huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,483
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 172.67.139.165 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-11-04 |
| 172.67.163.38 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-11-04 |
| 104.21.19.4 United States · Cloudflare, Inc. | webshell | COM | 1 | 2026-11-04 |
| 172.67.184.92 United States · Cloudflare, Inc. | webshell | COM | 1 | 2026-11-04 |
| 104.21.10.116 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-11-04 |
| 104.21.33.15 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-11-04 |
| 185.77.97.10 United States · Hostinger International Limited | files | SHOP | 1 | 2026-11-04 |
| 195.200.9.50 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-04 |
| 186.209.113.108 Brazil · EVEO Servicos de Internet Ltda. | files | MSI | 1 | 2026-11-04 |
| 85.215.73.250 Germany · IONOS SE | malware elf-binary pe-binary tunnel | ELF, PE, SH | 21 | 2026-11-04 |
| 74.115.51.5 United States · Weebly, Inc. | files | SITE | 1 | 2026-11-04 |
| 74.115.51.4 United States · Weebly, Inc. | files | SITE | 1 | 2026-11-04 |
| 91.108.103.241 United Kingdom · Hostinger International Limited | files | COM, SHOP | 2 | 2026-11-04 |
| 51.83.71.4 France · OVH SAS | exposed-secret exploit | YML, GZ, JAR | 5 | 2026-11-04 |
| 104.21.0.190 United States · Cloudflare, Inc. | files | SITE | 1 | 2026-11-04 |
| 45.88.173.73 The Netherlands · CLODO CLOUD SERVICE CO. L.L.C | exposed-secret | TXT | 1 | 2026-11-04 |
| 163.44.120.84 Japan · GMO Internet,Inc | exposed-secret | PHP, PY | 6 | 2026-11-04 |
| 104.168.166.81 United States · HostPapa | exposed-secret | JSON | 1 | 2026-11-04 |
| 100.51.79.96 United States · Amazon.com, Inc. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-04 |
| 104.131.134.161 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 104.131.59.223 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 100.57.153.31 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-04 |
| 154.21.89.49 United States · DMIT Cloud Services | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-04 |
| 43.153.140.124 Japan · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | OVPN, SH | 5 | 2026-11-04 |
| 124.156.176.234 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | SH, OVPN | 5 | 2026-11-04 |
| 89.116.31.1 France · Contabo GmbH | exposed-secret exploit | TXT, ENV | 5 | 2026-11-04 |
| 168.144.251.68 United States | files | JSON | 1 | 2026-11-04 |
| 168.144.251.165 United States | exposed-secret | TXT | 2 | 2026-11-04 |
| 202.95.14.76 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 202.95.14.69 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 38.244.50.109 United States · Cogent Communications | exposed-secret forced-loot | TXT | 1 | 2026-11-04 |
| 38.244.50.34 United States · Cogent Communications | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.189 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.190 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.188 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.187 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.186 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.29 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.28 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.30 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.27 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.26 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 45.33.31.144 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-04 |
| 45.33.31.87 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-04 |
| 23.248.226.189 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.187 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.188 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.186 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.190 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.210 United States · YANCY LIMITED | exposed-secret exploit | TXT | 2 | 2026-11-04 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free