huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,483
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 148.77.92.194 United States · Cablevision Lightpath LLC | files | BIN | 1 | 2026-11-05 |
| 145.223.140.51 Singapore · Byteplus Pte. Ltd. | exploit exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-11-05 |
| 14.141.53.42 India · Tata Communications Limited | files | BIN | 1 | 2026-11-05 |
| 136.92.32.58 United States · Google LLC | exposed-secret | TXT | 1 | 2026-11-05 |
| 136.57.229.66 United States · Google Fiber Inc. | exposed-secret | TXT | 1 | 2026-11-05 |
| 124.225.69.188 China · Chinanet | exposed-secret | TXT | 1 | 2026-11-05 |
| 123.31.12.187 Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | files | JSON | 1 | 2026-11-05 |
| 124.89.83.31 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT, ENV, JSON | 4 | 2026-11-05 |
| 117.50.80.107 China · China Unicom Beijing Province Network | exposed-secret | BIN, LOG, TAR, TXT | 5 | 2026-11-05 |
| 121.160.102.68 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-11-05 |
| 118.107.139.224 Pakistan · Special Communication Organization | exposed-secret | PHP, CSV, MD, TXT | 5 | 2026-11-05 |
| 117.72.109.89 China · China Telecom | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-05 |
| 117.72.186.146 China · China Telecom | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-05 |
| 116.131.154.154 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-11-05 |
| 104.233.150.138 United States · PEG TECH INC | exposed-secret exploit webshell tunnel | SH, TXT, PY, CMD | 46 | 2026-11-05 |
| 110.164.64.243 Thailand · Triple T Broadband Public Company Limited | files | BIN | 1 | 2026-11-05 |
| 106.14.175.235 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-05 |
| 106.225.235.90 China · CHINANET Jiangx province IDC network | exposed-secret | TXT | 1 | 2026-11-05 |
| 109.105.18.120 Hungary · Naracom Kft. | exposed-secret | TXT | 1 | 2026-11-05 |
| 103.106.114.71 Indonesia · PT. Sumatra Multimedia Solusi | exposed-secret | JSON | 1 | 2026-11-05 |
| 103.57.209.16 Vietnam · NhanHoa Software company | exposed-secret | TXT | 1 | 2026-11-05 |
| 103.179.95.103 India · WEBYNE DATA CENTRE PRIVATE LIMITED | exposed-secret | TXT | 1 | 2026-11-05 |
| 103.228.144.95 India · Gujarat Telelink Pvt Ltd | exposed-secret | TXT | 1 | 2026-11-05 |
| 103.203.174.6 India · Aspt Networks Pvt Ltd | files | BIN | 1 | 2026-11-05 |
| 101.200.242.201 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-05 |
| 101.37.87.23 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-05 |
| 51.15.107.106 France · Scaleway SAS | c2 cobalt-strike exploit malware | TXT | 1 | 2026-11-05 |
| 47.120.70.161 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-05 |
| 51.79.161.200 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-11-05 |
| 5.181.86.248 Ukraine · Internet Solutions & Innovations LTD. | exposed-secret | TXT | 3 | 2026-11-05 |
| 5.181.86.249 Ukraine · Internet Solutions & Innovations LTD. | exposed-secret | TXT | 3 | 2026-11-05 |
| 39.107.85.83 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | ENV, JSON, PHP, TXT | 4 | 2026-11-05 |
| 143.198.27.227 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-05 |
| 139.60.160.50 United States · HOSTKEY | exposed-secret exploit | JSON, TXT | 5 | 2026-11-05 |
| 8.209.101.205 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit | TXT | 2 | 2026-11-05 |
| 170.106.172.5 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-05 |
| 23.149.28.221 United States · NetLab Global | exposed-secret | TXT | 1 | 2026-11-05 |
| 168.144.251.199 United States | exploit exposed-secret webshell malware | PHP, HTML, LOG, PY | 146 | 2026-11-05 |
| 154.21.206.29 United States · Cogent Communications | exposed-secret | REVOKE, YAML | 2 | 2026-11-05 |
| 23.149.28.115 United States · NetLab Global | exposed-secret | TXT | 1 | 2026-11-05 |
| 172.66.46.208 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-11-05 |
| 172.66.45.48 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-11-05 |
| 23.149.28.60 United States · NetLab Global | exposed-secret | TXT | 1 | 2026-11-05 |
| 94.130.22.61 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, EML, JSON, TXT | 1,209 | 2026-11-05 |
| 80.155.54.228 Germany · Deutsche Telekom AG | exposed-secret | JSON, PHP | 2 | 2026-11-05 |
| 23.27.25.75 United States · Evoxt Sdn. Bhd. | exposed-secret malware mozi exploit | PY, SQL, JSON, LOG | 129 | 2026-11-05 |
| 89.116.109.225 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-04 |
| 91.108.103.107 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-04 |
| 115.126.104.19 Hong Kong · Forewin Telecom Group Limited | files | 1 | 2026-11-04 | |
| 172.67.128.54 United States · Cloudflare, Inc. | files | SITE | 1 | 2026-11-04 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free