huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
115
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 103.215.74.112 United States · SoloRDP | exposed-secret | TXT | 1 | 2026-10-13 |
| 43.154.253.6 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exploit | HTML | 1 | 2026-10-13 |
| 31.76.244.108 United States · VPSPay Networks LTD | exposed-secret | TXT | 1 | 2026-10-13 |
| 23.148.228.177 United States · NetLab Global | exposed-secret | TXT | 1 | 2026-10-13 |
| 186.244.241.222 United States · AROSSCLOUD INC. | exposed-secret | TXT | 1 | 2026-10-13 |
| 23.94.189.114 United States · HostPapa | malware elf-binary | ELF | 1 | 2026-10-13 |
| 158.199.233.35 Japan · KDDI Web Communications Inc. | files | TXT | 1 | 2026-10-12 |
| 14.225.23.19 Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | files | TXT | 1 | 2026-10-12 |
| 172.86.125.130 United States · RouterHosting LLC | files | SHOP | 1 | 2026-10-12 |
| 191.101.184.76 United States · SERVA ONE LTD | files | SHOP | 1 | 2026-10-12 |
| 2.27.249.100 United States · NTT America, Inc. | malware pe-binary | PE, BAT | 4 | 2026-10-12 |
| 223.113.41.56 China · China Mobile Communications Corporation | exposed-secret | TXT | 1 | 2026-10-12 |
| 45.63.108.122 United States · The Constant Company, LLC | exposed-secret | BIN, TXT | 5 | 2026-10-12 |
| 122.201.118.132 Australia · Dreamscape Networks PTY LTD | exposed-secret | PHP | 1 | 2026-10-12 |
| 49.247.169.197 South Korea · SMILESERV | files | KR | 1 | 2026-10-12 |
| 145.223.23.25 India · Hostinger International Limited | files | CLICK | 1 | 2026-10-12 |
| 198.177.124.177 United States · Namecheap, Inc. | files | CLICK | 1 | 2026-10-12 |
| 143.244.141.187 India · DigitalOcean, LLC | files | LIFE | 1 | 2026-10-12 |
| 8.135.58.72 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-12 |
| 69.46.46.62 United States · Railway | c2 exploit malware mozi | PS1 | 1 | 2026-10-12 |
| 104.21.24.207 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 104.21.56.14 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 172.67.171.50 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 172.67.175.175 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 172.67.220.202 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 172.67.192.35 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 104.21.77.38 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 104.21.77.228 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 104.21.38.229 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 172.67.204.6 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 172.67.212.37 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 172.67.140.112 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 104.21.28.249 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 104.21.81.247 United States · Cloudflare, Inc. | files | JE | 1 | 2026-10-12 |
| 91.215.85.103 Russia · PROSPERO OOO | c2 | 1 | 2026-10-12 | |
| 27.124.17.6 Hong Kong · CTG Server Limited | malware pe-binary | PE | 2 | 2026-10-12 |
| 45.153.34.146 The Netherlands · TechTies Inc. | files | 1 | 2026-10-12 | |
| 3.221.186.160 United States · Amazon.com, Inc. | exposed-secret malware mozi | TXT, PHP, SH, SQL | 5 | 2026-10-12 |
| 148.66.9.50 Hong Kong · Netsec Limited | files | HTML | 1 | 2026-10-12 |
| 154.222.31.155 Seychelles · cognetcloud INC | files | HTML | 1 | 2026-10-12 |
| 192.252.186.78 United States · CTG Server Limited | files | HTML | 1 | 2026-10-12 |
| 103.214.172.120 Hong Kong · Cloudie Limited | files | HTML | 1 | 2026-10-12 |
| 193.112.107.49 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 46.8.227.116 United States · CGI GLOBAL LIMITED | files | HTML | 1 | 2026-10-12 |
| 112.121.168.66 Hong Kong · Netsec Limited | files | HTML | 1 | 2026-10-12 |
| 179.199.198.63 United States · AROSSCLOUD INC. | files | HTML | 1 | 2026-10-12 |
| 192.142.37.18 The Netherlands · Ultahost, Inc. | files | HTML | 1 | 2026-10-12 |
| 103.224.182.238 Australia · Trellian Pty. Limited | files | HTML | 1 | 2026-10-12 |
| 149.104.68.72 United States · Kaopu Cloud HK Limited | files | HTML | 1 | 2026-10-12 |
| 104.21.89.239 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-12 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free