huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 58.221.60.160 China · Chinanet | malware exploit mozi c2 | MACHO, JAVA, PY, SH | 35 | 2026-10-24 |
| 164.92.130.137 Germany · DigitalOcean, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 67.215.232.25 United States · HostPapa | malware exploit pe-binary | PE, EXE, ASP, ASPX | 15 | 2026-10-24 |
| 89.31.121.193 Serbia · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 172.105.91.21 Germany · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 172.105.64.16 Germany · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 37.157.196.117 Czechia · WEDOS Internet, a.s. | exploit exposed-secret | LOG, PHP | 62 | 2026-10-24 |
| 185.101.34.115 Norway · ServeTheWorld AS | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 103.233.254.211 Hong Kong · cognetcloud INC | files | ZIP | 1 | 2026-10-24 |
| 206.189.131.244 India · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-24 |
| 151.80.203.44 France · OVH SAS | exposed-secret | TXT | 1 | 2026-10-24 |
| 49.234.191.227 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 66.175.219.193 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 39.106.39.92 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 111.229.40.97 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 41.213.143.134 RE · Reunicable SAS | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 176.122.172.114 Canada · IT7 Networks Inc | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 103.207.97.154 Indonesia · PT Jaya Kartha Solusindo | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 34.176.172.154 Chile · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 84.252.77.79 Denmark · Herning Kommune | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 83.240.216.128 Portugal · MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 37.221.197.77 Germany · netcup GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 212.130.12.57 Denmark · TDC Holding A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 34.78.104.15 Belgium · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 77.161.197.71 The Netherlands · KPN B.V. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 140.110.113.156 Taiwan · Taiwan Academic Network (TANet) Information Center | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 125.227.143.195 Taiwan · Chunghwa Telecom Co., Ltd. | files | BIN | 1 | 2026-10-24 |
| 46.38.231.46 Germany · netcup GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 109.123.239.180 Singapore · Contabo Asia Private Limited | exposed-secret | TXT | 2 | 2026-10-24 |
| 172.233.175.27 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 144.202.41.140 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 149.154.158.140 United States · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 172.105.7.122 Canada · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 131.165.209.104 Denmark · KMD A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 45.94.158.164 Ukraine · PE Skurykhin Mukola Volodumurovuch | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 103.241.181.29 India · CtrlS | c2 | ASP, HTM | 6 | 2026-10-24 |
| 159.203.52.118 Canada · DigitalOcean, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 185.59.104.50 Denmark · Holstebro Kommune | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 185.193.121.237 Denmark · Itm8 A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 13.239.135.61 Australia · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 172.105.25.164 Canada · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 192.84.24.50 United States · Enerpac Tool Group Corp. | exposed-secret | TXT | 1 | 2026-10-24 |
| 139.87.74.49 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 139.87.80.68 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 167.71.227.197 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 15.135.91.188 Australia · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 2 | 2026-10-24 |
| 16.178.131.118 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 13.203.202.168 IN · Amazon Data Services India | exposed-secret exploit | TXT | 4 | 2026-10-24 |
| 115.126.127.135 Hong Kong · Forewin Telecom Group Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 142.44.135.45 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-24 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free