huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,480
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 20.45.43.57 United States · Microsoft Corporation | exploit | HTML | 1 | 2026-09-30 |
| 172.245.136.132 United States · HostPapa | exposed-secret exploit tunnel | LOG, JSON, ENV, JSONL | 23 | 2026-09-30 |
| 124.220.81.105 China · Shenzhen Tencent Computer Systems Company Limited | exploit | PY, JSON | 3 | 2026-09-30 |
| 46.225.118.210 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, JSON, LOG, BAK | 45 | 2026-09-30 |
| 43.157.202.180 Indonesia · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret | HTML | 1 | 2026-09-30 |
| 49.234.49.58 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware gafgyt exploit | JSON, PY, SH, DB | 63 | 2026-09-30 |
| 61.185.204.20 China · Chinanet | exploit exposed-secret webshell forced-loot | YAML, LOG, PY, TXT | 104 | 2026-09-30 |
| 81.70.21.248 China · Shenzhen Tencent Computer Systems Company Limited | exploit malware exposed-secret webshell | TXT, PY, GITIGN, IN | 28 | 2026-09-30 |
| 207.180.219.101 France · Contabo GmbH | exploit exposed-secret malware mozi | HTML, MD, PY, LOG | 34 | 2026-09-30 |
| 173.212.247.188 France · Contabo GmbH | exposed-secret exploit tunnel | TXT, TS, TSX, GITIGN | 13 | 2026-09-30 |
| 38.246.244.162 United States · NetLab Global | exposed-secret exploit tunnel | PY, MD, JSON, BAK | 27 | 2026-09-30 |
| 5.78.118.60 United States · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, TXT, MD, GITIGN | 33 | 2026-09-30 |
| 207.180.193.40 France · Contabo GmbH | exposed-secret exploit c2 webshell | JAR, TXT, JSON, MD | 50 | 2026-09-30 |
| 34.23.34.14 United States · Google LLC | exposed-secret exploit | PY, SH, CLAUDE, EXAMPL | 24 | 2026-09-30 |
| 118.25.25.81 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware gafgyt | PY, MD, LOG, SH | 107 | 2026-09-30 |
| 72.56.114.234 Seychelles · Timeweb, LLP | exposed-secret malware mozi exploit | PY, LOG, JSON, SH | 171 | 2026-09-30 |
| 183.101.139.124 South Korea · Korea Telecom | exposed-secret malware mozi exploit | PY, TXT, JS, MD | 95 | 2026-09-30 |
| 84.32.34.6 The Netherlands · UAB Cherry Servers | malware exposed-secret mozi exploit | PY, GZ, TXT, BAK | 55 | 2026-09-30 |
| 141.147.89.101 United Kingdom · Oracle Corporation | exposed-secret exploit | HTML, JS, TXT, SH | 43 | 2026-09-30 |
| 20.200.208.16 South Korea · Microsoft Corporation | c2 exposed-secret exploit tunnel | PY, MD, HTML, SH | 85 | 2026-09-30 |
| 128.30.224.82 United States · Massachusetts Institute of Technology | exposed-secret exploit malware sliver | TXT, PY, GITIGN, MD | 24 | 2026-09-30 |
| 65.21.188.160 Finland · Hetzner Online GmbH | exposed-secret exploit malware mozi | PHP, MD, SH, TXT | 57 | 2026-09-30 |
| 204.168.152.129 Finland · Hetzner Online GmbH | exposed-secret exploit tunnel | TXT, PY, MD, PEM | 16 | 2026-09-30 |
| 52.79.37.201 South Korea · Amazon.com, Inc. | exploit exposed-secret webshell tunnel | PY, CONFIG, MD, GITIGN | 86 | 2026-09-30 |
| 103.131.51.199 Indonesia · PT. Jupiter Jala Arta | exposed-secret exploit malware mozi | PHP, MD, TXT, GITIGN | 46 | 2026-09-30 |
| 204.168.164.231 Finland · Hetzner Online GmbH | exposed-secret exploit malware sliver | PY, TXT, GITIGN, JSON | 12 | 2026-09-30 |
| 162.35.183.192 United States · Interserver, Inc | exposed-secret exploit malware mozi | TXT, PY, GITIGN, SH | 8 | 2026-09-30 |
| 137.184.118.119 United States · DigitalOcean, LLC | exposed-secret exploit webshell tunnel | PY, TXT, SH, GITIGN | 34 | 2026-09-30 |
| 46.250.255.73 Japan · Contabo Asia Private Limited | exposed-secret exploit malware mozi | PY, TXT, MD, B72E8E | 14 | 2026-09-30 |
| 54.188.137.221 United States · Amazon.com, Inc. | exploit exposed-secret webshell tunnel | PY, CONFIG, MD, GITIGN | 87 | 2026-09-30 |
| 159.65.0.249 Singapore · DigitalOcean, LLC | exploit exposed-secret webshell c2 | PY, MD, SH, BAT | 73 | 2026-09-30 |
| 161.35.178.114 United States · DigitalOcean, LLC | exposed-secret exploit tunnel | TXT, MD, GITIGN, EXAMPL | 17 | 2026-09-30 |
| 169.58.56.195 United States · TerraTransit AG | exposed-secret exploit tunnel | MD, TXT, GITIGN | 10 | 2026-09-30 |
| 95.179.150.206 The Netherlands · The Constant Company, LLC | exposed-secret exploit webshell tunnel | PY, SH, TXT, MD | 78 | 2026-09-30 |
| 195.154.191.187 France · Scaleway SAS | malware mozi exploit c2 | PY, CSV, MD, HTML | 17 | 2026-09-30 |
| 178.104.146.251 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, TXT, MD, BACKUP | 48 | 2026-09-30 |
| 190.183.251.210 Argentina · Gigared S.A. | exploit exposed-secret malware gafgyt | MD, PY, JSON, SQLITE | 30 | 2026-09-30 |
| 176.65.148.59 The Netherlands · Pfcloud UG (haftungsbeschrankt) | exposed-secret exploit malware mozi | SH, MD, LOG, PY | 88 | 2026-09-30 |
| 50.6.200.159 United States · Network Solutions, LLC | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 142.44.212.80 Canada · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 54.39.53.163 Canada · OVH SAS | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 222.255.238.158 Vietnam · VNPT Corp | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 164.52.218.194 India · E2E Networks Limited | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 122.186.156.66 India · Bharti Airtel Limited | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 184.168.31.120 United States · GoDaddy.com, LLC | exposed-secret exploit malware mozi | PHP, LOCK, TXT, HTML | 45 | 2026-09-30 |
| 208.109.235.104 United States · GoDaddy.com, LLC | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 49.0.124.103 Thailand · Internet Datacenter Network | exposed-secret exploit | TXT | 3 | 2026-09-30 |
| 46.224.179.31 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT | 4 | 2026-09-30 |
| 43.230.131.75 Indonesia · PT. Media Antar Nusa | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 32.236.62.30 Australia · Amazon.com, Inc. | malware mozi webshell exposed-secret | JSP, JS | 11 | 2026-09-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free