huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,030
hosts
112,856
files
80
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 156.224.19.2 Seychelles · CORENET CLOUD SDN. BHD. | exposed-secret | TXT, ENV, PHP | 8 | 2026-10-28 |
| 52.66.61.239 India · Amazon.com, Inc. | files | PHP | 2 | 2026-10-28 |
| 47.201.204.23 United States · Frontier Communications of America, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 149.88.75.116 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-28 |
| 195.43.142.215 Russia · JSC Mediasoft ekspert | exposed-secret | TXT | 1 | 2026-10-28 |
| 38.246.245.40 United States · NetLab Global | exposed-secret | TXT | 1 | 2026-10-28 |
| 99.83.188.127 United States · Amazon.com, Inc. | files | PHP | 2 | 2026-10-28 |
| 108.160.134.174 Japan · The Constant Company, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 64.235.45.67 United States · Las Vegas NV Datacenter | exposed-secret | ENV | 1 | 2026-10-28 |
| 13.235.201.194 India · Amazon.com, Inc. | files | PHP | 2 | 2026-10-28 |
| 75.2.109.38 United States · Amazon.com, Inc. | files | PHP | 2 | 2026-10-28 |
| 58.58.161.210 China · Chinanet | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 120.194.243.44 China · China Mobile | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 103.231.56.165 Hong Kong · VH-GLOBAL | exposed-secret | TXT | 1 | 2026-10-28 |
| 120.202.73.180 China · China Mobile | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 103.85.225.231 Hong Kong · cognetcloud INC | exposed-secret | TXT | 1 | 2026-10-28 |
| 219.140.53.42 China · Chinanet | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 14.236.146.33 Vietnam · VNPT Corp | files | BIN | 1 | 2026-10-28 |
| 64.235.43.57 United States · Las Vegas NV Datacenter | exposed-secret | ENV | 1 | 2026-10-28 |
| 154.219.112.32 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-28 |
| 47.108.113.5 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 8.142.6.185 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 110.238.119.58 Singapore · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 159.138.162.23 South Africa · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.119.174.125 Singapore · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 121.182.117.89 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-28 |
| 117.4.32.51 Vietnam · Viettel Group | files | JSON | 1 | 2026-10-28 |
| 90.146.195.213 Austria · LIWEST Kabelmedien GmbH | exposed-secret | JSON, TXT | 2 | 2026-10-28 |
| 103.80.88.106 Indonesia · PT Jala Lintas Media | exposed-secret exploit | TXT | 4 | 2026-10-28 |
| 103.131.61.143 Indonesia · PT. NEWTON CIPTA INFORMATIKA | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 5.223.58.162 Singapore · Hetzner Online GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 34.41.96.243 United States · Google LLC | exposed-secret | TXT | 2 | 2026-10-28 |
| 51.83.43.14 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 24.151.114.10 United States · Charter Communications | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.80.20.60 Australia · Hosted Network Pty Ltd | exposed-secret | TXT | 1 | 2026-10-28 |
| 112.94.22.233 China · China Unicom Guangzhou network | exposed-secret | TXT, JSON | 4 | 2026-10-28 |
| 101.168.60.100 Australia · Telstra Limited | files | BIN | 1 | 2026-10-28 |
| 61.7.187.90 Thailand · National Telecom Public Company Limited | files | JSON | 1 | 2026-10-28 |
| 110.77.194.97 Thailand · National Telecom Public Company Limited | files | JSON | 1 | 2026-10-28 |
| 134.236.9.116 Thailand · National Telecom Public Company Limited | files | JSON | 1 | 2026-10-28 |
| 123.209.72.12 Australia · Telstra Limited | files | JSON | 1 | 2026-10-28 |
| 212.90.57.189 Ukraine · Scientific-Production Enterprise Information Technologies Ltd | files | ENV | 1 | 2026-10-28 |
| 109.195.210.6 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT | 1 | 2026-10-28 |
| 187.188.165.243 Mexico · TOTAL PLAY TELECOMUNICACIONES SA DE CV | malware mozi webshell exposed-secret | PHP, JS, LIB, SWF | 363 | 2026-10-28 |
| 177.107.178.135 Brazil · PROVEDOR BRCENTRAL.NET LTDA | exposed-secret | TXT | 1 | 2026-10-28 |
| 85.116.150.183 Italy · Connectivia S.r.l | files | BIN | 1 | 2026-10-28 |
| 132.248.159.85 Mexico · Universidad Nacional Autonoma de Mexico | exposed-secret | TXT | 1 | 2026-10-28 |
| 115.76.190.16 Vietnam · Viettel Group | files | JSON | 1 | 2026-10-28 |
| 171.235.189.110 Vietnam · Viettel Group | files | JSON | 1 | 2026-10-28 |
| 148.244.147.194 Mexico · Alestra, S. de R.L. de C.V. | files | BIN | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free