huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,975
hosts
106,609
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 43.252.161.94 Hong Kong · Dimension Network & Communication Limited | files | JSON | 1 | 2026-10-28 |
| 172.104.77.187 Japan · Akamai Technologies, Inc. | exposed-secret | ENV, JSON, PHP | 6 | 2026-10-28 |
| 121.45.72.51 Australia · TPG Internet Pty Ltd | files | JSON | 1 | 2026-10-28 |
| 43.130.36.167 United States · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-28 |
| 132.248.208.173 Mexico · Universidad Nacional Autonoma de Mexico | files | BIN | 1 | 2026-10-28 |
| 14.29.248.184 China · Chinanet | exposed-secret | TXT | 2 | 2026-10-28 |
| 132.247.252.93 Mexico · Universidad Nacional Autonoma de Mexico | files | BIN | 1 | 2026-10-28 |
| 43.208.175.219 Thailand · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 43.208.175.145 Thailand · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 43.174.230.101 Singapore · ACEVILLE PTE.LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 47.104.76.62 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 121.4.43.67 China · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-28 |
| 193.41.237.125 Germany · dataforest GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 111.230.234.112 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 106.52.110.71 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 106.52.249.153 China · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-28 |
| 101.42.108.105 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 124.221.122.19 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV | 1 | 2026-10-28 |
| 85.190.115.121 The Netherlands · dogado GmbH | malware elf-binary | ELF, GZ | 12 | 2026-10-28 |
| 64.23.255.237 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 49.51.200.46 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 35.212.190.111 United States · Google LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 65.49.194.29 Canada · IT7 Networks Inc | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 69.164.207.30 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 40.83.54.56 United States · Microsoft Corporation | exposed-secret | HTML | 5 | 2026-10-28 |
| 102.129.185.27 South Africa · BreezeHost | exposed-secret | JSON, TXT | 2 | 2026-10-28 |
| 167.114.115.103 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-28 |
| 41.59.113.12 TZ · TANZANIA TELECOMMUNICATIONS CO. LTD | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 46.38.231.57 Germany · netcup GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 58.64.30.167 Thailand · ADVANCED WIRELESS NETWORK COMPANY LIMITED | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 118.174.16.218 Thailand · TOT Public Company Limited | exposed-secret exploit | TXT, BIN | 3 | 2026-10-28 |
| 46.135.149.37 Czechia · Vodafone Czech Republic a.s. | exposed-secret | TXT | 1 | 2026-10-28 |
| 41.206.40.122 Kenya · AccessKenya Group | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 43.153.110.26 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 6 | 2026-10-28 |
| 131.165.177.68 Denmark · KMD A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 194.68.26.77 Singapore · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 149.111.145.26 United States · Unitedhealthcare | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.217.93.170 Malaysia · Big Band Sdn Bhd | exposed-secret | ENV | 1 | 2026-10-28 |
| 103.217.92.224 Malaysia · Big Band Sdn Bhd | exposed-secret | ENV | 1 | 2026-10-28 |
| 113.160.248.143 Vietnam · VNPT Corp | files | BIN | 1 | 2026-10-28 |
| 41.90.231.68 Kenya · Safaricom Limited | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 66.160.168.164 United States · Hurricane Electric LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 200.29.92.77 Chile · MCL Internet | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 20.224.123.144 The Netherlands · Microsoft Corporation | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 185.32.189.205 Portugal · SAMPLING LINE-SERVICOS E INTERNET, LDA | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 34.78.109.194 Belgium · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 188.92.44.56 Czechia · LiveSport s.r.o. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 64.176.168.129 Israel · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 143.198.249.36 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 203.172.222.249 Thailand · Ministry of Education - EMISC | files | JSON | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free