huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,973
hosts
106,558
files
126
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 159.203.115.164 United States · DigitalOcean, LLC | exposed-secret c2 webshell malware | PY, SH, JS, TS | 459 | 2026-10-22 |
| 165.232.41.141 United Kingdom · DigitalOcean, LLC | exposed-secret exploit malware mozi | SH, TXT, GZ, JSON | 30 | 2026-10-22 |
| 51.159.78.191 France · Scaleway SAS | exposed-secret | TXT | 1 | 2026-10-22 |
| 54.169.109.7 Singapore · Amazon.com, Inc. | exposed-secret exploit malware mozi | LOG, PY, OVPN, TXT | 55 | 2026-10-22 |
| 45.198.224.253 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 45.198.224.194 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 45.198.224.199 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 45.198.224.184 Seychelles · VPSVAULT.HOST LTD | exposed-secret forced-loot | TXT | 1 | 2026-10-22 |
| 102.210.149.166 Kenya · THE KONZA TECHNOPOLIS DEVELOPMENT AUTHORITY | exposed-secret | TXT | 1 | 2026-10-22 |
| 157.90.175.209 Germany · Hetzner Online GmbH | exploit exposed-secret mirror | CBBBDD, JSP | 3 | 2026-10-22 |
| 184.154.107.45 United States · Internap Holding LLC | exploit exposed-secret mirror | CBBBDD, JSP | 3 | 2026-10-22 |
| 139.59.90.109 India · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-10-22 |
| 45.207.202.207 Seychelles · FASTNET DATA INC | exposed-secret | CAM | 1 | 2026-10-22 |
| 216.225.196.120 United States · IONOS SE | exposed-secret tunnel | CC | 1 | 2026-10-22 |
| 122.10.17.49 Hong Kong · DingFeng XinHui(HongKong) Technology Limited | exposed-secret | TXT | 1 | 2026-10-22 |
| 202.238.198.36 Japan · Internet Initiative Japan Inc. | exposed-secret | JP | 1 | 2026-10-22 |
| 202.238.198.224 Japan · Internet Initiative Japan Inc. | exposed-secret | JP | 1 | 2026-10-22 |
| 220.156.64.91 Japan · Internet Initiative Japan Inc. | exposed-secret | JP | 1 | 2026-10-22 |
| 83.143.222.4 Finland · GleSYS AB | exposed-secret exploit | PHP, FI, XML | 5 | 2026-10-22 |
| 37.27.209.157 Finland · Hetzner Online GmbH | exposed-secret | TXT | 1 | 2026-10-22 |
| 185.177.72.50 France · Bucklog SARL | exposed-secret | ENV | 1 | 2026-10-22 |
| 208.98.38.173 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-21 |
| 212.232.23.75 Singapore · ROCKHOSTER PRIVATE LIMITED | exposed-secret exploit malware mozi | PY, LOG, TXT, BIN | 341 | 2026-10-21 |
| 18.166.203.32 China · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-21 |
| 18.163.14.71 China · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-21 |
| 16.163.205.112 China · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-21 |
| 57.129.130.178 United Kingdom · OVH SAS | exposed-secret | TXT | 1 | 2026-10-21 |
| 122.155.166.90 Thailand · National Telecom Public Company Limited | exposed-secret | ENV | 1 | 2026-10-21 |
| 194.238.57.99 Sweden · NODE HOST LIMITED | exposed-secret | SKIN | 1 | 2026-10-21 |
| 93.152.220.30 Bulgaria · Cyberzone S.A. | exposed-secret | CC | 1 | 2026-10-21 |
| 89.32.46.87 Romania · Cyber_Folks SRL | exposed-secret exploit malware elf-binary | PY, TXT, HTML, DB | 65 | 2026-10-21 |
| 91.214.17.136 Ukraine · PollyComm LTD | exposed-secret malware mozi exploit | FRM, TXT, MYD, MYI | 38 | 2026-10-21 |
| 151.236.29.109 Greece · SYNAPSECOM S.A. Provider of Telecommunications and Internet Services | exposed-secret | ENV, TXT | 2 | 2026-10-21 |
| 91.214.17.151 Ukraine · PollyComm LTD | exposed-secret malware mozi exploit | FRM, TXT, MYD, MYI | 38 | 2026-10-21 |
| 195.201.83.167 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | SH, PY, SCIENC, JSON | 400 | 2026-10-21 |
| 212.244.203.102 Poland · Orange Polska Spolka Akcyjna | webshell exposed-secret malware c2 | C, SQL, IN, PL | 300 | 2026-10-21 |
| 91.214.17.138 Ukraine · PollyComm LTD | exposed-secret malware mozi exploit | FRM, TXT, MYD, MYI | 38 | 2026-10-21 |
| 81.181.166.24 Romania · DataNode DC SRL | exposed-secret exploit malware mozi | BIN, LOG, TXT, JSON | 28 | 2026-10-21 |
| 91.214.17.190 Ukraine · PollyComm LTD | exposed-secret malware mozi exploit | FRM, TXT, MYD, MYI | 38 | 2026-10-21 |
| 80.97.51.103 Romania · Full Duplex SRL | exposed-secret | DB, TXT | 7 | 2026-10-21 |
| 87.121.52.82 Bulgaria · Neterra Ltd. | exposed-secret malware mozi exploit | GO, DB, JSON, KEY | 60 | 2026-10-21 |
| 78.130.211.168 Bulgaria · "Cooolbox" AD | exposed-secret webshell | GZ, BZ2, ZIP, JAR | 27 | 2026-10-21 |
| 45.84.187.47 Bulgaria · Burgasnet LTD | exposed-secret | NFO, SRT | 3 | 2026-10-21 |
| 82.118.235.179 Bulgaria · DA International Group Ltd. | exposed-secret exploit malware mozi | TXT, HTML | 28 | 2026-10-21 |
| 159.69.66.161 Germany · Hetzner Online GmbH | exposed-secret malware mozi exploit | PY, LOG, TXT, JSON | 705 | 2026-10-21 |
| 93.123.85.46 Germany · dataforest GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-21 |
| 188.210.220.194 Poland · DATASPACE P.S.A. | exposed-secret malware pe-binary | PHP, LOG, PE, YML | 9 | 2026-10-21 |
| 78.9.235.120 Poland · Netia SA | exposed-secret exploit malware elf-binary | TXT, ZIP, ELF | 8 | 2026-10-21 |
| 87.251.64.224 Poland · ISAEV Igor | c2 exposed-secret malware exploit | C, LOG, CSV, EXE | 8 | 2026-10-21 |
| 87.199.203.242 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit tunnel | SH, COMPLE, ENV, KEY | 302 | 2026-10-21 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free