huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,974
hosts
106,608
files
127
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.21.80.4 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.154.68 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.147.187 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.40.152 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.14 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.139.164 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.195.66 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-10-28 |
| 104.21.21.2 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-10-28 |
| 172.67.191.247 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.95.202 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.149.27 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.198 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.193 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.198.188 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.44.107 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.66.2.162 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-28 |
| 172.67.158.168 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-28 |
| 172.67.172.85 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.16.226 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-10-28 |
| 206.209.210.20 United Kingdom · BROOKPLUS LIMITED | files | ZIP | 1 | 2026-10-28 |
| 172.67.216.70 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-10-28 |
| 104.21.14.109 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-28 |
| 92.51.2.85 Russia · Flyservers S.A. | files | TXT | 1 | 2026-10-28 |
| 129.212.239.241 Singapore · DigitalOcean, LLC | exploit | TXT | 10 | 2026-10-28 |
| 162.214.65.162 United States · Unified Layer | files | BR | 1 | 2026-10-28 |
| 155.138.208.58 United States · The Constant Company, LLC | tunnel | INFO | 1 | 2026-10-28 |
| 141.98.10.25 Lithuania · UAB Host Baltic | malware elf-binary | ELF | 2 | 2026-10-28 |
| 194.180.191.245 Moldova · MivoCloud SRL | files | 1 | 2026-10-28 | |
| 2.27.63.78 Germany · Kyonix Networks Limited | files | JS | 2 | 2026-10-28 |
| 82.163.73.247 United Kingdom · UK-2 Limited | files | PHP | 1 | 2026-10-28 |
| 23.94.145.195 United States · DEDIK SERVICES LIMITED | files | DZ | 1 | 2026-10-28 |
| 172.67.201.72 United States · Cloudflare, Inc. | files | 1 | 2026-10-28 | |
| 104.21.60.204 United States · Cloudflare, Inc. | files | 1 | 2026-10-28 | |
| 185.27.134.108 United Kingdom · Wildcard UK Limited | files | COM | 1 | 2026-10-28 |
| 91.224.92.16 United Kingdom · UAB Host Baltic | exposed-secret malware c2 exploit | SH, TXT, ELF, JAVA | 62 | 2026-10-28 |
| 162.159.130.234 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-28 |
| 172.67.134.119 United States · Cloudflare, Inc. | files | VIP | 1 | 2026-10-28 |
| 162.159.134.234 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-28 |
| 162.159.133.234 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-28 |
| 104.21.25.185 United States · Cloudflare, Inc. | files | VIP | 1 | 2026-10-28 |
| 150.171.109.211 United States · Microsoft Corporation | tunnel | NET | 1 | 2026-10-28 |
| 148.72.244.125 United States · GoDaddy.com, LLC | files | ZIP | 1 | 2026-10-28 |
| 104.17.203.31 United States · Cloudflare, Inc. | files | 1 | 2026-10-28 | |
| 104.17.202.31 United States · Cloudflare, Inc. | files | 1 | 2026-10-28 | |
| 104.17.204.31 United States · Cloudflare, Inc. | files | 1 | 2026-10-28 | |
| 35.214.9.149 United Kingdom · Google LLC | files | COM | 1 | 2026-10-28 |
| 18.164.68.78 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-28 |
| 18.164.68.3 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-28 |
| 18.164.68.4 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-28 |
| 103.252.72.150 Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | coinminer malware elf-binary tunnel | LOG, ELF, GZ, PY | 6 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free