huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
188.68.38.98
Germany · netcup GmbH
exposed-secretTXT, ENV, JS, JSON72026-11-07
117.55.226.237
Australia · MULTACOM CORPORATION
exposed-secret c2 tunnelSH, HTML, LOG, TXT102026-11-07
189.105.68.190
Hong Kong
exploit exposed-secret malware moziPY, LOG, JSONL, TXT132026-11-07
209.38.98.70
The Netherlands · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-07
103.164.55.81
Singapore · Contabo Asia Private Limited
exposed-secretTXT12026-11-07
47.99.157.12
China · Hangzhou Alibaba Advertising Co.,Ltd.
exploit exposed-secret malware webshellPY, SH, PHP, C142026-11-06
157.230.88.27
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-06
164.90.158.217
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-06
187.124.84.80
United States · Hostinger International Limited
exposed-secret exploitTXT22026-11-06
18.139.207.120
Singapore · Amazon.com, Inc.
exposed-secretTXT12026-11-06
202.61.85.39
Hong Kong · ABCDE GROUP COMPANY LIMITED
exposed-secret12026-11-06
172.67.180.56
United States · Cloudflare, Inc.
exposed-secretEU12026-11-06
104.21.35.217
United States · Cloudflare, Inc.
exposed-secretEU12026-11-06
109.237.115.5
Azerbaijan · A2Z Technologies CJSC
exposed-secretPHP, BIN52026-11-06
84.46.244.238
France · Contabo GmbH
exposed-secret exploitTXT22026-11-06
117.36.73.158
China · Chinanet
exposed-secretTXT12026-11-06
112.213.123.38
Hong Kong · CTG Server Limited
exposed-secretTXT, ENV, JSON, PHP72026-11-06
223.223.219.30
Hong Kong · Layerstack Limited
exposed-secretTXT12026-11-06
110.42.215.163
China · Shenzhen Tencent Computer Systems Company Limited
exploit exposed-secret malware moziGO, LOG, PY, PS13172026-11-06
43.167.6.150
Singapore · Shenzhen Tencent Computer Systems Company Limited
exposed-secretSKIN12026-11-06
43.165.4.51
Germany · Shenzhen Tencent Computer Systems Company Limited
exposed-secretENV12026-11-06
20.100.200.213
Norway · Microsoft Corporation
exposed-secretTXT12026-11-06
13.143.161.229
United States
exposed-secretTXT12026-11-06
3.88.167.181
United States · Amazon.com, Inc.
exposed-secretTXT, ENV, JSON, PHP62026-11-06
193.176.84.19
Romania · M247 Europe SRL
exposed-secretTXT12026-11-06
195.200.9.151
United Kingdom · Hostinger International Limited
exposed-secretCYOU, PHP, TECH32026-11-06
208.69.78.116
Canada · GTHost
exposed-secretTXT12026-11-06
195.200.9.136
United Kingdom · Hostinger International Limited
exposed-secretSHOP12026-11-05
89.116.109.170
United Kingdom · Hostinger International Limited
exposed-secretSHOP12026-11-05
89.116.109.214
United Kingdom · Hostinger International Limited
exposed-secretCOM, PHP, TECH32026-11-05
20.106.126.48
United States · Microsoft Corporation
exposed-secretTXT12026-11-05
100.49.241.171
United States · Amazon.com, Inc.
exposed-secretTXT, ENV, JSON, PHP1142026-11-05
185.28.119.18
United Kingdom · BlueVPS OU
exploit exposed-secret webshell malwareMD, PY, SH, LOG1602026-11-05
178.83.45.33
Germany · OVH SAS
coinminer exposed-secret malware tunnelLOG, SH22026-11-05
34.97.152.185
Japan · Google LLC
exposed-secretCOM262026-11-05
212.11.60.204
Taiwan · OCTOPUS WEB SOLUTION INC
exposed-secret malware moziCOM22026-11-05
153.52.255.47
United States · Railway
exposed-secretUA12026-11-05
95.182.90.214
United Arab Emirates · Cloud Software - FZCO
exploit exposed-secretKEY12026-11-05
43.135.35.8
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
malware mozi exposed-secret exploitSH, PY, LOG, JS5822026-11-05
43.159.51.87
Singapore · Shenzhen Tencent Computer Systems Company Limited
webshell exposed-secret exploit tunnelPHP, PHTML, PHP5, TXT942026-11-05
109.238.87.159
United Kingdom · B2 Net Solutions Inc.
exposed-secret malware mozi exploitTXT, SH, BIN, JSON112026-11-05
69.165.74.182
United States · VpsQuan L.L.C.
exposed-secretTXT12026-11-05
161.33.148.80
Japan · Oracle Corporation
exposed-secret malware mozi exploitHDR, SH, TGZ, TXT2942026-11-05
193.124.58.29
Czechia · SmartApe OU
exposed-secret exploitMOBILE, SH72026-11-05
43.161.243.73
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exploit malware exposed-secret moziLOG, PY, MACHO, SH4172026-11-05
217.142.239.53
Japan · Oracle Corporation
exposed-secret exploit malware tunnelBAT, CMD, PE, SH52026-11-05
143.246.202.252
United States
exposed-secret exploit c2 malwarePS1, PY, HTML, PE82026-11-05
154.219.107.7
Hong Kong · cognetcloud INC
exposed-secretTXT12026-11-05
64.93.12.85
United States · GTT Communications Inc.
c2 coinminer exposed-secret malwareLOG, TXT22026-11-05
95.9.233.235
Turkey · Turk Telekomunikasyon Anonim Sirketi
exposed-secretTXT12026-11-05
← NewerPage 10 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free