Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,965
hosts
106,472
files
103
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2996malware 1224exploit 1134mozi 921c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
8.210.29.71
Hong Kong · Alibaba (US) Technology Co., Ltd.
exposed-secretENV12026-11-12
144.91.73.196
France · Contabo GmbH
exposed-secret exploitTXT, PHP, ENV, JSON522026-11-12
144.91.73.26
France · Contabo GmbH
exposed-secretTXT22026-11-12
144.91.73.201
France · Contabo GmbH
exposed-secretTXT12026-11-12
67.219.98.34
Australia · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON122026-11-12
216.238.101.165
Brazil · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON122026-11-12
142.93.14.200
United States · DigitalOcean, LLC
exposed-secret exploitTXT, ENV, JSON62026-11-12
128.199.193.92
Singapore · DigitalOcean, LLC
exposed-secret exploitTXT, ENV, JSON62026-11-12
51.81.220.78
United States · OVH SAS
exposed-secret exploitTXT, ENV, JSON62026-11-12
143.110.148.161
United States · DigitalOcean, LLC
exposed-secret exploitTXT, ENV, JSON62026-11-12
144.91.73.103
France · Contabo GmbH
exposed-secret malware mozi exploitPY, SH, TXT, PS15632026-11-12
57.129.69.177
Germany · OVH SAS
exposed-secretTXT12026-11-12
194.163.169.196
France · Contabo GmbH
exposed-secretTXT12026-11-12
3.65.213.192
Germany · Amazon.com, Inc.
exposed-secretTXT12026-11-12
65.109.15.18
Finland · Hetzner Online GmbH
exposed-secretTXT, ENV32026-11-12
45.32.114.54
Singapore · The Constant Company, LLC
exposed-secret exploitENV, TXT, JSON, PHP102026-11-12
143.244.189.149
United States · DigitalOcean, LLC
exposed-secretTXT12026-11-12
51.83.237.43
Poland · OVH SAS
malware mozi exposed-secretTXT, ENV, JSON, PHP182026-11-12
159.69.101.222
Germany · Hetzner Online GmbH
malware mozi exposed-secretTXT, ENV, JSON, PHP92026-11-12
51.75.146.212
Germany · OVH SAS
malware mozi exposed-secretTXT, ENV, JSON, PHP182026-11-12
116.202.28.215
Germany · Hetzner Online GmbH
malware mozi exposed-secretTXT, ENV, JSON, PHP182026-11-12
172.104.185.244
Singapore · Akamai Technologies, Inc.
exposed-secret malware moziTXT12026-11-12
174.138.48.6
United States · DigitalOcean, LLC
malware mozi exposed-secretTXT, ENV, JSON, PHP92026-11-12
159.69.76.99
Germany · Hetzner Online GmbH
malware mozi exposed-secretTXT, ENV, JSON, PHP92026-11-12
209.38.121.192
India · DigitalOcean, LLC
exposed-secretTXT12026-11-12
45.56.120.49
United States · Akamai Technologies, Inc.
malware mozi exposed-secretTXT, ENV, JSON, PHP92026-11-12
159.69.216.240
Germany · Hetzner Online GmbH
exposed-secretTXT12026-11-12
91.134.102.116
France · OVH SAS
malware mozi exposed-secretTXT, ENV, JSON, PHP92026-11-12
206.189.72.122
United States · DigitalOcean, LLC
exposed-secretENV12026-11-12
45.32.38.80
Japan · The Constant Company, LLC
exposed-secretTXT12026-11-12
148.113.239.96
Canada · OVH SAS
exposed-secretTXT22026-11-12
2.28.106.56
Germany · Hetzner Online GmbH
exposed-secretTXT12026-11-12
65.108.218.167
Finland · Hetzner Online GmbH
exposed-secretTXT12026-11-12
37.120.178.130
Germany · netcup GmbH
exposed-secretTXT12026-11-12
85.120.53.131
Romania · Institutul National de Cercetare-Dezvoltare in informatica - ICI Bucuresti
exposed-secretTXT12026-11-12
13.184.160.159
United States
exposed-secret exploit malware moziPY, SH, LOG, GO1,0292026-11-12
168.144.111.89
Singapore · DigitalOcean, LLC
exposed-secret exploit webshell malwareTXT, HTML, PHP, SH3282026-11-12
144.91.73.218
France · Contabo GmbH
exposed-secretTXT, ENV, JSON, PHP92026-11-12
8.210.103.219
Hong Kong · Alibaba (US) Technology Co., Ltd.
exposed-secret exploitTXT22026-11-12
20.26.156.215
United Kingdom · Microsoft Corporation
exposed-secret exploit malware pe-binaryTXT, BAT, PE, TOML332026-11-12
115.159.204.46
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secret exploit malware gafgytPY, LOG, JSON, MD1672026-11-12
206.189.167.156
United States · DigitalOcean, LLC
malware mozi exposed-secret exploitPY, SH, MD, TXT3262026-11-12
217.160.132.82
Spain · IONOS SE
exposed-secret exploit malware moziPY, SH, PHP, TXT9112026-11-12
51.210.38.62
France · OVH SAS
exploit exposed-secretTXT, ENV, JSON, PHP92026-11-12
216.198.79.1
United States · Amazon.com, Inc.
exploit exposed-secret tunnelJS, ONLINE, CHAT, COM132026-11-11
185.98.186.254
Germany · uvensys GmbH
exposed-secretTXT12026-11-11
168.107.49.6
South Korea · Oracle Corporation
exposed-secretTXT12026-11-11
178.62.250.64
The Netherlands · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-11
45.198.224.144
Seychelles · VPSVAULT.HOST LTD
exposed-secretTXT12026-11-11
144.91.73.156
France · Contabo GmbH
exposed-secretTXT12026-11-11
← NewerPage 2 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free