Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled exposed-secret

HostLabelsFile typesFilesLast seen
158.94.0.206
United Kingdom · Jisc Services Limited
exposed-secret tunnelJSON22026-11-07
138.226.239.24
VU · HomeLine Broadband LLC
exposed-secretTXT22026-11-07
81.94.239.8
Latvia · Sabiedriba ar ierobezotu atbildibu DELSKA Latvia
exposed-secretTXT12026-11-07
165.22.104.177
Singapore · DigitalOcean, LLC
exposed-secretTXT12026-11-07
212.86.125.40
The Netherlands · SOLLUTIUM EU Sp z.o.o.
exposed-secretTXT12026-11-07
82.41.237.29
United States · HGC Global Communications Limited
exposed-secretTXT12026-11-07
39.96.220.34
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret tunnelTXT22026-11-07
163.52.135.6
unknown network
exposed-secretTXT12026-11-07
213.136.93.167
France · Contabo GmbH
exposed-secretDE12026-11-07
212.11.60.95
Taiwan · OCTOPUS WEB SOLUTION INC
exposed-secret malware moziCOM, CYOU32026-11-07
31.57.38.70
Canada · 12651980 CANADA INC.
exposed-secret malware pe-binaryPE22026-11-07
193.187.110.10
Turkey · FAST ZONE IT
exposed-secret c2TXT, ENV, JSON, PHP72026-11-07
163.52.135.106
unknown network
malware mozi exploit exposed-secretELF, JS, TXT, JSON332026-11-07
163.52.135.171
unknown network
exposed-secretTXT12026-11-07
163.52.135.130
unknown network
exposed-secretTXT, ENV, JSON52026-11-07
163.52.135.137
unknown network
exposed-secretENV, PHP, TXT32026-11-07
163.52.135.142
unknown network
exposed-secretTXT, ENV, JSON52026-11-07
80.66.72.111
Germany · GLOBAL CONNECTIVITY SOLUTIONS LLP
exposed-secretTXT12026-11-07
89.124.101.86
The Netherlands · SERVERS TECH FZCO
exposed-secretTXT12026-11-07
38.60.91.186
United States · FASTNET DATA INC
exposed-secret malware mozi exploitSH, PY, LOG, TXT1,0392026-11-07
195.26.246.148
United States · Contabo Inc.
exposed-secret webshell exploit tunnelTXT, SAMPLE, PY, TGZ542026-11-07
70.62.29.162
United States · Charter Communications Inc
exposed-secretENV, JSON, PHP, TXT42026-11-07
61.220.68.215
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretJSON, PHP22026-11-07
192.236.152.232
United States · HostPapa
exploit exposed-secret malware moziPY, TXT, SH, LOG2412026-11-07
198.137.202.133
United States · Mojo Networks
exposed-secret exploitTXT22026-11-07
90.155.92.199
United Kingdom · Andrews & Arnold Ltd
exposed-secret exploitTXT22026-11-07
178.238.156.105
United Kingdom · Andrews & Arnold Ltd
exposed-secret exploitTXT22026-11-07
103.102.131.30
Vietnam · VGP JOINT STOCK COMPANY
exploit exposed-secretTXT, ENV, JSON, PHP102026-11-07
3.84.186.180
United States · Amazon.com, Inc.
exposed-secret malware mozi exploitPY, HTML, JS, TXT8292026-11-07
101.96.212.69
China · Beijing Volcano Engine Technology Co., Ltd.
exposed-secretTXT12026-11-07
103.141.140.243
Vietnam · Megacore Technology Company Limited
exposed-secretENV12026-11-07
3.128.117.168
United States · Amazon.com, Inc.
exposed-secret exploit malware moziPHP, JS, BIN, DB2562026-11-07
64.23.240.211
United States · DigitalOcean, LLC
malware exploit coinminer exposed-secretPY, LOG, TXT, SH3862026-11-07
183.62.6.61
China · Chinanet
exposed-secretTXT12026-11-07
8.212.181.6
Philippines · Alibaba (US) Technology Co., Ltd.
exposed-secret malware cobalt-strike c2GO, BIN, TXT, PE772026-11-07
206.238.42.110
Singapore · Tcloudnet
exposed-secretTXT12026-11-07
13.213.18.30
Singapore · Amazon.com, Inc.
exposed-secretTXT12026-11-07
23.148.145.226
United States · VolumeDrive
exposed-secret exploitTXT, ENV32026-11-07
13.215.184.109
Singapore · Amazon.com, Inc.
exposed-secret malware exploit moziJSON, TXT, SH, PY1362026-11-07
16.59.36.98
United States · Amazon.com, Inc.
c2 exposed-secret exploit malwareLOG, SH, PY, JSON722026-11-07
3.26.94.147
Australia · Amazon.com, Inc.
c2 exploit malware exposed-secretPY, TOC, PE, MD672026-11-07
3.144.74.60
United States · Amazon.com, Inc.
exposed-secret malware tunnel elf-binaryLOG, JSON, SH, HTML652026-11-07
13.63.179.207
Sweden · Amazon.com, Inc.
exposed-secret malware mozi c2TXT, APK, GITIGN, KEYSTO392026-11-07
13.202.179.30
India · Amazon.com, Inc.
exposed-secret exploit tunnelMD, PHP, YML, JE82026-11-07
172.67.134.20
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-07
104.21.5.249
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-07
185.39.18.252
The Netherlands · BlueVPS OU
exposed-secret tunnelTXT, SH32026-11-07
13.244.76.8
South Africa · Amazon.com, Inc.
exposed-secretSORRY, TPL, NEW, SAMPLE1952026-11-07
89.36.231.178
France · ROCKHOSTER PRIVATE LIMITED
malware coinminer exploit c2XML, SH, BAT, JAR2812026-11-07
152.175.230.66
Hong Kong · SKR-DE SAKURA INTERNATIONAL INVESTMENT LIMITED
exposed-secret malware mozi exploitJSON, JS, HTML, TXT352026-11-07
← NewerPage 9 of 60Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free