huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,062
hosts
115,913
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 177.224.243.68 Mexico · Mega Cable, S.A. de C.V. | exposed-secret | TXT | 1 | 2026-10-17 |
| 151.243.11.240 Germany · LLC VASH KREDIT BANK | exploit malware elf-binary | LOG, ELF | 3 | 2026-10-17 |
| 92.52.196.11 Hungary · Pro-M Zrt. | exposed-secret | TXT | 1 | 2026-10-17 |
| 106.55.34.199 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret ioc-match | TXT | 2 | 2026-10-17 |
| 121.254.168.25 South Korea · LG DACOM Corporation | files | KR | 1 | 2026-10-17 |
| 194.226.98.121 Russia · JSC Avantel | c2 exposed-secret | JSON | 1 | 2026-10-17 |
| 43.162.93.46 United States · Shenzhen Tencent Computer Systems Company Limited | files | TXT | 1 | 2026-10-17 |
| 104.21.28.153 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-17 |
| 172.67.170.229 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-17 |
| 42.112.213.93 Vietnam · FPT Telecom Company | exposed-secret exploit | TXT | 2 | 2026-10-17 |
| 137.116.136.69 Singapore · Microsoft Corporation | exploit exposed-secret tunnel | JSON, ZIP, GZ, MD | 8 | 2026-10-17 |
| 165.154.6.188 Hong Kong · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | exposed-secret | TXT | 1 | 2026-10-17 |
| 177.3.40.23 United States · Hong Kong Communications International Co., Limited | exposed-secret | TXT | 1 | 2026-10-17 |
| 129.226.150.240 Singapore · Shenzhen Tencent Computer Systems Company Limited | files | ZIP | 1 | 2026-10-17 |
| 163.172.71.54 France · Scaleway SAS | exposed-secret | TXT | 1 | 2026-10-17 |
| 47.111.13.100 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-17 |
| 47.148.181.190 United States · Frontier Communications of America, Inc. | exposed-secret | TXT | 1 | 2026-10-17 |
| 16.15.237.245 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 16.15.228.76 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 16.15.183.61 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 16.182.67.2 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 16.15.247.141 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 16.15.228.170 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 45.130.165.196 Singapore · Kamatera, Inc. | files | LOG, PY | 3 | 2026-10-17 |
| 14.228.166.135 Vietnam · VNPT Corp | files | BIN | 1 | 2026-10-17 |
| 172.67.156.156 United States · Cloudflare, Inc. | webshell | ID | 1 | 2026-10-17 |
| 104.21.8.11 United States · Cloudflare, Inc. | webshell | ID | 1 | 2026-10-17 |
| 89.223.7.100 Russia | files | RU | 3 | 2026-10-17 |
| 204.188.219.9 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-17 |
| 166.88.95.90 United States · Evoxt Sdn. Bhd. | malware exposed-secret mozi pe-binary | PE, TXT | 7 | 2026-10-17 |
| 47.81.209.84 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 2 | 2026-10-17 |
| 47.74.50.121 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | CN, COM | 15 | 2026-10-17 |
| 16.15.228.233 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 16.182.40.66 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-17 |
| 16.15.236.197 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-16 |
| 16.15.207.152 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-16 |
| 16.15.229.58 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-16 |
| 176.12.71.122 Russia · JSC IOT | c2 exposed-secret | ENV, JSON | 2 | 2026-10-16 |
| 45.237.8.182 Brazil · JONATES MICHAEL DE MACEDO- ME | exposed-secret | TXT | 1 | 2026-10-16 |
| 45.226.133.211 Brazil · NAVEX TELECOM | files | JSON | 1 | 2026-10-16 |
| 45.195.79.50 Seychelles · IENTC S DE RL DE CV | files | BIN | 1 | 2026-10-16 |
| 45.139.104.36 United States · 49.3 Networking LLC | malware mozi exploit exposed-secret | MD, JSON, JS, MJS | 31 | 2026-10-16 |
| 45.186.18.139 Brazil · WINNET BRASIL LTDA | files | JSON | 1 | 2026-10-16 |
| 45.172.218.85 Colombia · INTERMEGAMUNDO PARTNERS S.A.S. | files | JSON | 1 | 2026-10-16 |
| 16.15.214.38 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-16 |
| 45.125.222.99 Bangladesh · Systems Solutions & development Technologies Limited | exposed-secret | TXT | 2 | 2026-10-16 |
| 45.41.86.226 United States · HT | exposed-secret | TXT | 1 | 2026-10-16 |
| 27.147.137.116 Bangladesh · Link3 Technologies Limited | files | BIN | 1 | 2026-10-16 |
| 16.15.223.34 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-16 |
| 16.15.246.118 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-16 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free