huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,195
hosts
117,601
files
131
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3142malware 1278exploit 1203mozi 963c2 343webshell 307ioc-match 92coinminer 77gafgyt 63tsunami 46mirai 41sliver 33havoc 18meterpreter 18

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
195.200.9.237
United Kingdom · Hostinger International Limited
filesCOM12026-09-27
89.116.109.41
United Kingdom · Hostinger International Limited
filesCOM12026-09-27
91.108.103.120
United Kingdom · Hostinger International Limited
filesCOM12026-09-27
195.200.9.22
United Kingdom · Hostinger International Limited
filesCOM12026-09-27
195.200.9.44
United Kingdom · Hostinger International Limited
filesCOM12026-09-27
89.116.109.42
United Kingdom · Hostinger International Limited
filesCOM12026-09-27
185.77.97.98
United States · Hostinger International Limited
filesCOM12026-09-27
195.200.9.21
United Kingdom · Hostinger International Limited
filesCOM12026-09-27
37.142.77.163
Israel · Hot-Net internet services Ltd.
ioc-match malware elf-binaryELF12026-09-27
88.8.20.75
Spain · TELEFONICA DE ESPANA S.A.U.
ioc-match malware elf-binaryELF12026-09-27
5.185.55.173
Poland · Orange Polska Spolka Akcyjna
ioc-match malware elf-binaryBIN, ELF22026-09-27
212.156.106.146
Turkey · Turk Telekomunikasyon Anonim Sirketi
ioc-match malware elf-binaryELF12026-09-27
88.86.246.233
France · ADISTA SAS
ioc-match malware elf-binaryELF12026-09-27
185.32.179.229
Israel · HOT Mobile Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.54.85.90
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.54.96.198
Israel · Partner Communications Ltd.
filesBIN12026-09-27
2.54.89.92
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.55.94.142
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.136.203.189
Spain · TELEFONICA DE ESPANA S.A.U.
ioc-match malware elf-binaryELF12026-09-27
2.54.81.12
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryBIN, ELF22026-09-27
185.166.91.145
The Netherlands · Critical Core BV
ioc-match malware elf-binaryELF12026-09-27
136.233.149.66
India · Reliance Jio Infocomm Limited
ioc-match malware elf-binaryELF12026-09-27
123.209.116.148
Australia · Telstra Limited
filesBIN12026-09-27
176.65.139.250
The Netherlands · Offshore LC
malware exploit elf-binaryELF, SH, TXT52026-09-27
176.65.134.121
Slovenia · Pfcloud UG (haftungsbeschrankt)
malware elf-binaryELF, SE432026-09-27
185.77.97.180
United States · Hostinger International Limited
filesCOM12026-09-27
193.233.91.227
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.91.202
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.91.142
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.91.76
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.91.37
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.91.14
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.88.178
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.88.172
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.88.158
Russia · Aeza Group LLC
filesJSON12026-09-27
193.233.88.18
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
193.233.223.35
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.39
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.32
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.38
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.33
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.31
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.34
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.18
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.13
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.15
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.12
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.223.10
Russia · Aeza Group LLC
exposed-secret forced-lootTXT12026-09-27
193.233.216.44
Russia · Aeza Group LLC
exposed-secret exploit webshellTXT, GZ, PUB, XZ132026-09-27
193.233.216.156
Russia · Aeza Group LLC
exposed-secretTXT12026-09-27
← NewerPage 114 of 124Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free