huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,031
hosts
112,858
files
81
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 222.255.238.158 Vietnam · VNPT Corp | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 68.178.175.21 United States · GoDaddy.com, LLC | exposed-secret | JS, JSON, TS | 7 | 2026-09-30 |
| 164.52.218.194 India · E2E Networks Limited | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 92.205.177.116 Germany · Host Europe GmbH | exposed-secret | TXT | 1 | 2026-09-30 |
| 15.168.185.132 Japan · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-09-30 |
| 122.186.156.66 India · Bharti Airtel Limited | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 184.168.31.120 United States · GoDaddy.com, LLC | exposed-secret exploit malware mozi | PHP, LOCK, TXT, HTML | 45 | 2026-09-30 |
| 208.109.235.104 United States · GoDaddy.com, LLC | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 8.217.210.61 Hong Kong · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 61.91.159.242 Thailand · TRUE INTERNET CORPORATION CO. LTD. | exposed-secret | TXT | 1 | 2026-09-30 |
| 49.233.44.37 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 49.0.124.103 Thailand · Internet Datacenter Network | exposed-secret exploit | TXT | 3 | 2026-09-30 |
| 5.78.83.238 United States · Hetzner Online GmbH | exposed-secret | TXT | 2 | 2026-09-30 |
| 51.38.127.151 Germany · OVH SAS | exposed-secret | TXT | 1 | 2026-09-30 |
| 46.224.179.31 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT | 4 | 2026-09-30 |
| 45.136.236.77 United Kingdom · Siamdata Communication Co.,ltd. | exposed-secret | TXT | 1 | 2026-09-30 |
| 43.230.131.75 Indonesia · PT. Media Antar Nusa | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 43.138.227.233 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-09-30 |
| 41.224.59.219 TN · Orange Tunisie | exposed-secret | JSON, PHP | 2 | 2026-09-30 |
| 35.222.131.86 United States · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 32.236.62.30 Australia · Amazon.com, Inc. | malware mozi webshell exposed-secret | JSP, JS | 11 | 2026-09-30 |
| 3.109.166.60 India · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-09-30 |
| 202.155.90.206 Hong Kong · PT Deneva | exposed-secret | TXT | 2 | 2026-09-30 |
| 211.159.161.9 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 20.17.161.64 Malaysia · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 194.163.174.251 France · Contabo GmbH | exposed-secret | TXT, ENV, JSON, PHP | 10 | 2026-09-30 |
| 178.104.231.250 Germany · Hetzner Online GmbH | exploit exposed-secret c2 malware | SQL, PY, TXT, SH | 125 | 2026-09-30 |
| 175.41.208.50 Japan · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-09-30 |
| 161.97.137.133 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 149.28.152.50 Singapore · The Constant Company, LLC | exposed-secret | JSON | 1 | 2026-09-30 |
| 144.91.89.52 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-09-30 |
| 139.59.10.206 India · DigitalOcean, LLC | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 138.59.129.18 Brazil · Seanet Telecom Ltda | exposed-secret | TXT | 1 | 2026-09-30 |
| 13.239.37.20 Australia · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-09-30 |
| 123.253.61.96 Thailand · COLODEE DIGITAL NETWORK COMPANY LIMITED | exposed-secret | ENV | 1 | 2026-09-30 |
| 121.37.133.251 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV, JSON, PHP | 11 | 2026-09-30 |
| 121.43.142.154 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 7 | 2026-09-30 |
| 120.53.225.227 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-09-30 |
| 114.132.250.56 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 116.63.176.48 China · China Unicom IP network | exposed-secret | TXT | 1 | 2026-09-30 |
| 114.110.182.150 South Korea · NHNCLOUD | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 103.73.189.190 India · Evoke Digital Solutions | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 103.85.227.121 Hong Kong · cognetcloud INC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 103.172.236.85 Vietnam · Hanoi Telecom JSC | exposed-secret | TXT, ENV, JSON, PHP | 12 | 2026-09-30 |
| 8.208.44.181 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 169.58.33.122 United States · TerraTransit AG | c2 exposed-secret | TXT | 1 | 2026-09-30 |
| 207.57.188.152 United States · Zillion Network Inc. | malware mozi exploit exposed-secret | PY, GO, ELF, PYC | 9 | 2026-09-30 |
| 137.184.98.116 United States · DigitalOcean, LLC | exposed-secret | NET | 1 | 2026-09-30 |
| 95.85.231.220 Germany · WAIcore Ltd | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-30 |
| 45.13.186.247 Germany · ALINDA LLC | exposed-secret | TXT | 1 | 2026-09-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free