huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
216.150.1.193
United States · Amazon.com, Inc.
exposed-secretCOM22026-11-08
208.84.100.64
United States · Advin Services LLC
filesXYZ12026-11-08
104.21.21.20
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
216.150.16.1
United States · Amazon.com, Inc.
exposed-secretCOM12026-11-08
216.150.16.193
United States · Amazon.com, Inc.
exposed-secretCOM22026-11-08
104.21.75.4
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.143.96
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
104.21.87.132
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.209.246
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.149.105
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
104.21.4.119
United States · Cloudflare, Inc.
exposed-secretTXT12026-11-08
172.67.142.188
United States · Cloudflare, Inc.
filesBEER12026-11-08
172.67.132.12
United States · Cloudflare, Inc.
exposed-secretTXT12026-11-08
104.21.27.136
United States · Cloudflare, Inc.
filesBEER12026-11-08
104.21.29.151
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
172.67.152.25
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
104.21.56.133
United States · Cloudflare, Inc.
exposed-secretXYZ12026-11-08
176.65.132.30
The Netherlands · Pfcloud UG (haftungsbeschrankt)
filesCOM12026-11-08
172.67.144.139
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.47.50
United States · Cloudflare, Inc.
filesCYOU12026-11-08
185.77.97.163
United States · Hostinger International Limited
filesCOM, CYOU22026-11-08
103.8.25.24
Malaysia · SKSA Technology Sdn Bhd
exposed-secretTXT12026-11-08
172.67.174.243
United States · Cloudflare, Inc.
filesDEV12026-11-08
104.21.31.42
United States · Cloudflare, Inc.
filesDEV12026-11-08
213.186.33.19
France · OVH SAS
filesBE12026-11-08
195.200.9.220
United Kingdom · Hostinger International Limited
filesCOM, CYOU22026-11-08
185.95.159.25
Seychelles · IP Vendetta Inc.
exposed-secretJSON12026-11-08
173.231.222.210
United States · InMotion Hosting, Inc.
exposed-secret malware mozi exploitGZ, SQL, PHP282026-11-08
23.235.197.245
United States · InMotion Hosting, Inc.
exposed-secretPHP12026-11-08
172.67.131.240
United States · Cloudflare, Inc.
filesSHOP12026-11-08
104.21.12.61
United States · Cloudflare, Inc.
filesSHOP12026-11-08
185.77.97.17
United States · Hostinger International Limited
filesCOM, CYOU22026-11-08
172.67.135.118
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.6.237
United States · Cloudflare, Inc.
filesCYOU12026-11-08
91.108.103.77
United Kingdom · Hostinger International Limited
filesCYOU12026-11-08
104.21.49.146
United States · Cloudflare, Inc.
filesHTML12026-11-08
172.67.163.171
United States · Cloudflare, Inc.
filesHTML12026-11-08
172.67.171.91
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.39.202
United States · Cloudflare, Inc.
filesCYOU12026-11-08
185.77.97.251
United States · Hostinger International Limited
filesSHOP12026-11-08
104.21.39.254
United States · Cloudflare, Inc.
filesDEV12026-11-08
172.67.172.214
United States · Cloudflare, Inc.
filesDEV12026-11-08
104.21.93.151
United States · Cloudflare, Inc.
filesCOM12026-11-08
172.67.211.94
United States · Cloudflare, Inc.
filesCOM12026-11-08
104.21.49.4
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.139.250
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.161.51
United States · Cloudflare, Inc.
filesCOM12026-11-08
104.21.82.177
United States · Cloudflare, Inc.
filesCOM12026-11-08
172.67.202.28
United States · Cloudflare, Inc.
exposed-secret c2COM, CYOU22026-11-08
104.21.60.230
United States · Cloudflare, Inc.
exposed-secret c2COM, CYOU22026-11-08
← NewerPage 10 of 120Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free