huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,031
hosts
112,857
files
81
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 125.76.110.89 China · China Telecom | exposed-secret | TXT | 1 | 2026-10-27 |
| 70.229.7.76 United States · AT&T Enterprises, LLC | exposed-secret | ENV, JSON | 2 | 2026-10-27 |
| 43.209.175.24 Thailand · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 4 | 2026-10-27 |
| 106.13.77.249 China · Beijing Baidu Netcom Science and Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-27 |
| 166.1.90.114 United States · OVH SAS | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-27 |
| 43.138.100.60 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-27 |
| 47.237.153.2 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-27 |
| 60.247.147.85 China · CHINANET SiChuan Telecom Internet Data Center | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-27 |
| 222.163.238.36 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-10-27 |
| 129.211.171.115 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-27 |
| 122.51.20.40 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-27 |
| 198.13.61.225 Japan · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-27 |
| 129.204.198.254 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 2 | 2026-10-27 |
| 91.230.149.136 Turkey · Makdos Bilisim Teknolojileri Sanayi Ticaret Limited Sirketi | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-27 |
| 167.179.105.130 Japan · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-27 |
| 1.14.159.215 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-27 |
| 116.255.233.30 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-27 |
| 115.190.194.7 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-27 |
| 181.224.26.51 Brazil · MASTER DA WEB DATACENTER LTDA | exposed-secret | TXT | 1 | 2026-10-27 |
| 43.200.174.95 South Korea · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-27 |
| 20.28.196.139 Australia · Microsoft Corporation | exposed-secret | TXT, ENV, JSON, PHP | 5 | 2026-10-27 |
| 178.255.225.247 Spain · FALBOX S.L. trading as NIXVAL | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-27 |
| 185.23.36.53 Spain · TEDRA GLOBAL SOLUTIONS S.L. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-27 |
| 23.19.231.52 United States · Leaseweb USA, Inc. | malware mozi exposed-secret exploit | PY, GZ, JS, SH | 577 | 2026-10-27 |
| 31.128.246.37 Ukraine · Unicast, Ltd. | exposed-secret | TXT | 1 | 2026-10-27 |
| 213.250.129.149 Turkey · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 1 | 2026-10-27 |
| 37.252.239.37 Brazil · Anexia Cloud Solutions GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-27 |
| 217.154.186.124 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-27 |
| 178.128.121.23 Singapore · DigitalOcean, LLC | exposed-secret | TXT, ENV, JSON, PHP | 5 | 2026-10-27 |
| 51.68.136.181 Poland · OVH SAS | exposed-secret | TXT | 1 | 2026-10-27 |
| 193.134.211.216 Hong Kong · LUCIDACLOUD LIMITED | exposed-secret | TXT | 1 | 2026-10-27 |
| 51.68.143.109 Poland · OVH SAS | exposed-secret | ENV | 1 | 2026-10-27 |
| 65.75.210.173 United States · Spartan Host Ltd | exposed-secret | TXT | 1 | 2026-10-27 |
| 65.75.210.168 United States · Spartan Host Ltd | exposed-secret | TXT | 1 | 2026-10-27 |
| 38.76.199.60 United States · cognetcloud INC | exposed-secret | ENV | 1 | 2026-10-27 |
| 70.39.197.229 United States · NetLab Global | exposed-secret | TXT | 1 | 2026-10-27 |
| 106.52.174.151 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT, JSON | 3 | 2026-10-27 |
| 101.33.238.141 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV | 1 | 2026-10-27 |
| 38.55.133.230 United States · Uscloud Inc | exposed-secret | TXT | 1 | 2026-10-27 |
| 209.205.228.18 United States · BitaByte LLC | exposed-secret | TXT | 1 | 2026-10-27 |
| 193.32.162.163 The Netherlands · UNMANAGED LTD | files | SH | 1 | 2026-10-27 |
| 124.123.76.210 India · Atria Convergence Technologies Pvt. Ltd., | exposed-secret | TXT | 2 | 2026-10-27 |
| 107.173.227.153 United States · HostPapa | files | 1 | 2026-10-27 | |
| 85.215.226.225 Germany · IONOS SE | exposed-secret | ZIP, PHP | 8 | 2026-10-27 |
| 148.135.195.145 United States · Datacamp Limited | ioc-match malware pe-binary | BIN, PE | 2 | 2026-10-27 |
| 162.246.19.216 United States · Interserver, Inc | files | ORG | 1 | 2026-10-27 |
| 172.67.222.229 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-27 |
| 43.157.146.70 Brazil · Shenzhen Tencent Computer Systems Company Limited | files | COM | 1 | 2026-10-27 |
| 104.21.54.28 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-27 |
| 13.224.95.47 United States · Amazon.com, Inc. | files | TXT | 1 | 2026-10-27 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free