huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,968
hosts
106,484
files
113
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 109.73.199.99 Russia · JSC "TIMEWEB" | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 51.222.140.188 Canada · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 158.101.138.54 Japan · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-28 |
| 43.162.116.32 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | JSON | 1 | 2026-10-28 |
| 13.222.16.100 United States · Amazon.com, Inc. | exposed-secret | ENV | 1 | 2026-10-28 |
| 34.236.16.54 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 172.236.235.36 United States · Akamai Technologies, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 44.205.99.216 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-28 |
| 157.245.40.229 United Kingdom · DigitalOcean, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 18.235.197.197 United States · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-28 |
| 178.156.247.220 United States · Hetzner Online GmbH | exposed-secret | PHP | 1 | 2026-10-28 |
| 4.240.105.78 India · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-28 |
| 45.77.4.152 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 167.233.248.192 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 84.247.137.172 France · Contabo GmbH | exposed-secret | JSON | 1 | 2026-10-28 |
| 207.246.110.220 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 148.206.58.66 Mexico · Universidad Autonoma Metropolitana | exposed-secret | TXT | 1 | 2026-10-28 |
| 45.79.198.169 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 200.198.62.75 Brazil · COMPANHIA DE TECNOLOGIA DA INFORMACAO ESTADO MG | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 37.84.180.18 Germany · Deutsche Telekom AG | exposed-secret | TXT | 1 | 2026-10-28 |
| 15.207.130.130 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 51.75.26.136 France · OVH SAS | exposed-secret | ENV | 1 | 2026-10-28 |
| 200.0.230.14 Argentina · Telefonica de Argentina | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 45.33.96.118 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-28 |
| 45.133.74.234 Germany · Florian Kolb | exposed-secret exploit | TXT, HTML, JSON, ENV | 184 | 2026-10-28 |
| 35.74.31.145 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 45.79.122.166 India · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 138.197.108.16 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 45.33.104.77 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 45.79.126.235 India · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 45.33.118.242 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 5.45.100.28 Germany · netcup GmbH | exposed-secret | TXT | 1 | 2026-10-28 |
| 5.45.101.64 Germany · netcup GmbH | exposed-secret | TXT | 1 | 2026-10-28 |
| 46.38.232.153 Germany · netcup GmbH | exposed-secret | TXT | 1 | 2026-10-28 |
| 45.77.177.19 Japan · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-28 |
| 45.77.8.72 Japan · The Constant Company, LLC | exposed-secret exploit | TXT, ENV, JSON | 7 | 2026-10-28 |
| 45.76.122.33 Australia · The Constant Company, LLC | exposed-secret mirror | TXT | 2 | 2026-10-28 |
| 45.77.156.210 United States · The Constant Company, LLC | exposed-secret mirror | TXT | 2 | 2026-10-28 |
| 45.76.22.13 United States · The Constant Company, LLC | exposed-secret mirror | TXT | 2 | 2026-10-28 |
| 207.246.71.158 United States · The Constant Company, LLC | exposed-secret mirror | TXT | 2 | 2026-10-28 |
| 213.171.208.160 United Kingdom · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 6 | 2026-10-28 |
| 8.134.34.24 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 132.226.228.232 South Korea · Oracle Corporation | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-28 |
| 136.243.130.52 Germany · Hetzner Online GmbH | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-10-28 |
| 23.95.84.106 United States · HostPapa | exposed-secret | TXT | 1 | 2026-10-28 |
| 1.95.76.8 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV | 5 | 2026-10-28 |
| 118.70.33.71 Vietnam · FPT Telecom Company | exposed-secret | TXT | 1 | 2026-10-28 |
| 207.244.253.155 United States · Contabo Inc. | exposed-secret | TXT | 1 | 2026-10-28 |
| 51.159.98.192 France · Scaleway SAS | exploit exposed-secret | TXT, JSON, PHP | 8 | 2026-10-28 |
| 60.244.109.20 Taiwan · Asia Pacific Broadband Fixed Lines Co., Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free