huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,067
hosts
115,938
files
87
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 3.234.105.175 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-07 |
| 188.40.225.137 Germany · Hetzner Online GmbH | files | DZ | 1 | 2026-10-07 |
| 23.239.211.132 United States · Handy Networks, LLC | files | COM | 1 | 2026-10-07 |
| 78.128.76.163 Bulgaria · Telehouse EAD | files | COM | 1 | 2026-10-07 |
| 3.210.69.188 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-07 |
| 3.16.227.239 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-07 |
| 3.215.124.52 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-07 |
| 172.67.176.103 United States · Cloudflare, Inc. | files | INFO | 1 | 2026-10-07 |
| 104.21.56.33 United States · Cloudflare, Inc. | files | INFO | 1 | 2026-10-07 |
| 103.224.212.142 Australia · Trellian Pty. Limited | files | CYOU | 1 | 2026-10-07 |
| 104.45.153.136 United States · Microsoft Corporation | files | EXE | 1 | 2026-10-07 |
| 34.194.254.227 United States · Amazon.com, Inc. | files | COM | 1 | 2026-10-07 |
| 46.101.197.32 Germany · DigitalOcean, LLC | exposed-secret tunnel | TXT, ENV, TV | 4 | 2026-10-07 |
| 79.110.49.138 France · 12651980 CANADA INC. | exposed-secret | 1 | 2026-10-07 | |
| 3.120.154.17 Germany · Amazon.com, Inc. | files | COM | 1 | 2026-10-07 |
| 118.69.78.91 Vietnam · FPT Telecom Company | exposed-secret malware pe-binary tunnel | SH, ZIP, BAT, JSON | 20 | 2026-10-07 |
| 3.26.199.64 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 5 | 2026-10-07 |
| 5.189.165.19 France · Contabo GmbH | exposed-secret | TXT | 3 | 2026-10-07 |
| 38.54.16.112 United States · LIGHT NODE LIMITED | exposed-secret | TXT | 2 | 2026-10-07 |
| 217.160.147.226 United Kingdom · IONOS SE | exposed-secret | TXT | 1 | 2026-10-07 |
| 192.3.239.164 United States · HostPapa | exposed-secret | TXT | 1 | 2026-10-07 |
| 172.86.118.127 United States · RouterHosting LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 172.67.159.237 United States · Cloudflare, Inc. | files | PHP | 1 | 2026-10-07 |
| 86.107.168.146 United Arab Emirates · Rica Web Services | files | JE | 1 | 2026-10-07 |
| 104.21.50.95 United States · Cloudflare, Inc. | files | PHP | 1 | 2026-10-07 |
| 51.21.167.4 Sweden · Amazon.com, Inc. | files | DZ | 1 | 2026-10-07 |
| 104.18.38.10 United States · Cloudflare, Inc. | files | MSI | 1 | 2026-10-07 |
| 172.64.149.246 United States · Cloudflare, Inc. | files | MSI | 1 | 2026-10-07 |
| 5.188.230.139 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.52 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.141 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.88 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.121 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.130 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.123 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.120 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.140 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 38.60.157.86 United States · Kaopu Cloud HK Limited | malware mozi exposed-secret | PY, LOG, TGZ, TXT | 20 | 2026-10-07 |
| 140.238.84.6 United Kingdom · Oracle Corporation | files | PHP | 1 | 2026-10-07 |
| 104.21.59.55 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-07 |
| 172.67.215.31 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-07 |
| 172.67.192.37 United States · Cloudflare, Inc. | files | PICS | 1 | 2026-10-07 |
| 104.21.73.205 United States · Cloudflare, Inc. | files | PICS | 1 | 2026-10-07 |
| 64.118.143.136 Hong Kong · Eons Data Communications Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 167.148.201.15 United Kingdom · MillenialHost Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 208.113.208.116 United States · New Dream Network, LLC | files | COM | 1 | 2026-10-06 |
| 107.173.143.44 United States · HostPapa | files | TXT | 1 | 2026-10-06 |
| 172.67.176.216 United States · Cloudflare, Inc. | c2 | COM | 1 | 2026-10-06 |
| 64.239.109.193 United States · Amazon.com, Inc. | files | APP | 1 | 2026-10-06 |
| 45.178.183.224 Brazil · AbsamHost Internet Data Center | exposed-secret | TXT | 2 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free