huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
92
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.21.93.247 United States · Cloudflare, Inc. | ioc-match | LNK | 1 | 2026-10-09 |
| 34.95.156.59 Brazil · Google LLC | files | COM | 1 | 2026-10-09 |
| 34.143.73.2 United States · Google LLC | files | APP | 1 | 2026-10-09 |
| 34.143.72.2 United States · Google LLC | files | APP | 1 | 2026-10-09 |
| 34.143.74.2 United States · Google LLC | files | APP | 1 | 2026-10-09 |
| 172.67.202.38 United States · Cloudflare, Inc. | files | FIT, MSI | 2 | 2026-10-09 |
| 172.67.135.204 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-09 |
| 104.21.26.89 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-09 |
| 104.21.69.6 United States · Cloudflare, Inc. | files | FIT, MSI | 2 | 2026-10-09 |
| 172.67.172.46 United States · Cloudflare, Inc. | files | APP | 1 | 2026-10-09 |
| 104.21.30.58 United States · Cloudflare, Inc. | files | APP | 1 | 2026-10-09 |
| 217.177.40.88 Finland · DataCrunch Oy | exposed-secret | TXT | 1 | 2026-10-09 |
| 35.252.4.255 Israel · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 41.225.25.98 TN · 3S INF | exposed-secret | COM | 1 | 2026-10-08 |
| 35.229.143.32 Taiwan · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 172.67.146.202 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-08 |
| 104.21.10.217 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-08 |
| 148.113.6.3 Canada · OVH SAS | files | COM | 1 | 2026-10-08 |
| 190.92.174.87 India · WHG Hosting Services Ltd | files | COM | 1 | 2026-10-08 |
| 80.97.160.94 Moldova · AVA HOST SRL | files | VG | 1 | 2026-10-08 |
| 154.12.83.188 Hong Kong · cognetcloud INC | malware mirai elf-binary | ELF, SH | 12 | 2026-10-08 |
| 35.231.26.5 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 178.128.125.255 Singapore · DigitalOcean, LLC | malware elf-binary | ELF, SH | 16 | 2026-10-08 |
| 35.199.118.189 Brazil · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 35.194.241.35 Taiwan · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 89.116.109.128 United Kingdom · Hostinger International Limited | files | COM, TXT | 2 | 2026-10-08 |
| 35.73.248.246 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 34.185.180.78 Germany · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 195.200.9.161 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-08 |
| 213.209.159.55 Germany · Feo Prest SRL | exploit exposed-secret tunnel | TXT, PY, SH | 5 | 2026-10-08 |
| 34.176.25.144 Chile · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 34.174.56.189 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 34.172.165.27 United States · Google LLC | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 147.45.39.43 Germany · Digital Hosting Provider LLC | files | 1 | 2026-10-08 | |
| 112.113.175.13 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 45.166.188.48 Brazil · Falcon Net | malware mozi elf-binary | A, JSON | 2 | 2026-10-08 |
| 61.52.213.183 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 200.115.102.246 Brazil · FiberPon telecom | malware mozi elf-binary | A, JSON | 2 | 2026-10-08 |
| 42.234.99.214 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 42.229.175.66 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 222.138.78.101 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 222.160.220.86 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 187.110.223.227 Brazil · AS271724 | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 195.64.163.238 Ukraine · Physical person-businessman Bolotny Volodymyr Oleksiyovich | malware elf-binary | ELF | 1 | 2026-10-08 |
| 180.190.240.131 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 120.84.214.178 China · China Unicom IP network China169 Guangdong province | malware mozi elf-binary | ELF | 1 | 2026-10-08 |
| 64.247.177.104 United States · SoftwareWorks Group, Inc. | files | TXT | 1 | 2026-10-08 |
| 123.8.8.177 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 | |
| 125.162.15.66 Indonesia · Telekomunikasi Indonesia (PT) | malware mozi elf-binary | A | 1 | 2026-10-08 |
| 125.47.218.42 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-08 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free