huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,484
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 38.246.245.40 United States · NetLab Global | exposed-secret | TXT | 1 | 2026-10-28 |
| 108.160.134.174 Japan · The Constant Company, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 64.235.45.67 United States · Las Vegas NV Datacenter | exposed-secret | ENV | 1 | 2026-10-28 |
| 58.58.161.210 China · Chinanet | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 120.194.243.44 China · China Mobile | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 103.231.56.165 Hong Kong · VH-GLOBAL | exposed-secret | TXT | 1 | 2026-10-28 |
| 120.202.73.180 China · China Mobile | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 103.85.225.231 Hong Kong · cognetcloud INC | exposed-secret | TXT | 1 | 2026-10-28 |
| 219.140.53.42 China · Chinanet | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-28 |
| 64.235.43.57 United States · Las Vegas NV Datacenter | exposed-secret | ENV | 1 | 2026-10-28 |
| 154.219.112.32 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-28 |
| 47.108.113.5 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 8.142.6.185 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 110.238.119.58 Singapore · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 159.138.162.23 South Africa · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.119.174.125 Singapore · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 121.182.117.89 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-28 |
| 90.146.195.213 Austria · LIWEST Kabelmedien GmbH | exposed-secret | JSON, TXT | 2 | 2026-10-28 |
| 103.80.88.106 Indonesia · PT Jala Lintas Media | exposed-secret exploit | TXT | 4 | 2026-10-28 |
| 103.131.61.143 Indonesia · PT. NEWTON CIPTA INFORMATIKA | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 5.223.58.162 Singapore · Hetzner Online GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 34.41.96.243 United States · Google LLC | exposed-secret | TXT | 2 | 2026-10-28 |
| 51.83.43.14 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 24.151.114.10 United States · Charter Communications | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.80.20.60 Australia · Hosted Network Pty Ltd | exposed-secret | TXT | 1 | 2026-10-28 |
| 112.94.22.233 China · China Unicom Guangzhou network | exposed-secret | TXT, JSON | 4 | 2026-10-28 |
| 109.195.210.6 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT | 1 | 2026-10-28 |
| 187.188.165.243 Mexico · TOTAL PLAY TELECOMUNICACIONES SA DE CV | malware mozi webshell exposed-secret | PHP, JS, LIB, SWF | 363 | 2026-10-28 |
| 177.107.178.135 Brazil · PROVEDOR BRCENTRAL.NET LTDA | exposed-secret | TXT | 1 | 2026-10-28 |
| 132.248.159.85 Mexico · Universidad Nacional Autonoma de Mexico | exposed-secret | TXT | 1 | 2026-10-28 |
| 15.135.74.255 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 222.252.17.130 Vietnam · VNPT Corp | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 209.38.93.248 Australia · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 123.56.159.216 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 148.135.86.168 United States · MULTACOM CORPORATION | exposed-secret | TXT | 1 | 2026-10-28 |
| 119.130.61.195 China · Chinanet | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 139.84.241.235 South Africa · The Constant Company, LLC | exposed-secret exploit tunnel forced-loot | MD, GZ, JS, JSON | 154 | 2026-10-28 |
| 129.159.19.217 India · Oracle Corporation | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 135.125.235.148 Germany · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 20.55.73.183 United States · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 178.62.54.43 United Kingdom · DigitalOcean, LLC | exploit exposed-secret | TXT | 1 | 2026-10-28 |
| 192.236.208.97 United States · HostPapa | exposed-secret webshell | JSON | 1 | 2026-10-28 |
| 64.227.111.164 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 146.190.136.81 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 92.222.193.112 Lithuania · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 209.209.8.8 Canada · Rica Web Services | c2 exploit exposed-secret | M3U | 1 | 2026-10-28 |
| 3.147.131.118 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 142.93.75.113 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 87.236.197.66 Czechia · Coolhousing s.r.o. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 172.232.209.164 Italy · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free