huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,971
hosts
106,553
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 185.228.168.168 United States · Daniel Cid | exposed-secret malware mozi | ENV, TXT | 2 | 2026-11-03 |
| 107.151.238.8 United States · Zenlayer Inc | exposed-secret forced-loot | TXT | 1 | 2026-11-03 |
| 45.55.108.68 United States · DigitalOcean, LLC | exposed-secret forced-loot | TXT | 1 | 2026-11-03 |
| 185.177.73.87 Cyprus · MVPS LTD | exploit | JSON | 1 | 2026-11-03 |
| 104.168.111.208 United States · HostPapa | malware mozi exploit exposed-secret | PY, LOG, SH, PYC | 352 | 2026-11-03 |
| 178.128.89.39 Singapore · DigitalOcean, LLC | exploit exposed-secret c2 tunnel | HTML, LOG, ZIP, JS | 34 | 2026-11-03 |
| 185.28.119.174 United Kingdom · BlueVPS OU | exposed-secret | TXT | 1 | 2026-11-03 |
| 185.28.119.106 United Kingdom · BlueVPS OU | exposed-secret exploit c2 malware | LOG, JSON, MD, GITIGN | 398 | 2026-11-03 |
| 47.74.9.184 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-11-03 |
| 185.136.207.238 Azerbaijan · A2Z Technologies CJSC | exposed-secret | TXT | 1 | 2026-11-03 |
| 23.239.8.108 United States · Akamai Technologies, Inc. | files | TXT | 1 | 2026-11-03 |
| 172.105.156.153 United States · Akamai Technologies, Inc. | exposed-secret exploit malware mozi | TXT, JSON, SH, MD | 163 | 2026-11-03 |
| 198.251.85.166 United States · RouterHosting LLC | exposed-secret | TXT | 2 | 2026-11-03 |
| 102.221.114.47 Nigeria · JAIZ BANK PLC | files | JSON | 1 | 2026-11-03 |
| 20.86.62.190 The Netherlands · Microsoft Corporation | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-11-03 |
| 45.79.0.122 United States · Akamai Technologies, Inc. | exposed-secret | ENV | 1 | 2026-11-03 |
| 94.130.22.247 Germany · Hetzner Online GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-11-03 |
| 94.130.22.221 Germany · Hetzner Online GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-11-03 |
| 94.130.22.230 Germany · Hetzner Online GmbH | exposed-secret | TXT, ENV, PHP | 5 | 2026-11-03 |
| 94.130.22.238 Germany · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-11-03 |
| 94.130.22.189 Germany · Hetzner Online GmbH | exploit exposed-secret | TXT, JSON, PHP, ENV | 61 | 2026-11-03 |
| 162.4.73.14 India | files | IN | 1 | 2026-11-02 |
| 89.252.130.60 Turkey · Netinternet Bilisim Teknolojileri AS | exposed-secret | HTML | 1 | 2026-11-02 |
| 103.112.98.105 Hong Kong · AROSSCLOUD INC. | exposed-secret ioc-match | TOP | 4 | 2026-11-02 |
| 162.0.229.120 United States · Namecheap, Inc. | files | ONLINE | 1 | 2026-11-02 |
| 65.108.232.153 Finland · Hetzner Online GmbH | files | ONLINE | 1 | 2026-11-02 |
| 54.168.18.248 Japan · Amazon.com, Inc. | ioc-match | COM | 5 | 2026-11-02 |
| 172.67.183.15 United States · Cloudflare, Inc. | files | CN | 1 | 2026-11-02 |
| 104.21.77.70 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-02 |
| 104.21.36.14 United States · Cloudflare, Inc. | files | CN | 1 | 2026-11-02 |
| 43.175.165.187 The Netherlands · ACEVILLE PTE.LTD. | tunnel | APK | 1 | 2026-11-02 |
| 192.166.82.213 United Kingdom · CloudBlast LLC | exposed-secret | PAGE | 1 | 2026-11-02 |
| 104.21.52.89 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 104.21.71.32 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 172.67.197.73 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 172.67.142.199 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 139.84.164.168 India · The Constant Company, LLC | files | COM | 1 | 2026-11-02 |
| 65.20.80.148 India · The Constant Company, LLC | files | COM | 1 | 2026-11-02 |
| 139.84.158.253 India · The Constant Company, LLC | files | COM | 1 | 2026-11-02 |
| 104.21.70.103 United States · Cloudflare, Inc. | exposed-secret | ORG | 1 | 2026-11-02 |
| 172.67.222.217 United States · Cloudflare, Inc. | exposed-secret | ORG | 1 | 2026-11-02 |
| 89.116.109.246 United Kingdom · Hostinger International Limited | files | IN | 1 | 2026-11-02 |
| 91.108.103.23 United Kingdom · Hostinger International Limited | files | IN | 1 | 2026-11-02 |
| 195.200.9.177 United Kingdom · Hostinger International Limited | files | IN | 1 | 2026-11-02 |
| 172.67.212.107 United States · Cloudflare, Inc. | files | NET | 1 | 2026-11-02 |
| 91.108.103.226 United Kingdom · Hostinger International Limited | files | IN | 1 | 2026-11-02 |
| 104.21.37.189 United States · Cloudflare, Inc. | files | NET | 1 | 2026-11-02 |
| 45.199.139.25 India · DIGITAL SNAP | files | LIVE | 1 | 2026-11-02 |
| 172.67.200.92 United States · Cloudflare, Inc. | files | COM | 2 | 2026-11-02 |
| 104.21.21.213 United States · Cloudflare, Inc. | files | COM | 2 | 2026-11-02 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free