huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,971
hosts
106,553
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 66.175.219.193 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 39.106.39.92 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 111.229.40.97 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 41.213.143.134 RE · Reunicable SAS | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 176.122.172.114 Canada · IT7 Networks Inc | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 103.207.97.154 Indonesia · PT Jaya Kartha Solusindo | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 34.176.172.154 Chile · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 84.252.77.79 Denmark · Herning Kommune | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 83.240.216.128 Portugal · MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 37.221.197.77 Germany · netcup GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 212.130.12.57 Denmark · TDC Holding A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 34.78.104.15 Belgium · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 77.161.197.71 The Netherlands · KPN B.V. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 140.110.113.156 Taiwan · Taiwan Academic Network (TANet) Information Center | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 46.38.231.46 Germany · netcup GmbH | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 109.123.239.180 Singapore · Contabo Asia Private Limited | exposed-secret | TXT | 2 | 2026-10-24 |
| 172.233.175.27 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 144.202.41.140 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 149.154.158.140 United States · M247 Europe SRL | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 172.105.7.122 Canada · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 131.165.209.104 Denmark · KMD A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 45.94.158.164 Ukraine · PE Skurykhin Mukola Volodumurovuch | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 159.203.52.118 Canada · DigitalOcean, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 185.59.104.50 Denmark · Holstebro Kommune | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 185.193.121.237 Denmark · Itm8 A/S | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 13.239.135.61 Australia · Amazon.com, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 172.105.25.164 Canada · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-24 |
| 192.84.24.50 United States · Enerpac Tool Group Corp. | exposed-secret | TXT | 1 | 2026-10-24 |
| 139.87.74.49 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 139.87.80.68 United States · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 167.71.227.197 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 15.135.91.188 Australia · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 2 | 2026-10-24 |
| 16.178.131.118 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 13.203.202.168 IN · Amazon Data Services India | exposed-secret exploit | TXT | 4 | 2026-10-24 |
| 115.126.127.135 Hong Kong · Forewin Telecom Group Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 142.44.135.45 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-24 |
| 140.245.97.165 Singapore · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 111.229.57.196 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 45.76.27.196 United States · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-24 |
| 39.109.100.126 Hong Kong | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 103.214.172.114 Hong Kong · Cloudie Limited | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 168.138.221.255 Japan · Oracle Corporation | exposed-secret | TXT | 1 | 2026-10-24 |
| 157.245.106.219 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 45.58.10.169 United States · Vlan24 | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 103.247.10.161 Indonesia · Rumahweb | exposed-secret | TXT | 1 | 2026-10-24 |
| 103.39.78.45 Hong Kong · VH-GLOBAL | exploit exposed-secret malware webshell | ASPX, PE, PS1, TXT | 9 | 2026-10-24 |
| 43.254.165.70 Hong Kong · VH-GLOBAL | exploit exposed-secret malware webshell | ASPX, PE, PS1, TXT | 9 | 2026-10-24 |
| 51.83.130.8 Poland · OVH SAS | exposed-secret | ENV | 1 | 2026-10-24 |
| 104.21.33.151 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
| 172.67.146.135 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free