huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
104
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 187.125.160.108 Brazil · V tal | files | JSON | 1 | 2026-11-11 |
| 187.125.190.64 Brazil · V tal | files | JSON | 1 | 2026-11-11 |
| 187.125.231.49 Brazil · V tal | files | JSON | 1 | 2026-11-11 |
| 5.189.164.179 France · Contabo GmbH | exposed-secret tunnel | JSON, YAML, LOCK, LOG | 8 | 2026-11-11 |
| 176.9.164.182 Germany · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-11-11 |
| 135.181.250.118 Finland · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-11-11 |
| 51.68.160.101 Ireland · OVH SAS | exposed-secret | TXT | 1 | 2026-11-11 |
| 149.28.139.214 Singapore · The Constant Company, LLC | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 18 | 2026-11-11 |
| 172.104.64.209 Japan · Akamai Technologies, Inc. | files | PHP | 1 | 2026-11-11 |
| 124.156.203.61 India · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 2 | 2026-11-11 |
| 51.83.108.104 France · OVH SAS | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 18 | 2026-11-11 |
| 15.204.57.219 United States · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-11-11 |
| 176.9.125.11 Germany · Hetzner Online GmbH | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 18 | 2026-11-11 |
| 165.227.115.29 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 3 | 2026-11-11 |
| 159.69.15.66 Germany · Hetzner Online GmbH | exposed-secret | ENV | 1 | 2026-11-11 |
| 216.144.226.116 United States · HostPapa | exposed-secret | JSON | 1 | 2026-11-11 |
| 103.110.129.126 Vietnam · Room 1508, 15th Floor, Vincom Center Building, 72 Le Thanh Ton, Ben Nghe Ward, | files | 1 | 2026-11-11 | |
| 172.67.165.44 United States · Cloudflare, Inc. | files | CC | 1 | 2026-11-11 |
| 104.21.11.52 United States · Cloudflare, Inc. | files | CC | 1 | 2026-11-11 |
| 185.34.144.137 United States · CNServer LLC | malware mozi exposed-secret elf-binary | ELF, MACHO, BAT, JAR | 269 | 2026-11-11 |
| 23.251.47.199 Germany · Zenlayer Inc | exposed-secret | TXT | 2 | 2026-11-11 |
| 151.101.63.10 United States · Fastly, Inc. | exploit c2 | TXT, HTML, PDF | 4 | 2026-11-11 |
| 104.18.31.6 United States · Cloudflare, Inc. | exploit | TXT | 2 | 2026-11-11 |
| 104.18.30.6 United States · Cloudflare, Inc. | exploit | TXT | 2 | 2026-11-11 |
| 172.65.90.26 United States · Cloudflare, Inc. | c2 exploit | TXT | 2 | 2026-11-11 |
| 172.65.90.25 United States · Cloudflare, Inc. | c2 exploit | TXT | 2 | 2026-11-11 |
| 172.65.90.24 United States · Cloudflare, Inc. | c2 exploit | TXT | 2 | 2026-11-11 |
| 172.65.90.27 United States · Cloudflare, Inc. | c2 exploit | TXT | 2 | 2026-11-11 |
| 13.184.160.26 United States | exposed-secret | TXT | 1 | 2026-11-11 |
| 172.67.169.140 United States · Cloudflare, Inc. | tunnel | TXT | 1 | 2026-11-11 |
| 104.21.46.250 United States · Cloudflare, Inc. | tunnel | TXT | 1 | 2026-11-11 |
| 198.202.211.1 United States · Cloudflare London, LLC | exploit | TXT | 3 | 2026-11-11 |
| 172.67.153.110 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-11 |
| 104.21.74.24 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-11 |
| 67.217.49.246 United States · Interserver, Inc | exposed-secret | TXT | 1 | 2026-11-11 |
| 13.184.160.241 United States | exposed-secret | TXT | 1 | 2026-11-11 |
| 45.76.89.20 Germany · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-11-11 |
| 172.67.221.77 United States · Cloudflare, Inc. | files | INFO | 3 | 2026-11-11 |
| 104.21.86.152 United States · Cloudflare, Inc. | files | INFO | 3 | 2026-11-11 |
| 199.36.158.100 United States · Fastly, Inc. | exposed-secret | APP, COM | 8 | 2026-11-11 |
| 62.141.40.187 Germany · WIIT AG | exposed-secret | TXT | 1 | 2026-11-11 |
| 47.22.166.163 United States · Cablevision Systems Corp. | malware mozi elf-binary | A | 1 | 2026-11-11 |
| 23.88.104.213 Germany · Hetzner Online GmbH | exposed-secret malware mozi | TXT | 2 | 2026-11-11 |
| 45.63.71.130 United States · The Constant Company, LLC | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 36 | 2026-11-11 |
| 45.77.179.49 Japan · The Constant Company, LLC | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-11-11 |
| 46.224.139.234 Germany · Hetzner Online GmbH | malware mozi exposed-secret | TXT | 4 | 2026-11-10 |
| 16.15.253.234 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.245.111 United States · Amazon.com, Inc. | files | HTML | 2 | 2026-11-10 |
| 16.15.254.95 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 91.108.103.206 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free