huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 153.56.168.27 Turkey · AS219518 | exposed-secret | PHP | 2 | 2026-10-29 |
| 37.59.91.7 Lithuania · OVH SAS | exposed-secret | TXT | 1 | 2026-10-29 |
| 3.25.204.85 Australia · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-29 |
| 46.166.162.142 Lithuania · UAB Cherry Servers | exploit malware exposed-secret webshell | LOG, SEEDS, JS, TXT | 1,393 | 2026-10-29 |
| 153.75.81.83 United Arab Emirates · RouterHosting LLC | exploit exposed-secret malware c2 | PY, TXT, LOG, ELF | 91 | 2026-10-29 |
| 196.219.207.179 Egypt · TE-AS | exposed-secret | JSON | 1 | 2026-10-29 |
| 8.220.240.197 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | ENV | 1 | 2026-10-29 |
| 168.235.125.131 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-29 |
| 50.116.25.238 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-29 |
| 52.20.229.144 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-29 |
| 188.166.101.204 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-29 |
| 18.139.47.247 Singapore · Amazon.com, Inc. | exposed-secret | JSON | 1 | 2026-10-29 |
| 213.133.99.249 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 38.134.189.93 Singapore · Ultahost, Inc. | malware c2 exposed-secret meterpreter | ELF, MD, TXT | 3 | 2026-10-29 |
| 209.99.184.246 Switzerland · SKN Subnet & Telecom Ltd | exploit exposed-secret c2 webshell | TXT, MD, PY, JSON | 866 | 2026-10-29 |
| 141.147.70.247 United Kingdom · Oracle Corporation | exposed-secret exploit malware mozi | JSON, TS, JS, MD | 162 | 2026-10-29 |
| 134.209.211.188 United States · DigitalOcean, LLC | exploit exposed-secret tunnel | BAK, TXT, BAT, BKP | 9 | 2026-10-29 |
| 54.151.242.98 Singapore · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-29 |
| 95.217.11.56 Finland · Hetzner Online GmbH | exposed-secret | TXT | 2 | 2026-10-29 |
| 85.11.182.75 United Kingdom · PebbleHost Ltd | exposed-secret | ENV | 1 | 2026-10-29 |
| 86.100.49.209 Lithuania · UAB "Balticum TV" | exposed-secret | JSON | 1 | 2026-10-29 |
| 59.152.103.205 Bangladesh · Earth Telecommunication ( pvt ) Limited | exposed-secret exploit | TXT, ENV | 4 | 2026-10-29 |
| 13.234.153.113 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-29 |
| 52.53.90.195 United States · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 3.141.70.17 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-29 |
| 57.129.70.164 Germany · OVH SAS | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 217.154.101.100 Spain · IONOS SE | exploit c2 exposed-secret malware | HTML, JS, TXT | 5 | 2026-10-29 |
| 151.241.99.99 United States · Ultahost, Inc. | exposed-secret | BODY | 1 | 2026-10-29 |
| 18.245.218.72 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 18.245.218.111 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 18.245.218.18 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 143.246.203.114 United States | exploit exposed-secret malware mozi | LOG, MD, PY, RB | 85 | 2026-10-29 |
| 161.97.77.98 France · Contabo GmbH | exposed-secret | ENV | 1 | 2026-10-29 |
| 77.237.246.73 France · Contabo GmbH | exposed-secret | TXT | 2 | 2026-10-29 |
| 202.61.73.177 Brazil · Evoxt Sdn. Bhd. | malware exposed-secret pe-binary tunnel | PE, BIN, PS1, TXT | 23 | 2026-10-29 |
| 194.165.16.26 Panama · Flyservers S.A. | exposed-secret | TXT | 1 | 2026-10-28 |
| 172.67.158.168 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-28 |
| 104.21.14.109 United States · Cloudflare, Inc. | exposed-secret | DEV | 1 | 2026-10-28 |
| 91.224.92.16 United Kingdom · UAB Host Baltic | exposed-secret malware c2 exploit | SH, TXT, ELF, JAVA | 62 | 2026-10-28 |
| 5.78.205.230 United States · Hetzner Online GmbH | exposed-secret exploit malware webshell | PY, SAMPLE, TXT, LOG | 66 | 2026-10-28 |
| 50.210.239.213 United States · Comcast Cable Communications, LLC | exposed-secret exploit c2 webshell | PHP, PY, HTML, PHTML | 43 | 2026-10-28 |
| 5.78.156.58 United States · Hetzner Online GmbH | exploit exposed-secret tunnel | TXT, LOG, JS, JSON | 79 | 2026-10-28 |
| 108.175.1.225 United States · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.191.113.162 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 85.121.183.77 Moldova · ALEXHOST SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 82.209.204.6 Belarus · Republican Unitary Telecommunication Enterprise Beltelecom | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 172.232.252.167 Indonesia · Akamai Technologies, Inc. | exposed-secret | TXT, ENV, JSON | 10 | 2026-10-28 |
| 116.62.4.56 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV | 5 | 2026-10-28 |
| 103.127.31.183 India · Micro Hosting Private Limited | exposed-secret tunnel | PY, TXT | 8 | 2026-10-28 |
| 169.0.199.140 South Africa · AFRIHOST SP (PTY) LTD | exposed-secret | TXT | 2 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free