Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,965
hosts
106,472
files
103
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2996malware 1224exploit 1134mozi 921c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled meterpreter

HostLabelsFile typesFilesLast seen
13.63.179.207
Sweden · Amazon.com, Inc.
exposed-secret malware mozi c2TXT, APK, GITIGN, KEYSTO392026-11-07
110.42.215.163
China · Shenzhen Tencent Computer Systems Company Limited
exploit exposed-secret malware moziGO, LOG, PY, PS13172026-11-06
45.225.135.92
Panama · RACK SPHERE HOSTING S.A.
malware exposed-secret exploit meterpreterPE, TXT, BIN, JAR72026-11-03
78.111.90.130
Canada · ITGLOBAL.COM NL B.V.
exposed-secret exploit malware moziTXT, SH, JSON, LOG2432026-11-02
104.200.73.97
United States · GWY IT PTY LTD
exposed-secret exploit malware webshellPY, ELF, C, TXT1342026-11-01
104.238.140.55
United States · The Constant Company, LLC
malware exposed-secret c2 exploitPE, PS192026-10-30
38.134.189.93
Singapore · Ultahost, Inc.
malware c2 exposed-secret meterpreterELF, MD, TXT32026-10-29
91.224.92.16
United Kingdom · UAB Host Baltic
exposed-secret malware c2 exploitSH, TXT, ELF, JAVA622026-10-28
45.115.26.30
Vietnam · Contrust Solutions S.R.L.
exposed-secret exploit malware moziLOG, PY, SH, TXT1,3952026-10-26
119.45.236.76
China · Shenzhen Tencent Computer Systems Company Limited
malware exploit c2 meterpreterLOG, PE, BIN, ELF262026-10-24
193.29.104.84
France · M247 Europe SRL
malware c2 exploit exposed-secretBAT, PS1, PE452026-10-21
16.171.12.83
Sweden · Amazon.com, Inc.
malware exploit c2 meterpreterPS1, PE, B64, VBS192026-10-21
217.6.46.91
Germany · Deutsche Telekom AG
c2 exploit exposed-secret malwarePS122026-10-14
5.83.144.60
India · GorillaServers, Inc.
malware exposed-secret c2 exploitPE, ASPX, ELF, BAT312026-10-06
172.86.118.111
United States · RouterHosting LLC
exposed-secret exploit c2 malwarePY, LOG, TXT, PHP382026-10-04
43.163.124.78
Singapore · Shenzhen Tencent Computer Systems Company Limited
exploit exposed-secret malware meterpreterTXT, ELF, MD, PY812026-10-03
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free