huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,483
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 183.111.5.210 South Korea · Korea Telecom | exposed-secret | TXT, PHP, ENV | 7 | 2026-10-28 |
| 46.183.186.152 Hungary · Magyar Telekom plc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 113.249.111.67 China · Chongqing Telecom | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 1.95.175.23 China · Huawei Cloud Service data center | exposed-secret | JSON | 1 | 2026-10-28 |
| 189.24.79.18 Hong Kong | exposed-secret | PEM | 1 | 2026-10-28 |
| 103.54.44.12 South Korea · CyberForest LLC. | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.132.61.189 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware exploit mozi | LOG, PY, SH, DB | 39 | 2026-10-28 |
| 103.42.183.166 China · VpsQuan L.L.C. | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.132.189.42 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 101.43.25.15 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware mozi exploit | JSON, JS, HTML, TXT | 35 | 2026-10-28 |
| 182.44.68.131 China · CHINANET Fujian province Fuzhou IDC network | exposed-secret | TXT | 1 | 2026-10-28 |
| 101.96.196.212 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 1.12.68.53 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 54.158.237.206 United States · Amazon.com, Inc. | exposed-secret exploit malware mozi | LOG, JS, ZIP, SH | 160 | 2026-10-28 |
| 14.49.221.213 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-28 |
| 39.105.191.186 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 167.86.94.60 Germany · Contabo GmbH | exposed-secret | ENV | 1 | 2026-10-28 |
| 173.212.248.10 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 116.205.132.112 China · Huawei Cloud Service data center | exposed-secret | TXT | 2 | 2026-10-28 |
| 129.225.169.181 United States | exposed-secret | TXT | 1 | 2026-10-28 |
| 101.96.195.35 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 14 | 2026-10-28 |
| 157.180.71.22 Finland · Hetzner Online GmbH | exposed-secret malware coinminer tunnel | SH, SQL, TXT, ELF | 28 | 2026-10-28 |
| 101.96.196.201 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 101.89.148.7 China · China Telecom (Group) | exposed-secret | JSON, PHP, TXT | 3 | 2026-10-28 |
| 218.71.142.26 China · Chinanet | exposed-secret | BIN, JSON, PHP, ENV | 7 | 2026-10-28 |
| 70.28.27.168 Canada · Bell Canada | exposed-secret | JSON, PHP, ENV, TXT | 6 | 2026-10-28 |
| 141.138.136.171 The Netherlands · Signet B.V. | exposed-secret | TXT | 1 | 2026-10-28 |
| 185.157.133.46 Denmark · Cibicom A/S | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 82.139.83.19 The Netherlands · Solcon Internetdiensten B.V. | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 31.149.66.241 The Netherlands · KPN B.V. | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 208.98.38.229 United States · Sharktech | exploit exposed-secret tunnel | TXT | 1 | 2026-10-28 |
| 101.32.109.185 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 91.124.130.211 Ukraine · HIVELOCITY, Inc. | exploit exposed-secret | TXT | 3 | 2026-10-28 |
| 157.85.111.32 Thailand · Siamdata Communication Co.,ltd. | exploit exposed-secret | TXT | 4 | 2026-10-28 |
| 101.132.144.242 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | ENV, JSON, TXT | 3 | 2026-10-28 |
| 54.215.75.164 United States · Amazon.com, Inc. | coinminer exploit exposed-secret malware | ZIP | 1 | 2026-10-28 |
| 52.9.172.225 United States · Amazon.com, Inc. | coinminer exploit exposed-secret malware | ZIP | 1 | 2026-10-28 |
| 74.207.241.245 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 23.239.4.93 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 192.155.84.236 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 101.200.137.124 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 220.78.176.158 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-28 |
| 110.42.54.220 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT, ENV, PHP | 8 | 2026-10-28 |
| 103.116.104.103 Vietnam · Reload Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.134.187.123 Hong Kong · cognetcloud INC | exposed-secret | TXT | 1 | 2026-10-28 |
| 120.46.44.110 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 156.224.19.2 Seychelles · CORENET CLOUD SDN. BHD. | exposed-secret | TXT, ENV, PHP | 8 | 2026-10-28 |
| 47.201.204.23 United States · Frontier Communications of America, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 149.88.75.116 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-28 |
| 195.43.142.215 Russia · JSC Mediasoft ekspert | exposed-secret | TXT | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free