huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,971
hosts
106,553
files
124
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 172.67.200.161 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
| 104.21.13.154 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-24 |
| 54.69.111.24 United States · Amazon.com, Inc. | exploit exposed-secret webshell c2 | BIN, JSON, ZIP, PY | 114 | 2026-10-24 |
| 117.58.240.173 Bangladesh · Always On Network Bangladesh Ltd. | exposed-secret | COM | 1 | 2026-10-24 |
| 185.186.78.33 Sweden · BrainStorm Network, Inc | exposed-secret | TXT | 1 | 2026-10-24 |
| 194.180.191.209 Moldova · MivoCloud SRL | exposed-secret | COM | 1 | 2026-10-24 |
| 194.180.191.239 Moldova · MivoCloud SRL | exposed-secret | COM | 1 | 2026-10-24 |
| 139.162.97.181 Japan · Akamai Technologies, Inc. | malware mozi exposed-secret gafgyt | MICROH, TXT | 53 | 2026-10-24 |
| 204.168.225.59 Finland · Hetzner Online GmbH | exposed-secret malware mozi exploit | PEM, TXT, PY, SH | 487 | 2026-10-24 |
| 119.23.178.234 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 47.89.250.115 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 121.37.84.160 China · Huawei Cloud Service data center | exposed-secret | TXT | 1 | 2026-10-24 |
| 104.160.169.204 United States · Sharktech | exposed-secret exploit malware tsunami | SH, LOG, TXT, PY | 170 | 2026-10-24 |
| 112.124.202.144 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-24 |
| 89.218.90.90 Kazakhstan · JSC Kazakhtelecom | exposed-secret | JSON, PHP | 2 | 2026-10-24 |
| 194.11.226.41 United Kingdom · ROCKHOSTER PRIVATE LIMITED | exposed-secret malware mozi exploit | PY, TXT, LOG, JS | 106 | 2026-10-24 |
| 50.210.239.219 United States · Comcast Cable Communications, LLC | exposed-secret exploit c2 webshell | PHP, PY, HTML, LOG | 45 | 2026-10-24 |
| 195.154.79.206 France · Scaleway SAS | malware exposed-secret pe-binary elf-binary | PE, JOBX, SH, TXT | 16 | 2026-10-24 |
| 172.67.205.146 United States · Cloudflare, Inc. | c2 exposed-secret | LINK | 1 | 2026-10-24 |
| 104.21.85.114 United States · Cloudflare, Inc. | c2 exposed-secret | LINK | 1 | 2026-10-24 |
| 172.67.197.19 United States · Cloudflare, Inc. | exposed-secret tunnel | DOWNLO | 1 | 2026-10-24 |
| 104.21.42.43 United States · Cloudflare, Inc. | exposed-secret | SARL | 1 | 2026-10-24 |
| 104.21.92.178 United States · Cloudflare, Inc. | exposed-secret tunnel | DOWNLO | 1 | 2026-10-24 |
| 104.21.83.147 United States · Cloudflare, Inc. | c2 exposed-secret tunnel | WIN | 1 | 2026-10-24 |
| 172.67.156.26 United States · Cloudflare, Inc. | exposed-secret | SARL | 1 | 2026-10-24 |
| 172.67.177.115 United States · Cloudflare, Inc. | c2 exposed-secret tunnel | WIN | 1 | 2026-10-24 |
| 104.18.37.23 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-24 |
| 172.64.150.233 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-24 |
| 43.156.240.87 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-24 |
| 187.110.176.65 Brazil · MHNET TELECOM | malware exposed-secret mozi exploit | LOG, PE, ZIP, TXT | 480 | 2026-10-24 |
| 151.242.30.142 South Africa · Internet Magnate (Pty) Ltd | exploit malware mozi exposed-secret | JS, ZIP, C, PY | 454 | 2026-10-23 |
| 173.165.104.61 United States · Comcast Cable Communications, LLC | exposed-secret | JSON, PHP | 2 | 2026-10-23 |
| 96.65.84.169 United States · Comcast Cable Communications, LLC | exposed-secret | JSON, PHP | 2 | 2026-10-23 |
| 108.186.129.102 United States · PEG TECH INC | exposed-secret | TOP | 1 | 2026-10-23 |
| 31.56.19.150 Turkey · Linivo LLC | exposed-secret | TXT | 1 | 2026-10-23 |
| 195.208.21.65 Russia · Autonomous Nonprofit Organisation "Russian Scientific-Research Institute for Pu | c2 exposed-secret | JSON | 1 | 2026-10-23 |
| 173.249.7.242 France · Contabo GmbH | exposed-secret malware elf-binary | ELF, TXT, KEY, LOG | 11 | 2026-10-23 |
| 59.125.120.125 Taiwan · Chunghwa Telecom Co., Ltd. | exposed-secret | PHP, LOCK, SH | 6 | 2026-10-23 |
| 82.180.145.166 India · Contabo Asia Private Limited | webshell exposed-secret exploit malware | PHP, TXT, PY, JSP | 50 | 2026-10-23 |
| 104.21.54.230 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-23 |
| 172.67.143.31 United States · Cloudflare, Inc. | exposed-secret | COM | 1 | 2026-10-23 |
| 38.242.147.58 Germany · Contabo GmbH | exposed-secret forced-loot | TXT | 1 | 2026-10-23 |
| 202.61.139.15 Singapore · CTG Server Limited | exposed-secret exploit malware mozi | LOG, PY, JSON, PHP | 262 | 2026-10-23 |
| 172.67.205.105 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-23 |
| 104.21.61.29 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-23 |
| 217.60.242.76 Turkey | exposed-secret | 1 | 2026-10-23 | |
| 154.219.98.61 Hong Kong · cognetcloud INC | exploit exposed-secret webshell tunnel | PY, MD, JAR, SH | 14 | 2026-10-23 |
| 91.92.40.28 The Netherlands · TechTies Inc. | exposed-secret | 1 | 2026-10-23 | |
| 70.39.95.20 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-23 |
| 159.203.115.164 United States · DigitalOcean, LLC | exposed-secret c2 webshell malware | PY, SH, JS, TS | 459 | 2026-10-22 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free