huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,031
hosts
112,857
files
81
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3052malware 1248exploit 1167mozi 943c2 328webshell 296ioc-match 88coinminer 72gafgyt 63tsunami 44mirai 40sliver 32meterpreter 17havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
43.162.204.201
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.204.186
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.194.85
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT22026-10-05
43.162.194.71
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT32026-10-05
34.88.41.27
Finland · Google LLC
exposed-secretTXT12026-10-05
34.81.56.233
Taiwan · Google LLC
exposed-secretTXT12026-10-05
3.20.113.217
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-05
34.65.127.124
Switzerland · Google LLC
exposed-secretTXT12026-10-05
34.65.88.35
Switzerland · Google LLC
exposed-secretTXT12026-10-05
40.180.148.68
United States
exposed-secretTXT12026-10-05
18.200.146.94
Ireland · Amazon.com, Inc.
exposed-secretTXT12026-10-05
34.51.255.189
Sweden · Google LLC
exposed-secretTXT12026-10-05
34.50.17.130
South Korea · Google LLC
exposed-secretTXT12026-10-05
34.35.168.115
South Africa · Google LLC
exposed-secretTXT12026-10-05
34.35.109.70
South Africa · Google LLC
exposed-secretTXT12026-10-05
34.35.58.147
South Africa · Google LLC
exposed-secretTXT12026-10-05
34.32.17.39
Germany · Google LLC
exposed-secretTXT12026-10-05
34.20.136.124
United States · Google LLC
exposed-secretTXT12026-10-05
34.19.182.55
Canada · Google LLC
exposed-secretTXT12026-10-05
34.18.231.224
Qatar · Google LLC
exposed-secretTXT12026-10-05
34.18.203.21
Qatar · Google LLC
exposed-secretTXT12026-10-05
34.18.215.244
Qatar · Google LLC
exposed-secretTXT12026-10-05
34.18.52.61
Qatar · Google LLC
exposed-secretTXT12026-10-05
34.17.193.248
Italy · Google LLC
exposed-secretTXT12026-10-05
34.17.36.244
Italy · Google LLC
exposed-secretTXT12026-10-05
34.15.187.238
Thailand · Google LLC
exposed-secretTXT12026-10-05
34.12.157.187
The Netherlands · Google LLC
exposed-secretTXT12026-10-05
31.57.47.29
United States · CGI GLOBAL LIMITED
exposed-secretTXT12026-10-05
31.7.66.163
Iran · Asiatech Data Transmission company
exposed-secretENV12026-10-05
20.115.100.78
United States · Microsoft Corporation
exposed-secretTXT12026-10-05
5.180.182.20
The Netherlands · Kamatera Inc
exposed-secretTXT12026-10-05
34.254.202.253
Ireland · Amazon.com, Inc.
malware coinminer exposed-secret exploitLOG, TXT, PY, ELF262026-10-05
209.97.189.41
United Kingdom · DigitalOcean, LLC
exposed-secretTXT12026-10-05
69.169.109.75
United States · Interserver, Inc
exposed-secretONLINE12026-10-05
20.90.164.238
United Kingdom · Microsoft Corporation
exposed-secretTXT, ENV, PHP52026-10-04
45.158.199.112
Germany · HOSTING INDUSTRY LIMITED
exposed-secretTXT12026-10-04
5.129.204.34
Russia · JSC "TIMEWEB"
exposed-secret malware elf-binaryELF, PS1, SH, TXT42026-10-04
95.182.88.43
United Arab Emirates · Cloud Software - FZCO
exposed-secret exploit tunnelSH, KEY, PEM, COMPLE2932026-10-04
185.244.43.186
Germany · Kontel LLC
malware mozi exposed-secretPY, LOG, BIN92026-10-04
14.153.235.161
China · Chinanet
exposed-secretTXT12026-10-04
14.139.158.118
India · National Knowledge Network
exposed-secretTXT22026-10-04
172.86.118.111
United States · RouterHosting LLC
exposed-secret exploit c2 malwarePY, LOG, TXT, PHP382026-10-04
194.113.194.39
United States · Kamatera, Inc.
exposed-secretTXT12026-10-03
14.49.180.212
South Korea · Korea Telecom
exposed-secretTXT12026-10-03
51.144.45.141
The Netherlands · Microsoft Corporation
malware exploit exposed-secret webshellPS1, JAR, PE, ZIP222026-10-03
185.165.170.9
Iceland · FlokiNET ehf
exposed-secret tunnelNET12026-10-03
5.188.230.16
United States · G-Core Labs S.A.
exploit exposed-secretGZ, LIFE, SH42026-10-03
16.59.141.234
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-03
74.63.223.161
United States · Limestone Networks, Inc.
exposed-secretTXT12026-10-03
3.107.75.193
Australia · Amazon.com, Inc.
exposed-secretONLINE12026-10-03
← NewerPage 54 of 62Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free