huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 172.67.217.112 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.78.65 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 45.8.227.97 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 49.51.37.31 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | TXT | 1 | 2026-11-08 |
| 165.227.220.147 United States · DigitalOcean, LLC | exposed-secret | TXT | 2 | 2026-11-08 |
| 172.67.199.97 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 104.21.92.228 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 183.136.138.175 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret | TXT | 1 | 2026-11-08 |
| 162.218.31.167 United States · FASTNET DATA INC | exposed-secret | TXT | 1 | 2026-11-08 |
| 185.151.30.150 United Kingdom · 20i Limited | exposed-secret | JSON | 1 | 2026-11-08 |
| 185.73.228.142 Poland · eTOP sp. z o.o. | exposed-secret | DEV | 1 | 2026-11-08 |
| 185.30.124.158 Poland · eTOP sp. z o.o. | exposed-secret | DEV | 1 | 2026-11-08 |
| 104.21.3.65 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 138.2.83.177 Singapore · Oracle Corporation | exposed-secret | TXT | 1 | 2026-11-08 |
| 103.38.28.107 Hong Kong · Hong Kong Five Towns Development Co. Ltd. | exposed-secret | TXT | 1 | 2026-11-08 |
| 202.159.30.243 Indonesia · INDO Internet, PT | exposed-secret | TXT | 2 | 2026-11-08 |
| 39.104.70.157 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware mozi exploit | PY, SH, LOG, JAR | 272 | 2026-11-08 |
| 130.94.36.92 Taiwan · NTT America, Inc. | exposed-secret exploit tunnel | PY, LOG, TXT | 10 | 2026-11-08 |
| 18.141.4.71 Singapore · Amazon.com, Inc. | exploit exposed-secret tunnel | LOG, PY | 3 | 2026-11-08 |
| 154.12.86.207 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, LOG, JSON, SH | 140 | 2026-11-08 |
| 162.214.71.120 United States · Unified Layer | exposed-secret | TXT | 1 | 2026-11-08 |
| 38.127.8.185 Singapore · Ultahost, Inc. | exposed-secret tunnel | TXT, ENV, JSON, PHP | 7 | 2026-11-08 |
| 169.197.114.134 United Kingdom · Zenlayer Inc | exploit exposed-secret | COM | 1 | 2026-11-08 |
| 64.176.34.176 Japan · The Constant Company, LLC | malware c2 mozi webshell | PY, SH, TXT, ELF | 26 | 2026-11-08 |
| 118.107.29.231 Hong Kong · CTG Server Limited | exposed-secret | COM, HTML | 3 | 2026-11-08 |
| 118.107.29.228 Hong Kong · CTG Server Limited | exposed-secret | COM, HTML | 3 | 2026-11-08 |
| 118.107.29.225 Hong Kong · CTG Server Limited | exposed-secret | COM, HTML | 3 | 2026-11-08 |
| 172.67.153.50 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 172.67.153.118 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 207.241.172.222 United States · Advin Services LLC | exposed-secret | INK | 1 | 2026-11-08 |
| 104.21.86.229 United States · Cloudflare, Inc. | exposed-secret | TOP | 1 | 2026-11-08 |
| 172.67.137.110 United States · Cloudflare, Inc. | exposed-secret | TOP | 1 | 2026-11-08 |
| 173.35.95.189 Canada · Rogers Communications Canada Inc. | exposed-secret | PY, KEY, VBS | 4 | 2026-11-08 |
| 124.198.131.63 United States · 1337 Services GmbH | exposed-secret malware exploit mozi | PY, SH, PE, RAR | 217 | 2026-11-08 |
| 124.198.131.2 United States · 1337 Services GmbH | exposed-secret | TXT | 1 | 2026-11-08 |
| 158.247.199.81 South Korea · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-11-08 |
| 216.238.107.138 Brazil · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-11-08 |
| 139.84.240.240 South Africa · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-11-08 |
| 216.238.82.209 Mexico · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-11-08 |
| 45.76.10.193 United States · The Constant Company, LLC | exposed-secret | TXT | 1 | 2026-11-08 |
| 46.17.40.253 Russia · LLC Baxet | exposed-secret | TXT | 1 | 2026-11-08 |
| 136.244.109.179 The Netherlands · The Constant Company, LLC | malware exposed-secret elf-binary | ELF, LOG | 12 | 2026-11-08 |
| 15.204.115.49 United States · OVH SAS | exposed-secret | TXT | 1 | 2026-11-08 |
| 151.101.63.11 United States · Fastly, Inc. | exposed-secret | TXT | 1 | 2026-11-08 |
| 43.128.133.51 South Korea · Shenzhen Tencent Computer Systems Company Limited | exposed-secret | OVPN, SH | 5 | 2026-11-08 |
| 179.43.171.203 Panama · Private Layer INC | exposed-secret exploit malware mozi | LOG, PY, JSON, TXT | 76 | 2026-11-08 |
| 179.43.171.202 Panama · Private Layer INC | exposed-secret exploit malware mozi | LOG, PY, JSON, TXT | 76 | 2026-11-08 |
| 172.67.169.99 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-11-08 |
| 130.49.171.102 Uzbekistan · SERVERCORE CIS LLC | exposed-secret exploit | TXT | 2 | 2026-11-08 |
| 130.94.44.130 Singapore · NTT America, Inc. | exposed-secret exploit webshell malware | TXT, PS1, PY, TOML | 98 | 2026-11-07 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free