huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 100.59.81.102 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 100.21.82.169 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-01 |
| 100.26.145.138 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-01 |
| 201.18.216.33 Lithuania | exposed-secret | COM, TOP | 3 | 2026-10-31 |
| 195.182.16.23 Germany · Amarutu Technology Ltd | exposed-secret | TXT | 1 | 2026-10-31 |
| 68.183.32.185 United Kingdom · DigitalOcean, LLC | exposed-secret exploit tunnel | TXT, ENV, HTML, JS | 7 | 2026-10-31 |
| 139.162.73.71 Japan · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-31 |
| 139.84.140.13 India · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-31 |
| 158.178.128.187 Israel · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-31 |
| 125.197.232.126 Japan · BIGLOBE Inc. | exposed-secret | TXT, ENV, JSON, PHP | 5 | 2026-10-31 |
| 18.162.225.121 China · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-31 |
| 107.151.192.191 Colombia · Zenlayer Inc | exposed-secret | TXT | 1 | 2026-10-31 |
| 16.27.113.42 Australia · Amazon.com, Inc. | exposed-secret | TXT, ENV | 3 | 2026-10-31 |
| 43.210.162.154 Thailand · Amazon.com, Inc. | exposed-secret | ENV | 2 | 2026-10-31 |
| 80.151.94.164 Germany · Deutsche Telekom AG | exposed-secret | JSON, PHP | 2 | 2026-10-31 |
| 89.31.120.48 United Arab Emirates · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-10-31 |
| 13.231.71.33 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT | 4 | 2026-10-31 |
| 185.228.168.9 United States · Daniel Cid | exposed-secret malware mozi | ENV, TXT | 2 | 2026-10-31 |
| 39.109.57.67 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | exposed-secret malware exploit mozi | PY, LOG, ELF, SH | 26 | 2026-10-31 |
| 212.58.68.19 Germany · Globalways GmbH | exposed-secret | ENV, JSON, PHP | 3 | 2026-10-31 |
| 39.109.57.179 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | malware exploit exposed-secret mozi | ELF, LOG, PY, SH | 9 | 2026-10-31 |
| 45.39.190.176 United States · Cloud Software - FZCO | exposed-secret exploit malware webshell | HTML, PHP, ELF, BIN | 212 | 2026-10-31 |
| 96.126.130.81 United States · Evoxt Sdn. Bhd. | malware mozi exploit webshell | EML, SH, PY, LOG | 1,568 | 2026-10-31 |
| 77.239.124.141 The Netherlands · Alfahost LLC | malware exploit exposed-secret elf-binary | ELF, TXT | 15 | 2026-10-31 |
| 172.66.47.148 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-31 |
| 172.66.44.108 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-31 |
| 69.46.46.90 United States · Railway | exposed-secret | UA | 1 | 2026-10-31 |
| 144.124.232.2 The Netherlands · SERVERS TECH FZCO | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-31 |
| 45.205.24.183 Seychelles · FASTNET DATA INC | exploit c2 exposed-secret | HTML, ZIP, TXT, ENV | 26 | 2026-10-31 |
| 154.36.154.63 MU · NetLab Global | exposed-secret | PY, LOG | 6 | 2026-10-31 |
| 45.155.19.244 Turkey · Samet Girginer | malware mozi exploit exposed-secret | JS, TS, MJS, JSON | 56 | 2026-10-31 |
| 148.113.254.194 Canada · OVH SAS | exposed-secret | TXT | 2 | 2026-10-31 |
| 38.190.198.52 United States · SonderCloud Limited | exposed-secret | TXT, PHP | 6 | 2026-10-31 |
| 38.60.241.211 United States · Kaopu Cloud HK Limited | exposed-secret exploit | PY, LOG, TXT, SH | 20 | 2026-10-31 |
| 38.60.205.58 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, HTML, TXT, LOG | 30 | 2026-10-31 |
| 38.97.253.252 United States · Cogent Communications | exposed-secret malware mozi webshell | JS, JSON, PO, PY | 31 | 2026-10-31 |
| 45.153.34.71 The Netherlands · TechTies Inc. | exposed-secret | TXT | 2 | 2026-10-31 |
| 45.152.64.65 HK · XNNET LIMITED | exposed-secret | TXT, LOG, BIN, SH | 12 | 2026-10-31 |
| 38.76.199.210 United States · cognetcloud INC | exposed-secret malware mozi tunnel | JS, JSON, HTML, PL | 22 | 2026-10-31 |
| 38.255.47.37 United States · Hyonix | exploit exposed-secret | BAT, PY, TXT, ENV | 8 | 2026-10-31 |
| 45.77.40.17 Singapore · The Constant Company, LLC | exposed-secret | TXT, BIN, ENV, JSON | 10 | 2026-10-31 |
| 38.224.162.188 United States · GTHost | exposed-secret malware mozi webshell | JS, JSON, PO, PY | 31 | 2026-10-31 |
| 45.86.61.144 Cyprus | exposed-secret | LOG | 2 | 2026-10-31 |
| 154.89.148.84 HK · Cloudie Limited | malware exposed-secret c2 exploit | ELF, HTML, PY, SH | 78 | 2026-10-31 |
| 38.49.210.117 Canada · Rica Web Services | exposed-secret exploit webshell c2 | JSON, GO, SH, JS | 1,165 | 2026-10-31 |
| 45.138.12.32 The Netherlands | exposed-secret tunnel forced-loot | SH, BAK, TXT | 7 | 2026-10-30 |
| 38.55.131.39 United States · Uscloud Inc | exposed-secret | TXT | 1 | 2026-10-30 |
| 154.36.173.248 United States · NetLab Global | exposed-secret tunnel | JSON | 1 | 2026-10-30 |
| 222.255.174.162 Vietnam · VNPT Corp | exposed-secret | TXT | 1 | 2026-10-30 |
| 45.76.235.119 United States · The Constant Company, LLC | exposed-secret | HTML | 1 | 2026-10-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free