huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled sliver
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 23.149.28.46 United States · NetLab Global | exploit malware mozi exposed-secret | PY, SH, LOG, GZ | 1,262 | 2026-11-12 |
| 168.144.111.89 Singapore · DigitalOcean, LLC | exposed-secret exploit webshell malware | TXT, HTML, PHP, SH | 328 | 2026-11-12 |
| 217.160.132.82 Spain · IONOS SE | exposed-secret exploit malware mozi | PY, SH, PHP, TXT | 911 | 2026-11-12 |
| 104.21.10.19 United States · Cloudflare, Inc. | c2 malware sliver tunnel | TXT | 1 | 2026-11-08 |
| 172.67.162.31 United States · Cloudflare, Inc. | c2 malware sliver tunnel | TXT | 1 | 2026-11-08 |
| 154.12.86.207 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, LOG, JSON, SH | 140 | 2026-11-08 |
| 124.198.131.63 United States · 1337 Services GmbH | exposed-secret malware exploit mozi | PY, SH, PE, RAR | 217 | 2026-11-08 |
| 150.171.109.213 United States · Microsoft Corporation | exploit c2 malware sliver | HTML, TXT | 2 | 2026-11-07 |
| 8.212.181.6 Philippines · Alibaba (US) Technology Co., Ltd. | exposed-secret malware cobalt-strike c2 | GO, BIN, TXT, PE | 77 | 2026-11-07 |
| 43.161.243.73 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exploit malware exposed-secret mozi | LOG, PY, MACHO, SH | 417 | 2026-11-05 |
| 39.99.242.80 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | PY, TXT, SH, MD | 128 | 2026-11-03 |
| 192.227.241.226 United States · HostPapa | exposed-secret exploit malware mozi | PY, SH, LOG, GZ | 538 | 2026-11-03 |
| 172.105.156.153 United States · Akamai Technologies, Inc. | exposed-secret exploit malware mozi | TXT, JSON, SH, MD | 163 | 2026-11-03 |
| 173.212.244.40 France · Contabo GmbH | exposed-secret exploit webshell c2 | PY, HTML, MD, PHP | 523 | 2026-11-02 |
| 169.58.233.110 United States · TerraTransit AG | exploit exposed-secret malware mozi | LOG, JSON, MD, SH | 125 | 2026-11-02 |
| 66.42.33.224 Japan · The Constant Company, LLC | malware exposed-secret mozi sliver | JSON, PS1, PY, LOG | 21 | 2026-11-02 |
| 165.154.225.131 Singapore · Scloud Pte Ltd | exposed-secret exploit malware mozi | TXT, BIN, PY, HEADER | 842 | 2026-10-30 |
| 108.61.161.224 Japan · The Constant Company, LLC | exposed-secret exploit malware mozi | SH, HTML, LOG, PY | 197 | 2026-10-26 |
| 209.38.235.232 Germany · DigitalOcean, LLC | exposed-secret malware mozi exploit | JSON, JS, LOG, MD | 118 | 2026-10-25 |
| 104.160.169.204 United States · Sharktech | exposed-secret exploit malware tsunami | SH, LOG, TXT, PY | 170 | 2026-10-24 |
| 13.229.73.36 Singapore · Amazon.com, Inc. | exploit exposed-secret malware mozi | APK, LOG, HTML, TXT | 48 | 2026-10-21 |
| 23.81.35.61 United Kingdom · LEASEWEB UK LIMITED | exposed-secret exploit c2 malware | PY, BAK, GZ, SH | 748 | 2026-10-21 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 89.124.67.72 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit malware mozi | PY, MD, LOG, JSON | 10,428 | 2026-10-01 |
| 122.166.178.204 India · Bharti Airtel Limited | exposed-secret exploit malware sliver | PY, TXT, ENV, GITIGN | 77 | 2026-09-30 |
| 84.46.247.54 France · Contabo GmbH | exposed-secret malware sliver | LOG | 1 | 2026-09-30 |
| 47.96.255.147 China · Hangzhou Alibaba Advertising Co.,Ltd. | malware sliver | SH, SQLITE, BAT, LOG | 11 | 2026-09-30 |
| 128.30.224.82 United States · Massachusetts Institute of Technology | exposed-secret exploit malware sliver | TXT, PY, GITIGN, MD | 24 | 2026-09-30 |
| 204.168.164.231 Finland · Hetzner Online GmbH | exposed-secret exploit malware sliver | PY, TXT, GITIGN, JSON | 12 | 2026-09-30 |
| 176.65.148.59 The Netherlands · Pfcloud UG (haftungsbeschrankt) | exposed-secret exploit malware mozi | SH, MD, LOG, PY | 88 | 2026-09-30 |
| 66.179.31.191 United States · BL Networks | exposed-secret exploit malware mozi | PY, HTML, SH, TXT | 60 | 2026-09-15 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free