huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 18.141.4.71 Singapore · Amazon.com, Inc. | exploit exposed-secret tunnel | LOG, PY | 3 | 2026-11-08 |
| 154.12.86.207 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, LOG, JSON, SH | 140 | 2026-11-08 |
| 192.99.19.65 Canada · OVH SAS | exploit malware pe-binary | HTA, PE, PS1 | 3 | 2026-11-08 |
| 169.197.114.134 United Kingdom · Zenlayer Inc | exploit exposed-secret | COM | 1 | 2026-11-08 |
| 124.198.131.63 United States · 1337 Services GmbH | exposed-secret malware exploit mozi | PY, SH, PE, RAR | 217 | 2026-11-08 |
| 179.43.171.203 Panama · Private Layer INC | exposed-secret exploit malware mozi | LOG, PY, JSON, TXT | 76 | 2026-11-08 |
| 179.43.171.202 Panama · Private Layer INC | exposed-secret exploit malware mozi | LOG, PY, JSON, TXT | 76 | 2026-11-08 |
| 130.49.171.102 Uzbekistan · SERVERCORE CIS LLC | exposed-secret exploit | TXT | 2 | 2026-11-08 |
| 130.94.44.130 Singapore · NTT America, Inc. | exposed-secret exploit webshell malware | TXT, PS1, PY, TOML | 98 | 2026-11-07 |
| 34.49.135.97 United States · Google LLC | exploit exposed-secret | TXT | 1 | 2026-11-07 |
| 20.151.96.73 Canada · Microsoft Corporation | exploit exposed-secret | TXT | 3 | 2026-11-07 |
| 64.239.123.65 United States · Amazon.com, Inc. | exploit exposed-secret | APP, TXT | 2 | 2026-11-07 |
| 64.239.109.65 United States · Amazon.com, Inc. | exploit exposed-secret | APP, TXT | 2 | 2026-11-07 |
| 172.66.0.227 United States · Cloudflare, Inc. | exposed-secret exploit | TXT | 7 | 2026-11-07 |
| 35.163.34.11 United States · Amazon.com, Inc. | exploit tunnel | HTML | 5 | 2026-11-07 |
| 13.224.95.123 United States · Amazon.com, Inc. | exploit | TXT | 2 | 2026-11-07 |
| 13.224.95.17 United States · Amazon.com, Inc. | exploit | TXT | 2 | 2026-11-07 |
| 66.33.60.129 United States · Amazon.com, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 13.224.95.111 United States · Amazon.com, Inc. | exploit | TXT | 2 | 2026-11-07 |
| 104.16.49.5 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 104.16.48.5 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 13.224.95.48 United States · Amazon.com, Inc. | exploit | TXT | 2 | 2026-11-07 |
| 76.76.21.22 United States · Amazon.com, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 104.18.14.35 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 143.244.38.134 United Kingdom · Datacamp Limited | exploit webshell | PHP, PS1, XYZ | 3 | 2026-11-07 |
| 199.60.103.2 United States · Cloudflare London, LLC | exploit tunnel | TXT | 1 | 2026-11-07 |
| 104.18.15.35 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 193.99.144.85 Germany · Plus.line AG | exploit webshell exposed-secret | HTML, TXT | 3 | 2026-11-07 |
| 104.20.8.174 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 104.20.7.174 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 199.60.103.254 United States · Cloudflare London, LLC | exploit tunnel | TXT | 1 | 2026-11-07 |
| 172.66.132.19 United States · Cloudflare, Inc. | exploit exposed-secret | TXT | 2 | 2026-11-07 |
| 172.66.132.20 United States · Cloudflare, Inc. | exploit exposed-secret | TXT | 2 | 2026-11-07 |
| 104.18.28.89 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 87.239.122.17 Finland · Finnish Transport and Communications Agency | exploit | TXT | 2 | 2026-11-07 |
| 104.18.29.89 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 172.64.145.226 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 2.22.247.209 United Kingdom · Akamai Technologies, Inc. | exploit | TXT | 3 | 2026-11-07 |
| 80.245.144.218 Germany · ITZBund | exploit | 1 | 2026-11-07 | |
| 130.226.173.10 Denmark · Forskningsnettet - Danish network for Research and Education | exploit | TXT | 1 | 2026-11-07 |
| 104.18.42.30 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 95.216.137.24 Finland · Hetzner Online GmbH | exploit | TXT | 15 | 2026-11-07 |
| 2.29.113.216 Finland · Hetzner Online GmbH | exploit | TXT | 1 | 2026-11-07 |
| 162.159.140.9 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 185.199.108.153 United States · Fastly, Inc. | exploit exposed-secret ioc-match tunnel | IO, DMG, TXT | 4 | 2026-11-07 |
| 199.60.103.106 United States · Cloudflare London, LLC | exploit | TXT | 1 | 2026-11-07 |
| 150.171.109.213 United States · Microsoft Corporation | exploit c2 malware sliver | HTML, TXT | 2 | 2026-11-07 |
| 172.66.0.9 United States · Cloudflare, Inc. | exploit | TXT | 1 | 2026-11-07 |
| 199.60.103.6 United States · Cloudflare London, LLC | exploit | TXT | 1 | 2026-11-07 |
| 151.101.66.217 United States · Fastly, Inc. | exploit | TXT | 1 | 2026-11-07 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free