huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exploit

HostLabelsFile typesFilesLast seen
54.158.237.206
United States · Amazon.com, Inc.
exposed-secret exploit malware moziLOG, JS, ZIP, SH1602026-10-28
103.90.75.37
The Netherlands · CLODO CLOUD SERVICE CO. L.L.C
exploitMD12026-10-28
173.212.248.10
France · Contabo GmbH
exposed-secret exploitTXT22026-10-28
208.98.38.229
United States · Sharktech
exploit exposed-secret tunnelTXT12026-10-28
91.124.130.211
Ukraine · HIVELOCITY, Inc.
exploit exposed-secretTXT32026-10-28
157.85.111.32
Thailand · Siamdata Communication Co.,ltd.
exploit exposed-secretTXT42026-10-28
54.215.75.164
United States · Amazon.com, Inc.
coinminer exploit exposed-secret malwareZIP12026-10-28
52.9.172.225
United States · Amazon.com, Inc.
coinminer exploit exposed-secret malwareZIP12026-10-28
47.201.204.23
United States · Frontier Communications of America, Inc.
exposed-secret exploitTXT, ENV32026-10-28
108.160.134.174
Japan · The Constant Company, LLC
exposed-secret exploitTXT22026-10-28
103.80.88.106
Indonesia · PT Jala Lintas Media
exposed-secret exploitTXT42026-10-28
103.131.61.143
Indonesia · PT. NEWTON CIPTA INFORMATIKA
exposed-secret exploitTXT22026-10-28
5.223.58.162
Singapore · Hetzner Online GmbH
exposed-secret exploitTXT22026-10-28
51.83.43.14
France · OVH SAS
exposed-secret exploitTXT22026-10-28
15.135.74.255
Australia · Amazon.com, Inc.
exposed-secret exploitTXT32026-10-28
222.252.17.130
Vietnam · VNPT Corp
exposed-secret exploitTXT22026-10-28
139.84.241.235
South Africa · The Constant Company, LLC
exposed-secret exploit tunnel forced-lootMD, GZ, JS, JSON1542026-10-28
129.159.19.217
India · Oracle Corporation
exposed-secret exploitTXT22026-10-28
135.125.235.148
Germany · OVH SAS
exposed-secret exploitTXT22026-10-28
20.55.73.183
United States · Microsoft Corporation
exposed-secret exploitTXT22026-10-28
178.62.54.43
United Kingdom · DigitalOcean, LLC
exploit exposed-secretTXT12026-10-28
64.227.111.164
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-28
146.190.136.81
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-28
92.222.193.112
Lithuania · OVH SAS
exposed-secret exploitTXT22026-10-28
209.209.8.8
Canada · Rica Web Services
c2 exploit exposed-secretM3U12026-10-28
3.147.131.118
United States · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-28
142.93.75.113
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-28
87.236.197.66
Czechia · Coolhousing s.r.o.
exposed-secret exploitTXT22026-10-28
109.73.199.99
Russia · JSC "TIMEWEB"
exposed-secret exploitTXT22026-10-28
51.222.140.188
Canada · OVH SAS
exposed-secret exploitTXT22026-10-28
34.236.16.54
United States · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-28
172.236.235.36
United States · Akamai Technologies, Inc.
exposed-secret exploitTXT22026-10-28
167.233.248.192
Germany · Hetzner Online GmbH
exposed-secret exploitTXT22026-10-28
200.198.62.75
Brazil · COMPANHIA DE TECNOLOGIA DA INFORMACAO ESTADO MG
exposed-secret exploitTXT22026-10-28
15.207.130.130
India · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-28
200.0.230.14
Argentina · Telefonica de Argentina
exposed-secret exploitTXT22026-10-28
45.133.74.234
Germany · Florian Kolb
exposed-secret exploitTXT, HTML, JSON, ENV1842026-10-28
35.74.31.145
Japan · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-28
138.197.108.16
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-28
45.77.8.72
Japan · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON72026-10-28
213.171.208.160
United Kingdom · IONOS SE
exposed-secret exploitTXT, ENV, JSON62026-10-28
51.159.98.192
France · Scaleway SAS
exploit exposed-secretTXT, JSON, PHP82026-10-28
60.244.109.20
Taiwan · Asia Pacific Broadband Fixed Lines Co., Ltd.
exposed-secret exploitTXT22026-10-28
155.212.189.29
Russia · Beget LLC
exposed-secret exploitTXT, ENV, JSON72026-10-28
155.212.133.62
Russia · Beget LLC
exposed-secret exploitTXT22026-10-28
167.17.69.200
Canada · GTHost
exploit webshell exposed-secret malwarePY, PHP, ELF, SH272026-10-28
161.104.34.133
Russia · JSC Selectel
exposed-secret exploitTXT22026-10-28
67.21.68.60
United States · Sharktech
exploit exposed-secretTXT12026-10-28
210.65.88.175
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secret exploitTXT22026-10-27
106.116.230.110
China · Chinanet
exposed-secret exploitTXT32026-10-27
← NewerPage 12 of 23Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free