huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,975
hosts
106,609
files
129
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3004malware 1226exploit 1136mozi 923c2 314webshell 282ioc-match 87coinminer 67gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
106.0.135.20
Thailand · Ministry of Education - EMISC
filesJSON12026-10-28
133.125.50.191
Japan · SAKURA Internet Inc.
exposed-secretENV12026-10-28
192.71.27.172
Israel · Interhost Communication Solutions Ltd.
exposed-secretENV, TXT22026-10-28
83.243.121.167
Norway · M247 Europe SRL
exposed-secretENV, TXT22026-10-28
210.21.244.19
China · China Unicom Shenzen network
exposed-secretJSON, PHP22026-10-28
123.133.65.7
China · CHINA UNICOM China169 Backbone
exposed-secretTXT, ENV, JSON, PHP92026-10-28
89.31.122.207
Czechia · Cogent Communications
exposed-secretENV, TXT22026-10-28
198.244.228.188
United Kingdom · OVH SAS
exposed-secretTXT, PHP32026-10-28
47.129.105.10
Singapore · Amazon.com, Inc.
exposed-secretENV, TXT22026-10-28
91.132.92.158
Denmark · M247 Europe SRL
exposed-secretENV, TXT22026-10-28
43.210.37.86
Thailand · Amazon.com, Inc.
exposed-secretTXT, ENV32026-10-28
43.199.29.225
China · Amazon.com, Inc.
exposed-secret exploitTXT, ENV72026-10-28
35.78.212.217
Japan · Amazon.com, Inc.
exposed-secret exploitTXT, ENV32026-10-28
35.77.81.9
Japan · Amazon.com, Inc.
exposed-secretENV, TXT32026-10-28
193.235.146.41
Chile · iHosting Servicios Internet Ltda.
exposed-secretENV, TXT22026-10-28
185.28.154.238
Israel · O.M.C. COMPUTERS & COMMUNICATIONS LTD
exposed-secretENV, TXT22026-10-28
139.87.74.106
United States · Oracle Corporation
exposed-secretTXT12026-10-28
139.87.82.201
United States · Oracle Corporation
exposed-secretTXT12026-10-28
139.87.80.2
United States · Oracle Corporation
exposed-secretTXT12026-10-28
47.128.220.7
Singapore · Amazon.com, Inc.
exposed-secret exploitTXT32026-10-28
3.34.51.134
South Korea · Amazon.com, Inc.
exposed-secret exploitTXT, ENV72026-10-28
16.106.35.211
United States
exposed-secretTXT, ENV32026-10-28
194.71.107.241
Bulgaria · EDIS GmbH
exposed-secretENV, TXT22026-10-28
13.212.226.239
Singapore · Amazon.com, Inc.
exposed-secret exploitENV, TXT42026-10-28
13.208.185.47
Japan · Amazon.com, Inc.
exposed-secretENV, TXT22026-10-28
192.71.26.78
Italy · EDIS GmbH
exposed-secretENV, TXT22026-10-28
121.4.70.25
China · Shenzhen Tencent Computer Systems Company Limited
filesBIN12026-10-28
121.196.247.165
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-28
121.199.174.181
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploitTXT22026-10-28
15.152.38.117
Japan · Amazon.com, Inc.
exposed-secretENV, TXT22026-10-28
106.55.135.132
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-28
152.136.20.54
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP72026-10-28
101.37.237.127
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-28
106.53.44.41
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-28
13.210.69.163
Australia · Amazon.com, Inc.
exposed-secret exploitTXT32026-10-28
66.175.219.53
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
13.125.83.249
South Korea · Amazon.com, Inc.
exposed-secret exploitTXT32026-10-28
14.225.205.210
Vietnam · VIETNAM POSTS AND TELECOMMUNICATIONS GROUP
exposed-secretTXT, ENV, JSON, PHP62026-10-28
132.145.98.219
Canada · Oracle Corporation
exposed-secretTXT12026-10-28
115.126.127.68
Hong Kong · Forewin Telecom Group Limited
exposed-secretTXT12026-10-28
115.126.127.6
Hong Kong · Forewin Telecom Group Limited
exposed-secretTXT12026-10-28
45.147.248.47
Germany · Kamatera Inc
exposed-secretENV, TXT22026-10-28
194.71.227.174
Belgium · EDIS GmbH
exposed-secretENV, TXT22026-10-28
174.138.9.176
The Netherlands · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
45.32.179.217
United Kingdom · The Constant Company, LLC
exposed-secretENV, TXT22026-10-28
172.232.147.87
Sweden · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
78.138.17.141
United States · Kamatera, Inc.
exposed-secretENV, TXT22026-10-28
151.236.15.117
Germany · M247 Europe SRL
exposed-secretENV, TXT22026-10-28
159.223.250.106
Germany · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
158.255.215.175
France · M247 Europe SRL
exposed-secretENV, TXT22026-10-28
← NewerPage 47 of 120Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free