huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,971
hosts
106,553
files
129
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3001malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
65.75.210.173
United States · Spartan Host Ltd
exposed-secretTXT12026-10-27
65.75.210.168
United States · Spartan Host Ltd
exposed-secretTXT12026-10-27
38.76.199.60
United States · cognetcloud INC
exposed-secretENV12026-10-27
70.39.197.229
United States · NetLab Global
exposed-secretTXT12026-10-27
106.52.174.151
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secret exploitTXT, JSON32026-10-27
101.33.238.141
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretENV12026-10-27
38.55.133.230
United States · Uscloud Inc
exposed-secretTXT12026-10-27
209.205.228.18
United States · BitaByte LLC
exposed-secretTXT12026-10-27
124.123.76.210
India · Atria Convergence Technologies Pvt. Ltd.,
exposed-secretTXT22026-10-27
85.215.226.225
Germany · IONOS SE
exposed-secretZIP, PHP82026-10-27
159.223.198.83
United States · DigitalOcean, LLC
exposed-secretPHP, TXT22026-10-27
45.154.255.98
Sweden · KeFF Networks Ltd
exposed-secret malware pe-binaryGZ, BZ2, TXT, PE802026-10-27
45.154.255.51
Sweden · KeFF Networks Ltd
exposed-secretTXT12026-10-27
102.134.35.141
Taiwan · Turing Group Limited
exposed-secretTXT22026-10-27
45.194.66.165
Poland · ExpressHost Ltd
exposed-secretCC12026-10-27
191.217.250.227
United States
malware c2 coinminer exploitPHP, GZ, BIN, SH332026-10-27
63.133.254.188
United States · DQE Communications LLC
exposed-secretTXT22026-10-27
177.52.110.176
Brazil · XTURBO PROVEDOR DE INTERNET LTDA - EPP
exposed-secret exploitTXT22026-10-27
202.181.147.249
Hong Kong · IXTech Limited
exposed-secretTXT22026-10-27
210.87.125.235
Indonesia · CV Brawijaya Giga Network
exposed-secretTXT22026-10-27
13.239.40.119
Australia · Amazon.com, Inc.
exploit malware mozi exposed-secretJS, MD, JSON, EDITOR342026-10-27
167.71.19.245
United States · DigitalOcean, LLC
exposed-secret exploit malware moziGO, TXT, BAT, LOG442026-10-27
85.121.50.9
Romania · M247 Europe SRL
exposed-secret exploitTXT, ENV, JSON112026-10-27
151.158.0.240
Hong Kong · Evoxt Sdn. Bhd.
exposed-secret exploitTXT, ENV, JSON122026-10-27
104.21.87.109
United States · Cloudflare, Inc.
exposed-secretCYOU12026-10-27
108.165.121.127
United States · Snaju Development
exposed-secret exploitTXT, ENV, JSON122026-10-27
107.191.102.241
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-10-27
185.106.102.5
Cyprus · CLOUDLAYER8 LIMITED
exposed-secret exploitTXT, ENV, JSON122026-10-27
171.22.174.161
Germany · MASSIVEGRID LTD
exposed-secret exploitTXT, ENV, JSON112026-10-27
194.5.98.34
Norway · WebHorizon Internet Services
exposed-secret exploitTXT, ENV, JSON122026-10-27
103.254.63.94
Canada · HostBilby Inc.
exposed-secret exploitTXT, ENV, JSON122026-10-27
2.59.219.69
Moldova · ALEXHOST SRL
exposed-secret exploitTXT, ENV, JSON122026-10-27
89.45.45.56
Turkey · 2E TELEKOMUNIKASYON LTD STI
exposed-secret exploitTXT, ENV, JSON122026-10-27
62.105.222.164
The Netherlands · GTT Communications Inc.
exposed-secret exploitTXT, ENV, JSON122026-10-27
185.157.217.98
Turkey · ENIYISUNUCUM VERI MERKEZI BILISIM HIZMETLERI TICARET VE SANAYI LIMITED SIRKETI
exposed-secret exploitTXT, ENV, JSON122026-10-27
176.125.243.42
Moldova · ALEXHOST SRL
exposed-secret exploitTXT, ENV, JSON122026-10-27
5.83.150.29
Germany · Tech Tide Portugal Unipessoal LDA
exposed-secret exploitTXT, ENV, JSON122026-10-27
104.192.42.94
The Netherlands · EUROHOSTER Ltd.
exposed-secret exploitTXT, ENV, JSON122026-10-27
148.135.207.70
The Netherlands · Matteo Martelloni trading as DELUXHOST
exposed-secret exploitTXT, ENV, JSON122026-10-27
87.106.35.8
United Kingdom · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-10-27
164.90.209.4
Germany · DigitalOcean, LLC
exposed-secret webshell malware moziCFC, JS, CFM, JAR312026-10-27
178.62.64.147
United Kingdom · DigitalOcean, LLC
exposed-secret webshell malware moziCFC, JS, CFM, JAR312026-10-27
1.13.14.74
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP52026-10-27
172.233.230.62
United States · Akamai Technologies, Inc.
exposed-secretTXT22026-10-27
144.91.103.172
France · Contabo GmbH
exposed-secret malware tunnel elf-binaryLOG, PY, ELF, SH512026-10-27
122.114.158.226
China · CHINA UNICOM China169 Backbone
exposed-secretTXT22026-10-27
104.21.6.176
United States · Cloudflare, Inc.
exposed-secretCYOU12026-10-27
172.67.135.20
United States · Cloudflare, Inc.
exposed-secretCYOU12026-10-27
64.177.66.88
Israel · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON122026-10-27
64.176.166.236
Israel · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON122026-10-27
← NewerPage 32 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free