huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,457
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 34.35.168.115 South Africa · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.35.109.70 South Africa · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.35.58.147 South Africa · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.26.180.23 United States · Google LLC | files | BIN | 1 | 2026-10-05 |
| 34.32.17.39 Germany · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.20.136.124 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.19.182.55 Canada · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.18.231.224 Qatar · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.18.203.21 Qatar · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.18.215.244 Qatar · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.18.52.61 Qatar · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.17.193.248 Italy · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.17.36.244 Italy · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 34.15.187.238 Thailand · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 20.190.159.75 Ireland · Microsoft Corporation | files | TXT | 1 | 2026-10-05 |
| 34.12.157.187 The Netherlands · Google LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 31.57.47.29 United States · CGI GLOBAL LIMITED | exposed-secret | TXT | 1 | 2026-10-05 |
| 31.7.66.163 Iran · Asiatech Data Transmission company | exposed-secret | ENV | 1 | 2026-10-05 |
| 27.254.217.117 Thailand · CS Loxinfo Public Company Limited | files | PHP | 1 | 2026-10-05 |
| 193.233.75.214 Germany · Digital Hosting Provider LLC | files | DZ, ONLINE | 2 | 2026-10-05 |
| 193.233.75.216 Germany · Digital Hosting Provider LLC | files | DZ, ONLINE | 2 | 2026-10-05 |
| 27.78.32.128 Vietnam · Viettel Group | files | JSON | 1 | 2026-10-05 |
| 20.190.160.64 The Netherlands · Microsoft Corporation | files | TXT | 1 | 2026-10-05 |
| 80.242.209.137 Kazakhstan · Jusan Mobile JSC | files | HTML | 1 | 2026-10-05 |
| 20.190.160.5 The Netherlands · Microsoft Corporation | files | TXT | 1 | 2026-10-05 |
| 20.115.100.78 United States · Microsoft Corporation | exposed-secret | TXT | 1 | 2026-10-05 |
| 5.180.182.20 The Netherlands · Kamatera Inc | exposed-secret | TXT | 1 | 2026-10-05 |
| 172.67.219.113 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-05 |
| 104.21.70.40 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-05 |
| 20.150.85.193 Japan · Microsoft Corporation | exploit | 1 | 2026-10-05 | |
| 176.58.92.199 United Kingdom · NetActuate, Inc | files | TXT | 2 | 2026-10-05 |
| 176.58.88.108 United Kingdom · NetActuate, Inc | files | TXT | 2 | 2026-10-05 |
| 176.58.88.82 United Kingdom · NetActuate, Inc | files | TXT | 2 | 2026-10-05 |
| 104.21.62.7 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-05 |
| 172.67.217.125 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-05 |
| 34.254.202.253 Ireland · Amazon.com, Inc. | malware coinminer exposed-secret exploit | LOG, TXT, PY, ELF | 26 | 2026-10-05 |
| 209.97.189.41 United Kingdom · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 45.43.142.1 Georgia · OVH SAS | files | TXT | 1 | 2026-10-05 |
| 69.169.109.75 United States · Interserver, Inc | exposed-secret | ONLINE | 1 | 2026-10-05 |
| 172.67.212.198 United States · Cloudflare, Inc. | exploit | COM | 1 | 2026-10-05 |
| 104.21.61.183 United States · Cloudflare, Inc. | exploit | COM | 1 | 2026-10-05 |
| 20.90.164.238 United Kingdom · Microsoft Corporation | exposed-secret | TXT, ENV, PHP | 5 | 2026-10-04 |
| 107.172.209.126 United States · HostPapa | exploit malware pe-binary | TXT, JPG, PE, ZIP | 5 | 2026-10-04 |
| 45.158.199.112 Germany · HOSTING INDUSTRY LIMITED | exposed-secret | TXT | 1 | 2026-10-04 |
| 50.31.166.23 United States · DEFT.COM | files | HTML | 1 | 2026-10-04 |
| 5.129.204.34 Russia · JSC "TIMEWEB" | exposed-secret malware elf-binary | ELF, PS1, SH, TXT | 4 | 2026-10-04 |
| 95.182.88.43 United Arab Emirates · Cloud Software - FZCO | exposed-secret exploit tunnel | SH, KEY, PEM, COMPLE | 293 | 2026-10-04 |
| 185.244.43.186 Germany · Kontel LLC | malware mozi exposed-secret | PY, LOG, BIN | 9 | 2026-10-04 |
| 185.11.72.171 Russia · JSC Selectel | exploit malware mozi tunnel | LOG, PY, SH, JSON | 11 | 2026-10-04 |
| 14.195.144.206 India · TTSL-ISP DIVISION | files | BIN | 1 | 2026-10-04 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free