huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,030
hosts
112,856
files
80
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 185.125.171.133 Norway · Gigahost AS | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 191.7.26.132 Brazil · NTWEB SOLUCOES EM INTERNET LTDA ME | exposed-secret | TXT | 1 | 2026-10-06 |
| 167.86.97.224 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 110.93.250.7 Pakistan · TRANSWORLD ASSOCIATES (PVT) LIMITED | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 82.38.69.7 United States · HOSTKEY | exposed-secret | TXT | 1 | 2026-10-06 |
| 217.76.57.186 France · Contabo GmbH | exposed-secret | TXT | 2 | 2026-10-06 |
| 134.122.43.202 Canada · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 94.136.186.73 India · Contabo Asia Private Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 123.56.247.81 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | ENV, JSON, PHP, TXT | 4 | 2026-10-06 |
| 158.94.209.42 The Netherlands · Omegatech LTD | exposed-secret | ENV | 1 | 2026-10-06 |
| 8.129.8.1 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-10-06 |
| 157.173.115.165 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-10-06 |
| 108.58.121.94 United States · Cablevision Systems Corp. | exposed-secret | JSON, PHP | 2 | 2026-10-06 |
| 161.35.67.250 Germany · DigitalOcean, LLC | exposed-secret forced-loot | TXT | 1 | 2026-10-06 |
| 185.151.30.191 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-10-06 |
| 196.3.100.162 MZ · Eduardo Mondlane University | exposed-secret | ENV | 1 | 2026-10-06 |
| 119.29.223.27 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-06 |
| 31.57.158.71 Latvia · CGI GLOBAL LIMITED | exposed-secret | TXT, PHP, ENV, JSON | 29 | 2026-10-06 |
| 64.71.34.107 United States · Ntirety, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 213.136.93.164 France · Contabo GmbH | exploit exposed-secret tunnel | JS, OLD | 3 | 2026-10-06 |
| 64.71.34.27 United States · Ntirety, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 52.209.216.163 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-06 |
| 190.102.43.133 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-06 |
| 190.102.43.41 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-06 |
| 190.102.42.253 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT, JSON, PHP | 6 | 2026-10-06 |
| 190.102.42.78 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 1 | 2026-10-06 |
| 34.93.43.253 India · Google LLC | exposed-secret | TXT | 1 | 2026-10-06 |
| 13.140.130.141 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 104.21.67.62 United States · Cloudflare, Inc. | exposed-secret ioc-match | COM | 1 | 2026-10-06 |
| 172.67.214.253 United States · Cloudflare, Inc. | exposed-secret ioc-match | COM | 1 | 2026-10-06 |
| 190.102.43.66 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-05 |
| 190.102.43.117 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 1 | 2026-10-05 |
| 190.102.43.74 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-05 |
| 190.102.43.63 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 2 | 2026-10-05 |
| 190.102.42.133 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-05 |
| 190.102.42.151 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | TXT | 1 | 2026-10-05 |
| 190.102.40.218 Brazil · Servicos de Infraestrutura e Datacenter | exposed-secret | ENV | 1 | 2026-10-05 |
| 43.162.222.230 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, PHP, JSON | 11 | 2026-10-05 |
| 43.162.222.62 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-05 |
| 43.162.222.70 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-05 |
| 43.162.221.186 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-05 |
| 43.162.221.96 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-10-05 |
| 43.162.221.65 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-05 |
| 43.162.216.212 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-05 |
| 138.68.153.82 United Kingdom · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-10-05 |
| 43.162.213.144 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-05 |
| 43.162.213.152 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-05 |
| 43.162.210.217 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV | 4 | 2026-10-05 |
| 43.162.204.246 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, JSON, ENV, PHP | 7 | 2026-10-05 |
| 43.162.204.201 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-10-05 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free