Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
112
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
138.226.239.24
VU · HomeLine Broadband LLC
exposed-secretTXT22026-11-07
81.94.239.8
Latvia · Sabiedriba ar ierobezotu atbildibu DELSKA Latvia
exposed-secretTXT12026-11-07
165.22.104.177
Singapore · DigitalOcean, LLC
exposed-secretTXT12026-11-07
46.151.182.18
United Kingdom · Ghosty Networks LLC
tunnelJSON12026-11-07
212.86.125.40
The Netherlands · SOLLUTIUM EU Sp z.o.o.
exposed-secretTXT12026-11-07
82.41.237.29
United States · HGC Global Communications Limited
exposed-secretTXT12026-11-07
39.96.220.34
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret tunnelTXT22026-11-07
163.52.135.6
unknown network
exposed-secretTXT12026-11-07
68.66.200.214
United States · A2 Hosting, Inc.
filesCOM12026-11-07
213.136.93.167
France · Contabo GmbH
exposed-secretDE12026-11-07
212.11.60.95
Taiwan · OCTOPUS WEB SOLUTION INC
exposed-secret malware moziCOM, CYOU32026-11-07
31.57.38.70
Canada · 12651980 CANADA INC.
exposed-secret malware pe-binaryPE22026-11-07
172.67.171.241
United States · Cloudflare, Inc.
filesCOM12026-11-07
104.21.88.18
United States · Cloudflare, Inc.
filesCOM12026-11-07
79.99.164.4
France · ADISTA SAS
filesFR12026-11-07
198.12.234.132
United States · GoDaddy.com, LLC
filesIN12026-11-07
104.21.63.77
United States · Cloudflare, Inc.
filesCOM12026-11-07
172.67.170.71
United States · Cloudflare, Inc.
filesCOM12026-11-07
193.187.110.10
Turkey · FAST ZONE IT
exposed-secret c2TXT, ENV, JSON, PHP72026-11-07
172.67.205.92
United States · Cloudflare, Inc.
filesSHOP12026-11-07
35.200.29.56
Japan · Google LLC
filesCOM22026-11-07
172.67.174.175
United States · Cloudflare, Inc.
filesCOM12026-11-07
104.21.88.88
United States · Cloudflare, Inc.
filesCOM12026-11-07
104.21.1.52
United States · Cloudflare, Inc.
exploitCOM12026-11-07
172.67.128.140
United States · Cloudflare, Inc.
exploitCOM12026-11-07
172.238.172.122
United States · Akamai Technologies, Inc.
filesTOP12026-11-07
172.236.104.43
United States · Akamai Technologies, Inc.
filesTOP12026-11-07
172.236.104.157
United States · Akamai Technologies, Inc.
filesTOP12026-11-07
163.52.135.106
unknown network
malware mozi exploit exposed-secretELF, JS, TXT, JSON332026-11-07
163.52.135.90
unknown network
filesPHP12026-11-07
163.52.135.171
unknown network
exposed-secretTXT12026-11-07
163.52.135.130
unknown network
exposed-secretTXT, ENV, JSON52026-11-07
163.52.135.137
unknown network
exposed-secretENV, PHP, TXT32026-11-07
163.52.135.142
unknown network
exposed-secretTXT, ENV, JSON52026-11-07
80.66.72.111
Germany · GLOBAL CONNECTIVITY SOLUTIONS LLP
exposed-secretTXT12026-11-07
104.21.87.239
United States · Cloudflare, Inc.
filesSITE12026-11-07
146.19.213.28
Russia · ALEXHOST SRL
filesJSON12026-11-07
191.44.112.76
Germany · NODE HOST LIMITED
malware elf-binaryELF242026-11-07
146.19.213.84
Russia · ALEXHOST SRL
filesPHP12026-11-07
89.124.101.86
The Netherlands · SERVERS TECH FZCO
exposed-secretTXT12026-11-07
146.19.213.152
Russia · ALEXHOST SRL
filesJSON12026-11-07
38.60.91.186
United States · FASTNET DATA INC
exposed-secret malware mozi exploitSH, PY, LOG, TXT1,0392026-11-07
195.26.246.148
United States · Contabo Inc.
exposed-secret webshell exploit tunnelTXT, SAMPLE, PY, TGZ542026-11-07
70.62.29.162
United States · Charter Communications Inc
exposed-secretENV, JSON, PHP, TXT42026-11-07
61.220.68.215
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretJSON, PHP22026-11-07
192.236.152.232
United States · HostPapa
exploit exposed-secret malware moziPY, TXT, SH, LOG2412026-11-07
198.137.202.133
United States · Mojo Networks
exposed-secret exploitTXT22026-11-07
90.155.92.199
United Kingdom · Andrews & Arnold Ltd
exposed-secret exploitTXT22026-11-07
178.238.156.105
United Kingdom · Andrews & Arnold Ltd
exposed-secret exploitTXT22026-11-07
103.102.131.30
Vietnam · VGP JOINT STOCK COMPANY
exploit exposed-secretTXT, ENV, JSON, PHP102026-11-07
← NewerPage 18 of 120Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free