huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.131.59.223 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 100.57.153.31 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-04 |
| 154.21.89.49 United States · DMIT Cloud Services | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-04 |
| 43.153.140.124 Japan · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | OVPN, SH | 5 | 2026-11-04 |
| 124.156.176.234 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | SH, OVPN | 5 | 2026-11-04 |
| 89.116.31.1 France · Contabo GmbH | exposed-secret exploit | TXT, ENV | 5 | 2026-11-04 |
| 168.144.251.165 United States | exposed-secret | TXT | 2 | 2026-11-04 |
| 202.95.14.76 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 202.95.14.69 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 38.244.50.109 United States · Cogent Communications | exposed-secret forced-loot | TXT | 1 | 2026-11-04 |
| 38.244.50.34 United States · Cogent Communications | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.189 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.190 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.188 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.187 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.186 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.29 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.28 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.30 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.27 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 23.248.233.26 United States · YANCY LIMITED | exposed-secret | TXT | 1 | 2026-11-04 |
| 45.33.31.144 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-04 |
| 45.33.31.87 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-04 |
| 23.248.226.189 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.187 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.188 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.186 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.190 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.210 United States · YANCY LIMITED | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 202.95.14.60 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 156.251.11.204 Hong Kong · Tcloudnet | exposed-secret | TXT | 1 | 2026-11-04 |
| 130.94.31.86 South Korea · NTT America, Inc. | malware mozi exposed-secret tunnel | TXT, PY, ENV, JSON | 11 | 2026-11-04 |
| 156.251.11.32 Hong Kong · Tcloudnet | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-04 |
| 154.21.196.62 United States · NetLab Global | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-11-04 |
| 45.56.91.123 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-04 |
| 139.99.56.79 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-11-04 |
| 202.182.101.198 Japan · The Constant Company, LLC | exposed-secret malware elf-binary | ELF, TXT | 2 | 2026-11-04 |
| 147.93.159.70 Singapore · Contabo Asia Private Limited | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 147.93.159.10 Singapore · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-11-04 |
| 16.26.208.68 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 207.56.221.47 United States · NTT America, Inc. | exposed-secret malware mozi exploit | PY, LOG, SH, TXT | 625 | 2026-11-04 |
| 38.54.88.171 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, SH, LOG, TXT | 200 | 2026-11-04 |
| 151.158.1.156 Switzerland · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-04 |
| 38.60.227.210 United States · Kaopu Cloud HK Limited | exposed-secret malware mozi c2 | PY, TXT, SH, PS1 | 1,000 | 2026-11-04 |
| 13.126.183.60 India · Amazon.com, Inc. | exposed-secret | ENV, TXT | 5 | 2026-11-04 |
| 221.6.28.222 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-11-04 |
| 158.247.218.226 South Korea · The Constant Company, LLC | exposed-secret malware mozi exploit | PY, JS, LOG, TXT | 388 | 2026-11-04 |
| 64.177.47.135 United States | malware exposed-secret exploit c2 | PE, PY, MD, TXT | 97 | 2026-11-04 |
| 172.104.173.165 Singapore · Akamai Technologies, Inc. | exposed-secret exploit webshell malware | PY, SH, ELF, LOG | 85 | 2026-11-04 |
| 139.162.50.39 Singapore · Akamai Technologies, Inc. | exposed-secret malware tunnel elf-binary | LOG, SH, ELF | 12 | 2026-11-04 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free