huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,973
hosts
106,581
files
126
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 94.26.41.70 Bulgaria · "Euro Crypt" EOOD | c2 | TXT | 1 | 2026-10-31 |
| 195.182.16.23 Germany · Amarutu Technology Ltd | exposed-secret | TXT | 1 | 2026-10-31 |
| 204.168.131.234 FI · Hetzner Online GmbH | files | LOG | 1 | 2026-10-31 |
| 68.183.32.185 United Kingdom · DigitalOcean, LLC | exposed-secret exploit tunnel | TXT, ENV, HTML, JS | 7 | 2026-10-31 |
| 139.162.73.71 Japan · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-31 |
| 139.84.140.13 India · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-31 |
| 158.178.128.187 Israel · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-31 |
| 125.197.232.126 Japan · BIGLOBE Inc. | exposed-secret | TXT, ENV, JSON, PHP | 5 | 2026-10-31 |
| 18.162.225.121 China · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-31 |
| 107.151.192.191 Colombia · Zenlayer Inc | exposed-secret | TXT | 1 | 2026-10-31 |
| 16.27.113.42 Australia · Amazon.com, Inc. | exposed-secret | TXT, ENV | 3 | 2026-10-31 |
| 43.210.162.154 Thailand · Amazon.com, Inc. | exposed-secret | ENV | 2 | 2026-10-31 |
| 80.151.94.164 Germany · Deutsche Telekom AG | exposed-secret | JSON, PHP | 2 | 2026-10-31 |
| 89.31.120.48 United Arab Emirates · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-10-31 |
| 13.231.71.33 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT | 4 | 2026-10-31 |
| 185.228.168.9 United States · Daniel Cid | exposed-secret malware mozi | ENV, TXT | 2 | 2026-10-31 |
| 39.109.57.67 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | exposed-secret malware exploit mozi | PY, LOG, ELF, SH | 26 | 2026-10-31 |
| 212.58.68.19 Germany · Globalways GmbH | exposed-secret | ENV, JSON, PHP | 3 | 2026-10-31 |
| 39.109.57.179 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | malware exploit exposed-secret mozi | ELF, LOG, PY, SH | 9 | 2026-10-31 |
| 209.99.184.38 Switzerland · SKN Subnet & Telecom Ltd | files | JSON | 1 | 2026-10-31 |
| 45.39.190.176 United States · Cloud Software - FZCO | exposed-secret exploit malware webshell | HTML, PHP, ELF, BIN | 212 | 2026-10-31 |
| 96.126.130.81 United States · Evoxt Sdn. Bhd. | malware mozi exploit webshell | EML, SH, PY, LOG | 1,568 | 2026-10-31 |
| 77.239.124.141 The Netherlands · Alfahost LLC | malware exploit exposed-secret elf-binary | ELF, TXT | 15 | 2026-10-31 |
| 124.221.133.13 China · Shenzhen Tencent Computer Systems Company Limited | files | BIN | 1 | 2026-10-31 |
| 193.233.75.208 Germany · Digital Hosting Provider LLC | tunnel | SITE | 2 | 2026-10-31 |
| 185.166.154.105 Spain · WorkTitans B.V. | files | TXT | 1 | 2026-10-31 |
| 45.141.21.199 Germany · Net1 GmbH | files | GZ | 3 | 2026-10-31 |
| 172.66.47.148 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-31 |
| 172.66.44.108 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-31 |
| 203.204.192.28 Taiwan · Hoshin Multimedia Center Inc. | malware mozi elf-binary | A | 1 | 2026-10-31 |
| 172.67.141.4 United States · Cloudflare, Inc. | exploit | SITE | 1 | 2026-10-31 |
| 104.21.70.249 United States · Cloudflare, Inc. | exploit | SITE | 1 | 2026-10-31 |
| 69.46.46.90 United States · Railway | exposed-secret | UA | 1 | 2026-10-31 |
| 144.124.232.2 The Netherlands · SERVERS TECH FZCO | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-31 |
| 23.132.164.199 United States · Netiface America, Inc. | tunnel | CFD | 1 | 2026-10-31 |
| 45.205.24.183 Seychelles · FASTNET DATA INC | exploit c2 exposed-secret | HTML, ZIP, TXT, ENV | 26 | 2026-10-31 |
| 14.161.34.154 Vietnam · VNPT Corp | files | BIN | 1 | 2026-10-31 |
| 14.98.76.177 India · TTSL-ISP DIVISION | files | BIN | 1 | 2026-10-31 |
| 14.139.240.228 India · National Knowledge Network | files | BIN | 1 | 2026-10-31 |
| 8.220.87.150 Singapore · Alibaba (US) Technology Co., Ltd. | coinminer malware elf-binary tunnel | ELF, SH | 2 | 2026-10-31 |
| 5.51.6.56 France · Bouygues Telecom SA | files | BIN | 1 | 2026-10-31 |
| 154.36.154.63 MU · NetLab Global | exposed-secret | PY, LOG | 6 | 2026-10-31 |
| 45.155.19.244 Turkey · Samet Girginer | malware mozi exploit exposed-secret | JS, TS, MJS, JSON | 56 | 2026-10-31 |
| 148.113.254.194 Canada · OVH SAS | exposed-secret | TXT | 2 | 2026-10-31 |
| 38.190.198.52 United States · SonderCloud Limited | exposed-secret | TXT, PHP | 6 | 2026-10-31 |
| 38.60.241.211 United States · Kaopu Cloud HK Limited | exposed-secret exploit | PY, LOG, TXT, SH | 20 | 2026-10-31 |
| 38.60.205.58 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, HTML, TXT, LOG | 30 | 2026-10-31 |
| 38.97.253.252 United States · Cogent Communications | exposed-secret malware mozi webshell | JS, JSON, PO, PY | 31 | 2026-10-31 |
| 45.153.34.71 The Netherlands · TechTies Inc. | exposed-secret | TXT | 2 | 2026-10-31 |
| 45.152.64.65 HK · XNNET LIMITED | exposed-secret | TXT, LOG, BIN, SH | 12 | 2026-10-31 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free