huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,971
hosts
106,553
files
129
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3001malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
207.244.253.155
United States · Contabo Inc.
exposed-secretTXT12026-10-28
51.159.98.192
France · Scaleway SAS
exploit exposed-secretTXT, JSON, PHP82026-10-28
60.244.109.20
Taiwan · Asia Pacific Broadband Fixed Lines Co., Ltd.
exposed-secret exploitTXT22026-10-28
162.19.28.217
France · OVH SAS
exposed-secretTXT12026-10-28
188.42.128.220
The Netherlands · Servers.com, Inc.
exposed-secretTXT12026-10-28
142.91.158.156
The Netherlands · Servers.com, Inc.
exposed-secretTXT12026-10-28
192.144.228.140
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.144.182
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.214.35
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.174.178
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.146.237
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.140.107
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.158.224
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.230.51
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.181.227
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.228.124
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.202.232
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, JSON, ENV82026-10-28
192.144.233.216
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.212.95
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.192.236
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.137.214
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.187.75
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.129.128
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
91.90.216.104
Uzbekistan · NETKA TELEKOM LLC
exposed-secretTXT, ENV, PHP52026-10-28
54.254.189.170
Singapore · Amazon.com, Inc.
exposed-secretTXT12026-10-28
192.144.136.113
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
54.194.162.61
Ireland · Amazon.com, Inc.
exposed-secretTXT12026-10-28
155.212.189.29
Russia · Beget LLC
exposed-secret exploitTXT, ENV, JSON72026-10-28
155.212.133.62
Russia · Beget LLC
exposed-secret exploitTXT22026-10-28
155.212.133.101
Russia · Beget LLC
exposed-secretTXT12026-10-28
111.88.124.137
Russia · JSC Selectel
exposed-secretTXT22026-10-28
134.0.118.98
Russia · "Domain names registrar REG.RU", Ltd
exposed-secretTXT22026-10-28
109.69.20.50
Russia · Beget LLC
exposed-secretENV12026-10-28
94.159.18.14
Russia · "NetCom-R" LLC
exposed-secretTXT12026-10-28
95.31.43.145
Russia · PJSC "Vimpelcom"
exposed-secretTXT12026-10-28
167.17.69.200
Canada · GTHost
exploit webshell exposed-secret malwarePY, PHP, ELF, SH272026-10-28
161.104.34.133
Russia · JSC Selectel
exposed-secret exploitTXT22026-10-28
155.212.163.124
The Netherlands · JSC IOT
exposed-secretTXT12026-10-28
67.21.68.60
United States · Sharktech
exploit exposed-secretTXT12026-10-28
138.201.188.166
Germany · Hetzner Online GmbH
exposed-secretTXT12026-10-28
43.242.97.17
China · Shanghai Rugu Info&Tech Co.,Ltd.
exposed-secretTXT, ENV62026-10-28
185.220.223.43
Latvia · Versija SIA
exposed-secretTXT12026-10-28
210.71.231.62
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretTXT, PHP, ENV, JSON102026-10-28
210.65.88.246
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretTXT12026-10-28
210.65.88.175
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secret exploitTXT22026-10-27
221.226.50.22
China · Chinanet
exposed-secretTXT32026-10-27
106.116.230.110
China · Chinanet
exposed-secret exploitTXT32026-10-27
101.37.164.18
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-27
101.89.149.227
China · China Telecom (Group)
exposed-secret exploitTXT22026-10-27
113.128.224.146
China · Chinanet
exposed-secretTXT12026-10-27
← NewerPage 30 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free