huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,971
hosts
106,553
files
129
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3001malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
94.72.140.191
Bulgaria · DA International Group Ltd.
exposed-secret exploitTXT, ENV, JSON122026-10-27
57.131.30.6
Italy · OVH SAS
exposed-secret exploitTXT, ENV, JSON122026-10-27
64.227.143.203
India · DigitalOcean, LLC
exposed-secret webshell malware moziCFC, JS, CFM, JAR312026-10-27
5.189.136.65
France · Contabo GmbH
exposed-secretPY, DB, YAML, YML62026-10-27
23.94.212.249
United States · HostPapa
exposed-secretLOG12026-10-27
65.20.96.115
Spain · The Constant Company, LLC
exploit malware exposed-secret webshellLOG, PY, ELF, C1752026-10-27
91.92.43.211
Germany · DEDIK SERVICES LIMITED
exposed-secret exploit malware moziPY, HTML, SH, JS7032026-10-27
51.81.244.207
United States · OVH SAS
exploit malware coinminer exposed-secretLOG, PY, SH, ELF312026-10-27
45.77.131.98
Japan · The Constant Company, LLC
malware mozi webshell exposed-secretJSON, LOG, SH, PY3112026-10-27
209.99.190.118
Switzerland · SKN Subnet & Telecom Ltd
malware adaptix exposed-secret exploitELF, LOG, PY, TGZ982026-10-27
47.106.255.216
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-27
108.61.161.224
Japan · The Constant Company, LLC
exposed-secret exploit malware moziSH, HTML, LOG, PY1972026-10-26
178.154.214.178
Russia · Yandex.Cloud LLC
exposed-secretTXT12026-10-26
152.70.78.83
India · Oracle Corporation
exploit exposed-secretTXT12026-10-26
209.146.101.252
United States · Cogent Communications
exposed-secretYAML12026-10-26
95.163.226.19
Russia · "Domain names registrar REG.RU", Ltd
exposed-secretTXT12026-10-26
91.92.241.101
The Netherlands · Omegatech LTD
exposed-secret exploit malware moziMETA, BODY, PY, TXT3322026-10-26
4.240.84.68
India · Microsoft Corporation
exposed-secretTXT12026-10-26
135.235.195.218
India · Microsoft Corporation
exposed-secretTXT12026-10-26
23.225.71.207
United States · CNSERVERS LLC
exposed-secret exploit webshell malwareTXT, PY, DOCX, LOG852026-10-26
150.60.154.217
Japan · KDDI Web Communications Inc.
exposed-secret exploitTXT22026-10-26
185.239.48.112
Russia · SmartApe OU
c2 exposed-secretPRO12026-10-26
188.190.9.52
United States · EDIS GmbH
exposed-secret exploit webshell tunnelJSP, LOG, SH, TGZ152026-10-26
49.12.82.48
Germany · Hetzner Online GmbH
exposed-secretCOM22026-10-26
52.128.241.77
Hong Kong · Netsec Limited
malware mozi c2 exposed-secretPY, PS1, PE, GO2572026-10-26
103.35.216.13
Indonesia · Politeknik Pelayaran Surabaya
exposed-secret exploitTXT, ENV, JSON, PHP162026-10-26
213.177.179.14
United Arab Emirates · Feo Prest SRL
exposed-secretBIN, TXT22026-10-26
18.141.182.202
Singapore · Amazon.com, Inc.
exposed-secret exploitTXT42026-10-26
153.120.78.94
Japan · SAKURA Internet Inc.
exposed-secretTXT12026-10-26
153.126.178.245
Japan · SAKURA Internet Inc.
exposed-secret exploitTXT22026-10-26
67.219.101.87
Australia · The Constant Company, LLC
exposed-secretENV, TXT22026-10-26
172.232.224.166
Indonesia · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-26
192.46.237.53
Germany · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-26
172.233.15.100
Brazil · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-26
192.121.47.198
Italy · M247 Europe SRL
exposed-secretENV, TXT22026-10-26
172.232.96.96
India · Akamai Technologies, Inc.
exposed-secretTXT12026-10-26
188.165.58.213
France · OVH SAS
exposed-secretTXT12026-10-26
116.205.108.183
China · Huawei Cloud Service data center
exposed-secretJSON, PHP, TXT32026-10-26
159.75.168.47
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON52026-10-26
101.43.120.111
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-26
143.42.229.113
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-26
111.229.34.184
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-26
47.98.107.58
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-26
43.153.226.8
Singapore · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-26
172.232.186.145
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-26
54.189.204.103
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-26
18.118.49.202
United States · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-26
49.51.187.50
United States · Shenzhen Tencent Computer Systems Company Limited
exposed-secret exploitTXT22026-10-26
54.193.79.170
United States · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-26
96.126.126.115
United States · Akamai Technologies, Inc.
exposed-secretTXT12026-10-26
← NewerPage 33 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free