huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 103.164.55.81 Singapore · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-11-07 |
| 104.21.9.83 United States · Cloudflare, Inc. | files | CC | 1 | 2026-11-07 |
| 172.67.159.80 United States · Cloudflare, Inc. | files | CC | 1 | 2026-11-07 |
| 72.47.208.142 United States · GoDaddy.com, LLC | files | COM | 1 | 2026-11-07 |
| 104.21.58.79 United States · Cloudflare, Inc. | files | GG | 1 | 2026-11-06 |
| 172.67.157.248 United States · Cloudflare, Inc. | files | GG | 1 | 2026-11-06 |
| 201.3.225.56 United States | ioc-match tunnel | APK, LIVE | 2 | 2026-11-06 |
| 47.99.157.12 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware webshell | PY, SH, PHP, C | 14 | 2026-11-06 |
| 157.230.88.27 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-06 |
| 164.90.158.217 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-06 |
| 187.124.84.80 United States · Hostinger International Limited | exposed-secret exploit | TXT | 2 | 2026-11-06 |
| 18.139.207.120 Singapore · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-06 |
| 47.79.90.89 United States · Alibaba (US) Technology Co., Ltd. | exploit | SITE, NET | 3 | 2026-11-06 |
| 3.5.130.204 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-06 |
| 3.5.108.166 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-06 |
| 3.5.89.24 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-06 |
| 202.61.85.39 Hong Kong · ABCDE GROUP COMPANY LIMITED | exposed-secret | 1 | 2026-11-06 | |
| 40.90.229.95 United States · Microsoft Corporation | ioc-match | BIN | 1 | 2026-11-06 |
| 104.16.231.132 United States · Cloudflare, Inc. | c2 malware mozi | COM, JS | 4 | 2026-11-06 |
| 104.16.230.132 United States · Cloudflare, Inc. | c2 malware mozi | COM, JS | 4 | 2026-11-06 |
| 172.67.180.56 United States · Cloudflare, Inc. | exposed-secret | EU | 1 | 2026-11-06 |
| 104.21.35.217 United States · Cloudflare, Inc. | exposed-secret | EU | 1 | 2026-11-06 |
| 209.127.228.106 Canada · B2 Net Solutions Inc. | files | 1 | 2026-11-06 | |
| 85.193.68.244 Russia · JSC "E-Publish" | files | 1 | 2026-11-06 | |
| 109.237.115.5 Azerbaijan · A2Z Technologies CJSC | exposed-secret | PHP, BIN | 5 | 2026-11-06 |
| 44.212.213.251 United States · Amazon.com, Inc. | malware pe-binary | PE, ZIP | 2 | 2026-11-06 |
| 84.46.244.238 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-11-06 |
| 222.127.77.227 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-11-06 |
| 117.36.73.158 China · Chinanet | exposed-secret | TXT | 1 | 2026-11-06 |
| 112.213.123.38 Hong Kong · CTG Server Limited | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-11-06 |
| 223.223.219.30 Hong Kong · Layerstack Limited | exposed-secret | TXT | 1 | 2026-11-06 |
| 110.42.215.163 China · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret malware mozi | GO, LOG, PY, PS1 | 317 | 2026-11-06 |
| 23.145.232.140 United States · Cloudflare London, LLC | files | COM, HTML | 3 | 2026-11-06 |
| 23.145.232.143 United States · Cloudflare London, LLC | files | COM, HTML | 3 | 2026-11-06 |
| 23.180.136.61 United States · Cloudflare London, LLC | files | COM, HTML | 3 | 2026-11-06 |
| 185.199.110.153 United States · Fastly, Inc. | exploit ioc-match | IO, DMG | 3 | 2026-11-06 |
| 185.199.109.153 United States · Fastly, Inc. | exploit ioc-match | IO, DMG | 3 | 2026-11-06 |
| 8.222.164.220 Singapore · Alibaba (US) Technology Co., Ltd. | files | LIFE | 1 | 2026-11-06 |
| 64.177.54.79 United States | files | CC | 1 | 2026-11-06 |
| 172.67.170.36 United States · Cloudflare, Inc. | c2 | COM | 1 | 2026-11-06 |
| 104.21.28.11 United States · Cloudflare, Inc. | c2 | COM | 1 | 2026-11-06 |
| 39.109.100.123 Hong Kong | files | TOP | 1 | 2026-11-06 |
| 104.21.66.46 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-06 |
| 172.67.201.26 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-06 |
| 150.171.109.218 United States · Microsoft Corporation | files | TXT | 2 | 2026-11-06 |
| 43.167.6.150 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | SKIN | 1 | 2026-11-06 |
| 108.174.155.202 United States · Oracle Corporation | files | COM | 1 | 2026-11-06 |
| 31.31.196.49 Russia · "Domain names registrar REG.RU", Ltd | files | COM | 1 | 2026-11-06 |
| 43.128.51.85 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | files | XYZ | 1 | 2026-11-06 |
| 43.165.4.51 Germany · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV | 1 | 2026-11-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free