huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,067
hosts
115,938
files
85
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3084malware 1261exploit 1179mozi 953c2 337webshell 304ioc-match 88coinminer 75gafgyt 63tsunami 45mirai 41sliver 32meterpreter 18havoc 16

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
43.155.180.222
South Korea · Shenzhen Tencent Computer Systems Company Limited
exposed-secretKEY, PEM, CNF, TXT72026-10-06
124.221.6.138
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-06
169.150.196.161
The Netherlands · Datacamp Limited
exposed-secretTXT12026-10-06
103.149.28.61
Vietnam · WEBPX SOFTWARE COMPANY LIMITED
exposed-secretTXT12026-10-06
120.27.135.210
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretENV12026-10-06
178.251.140.3
Russia · JSC "ER-Telecom Holding"
exposed-secretTXT, ENV, PHP82026-10-06
117.196.219.39
India · Bharat Sanchar Nigam Ltd
exposed-secret exploitTXT22026-10-06
31.220.73.14
France · Contabo GmbH
exposed-secretTXT12026-10-06
103.193.178.240
Indonesia · PT Cloud Hosting Indonesia
exposed-secretTXT12026-10-06
34.146.251.17
Japan · Google LLC
exposed-secretTXT12026-10-06
51.75.194.44
France · OVH SAS
filesBIN12026-10-06
212.154.234.9
Kazakhstan · JSC Kazakhtelecom
exposed-secret exploitTXT, ENV32026-10-06
45.65.233.134
Colombia · COLOMBIA MAS TV S.A.S
filesBIN12026-10-06
175.126.166.172
South Korea · SK Broadband Co Ltd
exposed-secret exploitTXT22026-10-06
45.160.125.4
Brazil · Smart Solucoes em Telecomunicacoes
filesJSON12026-10-06
190.213.180.98
TT · Columbus Communications Trinidad Limited.
exposed-secretTXT12026-10-06
159.138.117.98
Chile · HUAWEI INTERNATIONAL PTE. LTD.
exposed-secretTXT22026-10-06
107.173.55.151
United States · HostPapa
exploit exposed-secret c2HTML122026-10-06
41.111.128.195
DZ · Telecom Algeria
exposed-secret ioc-matchCOM12026-10-06
47.88.93.13
United States · Alibaba (US) Technology Co., Ltd.
exposed-secretTXT22026-10-06
212.11.29.129
Hungary · Datacamp Limited
exposed-secretTXT12026-10-06
142.93.146.198
Canada · DigitalOcean, LLC
exposed-secretTXT12026-10-06
173.249.39.143
France · Contabo GmbH
filesPHP12026-10-06
61.160.196.2
China · China Telecom
exposed-secretTXT12026-10-06
59.24.133.197
South Korea · Korea Telecom
exposed-secret exploitTXT22026-10-06
115.68.226.124
South Korea · SMILESERV
exposed-secretTXT12026-10-06
213.209.159.223
Germany · Feo Prest SRL
exposed-secretENV12026-10-06
45.67.217.113
France · Contabo GmbH
exposed-secretENV12026-10-06
185.93.89.135
United Arab Emirates · Limited Network LTD
exposed-secretTXT12026-10-06
146.190.158.92
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-10-06
8.148.22.190
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP122026-10-06
160.119.76.64
Seychelles · Alsycon B.V.
exploit exposed-secretTXT12026-10-06
129.204.60.235
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-06
179.43.163.26
Panama · Private Layer INC
exposed-secretJSON12026-10-06
176.149.246.125
France · Bouygues Telecom SA
filesBIN12026-10-06
8.136.5.87
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP62026-10-06
14.47.56.17
South Korea · Korea Telecom
exposed-secretTXT12026-10-06
160.187.147.124
Vietnam · INTERDIGI JOINT STOCK COMPANY
exposed-secret exploitTXT22026-10-06
57.129.41.93
Germany · OVH SAS
filesJSON12026-10-06
138.59.146.2
Brazil · EVEO Servicos de Internet Ltda.
filesBIN12026-10-06
5.83.144.60
India · GorillaServers, Inc.
malware exposed-secret c2 exploitPE, ASPX, ELF, BAT312026-10-06
123.131.17.131
China · CHINA UNICOM China169 Backbone
exposed-secretTXT12026-10-06
206.189.224.218
United States · DigitalOcean, LLC
exposed-secretTXT22026-10-06
129.232.176.178
South Africa · Xneelo (Pty) Ltd
filesSH72026-10-06
181.224.231.52
Peru · ECONOCABLE MEDIA SAC
filesJSON12026-10-06
67.197.117.245
United States · Comporium, Inc
exposed-secretTXT12026-10-06
144.172.93.238
United States · RouterHosting LLC
exposed-secret forced-lootTXT12026-10-06
183.250.89.44
China · China Mobile
filesBIN12026-10-06
176.222.55.99
The Netherlands · HOSTKEY B.V.
exposed-secretTXT12026-10-06
154.54.100.172
MU · American Information Network
exposed-secretTXT12026-10-06
← NewerPage 90 of 122Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free