Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,966
hosts
106,473
files
101
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2996malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
8.138.12.59
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploit malware moziPY, JS, LOG, SH992026-11-09
46.101.155.48
Germany · DigitalOcean, LLC
exposed-secret malware mozi tunnelJS, LOG, TXT, ELF182026-11-09
46.101.142.226
Germany · DigitalOcean, LLC
exposed-secretTXT32026-11-09
129.212.194.246
Germany · DigitalOcean, LLC
exposed-secretTXT22026-11-09
154.217.248.243
United States · AROSSCLOUD INC.
malware mozi exposed-secretTXT, ENV, JSON, PHP92026-11-09
64.29.17.67
United States · Amazon.com, Inc.
exposed-secretAPP192026-11-09
216.198.79.67
United States · Amazon.com, Inc.
exposed-secretAPP192026-11-09
63.176.8.218
Germany · Amazon.com, Inc.
exposed-secret ioc-match malware pe-binaryAPP, JAR, CLICK, COM102026-11-09
185.77.97.48
United States · Hostinger International Limited
exposed-secretSHOP12026-11-09
35.157.26.135
Germany · Amazon.com, Inc.
exposed-secret ioc-match malware pe-binaryAPP, JAR, CLICK, COM102026-11-09
91.108.103.246
United Kingdom · Hostinger International Limited
exposed-secretSHOP12026-11-09
91.108.103.8
United Kingdom · Hostinger International Limited
exposed-secretPHP, TECH22026-11-09
185.77.97.248
United States · Hostinger International Limited
exposed-secretPHP, TECH22026-11-09
64.23.130.129
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-09
47.84.30.150
United States · Alibaba (US) Technology Co., Ltd.
malware c2 exploit exposed-secretELF, C, GZ, PY842026-11-09
8.130.172.119
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exploit malware exposed-secret macho-binaryLOG, MACHO, PY, TXT1292026-11-09
130.94.95.155
Indonesia · NTT America, Inc.
exposed-secret malware mozi c2PY, HTML, LOG, JSON3162026-11-09
130.94.102.111
Mexico · NTT America, Inc.
exposed-secret malware macho-binaryMACHO, TXT22026-11-09
130.94.31.29
South Korea · NTT America, Inc.
exposed-secret malware mozi elf-binaryBAK, ELF, PE, SH142026-11-09
149.104.78.158
United States · Kaopu Cloud HK Limited
exposed-secret tunnelLOG, JSON, BIN, PY212026-11-09
27.109.240.135
MO · Companhia de Telecomunicacoes de Macau
exposed-secretTXT12026-11-09
5.189.138.117
France · Contabo GmbH
exposed-secretENV12026-11-09
5.129.209.49
The Netherlands · Timeweb, LLP
exposed-secret exploitTXT, ENV, JSON42026-11-09
87.199.197.86
The Netherlands · SERVERS TECH FZCO
exposed-secretTXT12026-11-09
134.209.85.233
The Netherlands · DigitalOcean, LLC
exposed-secret tunnelSQL, JS, JSON, PHP482026-11-09
20.26.156.217
United Kingdom · Microsoft Corporation
exposed-secretTXT12026-11-09
146.19.213.192
Russia · ALEXHOST SRL
malware exposed-secret mozi exploitPY, SH, LOG, TXT1,2702026-11-09
43.212.174.40
Taiwan · Amazon.com, Inc.
exposed-secret exploitTXT, ENV62026-11-09
143.246.203.45
United States
exposed-secretTXT12026-11-09
2.31.144.19
Finland
exposed-secret exploitTXT, ENV, JSON82026-11-09
163.181.214.2
United States · Zhejiang Taobao Network Co.,Ltd
exposed-secretTOP12026-11-09
64.29.17.195
United States · Amazon.com, Inc.
exposed-secret exploitAPP212026-11-09
206.206.126.142
United States · OVH SAS
exposed-secretJSON, TXT22026-11-09
64.227.158.204
India · DigitalOcean, LLC
exploit exposed-secretENV, LOG, TXT32026-11-09
64.29.17.131
United States · Amazon.com, Inc.
exposed-secretAPP182026-11-08
216.198.79.131
United States · Amazon.com, Inc.
exposed-secretAPP182026-11-08
172.67.195.251
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
216.150.1.193
United States · Amazon.com, Inc.
exposed-secretCOM22026-11-08
104.21.21.20
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
216.150.16.1
United States · Amazon.com, Inc.
exposed-secretCOM12026-11-08
216.150.16.193
United States · Amazon.com, Inc.
exposed-secretCOM22026-11-08
104.21.75.4
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.143.96
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
104.21.87.132
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.209.246
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.149.105
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
104.21.4.119
United States · Cloudflare, Inc.
exposed-secretTXT12026-11-08
172.67.132.12
United States · Cloudflare, Inc.
exposed-secretTXT12026-11-08
104.21.29.151
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.152.25
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
← NewerPage 5 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free