huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,974
hosts
106,608
files
127
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 44.242.223.198 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 51.254.201.48 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 54.206.103.19 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 141.95.1.119 Germany · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 156.252.126.133 Mexico · PEG TECH INC | exposed-secret | TXT | 2 | 2026-10-15 |
| 156.252.106.10 Mexico · PEG TECH INC | exposed-secret | TXT | 2 | 2026-10-15 |
| 54.157.25.142 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 34.192.30.70 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 91.121.88.120 France · OVH SAS | exposed-secret | TXT | 2 | 2026-10-15 |
| 149.28.152.2 Singapore · The Constant Company, LLC | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 13.211.154.250 Australia · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-15 |
| 139.59.127.83 Singapore · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-10-15 |
| 213.32.66.254 France · OVH SAS | exposed-secret | TXT | 2 | 2026-10-15 |
| 207.148.29.215 United States · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 23.92.20.14 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 2 | 2026-10-15 |
| 161.35.55.95 United States · DigitalOcean, LLC | exposed-secret | ENV | 1 | 2026-10-15 |
| 180.214.246.147 Indonesia · PT. TIME EXCELINDO | exposed-secret | ENV | 1 | 2026-10-15 |
| 130.61.210.103 Germany · Oracle Corporation | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 191.44.112.89 Germany · NODE HOST LIMITED | exposed-secret | TXT | 1 | 2026-10-15 |
| 150.187.25.242 Venezuela · Fundacion Centro Nacional de Innovacion Tecnologica (CENIT) | exposed-secret | PHP, HTML, JS, TXT | 8 | 2026-10-15 |
| 36.129.15.111 China · China Mobile | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-15 |
| 41.153.30.115 Egypt · ETISALAT MISR | exposed-secret | JSON | 1 | 2026-10-15 |
| 159.65.2.87 Singapore · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 77.90.185.244 Germany · Limited Network LTD | exposed-secret | ENV | 1 | 2026-10-15 |
| 77.90.185.243 Germany · Limited Network LTD | exposed-secret | ENV | 1 | 2026-10-15 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 47.92.205.158 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware elf-binary | ELF, TXT | 2 | 2026-10-15 |
| 45.139.104.222 United States · 49.3 Networking LLC | exposed-secret | BIN, ENV, JSON, PHP | 5 | 2026-10-15 |
| 38.55.133.49 United States · Uscloud Inc | exposed-secret | DONE | 1 | 2026-10-15 |
| 213.199.41.6 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-15 |
| 157.245.157.248 Singapore · DigitalOcean, LLC | exposed-secret malware mozi tunnel | TXT | 1 | 2026-10-15 |
| 185.177.72.64 France · Bucklog SARL | exposed-secret | ENV | 1 | 2026-10-15 |
| 167.104.160.76 United States · Navient Solutions, LLC | exposed-secret | TXT | 1 | 2026-10-15 |
| 13.143.144.167 United States | exposed-secret | TXT | 1 | 2026-10-15 |
| 20.190.159.64 Ireland · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 13.37.72.210 France · Amazon.com, Inc. | exposed-secret | 1 | 2026-10-15 | |
| 204.188.254.145 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-15 |
| 20.190.160.130 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-15 |
| 39.105.100.92 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, PHP | 11 | 2026-10-15 |
| 38.242.156.206 Germany · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-14 |
| 38.91.100.33 United States · GTHost | exposed-secret | TXT | 1 | 2026-10-14 |
| 40.126.31.128 Ireland · Microsoft Corporation | exposed-secret | TXT | 1 | 2026-10-14 |
| 37.202.168.251 Iran · Aria Shatel PJSC | exposed-secret | TXT | 1 | 2026-10-14 |
| 37.148.0.222 Iran · Aria Shatel PJSC | exposed-secret | TXT | 1 | 2026-10-14 |
| 20.190.160.132 The Netherlands · Microsoft Corporation | exposed-secret | TXT | 2 | 2026-10-14 |
| 36.93.215.172 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret | ENV, JSON, PHP, TXT | 4 | 2026-10-14 |
| 36.92.51.147 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret | TXT, JSON, PHP | 5 | 2026-10-14 |
| 20.190.160.20 The Netherlands · Microsoft Corporation | exploit exposed-secret | TXT | 2 | 2026-10-14 |
| 194.163.148.133 France · Contabo GmbH | exposed-secret exploit malware mozi | PHP, TXT, MD, JS | 74 | 2026-10-14 |
| 125.212.138.85 Vietnam · Viettel Group | exposed-secret | TXT | 2 | 2026-10-14 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free