huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,030
hosts
112,856
files
80
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 103.163.246.138 Bangladesh · Optimus Technologies | exposed-secret exploit tunnel | JS, MD, TXT, BAK2 | 11 | 2026-10-06 |
| 66.29.143.201 United States · Namecheap, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 158.220.105.179 France · Contabo GmbH | coinminer malware exposed-secret c2 | SH, GZ, JS, TGZ | 13 | 2026-10-06 |
| 189.206.155.253 Mexico · Alestra, S. de R.L. de C.V. | exposed-secret | TXT | 1 | 2026-10-06 |
| 150.136.122.123 United States · Oracle Corporation | exposed-secret malware mozi tunnel | SH, HTML, LOG, PY | 5 | 2026-10-06 |
| 103.140.194.141 Sri Lanka · OREL I T Private Limited | exposed-secret | TXT, ENV, PHP | 5 | 2026-10-06 |
| 36.112.133.74 China · IDC, China Telecommunications Corporation | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 64.226.88.238 Germany · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 45.79.120.189 India · Akamai Technologies, Inc. | exploit exposed-secret | TXT, ENV | 3 | 2026-10-06 |
| 187.141.71.166 Mexico · Uninet S.A. de C.V. | malware mozi exposed-secret | TXT, ENV, JSON | 7 | 2026-10-06 |
| 77.83.39.109 The Netherlands · KPROHOST LLC | exploit exposed-secret malware mozi | TXT | 1 | 2026-10-06 |
| 66.116.226.147 United Arab Emirates · PDR | exposed-secret | TXT | 1 | 2026-10-06 |
| 167.71.81.250 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 165.154.224.241 Singapore · Scloud Pte Ltd | exposed-secret | JSON | 1 | 2026-10-06 |
| 220.158.233.133 Bangladesh · VIETTEL (CAMBODIA) PTE., LTD | exposed-secret | JSON | 1 | 2026-10-06 |
| 220.119.37.141 South Korea · Korea Telecom | exposed-secret | TXT, PHP, ENV | 7 | 2026-10-06 |
| 8.222.241.159 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 197.255.200.204 GM · Netpage Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 75.112.23.30 United States · Charter Communications, Inc | exposed-secret | TXT | 1 | 2026-10-06 |
| 101.100.194.181 Singapore · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-06 |
| 156.239.3.135 Hong Kong · CORENET CLOUD SDN. BHD. | exposed-secret | TXT | 1 | 2026-10-06 |
| 167.86.95.210 Germany · Contabo GmbH | exposed-secret | TXT | 2 | 2026-10-06 |
| 82.66.143.234 France · Free SAS | exposed-secret | TXT | 1 | 2026-10-06 |
| 51.161.197.71 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-06 |
| 188.214.38.229 Lithuania · EDIS GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 185.80.128.73 Lithuania · UAB ESNET | exposed-secret | PHP, SQL | 5 | 2026-10-06 |
| 203.145.34.78 Indonesia · PT Cloud Hosting Indonesia | exposed-secret | TXT | 1 | 2026-10-06 |
| 89.168.57.0 France · Oracle Corporation | exposed-secret | XML | 1 | 2026-10-06 |
| 191.252.195.8 Brazil · Locaweb Servicos de Internet S/A | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 16.171.14.222 Sweden · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 51.77.211.128 France · OVH SAS | exposed-secret | ENV | 1 | 2026-10-06 |
| 112.74.40.193 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-06 |
| 1.92.101.101 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 45.138.159.124 Uzbekistan · BEST INTERNET SOLUTION XK | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 107.189.1.175 United States · FranTech Solutions | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 13.140.42.213 Germany | exposed-secret | TXT | 1 | 2026-10-06 |
| 77.90.185.230 Germany · Limited Network LTD | exposed-secret | ENV | 1 | 2026-10-06 |
| 106.243.155.71 South Korea · LG DACOM Corporation | exposed-secret | TXT | 1 | 2026-10-06 |
| 147.139.163.146 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | ENV | 1 | 2026-10-06 |
| 66.94.119.167 United States · Contabo Inc. | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-06 |
| 20.41.105.150 South Korea · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 149.129.255.120 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 91.210.108.155 The Netherlands · BlueVPS OU | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 103.28.148.61 Indonesia · Argon Data Communication | exposed-secret | TXT, ENV, JSON, PHP | 34 | 2026-10-06 |
| 179.49.190.108 Brazil · STREET RECIFE SERVICO DE COMUNICACAO LTDA | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 164.90.232.37 Germany · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 192.169.136.182 United States · GoDaddy.com, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 118.31.72.139 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 173.249.23.156 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 121.161.242.168 South Korea · Korea Telecom | exposed-secret | TXT, ENV, JSON, PHP | 27 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free