huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,066
hosts
115,937
files
86
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 44.210.0.201 United States · Amazon.com, Inc. | files | SH | 1 | 2026-10-08 |
| 37.69.77.150 France · Societe Francaise Du Radiotelephone - SFR SA | exposed-secret webshell exploit tunnel | PY, PYO, TXT, LOG | 81 | 2026-10-08 |
| 3.226.121.223 United States · Amazon.com, Inc. | files | SH | 1 | 2026-10-08 |
| 100.50.150.233 United States · Amazon.com, Inc. | files | SH | 1 | 2026-10-08 |
| 159.65.168.239 United States · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 89.116.210.63 United Kingdom · Limestone Networks, Inc. | exposed-secret | JSON, TXT | 2 | 2026-10-08 |
| 23.254.195.48 United States · HostPapa | malware exposed-secret elf-binary pe-binary | ELF, PE, TXT | 12 | 2026-10-08 |
| 31.77.189.167 United States · Emil Vitukhnovskii trading as Great Flower | files | PHP | 1 | 2026-10-08 |
| 172.67.171.103 United States · Cloudflare, Inc. | files | XYZ | 1 | 2026-10-08 |
| 104.21.29.48 United States · Cloudflare, Inc. | files | XYZ | 1 | 2026-10-08 |
| 104.18.54.45 United States · Cloudflare, Inc. | malware pe-binary | PE | 2 | 2026-10-08 |
| 104.18.50.34 United States · Cloudflare, Inc. | malware pe-binary | PE | 2 | 2026-10-08 |
| 8.209.208.167 Singapore · Alibaba (US) Technology Co., Ltd. | files | CN | 1 | 2026-10-08 |
| 85.158.57.2 Poland · Datacamp Limited | files | COM | 1 | 2026-10-08 |
| 208.98.38.234 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 172.67.222.34 United States · Cloudflare, Inc. | files | ONLINE | 1 | 2026-10-08 |
| 172.67.174.119 United States · Cloudflare, Inc. | files | BIZ | 1 | 2026-10-08 |
| 104.21.47.231 United States · Cloudflare, Inc. | files | BIZ | 1 | 2026-10-08 |
| 104.21.62.86 United States · Cloudflare, Inc. | files | ONLINE | 1 | 2026-10-08 |
| 45.58.168.180 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.129 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.36 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.72 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 204.188.254.228 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 45.58.168.195 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 34.154.12.196 Italy · Google LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 154.222.21.241 Seychelles · cognetcloud INC | exposed-secret | ENV | 1 | 2026-10-07 |
| 50.6.202.214 United States · Network Solutions, LLC | exposed-secret malware mozi | PHP, HTML, TXT | 7 | 2026-10-07 |
| 178.239.115.141 Bulgaria · ZYNOO Web Services FZC LLC | files | COM | 1 | 2026-10-07 |
| 104.21.38.132 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-07 |
| 172.67.222.243 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-07 |
| 188.114.96.0 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-07 |
| 188.114.97.0 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-07 |
| 34.142.40.134 United Kingdom · Google LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 34.140.59.106 Belgium · Google LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 51.161.21.1 Canada · OVH SAS | files | PHP | 1 | 2026-10-07 |
| 94.103.1.233 The Netherlands · Digital Hosting Provider LLC | exposed-secret | VC | 1 | 2026-10-07 |
| 3.22.204.44 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-07 |
| 3.142.78.66 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-07 |
| 3.141.207.60 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-07 |
| 18.226.108.145 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-07 |
| 182.129.144.48 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-07 |
| 119.109.210.22 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-07 |
| 185.216.68.66 Seychelles · ALEXHOST SRL | exploit exposed-secret webshell c2 | PY, TXT, SH, JS | 339 | 2026-10-07 |
| 23.224.119.154 United States · CNSERVERS LLC | c2 exploit exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-07 |
| 160.202.239.99 China · Hubei Feixun Network Co., Ltd | exposed-secret | TXT | 1 | 2026-10-07 |
| 203.55.129.83 China · CHINANET Fujian province Fuzhou IDC network | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-07 |
| 89.23.123.38 Germany · DpkgSoft International Limited | files | LIFE | 1 | 2026-10-07 |
| 45.76.1.45 United States · The Constant Company, LLC | files | INFO | 1 | 2026-10-07 |
| 3.234.105.175 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-07 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free