huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,975
hosts
106,609
files
128
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 103.252.72.150 Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | coinminer malware elf-binary tunnel | LOG, ELF, GZ, PY | 6 | 2026-10-28 |
| 147.45.133.66 The Netherlands · Timeweb, LLP | malware mozi | GZ, TAR | 5 | 2026-10-28 |
| 5.78.205.230 United States · Hetzner Online GmbH | exposed-secret exploit malware webshell | PY, SAMPLE, TXT, LOG | 66 | 2026-10-28 |
| 50.210.239.213 United States · Comcast Cable Communications, LLC | exposed-secret exploit c2 webshell | PHP, PY, HTML, PHTML | 43 | 2026-10-28 |
| 5.78.156.58 United States · Hetzner Online GmbH | exploit exposed-secret tunnel | TXT, LOG, JS, JSON | 79 | 2026-10-28 |
| 108.175.1.225 United States · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.191.113.162 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 5.83.150.119 Germany · Tech Tide Portugal Unipessoal LDA | files | JSON | 1 | 2026-10-28 |
| 85.121.183.77 Moldova · ALEXHOST SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 82.209.204.6 Belarus · Republican Unitary Telecommunication Enterprise Beltelecom | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 172.232.252.167 Indonesia · Akamai Technologies, Inc. | exposed-secret | TXT, ENV, JSON | 10 | 2026-10-28 |
| 172.67.134.96 United States · Cloudflare, Inc. | files | LIVE | 1 | 2026-10-28 |
| 104.21.25.162 United States · Cloudflare, Inc. | files | LIVE | 1 | 2026-10-28 |
| 116.62.4.56 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV | 5 | 2026-10-28 |
| 103.127.31.183 India · Micro Hosting Private Limited | exposed-secret tunnel | PY, TXT | 8 | 2026-10-28 |
| 169.0.199.140 South Africa · AFRIHOST SP (PTY) LTD | exposed-secret | TXT | 2 | 2026-10-28 |
| 218.1.211.104 China · China Telecom (Group) | malware mozi elf-binary | A | 1 | 2026-10-28 |
| 1.34.195.13 Taiwan · Chunghwa Telecom Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 157.15.139.244 Indonesia · PT Ring Media Nusantara | exposed-secret | TXT | 2 | 2026-10-28 |
| 43.245.185.251 Indonesia · PT Media Sarana Data | exposed-secret | TXT | 2 | 2026-10-28 |
| 103.18.79.38 Indonesia · PT. Usaha Adisanggoro | exposed-secret | TXT | 1 | 2026-10-28 |
| 43.153.71.203 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 38.248.12.192 United States · Real Time Cloud Services LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 159.192.72.24 Thailand · National Telecom Public Company Limited | files | JSON | 1 | 2026-10-28 |
| 23.27.200.64 United States · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON, PHP | 17 | 2026-10-28 |
| 85.121.245.150 Romania · M247 Europe SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 87.76.160.170 Malaysia · GB Network Solutions Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.27.99.193 United States · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 119.45.35.168 China · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-28 |
| 85.121.51.218 Romania · M247 Europe SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 217.160.244.175 Germany · IONOS SE | exploit c2 exposed-secret | HTML, TXT | 13 | 2026-10-28 |
| 34.117.64.107 United States · Google LLC | files | BIN | 1 | 2026-10-28 |
| 34.120.35.187 United States · Google LLC | files | BIN | 1 | 2026-10-28 |
| 68.183.43.20 United Kingdom · DigitalOcean, LLC | files | BIN | 1 | 2026-10-28 |
| 220.132.208.73 Taiwan · Chunghwa Telecom Co., Ltd. | exposed-secret | ENV | 1 | 2026-10-28 |
| 66.235.110.79 Singapore · Liberally Network, LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 167.172.34.252 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 167.71.5.135 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 139.59.89.10 India · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 77.90.39.202 Germany · Tech Tide Portugal Unipessoal LDA | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 157.66.2.12 Indonesia · PT Ashyla Karya Abadi | exposed-secret | TXT | 2 | 2026-10-28 |
| 66.179.136.86 United States · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 103.252.227.251 Bangladesh · Doly IT Corner | exposed-secret | TXT | 2 | 2026-10-28 |
| 93.177.101.187 Turkey · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 103.66.112.237 India · DISHAWAVES INFONET PVT. LTD | exposed-secret | TXT | 2 | 2026-10-28 |
| 139.84.228.230 South Africa · The Constant Company, LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 118.217.181.100 South Korea · SK Broadband Co Ltd | files | PHP | 1 | 2026-10-28 |
| 103.195.188.128 Singapore · Dromatics Systems Pte Ltd | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 89.45.45.59 Turkey · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 185.155.91.252 Ukraine · Eugene N. Polishchuk | exposed-secret | TXT | 2 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free