huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
85.133.132.47
Iran · Sepanta Communication Development Co. Ltd
exposed-secretTXT12026-11-05
81.234.88.7
Sweden · Telia Company AB
exposed-secretTXT22026-11-05
78.135.111.5
Turkey · Yigit Hosting Bilisim E-Ticaret Gida Sanayi Ticaret Limited Sirketi
exposed-secretTXT12026-11-05
62.60.232.149
Hong Kong · GLOBAL CONNECTIVITY SOLUTIONS LLP
exposed-secretTXT12026-11-05
66.33.22.251
United States · Railway
exposed-secretTXT12026-11-05
66.33.22.246
United States · Railway
exposed-secretTXT12026-11-05
66.33.22.238
United States · Railway
exposed-secretTXT12026-11-05
66.33.22.226
United States · Railway
exposed-secretTXT12026-11-05
64.90.7.157
Hong Kong · NetLab Global
exposed-secretTXT, BIN, PHP42026-11-05
60.2.114.98
China · CHINA UNICOM China169 Backbone
exposed-secretTXT12026-11-05
47.120.48.162
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-11-05
41.153.30.124
Egypt · ETISALAT MISR
exposed-secretJSON12026-11-05
41.133.143.229
South Africa · Dimension Data
exposed-secretJSON12026-11-05
221.162.46.22
South Korea · Korea Telecom
exposed-secretTXT12026-11-05
221.162.218.85
South Korea · Korea Telecom
exposed-secretENV12026-11-05
219.139.83.165
China · Chinanet
exposed-secretPHP, TXT22026-11-05
212.192.41.80
Russia · LLC Digital Dialogue-Nets
exposed-secretJSON, PHP22026-11-05
208.77.246.90
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.91
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.89
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.87
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.4
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.88
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.36
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.3
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.1
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.43
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.42
United States · Railway
exposed-secretTXT12026-11-05
208.77.246.44
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.140
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.14
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.139
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.137
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.132
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.134
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.138
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.121
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.130
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.131
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.129
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.120
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.122
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.136
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.13
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.133
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.135
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.4
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.12
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.11
United States · Railway
exposed-secretTXT12026-11-05
208.77.244.119
United States · Railway
exposed-secretTXT12026-11-05
← NewerPage 11 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free