Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,966
hosts
106,473
files
101
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2996malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exploit

HostLabelsFile typesFilesLast seen
198.44.116.69
United States · HostPapa
exposed-secret malware mozi exploitPY, SH, JSON, LOG7332026-11-03
47.112.221.124
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret malware exploit webshellPY, JSON, LOG, BAT1412026-11-03
198.23.145.14
United States · HostPapa
exposed-secret exploit c2 webshellSH, PY, SQL, MD7922026-11-03
39.100.86.251
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploit malware tunnelSH, PY, XML, JAR1072026-11-03
198.46.252.28
United States · HostPapa
exposed-secret exploit malware moziGO, TXT, SH, GZ892026-11-03
45.225.135.92
Panama · RACK SPHERE HOSTING S.A.
malware exposed-secret exploit meterpreterPE, TXT, BIN, JAR72026-11-03
45.7.229.121
Chile · ZAM LTDA.
exposed-secret exploitTXT, ENV, JSON122026-11-03
108.165.12.166
United States · Snaju Development
exposed-secret exploitTXT, ENV, JSON122026-11-03
166.0.192.152
United States · Snaju Development
exposed-secret exploitTXT, ENV, JSON122026-11-03
107.161.24.123
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-11-03
192.227.173.9
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
172.245.181.62
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
74.208.64.89
United States · IONOS SE
exposed-secret exploitTXT, ENV, JSON122026-11-03
107.172.222.26
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
168.235.88.66
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-11-03
216.198.79.195
United States · Amazon.com, Inc.
exposed-secret exploitAPP202026-11-03
172.67.182.13
United States · Cloudflare, Inc.
exploit ioc-matchTO12026-11-03
104.21.67.222
United States · Cloudflare, Inc.
exploit ioc-matchTO12026-11-03
104.21.64.130
United States · Cloudflare, Inc.
exploit ioc-matchTO12026-11-03
172.67.185.214
United States · Cloudflare, Inc.
exploit ioc-matchTO12026-11-03
82.208.23.183
France · Contabo GmbH
exposed-secret exploitTXT22026-11-03
104.233.217.66
United States · PEG TECH INC
exposed-secret exploitTXT22026-11-03
192.227.241.226
United States · HostPapa
exposed-secret exploit malware moziPY, SH, LOG, GZ5382026-11-03
23.95.253.12
United States · HostPapa
exploit exposed-secret tunnelLOG, PY, SH, GZ822026-11-03
198.44.46.122
United States · HostPapa
exposed-secret exploit malware elf-binaryELF, TXT, PY, JAR482026-11-03
141.145.144.175
United Arab Emirates · Oracle Corporation
exposed-secret exploitTXT, ENV, JSON112026-11-03
210.16.120.212
Singapore · HostUS
exposed-secret exploitTXT, ENV, JSON122026-11-03
45.59.101.178
United States · DA International Group Ltd.
exposed-secret exploitTXT, ENV, JSON122026-11-03
198.44.87.45
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
198.46.146.75
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
96.44.165.185
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
64.44.30.11
United States · Nexeon Technologies, Inc.
exposed-secret exploitTXT, ENV, JSON122026-11-03
198.23.188.143
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
108.165.120.215
United States · Snaju Development
exposed-secret exploitTXT, ENV, JSON122026-11-03
192.227.229.27
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
168.235.91.127
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-11-03
23.95.132.196
United States · HostPapa
exposed-secret exploitTXT, ENV, JSON122026-11-03
185.235.138.43
Belgium · HZ Hosting Ltd
exposed-secret exploitTXT, ENV, JSON122026-11-03
168.235.125.167
United States · InMotion Hosting, Inc.
exposed-secret exploitTXT, ENV, JSON122026-11-03
195.63.132.135
The Netherlands · SERVERS TECH FZCO
exploitCOM12026-11-03
159.203.225.195
United States · DigitalOcean, LLC
malware exploit exposed-secret moziPE, EXE, BAT, ZIP1472026-11-03
152.42.193.28
Singapore · DigitalOcean, LLC
exposed-secret malware mozi exploitSH, PY, TGZ, LOG7472026-11-03
188.166.206.102
Singapore · DigitalOcean, LLC
exposed-secret malware mozi exploitSH, PY, TGZ, LOG7472026-11-03
138.68.157.212
United Kingdom · DigitalOcean, LLC
exploitJSON12026-11-03
101.126.4.50
China · Beijing Volcano Engine Technology Co., Ltd.
exploit webshell exposed-secret malwareLOG, SH, PY, JSON1752026-11-03
168.144.85.125
India · DigitalOcean, LLC
exposed-secret exploit malware moziSH, TXT, PY, DEB5002026-11-03
185.177.73.87
Cyprus · MVPS LTD
exploitJSON12026-11-03
104.168.111.208
United States · HostPapa
malware mozi exploit exposed-secretPY, LOG, SH, PYC3522026-11-03
178.128.89.39
Singapore · DigitalOcean, LLC
exploit exposed-secret c2 tunnelHTML, LOG, ZIP, JS342026-11-03
185.28.119.106
United Kingdom · BlueVPS OU
exposed-secret exploit c2 malwareLOG, JSON, MD, GITIGN3982026-11-03
← NewerPage 6 of 23Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free