huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,031
hosts
112,857
files
81
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 179.43.169.32 Panama · Private Layer INC | exposed-secret | ORG | 1 | 2026-10-02 |
| 103.204.173.20 Singapore · Starry Network Limited | exposed-secret | NET | 1 | 2026-10-02 |
| 23.82.76.190 United States · Leaseweb USA, Inc. | exposed-secret | COM | 1 | 2026-10-02 |
| 165.22.120.234 United Kingdom · DigitalOcean, LLC | c2 exploit exposed-secret | TXT | 1 | 2026-10-02 |
| 5.175.136.139 Turkey · Yigit Hosting Bilisim E-Ticaret Gida Sanayi Ticaret Limited Sirketi | exposed-secret | PHP, BAT, DISABL, ENV | 55 | 2026-10-02 |
| 2.180.35.173 Iran · Iran Telecommunication Company PJS | exposed-secret | TXT | 1 | 2026-10-02 |
| 52.18.157.55 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-02 |
| 195.54.170.59 United Arab Emirates · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-10-02 |
| 99.80.107.75 Ireland · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-02 |
| 51.79.199.99 Canada · OVH SAS | exposed-secret | INFO | 1 | 2026-10-02 |
| 195.133.38.218 The Netherlands · NKtelecom INC | exposed-secret | TXT | 1 | 2026-10-02 |
| 23.27.24.138 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 23.27.24.25 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 104.21.77.65 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-10-02 |
| 172.67.205.34 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-10-02 |
| 129.121.75.86 United States · Oracle Corporation | exposed-secret exploit | TXT | 2 | 2026-10-02 |
| 23.27.13.88 United States · Evoxt Sdn. Bhd. | exploit exposed-secret | TXT, ENV, JSON, PHP | 8 | 2026-10-02 |
| 23.27.11.247 United States · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT | 2 | 2026-10-02 |
| 23.27.11.61 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 23.27.0.52 United States · Evoxt Sdn. Bhd. | exposed-secret | JSON | 1 | 2026-10-02 |
| 23.26.237.207 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 23.26.204.16 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 2 | 2026-10-02 |
| 23.26.204.242 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 23.26.201.213 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 23.26.204.42 United States · Evoxt Sdn. Bhd. | exposed-secret | TXT | 1 | 2026-10-02 |
| 2.57.122.202 The Netherlands · UNMANAGED LTD | exposed-secret | TXT | 2 | 2026-10-02 |
| 1.14.191.118 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-02 |
| 34.97.149.180 Japan · Google LLC | exposed-secret | COM | 3 | 2026-10-02 |
| 45.8.46.214 Romania · MAGIT'ST SRL | exposed-secret | COM | 1 | 2026-10-02 |
| 69.46.46.16 United States · Railway | exposed-secret | TXT | 1 | 2026-10-02 |
| 178.16.52.154 Germany · Omegatech LTD | exposed-secret exploit malware mozi | GZ, LOG, PY, DONE | 154 | 2026-10-02 |
| 204.188.254.231 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-01 |
| 89.124.67.72 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit malware mozi | PY, MD, LOG, JSON | 10,428 | 2026-10-01 |
| 178.16.53.67 The Netherlands · Omegatech LTD | malware exposed-secret exploit webshell | PE, PS1, JSON, VBS | 154 | 2026-10-01 |
| 23.94.145.224 United States · DEDIK SERVICES LIMITED | exposed-secret | TXT | 1 | 2026-10-01 |
| 47.236.83.240 United States · Alibaba (US) Technology Co., Ltd. | malware exploit c2 exposed-secret | MACHO, BIN, JS, GITIGN | 65 | 2026-10-01 |
| 103.254.148.169 Hong Kong · SonderCloud Limited | exposed-secret | JSON, TXT | 2 | 2026-10-01 |
| 47.254.120.61 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | JSON | 1 | 2026-10-01 |
| 107.175.49.181 United States · HostPapa | exposed-secret | ENV | 1 | 2026-10-01 |
| 45.58.168.253 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-01 |
| 185.100.234.137 The Netherlands · WorldStream B.V. | exploit exposed-secret | INFO | 1 | 2026-10-01 |
| 45.82.67.241 The Netherlands · WorldStream B.V. | exploit exposed-secret | COM | 1 | 2026-10-01 |
| 8.216.48.50 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret c2 | SH, TXT, JS, LOG | 7 | 2026-10-01 |
| 212.32.229.174 The Netherlands · LeaseWeb Netherlands B.V. | exposed-secret | COM | 1 | 2026-10-01 |
| 47.108.208.69 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware mozi pe-binary | PHP, JS, GITIGN, MAP | 37 | 2026-10-01 |
| 85.13.166.85 Germany · Neue Medien Muennich GmbH | exposed-secret | DE | 1 | 2026-10-01 |
| 77.112.150.228 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-01 |
| 138.197.188.152 Germany · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 62.3.58.98 Russia · TIME-HOST LTD | exposed-secret exploit malware mozi | PY, LOG, TXT, SH | 148 | 2026-09-30 |
| 218.3.160.34 China · Chinanet | exposed-secret malware exploit mozi | PHP, BAT, B64, PS1 | 88 | 2026-09-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free