huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
99
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 47.242.90.47 United States · Alibaba (US) Technology Co., Ltd. | files | HTML | 1 | 2026-10-12 |
| 192.238.250.38 United States · Antbox Networks Limited | files | HTML | 1 | 2026-10-12 |
| 172.67.129.108 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-12 |
| 107.189.14.254 United States · FranTech Solutions | exposed-secret | TXT | 1 | 2026-10-12 |
| 172.67.191.238 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-12 |
| 216.158.79.79 United States · WebNX, Inc. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 179.198.221.215 Lithuania | files | HTML | 1 | 2026-10-12 |
| 172.67.132.203 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-12 |
| 104.21.1.145 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-12 |
| 47.237.23.121 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 8.218.15.220 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 104.21.13.98 United States · Cloudflare, Inc. | files | HTML | 1 | 2026-10-12 |
| 186.244.241.174 United States · AROSSCLOUD INC. | files | HTML | 1 | 2026-10-12 |
| 118.107.13.102 Japan · CTG Server Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 54.179.31.189 Singapore · Amazon.com, Inc. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 209.17.118.95 Singapore · LEASEWEB SINGAPORE PTE. LTD. | files | HTML | 1 | 2026-10-12 |
| 43.107.42.86 Singapore · Alibaba (US) Technology Co., Ltd. | exploit | HTML | 1 | 2026-10-12 |
| 45.77.246.95 Singapore · The Constant Company, LLC | files | HTML | 1 | 2026-10-12 |
| 195.123.240.13 Czechia · GREEN FLOID LLC | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 186.241.117.82 United States · Uscloud Inc | files | HTML | 1 | 2026-10-12 |
| 37.114.49.169 Germany · Oliver Horscht is trading as "SYNLINQ" | exposed-secret exploit | TXT, HTML | 4 | 2026-10-12 |
| 198.44.177.60 United States · CORENET CLOUD SDN. BHD. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 31.59.93.138 The Netherlands · CGI GLOBAL LIMITED | files | HTML | 1 | 2026-10-12 |
| 103.186.214.152 Hong Kong · cognetcloud INC | files | HTML | 1 | 2026-10-12 |
| 168.93.199.208 United States · Turing Group Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 176.122.134.61 Canada · IT7 Networks Inc | c2 exploit | HTML | 1 | 2026-10-12 |
| 154.222.19.165 Seychelles · cognetcloud INC | files | HTML | 1 | 2026-10-12 |
| 103.96.151.24 Hong Kong · West263 International Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 154.94.233.136 Seychelles · cognetcloud INC | exposed-secret | TXT | 1 | 2026-10-12 |
| 149.30.245.147 United States · SonderCloud Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 101.32.51.21 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | files | HTML | 1 | 2026-10-12 |
| 154.219.114.87 Hong Kong · cognetcloud INC | files | HTML | 2 | 2026-10-12 |
| 138.252.80.205 Hong Kong · Intelligent Cloud Limited | files | HTML | 1 | 2026-10-12 |
| 103.164.63.229 Hong Kong · cognetcloud INC | files | HTML | 1 | 2026-10-12 |
| 103.46.184.192 Hong Kong · LANDUPS LIMITED | files | HTML | 1 | 2026-10-12 |
| 149.88.93.179 Hong Kong · cognetcloud INC | files | HTML | 1 | 2026-10-12 |
| 157.245.59.64 Singapore · DigitalOcean, LLC | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 102.204.222.159 Nigeria · ABCCLOUD SDN.BHD. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 154.83.190.127 United States · Zillion Network Inc. | files | HTML | 1 | 2026-10-12 |
| 111.68.0.66 Hong Kong · Netsec Limited | files | HTML | 1 | 2026-10-12 |
| 111.68.0.70 Hong Kong · Netsec Limited | files | HTML | 1 | 2026-10-12 |
| 111.68.0.68 Hong Kong · Netsec Limited | files | HTML | 1 | 2026-10-12 |
| 111.68.0.69 Hong Kong · Netsec Limited | files | HTML | 1 | 2026-10-12 |
| 111.68.0.67 Hong Kong · Netsec Limited | files | HTML | 1 | 2026-10-12 |
| 118.107.41.239 Hong Kong · CTG Server Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 103.46.185.169 Hong Kong · LANDUPS LIMITED | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 151.101.130.159 United States · Fastly, Inc. | exposed-secret | HTML | 1 | 2026-10-12 |
| 31.76.79.58 United States · PLAY2GO INTERNATIONAL LIMITED | exposed-secret exploit malware mozi | SH, PY, PL | 34 | 2026-10-12 |
| 23.239.29.46 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-12 |
| 5.182.44.168 Iran · Green Web Samaneh Novin PJSC | exposed-secret | TXT | 1 | 2026-10-12 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free