huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,971
hosts
106,553
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 89.116.109.118 United Kingdom · Hostinger International Limited | files | IN | 1 | 2026-11-02 |
| 195.200.9.54 United Kingdom · Hostinger International Limited | files | IN | 1 | 2026-11-02 |
| 195.200.9.89 United Kingdom · Hostinger International Limited | files | ORG | 1 | 2026-11-02 |
| 89.116.109.60 United Kingdom · Hostinger International Limited | files | ORG | 1 | 2026-11-02 |
| 2.58.56.216 The Netherlands · 1337 Services GmbH | files | DEV | 1 | 2026-11-02 |
| 194.233.67.247 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware mozi | TXT, PHP, HTML, PY | 354 | 2026-11-02 |
| 173.212.244.40 France · Contabo GmbH | exposed-secret exploit webshell c2 | PY, HTML, MD, PHP | 523 | 2026-11-02 |
| 103.179.27.226 Indonesia · PT Primadona Media Digitalindo | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 103.28.115.213 Indonesia · Lintas Data Prima, PT | files | BIN | 1 | 2026-11-02 |
| 203.194.115.12 Indonesia · Rumahweb | exposed-secret exploit malware webshell | PY, LOG, PHP, JAR | 360 | 2026-11-02 |
| 83.172.138.182 Germany · M247 Europe SRL | exposed-secret malware mozi exploit | PY, TXT, APK, HTML | 301 | 2026-11-02 |
| 147.93.159.0 Singapore · Contabo Asia Private Limited | exposed-secret exploit webshell malware | PY, PHP, SH, C | 86 | 2026-11-02 |
| 169.58.233.110 United States · TerraTransit AG | exploit exposed-secret malware mozi | LOG, JSON, MD, SH | 125 | 2026-11-02 |
| 91.245.255.72 Hong Kong · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-11-02 |
| 8.215.192.157 Singapore · Alibaba (US) Technology Co., Ltd. | exploit exposed-secret tunnel | SAMPLE, JSON, TXT, MJS | 37 | 2026-11-02 |
| 8.221.120.13 United States · Alibaba (US) Technology Co., Ltd. | exploit | GZ, TXT | 3 | 2026-11-02 |
| 157.230.117.237 Germany · DigitalOcean, LLC | files | JSON | 1 | 2026-11-02 |
| 157.230.117.206 Germany · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-02 |
| 104.168.251.17 United States · HostPapa | exposed-secret | JSON | 1 | 2026-11-02 |
| 100.50.225.95 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-02 |
| 100.61.243.172 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-02 |
| 104.131.161.161 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 2.59.133.151 Germany · dataforest GmbH | exposed-secret forced-loot | TXT | 3 | 2026-11-02 |
| 104.25.233.53 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-11-02 |
| 149.154.166.110 United Kingdom · Telegram Messenger Inc | files | TXT | 2 | 2026-11-02 |
| 43.165.173.190 Japan · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 45.79.239.204 Australia · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-02 |
| 45.148.10.183 AD · TECHOFF SRV LIMITED | malware exploit mozi webshell | PE, CMD, PS1, VBS | 18 | 2026-11-02 |
| 178.95.25.69 Ukraine · The Constant Company, LLC | exposed-secret forced-loot | TXT | 1 | 2026-11-02 |
| 18.209.204.143 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-11-02 |
| 172.67.174.66 United States · Cloudflare, Inc. | files | WEBSIT | 1 | 2026-11-02 |
| 45.79.14.38 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-02 |
| 45.79.72.160 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-02 |
| 45.55.101.18 United States · DigitalOcean, LLC | exposed-secret exploit | TXT, ENV, JSON | 8 | 2026-11-02 |
| 176.53.159.37 Turkey · ZORNTECH WEB SOLUTIONS | malware macho-binary | MACHO | 3 | 2026-11-02 |
| 92.246.129.98 Brazil · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | JS, JSON, PY, SH | 347 | 2026-11-02 |
| 52.41.155.253 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-02 |
| 54.90.29.177 United States · Amazon.com, Inc. | files | JSON | 1 | 2026-11-02 |
| 78.111.90.130 Canada · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | TXT, SH, JSON, LOG | 243 | 2026-11-02 |
| 45.133.18.50 The Netherlands · ITGLOBAL.COM NL B.V. | exposed-secret exploit mirror tunnel | CMD, JSON, LOG, MD | 63 | 2026-11-02 |
| 45.133.17.74 The Netherlands · ITGLOBAL.COM NL B.V. | exposed-secret | PY, LOG | 4 | 2026-11-02 |
| 31.44.6.243 United States · ITGLOBAL.COM NL B.V. | exposed-secret | TXT | 1 | 2026-11-02 |
| 27.131.106.133 Australia · Micron21 Datacentre Pty Ltd | exposed-secret exploit coinminer malware | SAMPLE, TXT, GZ, PY | 29 | 2026-11-02 |
| 216.203.20.196 United States · BL Networks | exposed-secret | TXT | 1 | 2026-11-02 |
| 74.91.24.29 United States · Nocix, LLC | exploit exposed-secret tunnel | PY, SH, ZIP, CSV | 25 | 2026-11-02 |
| 64.118.151.226 Hong Kong · Eons Data Communications Limited | exploit exposed-secret malware mozi | SH, LOG, MD, JSON | 147 | 2026-11-02 |
| 38.60.157.55 United States · Kaopu Cloud HK Limited | exposed-secret exploit malware webshell | SH, C, ELF, TXT | 42 | 2026-11-02 |
| 111.68.4.13 Hong Kong · Netsec Limited | exploit exposed-secret malware webshell | SH, PY, ELF, BIN | 58 | 2026-11-02 |
| 161.202.178.206 United States · IBM Cloud | exposed-secret | TXT | 1 | 2026-11-02 |
| 103.107.181.47 Vietnam · VNPT Corp | exposed-secret forced-loot | TXT | 1 | 2026-11-02 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free