huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,063
hosts
115,929
files
114
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 43.201.86.87 South Korea · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-15 |
| 43.173.33.166 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 43.161.214.13 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-15 |
| 43.161.225.52 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-15 |
| 43.138.192.60 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 20.190.160.14 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 20.190.159.2 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 47.102.192.23 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware exploit mozi | PY, TXT, LOG, SH | 484 | 2026-10-15 |
| 47.104.248.7 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit malware tunnel macho-binary | JAVA, MACHO, XML | 3 | 2026-10-15 |
| 8.146.227.247 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-15 |
| 185.100.85.146 Romania · FlokiNET ehf | exploit exposed-secret | 1 | 2026-10-15 | |
| 172.67.185.43 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-10-15 |
| 104.21.43.206 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-10-15 |
| 18.117.134.17 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 159.223.236.4 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 3.137.181.66 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 57.129.53.197 Germany · OVH SAS | exposed-secret | TXT | 1 | 2026-10-15 |
| 3.76.18.139 Germany · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 47.251.122.20 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | ENV | 1 | 2026-10-15 |
| 165.22.52.83 Singapore · DigitalOcean, LLC | exposed-secret tunnel | ENV | 1 | 2026-10-15 |
| 129.121.100.135 United States · Oracle Corporation | files | BIN | 1 | 2026-10-15 |
| 104.248.151.67 Singapore · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 46.62.154.74 Finland · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-10-15 |
| 3.27.149.197 Australia · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-15 |
| 155.138.235.108 United States · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 65.2.99.99 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 132.145.162.85 United States · Oracle Corporation | exposed-secret | ENV | 1 | 2026-10-15 |
| 13.203.145.129 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 149.28.178.191 Australia · The Constant Company, LLC | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 149.210.201.136 The Netherlands · Signet B.V. | exposed-secret | TXT | 1 | 2026-10-15 |
| 137.184.111.86 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 43.162.117.228 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 3 | 2026-10-15 |
| 52.201.130.2 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-15 |
| 54.155.176.146 Ireland · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 46.225.79.7 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 44.242.223.198 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 188.225.24.13 Russia · JSC "TIMEWEB" | malware mozi | PHP | 1 | 2026-10-15 |
| 51.254.201.48 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 54.206.103.19 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 147.135.37.43 United States · OVH SAS | files | PHP | 1 | 2026-10-15 |
| 141.95.1.119 Germany · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 156.252.126.133 Mexico · PEG TECH INC | exposed-secret | TXT | 2 | 2026-10-15 |
| 156.252.106.10 Mexico · PEG TECH INC | exposed-secret | TXT | 2 | 2026-10-15 |
| 54.157.25.142 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 34.192.30.70 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 91.121.88.120 France · OVH SAS | exposed-secret | TXT | 2 | 2026-10-15 |
| 149.28.152.2 Singapore · The Constant Company, LLC | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 13.211.154.250 Australia · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-15 |
| 139.59.127.83 Singapore · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-10-15 |
| 213.32.66.254 France · OVH SAS | exposed-secret | TXT | 2 | 2026-10-15 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free