huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.21.56.133 United States · Cloudflare, Inc. | exposed-secret | XYZ | 1 | 2026-11-08 |
| 103.8.25.24 Malaysia · SKSA Technology Sdn Bhd | exposed-secret | TXT | 1 | 2026-11-08 |
| 185.95.159.25 Seychelles · IP Vendetta Inc. | exposed-secret | JSON | 1 | 2026-11-08 |
| 173.231.222.210 United States · InMotion Hosting, Inc. | exposed-secret malware mozi exploit | GZ, SQL, PHP | 28 | 2026-11-08 |
| 23.235.197.245 United States · InMotion Hosting, Inc. | exposed-secret | PHP | 1 | 2026-11-08 |
| 104.21.49.4 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.139.250 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.202.28 United States · Cloudflare, Inc. | exposed-secret c2 | COM, CYOU | 2 | 2026-11-08 |
| 104.21.60.230 United States · Cloudflare, Inc. | exposed-secret c2 | COM, CYOU | 2 | 2026-11-08 |
| 129.212.213.28 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-08 |
| 172.67.155.161 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.72.219 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.36.6 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.182.172 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.40.89 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.183.69 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 185.151.30.225 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 183.136.138.188 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT | 1 | 2026-11-08 |
| 202.10.43.196 Indonesia · Rumahweb | exposed-secret | PHP, SQL, ZIP | 4 | 2026-11-08 |
| 104.21.20.47 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.191.88 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 38.165.94.242 United States · PEG TECH INC | exposed-secret | ENV | 1 | 2026-11-08 |
| 183.136.138.174 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT | 1 | 2026-11-08 |
| 137.220.145.242 Japan · CTG Server Limited | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-08 |
| 183.136.138.171 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT | 1 | 2026-11-08 |
| 209.50.59.38 United States · UpCloud USA Inc | exposed-secret | TXT | 1 | 2026-11-08 |
| 183.136.138.189 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT | 1 | 2026-11-08 |
| 104.21.66.173 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.162.114 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 91.124.130.146 Ukraine · HIVELOCITY, Inc. | exposed-secret | TXT | 1 | 2026-11-08 |
| 172.67.162.23 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.15.94 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 138.197.52.52 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-08 |
| 159.203.179.184 United States · DigitalOcean, LLC | exposed-secret | ENV, TXT | 2 | 2026-11-08 |
| 185.182.184.47 France · Contabo GmbH | exposed-secret | TXT | 1 | 2026-11-08 |
| 185.151.30.156 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 104.21.32.179 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 185.151.30.226 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 146.70.53.182 Bulgaria · M247 Europe SRL | exposed-secret | LOG, PY, XML, DTD | 8 | 2026-11-08 |
| 172.67.220.154 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.75.99 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.23.190 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.212.234 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.200.89 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.21.210 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 202.155.8.207 United States · Ultahost, Inc. | exposed-secret | PHP, BAK, TXT | 5 | 2026-11-08 |
| 3.128.73.102 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-08 |
| 185.146.165.97 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 183.136.138.190 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT | 1 | 2026-11-08 |
| 209.151.149.160 United States · UpCloud USA Inc | exposed-secret | TXT | 1 | 2026-11-08 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free