huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 50.6.20.84 United States · Oracle Corporation | files | COM | 1 | 2026-10-26 |
| 104.239.47.10 France · TTR IT Holdings Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-26 |
| 31.56.209.34 The Netherlands · SWISSNET LLC | malware elf-binary | ELF | 1 | 2026-10-26 |
| 92.112.53.34 United States · Datacamp Limited | exposed-secret exploit | PY, LOG, PHP, TXT | 21 | 2026-10-26 |
| 189.171.228.224 Mexico · Uninet S.A. de C.V. | exposed-secret | TXT | 6 | 2026-10-26 |
| 204.188.254.146 United States · Sharktech | exploit exposed-secret tunnel | TXT | 2 | 2026-10-26 |
| 136.70.229.109 United States · Google LLC | exposed-secret | TXT | 2 | 2026-10-26 |
| 118.139.164.197 Singapore · GoDaddy.com, LLC | exposed-secret | TXT | 1 | 2026-10-25 |
| 66.29.156.250 United States · Namecheap, Inc. | files | COM | 1 | 2026-10-25 |
| 50.6.21.130 United States · Oracle Corporation | files | COM | 1 | 2026-10-25 |
| 47.245.115.153 United States · Alibaba (US) Technology Co., Ltd. | files | COM | 1 | 2026-10-25 |
| 8.217.152.4 Hong Kong · Alibaba (US) Technology Co., Ltd. | exposed-secret | ENV | 1 | 2026-10-25 |
| 161.35.169.243 United Kingdom · DigitalOcean, LLC | exploit exposed-secret | TXT, ENV, JSON, PHP | 8 | 2026-10-25 |
| 82.165.110.7 France · IONOS SE | exposed-secret | COM, IO | 2 | 2026-10-25 |
| 138.3.216.107 Japan · Oracle Corporation | files | 1 | 2026-10-25 | |
| 45.74.61.9 United States · 69HOST LLC | files | COM | 1 | 2026-10-25 |
| 124.77.222.157 China · China Telecom (Group) | malware mozi elf-binary | A | 1 | 2026-10-25 |
| 27.124.12.186 Hong Kong · CTG Server Limited | exploit exposed-secret tunnel | LOG, HTML, OUT, TOML | 8 | 2026-10-25 |
| 27.124.5.86 Hong Kong · CTG Server Limited | exploit exposed-secret tunnel | LOG, HTML, OUT, TOML | 8 | 2026-10-25 |
| 38.147.172.82 United States · LUCIDACLOUD LIMITED | exposed-secret exploit tunnel forced-loot | SH, YAML, PY, JSON | 59 | 2026-10-25 |
| 124.221.46.164 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-25 |
| 95.216.224.44 Finland · Hetzner Online GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-25 |
| 186.241.117.97 United States · Uscloud Inc | files | XYZ | 2 | 2026-10-25 |
| 143.198.135.172 United States · DigitalOcean, LLC | files | RMD160, TBZ2 | 38 | 2026-10-25 |
| 172.67.129.79 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-25 |
| 104.21.2.145 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-25 |
| 122.193.250.66 China · CHINA UNICOM China169 Backbone | files | TXT | 1 | 2026-10-25 |
| 122.10.110.72 Hong Kong · DingFeng XinHui(HongKong) Technology Limited | exposed-secret | TXT | 2 | 2026-10-25 |
| 218.38.52.211 South Korea · SK Broadband Co Ltd | exposed-secret malware mozi elf-binary | PHP, ZIP, TXT, ELF | 30 | 2026-10-25 |
| 212.227.29.190 Germany · IONOS SE | exploit exposed-secret malware webshell | ELF, PHP, TXT | 3 | 2026-10-25 |
| 108.181.123.222 Canada · Psychz Networks | exposed-secret | ENV, TXT | 2 | 2026-10-25 |
| 85.137.52.209 The Netherlands · SOLLUTIUM EU Sp z.o.o. | exposed-secret | TXT | 1 | 2026-10-25 |
| 108.181.122.147 Canada · Psychz Networks | exposed-secret | ENV, TXT | 2 | 2026-10-25 |
| 95.216.77.106 Finland · Hetzner Online GmbH | exposed-secret | TXT, PHP, ENV, JSON | 16 | 2026-10-25 |
| 182.114.197.218 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-25 | |
| 222.255.137.82 Vietnam · VNPT Corp | files | BIN, ORG | 2 | 2026-10-25 |
| 82.156.186.185 China · Shenzhen Tencent Computer Systems Company Limited | malware cobalt-strike c2 mozi | PY, JAR, TXT, LOG | 88 | 2026-10-25 |
| 2.29.112.91 Finland · Hetzner Online GmbH | malware mozi | ZIP, CSV, JSON, LOG | 9 | 2026-10-25 |
| 45.151.122.34 France · Contabo GmbH | malware coinminer exposed-secret exploit | ELF, PY, SH, CMD | 109 | 2026-10-25 |
| 217.69.11.65 France · The Constant Company, LLC | exploit malware webshell pe-binary | PE, JSP, PS1, TXT | 10 | 2026-10-25 |
| 193.36.119.24 The Netherlands · EstNOC OU | exposed-secret malware mozi pe-binary | LOG, VBS, PY, ELF | 21 | 2026-10-25 |
| 216.218.249.71 United States · Hurricane Electric LLC | exposed-secret | PHP | 1 | 2026-10-25 |
| 49.51.230.17 United States · Shenzhen Tencent Computer Systems Company Limited | malware exploit webshell exposed-secret | LOG, C, DLL, BIN | 56 | 2026-10-25 |
| 47.109.23.77 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware cobalt-strike exploit exposed-secret | BIN, LOG, PHP, PY | 21 | 2026-10-25 |
| 111.231.116.164 China · Shenzhen Tencent Computer Systems Company Limited | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-25 |
| 156.245.146.226 Seychelles · Zillion Network Inc. | exposed-secret malware mozi exploit | SH, HTML, PY, TXT | 561 | 2026-10-25 |
| 45.198.224.188 Seychelles · VPSVAULT.HOST LTD | malware exposed-secret elf-binary pe-binary | ELF, PE, TXT | 6 | 2026-10-25 |
| 146.196.109.6 Indonesia · PT Maxindo Mitra Solusi | files | BIN | 1 | 2026-10-25 |
| 203.91.77.253 Hong Kong · AROSSCLOUD INC. | exposed-secret | JSON, TXT | 2 | 2026-10-25 |
| 129.159.135.190 Israel · Oracle Corporation | malware exploit exposed-secret mozi | ELF, LOG, PY, C | 40 | 2026-10-25 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free