huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,975
hosts
106,609
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 45.178.182.227 Brazil · AbsamHost Internet Data Center | exposed-secret | PHP | 1 | 2026-10-06 |
| 34.97.81.130 Japan · Google LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 162.62.82.128 Brazil · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV, TXT | 2 | 2026-10-06 |
| 172.67.150.201 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 104.21.0.90 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 83.142.235.99 Ukraine · Sky Vision Ukraine Ltd | exposed-secret | JSON, PHP | 2 | 2026-10-06 |
| 83.142.233.203 Ukraine · Sky Vision Ukraine Ltd | exposed-secret | ENV | 1 | 2026-10-06 |
| 103.168.19.221 India · Netclues Technologies Private Limited | exposed-secret exploit tunnel | TXT, JS | 83 | 2026-10-06 |
| 38.60.203.31 United States · Kaopu Cloud HK Limited | exposed-secret | JSON | 1 | 2026-10-06 |
| 160.202.47.241 Hong Kong · HanMing HK Limited | exposed-secret forced-loot | TXT | 1 | 2026-10-06 |
| 98.98.240.47 United Arab Emirates · Zenlayer Inc | exposed-secret | TXT | 1 | 2026-10-06 |
| 4.193.248.52 Singapore · Microsoft Corporation | exposed-secret tunnel | SH, TXT | 2 | 2026-10-06 |
| 103.124.95.33 Vietnam · NhanHoa Software company | exposed-secret | PHP | 2 | 2026-10-06 |
| 51.48.235.114 Spain · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 119.59.103.186 Thailand · Metrabyte Co.,Ltd | malware tsunami mozi exposed-secret | HTM, DOWNLO, HTML, PHP | 16 | 2026-10-06 |
| 42.193.181.34 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV | 1 | 2026-10-06 |
| 158.51.126.17 United States · Hostodo | exposed-secret | TXT | 1 | 2026-10-06 |
| 222.186.57.10 China · Chinanet | exposed-secret coinminer exploit malware | TXT, ZIP | 2 | 2026-10-06 |
| 167.172.229.118 United States · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 220.154.131.133 China · China Telecom | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 64.227.160.35 India · DigitalOcean, LLC | exposed-secret | TXT, ENV | 3 | 2026-10-06 |
| 105.29.165.227 MU · SEACOM Limited | exposed-secret | ENV | 1 | 2026-10-06 |
| 57.128.224.152 Poland · OVH SAS | exposed-secret | ENV | 1 | 2026-10-06 |
| 223.17.5.126 Hong Kong · HGC Global Communications Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 110.232.90.108 Indonesia · PT. Media Antar Nusa | exposed-secret | JSON | 1 | 2026-10-06 |
| 103.250.10.115 Singapore · Cloud Host Pte Ltd | exposed-secret | TXT, JSON | 4 | 2026-10-06 |
| 156.67.29.18 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 122.96.151.110 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-10-06 |
| 43.155.180.222 South Korea · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | KEY, PEM, CNF, TXT | 7 | 2026-10-06 |
| 124.221.6.138 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 169.150.196.161 The Netherlands · Datacamp Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 103.149.28.61 Vietnam · WEBPX SOFTWARE COMPANY LIMITED | exposed-secret | TXT | 1 | 2026-10-06 |
| 120.27.135.210 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | ENV | 1 | 2026-10-06 |
| 178.251.140.3 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT, ENV, PHP | 8 | 2026-10-06 |
| 117.196.219.39 India · Bharat Sanchar Nigam Ltd | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 31.220.73.14 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 103.193.178.240 Indonesia · PT Cloud Hosting Indonesia | exposed-secret | TXT | 1 | 2026-10-06 |
| 34.146.251.17 Japan · Google LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 212.154.234.9 Kazakhstan · JSC Kazakhtelecom | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 175.126.166.172 South Korea · SK Broadband Co Ltd | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 190.213.180.98 TT · Columbus Communications Trinidad Limited. | exposed-secret | TXT | 1 | 2026-10-06 |
| 159.138.117.98 Chile · HUAWEI INTERNATIONAL PTE. LTD. | exposed-secret | TXT | 2 | 2026-10-06 |
| 107.173.55.151 United States · HostPapa | exploit exposed-secret c2 | HTML | 12 | 2026-10-06 |
| 41.111.128.195 DZ · Telecom Algeria | exposed-secret ioc-match | COM | 1 | 2026-10-06 |
| 47.88.93.13 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 2 | 2026-10-06 |
| 212.11.29.129 Hungary · Datacamp Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 142.93.146.198 Canada · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 61.160.196.2 China · China Telecom | exposed-secret | TXT | 1 | 2026-10-06 |
| 59.24.133.197 South Korea · Korea Telecom | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 115.68.226.124 South Korea · SMILESERV | exposed-secret | TXT | 1 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free