huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,484
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 193.239.179.110 Luxembourg · G-Core Labs S.A. | files | COM | 1 | 2026-11-04 |
| 108.165.95.10 United States · Nodestop LLC | malware elf-binary | ELF, SH | 8 | 2026-11-04 |
| 64.118.151.186 Hong Kong · Eons Data Communications Limited | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 172.67.199.90 United States · Cloudflare, Inc. | files | FUN | 1 | 2026-11-04 |
| 104.21.14.43 United States · Cloudflare, Inc. | files | FUN | 1 | 2026-11-04 |
| 104.21.21.160 United States · Cloudflare, Inc. | files | FUN | 1 | 2026-11-04 |
| 172.67.157.184 United States · Cloudflare, Inc. | files | FUN | 1 | 2026-11-04 |
| 172.105.156.56 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.61 United States · Akamai Technologies, Inc. | files | JSON | 1 | 2026-11-04 |
| 172.105.156.217 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-11-04 |
| 45.90.148.146 The Netherlands · SERVERNET INTERNET LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 172.105.156.82 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-11-04 |
| 172.105.156.109 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.203 United States · Akamai Technologies, Inc. | files | JSON | 1 | 2026-11-04 |
| 172.105.156.161 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.183 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 2 | 2026-11-04 |
| 172.105.156.156 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 3 | 2026-11-04 |
| 172.105.156.160 United States · Akamai Technologies, Inc. | exposed-secret exploit | TXT | 3 | 2026-11-04 |
| 87.199.201.89 The Netherlands · SERVERS TECH FZCO | exposed-secret | TXT | 1 | 2026-11-04 |
| 100.61.104.91 United States · Amazon.com, Inc. | files | JSON | 1 | 2026-11-03 |
| 100.51.162.79 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-03 |
| 175.41.25.250 Hong Kong · N963 | exposed-secret | TXT, BIN, ENV, JSON | 9 | 2026-11-03 |
| 64.20.61.134 United States · Interserver, Inc | exposed-secret malware mozi tunnel | JSON, JS, TXT, HTML | 38 | 2026-11-03 |
| 38.76.202.246 United States · cognetcloud INC | exposed-secret forced-loot | TXT | 1 | 2026-11-03 |
| 52.128.244.66 Hong Kong · Netsec Limited | exposed-secret | TXT | 1 | 2026-11-03 |
| 156.239.13.148 Hong Kong · CORENET CLOUD SDN. BHD. | exposed-secret | TXT | 1 | 2026-11-03 |
| 104.223.41.172 United States · HostPapa | exposed-secret | TXT | 2 | 2026-11-03 |
| 103.154.62.40 Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | exposed-secret exploit | TXT | 2 | 2026-11-03 |
| 111.193.236.119 China · China Unicom Beijing Province Network | exposed-secret | TXT | 1 | 2026-11-03 |
| 27.102.137.57 South Korea · DAOU TECHNOLOGY | c2 exploit exposed-secret | TXT | 2 | 2026-11-03 |
| 5.77.32.243 United Kingdom · IOMART CLOUD SERVICES LIMITED | files | COM, INFO | 5 | 2026-11-03 |
| 20.118.138.153 United States · Microsoft Corporation | files | TXT | 1 | 2026-11-03 |
| 172.67.83.132 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-11-03 |
| 104.25.234.53 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-11-03 |
| 152.89.170.207 Italy · Cinzia Tocci trading as Lumanex Srl | files | TXT | 1 | 2026-11-03 |
| 64.83.24.183 United States · NetLab Global | files | TXT | 1 | 2026-11-03 |
| 194.246.41.248 Japan · NETINNOVATIONLLC-AS-AP | files | TXT | 1 | 2026-11-03 |
| 178.107.169.115 United States · CNSERVERS LLC | files | TXT | 1 | 2026-11-03 |
| 192.255.249.243 United States · HostPapa | files | TXT | 1 | 2026-11-03 |
| 39.99.242.80 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | PY, TXT, SH, MD | 128 | 2026-11-03 |
| 39.96.205.8 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit webshell malware | GO, LOG, PY, TXT | 576 | 2026-11-03 |
| 159.223.110.159 United States · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-11-03 |
| 198.44.116.69 United States · HostPapa | exposed-secret malware mozi exploit | PY, SH, JSON, LOG | 733 | 2026-11-03 |
| 47.112.221.124 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware exploit webshell | PY, JSON, LOG, BAT | 141 | 2026-11-03 |
| 198.23.145.14 United States · HostPapa | exposed-secret exploit c2 webshell | SH, PY, SQL, MD | 792 | 2026-11-03 |
| 39.100.86.251 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware tunnel | SH, PY, XML, JAR | 107 | 2026-11-03 |
| 198.46.252.28 United States · HostPapa | exposed-secret exploit malware mozi | GO, TXT, SH, GZ | 89 | 2026-11-03 |
| 107.172.172.195 United States · HostPapa | exposed-secret | TXT | 1 | 2026-11-03 |
| 8.138.0.225 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | c2 exposed-secret | HTML | 7 | 2026-11-03 |
| 45.225.135.92 Panama · RACK SPHERE HOSTING S.A. | malware exposed-secret exploit meterpreter | PE, TXT, BIN, JAR | 7 | 2026-11-03 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free