huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,480
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 162.141.92.132 The Netherlands · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.227.104.193 Spain · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 178.83.33.27 United Kingdom · Exact Technologies Limited | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 185.174.135.77 Estonia · HZ Hosting Ltd | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 166.1.2.241 United States · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 212.60.153.106 Germany · BITSFLOWCLOUD LTD | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 194.5.97.22 The Netherlands · WebHorizon Internet Services | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 193.238.152.122 The Netherlands · GREEN FLOID LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 191.96.11.206 United States · Wojciech Czapkowicz | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 185.249.72.128 United Kingdom · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.150.20.139 Ireland · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 47.99.97.132 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 47.99.193.226 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 60.204.209.60 China · Huawei Cloud Service data center | exposed-secret | TXT | 2 | 2026-10-28 |
| 153.122.40.94 Japan · GMO GlobalSign Holdings K.K. | exposed-secret | TXT | 1 | 2026-10-28 |
| 47.129.130.0 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 4 | 2026-10-28 |
| 164.138.217.9 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | TXT | 2 | 2026-10-28 |
| 164.138.216.10 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | TXT | 2 | 2026-10-28 |
| 185.80.0.60 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | PHP, TXT | 2 | 2026-10-28 |
| 185.123.189.96 Bulgaria · SuperHosting.BG Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 37.27.99.39 Finland · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-10-28 |
| 185.55.230.199 Bulgaria · Delta HighTech Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 129.226.89.158 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 6 | 2026-10-28 |
| 195.158.8.123 Uzbekistan · "Uzbektelekom" Joint Stock Company | exposed-secret | TXT | 1 | 2026-10-28 |
| 179.253.248.205 United States | exposed-secret | YAML | 1 | 2026-10-28 |
| 172.104.77.187 Japan · Akamai Technologies, Inc. | exposed-secret | ENV, JSON, PHP | 6 | 2026-10-28 |
| 14.29.248.184 China · Chinanet | exposed-secret | TXT | 2 | 2026-10-28 |
| 43.208.175.219 Thailand · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 43.208.175.145 Thailand · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 43.174.230.101 Singapore · ACEVILLE PTE.LTD. | exposed-secret | TXT | 1 | 2026-10-28 |
| 47.104.76.62 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 193.41.237.125 Germany · dataforest GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 111.230.234.112 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 106.52.110.71 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 101.42.108.105 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 124.221.122.19 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | ENV | 1 | 2026-10-28 |
| 64.23.255.237 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 49.51.200.46 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 35.212.190.111 United States · Google LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 65.49.194.29 Canada · IT7 Networks Inc | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 69.164.207.30 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 40.83.54.56 United States · Microsoft Corporation | exposed-secret | HTML | 5 | 2026-10-28 |
| 102.129.185.27 South Africa · BreezeHost | exposed-secret | JSON, TXT | 2 | 2026-10-28 |
| 167.114.115.103 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-28 |
| 41.59.113.12 TZ · TANZANIA TELECOMMUNICATIONS CO. LTD | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 46.38.231.57 Germany · netcup GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 58.64.30.167 Thailand · ADVANCED WIRELESS NETWORK COMPANY LIMITED | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 118.174.16.218 Thailand · TOT Public Company Limited | exposed-secret exploit | TXT, BIN | 3 | 2026-10-28 |
| 46.135.149.37 Czechia · Vodafone Czech Republic a.s. | exposed-secret | TXT | 1 | 2026-10-28 |
| 41.206.40.122 Kenya · AccessKenya Group | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free