huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.21.38.180 United States · Cloudflare, Inc. | exposed-secret | TOP | 1 | 2026-11-03 |
| 172.67.137.31 United States · Cloudflare, Inc. | exposed-secret | TOP | 1 | 2026-11-03 |
| 180.178.191.153 Pakistan · GEOCOM LLC | exposed-secret | COM | 1 | 2026-11-03 |
| 104.233.217.235 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.236 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.237 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 45.225.135.43 Panama · RACK SPHERE HOSTING S.A. | exposed-secret | PHP | 1 | 2026-11-03 |
| 104.233.217.234 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.229 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.230 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 100.27.62.12 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-03 |
| 82.208.23.183 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-11-03 |
| 179.236.75.175 Lithuania | exposed-secret | TXT | 2 | 2026-11-03 |
| 104.233.217.57 United States · PEG TECH INC | exposed-secret | JSON | 1 | 2026-11-03 |
| 85.155.15.13 Spain | exposed-secret | TXT | 1 | 2026-11-03 |
| 31.77.16.106 United States · HOSTING INDUSTRY LIMITED | exposed-secret | TXT | 1 | 2026-11-03 |
| 104.233.217.81 United States · PEG TECH INC | exposed-secret | JSON | 1 | 2026-11-03 |
| 104.233.217.69 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-03 |
| 104.233.217.66 United States · PEG TECH INC | exposed-secret exploit | TXT | 2 | 2026-11-03 |
| 192.210.228.111 United States · HostPapa | malware exposed-secret pe-binary elf-binary | GZ, PE, BAT, ELF | 65 | 2026-11-03 |
| 69.12.64.195 United States · HostPapa | exposed-secret malware mozi webshell | PHP, JS, ASP, LOG | 112 | 2026-11-03 |
| 192.227.241.226 United States · HostPapa | exposed-secret exploit malware mozi | PY, SH, LOG, GZ | 538 | 2026-11-03 |
| 23.95.253.12 United States · HostPapa | exploit exposed-secret tunnel | LOG, PY, SH, GZ | 82 | 2026-11-03 |
| 198.44.46.122 United States · HostPapa | exposed-secret exploit malware elf-binary | ELF, TXT, PY, JAR | 48 | 2026-11-03 |
| 141.145.144.175 United Arab Emirates · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 11 | 2026-11-03 |
| 210.16.120.212 Singapore · HostUS | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 45.59.101.178 United States · DA International Group Ltd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 198.44.87.45 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 198.46.146.75 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 96.44.165.185 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 64.44.30.11 United States · Nexeon Technologies, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 198.23.188.143 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 108.165.120.215 United States · Snaju Development | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 192.227.229.27 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 168.235.91.127 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 23.95.132.196 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 222.128.104.197 China · China Unicom Beijing Province Network | exposed-secret | TXT | 1 | 2026-11-03 |
| 101.96.195.29 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-11-03 |
| 185.235.138.43 Belgium · HZ Hosting Ltd | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 168.235.125.167 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-03 |
| 45.32.211.99 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-11-03 |
| 159.203.225.195 United States · DigitalOcean, LLC | malware exploit exposed-secret mozi | PE, EXE, BAT, ZIP | 147 | 2026-11-03 |
| 152.42.193.28 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 188.166.206.102 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 101.126.4.50 China · Beijing Volcano Engine Technology Co., Ltd. | exploit webshell exposed-secret malware | LOG, SH, PY, JSON | 175 | 2026-11-03 |
| 89.31.121.37 Serbia · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-11-03 |
| 168.144.85.125 India · DigitalOcean, LLC | exposed-secret exploit malware mozi | SH, TXT, PY, DEB | 500 | 2026-11-03 |
| 159.223.243.246 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-03 |
| 185.228.168.10 United States · Daniel Cid | exposed-secret malware mozi | TXT | 1 | 2026-11-03 |
| 185.228.168.168 United States · Daniel Cid | exposed-secret malware mozi | ENV, TXT | 2 | 2026-11-03 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free