huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 109.238.87.159 United Kingdom · B2 Net Solutions Inc. | exposed-secret malware mozi exploit | TXT, SH, BIN, JSON | 11 | 2026-11-05 |
| 161.33.148.80 Japan · Oracle Corporation | exposed-secret malware mozi exploit | HDR, SH, TGZ, TXT | 294 | 2026-11-05 |
| 193.124.58.29 Czechia · SmartApe OU | exposed-secret exploit | MOBILE, SH | 7 | 2026-11-05 |
| 43.161.243.73 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exploit malware exposed-secret mozi | LOG, PY, MACHO, SH | 417 | 2026-11-05 |
| 217.142.239.53 Japan · Oracle Corporation | exposed-secret exploit malware tunnel | BAT, CMD, PE, SH | 5 | 2026-11-05 |
| 143.246.202.252 United States | exposed-secret exploit c2 malware | PS1, PY, HTML, PE | 8 | 2026-11-05 |
| 190.105.181.9 Argentina · AGUAS DEL COLORADO SAPEM | exposed-secret exploit | TXT | 2 | 2026-11-05 |
| 182.92.243.166 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit | TXT, ENV, JSON | 5 | 2026-11-05 |
| 145.223.140.51 Singapore · Byteplus Pte. Ltd. | exploit exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-11-05 |
| 104.233.150.138 United States · PEG TECH INC | exposed-secret exploit webshell tunnel | SH, TXT, PY, CMD | 46 | 2026-11-05 |
| 51.15.107.106 France · Scaleway SAS | c2 cobalt-strike exploit malware | TXT | 1 | 2026-11-05 |
| 143.198.27.227 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-05 |
| 139.60.160.50 United States · HOSTKEY | exposed-secret exploit | JSON, TXT | 5 | 2026-11-05 |
| 8.209.101.205 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret exploit | TXT | 2 | 2026-11-05 |
| 168.144.251.199 United States | exploit exposed-secret webshell malware | PHP, HTML, LOG, PY | 146 | 2026-11-05 |
| 94.130.22.61 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, EML, JSON, TXT | 1,209 | 2026-11-05 |
| 23.27.25.75 United States · Evoxt Sdn. Bhd. | exposed-secret malware mozi exploit | PY, SQL, JSON, LOG | 129 | 2026-11-05 |
| 51.83.71.4 France · OVH SAS | exposed-secret exploit | YML, GZ, JAR | 5 | 2026-11-04 |
| 104.131.134.161 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 104.131.59.223 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 89.116.31.1 France · Contabo GmbH | exposed-secret exploit | TXT, ENV | 5 | 2026-11-04 |
| 202.95.14.76 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 202.95.14.69 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 23.248.226.189 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.187 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.188 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.186 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.190 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.210 United States · YANCY LIMITED | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 202.95.14.60 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 154.255.225.214 DZ · Telecom Algeria | exploit malware elf-binary | ELF, LRC | 2 | 2026-11-04 |
| 104.21.67.152 United States · Cloudflare, Inc. | c2 exploit | COM | 1 | 2026-11-04 |
| 147.93.159.70 Singapore · Contabo Asia Private Limited | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 16.26.208.68 Australia · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 207.56.221.47 United States · NTT America, Inc. | exposed-secret malware mozi exploit | PY, LOG, SH, TXT | 625 | 2026-11-04 |
| 38.54.88.171 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, SH, LOG, TXT | 200 | 2026-11-04 |
| 151.158.1.156 Switzerland · Evoxt Sdn. Bhd. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-04 |
| 38.60.227.210 United States · Kaopu Cloud HK Limited | exposed-secret malware mozi c2 | PY, TXT, SH, PS1 | 1,000 | 2026-11-04 |
| 158.247.218.226 South Korea · The Constant Company, LLC | exposed-secret malware mozi exploit | PY, JS, LOG, TXT | 388 | 2026-11-04 |
| 64.177.47.135 United States | malware exposed-secret exploit c2 | PE, PY, MD, TXT | 97 | 2026-11-04 |
| 172.104.173.165 Singapore · Akamai Technologies, Inc. | exposed-secret exploit webshell malware | PY, SH, ELF, LOG | 85 | 2026-11-04 |
| 64.118.151.186 Hong Kong · Eons Data Communications Limited | exposed-secret exploit | TXT | 2 | 2026-11-04 |
| 172.105.156.56 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.109 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.161 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.160 United States · Akamai Technologies, Inc. | exposed-secret exploit | TXT | 3 | 2026-11-04 |
| 103.154.62.40 Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP | exposed-secret exploit | TXT | 2 | 2026-11-03 |
| 27.102.137.57 South Korea · DAOU TECHNOLOGY | c2 exploit exposed-secret | TXT | 2 | 2026-11-03 |
| 39.99.242.80 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | PY, TXT, SH, MD | 128 | 2026-11-03 |
| 39.96.205.8 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit webshell malware | GO, LOG, PY, TXT | 576 | 2026-11-03 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free