huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,975
hosts
106,609
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 95.135.208.135 The Netherlands · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 139.84.236.32 South Africa · The Constant Company, LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.184.226 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.192.157 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 91.233.10.181 Germany · BITSFLOWCLOUD LTD | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.193.124 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 87.106.200.240 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.191.113.100 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.122.102 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 87.106.149.106 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 45.146.165.142 Russia · Beget LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 5.181.177.85 The Netherlands · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 162.218.120.200 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 104.223.62.197 Canada · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 31.56.233.108 Indonesia · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 31.58.102.86 Indonesia · Limestone Networks, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 166.1.2.244 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 136.175.82.37 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 217.156.64.157 Moldova · ALEXHOST SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 166.1.2.243 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.227.107.35 Spain · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.227.255.255 Spain · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 158.51.78.165 Canada · Limewave Communications | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 162.141.92.132 The Netherlands · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.227.104.193 Spain · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 178.83.33.27 United Kingdom · Exact Technologies Limited | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 185.174.135.77 Estonia · HZ Hosting Ltd | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 166.1.2.241 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.60.153.106 Germany · BITSFLOWCLOUD LTD | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 194.5.97.22 The Netherlands · WebHorizon Internet Services | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 193.238.152.122 The Netherlands · GREEN FLOID LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 191.96.11.206 United States · Wojciech Czapkowicz | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 185.249.72.128 United Kingdom · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.150.20.139 Ireland · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 47.99.97.132 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 47.99.193.226 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 60.204.209.60 China · Huawei Cloud Service data center | exposed-secret | TXT | 2 | 2026-10-28 |
| 153.122.40.94 Japan · GMO GlobalSign Holdings K.K. | exposed-secret | TXT | 1 | 2026-10-28 |
| 47.129.130.0 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 4 | 2026-10-28 |
| 164.138.217.9 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | TXT | 2 | 2026-10-28 |
| 216.106.180.106 United States · GTHost | files | ZIP | 1 | 2026-10-28 |
| 164.138.216.10 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | TXT | 2 | 2026-10-28 |
| 185.80.0.60 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | PHP, TXT | 2 | 2026-10-28 |
| 185.123.189.96 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 37.27.99.39 Finland · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-10-28 |
| 185.55.230.199 Bulgaria · Delta HighTech Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 129.226.89.158 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 6 | 2026-10-28 |
| 47.115.73.132 China · Hangzhou Alibaba Advertising Co.,Ltd. | files | JSON | 1 | 2026-10-28 |
| 195.158.8.123 Uzbekistan · "Uzbektelekom" Joint Stock Company | exposed-secret | TXT | 1 | 2026-10-28 |
| 179.253.248.205 United States | exposed-secret | YAML | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free