huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 91.233.10.181 Germany · BITSFLOWCLOUD LTD | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.193.124 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 87.106.200.240 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.191.113.100 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.122.102 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 87.106.149.106 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 45.146.165.142 Russia · Beget LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 5.181.177.85 The Netherlands · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 162.218.120.200 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 104.223.62.197 Canada · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 31.56.233.108 Indonesia · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 31.58.102.86 Indonesia · Limestone Networks, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 166.1.2.244 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 136.175.82.37 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 217.156.64.157 Moldova · ALEXHOST SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 166.1.2.243 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.227.107.35 Spain · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.227.255.255 Spain · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 158.51.78.165 Canada · Limewave Communications | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 162.141.92.132 The Netherlands · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.227.104.193 Spain · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 178.83.33.27 United Kingdom · Exact Technologies Limited | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 185.174.135.77 Estonia · HZ Hosting Ltd | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 166.1.2.241 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.60.153.106 Germany · BITSFLOWCLOUD LTD | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 194.5.97.22 The Netherlands · WebHorizon Internet Services | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 193.238.152.122 The Netherlands · GREEN FLOID LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 191.96.11.206 United States · Wojciech Czapkowicz | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 185.249.72.128 United Kingdom · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.150.20.139 Ireland · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 47.129.130.0 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 4 | 2026-10-28 |
| 185.55.230.199 Bulgaria · Delta HighTech Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 43.208.175.219 Thailand · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 193.41.237.125 Germany · dataforest GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 64.23.255.237 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 49.51.200.46 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 35.212.190.111 United States · Google LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 65.49.194.29 Canada · IT7 Networks Inc | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 118.174.16.218 Thailand · TOT Public Company Limited | exposed-secret exploit | TXT, BIN | 3 | 2026-10-28 |
| 41.206.40.122 Kenya · AccessKenya Group | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 43.199.29.225 China · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 7 | 2026-10-28 |
| 35.78.212.217 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 47.128.220.7 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 3.34.51.134 South Korea · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 7 | 2026-10-28 |
| 13.212.226.239 Singapore · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 4 | 2026-10-28 |
| 121.199.174.181 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 13.210.69.163 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 13.125.83.249 South Korea · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 114.132.61.189 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware exploit mozi | LOG, PY, SH, DB | 39 | 2026-10-28 |
| 101.43.25.15 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware mozi exploit | JSON, JS, HTML, TXT | 35 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free