huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 95.111.226.157 France · Contabo GmbH | exposed-secret exploit malware macho-binary | SH, JAVA, MACHO, TXT | 49 | 2026-11-01 |
| 148.113.3.32 Canada · OVH SAS | exploit malware macho-binary | LOG, TXT, JAVA, MACHO | 10 | 2026-11-01 |
| 116.202.232.184 Germany · Hetzner Online GmbH | exploit exposed-secret | NET | 2 | 2026-11-01 |
| 178.95.25.224 Ukraine · The Constant Company, LLC | exposed-secret malware mozi webshell | SH, JS, TXT, LOG | 697 | 2026-11-01 |
| 45.152.149.32 United States · 1337 Services GmbH | exposed-secret exploit | TXT, PY, LOG, ENV | 47 | 2026-11-01 |
| 38.133.142.39 Romania · DIGI ROMANIA S.A. | exposed-secret exploit tunnel | PY, GITIGN, SQLITE, HTML | 13 | 2026-11-01 |
| 162.35.99.94 United States | exploit exposed-secret | LOG, SQL, TXT | 3 | 2026-11-01 |
| 31.56.228.197 France · CGI GLOBAL LIMITED | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 31.56.228.126 France · CGI GLOBAL LIMITED | exposed-secret exploit malware mozi | PY, LOG, TXT, HTML | 62 | 2026-11-01 |
| 185.125.24.7 Switzerland · Infomaniak Network SA | exploit exposed-secret malware mozi | XZ, BUILDI, BUILD, CHANGE | 146 | 2026-11-01 |
| 104.200.73.97 United States · GWY IT PTY LTD | exposed-secret exploit malware webshell | PY, ELF, C, TXT | 134 | 2026-11-01 |
| 100.59.81.102 United States · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-11-01 |
| 68.183.32.185 United Kingdom · DigitalOcean, LLC | exposed-secret exploit tunnel | TXT, ENV, HTML, JS | 7 | 2026-10-31 |
| 158.178.128.187 Israel · Oracle Corporation | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-31 |
| 18.162.225.121 China · Amazon.com, Inc. | exposed-secret exploit | TXT | 3 | 2026-10-31 |
| 13.231.71.33 Japan · Amazon.com, Inc. | exposed-secret exploit | TXT | 4 | 2026-10-31 |
| 39.109.57.67 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | exposed-secret malware exploit mozi | PY, LOG, ELF, SH | 26 | 2026-10-31 |
| 39.109.57.179 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | malware exploit exposed-secret mozi | ELF, LOG, PY, SH | 9 | 2026-10-31 |
| 45.39.190.176 United States · Cloud Software - FZCO | exposed-secret exploit malware webshell | HTML, PHP, ELF, BIN | 212 | 2026-10-31 |
| 96.126.130.81 United States · Evoxt Sdn. Bhd. | malware mozi exploit webshell | EML, SH, PY, LOG | 1,568 | 2026-10-31 |
| 77.239.124.141 The Netherlands · Alfahost LLC | malware exploit exposed-secret elf-binary | ELF, TXT | 15 | 2026-10-31 |
| 172.67.141.4 United States · Cloudflare, Inc. | exploit | SITE | 1 | 2026-10-31 |
| 104.21.70.249 United States · Cloudflare, Inc. | exploit | SITE | 1 | 2026-10-31 |
| 45.205.24.183 Seychelles · FASTNET DATA INC | exploit c2 exposed-secret | HTML, ZIP, TXT, ENV | 26 | 2026-10-31 |
| 45.155.19.244 Turkey · Samet Girginer | malware mozi exploit exposed-secret | JS, TS, MJS, JSON | 56 | 2026-10-31 |
| 38.60.241.211 United States · Kaopu Cloud HK Limited | exposed-secret exploit | PY, LOG, TXT, SH | 20 | 2026-10-31 |
| 38.60.205.58 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, HTML, TXT, LOG | 30 | 2026-10-31 |
| 38.255.47.37 United States · Hyonix | exploit exposed-secret | BAT, PY, TXT, ENV | 8 | 2026-10-31 |
| 154.89.148.84 HK · Cloudie Limited | malware exposed-secret c2 exploit | ELF, HTML, PY, SH | 78 | 2026-10-31 |
| 38.49.210.117 Canada · Rica Web Services | exposed-secret exploit webshell c2 | JSON, GO, SH, JS | 1,165 | 2026-10-31 |
| 18.136.195.216 Singapore · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-30 |
| 172.67.163.156 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.151.22 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.163.96 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.81.183 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.158.135 United States · Cloudflare, Inc. | exploit exposed-secret malware mozi | CYOU | 2 | 2026-10-30 |
| 104.21.14.88 United States · Cloudflare, Inc. | exploit exposed-secret malware mozi | CYOU | 2 | 2026-10-30 |
| 104.21.27.242 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.89.22 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.136.81 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.41.230 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.195.153 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.5.230 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.133.244 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.158.68 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.73.56 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.181.238 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.96.141 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.10.150 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.60.74 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free