huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,185
hosts
117,440
files
125
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3132malware 1272exploit 1199mozi 960c2 342webshell 306ioc-match 92coinminer 77gafgyt 63tsunami 46mirai 41sliver 33meterpreter 18havoc 17

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
104.21.67.62
United States · Cloudflare, Inc.
exposed-secret ioc-matchCOM12026-10-06
172.67.214.253
United States · Cloudflare, Inc.
exposed-secret ioc-matchCOM12026-10-06
172.66.44.244
United States · Cloudflare, Inc.
filesDEV12026-10-06
172.66.47.12
United States · Cloudflare, Inc.
filesDEV12026-10-06
190.102.43.66
Brazil · Servicos de Infraestrutura e Datacenter
exposed-secretENV12026-10-05
190.102.43.117
Brazil · Servicos de Infraestrutura e Datacenter
exposed-secretTXT12026-10-05
190.102.43.74
Brazil · Servicos de Infraestrutura e Datacenter
exposed-secretENV12026-10-05
190.102.40.194
Brazil · Servicos de Infraestrutura e Datacenter
exploitTXT, PHP32026-10-05
190.102.43.63
Brazil · Servicos de Infraestrutura e Datacenter
exposed-secretTXT22026-10-05
190.102.42.133
Brazil · Servicos de Infraestrutura e Datacenter
exposed-secretENV12026-10-05
190.102.42.202
Brazil · Servicos de Infraestrutura e Datacenter
filesPHP12026-10-05
190.102.42.151
Brazil · Servicos de Infraestrutura e Datacenter
exposed-secretTXT12026-10-05
190.102.41.117
Brazil · Servicos de Infraestrutura e Datacenter
filesRAR32026-10-05
190.102.40.218
Brazil · Servicos de Infraestrutura e Datacenter
exposed-secretENV12026-10-05
43.162.222.230
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, PHP, JSON112026-10-05
43.162.222.62
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.222.70
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.221.186
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.221.96
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP122026-10-05
43.162.221.65
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.216.212
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.216.97
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
filesJSON12026-10-05
138.68.153.82
United Kingdom · DigitalOcean, LLC
exposed-secretTXT12026-10-05
43.162.216.45
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
filesJSON12026-10-05
43.162.213.144
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV, JSON, PHP62026-10-05
43.162.213.152
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.210.217
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, ENV42026-10-05
43.162.204.246
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT, JSON, ENV, PHP72026-10-05
43.162.204.201
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.204.186
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT12026-10-05
43.162.194.85
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT22026-10-05
43.162.194.71
Hong Kong · Shenzhen Tencent Computer Systems Company Limited
exposed-secretTXT32026-10-05
34.88.41.27
Finland · Google LLC
exposed-secretTXT12026-10-05
34.81.56.233
Taiwan · Google LLC
exposed-secretTXT12026-10-05
193.233.75.60
Germany · Digital Hosting Provider LLC
filesDZ, ONLINE22026-10-05
3.20.113.217
United States · Amazon.com, Inc.
exposed-secretTXT12026-10-05
162.240.90.178
United States · Unified Layer
filesCOM32026-10-05
209.222.98.191
United States · ReliableSite.Net LLC
filesCOM12026-10-05
162.244.94.46
United States · Webhosting Holdings LLC
filesHTML12026-10-05
209.124.55.40
United States · 123.Net, Inc.
filesPHP12026-10-05
34.65.127.124
Switzerland · Google LLC
exposed-secretTXT12026-10-05
34.65.88.35
Switzerland · Google LLC
exposed-secretTXT12026-10-05
40.180.148.68
United States
exposed-secretTXT12026-10-05
18.200.146.94
Ireland · Amazon.com, Inc.
exposed-secretTXT12026-10-05
109.122.221.181
Hungary · Rackforest Zrt.
c2TXT42026-10-05
20.190.160.22
The Netherlands · Microsoft Corporation
filesTXT12026-10-05
34.51.255.189
Sweden · Google LLC
exposed-secretTXT12026-10-05
34.50.17.130
South Korea · Google LLC
exposed-secretTXT12026-10-05
34.44.102.104
United States · Google LLC
filesJSON12026-10-05
34.38.91.120
Belgium · Google LLC
filesJSON12026-10-05
← NewerPage 98 of 124Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free