huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
129.212.213.28
The Netherlands · DigitalOcean, LLC
exposed-secretTXT12026-11-08
172.67.155.161
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
104.21.72.219
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.187.41
United States · Cloudflare, Inc.
filesCLICK12026-11-08
104.21.56.159
United States · Cloudflare, Inc.
filesCLICK12026-11-08
104.21.41.190
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.166.208
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.92.4
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.183.113
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.23.43
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.208.209
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.152.164
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.80.174
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.220.103
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.62.52
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.30.111
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.172.220
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.197.85
United States · Cloudflare, Inc.
filesCLICK12026-11-08
104.21.21.91
United States · Cloudflare, Inc.
filesCLICK12026-11-08
104.21.47.33
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.144.45
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.36.6
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.182.172
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.138.73
United States · Cloudflare, Inc.
filesDEV12026-11-08
104.21.89.60
United States · Cloudflare, Inc.
filesDEV12026-11-08
172.67.212.237
United States · Cloudflare, Inc.
filesCOM12026-11-08
104.21.23.192
United States · Cloudflare, Inc.
filesCOM12026-11-08
104.21.40.89
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.183.69
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
185.151.30.225
United Kingdom · 20i Limited
exposed-secretJSON12026-11-08
104.21.38.173
United States · Cloudflare, Inc.
filesRS12026-11-08
172.67.137.13
United States · Cloudflare, Inc.
filesRS12026-11-08
183.136.138.188
China · NINGBO, ZHEJIANG Province, P.R.China.
exposed-secretTXT12026-11-08
202.10.43.196
Indonesia · Rumahweb
exposed-secretPHP, SQL, ZIP42026-11-08
104.21.20.47
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.191.88
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
38.165.94.242
United States · PEG TECH INC
exposed-secretENV12026-11-08
104.21.5.10
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.132.182
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.186.191
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.36.61
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.219.124
United States · Cloudflare, Inc.
filesTXT12026-11-08
104.21.53.230
United States · Cloudflare, Inc.
filesTXT12026-11-08
183.136.138.174
China · NINGBO, ZHEJIANG Province, P.R.China.
exposed-secretTXT12026-11-08
102.220.160.24
Slovenia · ABINTERNET-V Ltd.
filesBAT, ZIP22026-11-08
104.21.27.30
United States · Cloudflare, Inc.
filesTXT12026-11-08
172.67.140.244
United States · Cloudflare, Inc.
filesTXT12026-11-08
137.220.145.242
Japan · CTG Server Limited
exposed-secretTXT, ENV, JSON, PHP62026-11-08
104.21.87.198
United States · Cloudflare, Inc.
filesBEST12026-11-08
172.67.145.202
United States · Cloudflare, Inc.
filesBEST12026-11-08
← NewerPage 11 of 120Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free