huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 14.153.235.161 China · Chinanet | exposed-secret | TXT | 1 | 2026-10-04 |
| 14.139.158.118 India · National Knowledge Network | exposed-secret | TXT | 2 | 2026-10-04 |
| 67.207.81.22 United States · DigitalOcean, LLC | files | COM | 1 | 2026-10-04 |
| 104.21.92.241 United States · Cloudflare, Inc. | files | FIT, MSI | 2 | 2026-10-04 |
| 172.67.200.33 United States · Cloudflare, Inc. | files | FIT, MSI | 2 | 2026-10-04 |
| 172.86.118.111 United States · RouterHosting LLC | exposed-secret exploit c2 malware | PY, LOG, TXT, PHP | 38 | 2026-10-04 |
| 61.168.141.86 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-04 | |
| 89.185.82.24 North Macedonia · GLOBAL CONNECTIVITY SOLUTIONS LLP | malware elf-binary | ELF, TXT, SH | 9 | 2026-10-04 |
| 172.67.156.188 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-04 |
| 172.67.189.196 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-04 |
| 104.21.41.66 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-04 |
| 172.67.156.137 United States · Cloudflare, Inc. | files | PICS | 1 | 2026-10-04 |
| 104.21.8.32 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-04 |
| 104.21.7.236 United States · Cloudflare, Inc. | files | PICS | 1 | 2026-10-04 |
| 194.113.194.39 United States · Kamatera, Inc. | exposed-secret | TXT | 1 | 2026-10-03 |
| 14.49.180.212 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-03 |
| 103.180.118.21 Indonesia · PT Persada Data Multimedia | files | COM | 1 | 2026-10-03 |
| 51.144.45.141 The Netherlands · Microsoft Corporation | malware exploit exposed-secret webshell | PS1, JAR, PE, ZIP | 22 | 2026-10-03 |
| 31.56.209.99 The Netherlands · SWISSNET LLC | files | COM | 1 | 2026-10-03 |
| 47.245.13.45 United States · Alibaba (US) Technology Co., Ltd. | files | CN | 1 | 2026-10-03 |
| 185.165.170.9 Iceland · FlokiNET ehf | exposed-secret tunnel | NET | 1 | 2026-10-03 |
| 104.21.79.136 United States · Cloudflare, Inc. | files | NET | 1 | 2026-10-03 |
| 185.27.134.57 United Kingdom · Wildcard UK Limited | files | TXT | 1 | 2026-10-03 |
| 104.21.20.156 United States · Cloudflare, Inc. | files | NET | 1 | 2026-10-03 |
| 172.67.193.44 United States · Cloudflare, Inc. | files | NET | 1 | 2026-10-03 |
| 172.67.145.191 United States · Cloudflare, Inc. | files | NET | 1 | 2026-10-03 |
| 172.67.154.5 United States · Cloudflare, Inc. | ioc-match | ZIP | 1 | 2026-10-03 |
| 104.21.13.4 United States · Cloudflare, Inc. | ioc-match | ZIP | 1 | 2026-10-03 |
| 128.241.235.196 United States · Tianfeng (Hong Kong) Communications Limited | exploit | JAR, XML | 2 | 2026-10-03 |
| 5.188.230.16 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, LIFE, SH | 4 | 2026-10-03 |
| 61.107.2.121 South Korea · DREAMLINE CO. | coinminer malware tunnel | TXT | 1 | 2026-10-03 |
| 16.59.141.234 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-03 |
| 74.63.223.161 United States · Limestone Networks, Inc. | exposed-secret | TXT | 1 | 2026-10-03 |
| 105.30.59.90 MU · SEACOM Limited | files | BIN | 1 | 2026-10-03 |
| 3.107.75.193 Australia · Amazon.com, Inc. | exposed-secret | ONLINE | 1 | 2026-10-03 |
| 57.150.26.193 United States · Microsoft Corporation | files | BIN | 1 | 2026-10-03 |
| 57.150.26.1 United States · Microsoft Corporation | files | BIN | 1 | 2026-10-03 |
| 57.150.1.1 United States · Microsoft Corporation | files | BIN | 1 | 2026-10-03 |
| 43.163.124.78 Singapore · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret malware meterpreter | TXT, ELF, MD, PY | 81 | 2026-10-03 |
| 160.250.204.160 India · YOTTA NETWORK SERVICES PRIVATE LIMITED | files | COM | 3 | 2026-10-03 |
| 155.138.162.205 United States · The Constant Company, LLC | exposed-secret | INFO | 1 | 2026-10-03 |
| 217.60.102.5 United States · HostSNAP LLC | ioc-match | TXT | 1 | 2026-10-03 |
| 209.99.188.155 Switzerland · SKN Subnet & Telecom Ltd | exposed-secret malware mozi exploit | TXT, SH, PY, JSON | 347 | 2026-10-02 |
| 192.144.156.124 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 192.144.132.223 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 168.205.126.122 Brazil · BRASIL DIGITAL SERVICOS DE INFORMATICA E COMERCIO | files | JSON | 1 | 2026-10-02 |
| 54.194.162.25 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-02 |
| 192.144.239.234 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 192.144.167.63 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 54.193.40.248 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-02 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free