huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 151.101.130.217 United States · Fastly, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 151.101.2.217 United States · Fastly, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 13.226.144.37 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-11-07 |
| 13.226.144.63 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-11-07 |
| 13.226.144.104 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-11-07 |
| 40.74.12.40 The Netherlands · Microsoft Corporation | exploit | TXT | 1 | 2026-11-07 |
| 172.67.176.86 United States · Cloudflare, Inc. | exploit | TXT | 2 | 2026-11-07 |
| 104.21.80.83 United States · Cloudflare, Inc. | exploit | TXT | 2 | 2026-11-07 |
| 77.91.71.13 Israel · Alferov Aleksey Aleksandrovich | exposed-secret | TXT | 1 | 2026-11-07 |
| 161.35.173.93 United Kingdom · DigitalOcean, LLC | files | JSON | 1 | 2026-11-07 |
| 158.94.216.155 Turkey · Netlen Internet Hizmetleri Ltd. Sti. | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.211.55 United States · Omegatech LTD | exposed-secret | BEER | 1 | 2026-11-07 |
| 158.94.185.183 United Kingdom · Internetty Ltd | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.185.4 United Kingdom · Internetty Ltd | exposed-secret exploit | TXT | 2 | 2026-11-07 |
| 158.94.173.241 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.117 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.119 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.118 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.120 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.173.87 United States · CNServer LLC | exposed-secret | TXT, ENV, JSON | 4 | 2026-11-07 |
| 158.94.172.116 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.218 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.217 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.213 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.212 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.216 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.210 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.209 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.215 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.214 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.211 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.208 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.205 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.204 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.203 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.202 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.207 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.201 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.206 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.190 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.189 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.187 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.188 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.186 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.76 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.77 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.80 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.79 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.78 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.0.206 United Kingdom · Jisc Services Limited | exposed-secret tunnel | JSON | 2 | 2026-11-07 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free