huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.21.29.195 United States · Cloudflare, Inc. | files | NETSET | 1 | 2026-11-08 |
| 172.67.149.185 United States · Cloudflare, Inc. | files | NETSET | 1 | 2026-11-08 |
| 170.33.12.185 Singapore · Alibaba Cloud (Singapore) Private Limited | files | CN | 2 | 2026-11-08 |
| 172.67.216.42 United States · Cloudflare, Inc. | exploit | TOP | 1 | 2026-11-08 |
| 104.21.53.186 United States · Cloudflare, Inc. | exploit | TOP | 1 | 2026-11-08 |
| 146.70.53.182 Bulgaria · M247 Europe SRL | exposed-secret | LOG, PY, XML, DTD | 8 | 2026-11-08 |
| 172.67.220.154 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.75.99 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.23.190 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.212.234 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.243.45.75 United States · ReliableSite.Net LLC | files | PHP | 1 | 2026-11-08 |
| 172.67.200.89 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.21.210 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.0.186 United States · Cloudflare, Inc. | files | 2 | 2026-11-08 | |
| 172.67.128.50 United States · Cloudflare, Inc. | files | 2 | 2026-11-08 | |
| 185.77.97.30 United States · Hostinger International Limited | files | CYOU | 1 | 2026-11-08 |
| 202.155.8.207 United States · Ultahost, Inc. | exposed-secret | PHP, BAK, TXT | 5 | 2026-11-08 |
| 149.50.142.221 Argentina · Dattatec.com | files | PHP | 1 | 2026-11-08 |
| 104.21.62.204 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-11-08 |
| 172.67.139.61 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-11-08 |
| 3.128.73.102 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-08 |
| 72.51.57.230 United States · Dynu Systems Incorporated | files | JSON | 1 | 2026-11-08 |
| 185.146.165.97 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 172.67.142.52 United States · Cloudflare, Inc. | files | LAT | 1 | 2026-11-08 |
| 172.67.160.216 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 104.21.14.253 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 183.136.138.190 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT | 1 | 2026-11-08 |
| 172.67.144.41 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 209.151.149.160 United States · UpCloud USA Inc | exposed-secret | TXT | 1 | 2026-11-08 |
| 104.21.47.29 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 172.67.178.57 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 104.21.31.154 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 178.128.210.172 Singapore · DigitalOcean, LLC | files | JSON | 1 | 2026-11-08 |
| 172.67.184.68 United States · Cloudflare, Inc. | files | CFD | 1 | 2026-11-08 |
| 104.21.32.70 United States · Cloudflare, Inc. | files | CFD | 1 | 2026-11-08 |
| 172.67.217.112 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.78.65 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.66.62 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-11-08 |
| 172.67.201.134 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-11-08 |
| 66.97.33.138 United States · Dattatec.com | files | PHP | 1 | 2026-11-08 |
| 104.21.62.148 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 172.67.136.180 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 45.8.227.97 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 172.67.221.240 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 104.21.43.70 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 104.21.80.237 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 172.67.155.149 United States · Cloudflare, Inc. | files | CYOU | 1 | 2026-11-08 |
| 104.21.75.31 United States · Cloudflare, Inc. | files | VIP | 1 | 2026-11-08 |
| 172.67.167.4 United States · Cloudflare, Inc. | files | VIP | 1 | 2026-11-08 |
| 49.51.37.31 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-08 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free