huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,068
hosts
115,940
files
86
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 139.59.74.148 India · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 146.190.126.213 United States · DigitalOcean, LLC | exposed-secret | ENV | 1 | 2026-10-06 |
| 79.120.74.12 Russia · PJSC MegaFon | exposed-secret | TXT, ENV, PHP | 5 | 2026-10-06 |
| 103.163.246.138 Bangladesh · Optimus Technologies | exposed-secret exploit tunnel | JS, MD, TXT, BAK2 | 11 | 2026-10-06 |
| 66.29.143.201 United States · Namecheap, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 158.220.105.179 France · Contabo GmbH | coinminer malware exposed-secret c2 | SH, GZ, JS, TGZ | 13 | 2026-10-06 |
| 189.206.155.253 Mexico · Alestra, S. de R.L. de C.V. | exposed-secret | TXT | 1 | 2026-10-06 |
| 150.136.122.123 United States · Oracle Corporation | exposed-secret malware mozi tunnel | SH, HTML, LOG, PY | 5 | 2026-10-06 |
| 103.140.194.141 Sri Lanka · OREL I T Private Limited | exposed-secret | TXT, ENV, PHP | 5 | 2026-10-06 |
| 36.112.133.74 China · IDC, China Telecommunications Corporation | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 64.226.88.238 Germany · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 45.79.120.189 India · Akamai Technologies, Inc. | exploit exposed-secret | TXT, ENV | 3 | 2026-10-06 |
| 64.89.163.22 Germany · Netiface America, Inc. | tunnel | JSON | 1 | 2026-10-06 |
| 187.141.71.166 Mexico · Uninet S.A. de C.V. | malware mozi exposed-secret | TXT, ENV, JSON | 7 | 2026-10-06 |
| 77.83.39.109 The Netherlands · KPROHOST LLC | exploit exposed-secret malware mozi | TXT | 1 | 2026-10-06 |
| 66.116.226.147 United Arab Emirates · PDR | exposed-secret | TXT | 1 | 2026-10-06 |
| 167.71.81.250 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 122.185.146.18 India · Bharti Airtel Limited | files | BIN | 1 | 2026-10-06 |
| 165.154.224.241 Singapore · Scloud Pte Ltd | exposed-secret | JSON | 1 | 2026-10-06 |
| 14.63.160.31 South Korea · Korea Telecom | files | PHP | 1 | 2026-10-06 |
| 82.114.179.10 YE · Public Telecommunication Corporation | files | BIN | 1 | 2026-10-06 |
| 220.158.233.133 Bangladesh · VIETTEL (CAMBODIA) PTE., LTD | exposed-secret | JSON | 1 | 2026-10-06 |
| 220.119.37.141 South Korea · Korea Telecom | exposed-secret | TXT, PHP, ENV | 7 | 2026-10-06 |
| 8.222.241.159 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 197.255.200.204 GM · Netpage Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 103.213.116.242 Indonesia · Telemedia Dinamika Sarana, PT | files | BIN | 1 | 2026-10-06 |
| 212.73.46.196 Spain · VODAFONE ESPANA S.A.U. | files | BIN | 1 | 2026-10-06 |
| 175.107.201.149 Pakistan · Cyber Internet Services (Private) Limited | files | BIN | 1 | 2026-10-06 |
| 206.189.52.85 Germany · DigitalOcean, LLC | files | PHP | 1 | 2026-10-06 |
| 143.110.251.6 India · DigitalOcean, LLC | files | ZIP | 3 | 2026-10-06 |
| 74.88.7.20 United States · Cablevision Systems Corp. | malware mozi | PHP, ZIP | 3 | 2026-10-06 |
| 103.121.94.25 Hong Kong · cognetcloud INC | exploit malware elf-binary | ELF, LOG, PS1, PY | 4 | 2026-10-06 |
| 75.112.23.30 United States · Charter Communications, Inc | exposed-secret | TXT | 1 | 2026-10-06 |
| 101.100.194.181 Singapore · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-06 |
| 156.239.3.135 Hong Kong · CORENET CLOUD SDN. BHD. | exposed-secret | TXT | 1 | 2026-10-06 |
| 207.180.243.111 France · Contabo GmbH | files | JSON | 1 | 2026-10-06 |
| 167.86.95.210 Germany · Contabo GmbH | exposed-secret | TXT | 2 | 2026-10-06 |
| 82.66.143.234 France · Free SAS | exposed-secret | TXT | 1 | 2026-10-06 |
| 51.161.197.71 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-06 |
| 180.213.44.242 China · ASN for TIANJIN Provincial Net of CT | files | BIN | 1 | 2026-10-06 |
| 45.177.187.176 Brazil · HOLZ NETWORK LTDA | files | JSON | 1 | 2026-10-06 |
| 188.214.38.229 Lithuania · EDIS GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 185.80.128.73 Lithuania · UAB ESNET | exposed-secret | PHP, SQL | 5 | 2026-10-06 |
| 203.145.34.78 Indonesia · PT Cloud Hosting Indonesia | exposed-secret | TXT | 1 | 2026-10-06 |
| 89.168.57.0 France · Oracle Corporation | exposed-secret | XML | 1 | 2026-10-06 |
| 103.82.92.40 Indonesia · PT Cloud Hosting Indonesia | tunnel | JSON | 1 | 2026-10-06 |
| 191.252.195.8 Brazil · Locaweb Servicos de Internet S/A | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 16.171.14.222 Sweden · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 178.104.188.135 Germany · Hetzner Online GmbH | files | GZ, PEM | 2 | 2026-10-06 |
| 125.21.59.218 India · Bharti Airtel Limited | files | BIN | 1 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free