huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 195.54.170.59 United Arab Emirates · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-10-02 |
| 99.80.107.75 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-02 |
| 132.226.59.218 United States · Oracle Corporation | files | COM | 1 | 2026-10-02 |
| 156.238.123.182 Seychelles · Zillion Network Inc. | files | 1 | 2026-10-02 | |
| 135.148.3.41 United States · OVH SAS | exploit | COM | 1 | 2026-10-02 |
| 51.79.199.99 Canada · OVH SAS | exposed-secret | INFO | 1 | 2026-10-02 |
| 79.139.57.157 Hungary · Rackforest Zrt. | c2 | TXT | 1 | 2026-10-02 |
| 192.178.223.207 United States · Google LLC | files | HTML | 2 | 2026-10-02 |
| 195.133.38.218 The Netherlands · NKtelecom INC | exposed-secret | TXT | 1 | 2026-10-02 |
| 121.89.207.78 China · Hangzhou Alibaba Advertising Co.,Ltd. | files | PHP | 1 | 2026-10-02 |
| 150.241.87.134 Poland · NODE HOST LIMITED | malware elf-binary | ELF | 1 | 2026-10-02 |
| 23.27.24.138 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 23.27.24.25 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 103.224.182.250 Australia · Trellian Pty. Limited | files | CYOU | 1 | 2026-10-02 |
| 208.187.244.6 United States · Lanset America Corporation | exploit | COM | 1 | 2026-10-02 |
| 49.51.50.66 United States · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-02 |
| 104.21.77.65 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-10-02 |
| 172.67.205.34 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-10-02 |
| 129.121.75.86 United States · Oracle Corporation | exposed-secret exploit | TXT | 2 | 2026-10-02 |
| 23.27.13.88 United States · Evoxt Sdn. Bhd. | exploit exposed-secret | TXT, ENV, JSON, PHP | 8 | 2026-10-02 |
| 23.27.11.247 United States · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT | 2 | 2026-10-02 |
| 23.27.11.61 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 23.27.0.52 United States · Evoxt Sdn. Bhd. | exposed-secret | JSON | 1 | 2026-10-02 |
| 23.26.237.207 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 23.26.204.16 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 2 | 2026-10-02 |
| 23.26.204.242 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 23.26.201.213 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 23.26.204.42 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 2.57.122.202 The Netherlands · UNMANAGED LTD | exposed-secret | TXT | 2 | 2026-10-02 |
| 2.27.203.59 United States · TeraSwitch Networks Inc. | malware c2 exploit elf-binary | ELF, SH | 25 | 2026-10-02 |
| 2.50.173.45 United Arab Emirates · EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC | files | BIN | 1 | 2026-10-02 |
| 1.14.191.118 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 1.20.178.157 Thailand · TOT Public Company Limited | files | JSON | 1 | 2026-10-02 |
| 204.0.57.85 United States · Zhilian Technology CO., LTD. | ioc-match | 1 | 2026-10-02 | |
| 34.97.149.180 Japan · Google LLC | exposed-secret | COM | 3 | 2026-10-02 |
| 45.8.46.214 Romania · MAGIT'ST SRL | exposed-secret | COM | 1 | 2026-10-02 |
| 185.221.216.121 United Kingdom · Host4Geeks LLC | files | 1 | 2026-10-02 | |
| 167.235.225.192 Germany · Hetzner Online GmbH | exploit | INFO | 1 | 2026-10-02 |
| 45.115.85.92 Pakistan · Nayatel (Pvt) Ltd | files | BIN, JSON | 2 | 2026-10-02 |
| 69.46.46.16 United States · Railway | exposed-secret | TXT | 1 | 2026-10-02 |
| 190.8.176.201 Colombia · WHG Hosting Services Ltd | files | HTML | 1 | 2026-10-02 |
| 162.243.189.2 United States · DigitalOcean, LLC | ioc-match | MSI | 1 | 2026-10-02 |
| 104.21.63.203 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-10-02 |
| 172.67.147.248 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-10-02 |
| 104.21.71.181 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-10-02 |
| 172.67.150.15 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-10-02 |
| 178.16.52.154 Germany · Omegatech LTD | exposed-secret exploit malware mozi | GZ, LOG, PY, DONE | 154 | 2026-10-02 |
| 204.188.254.231 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-01 |
| 172.67.132.148 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.66.54 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free