huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 139.28.220.253 Finland · IHOR HOSTING LTD | exposed-secret exploit c2 malware | GZ, TXT, ALL, AUS | 36 | 2026-10-08 |
| 178.238.229.190 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-08 |
| 37.69.77.150 France · Societe Francaise Du Radiotelephone - SFR SA | exposed-secret webshell exploit tunnel | PY, PYO, TXT, LOG | 81 | 2026-10-08 |
| 208.98.38.234 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 45.58.168.180 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.129 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.36 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 70.39.95.72 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 204.188.254.228 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 45.58.168.195 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-08 |
| 185.216.68.66 Seychelles · ALEXHOST SRL | exploit exposed-secret webshell c2 | PY, TXT, SH, JS | 339 | 2026-10-07 |
| 23.224.119.154 United States · CNSERVERS LLC | c2 exploit exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-10-07 |
| 3.26.199.64 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 5 | 2026-10-07 |
| 5.188.230.139 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.52 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.141 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.88 United States · G-Core Labs S.A. | exploit exposed-secret | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.121 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.130 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.123 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.120 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 5.188.230.140 United States · G-Core Labs S.A. | exposed-secret exploit | GZ, SH | 4 | 2026-10-07 |
| 103.168.19.221 India · Netclues Technologies Private Limited | exposed-secret exploit tunnel | TXT, JS | 83 | 2026-10-06 |
| 51.48.235.114 Spain · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 178.132.198.200 Spain · FONSECA ALVES TECNOLOGIA LTDA | malware exploit elf-binary | ELF, HTML, SH, SQL | 14 | 2026-10-06 |
| 222.186.57.10 China · Chinanet | exposed-secret coinminer exploit malware | TXT, ZIP | 2 | 2026-10-06 |
| 220.154.131.133 China · China Telecom | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 156.67.29.18 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 117.196.219.39 India · Bharat Sanchar Nigam Ltd | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 212.154.234.9 Kazakhstan · JSC Kazakhtelecom | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 175.126.166.172 South Korea · SK Broadband Co Ltd | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 107.173.55.151 United States · HostPapa | exploit exposed-secret c2 | HTML | 12 | 2026-10-06 |
| 59.24.133.197 South Korea · Korea Telecom | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 146.190.158.92 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 160.119.76.64 Seychelles · Alsycon B.V. | exploit exposed-secret | TXT | 1 | 2026-10-06 |
| 160.187.147.124 Vietnam · INTERDIGI JOINT STOCK COMPANY | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 5.83.144.60 India · GorillaServers, Inc. | malware exposed-secret c2 exploit | PE, ASPX, ELF, BAT | 31 | 2026-10-06 |
| 172.245.253.41 United States · HostPapa | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 36.92.6.45 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 167.99.186.175 Canada · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 36.64.68.99 Indonesia · Telekomunikasi Indonesia (PT) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 114.80.34.158 China · China Telecom (Group) | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 197.248.7.232 Kenya · Safaricom Limited | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 187.110.161.98 Brazil · EVEO Servicos de Internet Ltda. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-06 |
| 47.98.221.20 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 148.216.28.11 Mexico · Alestra, S. de R.L. de C.V. | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 62.169.17.65 France · Contabo GmbH | exposed-secret exploit | TXT, ENV | 4 | 2026-10-06 |
| 143.110.241.64 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 37.187.244.59 France · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-10-06 |
| 164.68.118.218 France · Contabo GmbH | exposed-secret exploit malware webshell | TXT, MD, GITIGN, JS | 137 | 2026-10-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free