huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,971
hosts
106,553
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.233.217.69 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.66 United States · PEG TECH INC | exposed-secret exploit | TXT | 2 | 2026-11-03 |
| 151.101.61.194 United States · Fastly, Inc. | ioc-match forced-loot | TXT | 1 | 2026-11-03 |
| 198.251.84.141 United States · FranTech Solutions | files | CFD | 1 | 2026-11-03 |
| 198.251.89.82 United States · FranTech Solutions | files | CLICK | 1 | 2026-11-03 |
| 198.251.84.129 United States · FranTech Solutions | files | CLICK | 1 | 2026-11-03 |
| 193.239.179.15 Luxembourg · G-Core Labs S.A. | files | COM | 1 | 2026-11-03 |
| 192.178.223.132 United States · Google LLC | files | COM | 2 | 2026-11-03 |
| 20.118.138.133 United States · Microsoft Corporation | files | TXT | 1 | 2026-11-03 |
| 192.210.228.111 United States · HostPapa | malware exposed-secret pe-binary elf-binary | GZ, PE, BAT, ELF | 65 | 2026-11-03 |
| 69.12.64.195 United States · HostPapa | exposed-secret malware mozi webshell | PHP, JS, ASP, LOG | 112 | 2026-11-03 |
| 192.227.241.226 United States · HostPapa | exposed-secret exploit malware mozi | PY, SH, LOG, GZ | 538 | 2026-11-03 |
| 23.95.253.12 United States · HostPapa | exploit exposed-secret tunnel | LOG, PY, SH, GZ | 82 | 2026-11-03 |
| 198.44.46.122 United States · HostPapa | exposed-secret exploit malware elf-binary | ELF, TXT, PY, JAR | 48 | 2026-11-03 |
| 107.174.81.24 United States · HostPapa | tunnel | TOML, SH | 7 | 2026-11-03 |
| 96.44.135.166 United States · HostPapa | tunnel | PS1 | 1 | 2026-11-03 |
| 199.232.57.194 United States · Fastly, Inc. | forced-loot | TXT | 1 | 2026-11-03 |
| 45.194.90.57 Seychelles · CtrlS | malware elf-binary | ELF | 1 | 2026-11-03 |
| 54.167.227.2 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-11-03 |
| 141.145.144.175 United Arab Emirates · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 11 | 2026-11-03 |
| 210.16.120.212 Singapore · HostUS | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 45.59.101.178 United States · DA International Group Ltd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 198.44.87.45 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 198.46.146.75 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 96.44.165.185 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 64.44.30.11 United States · Nexeon Technologies, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 198.23.188.143 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 108.165.120.215 United States · Snaju Development | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 192.227.229.27 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 168.235.91.127 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 23.95.132.196 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 222.128.104.197 China · China Unicom Beijing Province Network | exposed-secret | TXT | 1 | 2026-11-03 |
| 101.96.195.29 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-11-03 |
| 185.235.138.43 Belgium · HZ Hosting Ltd | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 168.235.125.167 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 34.97.104.133 Japan · Google LLC | files | COM | 3 | 2026-11-03 |
| 195.63.132.135 The Netherlands · SERVERS TECH FZCO | exploit | COM | 1 | 2026-11-03 |
| 20.209.1.107 United States · Microsoft Corporation | ioc-match webshell | BAT | 1 | 2026-11-03 |
| 172.174.116.94 United States · Microsoft Corporation | ioc-match | BIN | 2 | 2026-11-03 |
| 45.32.211.99 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-11-03 |
| 159.203.225.195 United States · DigitalOcean, LLC | malware exploit exposed-secret mozi | PE, EXE, BAT, ZIP | 147 | 2026-11-03 |
| 152.42.193.28 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 188.166.206.102 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 138.68.157.212 United Kingdom · DigitalOcean, LLC | exploit | JSON | 1 | 2026-11-03 |
| 101.126.4.50 China · Beijing Volcano Engine Technology Co., Ltd. | exploit webshell exposed-secret malware | LOG, SH, PY, JSON | 175 | 2026-11-03 |
| 89.31.121.37 Serbia · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-11-03 |
| 168.144.85.125 India · DigitalOcean, LLC | exposed-secret exploit malware mozi | SH, TXT, PY, DEB | 500 | 2026-11-03 |
| 1.34.32.16 Taiwan · Chunghwa Telecom Co., Ltd. | files | JSON | 1 | 2026-11-03 |
| 159.223.243.246 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-03 |
| 185.228.168.10 United States · Daniel Cid | exposed-secret malware mozi | TXT | 1 | 2026-11-03 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free