Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,973
hosts
106,604
files
126
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3002malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
45.142.143.235
Finland · Materialism s.r.l.
exposed-secret malware mozi exploitPY, SQL, GZ, SH6432026-10-19
188.120.247.225
Russia · JSC IOT
exploit exposed-secret c2 malwarePHP, TXT2,9652026-10-19
45.81.33.16
Russia · Delta Ltd
exposed-secretTXT12026-10-19
168.138.13.221
Australia · Oracle Corporation
exposed-secret malware mozi exploitSH, BAT, LOG, TXT202026-10-19
81.71.153.119
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secret forced-lootTXT12026-10-19
38.76.223.35
United States · cognetcloud INC
exposed-secret webshellBIN, JSON, PHP, TXT42026-10-19
217.216.78.183
India · Contabo Asia Private Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-19
209.50.60.40
United States · UpCloud USA Inc
exploit exposed-secret webshellLOG, PHP, TXT, ZIP42026-10-19
122.10.12.174
Hong Kong · DingFeng XinHui(HongKong) Technology Limited
exposed-secretTXT12026-10-19
122.10.10.228
Hong Kong · DingFeng XinHui(HongKong) Technology Limited
exposed-secretTXT12026-10-19
122.10.20.216
Hong Kong · DingFeng XinHui(HongKong) Technology Limited
exposed-secretTXT12026-10-19
193.123.81.25
United Arab Emirates · Oracle Corporation
exposed-secret malware elf-binary tunnelLOG, PY, JSON, ELF162026-10-19
94.237.73.153
Singapore · UpCloud Ltd
exploit exposed-secret malware gafgytJAR, ZIP, GZ, TXT1912026-10-19
77.236.89.203
Russia · Ltd. "SPA"Impulse"
exposed-secret malware mozi pe-binaryBZ2, ZIP, PE, KEY1012026-10-19
144.172.88.115
LU · FranTech Solutions
exposed-secretOVPN, LOG, SH52026-10-19
8.138.166.206
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploit malware c2PY, TXT, XML, LOG932026-10-19
47.76.239.114
United States · Alibaba (US) Technology Co., Ltd.
malware coinminer exposed-secret exploitPE, BIN, PEM, CMD252026-10-19
47.52.70.58
United States · Alibaba (US) Technology Co., Ltd.
exploit exposed-secret malware moziPY, JS, MD, BAT132026-10-19
146.103.123.60
The Netherlands · SERVERS TECH FZCO
exposed-secret exploit malware moziLOG, PY, KEY, TXT1092026-10-19
45.170.228.67
Brazil · YES FIBRA TELECOMUNICACOES LTDA
exposed-secret exploitTXT22026-10-19
45.137.194.154
United States · Contabo Inc.
exposed-secretTXT12026-10-19
45.115.26.23
Vietnam · Contrust Solutions S.R.L.
malware exploit exposed-secret c2ELF, TXT, PE, XML332026-10-19
47.245.56.76
United States · Alibaba (US) Technology Co., Ltd.
exposed-secretCN, TXT102026-10-19
165.99.219.167
United States · Zorn Technologies
exposed-secretENV12026-10-19
52.128.241.98
Hong Kong · Netsec Limited
exposed-secretTXT22026-10-18
217.216.79.49
India · Contabo Asia Private Limited
exposed-secret tunnelTXT12026-10-18
179.43.175.2
Panama · Private Layer INC
exploit malware webshell exposed-secretCMD, PE, PS1402026-10-18
139.144.26.14
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-18
8.210.12.68
Hong Kong · Alibaba (US) Technology Co., Ltd.
exposed-secretTXT12026-10-18
36.139.216.235
China · China Mobile
exposed-secretTXT12026-10-18
154.198.163.77
Seychelles · Scloud Pte Ltd
exposed-secretHTML12026-10-18
37.72.140.179
Russia · GALEON LLC
exploit exposed-secret12026-10-18
193.24.123.177
Russia · PROSPERO OOO
exploit exposed-secret12026-10-18
92.243.65.235
Croatia · Akton d.o.o.
exposed-secretENV, TXT22026-10-17
151.236.19.21
United Kingdom · Syntura Group Limited
exposed-secretENV, TXT22026-10-17
46.183.185.97
North Macedonia · Akton d.o.o.
exposed-secretENV, TXT22026-10-17
103.57.250.208
Colombia · EDGEUNO S.A.S
exposed-secretENV, TXT22026-10-17
47.207.102.160
United States · Frontier Communications of America, Inc.
exposed-secretENV, TXT22026-10-17
44.203.240.247
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-17
209.200.104.81
United States · NewtekOne, Inc.
exposed-secretPHP12026-10-17
18.133.49.252
United Kingdom · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-17
18.130.179.73
United Kingdom · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-17
132.247.150.3
Mexico · Universidad Nacional Autonoma de Mexico
exposed-secretTXT, ENV, JSON, PHP72026-10-17
167.0.155.153
Colombia · COLOMBIA TELECOMUNICACIONES S.A. ESP
exposed-secretTXT, ENV, JSON, PHP72026-10-17
109.163.244.38
Russia · JSC "ER-Telecom Holding"
exposed-secretTXT12026-10-17
186.31.142.91
Colombia · ETB - Colombia
exposed-secretTXT, ENV, JSON, PHP72026-10-17
190.90.208.107
Colombia · INTERNEXA S.A. E.S.P
exposed-secretENV, TXT22026-10-17
132.247.149.4
Mexico · Universidad Nacional Autonoma de Mexico
exposed-secretTXT, ENV, JSON, PHP72026-10-17
200.25.27.4
Colombia · EDGEUNO S.A.S
exposed-secretTXT, ENV, JSON, PHP72026-10-17
177.224.243.68
Mexico · Mega Cable, S.A. de C.V.
exposed-secretTXT12026-10-17
← NewerPage 41 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free