huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,440
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 134.122.43.202 Canada · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 216.144.249.201 United States · Limestone Networks, Inc. | files | JSON | 1 | 2026-10-06 |
| 94.136.186.73 India · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 123.56.247.81 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | ENV, JSON, PHP, TXT | 4 | 2026-10-06 |
| 158.94.209.42 The Netherlands · Omegatech LTD | exposed-secret | ENV | 1 | 2026-10-06 |
| 8.129.8.1 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-10-06 |
| 157.173.115.165 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 119.205.179.217 South Korea · Korea Telecom | files | PHP | 1 | 2026-10-06 |
| 43.228.157.73 Singapore · Ghosty Networks LLC | tunnel | JSON | 1 | 2026-10-06 |
| 108.58.121.94 United States · Cablevision Systems Corp. | exposed-secret | JSON, PHP | 2 | 2026-10-06 |
| 198.54.117.242 United States · Namecheap, Inc. | tunnel | COM, NET | 2 | 2026-10-06 |
| 161.35.67.250 Germany · DigitalOcean, LLC | exposed-secret forced-loot | TXT | 1 | 2026-10-06 |
| 185.151.30.191 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-10-06 |
| 196.3.100.162 MZ · Eduardo Mondlane University | exposed-secret | ENV | 1 | 2026-10-06 |
| 119.29.223.27 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 31.57.158.71 Latvia · CGI GLOBAL LIMITED | exposed-secret | TXT, PHP, ENV, JSON | 29 | 2026-10-06 |
| 64.71.34.107 United States · Ntirety, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 213.136.93.164 France · Contabo GmbH | exploit exposed-secret tunnel | JS, OLD | 3 | 2026-10-06 |
| 192.145.234.101 United States · InMotion Hosting, Inc. | files | PHP | 1 | 2026-10-06 |
| 34.240.189.130 Ireland · Amazon.com, Inc. | files | JSON | 1 | 2026-10-06 |
| 64.71.34.27 United States · Ntirety, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 66.97.37.52 United States · Dattatec.com | files | PHP | 1 | 2026-10-06 |
| 52.209.216.163 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 92.42.134.120 Russia · Limited Company Digital channel | malware mozi elf-binary | 1 | 2026-10-06 | |
| 42.230.205.25 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 60.23.235.214 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-06 |
| 27.21.24.136 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 115.49.77.201 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 182.117.30.4 China · CHINA UNICOM China169 Backbone | malware elf-binary | ELF | 1 | 2026-10-06 |
| 125.47.92.67 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 182.53.98.93 Thailand · TOT Public Company Limited | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 105.225.183.47 South Africa · Telkom SA Ltd. | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 60.23.238.24 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-06 |
| 1.57.109.163 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 190.102.43.133 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-06 |
| 190.102.43.41 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-06 |
| 190.102.42.253 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT, JSON, PHP | 6 | 2026-10-06 |
| 190.102.42.78 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 1 | 2026-10-06 |
| 34.93.43.253 India · Google LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 13.140.130.141 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 172.66.47.132 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-06 |
| 172.66.44.124 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-06 |
| 104.21.26.238 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-06 |
| 198.187.29.212 United States · Namecheap, Inc. | files | COM | 1 | 2026-10-06 |
| 212.80.205.63 Israel · O.M.C. COMPUTERS & COMMUNICATIONS LTD | files | 1 | 2026-10-06 | |
| 27.210.89.227 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 148.81.25.35 Poland · NAUKOWA I AKADEMICKA SIEC KOMPUTEROWA - PANSTWOWY INSTYTUT BADAWCZY | files | HTML | 1 | 2026-10-06 |
| 104.26.15.180 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-06 |
| 172.67.69.174 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-06 |
| 104.26.14.180 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free