huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
115
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 172.67.204.2 United States · Cloudflare, Inc. | files | IO | 1 | 2026-10-13 |
| 104.21.77.34 United States · Cloudflare, Inc. | files | IO | 1 | 2026-10-13 |
| 128.32.246.25 United States · University of California at Berkeley | exposed-secret | TXT | 1 | 2026-10-13 |
| 94.140.114.254 Latvia · Sia Nano IT | files | BIN | 1 | 2026-10-13 |
| 47.236.199.243 United States · Alibaba (US) Technology Co., Ltd. | malware pe-binary | PE | 1 | 2026-10-13 |
| 153.75.86.13 United Arab Emirates · RouterHosting LLC | files | PHP | 1 | 2026-10-13 |
| 93.84.115.205 Belarus · Republican Unitary Telecommunication Enterprise Beltelecom | exposed-secret | TXT | 1 | 2026-10-13 |
| 85.105.205.77 Turkey · Turk Telekomunikasyon Anonim Sirketi | files | JSON | 1 | 2026-10-13 |
| 82.84.66.211 Italy · Tiscali Italia S.P.A. | files | JSON | 1 | 2026-10-13 |
| 80.76.163.238 Qatar · Vodafone Qatar P.Q.S.C | files | BIN | 1 | 2026-10-13 |
| 54.37.202.209 Italy · OVH SAS | exposed-secret | TXT | 1 | 2026-10-13 |
| 50.116.62.25 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-13 |
| 37.28.156.24 Poland · Artnet Sp. z o.o. | files | JSON | 1 | 2026-10-13 |
| 31.13.195.13 Bulgaria · Neterra Ltd. | exposed-secret | TXT | 1 | 2026-10-13 |
| 217.165.97.124 United Arab Emirates · EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC | files | BIN | 1 | 2026-10-13 |
| 217.165.68.125 United Arab Emirates · EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC | files | BIN | 1 | 2026-10-13 |
| 217.165.146.249 United Arab Emirates · EMIRATES TELECOMMUNICATIONS GROUP COMPANY (ETISALAT GROUP) PJSC | files | BIN | 1 | 2026-10-13 |
| 212.70.98.236 Qatar · Vodafone Qatar P.Q.S.C | files | BIN | 1 | 2026-10-13 |
| 202.157.177.65 Indonesia · PT. EXABYTES NETWORK INDONESIA | exposed-secret exploit | TXT, ENV | 3 | 2026-10-13 |
| 187.84.80.182 Brazil · Oxente.net Solucoes Tecnologicas Eireli | exposed-secret exploit | TXT | 2 | 2026-10-13 |
| 177.72.80.14 Brazil · BRMOM CONSTRUINDO CONEXOES LTDA | exposed-secret | TXT | 1 | 2026-10-13 |
| 178.134.47.166 Georgia · JSC "Silknet" | files | BIN | 1 | 2026-10-13 |
| 175.184.232.234 Indonesia · PT INDONESIA COMNETS PLUS | files | BIN | 1 | 2026-10-13 |
| 171.235.33.211 Vietnam · Viettel Group | files | JSON | 1 | 2026-10-13 |
| 167.99.105.11 United States · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-10-13 |
| 164.90.187.209 Germany · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-13 |
| 154.127.113.242 South Africa · BitCo | exposed-secret | TXT | 2 | 2026-10-13 |
| 157.245.231.228 United States · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-10-13 |
| 144.91.92.120 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-13 |
| 138.185.72.26 Brazil · Empasoft Ltda .Me | exposed-secret | TXT | 1 | 2026-10-13 |
| 122.117.90.133 Taiwan · Chunghwa Telecom Co., Ltd. | files | JSON | 1 | 2026-10-13 |
| 117.248.109.38 India · Bharat Sanchar Nigam Ltd | exposed-secret | JSON, PHP | 2 | 2026-10-13 |
| 119.59.98.59 Thailand · Metrabyte Co.,Ltd | tunnel | JSON | 1 | 2026-10-13 |
| 109.160.96.230 Bulgaria · KABELNET LTD | tunnel | JSON | 1 | 2026-10-13 |
| 104.131.123.136 United States · DigitalOcean, LLC | exploit exposed-secret mirror | JSP | 1 | 2026-10-13 |
| 46.250.241.197 Australia · Contabo Asia Private Limited | exposed-secret | TXT | 2 | 2026-10-13 |
| 103.124.106.174 United States · Hosteons Pte. Ltd. | exposed-secret | TXT | 1 | 2026-10-13 |
| 65.20.85.39 India · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-13 |
| 103.172.227.110 India · K-anandraj Inet Solutions Private Limited | files | BIN | 1 | 2026-10-13 |
| 216.8.73.4 United States · Hanson Information Systems, Inc. / Family Net | exposed-secret | ORG | 1 | 2026-10-13 |
| 34.97.70.108 Japan · Google LLC | exposed-secret | COM, CC | 7 | 2026-10-13 |
| 172.67.153.82 United States · Cloudflare, Inc. | files | CFD | 1 | 2026-10-13 |
| 104.105.133.105 Japan · Akamai Technologies, Inc. | files | ORG | 1 | 2026-10-13 |
| 196.190.224.62 ET · EthioNet | malware mozi elf-binary | A | 1 | 2026-10-13 |
| 172.238.24.251 Japan · Akamai Technologies, Inc. | exposed-secret | ORG | 6 | 2026-10-13 |
| 3.225.50.141 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-13 |
| 60.23.238.248 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-13 |
| 66.154.127.156 Canada · MULTACOM CORPORATION | exposed-secret exploit malware c2 | PY, ELF, SH, MD | 110 | 2026-10-13 |
| 194.62.166.171 Germany · Wowrack.com | files | FIX | 1 | 2026-10-13 |
| 85.120.255.53 Moldova · AVA HOST SRL | malware elf-binary | ELF, SH | 2 | 2026-10-13 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free