huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled exploit
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 104.21.33.224 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.193.218 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.136.168 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.62.143 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.151.77 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.12.21 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.130.62 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.3.48 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.197.160 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.61.131 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.21.94 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.210.138 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.10.159 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.135.89 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.26.37 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.171.104 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.184.248 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.180.32 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.185.102 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.190.134 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.76.24 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.29.49 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.89.71 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.156.241 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.129.81 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.76.36 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.32.84 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.186.151 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.2.147 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.67.192 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 31.128.39.24 Russia · Beget LLC | malware mozi exploit exposed-secret | JS, PY, SH, TXT | 455 | 2026-10-30 |
| 104.21.56.253 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.157.63 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 165.154.225.131 Singapore · Scloud Pte Ltd | exposed-secret exploit malware mozi | TXT, BIN, PY, HEADER | 842 | 2026-10-30 |
| 104.238.140.55 United States · The Constant Company, LLC | malware exposed-secret c2 exploit | PE, PS1 | 9 | 2026-10-30 |
| 39.107.106.210 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware mozi | PHP, LOG, SH, TXT | 421 | 2026-10-30 |
| 45.117.83.34 Vietnam · NhanHoa Software company | exposed-secret malware exploit webshell | LOG, PE, PY, JSON | 48 | 2026-10-30 |
| 39.106.140.144 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware mozi | SH, ELF, LOG, PE | 31 | 2026-10-30 |
| 5.9.115.199 Germany · Hetzner Online GmbH | exploit exposed-secret | TOP | 1 | 2026-10-29 |
| 46.166.162.142 Lithuania · UAB Cherry Servers | exploit malware exposed-secret webshell | LOG, SEEDS, JS, TXT | 1,393 | 2026-10-29 |
| 153.75.81.83 United Arab Emirates · RouterHosting LLC | exploit exposed-secret malware c2 | PY, TXT, LOG, ELF | 91 | 2026-10-29 |
| 168.235.125.131 United States · InMotion Hosting, Inc. | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-10-29 |
| 213.133.99.249 Germany · Hetzner Online GmbH | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 209.99.184.246 Switzerland · SKN Subnet & Telecom Ltd | exploit exposed-secret c2 webshell | TXT, MD, PY, JSON | 866 | 2026-10-29 |
| 141.147.70.247 United Kingdom · Oracle Corporation | exposed-secret exploit malware mozi | JSON, TS, JS, MD | 162 | 2026-10-29 |
| 134.209.211.188 United States · DigitalOcean, LLC | exploit exposed-secret tunnel | BAK, TXT, BAT, BKP | 9 | 2026-10-29 |
| 59.152.103.205 Bangladesh · Earth Telecommunication ( pvt ) Limited | exposed-secret exploit | TXT, ENV | 4 | 2026-10-29 |
| 13.234.153.113 India · Amazon.com, Inc. | exposed-secret exploit | TXT | 2 | 2026-10-29 |
| 52.53.90.195 United States · Amazon.com, Inc. | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
| 57.129.70.164 Germany · OVH SAS | exposed-secret exploit | TXT, ENV | 3 | 2026-10-29 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free