huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,031
hosts
112,857
files
81
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3052malware 1248exploit 1167mozi 943c2 328webshell 296ioc-match 88coinminer 72gafgyt 63tsunami 44mirai 40sliver 32meterpreter 17havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
43.163.124.78
Singapore · Shenzhen Tencent Computer Systems Company Limited
exploit exposed-secret malware meterpreterTXT, ELF, MD, PY812026-10-03
155.138.162.205
United States · The Constant Company, LLC
exposed-secretINFO12026-10-03
209.99.188.155
Switzerland · SKN Subnet & Telecom Ltd
exposed-secret malware mozi exploitTXT, SH, PY, JSON3472026-10-02
192.144.156.124
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-02
192.144.132.223
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-02
54.194.162.25
Ireland · Amazon.com, Inc.
exposed-secretTXT12026-10-02
192.144.239.234
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-02
192.144.167.63
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-02
54.193.40.248
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-02
8.230.107.68
United States · Google LLC
exposed-secretTXT12026-10-02
8.230.115.33
United States · Google LLC
exposed-secretTXT12026-10-02
8.219.4.120
Singapore · Alibaba (US) Technology Co., Ltd.
exposed-secretTXT12026-10-02
94.154.43.130
Turkey · Net Gate Telecom S.R.L.
exposed-secretTXT12026-10-02
94.154.43.103
Turkey · Net Gate Telecom S.R.L.
exposed-secretTXT12026-10-02
94.154.43.4
Turkey · Net Gate Telecom S.R.L.
exposed-secretTXT12026-10-02
94.154.43.8
Turkey · Net Gate Telecom S.R.L.
exposed-secretTXT12026-10-02
107.175.93.41
United States · HostPapa
exposed-secretCOM12026-10-02
91.203.147.206
Ukraine · FOP Kazakov Oleksandr Oleksandrovich
exposed-secretCOM12026-10-02
31.7.188.16
Germany · Core-Backbone GmbH
exposed-secretNET12026-10-02
5.83.129.63
Germany · Raul Ghita trading as 'Ghita Telekom'
exposed-secretNET12026-10-02
64.235.61.78
United States · Las Vegas NV Datacenter
exposed-secretCOM12026-10-02
146.70.232.28
Poland · M247 Europe SRL
exposed-secretINFO12026-10-02
23.26.4.66
United States · Raff Technologies LLC
exposed-secretNET12026-10-02
45.64.217.11
India · MegaHostZone
exposed-secretCOM12026-10-02
89.163.211.117
Germany · WIIT AG
exposed-secretCOM22026-10-02
188.94.191.45
France · Baxet Group Inc.
exposed-secretCOM, NET22026-10-02
217.195.153.196
The Netherlands · Shock Hosting LLC
exposed-secretRU12026-10-02
85.121.52.187
Romania · M247 Europe SRL
exposed-secretCOM12026-10-02
78.109.20.148
United States · ARPHost, LLC
exposed-secretMY22026-10-02
109.75.164.208
United Kingdom · IOMART HOSTING LIMITED
exposed-secretNET12026-10-02
185.86.76.222
Ukraine · Mulgin Alexander Sergeevich
exposed-secretNET12026-10-02
45.128.118.28
Romania · TIPZOR MEDIA SRL
exposed-secretNET12026-10-02
51.222.88.248
Canada · OVH SAS
exposed-secretCOM12026-10-02
51.222.88.0
Canada · OVH SAS
exposed-secretCOM12026-10-02
51.222.135.75
Canada · OVH SAS
exposed-secretCOM12026-10-02
37.157.255.190
Germany · WIIT AG
exploit exposed-secretCOM, MY, NET32026-10-02
172.232.84.125
India · Akamai Technologies, Inc.
exposed-secretNET12026-10-02
80.209.230.99
Lithuania · UAB "Interneto vizija"
exposed-secretNET12026-10-02
185.170.208.15
The Netherlands · Starry Network Limited
exposed-secretNET12026-10-02
185.170.208.40
The Netherlands · Starry Network Limited
exposed-secretCOM12026-10-02
85.121.245.145
Romania · M247 Europe SRL
exposed-secretCOM32026-10-02
172.67.151.239
United States · Cloudflare, Inc.
exposed-secretCOM12026-10-02
104.21.12.85
United States · Cloudflare, Inc.
exposed-secretCOM12026-10-02
212.83.144.78
France · Scaleway SAS
exposed-secretCOM22026-10-02
8.142.178.141
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-02
8.141.100.166
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-02
8.138.81.114
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-02
8.131.64.98
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretJSON12026-10-02
135.148.3.48
United States · OVH SAS
exposed-secretNET12026-10-02
95.211.162.136
The Netherlands · LeaseWeb Netherlands B.V.
exposed-secretME12026-10-02
← NewerPage 55 of 62Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free