huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
115
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 123.5.132.134 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 167.104.160.76 United States · Navient Solutions, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 153.56.180.69 Turkey · Superonline Iletisim Hizmetleri A.S. | malware elf-binary | ELF | 1 | 2026-10-15 |
| 13.143.144.167 United States | exposed-secret | TXT | 1 | 2026-10-15 |
| 123.14.216.41 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 123.161.90.221 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 123.11.10.206 China · CHINA UNICOM China169 Backbone | malware elf-binary | ELF | 1 | 2026-10-15 |
| 123.15.75.224 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 123.11.15.92 China · CHINA UNICOM China169 Backbone | malware elf-binary | ELF | 1 | 2026-10-15 |
| 120.84.213.141 China · China Unicom IP network China169 Guangdong province | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 120.84.214.181 China · China Unicom IP network China169 Guangdong province | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 120.28.167.203 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 119.180.53.149 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 119.180.14.117 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 119.179.215.124 China · CHINA UNICOM China169 Backbone | malware elf-binary | ELF | 1 | 2026-10-15 |
| 119.116.38.46 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 116.10.132.105 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 115.55.207.120 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 115.52.81.24 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-15 | |
| 115.58.176.160 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 115.51.153.198 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 113.239.221.244 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-15 |
| 113.254.36.153 Hong Kong · HGC Global Communications Limited | malware elf-binary | ELF | 1 | 2026-10-15 |
| 112.238.27.166 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 105.225.151.155 South Africa · Telkom SA Ltd. | malware mozi elf-binary | A | 1 | 2026-10-15 |
| 103.44.136.115 India · Kwikzo Telecomm Pvt Ltd | files | JSON | 1 | 2026-10-15 |
| 20.190.159.64 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 13.37.72.210 France · Amazon.com, Inc. | exposed-secret | 1 | 2026-10-15 | |
| 217.60.242.44 Turkey | files | JSON | 1 | 2026-10-15 |
| 204.188.254.145 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-15 |
| 172.67.209.92 United States · Cloudflare, Inc. | files | JE, TXT | 2 | 2026-10-15 |
| 104.21.69.148 United States · Cloudflare, Inc. | files | JE, TXT | 2 | 2026-10-15 |
| 208.118.240.16 United States · FirstLight Networks, LLC | files | PHP | 1 | 2026-10-15 |
| 41.79.32.206 BW · ELECTRO METIC ENTERPRISES PTY LTD | files | BIN | 1 | 2026-10-15 |
| 41.72.96.58 ZM · Zambia Telecommunications Company Ltd aka ZAMTEL | files | BIN | 1 | 2026-10-15 |
| 41.32.176.106 Egypt · TE-AS | files | BIN | 1 | 2026-10-15 |
| 41.33.60.164 Egypt · TE-AS | files | BIN | 1 | 2026-10-15 |
| 20.190.160.130 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 39.105.100.92 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, PHP | 11 | 2026-10-15 |
| 39.105.208.239 China · Hangzhou Alibaba Advertising Co.,Ltd. | files | JSON | 1 | 2026-10-15 |
| 38.242.156.206 Germany · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-14 |
| 38.91.100.33 United States · GTHost | exposed-secret | TXT | 1 | 2026-10-14 |
| 172.67.210.217 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-10-14 |
| 104.21.93.136 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-10-14 |
| 40.126.31.128 Ireland · Microsoft Corporation | exposed-secret | TXT | 1 | 2026-10-14 |
| 138.199.248.47 Germany · Hetzner Online GmbH | files | ASIA | 1 | 2026-10-14 |
| 172.67.156.2 United States · Cloudflare, Inc. | c2 | TXT | 1 | 2026-10-14 |
| 104.21.0.216 United States · Cloudflare, Inc. | exploit | LIVE | 1 | 2026-10-14 |
| 172.67.128.80 United States · Cloudflare, Inc. | exploit | LIVE | 1 | 2026-10-14 |
| 104.21.72.253 United States · Cloudflare, Inc. | c2 | TXT | 1 | 2026-10-14 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free