huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 18.118.49.202 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-26 |
| 49.51.187.50 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-26 |
| 54.193.79.170 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-26 |
| 43.211.67.252 Thailand · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-26 |
| 43.210.115.207 Thailand · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 2 | 2026-10-26 |
| 45.115.26.30 Vietnam · Contrust Solutions S.R.L. | exposed-secret exploit malware mozi | LOG, PY, SH, TXT | 1,395 | 2026-10-26 |
| 92.112.53.34 United States · Datacamp Limited | exposed-secret exploit | PY, LOG, PHP, TXT | 21 | 2026-10-26 |
| 204.188.254.146 United States · Sharktech | exploit exposed-secret tunnel | TXT | 2 | 2026-10-26 |
| 161.35.169.243 United Kingdom · DigitalOcean, LLC | exploit exposed-secret | TXT, ENV, JSON, PHP | 8 | 2026-10-25 |
| 27.124.12.186 Hong Kong · CTG Server Limited | exploit exposed-secret tunnel | LOG, HTML, OUT, TOML | 8 | 2026-10-25 |
| 27.124.5.86 Hong Kong · CTG Server Limited | exploit exposed-secret tunnel | LOG, HTML, OUT, TOML | 8 | 2026-10-25 |
| 38.147.172.82 United States · LUCIDACLOUD LIMITED | exposed-secret exploit tunnel forced-loot | SH, YAML, PY, JSON | 59 | 2026-10-25 |
| 95.216.224.44 Finland · Hetzner Online GmbH | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 206 | 2026-10-25 |
| 212.227.29.190 Germany · IONOS SE | exploit exposed-secret malware webshell | ELF, PHP, TXT | 3 | 2026-10-25 |
| 82.156.186.185 China · Shenzhen Tencent Computer Systems Company Limited | malware cobalt-strike c2 mozi | PY, JAR, TXT, LOG | 88 | 2026-10-25 |
| 45.151.122.34 France · Contabo GmbH | malware coinminer exposed-secret exploit | ELF, PY, SH, CMD | 109 | 2026-10-25 |
| 217.69.11.65 France · The Constant Company, LLC | exploit malware webshell pe-binary | PE, JSP, PS1, TXT | 10 | 2026-10-25 |
| 49.51.230.17 United States · Shenzhen Tencent Computer Systems Company Limited | malware exploit webshell exposed-secret | LOG, C, DLL, BIN | 56 | 2026-10-25 |
| 47.109.23.77 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware cobalt-strike exploit exposed-secret | BIN, LOG, PHP, PY | 21 | 2026-10-25 |
| 156.245.146.226 Seychelles · Zillion Network Inc. | exposed-secret malware mozi exploit | SH, HTML, PY, TXT | 561 | 2026-10-25 |
| 129.159.135.190 Israel · Oracle Corporation | malware exploit exposed-secret mozi | ELF, LOG, PY, C | 40 | 2026-10-25 |
| 192.236.229.229 United States · HostPapa | malware mozi exposed-secret exploit | PY, SH, LOG, TXT | 33 | 2026-10-25 |
| 8.133.234.121 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | SH, LOG, C, TXT | 216 | 2026-10-25 |
| 51.159.184.76 France · Scaleway SAS | exposed-secret malware mozi exploit | JSON, JS, TXT, HTML | 38 | 2026-10-25 |
| 64.226.89.20 Germany · DigitalOcean, LLC | exploit exposed-secret malware mozi | PY, TXT, CSV, JS | 14 | 2026-10-25 |
| 209.38.235.232 Germany · DigitalOcean, LLC | exposed-secret malware mozi exploit | JSON, JS, LOG, MD | 118 | 2026-10-25 |
| 5.172.156.40 United Kingdom · Pulsant (Scotland) Ltd | exploit exposed-secret malware webshell | PY, PHP, ELF, ENV | 13 | 2026-10-25 |
| 175.159.194.157 Hong Kong · The Hong Kong Polytechnic University | exposed-secret exploit malware mozi | MD, SAMPLE, TXT, SH | 67 | 2026-10-25 |
| 45.67.86.32 Japan · Host Universal Pty Ltd | exploit malware exposed-secret mozi | LOG, PY, MACHO, TXT | 83 | 2026-10-25 |
| 115.29.202.62 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware exploit exposed-secret mozi | ELF, LOG, PY, MD | 139 | 2026-10-25 |
| 47.237.84.48 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit webshell tunnel | MD, LOG, SH, TXT | 205 | 2026-10-25 |
| 43.153.10.147 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit tunnel | SAMPLE, TXT, MD, PY | 28 | 2026-10-25 |
| 74.73.65.132 United States · Charter Communications Inc | exposed-secret malware mozi exploit | PY, TXT, MD, CSV | 81 | 2026-10-25 |
| 119.45.236.76 China · Shenzhen Tencent Computer Systems Company Limited | malware exploit c2 meterpreter | LOG, PE, BIN, ELF | 26 | 2026-10-24 |
| 198.46.158.18 United States · HostPapa | exposed-secret exploit malware mozi | PY, YAML, HTML, TXT | 362 | 2026-10-24 |
| 193.233.220.65 Russia · Aeza Group LLC | malware exploit c2 exposed-secret | PS1, PE, BAT, ZIP | 186 | 2026-10-24 |
| 58.221.60.160 China · Chinanet | malware exploit mozi c2 | MACHO, JAVA, PY, SH | 35 | 2026-10-24 |
| 67.215.232.25 United States · HostPapa | malware exploit pe-binary | PE, EXE, ASP, ASPX | 15 | 2026-10-24 |
| 37.157.196.117 Czechia · WEDOS Internet, a.s. | exploit exposed-secret | LOG, PHP | 62 | 2026-10-24 |
| 185.101.34.115 Norway · ServeTheWorld AS | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 176.122.172.114 Canada · IT7 Networks Inc | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 167.71.227.197 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 15.135.91.188 Australia · Amazon.com, Inc. | exposed-secret exploit | ENV, TXT | 2 | 2026-10-24 |
| 16.178.131.118 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 13.203.202.168 IN · Amazon Data Services India | exposed-secret exploit | TXT | 4 | 2026-10-24 |
| 39.109.100.126 Hong Kong | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 103.214.172.114 Hong Kong · Cloudie Limited | exposed-secret malware mozi exploit | PY, TXT, LOG, SH | 440 | 2026-10-24 |
| 157.245.106.219 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 45.58.10.169 United States · Vlan24 | exposed-secret exploit | TXT | 2 | 2026-10-24 |
| 103.39.78.45 Hong Kong · VH-GLOBAL | exploit exposed-secret malware webshell | ASPX, PE, PS1, TXT | 9 | 2026-10-24 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free