huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,030
hosts
112,856
files
80
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3051malware 1248exploit 1167mozi 943c2 328webshell 296ioc-match 88coinminer 72gafgyt 63tsunami 44mirai 40sliver 32meterpreter 17havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
115.126.127.6
Hong Kong · Forewin Telecom Group Limited
exposed-secretTXT12026-10-28
45.147.248.47
Germany · Kamatera Inc
exposed-secretENV, TXT22026-10-28
194.71.227.174
Belgium · EDIS GmbH
exposed-secretENV, TXT22026-10-28
174.138.9.176
The Netherlands · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
45.32.179.217
United Kingdom · The Constant Company, LLC
exposed-secretENV, TXT22026-10-28
172.232.147.87
Sweden · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
78.138.17.141
United States · Kamatera, Inc.
exposed-secretENV, TXT22026-10-28
151.236.15.117
Germany · M247 Europe SRL
exposed-secretENV, TXT22026-10-28
159.223.250.106
Germany · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
158.255.215.175
France · M247 Europe SRL
exposed-secretENV, TXT22026-10-28
172.233.110.172
Spain · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
138.68.36.135
United States · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
143.244.196.56
The Netherlands · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
104.248.191.18
United States · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
172.105.9.180
Canada · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
139.162.161.144
Germany · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
139.59.203.246
United Kingdom · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
144.126.254.211
India · DigitalOcean, LLC
exposed-secretTXT12026-10-28
143.42.229.125
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
104.237.152.124
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
104.237.152.223
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
170.187.195.45
Canada · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
146.190.242.129
Canada · DigitalOcean, LLC
exposed-secretENV, TXT22026-10-28
178.79.138.58
United Kingdom · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
172.232.13.224
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
172.105.106.202
Canada · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
139.84.170.174
India · The Constant Company, LLC
exposed-secretTXT12026-10-28
178.79.133.63
United Kingdom · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
64.176.60.25
Japan · The Constant Company, LLC
exposed-secretTXT12026-10-28
139.144.26.91
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
64.176.18.142
Chile · The Constant Company, LLC
exposed-secretTXT12026-10-28
139.144.26.97
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
139.144.26.231
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
170.205.38.60
United States · HostHatch, LLC
exposed-secretTXT12026-10-28
139.144.26.40
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
45.77.114.57
United States · The Constant Company, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-28
45.63.104.220
United States · The Constant Company, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-28
45.77.75.9
United States · The Constant Company, LLC
exposed-secretTXT, ENV, JSON, PHP52026-10-28
146.190.242.80
Canada · DigitalOcean, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-28
64.177.45.71
United States
exposed-secretTXT, ENV, JSON, PHP72026-10-28
45.17.27.235
United States · AT&T Enterprises, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-28
45.59.60.53
United States · NEIT Services, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-28
147.182.183.167
United States · DigitalOcean, LLC
exposed-secretTXT, ENV, JSON, PHP52026-10-28
12.13.221.242
United States · AT&T Enterprises, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-28
146.190.139.64
United States · DigitalOcean, LLC
exposed-secretTXT, ENV42026-10-28
45.76.226.133
United States · The Constant Company, LLC
exposed-secretTXT, ENV, JSON, PHP72026-10-28
183.111.5.210
South Korea · Korea Telecom
exposed-secretTXT, PHP, ENV72026-10-28
46.183.186.152
Hungary · Magyar Telekom plc.
exposed-secretENV, TXT22026-10-28
113.249.111.67
China · Chongqing Telecom
exposed-secretTXT, ENV, JSON, PHP62026-10-28
103.85.185.183
Mongolia · National Data Center
filesJSON, PHP22026-10-28
← NewerPage 49 of 121Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free