huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,030
hosts
112,856
files
80
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 1.95.175.23 China · Huawei Cloud Service data center | exposed-secret | JSON | 1 | 2026-10-28 |
| 189.24.79.18 Hong Kong | exposed-secret | PEM | 1 | 2026-10-28 |
| 1.12.231.141 China · Shenzhen Tencent Computer Systems Company Limited | files | JSON | 1 | 2026-10-28 |
| 103.54.44.12 South Korea · CyberForest LLC. | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.132.61.189 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware exploit mozi | LOG, PY, SH, DB | 39 | 2026-10-28 |
| 103.42.183.166 China · VpsQuan L.L.C. | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.132.189.42 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 101.43.25.15 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware mozi exploit | JSON, JS, HTML, TXT | 35 | 2026-10-28 |
| 103.17.38.250 Bangladesh · Dtech Limited | files | PY | 1 | 2026-10-28 |
| 182.44.68.131 China · CHINANET Fujian province Fuzhou IDC network | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.79.91.187 Indonesia · UNIVERSITAS MUHAMMADIYAH PONOROGO | files | BIN, JSON | 2 | 2026-10-28 |
| 101.96.196.212 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 101.36.116.91 Hong Kong · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | files | JSON | 1 | 2026-10-28 |
| 1.12.68.53 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 164.52.213.109 India · E2E Networks Limited | files | JSON | 1 | 2026-10-28 |
| 54.158.237.206 United States · Amazon.com, Inc. | exposed-secret exploit malware mozi | LOG, JS, ZIP, SH | 160 | 2026-10-28 |
| 14.49.221.213 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.90.75.37 The Netherlands · CLODO CLOUD SERVICE CO. L.L.C | exploit | MD | 1 | 2026-10-28 |
| 39.105.191.186 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 167.86.94.60 Germany · Contabo GmbH | exposed-secret | ENV | 1 | 2026-10-28 |
| 173.212.248.10 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 116.205.132.112 China · Huawei Cloud Service data center | exposed-secret | TXT | 2 | 2026-10-28 |
| 129.225.169.181 United States | exposed-secret | TXT | 1 | 2026-10-28 |
| 202.83.25.244 India · Atria Convergence Technologies Pvt. Ltd., | files | BIN | 1 | 2026-10-28 |
| 101.96.195.35 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 14 | 2026-10-28 |
| 157.180.71.22 Finland · Hetzner Online GmbH | exposed-secret malware coinminer tunnel | SH, SQL, TXT, ELF | 28 | 2026-10-28 |
| 101.96.196.201 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 101.89.148.7 China · China Telecom (Group) | exposed-secret | JSON, PHP, TXT | 3 | 2026-10-28 |
| 218.71.142.26 China · Chinanet | exposed-secret | BIN, JSON, PHP, ENV | 7 | 2026-10-28 |
| 70.28.27.168 Canada · Bell Canada | exposed-secret | JSON, PHP, ENV, TXT | 6 | 2026-10-28 |
| 141.138.136.171 The Netherlands · Signet B.V. | exposed-secret | TXT | 1 | 2026-10-28 |
| 185.157.133.46 Denmark · Cibicom A/S | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 82.139.83.19 The Netherlands · Solcon Internetdiensten B.V. | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 31.149.66.241 The Netherlands · KPN B.V. | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 208.98.38.229 United States · Sharktech | exploit exposed-secret tunnel | TXT | 1 | 2026-10-28 |
| 101.32.109.185 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 91.124.130.211 Ukraine · HIVELOCITY, Inc. | exploit exposed-secret | TXT | 3 | 2026-10-28 |
| 157.85.111.32 Thailand · Siamdata Communication Co.,ltd. | exploit exposed-secret | TXT | 4 | 2026-10-28 |
| 101.132.144.242 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | ENV, JSON, TXT | 3 | 2026-10-28 |
| 54.215.75.164 United States · Amazon.com, Inc. | coinminer exploit exposed-secret malware | ZIP | 1 | 2026-10-28 |
| 52.9.172.225 United States · Amazon.com, Inc. | coinminer exploit exposed-secret malware | ZIP | 1 | 2026-10-28 |
| 74.207.241.245 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 23.239.4.93 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 192.155.84.236 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 101.200.137.124 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 220.78.176.158 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-28 |
| 110.42.54.220 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT, ENV, PHP | 8 | 2026-10-28 |
| 103.116.104.103 Vietnam · Reload Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 114.134.187.123 Hong Kong · cognetcloud INC | exposed-secret | TXT | 1 | 2026-10-28 |
| 120.46.44.110 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free