huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,034
hosts
112,868
files
85
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 193.233.223.12 Russia · Aeza Group LLC | exposed-secret forced-loot | TXT | 1 | 2026-09-27 |
| 193.233.223.10 Russia · Aeza Group LLC | exposed-secret forced-loot | TXT | 1 | 2026-09-27 |
| 193.233.216.44 Russia · Aeza Group LLC | exposed-secret exploit webshell | TXT, GZ, PUB, XZ | 13 | 2026-09-27 |
| 193.233.216.156 Russia · Aeza Group LLC | exposed-secret | TXT | 1 | 2026-09-27 |
| 193.233.216.13 Russia · Aeza Group LLC | exposed-secret forced-loot | TXT | 1 | 2026-09-27 |
| 193.143.1.35 Russia · Proton66 OOO | exploit exposed-secret c2 tunnel | CSV, PY | 57 | 2026-09-27 |
| 193.143.1.99 Russia · Proton66 OOO | malware exposed-secret exploit elf-binary | ELF, C, GZ, SH | 41 | 2026-09-27 |
| 193.143.1.113 Russia · Proton66 OOO | exposed-secret | TXT, ENV | 5 | 2026-09-27 |
| 91.215.85.163 Russia · PROSPERO OOO | exposed-secret | TXT | 2 | 2026-09-27 |
| 193.24.123.86 Russia · PROSPERO OOO | exposed-secret | TXT | 1 | 2026-09-27 |
| 193.24.123.71 Russia · PROSPERO OOO | exposed-secret | TXT | 1 | 2026-09-27 |
| 23.252.123.134 United States · WebNX, Inc. | exposed-secret malware c2 mozi | BIN, SH, ZIP, PY | 72 | 2026-09-27 |
| 68.65.122.208 United States · Namecheap, Inc. | c2 exploit exposed-secret | SITE | 1 | 2026-09-27 |
| 160.153.187.97 United States · GoDaddy.com, LLC | exposed-secret exploit | TXT | 2 | 2026-09-27 |
| 154.217.253.30 United States · AROSSCLOUD INC. | exposed-secret | ENV | 1 | 2026-09-27 |
| 103.67.182.217 India · YOTTA NETWORK SERVICES PRIVATE LIMITED | exposed-secret | HTML | 1 | 2026-09-27 |
| 217.60.103.74 United States · HostSNAP LLC | exposed-secret | TXT, PHP, ENV, JSON | 29 | 2026-09-26 |
| 166.88.141.36 United States · Evoxt Sdn. Bhd. | exposed-secret | COM | 1 | 2026-09-26 |
| 51.159.21.191 France · Scaleway SAS | exposed-secret malware c2 exploit | PHP, PS1, EXE, PY | 286 | 2026-09-26 |
| 172.67.188.1 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-09-26 |
| 104.21.7.202 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-09-26 |
| 149.137.136.16 United States · Backblaze Inc | c2 exposed-secret | COM | 1 | 2026-09-26 |
| 151.158.0.157 Hong Kong · Evoxt Sdn. Bhd. | exposed-secret | COM | 1 | 2026-09-26 |
| 34.97.169.164 Japan · Google LLC | exposed-secret | COM | 1 | 2026-09-26 |
| 8.153.207.91 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware elf-binary | ELF, TXT | 2 | 2026-09-26 |
| 47.98.255.158 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-09-26 |
| 192.227.210.190 United States · HostPapa | exploit exposed-secret | TXT | 1 | 2026-09-26 |
| 176.65.139.211 The Netherlands · Offshore LC | exposed-secret | TXT | 2 | 2026-09-26 |
| 217.217.233.97 China · TeraSwitch Networks Inc. | malware coinminer webshell c2 | SH, GZ, ELF, PS1 | 18 | 2026-09-26 |
| 103.163.117.83 Bangladesh · Moghbazar Dot Net | exposed-secret | JSON | 1 | 2026-09-26 |
| 103.150.93.176 Indonesia · PT Biznet Gio Nusantara | exposed-secret | TXT | 1 | 2026-09-26 |
| 103.133.216.219 BT · Government Technology Agency | exposed-secret exploit | TXT | 2 | 2026-09-26 |
| 103.117.57.106 Indonesia · PT Cloud Hosting Indonesia | exposed-secret | JSON | 1 | 2026-09-26 |
| 102.209.224.40 Nigeria · Interconnect Clearinghouse Nigeria Ltd | exposed-secret exploit | TXT | 2 | 2026-09-26 |
| 1.13.6.145 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-09-26 |
| 1.92.109.47 China · Huawei Cloud Service data center | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-09-26 |
| 1.234.5.148 South Korea · SK Broadband Co Ltd | exposed-secret | TXT | 2 | 2026-09-26 |
| 1.234.83.89 South Korea · SK Broadband Co Ltd | exposed-secret exploit | TXT, ENV | 5 | 2026-09-26 |
| 23.196.193.245 United States · Akamai Technologies, Inc. | exposed-secret | TXT | 1 | 2026-09-26 |
| 45.13.239.249 Germany · Florian Kolb | exposed-secret malware c2 adaptix | JSON, TXT, BIN, EXE | 141 | 2026-09-26 |
| 217.60.7.95 Hong Kong · CGI GLOBAL LIMITED | exploit exposed-secret | EML | 135 | 2026-09-26 |
| 101.42.136.73 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware mozi | TXT, LOG, PY, XML | 5 | 2026-09-26 |
| 94.26.83.69 Germany · DEDIK SERVICES LIMITED | exposed-secret | TXT | 1 | 2026-09-26 |
| 15.223.141.239 Canada · Amazon.com, Inc. | exploit exposed-secret | TXT | 2 | 2026-09-25 |
| 130.61.131.237 Germany · Oracle Corporation | exposed-secret | TXT, ENV, JSON | 5 | 2026-09-24 |
| 138.197.174.121 Canada · DigitalOcean, LLC | coinminer malware exposed-secret c2 | GZ, SH, JS | 9 | 2026-09-22 |
| 20.201.77.247 Brazil · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-09-21 |
| 87.106.118.51 Germany · IONOS SE | exposed-secret exploit | TXT | 2 | 2026-09-21 |
| 207.180.215.227 France · Contabo GmbH | exposed-secret | TXT, ENV, PHP | 4 | 2026-09-21 |
| 51.195.91.161 Germany · OVH SAS | exposed-secret | ENV | 1 | 2026-09-21 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free