huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,973
hosts
106,558
files
126
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 129.226.71.134 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | files | LOG, ZIP | 2 | 2026-11-01 |
| 148.113.3.32 Canada · OVH SAS | exploit malware macho-binary | LOG, TXT, JAVA, MACHO | 10 | 2026-11-01 |
| 31.128.39.236 Russia · Beget LLC | files | JSON | 1 | 2026-11-01 |
| 116.202.232.184 Germany · Hetzner Online GmbH | exploit exposed-secret | NET | 2 | 2026-11-01 |
| 217.149.13.187 Spain · Servatica Technologies, S.L. | exposed-secret | TXT | 1 | 2026-11-01 |
| 104.21.89.107 United States · Cloudflare, Inc. | files | CC | 1 | 2026-11-01 |
| 172.67.140.135 United States · Cloudflare, Inc. | files | CC | 1 | 2026-11-01 |
| 178.95.25.224 Ukraine · The Constant Company, LLC | exposed-secret malware mozi webshell | SH, JS, TXT, LOG | 697 | 2026-11-01 |
| 45.152.149.32 United States · 1337 Services GmbH | exposed-secret exploit | TXT, PY, LOG, ENV | 47 | 2026-11-01 |
| 45.79.141.174 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-01 |
| 45.79.39.217 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-01 |
| 77.239.124.170 The Netherlands · Alfahost LLC | malware elf-binary | ELF | 5 | 2026-11-01 |
| 45.147.160.59 The Netherlands · G-Core Labs S.A. | files | PHP | 1 | 2026-11-01 |
| 38.133.142.39 Romania · DIGI ROMANIA S.A. | exposed-secret exploit tunnel | PY, GITIGN, SQLITE, HTML | 13 | 2026-11-01 |
| 167.99.84.37 United Kingdom · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-01 |
| 45.139.84.195 The Netherlands · LeaseWeb Netherlands B.V. | exposed-secret | TXT | 1 | 2026-11-01 |
| 154.222.24.60 Seychelles · cognetcloud INC | exposed-secret | BIN, TXT | 2 | 2026-11-01 |
| 45.63.79.171 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-11-01 |
| 45.61.164.30 United States · RouterHosting LLC | exposed-secret | HTML, TXT, LOG, OUT | 15 | 2026-11-01 |
| 38.76.188.71 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-01 |
| 31.128.39.27 Russia · Beget LLC | exposed-secret | TXT | 1 | 2026-11-01 |
| 31.56.228.32 France · CGI GLOBAL LIMITED | exposed-secret | TXT | 2 | 2026-11-01 |
| 104.21.69.21 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-01 |
| 172.67.202.212 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-01 |
| 15.204.59.70 United States · OVH SAS | c2 exposed-secret webshell | LOG, PHP, SH, TXT | 4 | 2026-11-01 |
| 66.78.40.197 United States · Aokigahara SRL | c2 exposed-secret | 1 | 2026-11-01 | |
| 162.35.99.94 United States | exploit exposed-secret | LOG, SQL, TXT | 3 | 2026-11-01 |
| 31.56.228.197 France · CGI GLOBAL LIMITED | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 31.56.228.126 France · CGI GLOBAL LIMITED | exposed-secret exploit malware mozi | PY, LOG, TXT, HTML | 62 | 2026-11-01 |
| 64.83.41.172 Japan · NetLab Global | exposed-secret | TXT | 1 | 2026-11-01 |
| 185.125.24.7 Switzerland · Infomaniak Network SA | exploit exposed-secret malware mozi | XZ, BUILDI, BUILD, CHANGE | 146 | 2026-11-01 |
| 27.147.141.98 Bangladesh · Link3 Technologies Limited | files | BIN | 1 | 2026-11-01 |
| 104.200.73.97 United States · GWY IT PTY LTD | exposed-secret exploit malware webshell | PY, ELF, C, TXT | 134 | 2026-11-01 |
| 8.130.118.17 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-01 |
| 188.213.166.207 Italy · Aruba S.p.A. | files | IT, ORG | 2 | 2026-11-01 |
| 172.67.200.87 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-01 |
| 104.21.21.208 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-01 |
| 134.209.71.181 United States · DigitalOcean, LLC | files | SH | 1 | 2026-11-01 |
| 138.124.36.220 Germany · WAIcore Ltd | files | 1 | 2026-11-01 | |
| 104.168.162.214 United States · HostPapa | exposed-secret | JSON | 1 | 2026-11-01 |
| 100.20.73.249 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-01 |
| 100.20.109.172 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-01 |
| 100.21.158.157 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-01 |
| 69.92.163.194 United States · CABLE ONE, INC. | exposed-secret | TXT | 1 | 2026-11-01 |
| 100.59.81.102 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 100.21.82.169 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-01 |
| 100.26.145.138 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-01 |
| 201.18.216.33 Lithuania | exposed-secret | COM, TOP | 3 | 2026-10-31 |
| 167.99.165.191 United States · DigitalOcean, LLC | malware elf-binary | DZ, ELF | 2 | 2026-10-31 |
| 38.54.56.66 United States · Kaopu Cloud HK Limited | files | 1 | 2026-10-31 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free