huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,067
hosts
115,938
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.131.177.14 United States · DigitalOcean, LLC | webshell | PY | 1 | 2026-10-06 |
| 37.195.171.219 Russia · Novotelecom Ltd | exposed-secret | TXT | 1 | 2026-10-06 |
| 172.245.253.41 United States · HostPapa | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 45.207.213.86 Seychelles · cognetcloud INC | exposed-secret | JSON, TXT | 2 | 2026-10-06 |
| 113.125.165.132 China · Cloud Computing Corporation | exposed-secret | PHP | 1 | 2026-10-06 |
| 43.157.205.102 Indonesia · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 106.75.77.231 China · China Unicom Beijing Province Network | exposed-secret | TXT | 1 | 2026-10-06 |
| 121.199.34.107 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-06 |
| 164.90.192.235 The Netherlands · DigitalOcean, LLC | exposed-secret | ENV | 1 | 2026-10-06 |
| 178.105.84.202 Germany · Hetzner Online GmbH | exposed-secret | ENV | 1 | 2026-10-06 |
| 36.92.6.45 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 167.99.186.175 Canada · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 36.64.68.99 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 103.172.236.164 Vietnam · Hanoi Telecom JSC | files | JSON | 1 | 2026-10-06 |
| 114.80.34.158 China · China Telecom (Group) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 112.163.28.123 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-06 |
| 188.166.214.47 Singapore · DigitalOcean, LLC | exposed-secret | ENV | 1 | 2026-10-06 |
| 197.248.7.232 Kenya · Safaricom Limited | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 156.239.225.149 Hong Kong · CORENET CLOUD SDN. BHD. | exposed-secret | JSON | 1 | 2026-10-06 |
| 39.100.182.251 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | PHP | 1 | 2026-10-06 |
| 187.110.161.98 Brazil · EVEO Servicos de Internet Ltda. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 103.253.11.170 Hong Kong · HKBN Enterprise Solutions HK Limited | files | BIN | 1 | 2026-10-06 |
| 185.242.3.87 United States · Netiface Limited | tunnel | JSON | 1 | 2026-10-06 |
| 47.98.221.20 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 220.158.233.201 Bangladesh · VIETTEL (CAMBODIA) PTE., LTD | exposed-secret | JSON | 1 | 2026-10-06 |
| 222.89.169.98 China · Chinanet | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 158.255.74.115 Germany · Pars Parva System LLC | files | PHP | 1 | 2026-10-06 |
| 38.253.239.21 Indonesia · PT Indonesia Telekomunikasi Teknologi | exposed-secret | ENV | 1 | 2026-10-06 |
| 182.95.52.194 India · Bharti Airtel Limited | files | BIN | 1 | 2026-10-06 |
| 148.216.28.11 Mexico · Alestra, S. de R.L. de C.V. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 220.154.130.125 China · China Telecom | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-06 |
| 129.205.16.34 UG · Roke Investments International Ltd | files | BIN | 1 | 2026-10-06 |
| 142.93.230.252 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 62.169.17.65 France · Contabo GmbH | exposed-secret exploit | TXT, ENV | 4 | 2026-10-06 |
| 41.153.30.114 Egypt · ETISALAT MISR | exposed-secret | JSON | 1 | 2026-10-06 |
| 143.110.241.64 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 196.15.193.203 South Africa · Telkom SA Ltd. | exposed-secret | JSON, PHP | 2 | 2026-10-06 |
| 178.128.152.40 United States · DigitalOcean, LLC | files | JSON | 1 | 2026-10-06 |
| 110.234.22.83 Singapore · NAVER BUSINESS PLATFORM ASIA PACIFIC PTE. LTD. | tunnel | LOG, PHP | 2 | 2026-10-06 |
| 200.8.228.57 Venezuela · Corporacion Telemic C.A. | exposed-secret | TXT | 1 | 2026-10-06 |
| 37.187.244.59 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 38.250.161.79 Peru · Red Cientifica Peruana | exposed-secret | TXT | 1 | 2026-10-06 |
| 164.163.191.30 Mexico · INTERNET TELEFONIA Y TV DE MICHOACAN SA DE CV | exposed-secret | TXT | 1 | 2026-10-06 |
| 164.68.118.218 France · Contabo GmbH | exposed-secret exploit malware webshell | TXT, MD, GITIGN, JS | 137 | 2026-10-06 |
| 154.68.39.6 CI · ORANGE COTE D'IVOIRE | files | BIN | 1 | 2026-10-06 |
| 212.225.255.82 Spain · PROCONO S.A. | files | BIN | 1 | 2026-10-06 |
| 152.32.201.11 Japan · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | exposed-secret | JSON | 1 | 2026-10-06 |
| 188.69.225.188 Lithuania · Telia Lietuva, AB | exposed-secret | JSON | 1 | 2026-10-06 |
| 185.213.27.243 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 180.188.140.198 Hong Kong · HGC Global Communications Limited | exposed-secret | JSON | 1 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free