huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 45.156.87.230 The Netherlands · TechTies Inc. | exploit webshell exposed-secret malware | HTML, PHP, PY, TXT | 4 | 2026-11-02 |
| 104.233.217.108 United States · PEG TECH INC | exposed-secret exploit malware mozi | PY, TXT, JS, JSON | 699 | 2026-11-02 |
| 194.233.72.249 Singapore · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 194.233.72.242 Singapore · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-11-02 |
| 194.233.72.124 Singapore · Contabo Asia Private Limited | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-11-02 |
| 194.233.72.126 Singapore · Contabo Asia Private Limited | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 194.233.72.121 Singapore · Contabo Asia Private Limited | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 208.98.38.114 United States · Sharktech | exploit exposed-secret tunnel | TXT | 1 | 2026-11-01 |
| 58.144.196.192 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT, ENV, JSON, PHP | 11 | 2026-11-01 |
| 103.117.136.137 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, TGZ, SH, JS | 637 | 2026-11-01 |
| 194.233.72.59 Singapore · Contabo Asia Private Limited | exposed-secret forced-loot | TXT | 1 | 2026-11-01 |
| 138.16.187.93 Russia · Hosting technology LTD | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-01 |
| 176.123.7.7 Moldova · ALEXHOST SRL | malware c2 exposed-secret elf-binary | ELF, TXT | 19 | 2026-11-01 |
| 118.99.85.200 Indonesia · BIZNET NETWORKS | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 49.51.187.59 United States · Shenzhen Tencent Computer Systems Company Limited | malware exploit exposed-secret mozi | ELF, LOG, B64, DTD | 160 | 2026-11-01 |
| 80.87.206.91 The Netherlands · OVH SAS | exposed-secret | TXT | 1 | 2026-11-01 |
| 80.87.206.95 The Netherlands · OVH SAS | exposed-secret | TXT | 1 | 2026-11-01 |
| 37.187.152.46 France · OVH SAS | exposed-secret malware elf-binary tunnel | ELF, LOG | 2 | 2026-11-01 |
| 43.155.217.92 South Korea · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, YAML | 2 | 2026-11-01 |
| 95.111.226.157 France · Contabo GmbH | exposed-secret exploit malware macho-binary | SH, JAVA, MACHO, TXT | 49 | 2026-11-01 |
| 206.82.2.6 United States · N963 | exposed-secret | TXT | 1 | 2026-11-01 |
| 116.202.232.184 Germany · Hetzner Online GmbH | exploit exposed-secret | NET | 2 | 2026-11-01 |
| 217.149.13.187 Spain · Servatica Technologies, S.L. | exposed-secret | TXT | 1 | 2026-11-01 |
| 178.95.25.224 Ukraine · The Constant Company, LLC | exposed-secret malware mozi webshell | SH, JS, TXT, LOG | 697 | 2026-11-01 |
| 45.152.149.32 United States · 1337 Services GmbH | exposed-secret exploit | TXT, PY, LOG, ENV | 47 | 2026-11-01 |
| 45.79.141.174 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-01 |
| 45.79.39.217 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-01 |
| 38.133.142.39 Romania · DIGI ROMANIA S.A. | exposed-secret exploit tunnel | PY, GITIGN, SQLITE, HTML | 13 | 2026-11-01 |
| 167.99.84.37 United Kingdom · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-01 |
| 45.139.84.195 The Netherlands · LeaseWeb Netherlands B.V. | exposed-secret | TXT | 1 | 2026-11-01 |
| 154.222.24.60 Seychelles · cognetcloud INC | exposed-secret | BIN, TXT | 2 | 2026-11-01 |
| 45.63.79.171 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-11-01 |
| 45.61.164.30 United States · RouterHosting LLC | exposed-secret | HTML, TXT, LOG, OUT | 15 | 2026-11-01 |
| 38.76.188.71 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-01 |
| 31.128.39.27 Russia · Beget LLC | exposed-secret | TXT | 1 | 2026-11-01 |
| 31.56.228.32 France · CGI GLOBAL LIMITED | exposed-secret | TXT | 2 | 2026-11-01 |
| 15.204.59.70 United States · OVH SAS | c2 exposed-secret webshell | LOG, PHP, SH, TXT | 4 | 2026-11-01 |
| 66.78.40.197 United States · Aokigahara SRL | c2 exposed-secret | 1 | 2026-11-01 | |
| 162.35.99.94 United States | exploit exposed-secret | LOG, SQL, TXT | 3 | 2026-11-01 |
| 31.56.228.197 France · CGI GLOBAL LIMITED | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 31.56.228.126 France · CGI GLOBAL LIMITED | exposed-secret exploit malware mozi | PY, LOG, TXT, HTML | 62 | 2026-11-01 |
| 64.83.41.172 Japan · NetLab Global | exposed-secret | TXT | 1 | 2026-11-01 |
| 185.125.24.7 Switzerland · Infomaniak Network SA | exploit exposed-secret malware mozi | XZ, BUILDI, BUILD, CHANGE | 146 | 2026-11-01 |
| 104.200.73.97 United States · GWY IT PTY LTD | exposed-secret exploit malware webshell | PY, ELF, C, TXT | 134 | 2026-11-01 |
| 8.130.118.17 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-01 |
| 104.168.162.214 United States · HostPapa | exposed-secret | JSON | 1 | 2026-11-01 |
| 100.20.73.249 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-01 |
| 100.20.109.172 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-01 |
| 100.21.158.157 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-01 |
| 69.92.163.194 United States · CABLE ONE, INC. | exposed-secret | TXT | 1 | 2026-11-01 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free