huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
104
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 91.108.103.209 United Kingdom · Hostinger International Limited | exposed-secret | COM, CYOU, PHP, TECH | 4 | 2026-11-10 |
| 185.77.97.88 United States · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 162.125.65.18 United States · Dropbox, Inc. | exposed-secret | PDF, ZIP | 4 | 2026-11-10 |
| 168.144.111.9 Singapore · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-10 |
| 38.64.187.62 Canada · Cogent Communications | exposed-secret | TXT | 2 | 2026-11-10 |
| 103.117.137.170 Hong Kong · cognetcloud INC | exposed-secret | ENV | 1 | 2026-11-10 |
| 34.49.135.223 United States · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-10 |
| 185.77.97.1 United States · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 91.108.103.168 United Kingdom · Hostinger International Limited | exposed-secret | COM, PHP, TECH | 3 | 2026-11-10 |
| 185.77.97.85 United States · Hostinger International Limited | exposed-secret | PHP | 1 | 2026-11-10 |
| 89.116.109.33 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 95.78.120.151 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT | 1 | 2026-11-10 |
| 34.49.135.54 United States · Google LLC | exposed-secret | TXT | 1 | 2026-11-10 |
| 52.172.140.8 India · Microsoft Corporation | exposed-secret exploit c2 webshell | SH, PY, LOG, SQL | 297 | 2026-11-10 |
| 195.200.9.238 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 91.108.103.62 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 165.22.220.74 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-10 |
| 172.67.222.141 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 104.21.43.74 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 172.67.204.110 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 104.21.85.97 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 172.67.211.35 United States · Cloudflare, Inc. | exposed-secret | LIFE | 1 | 2026-11-10 |
| 104.21.83.34 United States · Cloudflare, Inc. | exposed-secret | LIFE | 1 | 2026-11-10 |
| 144.31.106.40 Germany · Kyonix Networks Limited | exposed-secret tunnel | SHOP | 1 | 2026-11-10 |
| 27.110.235.238 Philippines · Philippine Long Distance Telephone Co. | exposed-secret | TXT, ENV, JSON, PHP | 27 | 2026-11-10 |
| 165.227.87.198 United States · DigitalOcean, LLC | malware mozi exposed-secret tunnel | TXT, LOG, PHP | 11 | 2026-11-10 |
| 169.58.10.238 United States · TerraTransit AG | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-10 |
| 47.99.199.212 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-10 |
| 192.121.162.248 Japan · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-11-10 |
| 169.58.109.98 United States · TerraTransit AG | exposed-secret exploit | TXT, ENV | 3 | 2026-11-10 |
| 8.211.180.57 Singapore · Alibaba (US) Technology Co., Ltd. | exploit malware mozi exposed-secret | HTML, LOG, PY | 14 | 2026-11-10 |
| 8.218.8.249 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-11-10 |
| 186.244.215.55 United States · Uscloud Inc | exposed-secret | TXT | 2 | 2026-11-10 |
| 32.190.234.244 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-10 |
| 32.190.234.241 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-10 |
| 32.190.234.175 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-10 |
| 32.190.234.213 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-10 |
| 152.42.162.237 Singapore · DigitalOcean, LLC | exposed-secret exploit malware mozi | PY, TXT, LOG, ELF | 135 | 2026-11-09 |
| 163.52.135.151 unknown network | exposed-secret exploit webshell malware | PY, HTML, TXT, PHP | 611 | 2026-11-09 |
| 195.200.9.246 United Kingdom · Hostinger International Limited | exposed-secret | HTA, IN | 2 | 2026-11-09 |
| 185.77.97.207 United States · Hostinger International Limited | exposed-secret | HTA, IN | 2 | 2026-11-09 |
| 5.231.45.175 Germany · Philip Fjaera trading as PFWeb Solutions | exposed-secret forced-loot | TXT | 1 | 2026-11-09 |
| 121.36.206.152 China · Huawei Cloud Service data center | malware coinminer exposed-secret c2 | ELF, TXT, LOG, PY | 24 | 2026-11-09 |
| 168.144.157.73 India · DigitalOcean, LLC | exposed-secret malware mozi exploit | PY, SH, JS, TXT | 633 | 2026-11-09 |
| 101.96.207.153 China · Beijing Volcano Engine Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-11-09 |
| 147.182.133.56 United States · DigitalOcean, LLC | exposed-secret malware exploit c2 | BIN, TXT, PE, HTML | 237 | 2026-11-09 |
| 13.202.120.3 India · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-11-09 |
| 104.248.53.161 United States · DigitalOcean, LLC | exploit exposed-secret webshell tunnel | PY, LOG, SH, HTML | 374 | 2026-11-09 |
| 178.62.235.52 The Netherlands · DigitalOcean, LLC | exposed-secret exploit malware mozi | PY, LOG, HTML, TXT | 209 | 2026-11-09 |
| 132.226.169.119 South Korea · Oracle Corporation | exposed-secret malware mozi tunnel | YAML, SH, BAK, ELF | 36 | 2026-11-09 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free