huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,053
hosts
114,986
files
104
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 168.138.13.221 Australia · Oracle Corporation | exposed-secret malware mozi exploit | SH, BAT, LOG, TXT | 20 | 2026-10-19 |
| 81.71.153.119 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret forced-loot | TXT | 1 | 2026-10-19 |
| 38.76.223.35 United States · cognetcloud INC | exposed-secret webshell | BIN, JSON, PHP, TXT | 4 | 2026-10-19 |
| 217.216.78.183 India · Contabo Asia Private Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-19 |
| 209.50.60.40 United States · UpCloud USA Inc | exploit exposed-secret webshell | LOG, PHP, TXT, ZIP | 4 | 2026-10-19 |
| 122.10.12.174 Hong Kong · DingFeng XinHui(HongKong) Technology Limited | exposed-secret | TXT | 1 | 2026-10-19 |
| 122.10.10.228 Hong Kong · DingFeng XinHui(HongKong) Technology Limited | exposed-secret | TXT | 1 | 2026-10-19 |
| 122.10.20.216 Hong Kong · DingFeng XinHui(HongKong) Technology Limited | exposed-secret | TXT | 1 | 2026-10-19 |
| 193.123.81.25 United Arab Emirates · Oracle Corporation | exposed-secret malware elf-binary tunnel | LOG, PY, JSON, ELF | 16 | 2026-10-19 |
| 94.237.73.153 Singapore · UpCloud Ltd | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 191 | 2026-10-19 |
| 77.236.89.203 Russia · Ltd. "SPA"Impulse" | exposed-secret malware mozi pe-binary | BZ2, ZIP, PE, KEY | 101 | 2026-10-19 |
| 144.172.88.115 United States · RouterHosting LLC | exposed-secret | OVPN, LOG, SH | 5 | 2026-10-19 |
| 8.138.166.206 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware c2 | PY, TXT, XML, LOG | 93 | 2026-10-19 |
| 47.76.239.114 United States · Alibaba (US) Technology Co., Ltd. | malware coinminer exposed-secret exploit | PE, BIN, PEM, CMD | 25 | 2026-10-19 |
| 8.138.46.135 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | forced-loot | RAR | 2 | 2026-10-19 |
| 47.52.70.58 United States · Alibaba (US) Technology Co., Ltd. | exploit exposed-secret malware mozi | PY, JS, MD, BAT | 13 | 2026-10-19 |
| 89.161.143.90 Poland · home.pl S.A. | webshell | BAK, SUSPEC | 2 | 2026-10-19 |
| 146.103.123.60 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit malware mozi | LOG, PY, KEY, TXT | 109 | 2026-10-19 |
| 218.244.142.4 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware elf-binary pe-binary | ELF, PE | 2 | 2026-10-19 |
| 45.170.228.67 Brazil · YES FIBRA TELECOMUNICACOES LTDA | exposed-secret exploit | TXT | 2 | 2026-10-19 |
| 45.137.194.154 United States · Contabo Inc. | exposed-secret | TXT | 1 | 2026-10-19 |
| 27.107.113.154 India · Tata Teleservices (Maharashtra) Ltd | files | BIN | 1 | 2026-10-19 |
| 16.15.212.245 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-19 |
| 16.15.212.211 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-19 |
| 16.15.229.238 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-19 |
| 82.29.159.213 United States · Hostinger International Limited | files | COM | 1 | 2026-10-19 |
| 45.115.26.23 Vietnam · Contrust Solutions S.R.L. | malware exploit exposed-secret c2 | ELF, TXT, PE, XML | 33 | 2026-10-19 |
| 95.133.253.15 Finland · DataCrunch Oy | malware coinminer elf-binary tunnel | ELF, GZ, BAK, BAK3 | 12 | 2026-10-19 |
| 47.245.56.76 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | CN, TXT | 10 | 2026-10-19 |
| 47.79.33.3 United States · Alibaba (US) Technology Co., Ltd. | exploit | COM | 1 | 2026-10-19 |
| 165.99.219.167 United States · Zorn Technologies | exposed-secret | ENV | 1 | 2026-10-19 |
| 172.67.184.128 United States · Cloudflare, Inc. | files | 1 | 2026-10-18 | |
| 62.197.45.96 The Netherlands · Scalaxy B.V. | files | TXT | 1 | 2026-10-18 |
| 62.197.45.60 The Netherlands · Scalaxy B.V. | files | TXT | 1 | 2026-10-18 |
| 104.21.96.156 United States · Cloudflare, Inc. | files | 1 | 2026-10-18 | |
| 176.65.139.160 The Netherlands · Offshore LC | exploit | TXT | 1 | 2026-10-18 |
| 34.97.110.33 Japan · Google LLC | files | COM | 1 | 2026-10-18 |
| 16.15.199.102 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 16.15.207.116 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 16.15.212.23 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 23.94.252.89 United States · DEDIK SERVICES LIMITED | files | BIN | 1 | 2026-10-18 |
| 49.0.82.4 Thailand · ADVANCED WIRELESS NETWORK COMPANY LIMITED | files | JSON | 1 | 2026-10-18 |
| 144.172.108.144 United States · RouterHosting LLC | c2 | TODAY | 1 | 2026-10-18 |
| 52.216.205.198 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 52.216.58.98 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 65.20.109.231 Spain · The Constant Company, LLC | malware exploit webshell pe-binary | PE, ZIP, LOG, PS1 | 37 | 2026-10-18 |
| 144.91.94.21 France · Contabo GmbH | exploit malware c2 webshell | PS1, VBS, PE, HTA | 10 | 2026-10-18 |
| 185.130.45.163 Sweden · Privex Inc. | malware pe-binary | PE | 8 | 2026-10-18 |
| 52.128.241.98 Hong Kong · Netsec Limited | exposed-secret | TXT | 2 | 2026-10-18 |
| 61.178.20.70 China · Chinanet | files | BIN | 1 | 2026-10-18 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free