huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled havoc
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 217.160.132.82 Spain · IONOS SE | exposed-secret exploit malware mozi | PY, SH, PHP, TXT | 911 | 2026-11-12 |
| 8.212.181.6 Philippines · Alibaba (US) Technology Co., Ltd. | exposed-secret malware cobalt-strike c2 | GO, BIN, TXT, PE | 77 | 2026-11-07 |
| 89.36.231.178 France · ROCKHOSTER PRIVATE LIMITED | malware coinminer exploit c2 | XML, SH, BAT, JAR | 281 | 2026-11-07 |
| 194.233.67.247 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware mozi | TXT, PHP, HTML, PY | 354 | 2026-11-02 |
| 153.75.81.83 United Arab Emirates · RouterHosting LLC | exploit exposed-secret malware c2 | PY, TXT, LOG, ELF | 91 | 2026-10-29 |
| 23.19.231.52 United States · Leaseweb USA, Inc. | malware mozi exposed-secret exploit | PY, GZ, JS, SH | 577 | 2026-10-27 |
| 45.115.26.30 Vietnam · Contrust Solutions S.R.L. | exposed-secret exploit malware mozi | LOG, PY, SH, TXT | 1,395 | 2026-10-26 |
| 104.160.169.204 United States · Sharktech | exposed-secret exploit malware tsunami | SH, LOG, TXT, PY | 170 | 2026-10-24 |
| 212.244.203.102 Poland · Orange Polska Spolka Akcyjna | webshell exposed-secret malware c2 | C, SQL, IN, PL | 300 | 2026-10-21 |
| 142.93.57.244 United States · DigitalOcean, LLC | exposed-secret exploit malware c2 | TXT, JSON, JS, BODY | 217 | 2026-10-21 |
| 38.9.96.215 United States · Cogent Communications | malware c2 havoc mozi | ELF, SH, LOG | 15 | 2026-10-18 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 139.28.220.253 Finland · IHOR HOSTING LTD | exposed-secret exploit c2 malware | GZ, TXT, ALL, AUS | 36 | 2026-10-08 |
| 195.154.191.187 France · Scaleway SAS | malware mozi exploit c2 | PY, CSV, MD, HTML | 17 | 2026-09-30 |
| 45.13.239.249 Germany · Florian Kolb | exposed-secret malware c2 adaptix | JSON, TXT, BIN, EXE | 141 | 2026-09-26 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free