huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,031
hosts
112,857
files
81
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 148.244.147.194 Mexico · Alestra, S. de R.L. de C.V. | files | BIN | 1 | 2026-10-28 |
| 113.161.67.147 Vietnam · VNPT Corp | files | BIN | 1 | 2026-10-28 |
| 171.247.166.142 Vietnam · Viettel Group | files | JSON | 1 | 2026-10-28 |
| 15.135.74.255 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 222.252.17.130 Vietnam · VNPT Corp | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 209.38.93.248 Australia · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.104.18.190 Philippines · Responsible Internet Sustainability Effort | files | BIN, ENV, JSON, PHP | 5 | 2026-10-28 |
| 103.165.61.114 Indonesia · PT iForte Global Internet | files | BIN | 1 | 2026-10-28 |
| 123.56.159.216 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 148.135.86.168 United States · MULTACOM CORPORATION | exposed-secret | TXT | 1 | 2026-10-28 |
| 119.130.61.195 China · Chinanet | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 139.84.241.235 South Africa · The Constant Company, LLC | exposed-secret exploit tunnel forced-loot | MD, GZ, JS, JSON | 154 | 2026-10-28 |
| 129.159.19.217 India · Oracle Corporation | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 135.125.235.148 Germany · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 20.55.73.183 United States · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 129.121.119.148 United States · Oracle Corporation | files | BIN, ENV, JSON, PHP | 5 | 2026-10-28 |
| 178.62.54.43 United Kingdom · DigitalOcean, LLC | exploit exposed-secret | TXT | 1 | 2026-10-28 |
| 192.236.208.97 United States · HostPapa | exposed-secret webshell | JSON | 1 | 2026-10-28 |
| 64.227.111.164 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 146.190.136.81 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 92.222.193.112 Lithuania · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 203.177.231.203 Philippines · Globe Telecom (GMCR,INC) | files | BIN, ENV, JSON, PHP | 5 | 2026-10-28 |
| 209.209.8.8 Canada · Rica Web Services | c2 exploit exposed-secret | M3U | 1 | 2026-10-28 |
| 162.214.0.88 United States · Unified Layer | files | BIN | 1 | 2026-10-28 |
| 3.147.131.118 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 142.93.75.113 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 87.236.197.66 Czechia · Coolhousing s.r.o. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 172.232.209.164 Italy · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 109.73.199.99 Russia · JSC "TIMEWEB" | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 51.222.140.188 Canada · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 158.101.138.54 Japan · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 43.162.116.32 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | JSON | 1 | 2026-10-28 |
| 13.222.16.100 United States · Amazon.com, Inc. | exposed-secret | ENV | 1 | 2026-10-28 |
| 34.236.16.54 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 172.236.235.36 United States · Akamai Technologies, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 44.205.99.216 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-28 |
| 157.245.40.229 United Kingdom · DigitalOcean, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 18.235.197.197 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-28 |
| 178.156.247.220 United States · Hetzner Online GmbH | exposed-secret | PHP | 1 | 2026-10-28 |
| 3.92.197.26 United States · Amazon.com, Inc. | files | PHP | 1 | 2026-10-28 |
| 4.240.105.78 India · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-28 |
| 45.77.4.152 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 167.233.248.192 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 84.247.137.172 France · Contabo GmbH | exposed-secret | JSON | 1 | 2026-10-28 |
| 173.231.209.91 United States · InMotion Hosting, Inc. | files | PHP | 1 | 2026-10-28 |
| 207.246.110.220 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 148.206.58.66 Mexico · Universidad Autonoma Metropolitana | exposed-secret | TXT | 1 | 2026-10-28 |
| 45.79.198.169 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 200.198.62.75 Brazil · COMPANHIA DE TECNOLOGIA DA INFORMACAO ESTADO MG | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 37.84.180.18 Germany · Deutsche Telekom AG | exposed-secret | TXT | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free