Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,971
hosts
106,553
files
128
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3001malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
195.88.57.175
United States · Kamatera, Inc.
exposed-secretENV, TXT22026-10-26
113.207.49.121
China · CHINA UNICOM China169 Backbone
exposed-secretTXT12026-10-26
43.211.67.252
Thailand · Amazon.com, Inc.
exposed-secret exploitTXT32026-10-26
43.210.115.207
Thailand · Amazon.com, Inc.
exposed-secret exploitENV, TXT22026-10-26
13.208.243.131
Japan · Amazon.com, Inc.
exposed-secretTXT12026-10-26
108.136.234.225
Indonesia · Amazon.com, Inc.
exposed-secretTXT, ENV52026-10-26
111.229.152.16
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-26
103.90.162.31
United States · Kamatera, Inc.
exposed-secretENV, TXT22026-10-26
13.239.253.213
Australia · Amazon.com, Inc.
exposed-secretTXT12026-10-26
45.115.26.30
Vietnam · Contrust Solutions S.R.L.
exposed-secret exploit malware moziLOG, PY, SH, TXT1,3952026-10-26
45.76.5.143
United States · The Constant Company, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-26
45.115.26.155
Hong Kong · Contrust Solutions S.R.L.
exposed-secretTXT12026-10-26
130.61.8.0
Germany · Oracle Corporation
exposed-secret tunnelTXT12026-10-26
104.239.47.10
France · TTR IT Holdings Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-26
92.112.53.34
United States · Datacamp Limited
exposed-secret exploitPY, LOG, PHP, TXT212026-10-26
189.171.228.224
Mexico · Uninet S.A. de C.V.
exposed-secretTXT62026-10-26
204.188.254.146
United States · Sharktech
exploit exposed-secret tunnelTXT22026-10-26
136.70.229.109
United States · Google LLC
exposed-secretTXT22026-10-26
118.139.164.197
Singapore · GoDaddy.com, LLC
exposed-secretTXT12026-10-25
8.217.152.4
Hong Kong · Alibaba (US) Technology Co., Ltd.
exposed-secretENV12026-10-25
161.35.169.243
United Kingdom · DigitalOcean, LLC
exploit exposed-secretTXT, ENV, JSON, PHP82026-10-25
82.165.110.7
France · IONOS SE
exposed-secretCOM, IO22026-10-25
27.124.12.186
Hong Kong · CTG Server Limited
exploit exposed-secret tunnelLOG, HTML, OUT, TOML82026-10-25
27.124.5.86
Hong Kong · CTG Server Limited
exploit exposed-secret tunnelLOG, HTML, OUT, TOML82026-10-25
38.147.172.82
United States · LUCIDACLOUD LIMITED
exposed-secret exploit tunnel forced-lootSH, YAML, PY, JSON592026-10-25
124.221.46.164
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP92026-10-25
95.216.224.44
Finland · Hetzner Online GmbH
exploit exposed-secret malware gafgytJAR, ZIP, GZ, TXT2062026-10-25
172.67.129.79
United States · Cloudflare, Inc.
exposed-secretCOM12026-10-25
104.21.2.145
United States · Cloudflare, Inc.
exposed-secretCOM12026-10-25
122.10.110.72
Hong Kong · DingFeng XinHui(HongKong) Technology Limited
exposed-secretTXT22026-10-25
218.38.52.211
South Korea · SK Broadband Co Ltd
exposed-secret malware mozi elf-binaryPHP, ZIP, TXT, ELF302026-10-25
212.227.29.190
Germany · IONOS SE
exploit exposed-secret malware webshellELF, PHP, TXT32026-10-25
108.181.123.222
Canada · Psychz Networks
exposed-secretENV, TXT22026-10-25
85.137.52.209
The Netherlands · SOLLUTIUM EU Sp z.o.o.
exposed-secretTXT12026-10-25
108.181.122.147
Canada · Psychz Networks
exposed-secretENV, TXT22026-10-25
95.216.77.106
Finland · Hetzner Online GmbH
exposed-secretTXT, PHP, ENV, JSON162026-10-25
82.156.186.185
China · Shenzhen Tencent Computer Systems Company Limited
malware cobalt-strike c2 moziPY, JAR, TXT, LOG882026-10-25
45.151.122.34
France · Contabo GmbH
malware coinminer exposed-secret exploitELF, PY, SH, CMD1092026-10-25
193.36.119.24
The Netherlands · EstNOC OU
exposed-secret malware mozi pe-binaryLOG, VBS, PY, ELF212026-10-25
216.218.249.71
United States · Hurricane Electric LLC
exposed-secretPHP12026-10-25
49.51.230.17
United States · Shenzhen Tencent Computer Systems Company Limited
malware exploit webshell exposed-secretLOG, C, DLL, BIN562026-10-25
47.109.23.77
China · Hangzhou Alibaba Advertising Co.,Ltd.
malware cobalt-strike exploit exposed-secretBIN, LOG, PHP, PY212026-10-25
111.231.116.164
China · Shenzhen Tencent Computer Systems Company Limited
malware mozi exposed-secretTXT, ENV, JSON, PHP92026-10-25
156.245.146.226
Seychelles · Zillion Network Inc.
exposed-secret malware mozi exploitSH, HTML, PY, TXT5612026-10-25
45.198.224.188
Seychelles · VPSVAULT.HOST LTD
malware exposed-secret elf-binary pe-binaryELF, PE, TXT62026-10-25
203.91.77.253
Hong Kong · AROSSCLOUD INC.
exposed-secretJSON, TXT22026-10-25
129.159.135.190
Israel · Oracle Corporation
malware exploit exposed-secret moziELF, LOG, PY, C402026-10-25
148.153.159.51
United States · CDS Global Cloud Co., Ltd
exposed-secretTXT32026-10-25
192.236.229.229
United States · HostPapa
malware mozi exposed-secret exploitPY, SH, LOG, TXT332026-10-25
8.133.234.121
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exploit exposed-secret malware moziSH, LOG, C, TXT2162026-10-25
← NewerPage 34 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free