huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,053
hosts
114,986
files
104
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 16.15.212.248 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 16.15.183.102 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 176.100.37.23 Germany · Florian Kolb | files | TXT | 1 | 2026-10-18 |
| 217.216.79.49 India · Contabo Asia Private Limited | exposed-secret tunnel | TXT | 1 | 2026-10-18 |
| 179.43.175.2 Panama · Private Layer INC | exploit malware webshell exposed-secret | CMD, PE, PS1 | 40 | 2026-10-18 |
| 139.144.26.14 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-18 |
| 8.210.12.68 Hong Kong · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-18 |
| 38.9.96.215 United States · Cogent Communications | malware c2 havoc mozi | ELF, SH, LOG | 15 | 2026-10-18 |
| 36.139.216.235 China · China Mobile | exposed-secret | TXT | 1 | 2026-10-18 |
| 192.252.178.174 United States · CTG Server Limited | files | 1 | 2026-10-18 | |
| 16.15.244.242 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 16.15.167.108 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 16.15.253.64 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-18 |
| 185.27.134.118 United Kingdom · Wildcard UK Limited | files | COM, PDF | 2 | 2026-10-18 |
| 154.198.163.77 Seychelles · Scloud Pte Ltd | exposed-secret | HTML | 1 | 2026-10-18 |
| 8.209.218.248 Singapore · Alibaba (US) Technology Co., Ltd. | files | CN | 1 | 2026-10-18 |
| 107.174.19.11 United States · Nexeon Technologies, Inc. | files | 1 | 2026-10-18 | |
| 185.27.134.215 United Kingdom · Wildcard UK Limited | files | JE | 1 | 2026-10-18 |
| 37.72.140.179 Russia · GALEON LLC | exploit exposed-secret | 1 | 2026-10-18 | |
| 193.24.123.177 Russia · PROSPERO OOO | exploit exposed-secret | 1 | 2026-10-18 | |
| 185.27.134.117 United Kingdom · Wildcard UK Limited | files | PHP, JE | 4 | 2026-10-18 |
| 94.26.0.118 Bulgaria · Alferov Aleksey Aleksandrovich | files | BIN, TXT | 3 | 2026-10-18 |
| 195.63.130.47 The Netherlands · SERVERS TECH FZCO | files | BIN | 1 | 2026-10-18 |
| 172.66.45.14 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-18 |
| 172.66.46.242 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-18 |
| 92.243.65.235 Croatia · Akton d.o.o. | exposed-secret | ENV, TXT | 2 | 2026-10-17 |
| 151.236.19.21 United Kingdom · Syntura Group Limited | exposed-secret | ENV, TXT | 2 | 2026-10-17 |
| 46.183.185.97 North Macedonia · Akton d.o.o. | exposed-secret | ENV, TXT | 2 | 2026-10-17 |
| 103.57.250.208 Colombia · EDGEUNO S.A.S | exposed-secret | ENV, TXT | 2 | 2026-10-17 |
| 47.207.102.160 United States · Frontier Communications of America, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-17 |
| 44.203.240.247 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-17 |
| 209.200.104.81 United States · NewtekOne, Inc. | exposed-secret | PHP | 1 | 2026-10-17 |
| 18.133.49.252 United Kingdom · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-17 |
| 18.130.179.73 United Kingdom · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-17 |
| 132.247.150.3 Mexico · Universidad Nacional Autonoma de Mexico | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-17 |
| 167.0.155.153 Colombia · COLOMBIA TELECOMUNICACIONES S.A. ESP | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-17 |
| 109.163.244.38 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT | 1 | 2026-10-17 |
| 186.31.142.91 Colombia · ETB - Colombia | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-17 |
| 190.90.208.107 Colombia · INTERNEXA S.A. E.S.P | exposed-secret | ENV, TXT | 2 | 2026-10-17 |
| 132.247.149.4 Mexico · Universidad Nacional Autonoma de Mexico | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-17 |
| 200.25.27.4 Colombia · EDGEUNO S.A.S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-17 |
| 177.224.243.68 Mexico · Mega Cable, S.A. de C.V. | exposed-secret | TXT | 1 | 2026-10-17 |
| 151.243.11.240 Germany · LLC VASH KREDIT BANK | exploit malware elf-binary | LOG, ELF | 3 | 2026-10-17 |
| 92.52.196.11 Hungary · Pro-M Zrt. | exposed-secret | TXT | 1 | 2026-10-17 |
| 106.55.34.199 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret ioc-match | TXT | 2 | 2026-10-17 |
| 121.254.168.25 South Korea · LG DACOM Corporation | files | KR | 1 | 2026-10-17 |
| 194.226.98.121 Russia · JSC Avantel | c2 exposed-secret | JSON | 1 | 2026-10-17 |
| 43.162.93.46 United States · Shenzhen Tencent Computer Systems Company Limited | files | TXT | 1 | 2026-10-17 |
| 104.21.28.153 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-17 |
| 172.67.170.229 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-17 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free