Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,971
hosts
106,553
files
128
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3001malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
15.204.219.215
United States · OVH SAS
exposed-secretTXT32026-10-25
103.15.222.169
Vietnam · TAN THANH AN INTERNATIONAL TRADE DEVELOPMENT COMPANY LIMITED
exposed-secretTXT22026-10-25
154.217.251.226
United States · AROSSCLOUD INC.
exposed-secretTXT, ENV, JSON62026-10-25
82.157.111.243
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP442026-10-25
51.159.184.76
France · Scaleway SAS
exposed-secret malware mozi exploitJSON, JS, TXT, HTML382026-10-25
64.226.89.20
Germany · DigitalOcean, LLC
exploit exposed-secret malware moziPY, TXT, CSV, JS142026-10-25
209.38.235.232
Germany · DigitalOcean, LLC
exposed-secret malware mozi exploitJSON, JS, LOG, MD1182026-10-25
5.172.156.40
United Kingdom · Pulsant (Scotland) Ltd
exploit exposed-secret malware webshellPY, PHP, ELF, ENV132026-10-25
175.159.194.157
Hong Kong · The Hong Kong Polytechnic University
exposed-secret exploit malware moziMD, SAMPLE, TXT, SH672026-10-25
45.67.86.32
Japan · Host Universal Pty Ltd
exploit malware exposed-secret moziLOG, PY, MACHO, TXT832026-10-25
115.29.202.62
China · Hangzhou Alibaba Advertising Co.,Ltd.
malware exploit exposed-secret moziELF, LOG, PY, MD1392026-10-25
103.79.184.170
Hong Kong · HanMing HK Limited
exposed-secretTXT12026-10-25
101.34.83.230
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-25
123.56.128.118
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-25
134.199.145.59
Australia · DigitalOcean, LLC
exposed-secretTXT12026-10-25
160.250.216.28
Vietnam · Megacore Technology Company Limited
exposed-secretTXT12026-10-25
202.28.34.201
Thailand · ANET Co., Ltd.
exposed-secretTXT12026-10-25
132.148.75.61
United States · GoDaddy.com, LLC
exposed-secretENV, JS, JSON, SAVE72026-10-25
170.64.255.40
Australia · DigitalOcean, LLC
exposed-secretTXT12026-10-25
101.32.194.174
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretSH, OVPN62026-10-25
106.75.48.212
China · China Unicom Beijing Province Network
exposed-secretTXT12026-10-25
47.237.84.48
United States · Alibaba (US) Technology Co., Ltd.
exposed-secret exploit webshell tunnelMD, LOG, SH, TXT2052026-10-25
43.153.10.147
United States · Shenzhen Tencent Computer Systems Company Limited
exposed-secret exploit tunnelSAMPLE, TXT, MD, PY282026-10-25
74.73.65.132
United States · Charter Communications Inc
exposed-secret malware mozi exploitPY, TXT, MD, CSV812026-10-25
121.4.83.178
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secret c2 webshell malwareMD, GITIGN192026-10-25
191.124.248.13
Chile
exposed-secret tunnelHTML12026-10-25
103.39.79.102
Hong Kong · XNNET LLC
exposed-secretTXT12026-10-24
119.45.236.76
China · Shenzhen Tencent Computer Systems Company Limited
malware exploit c2 meterpreterLOG, PE, BIN, ELF262026-10-24
198.46.158.18
United States · HostPapa
exposed-secret exploit malware moziPY, YAML, HTML, TXT3622026-10-24
83.229.70.93
Israel · O.M.C. COMPUTERS & COMMUNICATIONS LTD
exposed-secretENV, TXT22026-10-24
193.233.220.65
Russia · Aeza Group LLC
malware exploit c2 exposed-secretPS1, PE, BAT, ZIP1862026-10-24
143.42.46.110
Australia · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-24
107.174.231.203
United States · HostPapa
exposed-secretTXT12026-10-24
2.26.229.254
Germany · PLAY2GO INTERNATIONAL LIMITED
malware adaptix coinminer c2PS1, PE, CMD, BAT432026-10-24
27.124.2.66
Hong Kong · CTG Server Limited
exposed-secretTXT12026-10-24
151.236.30.73
Austria · EDIS GmbH
exposed-secretENV, TXT22026-10-24
129.225.166.90
United States
exposed-secret tunnel forced-lootSH, LOG, MD, TOML202026-10-24
192.121.162.136
Japan · M247 Europe SRL
exposed-secretENV, TXT22026-10-24
65.20.101.191
Spain · The Constant Company, LLC
exposed-secretENV, TXT22026-10-24
113.30.151.175
Italy · Kamatera, Inc.
exposed-secretENV, TXT22026-10-24
58.221.60.160
China · Chinanet
malware exploit mozi c2MACHO, JAVA, PY, SH352026-10-24
164.92.130.137
Germany · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-24
89.31.121.193
Serbia · M247 Europe SRL
exposed-secretENV, TXT22026-10-24
172.105.91.21
Germany · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-24
172.105.64.16
Germany · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-24
37.157.196.117
Czechia · WEDOS Internet, a.s.
exploit exposed-secretLOG, PHP622026-10-24
185.101.34.115
Norway · ServeTheWorld AS
exposed-secret exploitTXT22026-10-24
206.189.131.244
India · DigitalOcean, LLC
exposed-secretTXT12026-10-24
151.80.203.44
France · OVH SAS
exposed-secretTXT12026-10-24
49.234.191.227
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-24
← NewerPage 35 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free