huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
162.220.234.167
United States · Railway
exposed-secretTXT12026-11-05
162.220.234.168
United States · Railway
exposed-secretTXT12026-11-05
162.220.234.166
United States · Railway
exposed-secretTXT12026-11-05
162.220.234.13
United States · Railway
exposed-secretTXT12026-11-05
154.12.105.217
HN · CA NETWORKS S.A. DE C.V.
exposed-secretTXT12026-11-05
152.53.132.95
Germany · netcup GmbH
exposed-secretTXT12026-11-05
145.223.140.51
Singapore · Byteplus Pte. Ltd.
exploit exposed-secretTXT, ENV, JSON, PHP92026-11-05
136.92.32.58
United States · Google LLC
exposed-secretTXT12026-11-05
136.57.229.66
United States · Google Fiber Inc.
exposed-secretTXT12026-11-05
124.225.69.188
China · Chinanet
exposed-secretTXT12026-11-05
124.89.83.31
China · CHINA UNICOM China169 Backbone
exposed-secretTXT, ENV, JSON42026-11-05
117.50.80.107
China · China Unicom Beijing Province Network
exposed-secretBIN, LOG, TAR, TXT52026-11-05
121.160.102.68
South Korea · Korea Telecom
exposed-secretTXT12026-11-05
118.107.139.224
Pakistan · Special Communication Organization
exposed-secretPHP, CSV, MD, TXT52026-11-05
117.72.109.89
China · China Telecom
exposed-secretTXT, ENV, JSON, PHP62026-11-05
117.72.186.146
China · China Telecom
exposed-secretTXT, ENV, JSON, PHP62026-11-05
116.131.154.154
China · CHINA UNICOM China169 Backbone
exposed-secretTXT12026-11-05
104.233.150.138
United States · PEG TECH INC
exposed-secret exploit webshell tunnelSH, TXT, PY, CMD462026-11-05
106.14.175.235
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-11-05
106.225.235.90
China · CHINANET Jiangx province IDC network
exposed-secretTXT12026-11-05
109.105.18.120
Hungary · Naracom Kft.
exposed-secretTXT12026-11-05
103.106.114.71
Indonesia · PT. Sumatra Multimedia Solusi
exposed-secretJSON12026-11-05
103.57.209.16
Vietnam · NhanHoa Software company
exposed-secretTXT12026-11-05
103.179.95.103
India · WEBYNE DATA CENTRE PRIVATE LIMITED
exposed-secretTXT12026-11-05
103.228.144.95
India · Gujarat Telelink Pvt Ltd
exposed-secretTXT12026-11-05
101.200.242.201
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-11-05
101.37.87.23
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-11-05
47.120.70.161
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-11-05
51.79.161.200
Canada · OVH SAS
exposed-secretTXT12026-11-05
5.181.86.248
Ukraine · Internet Solutions & Innovations LTD.
exposed-secretTXT32026-11-05
5.181.86.249
Ukraine · Internet Solutions & Innovations LTD.
exposed-secretTXT32026-11-05
39.107.85.83
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretENV, JSON, PHP, TXT42026-11-05
143.198.27.227
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-05
139.60.160.50
United States · HOSTKEY
exposed-secret exploitJSON, TXT52026-11-05
8.209.101.205
Singapore · Alibaba (US) Technology Co., Ltd.
exposed-secret exploitTXT22026-11-05
170.106.172.5
United States · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-11-05
23.149.28.221
United States · NetLab Global
exposed-secretTXT12026-11-05
168.144.251.199
United States
exploit exposed-secret webshell malwarePHP, HTML, LOG, PY1462026-11-05
154.21.206.29
United States · Cogent Communications
exposed-secretREVOKE, YAML22026-11-05
23.149.28.115
United States · NetLab Global
exposed-secretTXT12026-11-05
23.149.28.60
United States · NetLab Global
exposed-secretTXT12026-11-05
94.130.22.61
Germany · Hetzner Online GmbH
exposed-secret exploit malware moziPY, EML, JSON, TXT1,2092026-11-05
80.155.54.228
Germany · Deutsche Telekom AG
exposed-secretJSON, PHP22026-11-05
23.27.25.75
United States · Evoxt Sdn. Bhd.
exposed-secret malware mozi exploitPY, SQL, JSON, LOG1292026-11-05
51.83.71.4
France · OVH SAS
exposed-secret exploitYML, GZ, JAR52026-11-04
45.88.173.73
The Netherlands · CLODO CLOUD SERVICE CO. L.L.C
exposed-secretTXT12026-11-04
163.44.120.84
Japan · GMO Internet,Inc
exposed-secretPHP, PY62026-11-04
104.168.166.81
United States · HostPapa
exposed-secretJSON12026-11-04
100.51.79.96
United States · Amazon.com, Inc.
exposed-secretTXT, ENV, JSON, PHP62026-11-04
104.131.134.161
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-04
← NewerPage 13 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free