huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,063
hosts
115,929
files
114
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 51.68.220.158 United Kingdom · OVH SAS | exposed-secret | TXT | 1 | 2026-10-16 |
| 3.226.119.211 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-16 |
| 44.233.34.245 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-16 |
| 45.77.200.160 United States · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-16 |
| 34.72.114.209 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-16 |
| 165.227.41.66 Canada · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-16 |
| 208.72.84.151 United States · GBP Software, LLC | exposed-secret | TXT | 1 | 2026-10-16 |
| 152.67.58.223 Brazil · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-16 |
| 3.10.70.226 United Kingdom · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-16 |
| 194.87.161.238 Russia · JSC "TIMEWEB" | exposed-secret | TXT | 1 | 2026-10-16 |
| 165.22.37.191 United States · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-16 |
| 18.135.209.57 United Kingdom · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-16 |
| 161.35.25.134 Germany · DigitalOcean, LLC | files | BAK | 1 | 2026-10-16 |
| 142.93.199.234 United States · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-16 |
| 128.65.199.205 Switzerland · Infomaniak Network SA | exposed-secret | TXT | 1 | 2026-10-16 |
| 138.2.136.23 Germany · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-16 |
| 60.204.171.31 China · Huawei Cloud Service data center | exposed-secret | TXT, YML | 3 | 2026-10-16 |
| 139.224.113.180 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware tunnel | SQL, MD, ELF, PY | 34 | 2026-10-16 |
| 154.36.183.100 MU · NetLab Global | exposed-secret c2 malware tunnel | PY, SH, TXT, ELF | 18 | 2026-10-16 |
| 103.200.219.143 Singapore · NewMedia Express Pte Ltd | exploit exposed-secret malware mozi | TXT, YAML, OVPN | 27 | 2026-10-16 |
| 45.153.34.235 The Netherlands · TechTies Inc. | malware mirai exploit exposed-secret | ELF, C, SH, H | 68 | 2026-10-15 |
| 139.59.125.212 Singapore · DigitalOcean, LLC | c2 | COM | 1 | 2026-10-15 |
| 20.190.159.0 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.159.73 Ireland · Microsoft Corporation | exposed-secret tunnel | TXT | 1 | 2026-10-15 |
| 23.94.145.88 United States · DEDIK SERVICES LIMITED | files | BIN | 1 | 2026-10-15 |
| 43.165.129.163 Japan · Shenzhen Tencent Computer Systems Company Limited | files | TXT | 3 | 2026-10-15 |
| 178.128.201.3 Germany · DigitalOcean, LLC | c2 | COM | 1 | 2026-10-15 |
| 104.21.73.31 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-15 |
| 172.67.157.55 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-15 |
| 45.115.55.12 India · Satellite Netcom Private Limited | files | BIN | 1 | 2026-10-15 |
| 45.79.23.204 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-15 |
| 45.79.149.226 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-15 |
| 45.58.168.141 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-15 |
| 20.190.159.129 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 45.33.20.105 United States · Akamai Technologies, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 43.252.11.4 Indonesia · PT Quantum Tera Network | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 185.27.134.227 United Kingdom · Wildcard UK Limited | files | PHP | 2 | 2026-10-15 |
| 185.27.134.33 United Kingdom · Wildcard UK Limited | files | PHP | 2 | 2026-10-15 |
| 185.27.134.101 United Kingdom · Wildcard UK Limited | files | PHP | 2 | 2026-10-15 |
| 20.190.159.128 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.159.130 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.159.68 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 54.215.31.113 United States · Amazon.com, Inc. | files | LIFE | 1 | 2026-10-15 |
| 20.190.159.131 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.159.23 Ireland · Microsoft Corporation | exploit exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.160.128 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.160.2 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.160.3 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 186.241.117.95 United States · Uscloud Inc | c2 exposed-secret exploit malware | PS1, SQL, PE, BAT | 24 | 2026-10-15 |
| 43.231.133.162 India · Microscan Internet Limited | files | BIN | 1 | 2026-10-15 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free