huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
112
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exploit

HostLabelsFile typesFilesLast seen
167.172.177.125
Germany · DigitalOcean, LLC
exposed-secret exploitTXT, ENV32026-10-06
183.64.171.136
China · Chinanet
exposed-secret exploitTXT22026-10-06
68.183.87.132
India · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-06
201.6.100.191
Brazil · Claro NXT Telecomunicacoes Ltda
exposed-secret exploitTXT32026-10-06
77.90.158.103
Germany · Sculk Ltd.
exposed-secret exploitTXT22026-10-06
173.212.221.173
France · Contabo GmbH
exposed-secret exploitTXT22026-10-06
200.105.156.165
Bolivia · AXS Bolivia S. A.
exposed-secret exploitTXT22026-10-06
185.35.202.222
Norway · Blix Solutions AS
exposed-secret exploitTXT22026-10-06
195.178.110.48
AD · TECHOFF SRV LIMITED
coinminer malware exploit exposed-secretTXT, ELF, GZ, JSON82026-10-06
206.189.112.134
United Kingdom · DigitalOcean, LLC
exposed-secret exploitTXT, ENV32026-10-06
103.163.246.138
Bangladesh · Optimus Technologies
exposed-secret exploit tunnelJS, MD, TXT, BAK2112026-10-06
66.29.143.201
United States · Namecheap, Inc.
exposed-secret exploitTXT22026-10-06
158.220.105.179
France · Contabo GmbH
coinminer malware exposed-secret c2SH, GZ, JS, TGZ132026-10-06
64.226.88.238
Germany · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-06
45.79.120.189
India · Akamai Technologies, Inc.
exploit exposed-secretTXT, ENV32026-10-06
77.83.39.109
The Netherlands · KPROHOST LLC
exploit exposed-secret malware moziTXT12026-10-06
167.71.81.250
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-06
8.222.241.159
Singapore · Alibaba (US) Technology Co., Ltd.
exposed-secret exploitTXT22026-10-06
103.121.94.25
Hong Kong · cognetcloud INC
exploit malware elf-binaryELF, LOG, PS1, PY42026-10-06
191.252.195.8
Brazil · Locaweb Servicos de Internet S/A
exposed-secret exploitTXT22026-10-06
16.171.14.222
Sweden · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-06
45.138.159.124
Uzbekistan · BEST INTERNET SOLUTION XK
exposed-secret exploitTXT22026-10-06
107.189.1.175
United States · FranTech Solutions
exposed-secret exploitTXT22026-10-06
20.41.105.150
South Korea · Microsoft Corporation
exposed-secret exploitTXT22026-10-06
149.129.255.120
Singapore · Alibaba (US) Technology Co., Ltd.
exposed-secret exploitTXT22026-10-06
179.49.190.108
Brazil · STREET RECIFE SERVICO DE COMUNICACAO LTDA
exposed-secret exploitTXT22026-10-06
192.169.136.182
United States · GoDaddy.com, LLC
exposed-secret exploitTXT22026-10-06
185.125.171.133
Norway · Gigahost AS
exposed-secret exploitTXT22026-10-06
110.93.250.7
Pakistan · TRANSWORLD ASSOCIATES (PVT) LIMITED
exposed-secret exploitTXT22026-10-06
213.136.93.164
France · Contabo GmbH
exploit exposed-secret tunnelJS, OLD32026-10-06
13.140.130.141
France · Contabo GmbH
exposed-secret exploitTXT22026-10-06
190.102.40.194
Brazil · Servicos de Infraestrutura e Datacenter
exploitTXT, PHP32026-10-05
20.150.85.193
Japan · Microsoft Corporation
exploit12026-10-05
34.254.202.253
Ireland · Amazon.com, Inc.
malware coinminer exposed-secret exploitLOG, TXT, PY, ELF262026-10-05
172.67.212.198
United States · Cloudflare, Inc.
exploitCOM12026-10-05
104.21.61.183
United States · Cloudflare, Inc.
exploitCOM12026-10-05
107.172.209.126
United States · HostPapa
exploit malware pe-binaryTXT, JPG, PE, ZIP52026-10-04
95.182.88.43
United Arab Emirates · Cloud Software - FZCO
exposed-secret exploit tunnelSH, KEY, PEM, COMPLE2932026-10-04
185.11.72.171
Russia · JSC Selectel
exploit malware mozi tunnelLOG, PY, SH, JSON112026-10-04
172.86.118.111
United States · RouterHosting LLC
exposed-secret exploit c2 malwarePY, LOG, TXT, PHP382026-10-04
51.144.45.141
The Netherlands · Microsoft Corporation
malware exploit exposed-secret webshellPS1, JAR, PE, ZIP222026-10-03
128.241.235.196
United States · Tianfeng (Hong Kong) Communications Limited
exploitJAR, XML22026-10-03
5.188.230.16
United States · G-Core Labs S.A.
exploit exposed-secretGZ, LIFE, SH42026-10-03
43.163.124.78
Singapore · Shenzhen Tencent Computer Systems Company Limited
exploit exposed-secret malware meterpreterTXT, ELF, MD, PY812026-10-03
209.99.188.155
Switzerland · SKN Subnet & Telecom Ltd
exposed-secret malware mozi exploitTXT, SH, PY, JSON3472026-10-02
77.68.54.215
United Kingdom · IONOS SE
exposed-secret exploitTXT, ENV, JSON102026-10-02
107.150.45.138
United States · Nocix, LLC
exploitCOM12026-10-02
89.43.66.139
Turkey · Netinternet Bilisim Teknolojileri AS
exploitNET12026-10-02
103.212.220.92
South Korea · Hostcenter
exploitORG12026-10-02
81.7.11.10
Germany · ISPpro Internet KG
exploitNET12026-10-02
← NewerPage 20 of 23Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free