Live findsCVE IntelResearchConsoleStart free
huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,031
hosts
112,857
files
81
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3052malware 1248exploit 1167mozi 943c2 328webshell 296ioc-match 88coinminer 72gafgyt 63tsunami 44mirai 40sliver 32meterpreter 17havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
15.207.130.130
India · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-28
51.75.26.136
France · OVH SAS
exposed-secretENV12026-10-28
200.0.230.14
Argentina · Telefonica de Argentina
exposed-secret exploitTXT22026-10-28
45.33.96.118
United States · Akamai Technologies, Inc.
exposed-secretENV, TXT22026-10-28
45.133.74.234
Germany · Florian Kolb
exposed-secret exploitTXT, HTML, JSON, ENV1842026-10-28
35.74.31.145
Japan · Amazon.com, Inc.
exposed-secret exploitTXT22026-10-28
45.79.122.166
India · Akamai Technologies, Inc.
exposed-secretTXT12026-10-28
138.197.108.16
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-28
45.33.104.77
United States · Akamai Technologies, Inc.
exposed-secretTXT12026-10-28
45.79.126.235
India · Akamai Technologies, Inc.
exposed-secretTXT12026-10-28
45.33.118.242
United States · Akamai Technologies, Inc.
exposed-secretTXT12026-10-28
5.45.100.28
Germany · netcup GmbH
exposed-secretTXT12026-10-28
5.45.101.64
Germany · netcup GmbH
exposed-secretTXT12026-10-28
46.38.232.153
Germany · netcup GmbH
exposed-secretTXT12026-10-28
45.77.177.19
Japan · The Constant Company, LLC
exposed-secretTXT12026-10-28
45.77.8.72
Japan · The Constant Company, LLC
exposed-secret exploitTXT, ENV, JSON72026-10-28
45.76.122.33
Australia · The Constant Company, LLC
exposed-secret mirrorTXT22026-10-28
45.77.156.210
United States · The Constant Company, LLC
exposed-secret mirrorTXT22026-10-28
45.76.22.13
United States · The Constant Company, LLC
exposed-secret mirrorTXT22026-10-28
207.246.71.158
United States · The Constant Company, LLC
exposed-secret mirrorTXT22026-10-28
213.171.208.160
United Kingdom · IONOS SE
exposed-secret exploitTXT, ENV, JSON62026-10-28
8.134.34.24
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-28
132.226.228.232
South Korea · Oracle Corporation
exposed-secretTXT, ENV, JSON, PHP62026-10-28
136.243.130.52
Germany · Hetzner Online GmbH
exposed-secretTXT, ENV, JSON, PHP122026-10-28
23.95.84.106
United States · HostPapa
exposed-secretTXT12026-10-28
1.95.76.8
China · Huawei Cloud Service data center
exposed-secretTXT, ENV52026-10-28
118.70.33.71
Vietnam · FPT Telecom Company
exposed-secretTXT12026-10-28
207.244.253.155
United States · Contabo Inc.
exposed-secretTXT12026-10-28
51.159.98.192
France · Scaleway SAS
exploit exposed-secretTXT, JSON, PHP82026-10-28
60.244.109.20
Taiwan · Asia Pacific Broadband Fixed Lines Co., Ltd.
exposed-secret exploitTXT22026-10-28
162.19.28.217
France · OVH SAS
exposed-secretTXT12026-10-28
188.42.128.220
The Netherlands · Servers.com, Inc.
exposed-secretTXT12026-10-28
142.91.158.156
The Netherlands · Servers.com, Inc.
exposed-secretTXT12026-10-28
192.144.228.140
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.144.182
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.214.35
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.174.178
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.146.237
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.140.107
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.158.224
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.230.51
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.181.227
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.228.124
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.202.232
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, JSON, ENV82026-10-28
192.144.233.216
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.212.95
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.192.236
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.137.214
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.187.75
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
192.144.129.128
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
← NewerPage 53 of 121Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free