huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,185
hosts
117,458
files
125
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3132malware 1272exploit 1199mozi 960c2 342webshell 306ioc-match 92coinminer 77gafgyt 63tsunami 46mirai 41sliver 33meterpreter 18havoc 17

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
185.77.97.139
United States · Hostinger International Limited
filesCOM12026-09-29
91.108.103.134
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
89.116.109.34
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
91.108.103.148
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
195.200.9.216
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
91.108.103.47
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
89.116.109.106
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
195.200.9.144
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
89.116.109.211
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
148.113.27.69
Canada · OVH SAS
filesCOM12026-09-29
103.180.163.204
India · LEAPSWITCH NETWORKS PRIVATE LIMITED
files12026-09-29
172.67.221.235
United States · Cloudflare, Inc.
filesINFO12026-09-29
104.21.54.4
United States · Cloudflare, Inc.
filesINFO12026-09-29
5.161.68.219
United States · Hetzner Online GmbH
filesCOM12026-09-29
89.116.109.194
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
52.44.27.34
United States · Amazon.com, Inc.
filesCOM12026-09-29
150.241.80.169
The Netherlands · LLC "HOSTOFF CSL"
ioc-matchTOP12026-09-29
94.154.43.30
Turkey · Net Gate Telecom S.R.L.
filesJE12026-09-29
155.138.210.203
United States · The Constant Company, LLC
tunnelCOM, INFO22026-09-29
91.108.103.219
United Kingdom · Hostinger International Limited
filesCOM12026-09-29
131.123.43.239
United States
exposed-secret exploit c2 tunnelSH, PY, TXT, JSP1042026-09-29
172.64.151.8
United States · Cloudflare, Inc.
exposed-secretIO12026-09-29
104.18.36.248
United States · Cloudflare, Inc.
exposed-secretIO12026-09-29
18.245.218.106
United States · Amazon.com, Inc.
filesTXT12026-09-29
18.245.218.51
United States · Amazon.com, Inc.
filesTXT12026-09-29
18.245.218.22
United States · Amazon.com, Inc.
filesTXT12026-09-29
172.67.159.130
United States · Cloudflare, Inc.
exploitDEV12026-09-29
104.21.41.34
United States · Cloudflare, Inc.
exploitDEV12026-09-29
172.66.47.119
United States · Cloudflare, Inc.
filesDEV12026-09-29
172.66.44.137
United States · Cloudflare, Inc.
filesDEV12026-09-29
112.175.185.139
South Korea · Korea Telecom
filesKR12026-09-29
89.19.223.206
Russia · SYSECT D.O.O.
exposed-secretTXT12026-09-28
89.19.223.204
Russia · SYSECT D.O.O.
exposed-secretTXT12026-09-28
89.19.223.33
Russia · SYSECT D.O.O.
exposed-secretTXT12026-09-28
89.19.220.44
Russia · SYSECT D.O.O.
exposed-secretTXT12026-09-28
212.193.31.35
Russia · SYSECT D.O.O.
exposed-secretTXT12026-09-28
172.67.214.38
United States · Cloudflare, Inc.
filesCOM12026-09-28
104.21.16.159
United States · Cloudflare, Inc.
filesCOM12026-09-28
172.67.176.153
United States · Cloudflare, Inc.
filesTOP12026-09-28
104.21.21.83
United States · Cloudflare, Inc.
filesCOM12026-09-28
172.67.197.15
United States · Cloudflare, Inc.
filesCOM12026-09-28
104.21.83.131
United States · Cloudflare, Inc.
filesTOP12026-09-28
31.43.161.6
The Netherlands · Amazon.com, Inc.
filesMEDIA12026-09-28
31.43.160.6
The Netherlands · Amazon.com, Inc.
filesMEDIA12026-09-28
172.67.128.56
United States · Cloudflare, Inc.
filesLIVE12026-09-28
104.21.0.192
United States · Cloudflare, Inc.
filesLIVE12026-09-28
216.225.205.191
United States · IONOS SE
filesTOP12026-09-28
172.67.139.112
United States · Cloudflare, Inc.
filesSBS12026-09-28
104.21.8.122
United States · Cloudflare, Inc.
filesSBS12026-09-28
91.108.103.95
United Kingdom · Hostinger International Limited
filesCOM12026-09-28
← NewerPage 112 of 124Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free