huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exposed-secret
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 130.94.44.130 Singapore · NTT America, Inc. | exposed-secret exploit webshell malware | TXT, PS1, PY, TOML | 98 | 2026-11-07 |
| 34.49.135.97 United States · Google LLC | exploit exposed-secret | TXT | 1 | 2026-11-07 |
| 20.151.96.73 Canada · Microsoft Corporation | exploit exposed-secret | TXT | 3 | 2026-11-07 |
| 64.239.123.65 United States · Amazon.com, Inc. | exploit exposed-secret | APP, TXT | 2 | 2026-11-07 |
| 64.239.109.65 United States · Amazon.com, Inc. | exploit exposed-secret | APP, TXT | 2 | 2026-11-07 |
| 172.66.0.227 United States · Cloudflare, Inc. | exposed-secret exploit | TXT | 7 | 2026-11-07 |
| 193.99.144.85 Germany · Plus.line AG | exploit webshell exposed-secret | HTML, TXT | 3 | 2026-11-07 |
| 172.66.132.19 United States · Cloudflare, Inc. | exploit exposed-secret | TXT | 2 | 2026-11-07 |
| 172.66.132.20 United States · Cloudflare, Inc. | exploit exposed-secret | TXT | 2 | 2026-11-07 |
| 185.199.108.153 United States · Fastly, Inc. | exploit exposed-secret ioc-match tunnel | IO, DMG, TXT | 4 | 2026-11-07 |
| 77.91.71.13 Israel · Alferov Aleksey Aleksandrovich | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.216.155 Turkey · Netlen Internet Hizmetleri Ltd. Sti. | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.211.55 United States · Omegatech LTD | exposed-secret | BEER | 1 | 2026-11-07 |
| 158.94.185.183 United Kingdom · Internetty Ltd | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.185.4 United Kingdom · Internetty Ltd | exposed-secret exploit | TXT | 2 | 2026-11-07 |
| 158.94.173.241 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.117 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.119 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.118 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.120 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.173.87 United States · CNServer LLC | exposed-secret | TXT, ENV, JSON | 4 | 2026-11-07 |
| 158.94.172.116 United States · CNServer LLC | exposed-secret exploit | PO, LOG, PY, JS | 49 | 2026-11-07 |
| 158.94.172.218 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.217 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.213 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.212 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.216 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.210 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.209 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.215 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.214 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.211 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.208 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.205 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.204 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.203 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.202 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.207 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.201 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.206 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.190 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.189 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.187 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.188 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.186 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.76 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.77 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.80 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.79 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
| 158.94.172.78 United States · CNServer LLC | exposed-secret | TXT | 1 | 2026-11-07 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free