 16.15.236.149 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-04 |
| 182.16.41.42 Hong Kong · Netsec Limited | tunnel | CC | 1 | 2026-11-04 |
| 16.15.215.34 United States · Amazon.com, Inc. | files | HTML | 2 | 2026-11-04 |
| 16.15.207.248 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-04 |
| 169.58.23.32 United States · TerraTransit AG | files | ZIP | 2 | 2026-11-04 |
| 151.243.18.12 United States · DEDIK SERVICES LIMITED | files | DZ | 1 | 2026-11-04 |
| 104.21.67.152 United States · Cloudflare, Inc. | c2 exploit | COM | 1 | 2026-11-04 |
| 27.124.6.55 Hong Kong · CTG Server Limited | files | BIN | 1 | 2026-11-04 |
| 104.21.5.70 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-04 |
| 168.138.216.227 Japan · Oracle Corporation | files | CX | 1 | 2026-11-04 |
| 172.67.133.38 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-04 |
| 154.21.196.62 United States · NetLab Global | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-11-04 |
| 45.56.91.123 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-04 |
| 139.99.56.79 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-11-04 |
| 139.84.162.69 India · The Constant Company, LLC | malware elf-binary | ELF | 1 | 2026-11-04 |
| 202.182.101.198 Japan · The Constant Company, LLC | exposed-secret malware elf-binary | ELF, TXT | 2 | 2026-11-04 |
| 45.82.13.6 The Netherlands · GLOBAL CONNECTIVITY SOLUTIONS LLP | files | BIN | 1 | 2026-11-04 |
| 154.205.9.109 Seychelles · HK AISI CLOUD COMPUTING LIMITED | files | PHP | 1 | 2026-11-04 |
| 147.93.159.70 Singapore · Contabo Asia Private Limited | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 147.93.159.10 Singapore · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-11-04 |
| 16.26.208.68 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 118.145.144.62 China · Beijing Volcano Engine Technology Co., Ltd. | files | PEM | 1 | 2026-11-04 |
| 207.56.221.47 United States · NTT America, Inc. | exposed-secret malware mozi exploit | PY, LOG, SH, TXT | 625 | 2026-11-04 |
| 195.200.9.224 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-04 |
| 89.116.109.79 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-04 |
| 171.239.167.136 Vietnam · Viettel Group | files | JSON | 1 | 2026-11-04 |
| 195.200.9.248 United Kingdom · Hostinger International Limited | files | COM, SHOP | 2 | 2026-11-04 |
| 185.77.97.242 United States · Hostinger International Limited | files | SHOP | 1 | 2026-11-04 |
| 38.54.88.171 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, SH, LOG, TXT | 200 | 2026-11-04 |
| 151.158.1.156 Switzerland · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-04 |
| 38.60.227.210 United States · Kaopu Cloud HK Limited | exposed-secret malware mozi c2 | PY, TXT, SH, PS1 | 1,000 | 2026-11-04 |
| 13.126.183.60 India · Amazon.com, Inc. | exposed-secret | ENV, TXT | 5 | 2026-11-04 |
| 221.6.28.222 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-11-04 |
| 158.247.218.226 South Korea · The Constant Company, LLC | exposed-secret malware mozi exploit | PY, JS, LOG, TXT | 388 | 2026-11-04 |
| 64.177.47.135 United States | malware exposed-secret exploit c2 | PE, PY, MD, TXT | 97 | 2026-11-04 |
| 172.104.173.165 Singapore · Akamai Technologies, Inc. | exposed-secret exploit webshell malware | PY, SH, ELF, LOG | 85 | 2026-11-04 |
| 139.162.50.39 Singapore · Akamai Technologies, Inc. | exposed-secret malware tunnel elf-binary | LOG, SH, ELF | 12 | 2026-11-04 |
| 95.179.195.136 United Kingdom · The Constant Company, LLC | files | GZ | 1 | 2026-11-04 |
| 62.212.70.235 The Netherlands · LeaseWeb Netherlands B.V. | exposed-secret webshell | TXT | 2 | 2026-11-04 |
| 177.3.43.43 United States · Hong Kong Communications International Co., Limited | malware c2 exposed-secret webshell | PE, PY, PHP, SH | 24 | 2026-11-04 |
| 91.108.103.88 United Kingdom · Hostinger International Limited | files | COM, SHOP | 2 | 2026-11-04 |
| 195.200.9.155 United Kingdom · Hostinger International Limited | files | CYOU, SHOP | 2 | 2026-11-04 |
| 172.67.180.76 United States · Cloudflare, Inc. | files | INK | 1 | 2026-11-04 |
| 104.21.43.145 United States · Cloudflare, Inc. | files | INK | 1 | 2026-11-04 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free