huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,975
hosts
106,609
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 118.107.13.102 Japan · CTG Server Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 54.179.31.189 Singapore · Amazon.com, Inc. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 195.123.240.13 Czechia · GREEN FLOID LLC | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 37.114.49.169 Germany · Oliver Horscht is trading as "SYNLINQ" | exposed-secret exploit | TXT, HTML | 4 | 2026-10-12 |
| 198.44.177.60 United States · CORENET CLOUD SDN. BHD. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 168.93.199.208 United States · Turing Group Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 103.96.151.24 Hong Kong · West263 International Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 154.94.233.136 Seychelles · cognetcloud INC | exposed-secret | TXT | 1 | 2026-10-12 |
| 149.30.245.147 United States · SonderCloud Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 157.245.59.64 Singapore · DigitalOcean, LLC | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 102.204.222.159 Nigeria · ABCCLOUD SDN.BHD. | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 118.107.41.239 Hong Kong · CTG Server Limited | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 103.46.185.169 Hong Kong · LANDUPS LIMITED | exposed-secret | HTML, TXT | 2 | 2026-10-12 |
| 151.101.130.159 United States · Fastly, Inc. | exposed-secret | HTML | 1 | 2026-10-12 |
| 31.76.79.58 United States · PLAY2GO INTERNATIONAL LIMITED | exposed-secret exploit malware mozi | SH, PY, PL | 34 | 2026-10-12 |
| 23.239.29.46 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-10-12 |
| 5.182.44.168 Iran · Green Web Samaneh Novin PJSC | exposed-secret | TXT | 1 | 2026-10-12 |
| 78.17.209.207 Germany | exposed-secret | TXT | 1 | 2026-10-10 |
| 194.9.6.5 Germany · dataforest GmbH | c2 exposed-secret | TXT | 2 | 2026-10-10 |
| 52.22.145.238 United States · Amazon.com, Inc. | exposed-secret | COM | 1 | 2026-10-10 |
| 45.130.165.44 Singapore · Kamatera, Inc. | exposed-secret exploit tunnel mirror | PHP, JS, LOG, OUT | 16 | 2026-10-10 |
| 149.28.175.80 Australia · The Constant Company, LLC | exposed-secret exploit tunnel | TXT | 49 | 2026-10-10 |
| 213.136.79.115 France · Contabo GmbH | exposed-secret exploit malware c2 | SH, TXT, JSON, LOG | 460 | 2026-10-09 |
| 84.247.169.84 France · Contabo GmbH | exposed-secret | ENV | 1 | 2026-10-09 |
| 64.89.161.65 Luxembourg · Ghosty Networks LLC | exploit exposed-secret | VBS | 2 | 2026-10-09 |
| 42.235.204.114 China · CHINA UNICOM China169 Backbone | exploit exposed-secret | TXT, ENV, JSON, PHP | 10 | 2026-10-09 |
| 45.76.243.216 United States · The Constant Company, LLC | exposed-secret | ENV, TXT | 2 | 2026-10-09 |
| 45.79.200.90 United States · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-10-09 |
| 84.235.245.220 United Arab Emirates · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 82.165.24.191 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 185.184.70.43 United Kingdom · MASSIVEGRID LTD | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 51.79.254.161 Canada · OVH SAS | exposed-secret | TXT | 1 | 2026-10-09 |
| 207.148.123.74 Singapore · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-09 |
| 149.28.183.82 Australia · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 5 | 2026-10-09 |
| 207.148.125.83 Singapore · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-10-09 |
| 45.77.139.235 The Netherlands · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-10-09 |
| 176.126.84.68 Germany · HostHatch, LLC | exposed-secret | TXT | 1 | 2026-10-09 |
| 5.75.252.79 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT, ENV | 4 | 2026-10-09 |
| 217.22.167.210 Russia · JSC Avantel | exposed-secret | TXT | 1 | 2026-10-09 |
| 194.163.178.71 France · Contabo GmbH | exposed-secret | SH | 2 | 2026-10-09 |
| 217.177.40.88 Finland · DataCrunch Oy | exposed-secret | TXT | 1 | 2026-10-09 |
| 35.252.4.255 Israel · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 41.225.25.98 TN · 3S INF | exposed-secret | COM | 1 | 2026-10-08 |
| 35.229.143.32 Taiwan · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 35.231.26.5 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 35.199.118.189 Brazil · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 35.194.241.35 Taiwan · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 35.73.248.246 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 34.185.180.78 Germany · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 213.209.159.55 Germany · Feo Prest SRL | exploit exposed-secret tunnel | TXT, PY, SH | 5 | 2026-10-08 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free