huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 217.154.101.100 Spain · IONOS SE | exploit c2 exposed-secret malware | HTML, JS, TXT | 5 | 2026-10-29 |
| 18.245.218.72 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 18.245.218.111 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 18.245.218.18 United States · Amazon.com, Inc. | exploit exposed-secret | COM | 3 | 2026-10-29 |
| 45.32.116.142 Singapore · The Constant Company, LLC | exploit | COM | 1 | 2026-10-29 |
| 143.246.203.114 United States | exploit exposed-secret malware mozi | LOG, MD, PY, RB | 85 | 2026-10-29 |
| 172.67.162.136 United States · Cloudflare, Inc. | exploit | AT | 1 | 2026-10-28 |
| 104.21.52.177 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.120 United States · Cloudflare, Inc. | exploit | AT | 1 | 2026-10-28 |
| 172.67.202.89 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.80.4 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.154.68 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.147.187 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.40.152 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.14 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.139.164 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.191.247 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.95.202 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.149.27 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.198 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.193 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.198.188 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.44.107 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.172.85 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 129.212.239.241 Singapore · DigitalOcean, LLC | exploit | TXT | 10 | 2026-10-28 |
| 91.224.92.16 United Kingdom · UAB Host Baltic | exposed-secret malware c2 exploit | SH, TXT, ELF, JAVA | 62 | 2026-10-28 |
| 5.78.205.230 United States · Hetzner Online GmbH | exposed-secret exploit malware webshell | PY, SAMPLE, TXT, LOG | 66 | 2026-10-28 |
| 50.210.239.213 United States · Comcast Cable Communications, LLC | exposed-secret exploit c2 webshell | PHP, PY, HTML, PHTML | 43 | 2026-10-28 |
| 5.78.156.58 United States · Hetzner Online GmbH | exploit exposed-secret tunnel | TXT, LOG, JS, JSON | 79 | 2026-10-28 |
| 108.175.1.225 United States · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 107.191.113.162 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 85.121.183.77 Moldova · ALEXHOST SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 82.209.204.6 Belarus · Republican Unitary Telecommunication Enterprise Beltelecom | exposed-secret exploit | TXT | 2 | 2026-10-28 |
| 23.27.200.64 United States · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON, PHP | 17 | 2026-10-28 |
| 85.121.245.150 Romania · M247 Europe SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 87.76.160.170 Malaysia · GB Network Solutions Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.27.99.193 United States · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 85.121.51.218 Romania · M247 Europe SRL | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 217.160.244.175 Germany · IONOS SE | exploit c2 exposed-secret | HTML, TXT | 13 | 2026-10-28 |
| 66.235.110.79 Singapore · Liberally Network, LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 77.90.39.202 Germany · Tech Tide Portugal Unipessoal LDA | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 66.179.136.86 United States · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 93.177.101.187 Turkey · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 139.84.228.230 South Africa · The Constant Company, LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 103.195.188.128 Singapore · Dromatics Systems Pte Ltd | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 89.45.45.59 Turkey · 2E TELEKOMUNIKASYON LTD STI | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 95.135.208.135 The Netherlands · Matteo Martelloni trading as DELUXHOST | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 139.84.236.32 South Africa · The Constant Company, LLC | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.184.226 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
| 23.95.192.157 United States · HostPapa | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-28 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free