huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,975
hosts
106,609
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 34.176.25.144 Chile · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 34.174.56.189 United States · Google LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 34.172.165.27 United States · Google LLC | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 79.25.206.241 Italy · Telecom Italia S.p.A. | exposed-secret | LOG, SH, TXT | 96 | 2026-10-08 |
| 139.28.220.253 Finland · IHOR HOSTING LTD | exposed-secret exploit c2 malware | GZ, TXT, ALL, AUS | 36 | 2026-10-08 |
| 178.238.229.190 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 167.233.36.82 Germany · Hetzner Online GmbH | exposed-secret malware mozi webshell | PHP, SH, JS, PY | 25 | 2026-10-08 |
| 37.69.77.150 France · Societe Francaise Du Radiotelephone - SFR SA | exposed-secret webshell exploit tunnel | PY, PYO, TXT, LOG | 81 | 2026-10-08 |
| 159.65.168.239 United States · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-08 |
| 89.116.210.63 United Kingdom · Limestone Networks, Inc. | exposed-secret | JSON, TXT | 2 | 2026-10-08 |
| 23.254.195.48 United States · HostPapa | malware exposed-secret elf-binary pe-binary | ELF, PE, TXT | 12 | 2026-10-08 |
| 208.98.38.234 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 45.58.168.180 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.129 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.36 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.72 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 204.188.254.228 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 45.58.168.195 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 34.154.12.196 Italy · Google LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 154.222.21.241 Seychelles · cognetcloud INC | exposed-secret | ENV | 1 | 2026-10-07 |
| 50.6.202.214 United States · Network Solutions, LLC | exposed-secret malware mozi | PHP, HTML, TXT | 7 | 2026-10-07 |
| 34.142.40.134 United Kingdom · Google LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 34.140.59.106 Belgium · Google LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 94.103.1.233 The Netherlands · Digital Hosting Provider LLC | exposed-secret | VC | 1 | 2026-10-07 |
| 185.216.68.66 Seychelles · ALEXHOST SRL | exploit exposed-secret webshell c2 | PY, TXT, SH, JS | 339 | 2026-10-07 |
| 23.224.119.154 United States · CNSERVERS LLC | c2 exploit exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-07 |
| 160.202.239.99 China · Hubei Feixun Network Co., Ltd | exposed-secret | TXT | 1 | 2026-10-07 |
| 203.55.129.83 China · CHINANET Fujian province Fuzhou IDC network | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-07 |
| 46.101.197.32 Germany · DigitalOcean, LLC | exposed-secret tunnel | TXT, ENV, TV | 4 | 2026-10-07 |
| 79.110.49.138 France · 12651980 CANADA INC. | exposed-secret | 1 | 2026-10-07 | |
| 118.69.78.91 Vietnam · FPT Telecom Company | exposed-secret malware pe-binary tunnel | SH, ZIP, BAT, JSON | 20 | 2026-10-07 |
| 3.26.199.64 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 5 | 2026-10-07 |
| 5.189.165.19 France · Contabo GmbH | exposed-secret | TXT | 3 | 2026-10-07 |
| 38.54.16.112 United States · LIGHT NODE LIMITED | exposed-secret | TXT | 2 | 2026-10-07 |
| 217.160.147.226 United Kingdom · IONOS SE | exposed-secret | TXT | 1 | 2026-10-07 |
| 192.3.239.164 United States · HostPapa | exposed-secret | TXT | 1 | 2026-10-07 |
| 172.86.118.127 United States · RouterHosting LLC | exposed-secret | TXT | 1 | 2026-10-07 |
| 5.188.230.139 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.52 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.141 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.88 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.121 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.130 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.123 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.120 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.140 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 38.60.157.86 United States · Kaopu Cloud HK Limited | malware mozi exposed-secret | PY, LOG, TGZ, TXT | 20 | 2026-10-07 |
| 64.118.143.136 Hong Kong · Eons Data Communications Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 167.148.201.15 United Kingdom · MillenialHost Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 45.178.183.224 Brazil · AbsamHost Internet Data Center | exposed-secret | TXT | 2 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free