huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,122
hosts
116,992
files
73
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 196.3.100.162 MZ · Eduardo Mondlane University | exposed-secret | ENV | 1 | 2026-10-06 |
| 119.29.223.27 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 31.57.158.71 Latvia · CGI GLOBAL LIMITED | exposed-secret | TXT, PHP, ENV, JSON | 29 | 2026-10-06 |
| 64.71.34.107 United States · Ntirety, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 213.136.93.164 France · Contabo GmbH | exploit exposed-secret tunnel | JS, OLD | 3 | 2026-10-06 |
| 192.145.234.101 United States · InMotion Hosting, Inc. | files | PHP | 1 | 2026-10-06 |
| 34.240.189.130 Ireland · Amazon.com, Inc. | files | JSON | 1 | 2026-10-06 |
| 64.71.34.27 United States · Ntirety, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 66.97.37.52 United States · Dattatec.com | files | PHP | 1 | 2026-10-06 |
| 52.209.216.163 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 92.42.134.120 Russia · Limited Company Digital channel | malware mozi elf-binary | 1 | 2026-10-06 | |
| 42.230.205.25 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 60.23.235.214 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-06 |
| 27.21.24.136 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 115.49.77.201 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 182.117.30.4 China · CHINA UNICOM China169 Backbone | malware elf-binary | ELF | 1 | 2026-10-06 |
| 125.47.92.67 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 182.53.98.93 Thailand · TOT Public Company Limited | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 105.225.183.47 South Africa · Telkom SA Ltd. | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 60.23.238.24 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-06 |
| 1.57.109.163 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 190.102.43.133 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-06 |
| 190.102.43.41 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-06 |
| 190.102.42.253 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT, JSON, PHP | 6 | 2026-10-06 |
| 190.102.42.78 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 1 | 2026-10-06 |
| 34.93.43.253 India · Google LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 13.140.130.141 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 172.66.47.132 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-06 |
| 172.66.44.124 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-06 |
| 104.21.26.238 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-06 |
| 198.187.29.212 United States · Namecheap, Inc. | files | COM | 1 | 2026-10-06 |
| 212.80.205.63 Israel · O.M.C. COMPUTERS & COMMUNICATIONS LTD | files | 1 | 2026-10-06 | |
| 27.210.89.227 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 148.81.25.35 Poland · NAUKOWA I AKADEMICKA SIEC KOMPUTEROWA - PANSTWOWY INSTYTUT BADAWCZY | files | HTML | 1 | 2026-10-06 |
| 104.26.15.180 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-06 |
| 172.67.69.174 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-06 |
| 104.26.14.180 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-06 |
| 104.21.67.62 United States · Cloudflare, Inc. | exposed-secret ioc-match | COM | 1 | 2026-10-06 |
| 172.67.214.253 United States · Cloudflare, Inc. | exposed-secret ioc-match | COM | 1 | 2026-10-06 |
| 172.66.44.244 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-06 |
| 172.66.47.12 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-06 |
| 190.102.43.66 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-05 |
| 190.102.43.117 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 1 | 2026-10-05 |
| 190.102.43.74 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-05 |
| 190.102.40.194 Brazil · Servicos de Infraestrutura e Datacenter | exploit | TXT, PHP | 3 | 2026-10-05 |
| 190.102.43.63 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 2 | 2026-10-05 |
| 190.102.42.133 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-05 |
| 190.102.42.202 Brazil · Servicos de Infraestrutura e Datacenter | files | PHP | 1 | 2026-10-05 |
| 190.102.42.151 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 1 | 2026-10-05 |
| 190.102.41.117 Brazil · Servicos de Infraestrutura e Datacenter | files | RAR | 3 | 2026-10-05 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free