huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,974
hosts
106,608
files
127
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 196.219.207.179 Egypt · TE-AS | exposed-secret | JSON | 1 | 2026-10-29 |
| 8.220.240.197 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | ENV | 1 | 2026-10-29 |
| 168.235.125.131 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-29 |
| 50.116.25.238 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-29 |
| 52.20.229.144 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-29 |
| 188.166.101.204 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-29 |
| 18.139.47.247 Singapore · Amazon.com, Inc. | exposed-secret | JSON | 1 | 2026-10-29 |
| 213.133.99.249 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 38.134.189.93 Singapore · Ultahost, Inc. | malware c2 exposed-secret meterpreter | ELF, MD, TXT | 3 | 2026-10-29 |
| 209.99.184.246 Switzerland · SKN Subnet & Telecom Ltd | exploit exposed-secret c2 webshell | TXT, MD, PY, JSON | 866 | 2026-10-29 |
| 157.173.16.61 Germany · Evolus IT Solutions GmbH | files | JSON | 1 | 2026-10-29 |
| 141.147.70.247 United Kingdom · Oracle Corporation | exposed-secret exploit malware mozi | JSON, TS, JS, MD | 162 | 2026-10-29 |
| 134.209.211.188 United States · DigitalOcean, LLC | exploit exposed-secret tunnel | BAK, TXT, BAT, BKP | 9 | 2026-10-29 |
| 91.244.71.60 Austria · Evolus IT Solutions GmbH | files | JSON | 1 | 2026-10-29 |
| 54.151.242.98 Singapore · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-29 |
| 95.217.11.56 Finland · Hetzner Online GmbH | exposed-secret | TXT | 2 | 2026-10-29 |
| 85.11.182.75 United Kingdom · PebbleHost Ltd | exposed-secret | ENV | 1 | 2026-10-29 |
| 45.11.229.123 Germany · Florian Kolb | files | JSON | 1 | 2026-10-29 |
| 86.100.49.209 Lithuania · UAB "Balticum TV" | exposed-secret | JSON | 1 | 2026-10-29 |
| 59.152.103.205 Bangladesh · Earth Telecommunication ( pvt ) Limited | exposed-secret exploit | TXT, ENV | 4 | 2026-10-29 |
| 13.234.153.113 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-29 |
| 52.53.90.195 United States · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 3.141.70.17 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-29 |
| 57.129.70.164 Germany · OVH SAS | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 8.138.137.232 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | c2 | BIN | 1 | 2026-10-29 |
| 217.154.101.100 Spain · IONOS SE | exploit c2 exposed-secret malware | HTML, JS, TXT | 5 | 2026-10-29 |
| 31.56.209.3 The Netherlands · SWISSNET LLC | files | 1 | 2026-10-29 | |
| 151.241.99.99 United States · Ultahost, Inc. | exposed-secret | BODY | 1 | 2026-10-29 |
| 5.199.169.240 Lithuania · UAB Cherry Servers | files | DZ | 1 | 2026-10-29 |
| 172.66.145.80 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-29 |
| 104.20.37.138 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-29 |
| 18.245.218.72 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 18.245.218.111 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 94.103.1.224 The Netherlands · Digital Hosting Provider LLC | tunnel | NETWOR | 1 | 2026-10-29 |
| 18.245.218.18 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 45.32.116.142 Singapore · The Constant Company, LLC | exploit | COM | 1 | 2026-10-29 |
| 143.246.203.114 United States | exploit exposed-secret malware mozi | LOG, MD, PY, RB | 85 | 2026-10-29 |
| 121.15.156.96 China · Chinanet | files | BIN | 1 | 2026-10-29 |
| 157.230.218.54 United States · DigitalOcean, LLC | files | 1 | 2026-10-29 | |
| 3.19.198.127 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-29 |
| 185.27.134.112 United Kingdom · Wildcard UK Limited | files | FREE | 1 | 2026-10-29 |
| 161.97.77.98 France · Contabo GmbH | exposed-secret | ENV | 1 | 2026-10-29 |
| 77.237.246.73 France · Contabo GmbH | exposed-secret | TXT | 2 | 2026-10-29 |
| 202.61.73.177 Brazil · Evoxt Sdn. Bhd. | malware exposed-secret pe-binary tunnel | PE, BIN, PS1, TXT | 23 | 2026-10-29 |
| 194.165.16.26 Panama · Flyservers S.A. | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.49.62.246 Hong Kong · Zenlayer Inc | files | 1 | 2026-10-28 | |
| 172.67.162.136 United States · Cloudflare, Inc. | exploit | AT | 1 | 2026-10-28 |
| 104.21.52.177 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.120 United States · Cloudflare, Inc. | exploit | AT | 1 | 2026-10-28 |
| 172.67.202.89 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free