huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,971
hosts
106,553
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 36.255.97.201 Philippines · Ghosty Networks LLC | exposed-secret | TXT | 1 | 2026-11-02 |
| 119.29.35.143 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret forced-loot | TXT | 1 | 2026-11-02 |
| 204.194.51.187 United States · Turing Group Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 183.136.206.215 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret exploit | SH, MD, PY, ENVRC | 42 | 2026-11-02 |
| 74.91.24.28 United States · Nocix, LLC | exploit exposed-secret tunnel | PY, SH, ZIP, CSV | 25 | 2026-11-02 |
| 217.194.133.89 United States · SonderCloud Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 36.50.135.20 Vietnam · VPSTTT COMPUTER COMPANY LIMITED | files | BIN | 1 | 2026-11-02 |
| 216.185.57.224 United States · Ultahost, Inc. | exposed-secret | TXT | 1 | 2026-11-02 |
| 43.142.4.46 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 161.202.178.198 United States · IBM Cloud | exposed-secret | TXT | 1 | 2026-11-02 |
| 216.185.57.186 United States · Ultahost, Inc. | exposed-secret | TXT | 1 | 2026-11-02 |
| 216.185.57.138 United States · Ultahost, Inc. | exposed-secret | TXT | 1 | 2026-11-02 |
| 155.103.157.43 United States · VH-GLOBAL | exposed-secret | ENV | 1 | 2026-11-02 |
| 39.109.109.111 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | exposed-secret forced-loot | TXT | 1 | 2026-11-02 |
| 23.140.244.52 United States · VoltNet inc | exposed-secret | TXT | 1 | 2026-11-02 |
| 181.41.194.136 The Netherlands · OVH SAS | malware mozi c2 exposed-secret | HTA, CMD, BAT, JS | 23 | 2026-11-02 |
| 142.91.108.198 Japan · Leaseweb Japan K.K. | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 47.116.181.179 China · Hangzhou Alibaba Advertising Co.,Ltd. | files | ZIP | 1 | 2026-11-02 |
| 47.116.141.122 China · Hangzhou Alibaba Advertising Co.,Ltd. | files | JAR | 1 | 2026-11-02 |
| 113.45.249.54 CN · Huawei Public Cloud Service (Huawei Software Technologies Ltd.Co) | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-02 |
| 115.159.204.224 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 45.194.37.204 Seychelles · Antbox Networks Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 154.201.69.178 Seychelles · cognetcloud INC | exposed-secret | TXT | 1 | 2026-11-02 |
| 18.136.195.202 Singapore · Amazon.com, Inc. | exploit exposed-secret malware mozi | PY, LOG, TXT, SH | 213 | 2026-11-02 |
| 115.159.204.155 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 31.56.228.136 France · CGI GLOBAL LIMITED | exploit exposed-secret webshell c2 | PY, GDB, MD, PHP | 386 | 2026-11-02 |
| 8.211.186.68 Singapore · Alibaba (US) Technology Co., Ltd. | files | COM | 1 | 2026-11-02 |
| 103.235.47.181 Hong Kong · Beijing Baidu Netcom Science and Technology Co., Ltd. | files | BIN, ZIP | 2 | 2026-11-02 |
| 154.209.45.62 Seychelles · POWER LINE (HK) CO., LIMITED | tunnel | COM | 1 | 2026-11-02 |
| 104.37.86.15 United States · CloudAccess.net, LLC | exposed-secret | PHP | 1 | 2026-11-02 |
| 104.21.11.185 United States · Cloudflare, Inc. | exploit | JS, BIN, COM | 4 | 2026-11-02 |
| 172.67.150.5 United States · Cloudflare, Inc. | exploit | JS, BIN, COM | 4 | 2026-11-02 |
| 172.67.147.79 United States · Cloudflare, Inc. | files | TOP | 1 | 2026-11-02 |
| 104.21.28.188 United States · Cloudflare, Inc. | files | TOP | 1 | 2026-11-02 |
| 172.67.173.235 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 104.21.30.209 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 89.116.109.146 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-02 |
| 91.108.103.186 United Kingdom · Hostinger International Limited | files | COM, SHOP | 2 | 2026-11-02 |
| 104.21.75.111 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 172.67.222.201 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-02 |
| 94.183.188.14 France · CGI GLOBAL LIMITED | files | DZ | 1 | 2026-11-02 |
| 172.67.201.38 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-02 |
| 45.133.200.14 The Netherlands · IT WEB LTD | files | 1 | 2026-11-02 | |
| 104.21.52.159 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-02 |
| 107.175.85.215 United States · HostPapa | exploit exposed-secret malware mozi | TXT, BIN, BODY, PY | 28 | 2026-11-02 |
| 43.213.75.63 Taiwan · Amazon.com, Inc. | files | DZ | 1 | 2026-11-02 |
| 115.159.204.119 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 172.66.171.73 United States · Cloudflare, Inc. | exploit | TXT | 4 | 2026-11-02 |
| 104.20.29.150 United States · Cloudflare, Inc. | exploit | TXT | 4 | 2026-11-02 |
| 101.36.112.205 Hong Kong · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | exposed-secret exploit malware webshell | PY, PHP, JS, SH | 161 | 2026-11-02 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free