huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,030
hosts
112,856
files
80
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 41.90.231.68 Kenya · Safaricom Limited | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 66.160.168.164 United States · Hurricane Electric LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 200.29.92.77 Chile · MCL Internet | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 20.224.123.144 The Netherlands · Microsoft Corporation | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 185.32.189.205 Portugal · SAMPLING LINE-SERVICOS E INTERNET, LDA | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 34.78.109.194 Belgium · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 188.92.44.56 Czechia · LiveSport s.r.o. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 64.176.168.129 Israel · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 143.198.249.36 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 203.172.222.249 Thailand · Ministry of Education - EMISC | files | JSON | 1 | 2026-10-28 |
| 106.0.135.20 Thailand · Ministry of Education - EMISC | files | JSON | 1 | 2026-10-28 |
| 133.125.50.191 Japan · SAKURA Internet Inc. | exposed-secret | ENV | 1 | 2026-10-28 |
| 192.71.27.172 Israel · Interhost Communication Solutions Ltd. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 83.243.121.167 Norway · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 210.21.244.19 China · China Unicom Shenzen network | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 123.133.65.7 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-28 |
| 89.31.122.207 Czechia · Cogent Communications | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 198.244.228.188 United Kingdom · OVH SAS | exposed-secret | TXT, PHP | 3 | 2026-10-28 |
| 47.129.105.10 Singapore · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 91.132.92.158 Denmark · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 43.210.37.86 Thailand · Amazon.com, Inc. | exposed-secret | TXT, ENV | 3 | 2026-10-28 |
| 43.199.29.225 China · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 7 | 2026-10-28 |
| 35.78.212.217 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 35.77.81.9 Japan · Amazon.com, Inc. | exposed-secret | ENV, TXT | 3 | 2026-10-28 |
| 193.235.146.41 Chile · iHosting Servicios Internet Ltda. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 185.28.154.238 Israel · O.M.C. COMPUTERS & COMMUNICATIONS LTD | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 139.87.74.106 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 139.87.82.201 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 139.87.80.2 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 47.128.220.7 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 3.34.51.134 South Korea · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 7 | 2026-10-28 |
| 16.106.35.211 United States | exposed-secret | TXT, ENV | 3 | 2026-10-28 |
| 194.71.107.241 Bulgaria · EDIS GmbH | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 13.212.226.239 Singapore · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 4 | 2026-10-28 |
| 13.208.185.47 Japan · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 192.71.26.78 Italy · EDIS GmbH | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 121.4.70.25 China · Shenzhen Tencent Computer Systems Company Limited | files | BIN | 1 | 2026-10-28 |
| 121.196.247.165 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 121.199.174.181 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 15.152.38.117 Japan · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 106.55.135.132 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 152.136.20.54 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 101.37.237.127 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 106.53.44.41 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 13.210.69.163 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 66.175.219.53 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 13.125.83.249 South Korea · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 14.225.205.210 Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 132.145.98.219 Canada · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 115.126.127.68 Hong Kong · Forewin Telecom Group Limited | exposed-secret | TXT | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free