Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exploit

HostLabelsFile typesFilesLast seen
91.236.251.34
Ukraine · IP-Connect LLC
exploit exposed-secret tunnelGZ, TXT, BIN, PUB72026-10-21
91.236.251.35
Ukraine · IP-Connect LLC
exploit exposed-secret tunnelGZ, TXT, BIN, PUB72026-10-21
144.76.236.71
Germany · Hetzner Online GmbH
exposed-secret exploit webshellMD, PHP122026-10-21
91.214.17.155
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
91.214.17.154
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
91.214.17.137
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
51.159.105.208
France · Scaleway SAS
exploit exposed-secret c2 malwarePY, LOG, TXT, SH3342026-10-21
91.236.251.14
Ukraine · IP-Connect LLC
exploit exposed-secret tunnelGZ, TXT, BIN, PUB72026-10-21
62.210.199.73
France · Scaleway SAS
exposed-secret webshell malware exploitSH, GZ, PY, TXT172026-10-21
193.29.104.84
France · M247 Europe SRL
malware c2 exploit exposed-secretBAT, PS1, PE452026-10-21
62.210.255.5
France · Scaleway SAS
malware mozi exploitGZ, LOG, JS, TXT542026-10-21
15.188.163.78
France · Amazon.com, Inc.
exposed-secret exploit malware moziLOG, SH, TXT, PY3782026-10-21
157.245.140.34
United States · DigitalOcean, LLC
exposed-secret malware mozi exploitPY, LOG, SH, JSON1,6802026-10-21
151.243.11.242
Germany · LLC VASH KREDIT BANK
exploitLOG, TXT22026-10-21
151.243.11.241
Germany · LLC VASH KREDIT BANK
exploit c2 exposed-secret malwarePY, MD, LOG, TXT4392026-10-21
208.98.38.223
United States · Sharktech
exploit exposed-secretTXT12026-10-21
142.93.57.244
United States · DigitalOcean, LLC
exposed-secret exploit malware c2TXT, JSON, JS, BODY2172026-10-21
2.24.204.250
United States · Hostinger International Limited
exposed-secret exploit malware moziGZ, DB, MD, JSON1362026-10-21
13.229.73.36
Singapore · Amazon.com, Inc.
exploit exposed-secret malware moziAPK, LOG, HTML, TXT482026-10-21
62.238.122.155
The Netherlands · Hetzner Online GmbH
exploit exposed-secret malware moziZIP, TXT, YAML, JSON162026-10-21
43.167.171.106
Singapore · Shenzhen Tencent Computer Systems Company Limited
exploit malware macho-binary tunnelJAVA, MACHO22026-10-21
64.111.92.149
United States · BL Networks
exposed-secret exploit malware moziPY, YAML, TXT, MD1082026-10-21
23.81.35.61
United Kingdom · LEASEWEB UK LIMITED
exposed-secret exploit c2 malwarePY, BAK, GZ, SH7482026-10-21
8.217.24.92
Hong Kong · Alibaba (US) Technology Co., Ltd.
exposed-secret malware mozi webshellPY, HTM, SH, JS6492026-10-21
176.104.108.18
Serbia · NINET Company Nis d.o.o.
malware mozi exploit exposed-secretPE, PS1, HTML, BIN172026-10-21
198.23.209.17
United States · HostPapa
malware webshell exploit exposed-secretELF, TXT, SH, MACHO1352026-10-21
157.230.117.70
Germany · DigitalOcean, LLC
exploit exposed-secret malware moziPY, MD, JSON, CFG792026-10-21
148.116.90.65
Canada · Oracle Corporation
exposed-secret malware mozi exploitLOG, PY, PYC, BAK292026-10-21
167.233.243.9
Germany · Hetzner Online GmbH
exposed-secret exploit c2 malwareSH, PY, JSON, RS1052026-10-21
198.55.116.60
United States · HostPapa
exposed-secret exploit tunnelPY, SH, SQL, EXAMPL112026-10-21
202.65.11.59
Bangladesh · MGH INFOTECH LTD.
exposed-secret exploit malware moziMD, JS, JSON, PY272026-10-21
198.44.38.209
United States · HostPapa
malware exploit exposed-secret macho-binaryMACHO, JAVA, PY, TOML1342026-10-21
139.162.230.213
United Kingdom · Akamai Technologies, Inc.
exposed-secret malware mozi exploitPHP, HTML, JS, TXT222026-10-21
167.71.128.202
United Kingdom · DigitalOcean, LLC
exploit exposed-secret webshell tunnelPY, GZ, SH, LOG2102026-10-21
52.90.1.165
United States · Amazon.com, Inc.
exposed-secret webshell malware exploitSH, TXT, ELF, KEY292026-10-21
3.92.228.247
United States · Amazon.com, Inc.
webshell exploit exposed-secretPHP, TXT122026-10-21
37.9.62.28
United Kingdom · UK Dedicated Servers Limited
exposed-secret exploitTXT22026-10-21
2.26.51.20
Germany · PLAY2GO INTERNATIONAL LIMITED
exposed-secret exploit webshell tunnelMD, PS1, SH, PY552026-10-21
2.27.23.151
Sweden · PLAY2GO INTERNATIONAL LIMITED
exploit malware moziLOG, BIN52026-10-21
88.99.208.237
Germany · Hetzner Online GmbH
exploit exposed-secret malware gafgytJAR, ZIP, GZ, TXT2062026-10-21
70.39.95.67
United States · Sharktech
exploit exposed-secretTXT12026-10-21
16.171.12.83
Sweden · Amazon.com, Inc.
malware exploit c2 meterpreterPS1, PE, B64, VBS192026-10-21
82.117.243.163
The Netherlands · Scalaxy B.V.
exploit exposed-secretGROUP12026-10-21
172.67.205.61
United States · Cloudflare, Inc.
exploit exposed-secretGROUP12026-10-21
132.243.221.136
The Netherlands · QWINS LTD
exploit exposed-secretGROUP12026-10-21
104.21.52.233
United States · Cloudflare, Inc.
exploit exposed-secretGROUP12026-10-21
202.51.215.250
Indonesia · PT Jala Lintas Media
exposed-secret exploitTXT42026-10-21
111.223.247.165
South Korea · BGP Network Limited
exposed-secret malware mozi exploitPY, TXT, PEM, LOG312026-10-20
202.61.139.137
Singapore · CTG Server Limited
exposed-secret exploit malware moziPY, LOG, SH, TXT1302026-10-20
82.158.193.146
Ukraine
exploit webshell c2 exposed-secretJS, LOG, PY, SH112026-10-20
← NewerPage 16 of 23Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free