Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
107.151.238.8
United States · Zenlayer Inc
exposed-secret forced-lootTXT12026-11-03
45.55.108.68
United States · DigitalOcean, LLC
exposed-secret forced-lootTXT12026-11-03
104.168.111.208
United States · HostPapa
malware mozi exploit exposed-secretPY, LOG, SH, PYC3522026-11-03
178.128.89.39
Singapore · DigitalOcean, LLC
exploit exposed-secret c2 tunnelHTML, LOG, ZIP, JS342026-11-03
185.28.119.174
United Kingdom · BlueVPS OU
exposed-secretTXT12026-11-03
185.28.119.106
United Kingdom · BlueVPS OU
exposed-secret exploit c2 malwareLOG, JSON, MD, GITIGN3982026-11-03
47.74.9.184
United States · Alibaba (US) Technology Co., Ltd.
exposed-secretTXT12026-11-03
185.136.207.238
Azerbaijan · A2Z Technologies CJSC
exposed-secretTXT12026-11-03
172.105.156.153
United States · Akamai Technologies, Inc.
exposed-secret exploit malware moziTXT, JSON, SH, MD1632026-11-03
198.251.85.166
United States · RouterHosting LLC
exposed-secretTXT22026-11-03
20.86.62.190
The Netherlands · Microsoft Corporation
exposed-secretTXT, ENV, JSON, PHP92026-11-03
45.79.0.122
United States · Akamai Technologies, Inc.
exposed-secretENV12026-11-03
94.130.22.247
Germany · Hetzner Online GmbH
exposed-secretTXT, ENV, JSON, PHP72026-11-03
94.130.22.221
Germany · Hetzner Online GmbH
exposed-secretTXT, ENV, JSON, PHP72026-11-03
94.130.22.230
Germany · Hetzner Online GmbH
exposed-secretTXT, ENV, PHP52026-11-03
94.130.22.238
Germany · Hetzner Online GmbH
exposed-secretTXT12026-11-03
94.130.22.189
Germany · Hetzner Online GmbH
exploit exposed-secretTXT, JSON, PHP, ENV612026-11-03
89.252.130.60
Turkey · Netinternet Bilisim Teknolojileri AS
exposed-secretHTML12026-11-02
103.112.98.105
Hong Kong · AROSSCLOUD INC.
exposed-secret ioc-matchTOP42026-11-02
192.166.82.213
United Kingdom · CloudBlast LLC
exposed-secretPAGE12026-11-02
104.21.70.103
United States · Cloudflare, Inc.
exposed-secretORG12026-11-02
172.67.222.217
United States · Cloudflare, Inc.
exposed-secretORG12026-11-02
194.233.67.247
Singapore · Contabo Asia Private Limited
exploit exposed-secret malware moziTXT, PHP, HTML, PY3542026-11-02
173.212.244.40
France · Contabo GmbH
exposed-secret exploit webshell c2PY, HTML, MD, PHP5232026-11-02
103.179.27.226
Indonesia · PT Primadona Media Digitalindo
exposed-secret exploitTXT22026-11-02
203.194.115.12
Indonesia · Rumahweb
exposed-secret exploit malware webshellPY, LOG, PHP, JAR3602026-11-02
83.172.138.182
Germany · M247 Europe SRL
exposed-secret malware mozi exploitPY, TXT, APK, HTML3012026-11-02
147.93.159.0
Singapore · Contabo Asia Private Limited
exposed-secret exploit webshell malwarePY, PHP, SH, C862026-11-02
169.58.233.110
United States · TerraTransit AG
exploit exposed-secret malware moziLOG, JSON, MD, SH1252026-11-02
91.245.255.72
Hong Kong · M247 Europe SRL
exposed-secretTXT12026-11-02
8.215.192.157
Singapore · Alibaba (US) Technology Co., Ltd.
exploit exposed-secret tunnelSAMPLE, JSON, TXT, MJS372026-11-02
157.230.117.206
Germany · DigitalOcean, LLC
exposed-secretTXT12026-11-02
104.168.251.17
United States · HostPapa
exposed-secretJSON12026-11-02
100.50.225.95
United States · Amazon.com, Inc.
exposed-secretTXT12026-11-02
100.61.243.172
United States · Amazon.com, Inc.
exposed-secretTXT12026-11-02
104.131.161.161
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-02
2.59.133.151
Germany · dataforest GmbH
exposed-secret forced-lootTXT32026-11-02
43.165.173.190
Japan · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-11-02
45.79.239.204
Australia · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-11-02
178.95.25.69
Ukraine · The Constant Company, LLC
exposed-secret forced-lootTXT12026-11-02
45.79.14.38
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-11-02
45.79.72.160
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-11-02
45.55.101.18
United States · DigitalOcean, LLC
exposed-secret exploitTXT, ENV, JSON82026-11-02
64.29.17.3
United States · Amazon.com, Inc.
exposed-secretAPP162026-11-02
216.198.79.3
United States · Amazon.com, Inc.
exposed-secretAPP162026-11-02
92.246.129.98
Brazil · ITGLOBAL.COM NL B.V.
exposed-secret exploit malware moziJS, JSON, PY, SH3472026-11-02
52.41.155.253
United States · Amazon.com, Inc.
exposed-secretTXT12026-11-02
78.111.90.130
Canada · ITGLOBAL.COM NL B.V.
exposed-secret exploit malware moziTXT, SH, JSON, LOG2432026-11-02
45.133.18.50
The Netherlands · ITGLOBAL.COM NL B.V.
exposed-secret exploit mirror tunnelCMD, JSON, LOG, MD632026-11-02
45.133.17.74
The Netherlands · ITGLOBAL.COM NL B.V.
exposed-secretPY, LOG42026-11-02
← NewerPage 17 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free