huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 140.245.97.165 Singapore · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 111.229.57.196 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 45.76.27.196 United States · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 39.109.100.126 Hong Kong | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 103.214.172.114 Hong Kong · Cloudie Limited | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 168.138.221.255 Japan · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 110.77.197.95 Thailand · National Telecom Public Company Limited | files | JSON | 1 | 2026-10-24 |
| 157.245.106.219 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 45.58.10.169 United States · Vlan24 | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 115.247.84.18 India · Reliance Jio Infocomm Limited | files | BIN | 1 | 2026-10-24 |
| 103.247.10.161 Indonesia · Rumahweb | exposed-secret | TXT | 1 | 2026-10-24 |
| 208.87.131.125 United States · HIVELOCITY, Inc. | files | ODB | 1 | 2026-10-24 |
| 103.39.78.45 Hong Kong · VH-GLOBAL | exploit exposed-secret malware webshell | ASPX, PE, PS1, TXT | 9 | 2026-10-24 |
| 43.254.165.70 Hong Kong · VH-GLOBAL | exploit exposed-secret malware webshell | ASPX, PE, PS1, TXT | 9 | 2026-10-24 |
| 193.124.140.164 Germany · DSLmobil GmbH | files | ZIP | 1 | 2026-10-24 |
| 51.83.130.8 Poland · OVH SAS | exposed-secret | ENV | 1 | 2026-10-24 |
| 23.111.31.154 The Netherlands · Servers.com, Inc. | malware pe-binary | PE, ZIP, COM | 59 | 2026-10-24 |
| 216.24.57.1 United States · Render | files | CYOU | 1 | 2026-10-24 |
| 104.21.33.151 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
| 172.67.146.135 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
| 172.67.200.161 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
| 104.21.13.154 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
| 103.175.129.185 Hong Kong · UK-2 Limited | files | CYOU | 1 | 2026-10-24 |
| 103.175.129.122 Hong Kong · UK-2 Limited | files | CYOU | 1 | 2026-10-24 |
| 103.175.129.248 Hong Kong · UK-2 Limited | files | CYOU | 1 | 2026-10-24 |
| 172.67.193.21 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-10-24 |
| 104.21.57.225 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-10-24 |
| 54.69.111.24 United States · Amazon.com, Inc. | exploit exposed-secret webshell c2 | BIN, JSON, ZIP, PY | 114 | 2026-10-24 |
| 199.19.77.37 United States · VegasNAP, LLC | malware exploit pe-binary | RSP, PE, ZIP, BIN | 48 | 2026-10-24 |
| 117.58.240.173 Bangladesh · Always On Network Bangladesh Ltd. | exposed-secret | COM | 1 | 2026-10-24 |
| 213.136.93.173 France · Contabo GmbH | files | COM | 1 | 2026-10-24 |
| 185.186.78.33 Sweden · BrainStorm Network, Inc | exposed-secret | TXT | 1 | 2026-10-24 |
| 194.180.191.209 Moldova · MivoCloud SRL | exposed-secret | COM | 1 | 2026-10-24 |
| 194.180.191.239 Moldova · MivoCloud SRL | exposed-secret | COM | 1 | 2026-10-24 |
| 139.162.97.181 Japan · Akamai Technologies, Inc. | malware mozi exposed-secret gafgyt | MICROH, TXT | 53 | 2026-10-24 |
| 204.168.225.59 Finland · Hetzner Online GmbH | exposed-secret malware mozi exploit | PEM, TXT, PY, SH | 487 | 2026-10-24 |
| 119.23.178.234 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 47.89.250.115 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 121.37.84.160 China · Huawei Cloud Service data center | exposed-secret | TXT | 1 | 2026-10-24 |
| 104.160.169.204 United States · Sharktech | exposed-secret exploit malware tsunami | SH, LOG, TXT, PY | 170 | 2026-10-24 |
| 112.124.202.144 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 106.1.1.2 Taiwan · kbro CO. Ltd. | files | JSON | 1 | 2026-10-24 |
| 89.218.90.90 Kazakhstan · JSC Kazakhtelecom | exposed-secret | JSON, PHP | 2 | 2026-10-24 |
| 137.184.179.158 United States · DigitalOcean, LLC | files | JSON | 1 | 2026-10-24 |
| 194.11.226.41 United Kingdom · ROCKHOSTER PRIVATE LIMITED | exposed-secret malware mozi exploit | PY, TXT, LOG, JS | 106 | 2026-10-24 |
| 50.210.239.219 United States · Comcast Cable Communications, LLC | exposed-secret exploit c2 webshell | PHP, PY, HTML, LOG | 45 | 2026-10-24 |
| 195.154.79.206 France · Scaleway SAS | malware exposed-secret pe-binary elf-binary | PE, JOBX, SH, TXT | 16 | 2026-10-24 |
| 84.38.180.187 Russia · JSC Selectel | exploit malware pe-binary | PE, APPLIC, BAT, HTA | 9 | 2026-10-24 |
| 172.67.174.185 United States · Cloudflare, Inc. | files | SITE | 1 | 2026-10-24 |
| 172.67.205.146 United States · Cloudflare, Inc. | c2 exposed-secret | LINK | 1 | 2026-10-24 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free