huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,480
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 43.153.110.26 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 6 | 2026-10-28 |
| 131.165.177.68 Denmark · KMD A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 194.68.26.77 Singapore · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 149.111.145.26 United States · Unitedhealthcare | exposed-secret | TXT | 1 | 2026-10-28 |
| 103.217.93.170 Malaysia · Big Band Sdn Bhd | exposed-secret | ENV | 1 | 2026-10-28 |
| 103.217.92.224 Malaysia · Big Band Sdn Bhd | exposed-secret | ENV | 1 | 2026-10-28 |
| 41.90.231.68 Kenya · Safaricom Limited | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 66.160.168.164 United States · Hurricane Electric LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 200.29.92.77 Chile · MCL Internet | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 20.224.123.144 The Netherlands · Microsoft Corporation | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 185.32.189.205 Portugal · SAMPLING LINE-SERVICOS E INTERNET, LDA | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 34.78.109.194 Belgium · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 188.92.44.56 Czechia · LiveSport s.r.o. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 64.176.168.129 Israel · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 143.198.249.36 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 133.125.50.191 Japan · SAKURA Internet Inc. | exposed-secret | ENV | 1 | 2026-10-28 |
| 192.71.27.172 Israel · Interhost Communication Solutions Ltd. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 83.243.121.167 Norway · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 210.21.244.19 China · China Unicom Shenzen network | exposed-secret | JSON, PHP | 2 | 2026-10-28 |
| 123.133.65.7 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-28 |
| 89.31.122.207 Czechia · Cogent Communications | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 198.244.228.188 United Kingdom · OVH SAS | exposed-secret | TXT, PHP | 3 | 2026-10-28 |
| 47.129.105.10 Singapore · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 91.132.92.158 Denmark · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 43.210.37.86 Thailand · Amazon.com, Inc. | exposed-secret | TXT, ENV | 3 | 2026-10-28 |
| 43.199.29.225 China · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 7 | 2026-10-28 |
| 35.78.212.217 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-28 |
| 35.77.81.9 Japan · Amazon.com, Inc. | exposed-secret | ENV, TXT | 3 | 2026-10-28 |
| 193.235.146.41 Chile · iHosting Servicios Internet Ltda. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 185.28.154.238 Israel · O.M.C. COMPUTERS & COMMUNICATIONS LTD | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 139.87.74.106 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 139.87.82.201 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 139.87.80.2 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 47.128.220.7 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 3.34.51.134 South Korea · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 7 | 2026-10-28 |
| 16.106.35.211 United States | exposed-secret | TXT, ENV | 3 | 2026-10-28 |
| 194.71.107.241 Bulgaria · EDIS GmbH | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 13.212.226.239 Singapore · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 4 | 2026-10-28 |
| 13.208.185.47 Japan · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 192.71.26.78 Italy · EDIS GmbH | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 121.196.247.165 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-28 |
| 121.199.174.181 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 15.152.38.117 Japan · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 106.55.135.132 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 152.136.20.54 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-28 |
| 101.37.237.127 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 106.53.44.41 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-28 |
| 13.210.69.163 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
| 66.175.219.53 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 13.125.83.249 South Korea · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free