huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,031
hosts
112,857
files
81
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3052malware 1248exploit 1167mozi 943c2 328webshell 296ioc-match 88coinminer 72gafgyt 63tsunami 44mirai 40sliver 32meterpreter 17havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
91.90.216.104
Uzbekistan · NETKA TELEKOM LLC
exposed-secretTXT, ENV, PHP52026-10-28
54.254.189.170
Singapore · Amazon.com, Inc.
exposed-secretTXT12026-10-28
192.144.136.113
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-28
54.194.162.61
Ireland · Amazon.com, Inc.
exposed-secretTXT12026-10-28
155.212.189.29
Russia · Beget LLC
exposed-secret exploitTXT, ENV, JSON72026-10-28
178.218.42.34
Russia · ATEXS PLUS Ltd.
malware pe-binaryRAR, ZIP, DB, PE972026-10-28
155.212.133.62
Russia · Beget LLC
exposed-secret exploitTXT22026-10-28
155.212.133.101
Russia · Beget LLC
exposed-secretTXT12026-10-28
176.126.36.87
Russia · Sigma-Soft Ltd
malware pe-binaryPE22026-10-28
111.88.124.137
Russia · JSC Selectel
exposed-secretTXT22026-10-28
134.0.118.98
Russia · "Domain names registrar REG.RU", Ltd
exposed-secretTXT22026-10-28
109.69.20.50
Russia · Beget LLC
exposed-secretENV12026-10-28
178.69.35.91
Russia · PJSC Rostelecom
filesJSON12026-10-28
94.159.18.14
Russia · "NetCom-R" LLC
exposed-secretTXT12026-10-28
95.31.43.145
Russia · PJSC "Vimpelcom"
exposed-secretTXT12026-10-28
167.17.69.200
Canada · GTHost
exploit webshell exposed-secret malwarePY, PHP, ELF, SH272026-10-28
161.104.34.133
Russia · JSC Selectel
exposed-secret exploitTXT22026-10-28
155.212.163.124
The Netherlands · JSC IOT
exposed-secretTXT12026-10-28
67.21.68.60
United States · Sharktech
exploit exposed-secretTXT12026-10-28
138.201.188.166
Germany · Hetzner Online GmbH
exposed-secretTXT12026-10-28
43.242.97.17
China · Shanghai Rugu Info&Tech Co.,Ltd.
exposed-secretTXT, ENV62026-10-28
185.220.223.43
Latvia · Versija SIA
exposed-secretTXT12026-10-28
210.71.231.62
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretTXT, PHP, ENV, JSON102026-10-28
210.65.88.246
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secretTXT12026-10-28
210.65.88.175
Taiwan · Chunghwa Telecom Co., Ltd.
exposed-secret exploitTXT22026-10-27
221.226.50.22
China · Chinanet
exposed-secretTXT32026-10-27
170.210.232.6
Argentina · Red de Interconexion Universitaria
filesBIN12026-10-27
106.116.230.110
China · Chinanet
exposed-secret exploitTXT32026-10-27
101.37.164.18
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-27
101.89.149.227
China · China Telecom (Group)
exposed-secret exploitTXT22026-10-27
113.128.224.146
China · Chinanet
exposed-secretTXT12026-10-27
112.74.101.55
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-27
114.67.182.214
China · CHINANET Guangdong province network
exposed-secret malware pe-binary tunnelHTML, PE, MD, ZIP82026-10-27
106.14.174.25
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-27
106.14.205.29
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT22026-10-27
101.200.129.224
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-27
120.27.25.98
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-27
120.27.19.229
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-27
120.24.79.146
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretJSON, TXT, ENV, PHP82026-10-27
120.25.151.205
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT32026-10-27
120.53.245.100
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT22026-10-27
120.26.128.126
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT22026-10-27
118.190.132.83
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-27
106.14.225.228
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT12026-10-27
116.63.54.175
China · China Unicom
exposed-secretTXT12026-10-27
101.200.45.17
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT22026-10-27
14.18.190.170
China · Chinanet
filesBIN12026-10-27
62.97.41.132
Italy · INTRED S.P.A.
exposed-secretJSON, PHP22026-10-27
89.110.124.250
The Netherlands · SERVERS TECH FZCO
exposed-secretTXT12026-10-27
104.237.132.60
United States · Akamai Technologies, Inc.
exposed-secretLOG12026-10-27
← NewerPage 54 of 121Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free