huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,067
hosts
115,938
files
86
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 45.178.182.227 Brazil · AbsamHost Internet Data Center | exposed-secret | PHP | 1 | 2026-10-06 |
| 34.97.81.130 Japan · Google LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 54.39.193.115 Canada · OVH SAS | files | PHP | 1 | 2026-10-06 |
| 172.67.168.154 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-06 |
| 172.67.198.196 United States · Cloudflare, Inc. | c2 | TXT | 1 | 2026-10-06 |
| 104.21.36.194 United States · Cloudflare, Inc. | c2 | TXT | 1 | 2026-10-06 |
| 162.62.82.128 Brazil · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV, TXT | 2 | 2026-10-06 |
| 172.67.150.201 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 104.21.0.90 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 83.142.235.99 Ukraine · Sky Vision Ukraine Ltd | exposed-secret | JSON, PHP | 2 | 2026-10-06 |
| 83.142.233.203 Ukraine · Sky Vision Ukraine Ltd | exposed-secret | ENV | 1 | 2026-10-06 |
| 83.142.234.66 Ukraine · Sky Vision Ukraine Ltd | malware mozi pe-binary | PE, ZIP, RAR, BAT | 27 | 2026-10-06 |
| 178.16.52.204 Germany · Omegatech LTD | files | APK | 2 | 2026-10-06 |
| 92.255.111.71 Russia · JSC "TIMEWEB" | files | IO | 1 | 2026-10-06 |
| 64.239.123.1 United States · Amazon.com, Inc. | files | APP | 1 | 2026-10-06 |
| 45.76.255.77 United States · The Constant Company, LLC | files | COM | 1 | 2026-10-06 |
| 64.239.123.193 United States · Amazon.com, Inc. | files | APP | 1 | 2026-10-06 |
| 64.239.109.1 United States · Amazon.com, Inc. | files | APP | 1 | 2026-10-06 |
| 202.152.201.166 Indonesia · PT. Eka Mas Republik | malware mozi | PHP, BAT | 3 | 2026-10-06 |
| 103.168.19.221 India · Netclues Technologies Private Limited | exposed-secret exploit tunnel | TXT, JS | 83 | 2026-10-06 |
| 38.60.203.31 United States · Kaopu Cloud HK Limited | exposed-secret | JSON | 1 | 2026-10-06 |
| 160.202.47.241 Hong Kong · HanMing HK Limited | exposed-secret forced-loot | TXT | 1 | 2026-10-06 |
| 98.98.240.47 United Arab Emirates · Zenlayer Inc | exposed-secret | TXT | 1 | 2026-10-06 |
| 4.193.248.52 Singapore · Microsoft Corporation | exposed-secret tunnel | SH, TXT | 2 | 2026-10-06 |
| 103.124.95.33 Vietnam · NhanHoa Software company | exposed-secret | PHP | 2 | 2026-10-06 |
| 51.48.235.114 Spain · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 218.204.160.114 China · China Mobile Communications Corporation | files | PHP | 1 | 2026-10-06 |
| 119.59.103.186 Thailand · Metrabyte Co.,Ltd | malware tsunami mozi exposed-secret | HTM, DOWNLO, HTML, PHP | 16 | 2026-10-06 |
| 42.193.181.34 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV | 1 | 2026-10-06 |
| 49.124.205.169 Malaysia · DiGi Telecommunications Sdn Bhd., Digi Internet Exchange | files | BIN | 1 | 2026-10-06 |
| 158.51.126.17 United States · Hostodo | exposed-secret | TXT | 1 | 2026-10-06 |
| 183.110.116.65 South Korea · Korea Telecom | files | BIN | 1 | 2026-10-06 |
| 177.104.171.149 Brazil · EVEO Servicos de Internet Ltda. | files | BIN | 1 | 2026-10-06 |
| 152.52.221.30 India · Bharti Airtel Limited | files | BIN | 1 | 2026-10-06 |
| 178.132.198.200 Spain · FONSECA ALVES TECNOLOGIA LTDA | malware exploit elf-binary | ELF, HTML, SH, SQL | 14 | 2026-10-06 |
| 222.186.57.10 China · Chinanet | exposed-secret coinminer exploit malware | TXT, ZIP | 2 | 2026-10-06 |
| 202.188.47.41 Malaysia · TM TECHNOLOGY SERVICES SDN BHD | malware pe-binary | PE, BK, YAML | 4 | 2026-10-06 |
| 167.172.229.118 United States · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 220.154.131.133 China · China Telecom | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 64.227.160.35 India · DigitalOcean, LLC | exposed-secret | TXT, ENV | 3 | 2026-10-06 |
| 130.12.180.107 United States · Omegatech LTD | files | ZIP | 2 | 2026-10-06 |
| 105.29.165.227 MU · SEACOM Limited | exposed-secret | ENV | 1 | 2026-10-06 |
| 57.128.224.152 Poland · OVH SAS | exposed-secret | ENV | 1 | 2026-10-06 |
| 116.193.190.62 Indonesia · PT Cloud Hosting Indonesia | files | JSON | 1 | 2026-10-06 |
| 223.17.5.126 Hong Kong · HGC Global Communications Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 110.232.90.108 Indonesia · PT. Media Antar Nusa | exposed-secret | JSON | 1 | 2026-10-06 |
| 103.250.10.115 Singapore · Cloud Host Pte Ltd | exposed-secret | TXT, JSON | 4 | 2026-10-06 |
| 171.100.156.38 Thailand · TRUE INTERNET CORPORATION CO. LTD. | files | BIN | 1 | 2026-10-06 |
| 156.67.29.18 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 122.96.151.110 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free