huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 102.165.46.46 South Africa · Tyna Host - Datacenter no Brasil | files | TXT | 1 | 2026-10-23 |
| 104.21.49.116 United States · Cloudflare, Inc. | ioc-match | 1 | 2026-10-23 | |
| 172.67.162.119 United States · Cloudflare, Inc. | ioc-match | 1 | 2026-10-23 | |
| 212.102.46.118 United States · Datacamp Limited | files | COM | 1 | 2026-10-23 |
| 79.127.237.104 United Kingdom · Datacamp Limited | webshell | PS1, XYZ | 2 | 2026-10-23 |
| 172.67.213.21 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-10-23 |
| 104.21.69.205 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-10-23 |
| 91.92.40.28 The Netherlands · TechTies Inc. | exposed-secret | 1 | 2026-10-23 | |
| 185.133.35.21 Brazil · LINKED STORE BRASIL CRIACAO E DESENVOL DE SOFTWARE | tunnel | COM | 1 | 2026-10-23 |
| 185.133.35.22 Brazil · LINKED STORE BRASIL CRIACAO E DESENVOL DE SOFTWARE | tunnel | COM | 1 | 2026-10-23 |
| 104.103.159.41 United States · Akamai Technologies, Inc. | files | TXT | 1 | 2026-10-23 |
| 70.39.95.20 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-23 |
| 104.21.63.101 United States · Cloudflare, Inc. | exploit | APP | 1 | 2026-10-22 |
| 172.67.170.139 United States · Cloudflare, Inc. | exploit | APP | 1 | 2026-10-22 |
| 45.61.138.81 United States · BL Networks | files | INFO | 1 | 2026-10-22 |
| 203.23.179.12 Germany · GSL Networks Pty LTD | ioc-match | BIN | 1 | 2026-10-22 |
| 203.23.179.10 Germany · GSL Networks Pty LTD | ioc-match | BIN | 1 | 2026-10-22 |
| 159.203.115.164 United States · DigitalOcean, LLC | exposed-secret c2 webshell malware | PY, SH, JS, TS | 459 | 2026-10-22 |
| 165.232.41.141 United Kingdom · DigitalOcean, LLC | exposed-secret exploit malware mozi | SH, TXT, GZ, JSON | 30 | 2026-10-22 |
| 51.159.78.191 France · Scaleway SAS | exposed-secret | TXT | 1 | 2026-10-22 |
| 54.169.109.7 Singapore · Amazon.com, Inc. | exposed-secret exploit malware mozi | LOG, PY, OVPN, TXT | 55 | 2026-10-22 |
| 45.198.224.253 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 45.198.224.194 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 45.198.224.199 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 45.198.224.184 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 102.210.149.166 Kenya · THE KONZA TECHNOPOLIS DEVELOPMENT AUTHORITY | exposed-secret | TXT | 1 | 2026-10-22 |
| 157.90.175.209 Germany · Hetzner Online GmbH | exploit exposed-secret mirror | CBBBDD, JSP | 3 | 2026-10-22 |
| 208.115.214.174 United States · Limestone Networks, Inc. | files | TXT | 1 | 2026-10-22 |
| 18.208.28.97 United States · Amazon.com, Inc. | files | JPG, TXT | 5 | 2026-10-22 |
| 184.154.107.45 United States · Internap Holding LLC | exploit exposed-secret mirror | CBBBDD, JSP | 3 | 2026-10-22 |
| 104.26.10.2 United States · Cloudflare, Inc. | files | PNG | 1 | 2026-10-22 |
| 172.67.72.163 United States · Cloudflare, Inc. | files | PNG | 2 | 2026-10-22 |
| 104.26.6.5 United States · Cloudflare, Inc. | files | PNG | 2 | 2026-10-22 |
| 172.67.70.180 United States · Cloudflare, Inc. | files | PNG | 1 | 2026-10-22 |
| 104.26.7.5 United States · Cloudflare, Inc. | files | PNG | 2 | 2026-10-22 |
| 104.26.11.2 United States · Cloudflare, Inc. | files | PNG | 1 | 2026-10-22 |
| 20.124.214.250 United States · Microsoft Corporation | files | PS1, COM | 3 | 2026-10-22 |
| 172.67.211.156 United States · Cloudflare, Inc. | exploit | COM | 1 | 2026-10-22 |
| 104.21.53.99 United States · Cloudflare, Inc. | exploit | COM | 1 | 2026-10-22 |
| 172.67.196.11 United States · Cloudflare, Inc. | files | APP | 1 | 2026-10-22 |
| 104.21.92.165 United States · Cloudflare, Inc. | files | APP | 1 | 2026-10-22 |
| 139.59.90.109 India · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-10-22 |
| 117.120.61.102 Hong Kong · POWER LINE (HK) CO., LIMITED | files | CC | 1 | 2026-10-22 |
| 172.67.174.74 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-22 |
| 91.92.242.215 The Netherlands · Omegatech LTD | files | COM | 1 | 2026-10-22 |
| 117.120.61.103 Hong Kong · POWER LINE (HK) CO., LIMITED | files | CC | 1 | 2026-10-22 |
| 117.120.61.101 Hong Kong · POWER LINE (HK) CO., LIMITED | files | CC | 1 | 2026-10-22 |
| 135.130.197.97 United States · Microsoft Corporation | ioc-match | MSI | 1 | 2026-10-22 |
| 91.92.34.67 Germany · DEDIK SERVICES LIMITED | files | DZ | 1 | 2026-10-22 |
| 45.207.202.207 Seychelles · FASTNET DATA INC | exposed-secret | CAM | 1 | 2026-10-22 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free