huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 18.136.195.216 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-30 |
| 18.136.195.197 Singapore · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 85.11.167.74 The Netherlands · TechTies Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 85.11.167.179 The Netherlands · TechTies Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 85.11.167.7 The Netherlands · TechTies Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 85.11.167.133 The Netherlands · TechTies Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 85.11.167.108 The Netherlands · TechTies Inc. | malware mozi exposed-secret | PY, LOG | 4 | 2026-10-30 |
| 85.11.167.6 The Netherlands · TechTies Inc. | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-30 |
| 154.9.26.131 US · Cogent Communications, LLC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-30 |
| 45.39.190.88 United States · Cloud Software - FZCO | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-30 |
| 172.67.158.135 United States · Cloudflare, Inc. | exploit exposed-secret malware mozi | CYOU | 2 | 2026-10-30 |
| 104.21.14.88 United States · Cloudflare, Inc. | exploit exposed-secret malware mozi | CYOU | 2 | 2026-10-30 |
| 64.83.53.29 US · NTT America, Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 31.128.39.24 Russia · Beget LLC | malware mozi exploit exposed-secret | JS, PY, SH, TXT | 455 | 2026-10-30 |
| 80.67.16.224 Germany · Host Europe GmbH | exposed-secret | JSON, PHP | 2 | 2026-10-30 |
| 172.96.250.155 Canada · IT7 Networks Inc | exposed-secret | TXT | 5 | 2026-10-30 |
| 165.154.225.131 Singapore · Scloud Pte Ltd | exposed-secret exploit malware mozi | TXT, BIN, PY, HEADER | 842 | 2026-10-30 |
| 172.67.146.161 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.73.174 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 18.188.149.122 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 85.132.34.10 Azerbaijan · CASPEL LLC | webshell exposed-secret | PY, ZIP, SQL, RAR | 24 | 2026-10-30 |
| 172.67.138.185 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.79.109 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.167.73 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.78.241 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.145.25 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.135.117 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.6.236 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.11.217 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.16.244 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.37.22 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.203.70 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.217.25 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.181.88 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.59.167 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.170.112 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.28.87 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.199.15 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.34.61 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.238.140.55 United States · The Constant Company, LLC | malware exposed-secret c2 exploit | PE, PS1 | 9 | 2026-10-30 |
| 80.80.250.34 Austria · Stadtwerke Klagenfurt AG | exposed-secret | JSON, PHP | 2 | 2026-10-30 |
| 170.187.142.199 United States · Akamai Technologies, Inc. | exposed-secret forced-loot tunnel | ENV, JS, PHP, SQLITE | 5 | 2026-10-30 |
| 39.107.106.210 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware mozi | PHP, LOG, SH, TXT | 421 | 2026-10-30 |
| 185.193.48.129 United States · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-10-30 |
| 45.117.83.34 Vietnam · NhanHoa Software company | exposed-secret malware exploit webshell | LOG, PE, PY, JSON | 48 | 2026-10-30 |
| 39.106.140.144 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware mozi | SH, ELF, LOG, PE | 31 | 2026-10-30 |
| 13.140.168.109 France · Contabo GmbH | exposed-secret webshell | ZIP, PHP | 14 | 2026-10-30 |
| 8.134.111.31 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-30 |
| 5.172.15.33 Russia · INSYS LLC | exposed-secret | TXT | 1 | 2026-10-30 |
| 5.9.115.199 Germany · Hetzner Online GmbH | exploit exposed-secret | TOP | 1 | 2026-10-29 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free