huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,975
hosts
106,609
files
129
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 213.209.159.223 Germany · Feo Prest SRL | exposed-secret | ENV | 1 | 2026-10-06 |
| 45.67.217.113 France · Contabo GmbH | exposed-secret | ENV | 1 | 2026-10-06 |
| 185.93.89.135 United Arab Emirates · Limited Network LTD | exposed-secret | TXT | 1 | 2026-10-06 |
| 146.190.158.92 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 8.148.22.190 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-10-06 |
| 160.119.76.64 Seychelles · Alsycon B.V. | exploit exposed-secret | TXT | 1 | 2026-10-06 |
| 129.204.60.235 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 179.43.163.26 Panama · Private Layer INC | exposed-secret | JSON | 1 | 2026-10-06 |
| 8.136.5.87 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 14.47.56.17 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-06 |
| 160.187.147.124 Vietnam · INTERDIGI JOINT STOCK COMPANY | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 5.83.144.60 India · GorillaServers, Inc. | malware exposed-secret c2 exploit | PE, ASPX, ELF, BAT | 31 | 2026-10-06 |
| 123.131.17.131 China · CHINA UNICOM China169 Backbone | exposed-secret | TXT | 1 | 2026-10-06 |
| 206.189.224.218 United States · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-10-06 |
| 67.197.117.245 United States · Comporium, Inc | exposed-secret | TXT | 1 | 2026-10-06 |
| 144.172.93.238 United States · RouterHosting LLC | exposed-secret forced-loot | TXT | 1 | 2026-10-06 |
| 176.222.55.99 The Netherlands · HOSTKEY B.V. | exposed-secret | TXT | 1 | 2026-10-06 |
| 154.54.100.172 MU · American Information Network | exposed-secret | TXT | 1 | 2026-10-06 |
| 37.195.171.219 Russia · Novotelecom Ltd | exposed-secret | TXT | 1 | 2026-10-06 |
| 172.245.253.41 United States · HostPapa | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 45.207.213.86 Seychelles · cognetcloud INC | exposed-secret | JSON, TXT | 2 | 2026-10-06 |
| 113.125.165.132 China · Cloud Computing Corporation | exposed-secret | PHP | 1 | 2026-10-06 |
| 43.157.205.102 Indonesia · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 106.75.77.231 China · China Unicom Beijing Province Network | exposed-secret | TXT | 1 | 2026-10-06 |
| 121.199.34.107 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-10-06 |
| 164.90.192.235 The Netherlands · DigitalOcean, LLC | exposed-secret | ENV | 1 | 2026-10-06 |
| 178.105.84.202 Germany · Hetzner Online GmbH | exposed-secret | ENV | 1 | 2026-10-06 |
| 36.92.6.45 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 167.99.186.175 Canada · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 36.64.68.99 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 114.80.34.158 China · China Telecom (Group) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 112.163.28.123 South Korea · Korea Telecom | exposed-secret | TXT | 1 | 2026-10-06 |
| 188.166.214.47 Singapore · DigitalOcean, LLC | exposed-secret | ENV | 1 | 2026-10-06 |
| 197.248.7.232 Kenya · Safaricom Limited | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 156.239.225.149 Hong Kong · CORENET CLOUD SDN. BHD. | exposed-secret | JSON | 1 | 2026-10-06 |
| 39.100.182.251 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | PHP | 1 | 2026-10-06 |
| 187.110.161.98 Brazil · EVEO Servicos de Internet Ltda. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 47.98.221.20 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 220.158.233.201 Bangladesh · VIETTEL (CAMBODIA) PTE., LTD | exposed-secret | JSON | 1 | 2026-10-06 |
| 222.89.169.98 China · Chinanet | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-06 |
| 38.253.239.21 Indonesia · PT Indonesia Telekomunikasi Teknologi | exposed-secret | ENV | 1 | 2026-10-06 |
| 148.216.28.11 Mexico · Alestra, S. de R.L. de C.V. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 220.154.130.125 China · China Telecom | exposed-secret | TXT, ENV, JSON | 5 | 2026-10-06 |
| 142.93.230.252 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 62.169.17.65 France · Contabo GmbH | exposed-secret exploit | TXT, ENV | 4 | 2026-10-06 |
| 41.153.30.114 Egypt · ETISALAT MISR | exposed-secret | JSON | 1 | 2026-10-06 |
| 143.110.241.64 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 196.15.193.203 South Africa · Telkom SA Ltd. | exposed-secret | JSON, PHP | 2 | 2026-10-06 |
| 200.8.228.57 Venezuela · Corporacion Telemic C.A. | exposed-secret | TXT | 1 | 2026-10-06 |
| 37.187.244.59 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free