Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
62.212.70.235
The Netherlands · LeaseWeb Netherlands B.V.
exposed-secret webshellTXT22026-11-04
177.3.43.43
United States · Hong Kong Communications International Co., Limited
malware c2 exposed-secret webshellPE, PY, PHP, SH242026-11-04
64.118.151.186
Hong Kong · Eons Data Communications Limited
exposed-secret exploitTXT22026-11-04
172.105.156.56
United States · Akamai Technologies, Inc.
exposed-secret malware mozi exploitPHP, TXT42026-11-04
172.105.156.217
United States · Akamai Technologies, Inc.
exposed-secretTXT12026-11-04
45.90.148.146
The Netherlands · SERVERNET INTERNET LIMITED
exposed-secretTXT12026-11-04
172.105.156.82
United States · Akamai Technologies, Inc.
exposed-secretTXT12026-11-04
172.105.156.109
United States · Akamai Technologies, Inc.
exposed-secret malware mozi exploitPHP, TXT42026-11-04
172.105.156.161
United States · Akamai Technologies, Inc.
exposed-secret malware mozi exploitPHP, TXT42026-11-04
172.105.156.183
United States · Akamai Technologies, Inc.
exposed-secretTXT22026-11-04
172.105.156.156
United States · Akamai Technologies, Inc.
exposed-secretTXT32026-11-04
172.105.156.160
United States · Akamai Technologies, Inc.
exposed-secret exploitTXT32026-11-04
87.199.201.89
The Netherlands · SERVERS TECH FZCO
exposed-secretTXT12026-11-04
100.51.162.79
United States · Amazon.com, Inc.
exposed-secretTXT12026-11-03
175.41.25.250
Hong Kong · N963
exposed-secretTXT, BIN, ENV, JSON92026-11-03
64.20.61.134
United States · Interserver, Inc
exposed-secret malware mozi tunnelJSON, JS, TXT, HTML382026-11-03
38.76.202.246
United States · cognetcloud INC
exposed-secret forced-lootTXT12026-11-03
52.128.244.66
Hong Kong · Netsec Limited
exposed-secretTXT12026-11-03
156.239.13.148
Hong Kong · CORENET CLOUD SDN. BHD.
exposed-secretTXT12026-11-03
104.223.41.172
United States · HostPapa
exposed-secretTXT22026-11-03
103.154.62.40
Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
exposed-secret exploitTXT22026-11-03
111.193.236.119
China · China Unicom Beijing Province Network
exposed-secretTXT12026-11-03
27.102.137.57
South Korea · DAOU TECHNOLOGY
c2 exploit exposed-secretTXT22026-11-03
39.99.242.80
China · Hangzhou Alibaba Advertising Co.,Ltd.
exploit exposed-secret malware moziPY, TXT, SH, MD1282026-11-03
39.96.205.8
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploit webshell malwareGO, LOG, PY, TXT5762026-11-03
159.223.110.159
United States · DigitalOcean, LLC
exposed-secretTXT22026-11-03
198.44.116.69
United States · HostPapa
exposed-secret malware mozi exploitPY, SH, JSON, LOG7332026-11-03
47.112.221.124
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret malware exploit webshellPY, JSON, LOG, BAT1412026-11-03
198.23.145.14
United States · HostPapa
exposed-secret exploit c2 webshellSH, PY, SQL, MD7922026-11-03
39.100.86.251
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploit malware tunnelSH, PY, XML, JAR1072026-11-03
198.46.252.28
United States · HostPapa
exposed-secret exploit malware moziGO, TXT, SH, GZ892026-11-03
107.172.172.195
United States · HostPapa
exposed-secretTXT12026-11-03
8.138.0.225
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
c2 exposed-secretHTML72026-11-03
45.225.135.92
Panama · RACK SPHERE HOSTING S.A.
malware exposed-secret exploit meterpreterPE, TXT, BIN, JAR72026-11-03
45.225.135.75
Panama · RACK SPHERE HOSTING S.A.
exposed-secretTXT12026-11-03
45.79.92.244
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-11-03
45.7.229.121
Chile · ZAM LTDA.
exposed-secret exploitTXT, ENV, JSON122026-11-03
108.165.12.166
United States · Snaju Development
exposed-secret exploitTXT, ENV, JSON122026-11-03
166.0.192.152
United States · Snaju Development
exposed-secret exploitTXT, ENV, JSON122026-11-03
107.161.24.123
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-11-03
61.155.55.138
China · Chinanet
exposed-secretTXT12026-11-03
192.227.173.9
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
172.245.181.62
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
74.208.64.89
United States · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-11-03
107.172.222.26
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
168.235.88.66
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-11-03
82.156.227.196
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-11-03
134.122.140.63
Japan · CTG Server Limited
exposed-secretTXT, ENV, JSON, PHP62026-11-03
181.85.173.171
Argentina · Telecom Argentina S.A.
exposed-secretTXT12026-11-03
216.198.79.195
United States · Amazon.com, Inc.
exposed-secret exploitAPP202026-11-03
← NewerPage 15 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free