huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,971
hosts
106,553
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 39.100.86.251 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware tunnel | SH, PY, XML, JAR | 107 | 2026-11-03 |
| 198.46.252.28 United States · HostPapa | exposed-secret exploit malware mozi | GO, TXT, SH, GZ | 89 | 2026-11-03 |
| 107.172.172.195 United States · HostPapa | exposed-secret | TXT | 1 | 2026-11-03 |
| 8.138.0.225 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | c2 exposed-secret | HTML | 7 | 2026-11-03 |
| 45.225.135.92 Panama · RACK SPHERE HOSTING S.A. | malware exposed-secret exploit meterpreter | PE, TXT, BIN, JAR | 7 | 2026-11-03 |
| 45.225.135.18 Panama · RACK SPHERE HOSTING S.A. | tunnel | JSON | 1 | 2026-11-03 |
| 45.225.135.75 Panama · RACK SPHERE HOSTING S.A. | exposed-secret | TXT | 1 | 2026-11-03 |
| 45.79.92.244 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-03 |
| 45.7.229.121 Chile · ZAM LTDA. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 108.165.12.166 United States · Snaju Development | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 166.0.192.152 United States · Snaju Development | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 107.161.24.123 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 61.155.55.138 China · Chinanet | exposed-secret | TXT | 1 | 2026-11-03 |
| 192.227.173.9 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 172.245.181.62 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 74.208.64.89 United States · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 107.172.222.26 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 168.235.88.66 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 82.156.227.196 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-03 |
| 134.122.140.63 Japan · CTG Server Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-03 |
| 107.175.39.140 United States · HostPapa | malware elf-binary pe-binary | ELF, PE, PHP, SH | 27 | 2026-11-03 |
| 181.85.173.171 Argentina · Telecom Argentina S.A. | exposed-secret | TXT | 1 | 2026-11-03 |
| 172.67.146.137 United States · Cloudflare, Inc. | files | SITE | 1 | 2026-11-03 |
| 216.198.79.195 United States · Amazon.com, Inc. | exposed-secret exploit | APP | 20 | 2026-11-03 |
| 172.67.162.61 United States · Cloudflare, Inc. | files | REST | 1 | 2026-11-03 |
| 104.21.38.180 United States · Cloudflare, Inc. | exposed-secret | TOP | 1 | 2026-11-03 |
| 104.21.33.153 United States · Cloudflare, Inc. | files | SITE | 1 | 2026-11-03 |
| 104.21.81.149 United States · Cloudflare, Inc. | files | REST | 1 | 2026-11-03 |
| 172.67.137.31 United States · Cloudflare, Inc. | exposed-secret | TOP | 1 | 2026-11-03 |
| 180.178.191.153 Pakistan · GEOCOM LLC | exposed-secret | COM | 1 | 2026-11-03 |
| 172.67.182.13 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 104.21.67.222 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 104.21.64.130 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 172.67.185.214 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 31.76.111.31 Germany · EdgeSec Technologies Limited | files | 1 | 2026-11-03 | |
| 50.114.179.29 United States · Interserver, Inc | files | 1 | 2026-11-03 | |
| 104.233.217.235 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.236 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.237 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 45.225.135.43 Panama · RACK SPHERE HOSTING S.A. | exposed-secret | PHP | 1 | 2026-11-03 |
| 104.233.217.234 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.229 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.230 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 100.27.62.12 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-03 |
| 82.208.23.183 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-11-03 |
| 179.236.75.175 Lithuania | exposed-secret | TXT | 2 | 2026-11-03 |
| 104.233.217.57 United States · PEG TECH INC | exposed-secret | JSON | 1 | 2026-11-03 |
| 85.155.15.13 Spain | exposed-secret | TXT | 1 | 2026-11-03 |
| 31.77.16.106 United States · HOSTING INDUSTRY LIMITED | exposed-secret | TXT | 1 | 2026-11-03 |
| 104.233.217.81 United States · PEG TECH INC | exposed-secret | JSON | 1 | 2026-11-03 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free