huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,068
hosts
115,940
files
86
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 217.60.195.187 The Netherlands · SWISSNET LLC | malware mozi elf-binary | ELF | 9 | 2026-10-06 |
| 51.77.211.128 France · OVH SAS | exposed-secret | ENV | 1 | 2026-10-06 |
| 112.74.40.193 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-06 |
| 1.92.101.101 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 45.138.159.124 Uzbekistan · BEST INTERNET SOLUTION XK | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 107.189.1.175 United States · FranTech Solutions | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 13.140.42.213 Germany | exposed-secret | TXT | 1 | 2026-10-06 |
| 77.90.185.230 Germany · Limited Network LTD | exposed-secret | ENV | 1 | 2026-10-06 |
| 106.243.155.71 South Korea · LG DACOM Corporation | exposed-secret | TXT | 1 | 2026-10-06 |
| 147.139.163.146 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | ENV | 1 | 2026-10-06 |
| 154.118.162.194 ML · IKATEL SA | files | BIN | 1 | 2026-10-06 |
| 66.94.119.167 United States · Contabo Inc. | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-06 |
| 20.41.105.150 South Korea · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 149.129.255.120 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 91.210.108.155 The Netherlands · BlueVPS OU | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 103.28.148.61 Indonesia · Argon Data Communication | exposed-secret | TXT, ENV, JSON, PHP | 34 | 2026-10-06 |
| 179.49.190.108 Brazil · STREET RECIFE SERVICO DE COMUNICACAO LTDA | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 164.90.232.37 Germany · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 189.217.130.86 Mexico · Cablevision, S.A. de C.V. | malware mozi | PHP | 1 | 2026-10-06 |
| 192.169.136.182 United States · GoDaddy.com, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 118.31.72.139 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 66.151.32.223 Finland · HOSTKEY B.V. | files | JSON | 1 | 2026-10-06 |
| 42.49.216.35 China · CHINA UNICOM China169 Backbone | files | JSON | 1 | 2026-10-06 |
| 173.249.23.156 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 121.161.242.168 South Korea · Korea Telecom | exposed-secret | TXT, ENV, JSON, PHP | 27 | 2026-10-06 |
| 185.125.171.133 Norway · Gigahost AS | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 191.7.26.132 Brazil · NTWEB SOLUCOES EM INTERNET LTDA ME | exposed-secret | TXT | 1 | 2026-10-06 |
| 60.250.89.205 Taiwan · Chunghwa Telecom Co., Ltd. | files | BIN | 1 | 2026-10-06 |
| 167.86.97.224 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 110.93.250.7 Pakistan · TRANSWORLD ASSOCIATES (PVT) LIMITED | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 163.7.8.90 Indonesia · Byteplus Pte. Ltd. | tunnel | JSON | 1 | 2026-10-06 |
| 82.38.69.7 United States · HOSTKEY | exposed-secret | TXT | 1 | 2026-10-06 |
| 217.76.57.186 France · Contabo GmbH | exposed-secret | TXT | 2 | 2026-10-06 |
| 134.122.43.202 Canada · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 216.144.249.201 United States · Limestone Networks, Inc. | files | JSON | 1 | 2026-10-06 |
| 94.136.186.73 India · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 123.56.247.81 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | ENV, JSON, PHP, TXT | 4 | 2026-10-06 |
| 158.94.209.42 The Netherlands · Omegatech LTD | exposed-secret | ENV | 1 | 2026-10-06 |
| 8.129.8.1 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-10-06 |
| 157.173.115.165 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 119.205.179.217 South Korea · Korea Telecom | files | PHP | 1 | 2026-10-06 |
| 43.228.157.73 Singapore · Ghosty Networks LLC | tunnel | JSON | 1 | 2026-10-06 |
| 108.58.121.94 United States · Cablevision Systems Corp. | exposed-secret | JSON, PHP | 2 | 2026-10-06 |
| 198.54.117.242 United States · Namecheap, Inc. | tunnel | COM, NET | 2 | 2026-10-06 |
| 161.35.67.250 Germany · DigitalOcean, LLC | exposed-secret forced-loot | TXT | 1 | 2026-10-06 |
| 185.151.30.191 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-10-06 |
| 196.3.100.162 MZ · Eduardo Mondlane University | exposed-secret | ENV | 1 | 2026-10-06 |
| 119.29.223.27 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 31.57.158.71 Latvia · CGI GLOBAL LIMITED | exposed-secret | TXT, PHP, ENV, JSON | 29 | 2026-10-06 |
| 64.71.34.107 United States · Ntirety, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free