huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 172.105.156.153 United States · Akamai Technologies, Inc. | exposed-secret exploit malware mozi | TXT, JSON, SH, MD | 163 | 2026-11-03 |
| 94.130.22.189 Germany · Hetzner Online GmbH | exploit exposed-secret | TXT, JSON, PHP, ENV | 61 | 2026-11-03 |
| 194.233.67.247 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware mozi | TXT, PHP, HTML, PY | 354 | 2026-11-02 |
| 173.212.244.40 France · Contabo GmbH | exposed-secret exploit webshell c2 | PY, HTML, MD, PHP | 523 | 2026-11-02 |
| 103.179.27.226 Indonesia · PT Primadona Media Digitalindo | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 203.194.115.12 Indonesia · Rumahweb | exposed-secret exploit malware webshell | PY, LOG, PHP, JAR | 360 | 2026-11-02 |
| 83.172.138.182 Germany · M247 Europe SRL | exposed-secret malware mozi exploit | PY, TXT, APK, HTML | 301 | 2026-11-02 |
| 147.93.159.0 Singapore · Contabo Asia Private Limited | exposed-secret exploit webshell malware | PY, PHP, SH, C | 86 | 2026-11-02 |
| 169.58.233.110 United States · TerraTransit AG | exploit exposed-secret malware mozi | LOG, JSON, MD, SH | 125 | 2026-11-02 |
| 8.215.192.157 Singapore · Alibaba (US) Technology Co., Ltd. | exploit exposed-secret tunnel | SAMPLE, JSON, TXT, MJS | 37 | 2026-11-02 |
| 8.221.120.13 United States · Alibaba (US) Technology Co., Ltd. | exploit | GZ, TXT | 3 | 2026-11-02 |
| 104.131.161.161 United States · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 45.148.10.183 AD · TECHOFF SRV LIMITED | malware exploit mozi webshell | PE, CMD, PS1, VBS | 18 | 2026-11-02 |
| 45.55.101.18 United States · DigitalOcean, LLC | exposed-secret exploit | TXT, ENV, JSON | 8 | 2026-11-02 |
| 92.246.129.98 Brazil · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | JS, JSON, PY, SH | 347 | 2026-11-02 |
| 78.111.90.130 Canada · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | TXT, SH, JSON, LOG | 243 | 2026-11-02 |
| 45.133.18.50 The Netherlands · ITGLOBAL.COM NL B.V. | exposed-secret exploit mirror tunnel | CMD, JSON, LOG, MD | 63 | 2026-11-02 |
| 27.131.106.133 Australia · Micron21 Datacentre Pty Ltd | exposed-secret exploit coinminer malware | SAMPLE, TXT, GZ, PY | 29 | 2026-11-02 |
| 74.91.24.29 United States · Nocix, LLC | exploit exposed-secret tunnel | PY, SH, ZIP, CSV | 25 | 2026-11-02 |
| 64.118.151.226 Hong Kong · Eons Data Communications Limited | exploit exposed-secret malware mozi | SH, LOG, MD, JSON | 147 | 2026-11-02 |
| 38.60.157.55 United States · Kaopu Cloud HK Limited | exposed-secret exploit malware webshell | SH, C, ELF, TXT | 42 | 2026-11-02 |
| 111.68.4.13 Hong Kong · Netsec Limited | exploit exposed-secret malware webshell | SH, PY, ELF, BIN | 58 | 2026-11-02 |
| 183.136.206.215 China · NINGBO, ZHEJIANG Province, P.R.China. | exposed-secret exploit | SH, MD, PY, ENVRC | 42 | 2026-11-02 |
| 74.91.24.28 United States · Nocix, LLC | exploit exposed-secret tunnel | PY, SH, ZIP, CSV | 25 | 2026-11-02 |
| 181.41.194.136 The Netherlands · OVH SAS | malware mozi c2 exposed-secret | HTA, CMD, BAT, JS | 23 | 2026-11-02 |
| 142.91.108.198 Japan · Leaseweb Japan K.K. | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 18.136.195.202 Singapore · Amazon.com, Inc. | exploit exposed-secret malware mozi | PY, LOG, TXT, SH | 213 | 2026-11-02 |
| 31.56.228.136 France · CGI GLOBAL LIMITED | exploit exposed-secret webshell c2 | PY, GDB, MD, PHP | 386 | 2026-11-02 |
| 104.21.11.185 United States · Cloudflare, Inc. | exploit | JS, BIN, COM | 4 | 2026-11-02 |
| 172.67.150.5 United States · Cloudflare, Inc. | exploit | JS, BIN, COM | 4 | 2026-11-02 |
| 107.175.85.215 United States · HostPapa | exploit exposed-secret malware mozi | TXT, BIN, BODY, PY | 28 | 2026-11-02 |
| 172.66.171.73 United States · Cloudflare, Inc. | exploit | TXT | 4 | 2026-11-02 |
| 104.20.29.150 United States · Cloudflare, Inc. | exploit | TXT | 4 | 2026-11-02 |
| 101.36.112.205 Hong Kong · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | exposed-secret exploit malware webshell | PY, PHP, JS, SH | 161 | 2026-11-02 |
| 43.133.242.81 South Korea · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware mozi | SH, PY, LOG, TXT | 441 | 2026-11-02 |
| 212.103.62.205 United States · CNSERVERS LLC | exposed-secret malware exploit mozi | SH, PY, ELF, JSON | 387 | 2026-11-02 |
| 38.76.208.29 United States · cognetcloud INC | exploit malware exposed-secret c2 | LOG, PY, JAVA, MACHO | 78 | 2026-11-02 |
| 39.106.13.235 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit malware mozi exposed-secret | PY, LOG, OUT, JAR | 21 | 2026-11-02 |
| 74.161.43.26 Switzerland · Microsoft Corporation | exposed-secret malware exploit mozi | C, PS1, ELF, PY | 18 | 2026-11-02 |
| 156.239.47.147 United States · AROSSCLOUD INC. | exploit malware mozi c2 | LOG, JSON, PY, JS | 33 | 2026-11-02 |
| 103.75.199.75 Germany · BitCommand LLC | exploit exposed-secret c2 | TXT, PY, ENV, JS | 11 | 2026-11-02 |
| 45.156.87.230 The Netherlands · TechTies Inc. | exploit webshell exposed-secret malware | HTML, PHP, PY, TXT | 4 | 2026-11-02 |
| 104.233.217.108 United States · PEG TECH INC | exposed-secret exploit malware mozi | PY, TXT, JS, JSON | 699 | 2026-11-02 |
| 194.233.72.126 Singapore · Contabo Asia Private Limited | exposed-secret exploit | TXT | 2 | 2026-11-02 |
| 194.233.72.121 Singapore · Contabo Asia Private Limited | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 208.98.38.114 United States · Sharktech | exploit exposed-secret tunnel | TXT | 1 | 2026-11-01 |
| 103.117.136.137 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, TGZ, SH, JS | 637 | 2026-11-01 |
| 138.16.187.93 Russia · Hosting technology LTD | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-01 |
| 118.99.85.200 Indonesia · BIZNET NETWORKS | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 49.51.187.59 United States · Shenzhen Tencent Computer Systems Company Limited | malware exploit exposed-secret mozi | ELF, LOG, B64, DTD | 160 | 2026-11-01 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free