huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
115
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 38.43.208.5 United States · FULL DATA COMUNICACIONES C.A. | files | PHP | 1 | 2026-10-14 |
| 37.211.49.113 Qatar · Ooredoo Q.S.C. | files | BIN | 1 | 2026-10-14 |
| 37.202.168.251 Iran · Aria Shatel PJSC | exposed-secret | TXT | 1 | 2026-10-14 |
| 37.148.0.222 Iran · Aria Shatel PJSC | exposed-secret | TXT | 1 | 2026-10-14 |
| 37.32.125.170 Iran · Rayaneh Pardazan Baran Co. Ltd. | files | BIN | 1 | 2026-10-14 |
| 77.247.182.244 The Netherlands · NForce Entertainment B.V. | files | COM | 1 | 2026-10-14 |
| 20.190.160.132 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-14 |
| 36.93.215.172 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret | ENV, JSON, PHP, TXT | 4 | 2026-10-14 |
| 36.67.6.139 Indonesia · Telekomunikasi Indonesia (PT) | files | BIN | 1 | 2026-10-14 |
| 36.92.51.147 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret | TXT, JSON, PHP | 5 | 2026-10-14 |
| 36.64.33.82 Indonesia · Telekomunikasi Indonesia (PT) | files | BIN | 1 | 2026-10-14 |
| 36.64.211.93 Indonesia · Telekomunikasi Indonesia (PT) | files | BIN | 1 | 2026-10-14 |
| 20.190.160.20 The Netherlands · Microsoft Corporation | exploit exposed-secret | TXT | 2 | 2026-10-14 |
| 20.2.89.218 Hong Kong · Microsoft Corporation | files | LIVE | 1 | 2026-10-14 |
| 103.170.217.170 India · WebHorizon Internet Services | malware exploit webshell elf-binary | ELF, PE, PHP, SH | 16 | 2026-10-14 |
| 194.163.148.133 France · Contabo GmbH | exposed-secret exploit malware mozi | PHP, TXT, MD, JS | 74 | 2026-10-14 |
| 125.212.138.85 Vietnam · Viettel Group | exposed-secret | TXT | 2 | 2026-10-14 |
| 172.67.208.119 United States · Cloudflare, Inc. | files | LOL | 1 | 2026-10-14 |
| 104.21.23.30 United States · Cloudflare, Inc. | files | LOL | 1 | 2026-10-14 |
| 16.15.245.219 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-14 |
| 20.209.163.226 United States · Microsoft Corporation | files | 1 | 2026-10-14 | |
| 16.15.207.76 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-14 |
| 16.15.199.91 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-14 |
| 212.104.128.2 Finland · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-14 |
| 212.104.128.0 Finland · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-14 |
| 212.104.128.1 Finland · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-14 |
| 38.54.88.188 United States · Kaopu Cloud HK Limited | malware exposed-secret mozi c2 | PY, SH, ELF, TGZ | 36 | 2026-10-14 |
| 217.6.46.91 Germany · Deutsche Telekom AG | c2 exploit exposed-secret malware | PS1 | 2 | 2026-10-14 |
| 170.0.60.30 Brazil · T F DA SILVA RAMOS TELECOMUNICACOES E SISTEMA EPP | files | JSON | 1 | 2026-10-14 |
| 77.247.182.247 The Netherlands · NForce Entertainment B.V. | files | COM | 1 | 2026-10-14 |
| 20.190.159.71 Ireland · Microsoft Corporation | exposed-secret | TXT | 1 | 2026-10-14 |
| 58.62.144.229 China · Chinanet | malware exposed-secret mozi pe-binary | PE, OVPN, SH, TAR | 7 | 2026-10-14 |
| 162.214.157.245 United States · Unified Layer | exposed-secret webshell exploit tunnel | PHP, TXT, ZIP, BAK | 27 | 2026-10-14 |
| 64.176.53.140 Japan · The Constant Company, LLC | exposed-secret | SH | 1 | 2026-10-14 |
| 185.196.220.130 Germany · ColocaTel Inc. | exposed-secret | TXT | 1 | 2026-10-14 |
| 185.129.100.126 Russia · DDOS-GUARD LTD | files | ORG | 1 | 2026-10-14 |
| 77.247.182.242 The Netherlands · NForce Entertainment B.V. | files | COM | 1 | 2026-10-14 |
| 20.190.160.17 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-14 |
| 61.166.61.44 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-14 |
| 16.15.228.48 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-14 |
| 16.15.239.154 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-10-14 |
| 162.0.232.86 United States · Namecheap, Inc. | files | INFO, ORG | 4 | 2026-10-14 |
| 3.225.61.153 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-14 |
| 47.74.58.113 United States · Alibaba (US) Technology Co., Ltd. | files | CN | 1 | 2026-10-13 |
| 20.190.159.4 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-13 |
| 77.247.182.245 The Netherlands · NForce Entertainment B.V. | files | COM | 1 | 2026-10-13 |
| 64.20.38.10 United States · Interserver, Inc | files | ORG | 1 | 2026-10-13 |
| 78.17.93.224 Germany · HONGKONG XING TONG HUI TECHNOLOGY CO., LIMITED | c2 | COM | 2 | 2026-10-13 |
| 34.95.137.255 Brazil · Google LLC | files | COM, TXT | 2 | 2026-10-13 |
| 185.101.104.110 United States · OVH SAS | files | TXT | 1 | 2026-10-13 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free