huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,065
hosts
115,936
files
99
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 160.16.200.77 Japan · SAKURA Internet Inc. | files | CLUB | 1 | 2026-10-11 |
| 4.227.214.227 United States · Microsoft Corporation | malware pe-binary | PE, PS1, ZIP, COM | 9 | 2026-10-10 |
| 78.17.209.207 Germany | exposed-secret | TXT | 1 | 2026-10-10 |
| 51.81.85.121 United States · OVH SAS | files | NET | 1 | 2026-10-10 |
| 172.67.144.228 United States · Cloudflare, Inc. | files | AU | 1 | 2026-10-10 |
| 194.9.6.5 Germany · dataforest GmbH | c2 exposed-secret | TXT | 2 | 2026-10-10 |
| 104.21.28.79 United States · Cloudflare, Inc. | files | AU | 1 | 2026-10-10 |
| 104.21.72.167 United States · Cloudflare, Inc. | files | CFD | 1 | 2026-10-10 |
| 37.221.111.69 Germany · Handy Networks, LLC | files | ORG | 1 | 2026-10-10 |
| 36.50.134.86 Vietnam · VPSTTT COMPUTER COMPANY LIMITED | malware mozi elf-binary | ELF | 13 | 2026-10-10 |
| 52.22.145.238 United States · Amazon.com, Inc. | exposed-secret | COM | 1 | 2026-10-10 |
| 103.140.55.158 Indonesia · CV. RUMAH CLOUD INDONESIA | files | BIN, LOG | 2 | 2026-10-10 |
| 172.67.133.27 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-10 |
| 104.21.67.199 United States · Cloudflare, Inc. | files | NET | 1 | 2026-10-10 |
| 104.21.13.208 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-10 |
| 172.67.180.39 United States · Cloudflare, Inc. | files | NET | 1 | 2026-10-10 |
| 45.130.165.44 Singapore · Kamatera, Inc. | exposed-secret exploit tunnel mirror | PHP, JS, LOG, OUT | 16 | 2026-10-10 |
| 149.28.175.80 Australia · The Constant Company, LLC | exposed-secret exploit tunnel | TXT | 49 | 2026-10-10 |
| 84.247.169.84 France · Contabo GmbH | exposed-secret | ENV | 1 | 2026-10-09 |
| 40.114.73.166 United States · Microsoft Corporation | malware exploit pe-binary | PE, PS1, MSI | 9 | 2026-10-09 |
| 47.74.52.233 United States · Alibaba (US) Technology Co., Ltd. | files | CN | 1 | 2026-10-09 |
| 104.21.17.146 United States · Cloudflare, Inc. | c2 | COM | 1 | 2026-10-09 |
| 104.18.21.66 United States · Cloudflare, Inc. | c2 | NET | 1 | 2026-10-09 |
| 104.18.20.66 United States · Cloudflare, Inc. | c2 | NET | 1 | 2026-10-09 |
| 64.239.123.129 United States · Amazon.com, Inc. | files | APP | 1 | 2026-10-09 |
| 172.67.196.29 United States · Cloudflare, Inc. | files | INFO | 1 | 2026-10-09 |
| 104.21.76.144 United States · Cloudflare, Inc. | files | INFO | 1 | 2026-10-09 |
| 64.89.161.65 Luxembourg · Ghosty Networks LLC | exploit exposed-secret | VBS | 2 | 2026-10-09 |
| 42.235.204.114 China · CHINA UNICOM China169 Backbone | exploit exposed-secret | TXT, ENV, JSON, PHP | 10 | 2026-10-09 |
| 45.76.243.216 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-09 |
| 45.79.200.90 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-09 |
| 84.235.245.220 United Arab Emirates · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 82.165.24.191 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 185.184.70.43 United Kingdom · MASSIVEGRID LTD | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 51.79.254.161 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-09 |
| 207.148.123.74 Singapore · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-09 |
| 149.28.183.82 Australia · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 5 | 2026-10-09 |
| 207.148.125.83 Singapore · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-09 |
| 45.77.139.235 The Netherlands · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-09 |
| 176.126.84.68 Germany · HostHatch, LLC | exposed-secret | TXT | 1 | 2026-10-09 |
| 5.75.252.79 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT, ENV | 4 | 2026-10-09 |
| 217.22.167.210 Russia · JSC Avantel | exposed-secret | TXT | 1 | 2026-10-09 |
| 149.28.65.176 United States · The Constant Company, LLC | files | PHP | 1 | 2026-10-09 |
| 103.74.5.219 Indonesia · PT Ikubaru Indonesia | files | PY, ZIP | 3 | 2026-10-09 |
| 194.163.178.71 France · Contabo GmbH | exposed-secret | SH | 2 | 2026-10-09 |
| 185.174.173.22 The Netherlands · GREEN FLOID LLC | files | 1 | 2026-10-09 | |
| 134.255.216.50 Germany · ZAP-Hosting GmbH | files | TXT | 1 | 2026-10-09 |
| 172.67.188.79 United States · Cloudflare, Inc. | files | XYZ | 1 | 2026-10-09 |
| 172.67.216.229 United States · Cloudflare, Inc. | ioc-match | LNK | 1 | 2026-10-09 |
| 104.21.32.244 United States · Cloudflare, Inc. | files | XYZ | 1 | 2026-10-09 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free