huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,973
hosts
106,604
files
126
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3002malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
92.52.196.11
Hungary · Pro-M Zrt.
exposed-secretTXT12026-10-17
106.55.34.199
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secret ioc-matchTXT22026-10-17
194.226.98.121
Russia · JSC Avantel
c2 exposed-secretJSON12026-10-17
42.112.213.93
Vietnam · FPT Telecom Company
exposed-secret exploitTXT22026-10-17
137.116.136.69
Singapore · Microsoft Corporation
exploit exposed-secret tunnelJSON, ZIP, GZ, MD82026-10-17
165.154.6.188
Hong Kong · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
exposed-secretTXT12026-10-17
177.3.40.23
United States · Hong Kong Communications International Co., Limited
exposed-secretTXT12026-10-17
163.172.71.54
France · Scaleway SAS
exposed-secretTXT12026-10-17
47.111.13.100
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-17
47.148.181.190
United States · Frontier Communications of America, Inc.
exposed-secretTXT12026-10-17
204.188.219.9
United States · Sharktech
exploit exposed-secretTXT12026-10-17
166.88.95.90
United States · Evoxt Sdn. Bhd.
malware exposed-secret mozi pe-binaryPE, TXT72026-10-17
47.81.209.84
United States · Alibaba (US) Technology Co., Ltd.
exposed-secretTXT22026-10-17
47.74.50.121
United States · Alibaba (US) Technology Co., Ltd.
exposed-secretCN, COM152026-10-17
176.12.71.122
Russia · JSC IOT
c2 exposed-secretENV, JSON22026-10-16
45.237.8.182
Brazil · JONATES MICHAEL DE MACEDO- ME
exposed-secretTXT12026-10-16
45.139.104.36
United States · 49.3 Networking LLC
malware mozi exploit exposed-secretMD, JSON, JS, MJS312026-10-16
45.125.222.99
Bangladesh · Systems Solutions & development Technologies Limited
exposed-secretTXT22026-10-16
45.41.86.226
United States · HT
exposed-secretTXT12026-10-16
45.152.149.39
United States · 1337 Services GmbH
exposed-secretENV12026-10-16
152.32.154.231
Indonesia · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED
exposed-secretTXT32026-10-16
5.39.10.252
France · OVH SAS
exposed-secretTXT12026-10-16
194.233.72.68
Singapore · Contabo Asia Private Limited
exploit exposed-secret malware webshellPY, TXT, PHP, MD2852026-10-16
182.253.221.146
Indonesia · BIZNET
exposed-secret malware miraiCSV222026-10-16
37.77.150.214
Russia · Proton66 OOO
exposed-secret12026-10-16
176.9.116.24
Germany · Hetzner Online GmbH
exposed-secretHTML12026-10-16
8.152.6.86
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-16
85.90.244.171
Germany · Akamai Technologies, Inc.
exposed-secretTXT12026-10-16
74.208.201.158
United States · IONOS SE
exposed-secretTXT12026-10-16
92.63.163.8
The Netherlands · Vertixo BV
exposed-secretTXT12026-10-16
87.106.203.84
United Kingdom · IONOS SE
exposed-secretTXT12026-10-16
45.9.63.19
Germany · netcup GmbH
exposed-secretTXT12026-10-16
51.68.220.158
United Kingdom · OVH SAS
exposed-secretTXT12026-10-16
3.226.119.211
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-16
44.233.34.245
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-16
45.77.200.160
United States · The Constant Company, LLC
exposed-secretTXT12026-10-16
34.72.114.209
United States · Google LLC
exposed-secretTXT12026-10-16
165.227.41.66
Canada · DigitalOcean, LLC
exposed-secretTXT12026-10-16
208.72.84.151
United States · GBP Software, LLC
exposed-secretTXT12026-10-16
152.67.58.223
Brazil · Oracle Corporation
exposed-secretTXT12026-10-16
3.10.70.226
United Kingdom · Amazon.com, Inc.
exposed-secretTXT12026-10-16
194.87.161.238
Russia · JSC "TIMEWEB"
exposed-secretTXT12026-10-16
165.22.37.191
United States · DigitalOcean, LLC
exposed-secretTXT12026-10-16
18.135.209.57
United Kingdom · Amazon.com, Inc.
exposed-secretTXT12026-10-16
142.93.199.234
United States · DigitalOcean, LLC
exposed-secretTXT12026-10-16
128.65.199.205
Switzerland · Infomaniak Network SA
exposed-secretTXT12026-10-16
138.2.136.23
Germany · Oracle Corporation
exposed-secretTXT12026-10-16
60.204.171.31
China · Huawei Cloud Service data center
exposed-secretTXT, YML32026-10-16
139.224.113.180
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploit malware tunnelSQL, MD, ELF, PY342026-10-16
154.36.183.100
MU · NetLab Global
exposed-secret c2 malware tunnelPY, SH, TXT, ELF182026-10-16
← NewerPage 42 of 61Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free