huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,480
files
112
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 20.17.161.64 Malaysia · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 178.104.231.250 Germany · Hetzner Online GmbH | exploit exposed-secret c2 malware | SQL, PY, TXT, SH | 125 | 2026-09-30 |
| 161.97.137.133 France · Contabo GmbH | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 139.59.10.206 India · DigitalOcean, LLC | exposed-secret exploit | TXT, ENV | 3 | 2026-09-30 |
| 114.110.182.150 South Korea · NHNCLOUD | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 103.73.189.190 India · Evoke Digital Solutions | exposed-secret exploit | TXT | 2 | 2026-09-30 |
| 207.57.188.152 United States · Zillion Network Inc. | malware mozi exploit exposed-secret | PY, GO, ELF, PYC | 9 | 2026-09-30 |
| 131.123.43.239 United States | exposed-secret exploit c2 tunnel | SH, PY, TXT, JSP | 104 | 2026-09-29 |
| 172.67.159.130 United States · Cloudflare, Inc. | exploit | DEV | 1 | 2026-09-29 |
| 104.21.41.34 United States · Cloudflare, Inc. | exploit | DEV | 1 | 2026-09-29 |
| 176.65.139.250 The Netherlands · Offshore LC | malware exploit elf-binary | ELF, SH, TXT | 5 | 2026-09-27 |
| 193.233.216.44 Russia · Aeza Group LLC | exposed-secret exploit webshell | TXT, GZ, PUB, XZ | 13 | 2026-09-27 |
| 193.143.1.35 Russia · Proton66 OOO | exploit exposed-secret c2 tunnel | CSV, PY | 57 | 2026-09-27 |
| 193.143.1.99 Russia · Proton66 OOO | malware exposed-secret exploit elf-binary | ELF, C, GZ, SH | 41 | 2026-09-27 |
| 178.16.52.101 Germany · Omegatech LTD | exploit | BEER | 1 | 2026-09-27 |
| 68.65.122.208 United States · Namecheap, Inc. | c2 exploit exposed-secret | SITE | 1 | 2026-09-27 |
| 160.153.187.97 United States · GoDaddy.com, LLC | exposed-secret exploit | TXT | 2 | 2026-09-27 |
| 51.159.21.191 France · Scaleway SAS | exposed-secret malware c2 exploit | PHP, PS1, EXE, PY | 286 | 2026-09-26 |
| 92.119.164.197 The Netherlands · Julian Achter | exploit | TXT | 1 | 2026-09-26 |
| 201.7.16.231 United States | malware exploit elf-binary | ELF, SH | 16 | 2026-09-26 |
| 192.227.210.190 United States · HostPapa | exploit exposed-secret | TXT | 1 | 2026-09-26 |
| 143.20.185.213 South Africa · Internet Magnate (Pty) Ltd | malware exploit mozi elf-binary | ELF, SH, ZIP | 37 | 2026-09-26 |
| 103.133.216.219 BT · Government Technology Agency | exposed-secret exploit | TXT | 2 | 2026-09-26 |
| 102.209.224.40 Nigeria · Interconnect Clearinghouse Nigeria Ltd | exposed-secret exploit | TXT | 2 | 2026-09-26 |
| 1.234.83.89 South Korea · SK Broadband Co Ltd | exposed-secret exploit | TXT, ENV | 5 | 2026-09-26 |
| 45.13.239.249 Germany · Florian Kolb | exposed-secret malware c2 adaptix | JSON, TXT, BIN, EXE | 141 | 2026-09-26 |
| 217.60.7.95 Hong Kong · CGI GLOBAL LIMITED | exploit exposed-secret | EML | 135 | 2026-09-26 |
| 101.42.136.73 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware mozi | TXT, LOG, PY, XML | 5 | 2026-09-26 |
| 15.223.141.239 Canada · Amazon.com, Inc. | exploit exposed-secret | TXT | 2 | 2026-09-25 |
| 138.197.174.121 Canada · DigitalOcean, LLC | coinminer malware exposed-secret c2 | GZ, SH, JS | 9 | 2026-09-22 |
| 20.201.77.247 Brazil · Microsoft Corporation | exposed-secret exploit | TXT | 2 | 2026-09-21 |
| 87.106.118.51 Germany · IONOS SE | exposed-secret exploit | TXT | 2 | 2026-09-21 |
| 192.3.1.130 United States · HostPapa | exploit exposed-secret tunnel | SH, HTML, LOG, PY | 9 | 2026-09-16 |
| 66.179.31.191 United States · BL Networks | exposed-secret exploit malware mozi | PY, HTML, SH, TXT | 60 | 2026-09-15 |
← NewerPage 23 of 23
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free