huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,973
hosts
106,604
files
126
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 5.39.254.211 United Kingdom · Baxet Group Inc. | malware exposed-secret coinminer elf-binary | SH, ELF, LOG, TGZ | 9 | 2026-10-21 |
| 167.71.128.202 United Kingdom · DigitalOcean, LLC | exploit exposed-secret webshell tunnel | PY, GZ, SH, LOG | 210 | 2026-10-21 |
| 104.131.123.117 United States · DigitalOcean, LLC | exposed-secret malware mozi | JS, KEY, LOG, ZIP | 4 | 2026-10-21 |
| 52.90.1.165 United States · Amazon.com, Inc. | exposed-secret webshell malware exploit | SH, TXT, ELF, KEY | 29 | 2026-10-21 |
| 3.92.228.247 United States · Amazon.com, Inc. | webshell exploit exposed-secret | PHP, TXT | 12 | 2026-10-21 |
| 37.9.62.28 United Kingdom · UK Dedicated Servers Limited | exposed-secret exploit | TXT | 2 | 2026-10-21 |
| 2.26.51.20 Germany · PLAY2GO INTERNATIONAL LIMITED | exposed-secret exploit webshell tunnel | MD, PS1, SH, PY | 55 | 2026-10-21 |
| 213.199.60.64 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-21 |
| 188.166.148.204 GB · DigitalOcean, LLC | c2 exposed-secret tunnel | LOG, PY, SH, YML | 12 | 2026-10-21 |
| 88.99.208.237 Germany · Hetzner Online GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-21 |
| 70.39.95.67 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-21 |
| 82.117.243.163 The Netherlands · Scalaxy B.V. | exploit exposed-secret | GROUP | 1 | 2026-10-21 |
| 172.67.205.61 United States · Cloudflare, Inc. | exploit exposed-secret | GROUP | 1 | 2026-10-21 |
| 132.243.221.136 The Netherlands · QWINS LTD | exploit exposed-secret | GROUP | 1 | 2026-10-21 |
| 104.21.52.233 United States · Cloudflare, Inc. | exploit exposed-secret | GROUP | 1 | 2026-10-21 |
| 23.141.116.9 Vietnam · MINIUM NET LLC | exposed-secret | TXT | 1 | 2026-10-21 |
| 202.51.215.250 Indonesia · PT Jala Lintas Media | exposed-secret exploit | TXT | 4 | 2026-10-21 |
| 44.210.204.142 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-21 |
| 153.80.245.186 Russia · AdminVPS LLC | exposed-secret | TXT | 2 | 2026-10-21 |
| 109.195.60.152 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT | 1 | 2026-10-21 |
| 109.195.60.249 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT | 1 | 2026-10-21 |
| 170.78.211.67 Mexico · Wantelco SAS de CV | exposed-secret | TXT | 1 | 2026-10-21 |
| 153.52.111.73 Germany | exposed-secret | TXT | 1 | 2026-10-21 |
| 111.223.247.165 South Korea · BGP Network Limited | exposed-secret malware mozi exploit | PY, TXT, PEM, LOG | 31 | 2026-10-20 |
| 202.61.139.137 Singapore · CTG Server Limited | exposed-secret exploit malware mozi | PY, LOG, SH, TXT | 130 | 2026-10-20 |
| 82.158.193.146 Ukraine | exploit webshell c2 exposed-secret | JS, LOG, PY, SH | 11 | 2026-10-20 |
| 119.2.51.194 Indonesia · PT Blip Integrator Provider | exposed-secret | TXT | 3 | 2026-10-20 |
| 16.5.0.151 United States | exposed-secret | TXT | 1 | 2026-10-20 |
| 108.61.75.13 United States · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-20 |
| 172.67.72.49 United States · Cloudflare, Inc. | c2 exposed-secret | COM | 1 | 2026-10-20 |
| 104.26.14.226 United States · Cloudflare, Inc. | c2 exposed-secret | COM | 1 | 2026-10-20 |
| 104.26.15.226 United States · Cloudflare, Inc. | c2 exposed-secret | COM | 1 | 2026-10-20 |
| 172.67.158.99 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-20 |
| 104.21.58.85 United States · Cloudflare, Inc. | exposed-secret | TXT | 1 | 2026-10-20 |
| 112.175.185.135 South Korea · Korea Telecom | exposed-secret | KR | 4 | 2026-10-20 |
| 14.251.16.113 Vietnam · VNPT Corp | exposed-secret | JSON, TXT | 2 | 2026-10-20 |
| 8.138.240.83 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-20 |
| 85.155.224.59 Japan · BreezeHost | exposed-secret | GD | 1 | 2026-10-20 |
| 212.11.60.31 Taiwan · OCTOPUS WEB SOLUTION INC | exposed-secret | JP | 1 | 2026-10-20 |
| 38.96.31.52 United States · Limestone Networks, Inc. | exposed-secret | GD | 1 | 2026-10-20 |
| 209.99.186.104 Switzerland · SKN Subnet & Telecom Ltd | exposed-secret | COM, TXT | 4 | 2026-10-19 |
| 103.163.47.98 China · Cloud Computing Corporation | exposed-secret | TXT, ENV | 7 | 2026-10-19 |
| 8.234.120.254 India · Google LLC | exposed-secret exploit | TXT, ENV | 3 | 2026-10-19 |
| 191.40.41.246 Hong Kong · Eons Data Communications Limited | exposed-secret | TXT | 1 | 2026-10-19 |
| 177.4.12.11 Hong Kong · Hong Kong Communications International Co., Limited | exploit malware coinminer exposed-secret | PY, YAML, TXT, ZIP | 25 | 2026-10-19 |
| 209.141.43.95 United States · FranTech Solutions | exploit c2 exposed-secret webshell | PHP, ELF, SH, ZIP | 69 | 2026-10-19 |
| 185.157.161.93 Sweden · Obehosting AB | exploit c2 exposed-secret webshell | PY, SH, JS, JSON | 503 | 2026-10-19 |
| 44.206.141.94 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-19 |
| 47.83.16.171 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 2 | 2026-10-19 |
| 177.229.198.158 Mexico · Mega Cable, S.A. de C.V. | exposed-secret | TXT | 1 | 2026-10-19 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free