huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 148.153.159.51 United States · CDS Global Cloud Co., Ltd | exposed-secret | TXT | 3 | 2026-10-25 |
| 192.236.229.229 United States · HostPapa | malware mozi exposed-secret exploit | PY, SH, LOG, TXT | 33 | 2026-10-25 |
| 8.133.234.121 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | SH, LOG, C, TXT | 216 | 2026-10-25 |
| 15.204.219.215 United States · OVH SAS | exposed-secret | TXT | 3 | 2026-10-25 |
| 103.15.222.169 Vietnam · TAN THANH AN INTERNATIONAL TRADE DEVELOPMENT COMPANY LIMITED | exposed-secret | TXT | 2 | 2026-10-25 |
| 154.217.251.226 United States · AROSSCLOUD INC. | exposed-secret | TXT, ENV, JSON | 6 | 2026-10-25 |
| 82.157.111.243 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 44 | 2026-10-25 |
| 51.159.184.76 France · Scaleway SAS | exposed-secret malware mozi exploit | JSON, JS, TXT, HTML | 38 | 2026-10-25 |
| 64.226.89.20 Germany · DigitalOcean, LLC | exploit exposed-secret malware mozi | PY, TXT, CSV, JS | 14 | 2026-10-25 |
| 209.38.235.232 Germany · DigitalOcean, LLC | exposed-secret malware mozi exploit | JSON, JS, LOG, MD | 118 | 2026-10-25 |
| 5.172.156.40 United Kingdom · Pulsant (Scotland) Ltd | exploit exposed-secret malware webshell | PY, PHP, ELF, ENV | 13 | 2026-10-25 |
| 175.159.194.157 Hong Kong · The Hong Kong Polytechnic University | exposed-secret exploit malware mozi | MD, SAMPLE, TXT, SH | 67 | 2026-10-25 |
| 45.67.86.32 Japan · Host Universal Pty Ltd | exploit malware exposed-secret mozi | LOG, PY, MACHO, TXT | 83 | 2026-10-25 |
| 115.29.202.62 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware exploit exposed-secret mozi | ELF, LOG, PY, MD | 139 | 2026-10-25 |
| 103.79.184.170 Hong Kong · HanMing HK Limited | exposed-secret | TXT | 1 | 2026-10-25 |
| 101.34.83.230 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-25 |
| 89.19.223.126 Russia · SYSECT D.O.O. | malware elf-binary | ELF | 4 | 2026-10-25 |
| 123.56.128.118 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-25 |
| 134.199.145.59 Australia · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-25 |
| 160.250.216.28 Vietnam · Megacore Technology Company Limited | exposed-secret | TXT | 1 | 2026-10-25 |
| 202.28.34.201 Thailand · ANET Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-25 |
| 132.148.75.61 United States · GoDaddy.com, LLC | exposed-secret | ENV, JS, JSON, SAVE | 7 | 2026-10-25 |
| 170.64.255.40 Australia · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-25 |
| 101.32.194.174 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | SH, OVPN | 6 | 2026-10-25 |
| 106.75.48.212 China · China Unicom Beijing Province Network | exposed-secret | TXT | 1 | 2026-10-25 |
| 47.237.84.48 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit webshell tunnel | MD, LOG, SH, TXT | 205 | 2026-10-25 |
| 43.153.10.147 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit tunnel | SAMPLE, TXT, MD, PY | 28 | 2026-10-25 |
| 74.73.65.132 United States · Charter Communications Inc | exposed-secret malware mozi exploit | PY, TXT, MD, CSV | 81 | 2026-10-25 |
| 121.4.83.178 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret c2 webshell malware | MD, GITIGN | 19 | 2026-10-25 |
| 95.179.212.2 France · The Constant Company, LLC | c2 malware pe-binary | PY, PS1, TXT, EXE | 13 | 2026-10-25 |
| 191.124.248.13 Chile | exposed-secret tunnel | HTML | 1 | 2026-10-25 |
| 196.251.107.204 Seychelles · FEMO IT SOLUTIONS LIMITED | files | JAR | 14 | 2026-10-25 |
| 120.27.228.231 China · Hangzhou Alibaba Advertising Co.,Ltd. | files | JSON | 1 | 2026-10-25 |
| 114.215.184.158 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware pe-binary | PE | 1 | 2026-10-24 |
| 103.39.79.102 Hong Kong · XNNET LLC | exposed-secret | TXT | 1 | 2026-10-24 |
| 119.45.236.76 China · Shenzhen Tencent Computer Systems Company Limited | malware exploit c2 meterpreter | LOG, PE, BIN, ELF | 26 | 2026-10-24 |
| 198.46.158.18 United States · HostPapa | exposed-secret exploit malware mozi | PY, YAML, HTML, TXT | 362 | 2026-10-24 |
| 83.229.70.93 Israel · O.M.C. COMPUTERS & COMMUNICATIONS LTD | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 193.233.220.65 Russia · Aeza Group LLC | malware exploit c2 exposed-secret | PS1, PE, BAT, ZIP | 186 | 2026-10-24 |
| 143.42.46.110 Australia · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 107.174.231.203 United States · HostPapa | exposed-secret | TXT | 1 | 2026-10-24 |
| 2.26.229.254 Germany · PLAY2GO INTERNATIONAL LIMITED | malware adaptix coinminer c2 | PS1, PE, CMD, BAT | 43 | 2026-10-24 |
| 5.83.136.39 Germany · Finn Hess trading as Ryzehosting | malware elf-binary pe-binary | ELF, PE, SH | 10 | 2026-10-24 |
| 27.124.2.66 Hong Kong · CTG Server Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 151.236.30.73 Austria · EDIS GmbH | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 129.225.166.90 United States | exposed-secret tunnel forced-loot | SH, LOG, MD, TOML | 20 | 2026-10-24 |
| 170.79.251.94 Brazil · Alt Informatica Ltda | files | JSON | 1 | 2026-10-24 |
| 192.121.162.136 Japan · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 65.20.101.191 Spain · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 113.30.151.175 Italy · Kamatera, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free