huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 3.109.166.60 India · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-09-30 |
| 202.155.90.206 Hong Kong · PT Deneva | exposed-secret | TXT | 2 | 2026-09-30 |
| 211.159.161.9 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 20.17.161.64 Malaysia · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 194.163.174.251 France · Contabo GmbH | exposed-secret | TXT, ENV, JSON, PHP | 10 | 2026-09-30 |
| 178.104.231.250 Germany · Hetzner Online GmbH | exploit exposed-secret c2 malware | SQL, PY, TXT, SH | 125 | 2026-09-30 |
| 175.41.208.50 Japan · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-09-30 |
| 161.97.137.133 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 157.245.205.105 Singapore · DigitalOcean, LLC | files | ENV, JSON, PHP | 3 | 2026-09-30 |
| 149.28.152.50 Singapore · The Constant Company, LLC | exposed-secret | JSON | 1 | 2026-09-30 |
| 144.91.89.52 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-09-30 |
| 139.59.10.206 India · DigitalOcean, LLC | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 138.59.129.18 Brazil · Seanet Telecom Ltda | exposed-secret | TXT | 1 | 2026-09-30 |
| 13.239.37.20 Australia · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-09-30 |
| 123.253.61.96 Thailand · COLODEE DIGITAL NETWORK COMPANY LIMITED | exposed-secret | ENV | 1 | 2026-09-30 |
| 121.37.133.251 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV, JSON, PHP | 11 | 2026-09-30 |
| 121.43.142.154 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-09-30 |
| 120.53.225.227 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-09-30 |
| 117.144.159.178 China · China Mobile | files | PHP | 1 | 2026-09-30 |
| 114.132.250.56 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 116.63.176.48 China · China Unicom IP network | exposed-secret | TXT | 1 | 2026-09-30 |
| 114.110.182.150 South Korea · NHNCLOUD | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 103.73.189.190 India · Evoke Digital Solutions | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 103.85.227.121 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 106.12.48.14 China · Beijing Baidu Netcom Science and Technology Co., Ltd. | files | JSON | 1 | 2026-09-30 |
| 103.172.236.85 Vietnam · Hanoi Telecom JSC | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-09-30 |
| 8.208.44.181 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 169.58.33.122 United States · TerraTransit AG | c2 exposed-secret | TXT | 1 | 2026-09-30 |
| 207.57.188.152 United States · Zillion Network Inc. | malware mozi exploit exposed-secret | PY, GO, ELF, PYC | 9 | 2026-09-30 |
| 31.76.101.206 United States · PowerRDP-Network-AS | files | TOP | 1 | 2026-09-30 |
| 172.67.192.104 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-09-30 |
| 137.184.98.116 United States · DigitalOcean, LLC | exposed-secret | NET | 1 | 2026-09-30 |
| 104.21.81.253 United States · Cloudflare, Inc. | files | CLICK | 1 | 2026-09-30 |
| 95.85.231.220 Germany · WAIcore Ltd | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 217.60.76.249 United Kingdom · Miteflux Technologies Ltd | files | JPG | 1 | 2026-09-30 |
| 45.13.186.247 Germany · ALINDA LLC | exposed-secret | TXT | 1 | 2026-09-30 |
| 176.125.242.162 Moldova · ALEXHOST SRL | exposed-secret | TXT | 1 | 2026-09-30 |
| 89.116.109.171 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-09-30 |
| 195.200.9.87 United Kingdom · Hostinger International Limited | files | COM, TXT | 2 | 2026-09-30 |
| 43.174.247.29 Singapore · ACEVILLE PTE.LTD. | files | APP | 1 | 2026-09-30 |
| 43.174.246.29 Singapore · ACEVILLE PTE.LTD. | files | APP | 1 | 2026-09-30 |
| 3.33.130.190 United States · Amazon.com, Inc. | files | COM | 1 | 2026-09-30 |
| 195.200.9.143 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 185.77.97.232 United States · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 91.108.103.224 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 185.77.97.131 United States · Hostinger International Limited | files | COM | 1 | 2026-09-29 |
| 89.116.109.189 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-29 |
| 89.116.109.163 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-29 |
| 185.77.97.52 United States · Hostinger International Limited | files | COM | 1 | 2026-09-29 |
| 95.85.232.60 Germany · WAIcore Ltd | malware elf-binary | ELF | 2 | 2026-09-29 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free