huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 167.88.172.3 United States · RouterHosting LLC | malware exploit webshell elf-binary | ELF, MP, XP | 9 | 2026-10-20 |
| 8.234.120.254 India · Google LLC | exposed-secret exploit | TXT, ENV | 3 | 2026-10-19 |
| 177.4.12.11 Hong Kong · Hong Kong Communications International Co., Limited | exploit malware coinminer exposed-secret | PY, YAML, TXT, ZIP | 25 | 2026-10-19 |
| 209.141.43.95 United States · FranTech Solutions | exploit c2 exposed-secret webshell | PHP, ELF, SH, ZIP | 69 | 2026-10-19 |
| 185.157.161.93 Sweden · Obehosting AB | exploit c2 exposed-secret webshell | PY, SH, JS, JSON | 503 | 2026-10-19 |
| 45.142.143.235 Finland · Materialism s.r.l. | exposed-secret malware mozi exploit | PY, SQL, GZ, SH | 643 | 2026-10-19 |
| 188.120.247.225 Russia · JSC IOT | exploit exposed-secret c2 malware | PHP, TXT | 2,965 | 2026-10-19 |
| 168.138.13.221 Australia · Oracle Corporation | exposed-secret malware mozi exploit | SH, BAT, LOG, TXT | 20 | 2026-10-19 |
| 209.50.60.40 United States · UpCloud USA Inc | exploit exposed-secret webshell | LOG, PHP, TXT, ZIP | 4 | 2026-10-19 |
| 94.237.73.153 Singapore · UpCloud Ltd | exploit exposed-secret malware gafgyt | JAR, ZIP, GZ, TXT | 191 | 2026-10-19 |
| 8.138.166.206 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware c2 | PY, TXT, XML, LOG | 93 | 2026-10-19 |
| 47.76.239.114 United States · Alibaba (US) Technology Co., Ltd. | malware coinminer exposed-secret exploit | PE, BIN, PEM, CMD | 25 | 2026-10-19 |
| 47.52.70.58 United States · Alibaba (US) Technology Co., Ltd. | exploit exposed-secret malware mozi | PY, JS, MD, BAT | 13 | 2026-10-19 |
| 146.103.123.60 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit malware mozi | LOG, PY, KEY, TXT | 109 | 2026-10-19 |
| 45.170.228.67 Brazil · YES FIBRA TELECOMUNICACOES LTDA | exposed-secret exploit | TXT | 2 | 2026-10-19 |
| 45.115.26.23 Vietnam · Contrust Solutions S.R.L. | malware exploit exposed-secret c2 | ELF, TXT, PE, XML | 33 | 2026-10-19 |
| 47.79.33.3 United States · Alibaba (US) Technology Co., Ltd. | exploit | COM | 1 | 2026-10-19 |
| 176.65.139.160 The Netherlands · Offshore LC | exploit | TXT | 1 | 2026-10-18 |
| 65.20.109.231 Spain · The Constant Company, LLC | malware exploit webshell pe-binary | PE, ZIP, LOG, PS1 | 37 | 2026-10-18 |
| 144.91.94.21 France · Contabo GmbH | exploit malware c2 webshell | PS1, VBS, PE, HTA | 10 | 2026-10-18 |
| 179.43.175.2 Panama · Private Layer INC | exploit malware webshell exposed-secret | CMD, PE, PS1 | 40 | 2026-10-18 |
| 37.72.140.179 Russia · GALEON LLC | exploit exposed-secret | 1 | 2026-10-18 | |
| 193.24.123.177 Russia · PROSPERO OOO | exploit exposed-secret | 1 | 2026-10-18 | |
| 18.133.49.252 United Kingdom · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-17 |
| 18.130.179.73 United Kingdom · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-17 |
| 151.243.11.240 Germany · LLC VASH KREDIT BANK | exploit malware elf-binary | LOG, ELF | 3 | 2026-10-17 |
| 42.112.213.93 Vietnam · FPT Telecom Company | exposed-secret exploit | TXT | 2 | 2026-10-17 |
| 137.116.136.69 Singapore · Microsoft Corporation | exploit exposed-secret tunnel | JSON, ZIP, GZ, MD | 8 | 2026-10-17 |
| 204.188.219.9 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-17 |
| 45.139.104.36 United States · 49.3 Networking LLC | malware mozi exploit exposed-secret | MD, JSON, JS, MJS | 31 | 2026-10-16 |
| 194.233.72.68 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware webshell | PY, TXT, PHP, MD | 285 | 2026-10-16 |
| 168.220.248.106 India · WEBYNE DATA CENTRE PRIVATE LIMITED | exploit malware mozi | SH | 1 | 2026-10-16 |
| 139.224.113.180 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware tunnel | SQL, MD, ELF, PY | 34 | 2026-10-16 |
| 103.200.219.143 Singapore · NewMedia Express Pte Ltd | exploit exposed-secret malware mozi | TXT, YAML, OVPN | 27 | 2026-10-16 |
| 45.153.34.235 The Netherlands · TechTies Inc. | malware mirai exploit exposed-secret | ELF, C, SH, H | 68 | 2026-10-15 |
| 45.58.168.141 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-15 |
| 45.33.20.105 United States · Akamai Technologies, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 43.252.11.4 Indonesia · PT Quantum Tera Network | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 20.190.159.23 Ireland · Microsoft Corporation | exploit exposed-secret | TXT | 2 | 2026-10-15 |
| 186.241.117.95 United States · Uscloud Inc | c2 exposed-secret exploit malware | PS1, SQL, PE, BAT | 24 | 2026-10-15 |
| 43.173.33.166 Singapore · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 43.138.192.60 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 47.102.192.23 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware exploit mozi | PY, TXT, LOG, SH | 484 | 2026-10-15 |
| 47.104.248.7 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit malware tunnel macho-binary | JAVA, MACHO, XML | 3 | 2026-10-15 |
| 185.100.85.146 Romania · FlokiNET ehf | exploit exposed-secret | 1 | 2026-10-15 | |
| 172.67.185.43 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-10-15 |
| 104.21.43.206 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-10-15 |
| 18.117.134.17 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 3.137.181.66 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 3.76.18.139 Germany · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free