huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.21.85.114 United States · Cloudflare, Inc. | c2 exposed-secret | LINK | 1 | 2026-10-24 |
| 172.67.197.19 United States · Cloudflare, Inc. | exposed-secret tunnel | DOWNLO | 1 | 2026-10-24 |
| 104.21.42.43 United States · Cloudflare, Inc. | exposed-secret | SARL | 1 | 2026-10-24 |
| 104.21.92.178 United States · Cloudflare, Inc. | exposed-secret tunnel | DOWNLO | 1 | 2026-10-24 |
| 104.21.83.147 United States · Cloudflare, Inc. | c2 exposed-secret tunnel | WIN | 1 | 2026-10-24 |
| 172.67.156.26 United States · Cloudflare, Inc. | exposed-secret | SARL | 1 | 2026-10-24 |
| 104.21.80.61 United States · Cloudflare, Inc. | files | SITE | 1 | 2026-10-24 |
| 172.67.177.115 United States · Cloudflare, Inc. | c2 exposed-secret tunnel | WIN | 1 | 2026-10-24 |
| 167.99.227.197 US · DigitalOcean, LLC | exploit | AES, KEY, PY | 4 | 2026-10-24 |
| 112.229.244.155 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-24 |
| 118.232.137.101 Taiwan · kbro CO. Ltd. | malware mozi elf-binary | A | 1 | 2026-10-24 |
| 172.67.205.55 United States · Cloudflare, Inc. | files | STORE | 1 | 2026-10-24 |
| 2.22.141.169 United Kingdom · Akamai Technologies, Inc. | files | TXT | 1 | 2026-10-24 |
| 104.18.37.23 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-24 |
| 172.64.150.233 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-24 |
| 43.156.240.87 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 187.110.176.65 Brazil · MHNET TELECOM | malware exposed-secret mozi exploit | LOG, PE, ZIP, TXT | 480 | 2026-10-24 |
| 151.242.30.142 South Africa · Internet Magnate (Pty) Ltd | exploit malware mozi exposed-secret | JS, ZIP, C, PY | 454 | 2026-10-23 |
| 173.165.104.61 United States · Comcast Cable Communications, LLC | exposed-secret | JSON, PHP | 2 | 2026-10-23 |
| 96.65.84.169 United States · Comcast Cable Communications, LLC | exposed-secret | JSON, PHP | 2 | 2026-10-23 |
| 196.202.110.41 Egypt · TE-AS | files | JSON | 1 | 2026-10-23 |
| 108.186.129.102 United States · PEG TECH INC | exposed-secret | TOP | 1 | 2026-10-23 |
| 31.56.19.150 Turkey · Linivo LLC | exposed-secret | TXT | 1 | 2026-10-23 |
| 45.64.216.72 India · MegaHostZone | files | COM | 1 | 2026-10-23 |
| 108.187.43.139 United States · Antbox Networks Limited | tunnel | ZIP | 2 | 2026-10-23 |
| 195.208.21.65 Russia · Autonomous Nonprofit Organisation "Russian Scientific-Research Institute for Pu | c2 exposed-secret | JSON | 1 | 2026-10-23 |
| 104.21.52.227 United States · Cloudflare, Inc. | malware mozi | STORE | 1 | 2026-10-23 |
| 153.76.163.196 Czechia | files | RU | 3 | 2026-10-23 |
| 213.219.212.83 Russia · LLC VK | files | AI | 1 | 2026-10-23 |
| 200.115.102.2 Brazil · FiberPon telecom | files | JSON | 1 | 2026-10-23 |
| 173.249.7.242 France · Contabo GmbH | exposed-secret malware elf-binary | ELF, TXT, KEY, LOG | 11 | 2026-10-23 |
| 59.125.120.125 Taiwan · Chunghwa Telecom Co., Ltd. | exposed-secret | PHP, LOCK, SH | 6 | 2026-10-23 |
| 82.180.145.166 India · Contabo Asia Private Limited | webshell exposed-secret exploit malware | PHP, TXT, PY, JSP | 50 | 2026-10-23 |
| 172.67.208.205 United States · Cloudflare, Inc. | files | ORG | 1 | 2026-10-23 |
| 104.21.23.39 United States · Cloudflare, Inc. | files | ORG | 1 | 2026-10-23 |
| 104.21.91.239 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-23 |
| 172.67.181.237 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-23 |
| 104.21.54.230 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-23 |
| 172.67.143.31 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-23 |
| 38.242.147.58 Germany · Contabo GmbH | exposed-secret forced-loot | TXT | 1 | 2026-10-23 |
| 175.100.16.246 Cambodia · VIETTEL (CAMBODIA) PTE., LTD | files | BIN | 1 | 2026-10-23 |
| 202.61.139.15 Singapore · CTG Server Limited | exposed-secret exploit malware mozi | LOG, PY, JSON, PHP | 262 | 2026-10-23 |
| 52.188.156.253 United States · Microsoft Corporation | malware exploit mozi pe-binary | PE, PS1, COM | 7 | 2026-10-23 |
| 20.60.213.65 United Arab Emirates · Microsoft Corporation | ioc-match | PS1 | 1 | 2026-10-23 |
| 45.74.61.12 United States · 69HOST LLC | files | COM | 1 | 2026-10-23 |
| 113.229.109.233 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-23 |
| 172.67.205.105 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-23 |
| 104.21.61.29 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-23 |
| 217.60.242.76 Turkey | exposed-secret | 1 | 2026-10-23 | |
| 154.219.98.61 Hong Kong · cognetcloud INC | exploit exposed-secret webshell tunnel | PY, MD, JAR, SH | 14 | 2026-10-23 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free