huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,063
hosts
115,929
files
114
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 207.148.29.215 United States · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 23.92.20.14 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 2 | 2026-10-15 |
| 161.35.55.95 United States · DigitalOcean, LLC | exposed-secret | ENV | 1 | 2026-10-15 |
| 180.214.246.147 Indonesia · PT. TIME EXCELINDO | exposed-secret | ENV | 1 | 2026-10-15 |
| 130.61.210.103 Germany · Oracle Corporation | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 129.148.36.81 Brazil · Oracle Corporation | files | PHP | 2 | 2026-10-15 |
| 191.44.112.89 Germany · NODE HOST LIMITED | exposed-secret | TXT | 1 | 2026-10-15 |
| 150.187.25.242 Venezuela · Fundacion Centro Nacional de Innovacion Tecnologica (CENIT) | exposed-secret | PHP, HTML, JS, TXT | 8 | 2026-10-15 |
| 42.1.120.215 Vietnam · MOBIFONE Corporation | files | BIN | 1 | 2026-10-15 |
| 42.1.117.94 Vietnam · MOBIFONE Corporation | files | BIN | 1 | 2026-10-15 |
| 41.204.75.94 CM · CAMEROON TELECOMMUNICATIONS NETWORK | files | JSON | 1 | 2026-10-15 |
| 36.129.15.111 China · China Mobile | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-15 |
| 41.153.30.115 Egypt · ETISALAT MISR | exposed-secret | JSON | 1 | 2026-10-15 |
| 45.125.32.136 Hong Kong · Cloudie Limited | files | HTML | 1 | 2026-10-15 |
| 45.125.15.115 Hong Kong · Cloudie Limited | files | HTML | 1 | 2026-10-15 |
| 45.125.35.228 Hong Kong · CDN1.com Limited | files | HTML | 1 | 2026-10-15 |
| 45.125.35.226 Hong Kong · CDN1.com Limited | files | HTML | 1 | 2026-10-15 |
| 45.125.32.147 Hong Kong · Cloudie Limited | files | HTML | 1 | 2026-10-15 |
| 181.215.18.87 United States · Datacamp Limited | files | JSON | 1 | 2026-10-15 |
| 185.92.183.208 The Netherlands · CGI GLOBAL LIMITED | files | JS | 1 | 2026-10-15 |
| 199.91.155.31 United States · MediaFire, LLC | tunnel | RAR | 1 | 2026-10-15 |
| 199.91.155.30 United States · MediaFire, LLC | tunnel | ZIP | 1 | 2026-10-15 |
| 199.91.155.21 United States · MediaFire, LLC | tunnel | ZIP | 1 | 2026-10-15 |
| 199.91.155.15 United States · MediaFire, LLC | tunnel | RAR | 1 | 2026-10-15 |
| 205.196.123.38 United States · MediaFire, LLC | tunnel | 1 | 2026-10-15 | |
| 45.125.14.219 Hong Kong · Cloudie Limited | files | JS | 1 | 2026-10-15 |
| 202.181.25.3 Hong Kong · Cloudie Limited | files | JS | 1 | 2026-10-15 |
| 202.181.25.212 Hong Kong · Cloudie Limited | files | JS | 1 | 2026-10-15 |
| 202.181.25.208 Hong Kong · Cloudie Limited | files | JS | 1 | 2026-10-15 |
| 103.246.244.56 Hong Kong · Cloudie Limited | files | JS | 1 | 2026-10-15 |
| 159.65.2.87 Singapore · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 172.67.161.44 United States · Cloudflare, Inc. | files | JS | 1 | 2026-10-15 |
| 104.21.90.207 United States · Cloudflare, Inc. | files | JS | 1 | 2026-10-15 |
| 95.237.154.159 Italy · Telecom Italia S.p.A. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 96.62.71.5 India · SECURED SERVERS LLC | malware elf-binary | ELF | 1 | 2026-10-15 |
| 83.233.56.26 Sweden · Bredband2 AB | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 82.22.23.132 Albania · FREAKHOSTING LTD | malware elf-binary | ELF | 15 | 2026-10-15 |
| 82.23.246.75 Singapore · Cloudie Limited | files | JPG, ZIP | 2 | 2026-10-15 |
| 77.90.185.244 Germany · Limited Network LTD | exposed-secret | ENV | 1 | 2026-10-15 |
| 77.90.185.243 Germany · Limited Network LTD | exposed-secret | ENV | 1 | 2026-10-15 |
| 61.54.43.105 China · CHINA UNICOM China169 Backbone | malware elf-binary | ELF | 1 | 2026-10-15 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 61.243.141.19 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 61.53.86.56 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 47.92.205.158 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware elf-binary | ELF, TXT | 2 | 2026-10-15 |
| 47.215.224.64 United States · Suddenlink Communications | malware mozi elf-binary | 1 | 2026-10-15 | |
| 60.23.232.97 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 5.165.233.43 Russia · JSC "ER-Telecom Holding" | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 46.236.65.27 Sweden · Bredband2 AB | malware mozi elf-binary | 1 | 2026-10-15 | |
| 42.4.97.14 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free