huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,480
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 208.77.246.91 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.89 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.87 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.4 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.88 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.36 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.3 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.1 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.43 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.42 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.246.44 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.140 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.14 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.139 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.137 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.132 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.134 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.138 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.121 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.130 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.131 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.129 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.120 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.122 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.136 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.13 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.133 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.135 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.4 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.12 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.11 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 208.77.244.119 United States · Railway | exposed-secret | TXT | 1 | 2026-11-05 |
| 200.11.121.4 Brazil · D S CUPERTINO SERVICOS DE HOSPEDAGEM NA INTERNET | exposed-secret | TXT | 1 | 2026-11-05 |
| 202.21.47.122 India · RailTel Corporation of India Ltd. | files | BIN | 1 | 2026-11-05 |
| 200.236.233.86 Brazil · Desktop Sigmanet Comunicacao Multimidia SA | files | JSON | 1 | 2026-11-05 |
| 195.158.3.179 Uzbekistan · "Uzbektelekom" Joint Stock Company | exposed-secret | TXT | 1 | 2026-11-05 |
| 190.105.181.9 Argentina · AGUAS DEL COLORADO SAPEM | exposed-secret exploit | TXT | 2 | 2026-11-05 |
| 190.89.136.176 Brazil · TR TELECOMUNICACOES LTDA | files | JSON | 1 | 2026-11-05 |
| 186.233.204.5 Brazil · CARRARO, HAINOSZ & CIA LTDA - ME | exposed-secret | TXT | 1 | 2026-11-05 |
| 186.19.126.85 Argentina · Telecentro S.A. | files | BIN | 1 | 2026-11-05 |
| 185.28.175.150 United States · Newserverlife LLC | exposed-secret | TXT | 1 | 2026-11-05 |
| 185.227.183.5 Cyprus · DURU INTERNET VE BILISIM TEKNOLOJILERI SANAYI TICARET LIMITED SIRKETI | exposed-secret | TXT | 1 | 2026-11-05 |
| 185.170.12.148 France · Groupe LWS SARL | exposed-secret | TXT, ENV, JSON | 5 | 2026-11-05 |
| 185.145.43.183 Spain · Spotting Brands Technologies S.L. | exposed-secret | TXT | 1 | 2026-11-05 |
| 125.78.242.26 China · Chinanet | malware pe-binary | PE, BIN, RAR, TXT | 6 | 2026-11-05 |
| 182.92.243.166 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT, ENV, JSON | 5 | 2026-11-05 |
| 182.74.206.194 India · Bharti Airtel Limited | files | BIN | 1 | 2026-11-05 |
| 180.93.130.239 Vietnam · Sai gon Postel Corporation | files | BIN, ENV, JSON, PHP | 5 | 2026-11-05 |
| 176.65.132.7 The Netherlands · Pfcloud UG (haftungsbeschrankt) | malware tsunami c2 exposed-secret | ELF, DZ, SH, TXT | 8 | 2026-11-05 |
| 176.236.154.154 Turkey · Superonline Iletisim Hizmetleri A.S. | files | BIN | 1 | 2026-11-05 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free