Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,973
hosts
106,558
files
126
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3002malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
195.201.25.85
Germany · Hetzner Online GmbH
exposed-secretBACKUP, ZIP22026-10-21
91.214.17.130
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
188.245.31.251
Germany · Hetzner Online GmbH
exploit exposed-secret malware webshellSH, PY, C, ELF582026-10-21
91.236.251.38
Ukraine · IP-Connect LLC
exploit exposed-secret tunnelGZ, TXT, BIN, PUB72026-10-21
91.214.17.135
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
178.63.68.220
Germany · Hetzner Online GmbH
exploit exposed-secret c2TXT, JSON, LOG, PY72026-10-21
91.236.251.34
Ukraine · IP-Connect LLC
exploit exposed-secret tunnelGZ, TXT, BIN, PUB72026-10-21
91.236.251.35
Ukraine · IP-Connect LLC
exploit exposed-secret tunnelGZ, TXT, BIN, PUB72026-10-21
144.76.236.71
Germany · Hetzner Online GmbH
exposed-secret exploit webshellMD, PHP122026-10-21
142.132.232.189
Germany · Hetzner Online GmbH
exposed-secretBACKUP, CONF, SH, ZIP62026-10-21
104.248.244.66
Germany · DigitalOcean, LLC
exposed-secret malware webshell moziPY, PS1, LOG, CONF492026-10-21
91.214.17.155
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
91.214.17.154
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
91.214.17.137
Ukraine · PollyComm LTD
exposed-secret malware mozi exploitFRM, TXT, MYD, MYI382026-10-21
51.159.105.208
France · Scaleway SAS
exploit exposed-secret c2 malwarePY, LOG, TXT, SH3342026-10-21
91.236.251.14
Ukraine · IP-Connect LLC
exploit exposed-secret tunnelGZ, TXT, BIN, PUB72026-10-21
62.210.199.73
France · Scaleway SAS
exposed-secret webshell malware exploitSH, GZ, PY, TXT172026-10-21
193.29.104.84
France · M247 Europe SRL
malware c2 exploit exposed-secretBAT, PS1, PE452026-10-21
51.159.53.7
France · Scaleway SAS
exposed-secret c2 malware pe-binaryLOG, CUE, PE, PY332026-10-21
134.249.131.123
Ukraine · "Kyivstar" PJSC
exposed-secretBIN, TXT32026-10-21
15.188.163.78
France · Amazon.com, Inc.
exposed-secret exploit malware moziLOG, SH, TXT, PY3782026-10-21
97.68.27.90
United States · Charter Communications, Inc
exposed-secretPHP, TXT22026-10-21
157.245.140.34
United States · DigitalOcean, LLC
exposed-secret malware mozi exploitPY, LOG, SH, JSON1,6802026-10-21
47.104.97.238
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT22026-10-21
107.173.201.172
United States · HostPapa
exposed-secretTXT12026-10-21
116.63.131.238
China · China Unicom IP network
exposed-secret malware moziTXT22026-10-21
151.243.11.241
Germany · LLC VASH KREDIT BANK
exploit c2 exposed-secret malwarePY, MD, LOG, TXT4392026-10-21
112.166.33.242
South Korea · Korea Telecom
exposed-secretTXT12026-10-21
208.98.38.223
United States · Sharktech
exploit exposed-secretTXT12026-10-21
177.93.1.139
CR · Telecable Economico S.A.
exposed-secretTXT, ENV, JSON, PHP92026-10-21
185.100.55.159
Uzbekistan · "Uzbektelekom" Joint Stock Company
exposed-secretTXT, ENV, JSON, PHP52026-10-21
178.218.207.153
Uzbekistan · Turon Media XK
exposed-secretTXT, ENV, JSON, PHP52026-10-21
142.93.57.244
United States · DigitalOcean, LLC
exposed-secret exploit malware c2TXT, JSON, JS, BODY2172026-10-21
2.24.204.250
United States · Hostinger International Limited
exposed-secret exploit malware moziGZ, DB, MD, JSON1362026-10-21
13.229.73.36
Singapore · Amazon.com, Inc.
exploit exposed-secret malware moziAPK, LOG, HTML, TXT482026-10-21
89.116.31.49
France · Contabo GmbH
exposed-secretTXT22026-10-21
62.238.122.155
The Netherlands · Hetzner Online GmbH
exploit exposed-secret malware moziZIP, TXT, YAML, JSON162026-10-21
64.111.92.149
United States · BL Networks
exposed-secret exploit malware moziPY, YAML, TXT, MD1082026-10-21
23.81.35.61
United Kingdom · LEASEWEB UK LIMITED
exposed-secret exploit c2 malwarePY, BAK, GZ, SH7482026-10-21
8.217.24.92
Hong Kong · Alibaba (US) Technology Co., Ltd.
exposed-secret malware mozi webshellPY, HTM, SH, JS6492026-10-21
176.104.108.18
Serbia · NINET Company Nis d.o.o.
malware mozi exploit exposed-secretPE, PS1, HTML, BIN172026-10-21
198.23.209.17
United States · HostPapa
malware webshell exploit exposed-secretELF, TXT, SH, MACHO1352026-10-21
157.230.117.70
Germany · DigitalOcean, LLC
exploit exposed-secret malware moziPY, MD, JSON, CFG792026-10-21
148.116.90.65
Canada · Oracle Corporation
exposed-secret malware mozi exploitLOG, PY, PYC, BAK292026-10-21
167.233.243.9
Germany · Hetzner Online GmbH
exposed-secret exploit c2 malwareSH, PY, JSON, RS1052026-10-21
198.55.116.60
United States · HostPapa
exposed-secret exploit tunnelPY, SH, SQL, EXAMPL112026-10-21
202.65.11.59
Bangladesh · MGH INFOTECH LTD.
exposed-secret exploit malware moziMD, JS, JSON, PY272026-10-21
198.44.38.209
United States · HostPapa
malware exploit exposed-secret macho-binaryMACHO, JAVA, PY, TOML1342026-10-21
108.61.219.168
United States · The Constant Company, LLC
exposed-secretTXT22026-10-21
139.162.230.213
United Kingdom · Akamai Technologies, Inc.
exposed-secret malware mozi exploitPHP, HTML, JS, TXT222026-10-21
← NewerPage 39 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free