huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,035
hosts
112,874
files
86
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 45.207.202.207 Seychelles · FASTNET DATA INC | exposed-secret | CAM | 1 | 2026-10-22 |
| 102.165.46.48 South Africa · Tyna Host - Datacenter no Brasil | files | TXT | 1 | 2026-10-22 |
| 104.21.40.198 United States · Cloudflare, Inc. | files | CC | 1 | 2026-10-22 |
| 172.67.188.72 United States · Cloudflare, Inc. | files | CC | 1 | 2026-10-22 |
| 82.165.211.15 France · IONOS SE | files | CC | 1 | 2026-10-22 |
| 172.67.190.36 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-22 |
| 149.88.91.157 Hong Kong · FASTNET DATA INC | files | CAM | 1 | 2026-10-22 |
| 154.81.37.178 United States · Turing Group Limited | files | COM, MY | 2 | 2026-10-22 |
| 104.21.10.123 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-22 |
| 172.67.173.250 United States · Cloudflare, Inc. | files | ONLINE | 1 | 2026-10-22 |
| 79.127.221.146 United States · Datacamp Limited | files | COM | 1 | 2026-10-22 |
| 104.21.96.78 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-22 |
| 104.21.30.234 United States · Cloudflare, Inc. | files | ONLINE | 1 | 2026-10-22 |
| 104.21.34.238 United States · Cloudflare, Inc. | tunnel | BEAUTY | 1 | 2026-10-22 |
| 172.67.166.85 United States · Cloudflare, Inc. | tunnel | BEAUTY | 1 | 2026-10-22 |
| 216.225.196.120 United States · IONOS SE | exposed-secret tunnel | CC | 1 | 2026-10-22 |
| 172.67.135.105 United States · Cloudflare, Inc. | files | ONLINE | 1 | 2026-10-22 |
| 216.225.196.71 United States · IONOS SE | files | COM | 3 | 2026-10-22 |
| 104.21.86.4 United States · Cloudflare, Inc. | ioc-match | 1 | 2026-10-22 | |
| 104.21.6.224 United States · Cloudflare, Inc. | files | ONLINE | 1 | 2026-10-22 |
| 172.67.213.80 United States · Cloudflare, Inc. | ioc-match | 1 | 2026-10-22 | |
| 79.127.237.132 United Kingdom · Datacamp Limited | webshell | PS1, XYZ | 2 | 2026-10-22 |
| 92.118.112.100 United States · GLOBAL CONNECTIVITY SOLUTIONS LLP | malware elf-binary | ELF, TXT | 2 | 2026-10-22 |
| 103.87.194.109 Pakistan · Orbit Internet Service Provider Pvt Ltd | files | JSON | 1 | 2026-10-22 |
| 122.10.17.49 Hong Kong · DingFeng XinHui(HongKong) Technology Limited | exposed-secret | TXT | 1 | 2026-10-22 |
| 162.240.28.193 United States · Unified Layer | files | PHP | 1 | 2026-10-22 |
| 104.21.78.50 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-22 |
| 172.67.216.239 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-22 |
| 14.29.208.101 China · Chinanet | malware exploit elf-binary macho-binary | RS, DB, ELF, GZ | 8 | 2026-10-22 |
| 202.238.198.36 Japan · Internet Initiative Japan Inc. | exposed-secret | JP | 1 | 2026-10-22 |
| 202.238.198.224 Japan · Internet Initiative Japan Inc. | exposed-secret | JP | 1 | 2026-10-22 |
| 220.156.64.91 Japan · Internet Initiative Japan Inc. | exposed-secret | JP | 1 | 2026-10-22 |
| 83.143.222.4 Finland · GleSYS AB | exposed-secret exploit | PHP, FI, XML | 5 | 2026-10-22 |
| 37.27.209.157 Finland · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-10-22 |
| 185.177.72.50 France · Bucklog SARL | exposed-secret | ENV | 1 | 2026-10-22 |
| 130.12.180.89 United States · Omegatech LTD | files | BIN | 1 | 2026-10-22 |
| 208.98.38.173 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-21 |
| 212.232.23.75 Singapore · ROCKHOSTER PRIVATE LIMITED | exposed-secret exploit malware mozi | PY, LOG, TXT, BIN | 341 | 2026-10-21 |
| 91.92.43.221 Germany · DEDIK SERVICES LIMITED | malware elf-binary | ELF, SH | 6 | 2026-10-21 |
| 18.166.203.32 China · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-21 |
| 18.163.14.71 China · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-21 |
| 16.163.205.112 China · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-21 |
| 57.129.130.178 United Kingdom · OVH SAS | exposed-secret | TXT | 1 | 2026-10-21 |
| 202.6.2.96 Vietnam · Ministry of Foreign Affairs of Vietnam - MOFA | files | TXT | 1 | 2026-10-21 |
| 75.1.240.64 United States · AT&T Enterprises, LLC | malware mozi elf-binary | A | 1 | 2026-10-21 |
| 122.155.166.90 Thailand · National Telecom Public Company Limited | exposed-secret | ENV | 1 | 2026-10-21 |
| 184.23.246.145 United States · Sonic Telecom LLC | files | COM | 1 | 2026-10-21 |
| 34.117.33.233 United States · Google LLC | tunnel | APP | 2 | 2026-10-21 |
| 194.238.57.99 Sweden · NODE HOST LIMITED | exposed-secret | SKIN | 1 | 2026-10-21 |
| 93.152.220.30 Bulgaria · Cyberzone S.A. | exposed-secret | CC | 1 | 2026-10-21 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free