huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 65.2.99.99 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 13.203.145.129 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 149.28.178.191 Australia · The Constant Company, LLC | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 137.184.111.86 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 43.162.117.228 United States · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit | TXT | 3 | 2026-10-15 |
| 54.155.176.146 Ireland · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 46.225.79.7 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 44.242.223.198 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 51.254.201.48 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 54.206.103.19 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 141.95.1.119 Germany · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 54.157.25.142 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 34.192.30.70 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 149.28.152.2 Singapore · The Constant Company, LLC | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 130.61.210.103 Germany · Oracle Corporation | exposed-secret exploit | TXT | 2 | 2026-10-15 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 202.71.14.31 The Netherlands · SOLLUTIUM EU Sp z.o.o. | exploit malware pe-binary | PE | 2 | 2026-10-15 |
| 204.188.254.145 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-15 |
| 104.21.0.216 United States · Cloudflare, Inc. | exploit | LIVE | 1 | 2026-10-14 |
| 172.67.128.80 United States · Cloudflare, Inc. | exploit | LIVE | 1 | 2026-10-14 |
| 20.190.160.20 The Netherlands · Microsoft Corporation | exploit exposed-secret | TXT | 2 | 2026-10-14 |
| 103.170.217.170 India · WebHorizon Internet Services | malware exploit webshell elf-binary | ELF, PE, PHP, SH | 16 | 2026-10-14 |
| 194.163.148.133 France · Contabo GmbH | exposed-secret exploit malware mozi | PHP, TXT, MD, JS | 74 | 2026-10-14 |
| 217.6.46.91 Germany · Deutsche Telekom AG | c2 exploit exposed-secret malware | PS1 | 2 | 2026-10-14 |
| 162.214.157.245 United States · Unified Layer | exposed-secret webshell exploit tunnel | PHP, TXT, ZIP, BAK | 27 | 2026-10-14 |
| 202.157.177.65 Indonesia · PT. EXABYTES NETWORK INDONESIA | exposed-secret exploit | TXT, ENV | 3 | 2026-10-13 |
| 187.84.80.182 Brazil · Oxente.net Solucoes Tecnologicas Eireli | exposed-secret exploit | TXT | 2 | 2026-10-13 |
| 144.91.92.120 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-13 |
| 104.131.123.136 United States · DigitalOcean, LLC | exploit exposed-secret mirror | JSP | 1 | 2026-10-13 |
| 66.154.127.156 Canada · MULTACOM CORPORATION | exposed-secret exploit malware c2 | PY, ELF, SH, MD | 110 | 2026-10-13 |
| 43.154.253.6 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exploit | HTML | 1 | 2026-10-13 |
| 69.46.46.62 United States · Railway | c2 exploit malware mozi | PS1 | 1 | 2026-10-12 |
| 43.107.42.86 Singapore · Alibaba (US) Technology Co., Ltd. | exploit | HTML | 1 | 2026-10-12 |
| 37.114.49.169 Germany · Oliver Horscht is trading as "SYNLINQ" | exposed-secret exploit | TXT, HTML | 4 | 2026-10-12 |
| 176.122.134.61 Canada · IT7 Networks Inc | c2 exploit | HTML | 1 | 2026-10-12 |
| 31.76.79.58 United States · PLAY2GO INTERNATIONAL LIMITED | exposed-secret exploit malware mozi | SH, PY, PL | 34 | 2026-10-12 |
| 45.130.165.44 Singapore · Kamatera, Inc. | exposed-secret exploit tunnel mirror | PHP, JS, LOG, OUT | 16 | 2026-10-10 |
| 149.28.175.80 Australia · The Constant Company, LLC | exposed-secret exploit tunnel | TXT | 49 | 2026-10-10 |
| 213.136.79.115 France · Contabo GmbH | exposed-secret exploit malware c2 | SH, TXT, JSON, LOG | 460 | 2026-10-09 |
| 40.114.73.166 United States · Microsoft Corporation | malware exploit pe-binary | PE, PS1, MSI | 9 | 2026-10-09 |
| 64.89.161.65 Luxembourg · Ghosty Networks LLC | exploit exposed-secret | VBS | 2 | 2026-10-09 |
| 42.235.204.114 China · CHINA UNICOM China169 Backbone | exploit exposed-secret | TXT, ENV, JSON, PHP | 10 | 2026-10-09 |
| 84.235.245.220 United Arab Emirates · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 82.165.24.191 Germany · IONOS SE | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 185.184.70.43 United Kingdom · MASSIVEGRID LTD | exposed-secret exploit | TXT, ENV, JSON | 10 | 2026-10-09 |
| 5.75.252.79 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT, ENV | 4 | 2026-10-09 |
| 35.73.248.246 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 213.209.159.55 Germany · Feo Prest SRL | exploit exposed-secret tunnel | TXT, PY, SH | 5 | 2026-10-08 |
| 34.172.165.27 United States · Google LLC | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 23.132.164.15 United States · Netiface America, Inc. | exploit | PS1 | 5 | 2026-10-08 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free