huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
183.136.138.171
China · NINGBO, ZHEJIANG Province, P.R.China.
exposed-secretTXT12026-11-08
209.50.59.38
United States · UpCloud USA Inc
exposed-secretTXT12026-11-08
172.67.143.110
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.71.52
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.2.246
United States · Cloudflare, Inc.
filesCOM12026-11-08
172.67.129.229
United States · Cloudflare, Inc.
filesCOM12026-11-08
104.21.95.27
United States · Cloudflare, Inc.
filesCOM12026-11-08
104.21.39.107
United States · Cloudflare, Inc.
filesEU12026-11-08
172.67.144.144
United States · Cloudflare, Inc.
filesEU12026-11-08
104.21.18.239
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.183.232
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.191.110
United States · Cloudflare, Inc.
filesDEV12026-11-08
104.21.76.84
United States · Cloudflare, Inc.
filesDEV12026-11-08
104.21.40.83
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.182.146
United States · Cloudflare, Inc.
filesCYOU12026-11-08
165.154.235.16
Singapore · Scloud Pte Ltd
filesZIP12026-11-08
104.21.9.103
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.130.215
United States · Cloudflare, Inc.
filesCYOU12026-11-08
183.136.138.189
China · NINGBO, ZHEJIANG Province, P.R.China.
exposed-secretTXT12026-11-08
104.21.66.173
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.162.114
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
104.21.62.197
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.138.193
United States · Cloudflare, Inc.
filesCYOU12026-11-08
91.124.130.146
Ukraine · HIVELOCITY, Inc.
exposed-secretTXT12026-11-08
185.77.97.104
United States · Hostinger International Limited
filesCYOU, SHOP22026-11-08
172.67.216.68
United States · Cloudflare, Inc.
filesDEV22026-11-08
104.21.16.224
United States · Cloudflare, Inc.
filesDEV22026-11-08
172.67.159.251
United States · Cloudflare, Inc.
filesTXT12026-11-08
104.21.33.72
United States · Cloudflare, Inc.
filesTXT12026-11-08
172.67.162.23
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
104.21.15.94
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
172.67.150.136
United States · Cloudflare, Inc.
c2HTML12026-11-08
104.21.11.224
United States · Cloudflare, Inc.
c2HTML12026-11-08
104.21.42.227
United States · Cloudflare, Inc.
filesCYOU12026-11-08
172.67.167.168
United States · Cloudflare, Inc.
filesCYOU12026-11-08
138.197.52.52
United States · DigitalOcean, LLC
exposed-secret exploitTXT22026-11-08
172.67.137.47
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.7.187
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.31.4
United States · Cloudflare, Inc.
filesWEBSIT12026-11-08
159.203.179.184
United States · DigitalOcean, LLC
exposed-secretENV, TXT22026-11-08
172.67.178.48
United States · Cloudflare, Inc.
filesCYOU12026-11-08
104.21.35.180
United States · Cloudflare, Inc.
filesCYOU12026-11-08
185.182.184.47
France · Contabo GmbH
exposed-secretTXT12026-11-08
185.151.30.156
United Kingdom · 20i Limited
exposed-secretJSON12026-11-08
104.21.53.195
United States · Cloudflare, Inc.
filesLOL12026-11-08
172.67.217.248
United States · Cloudflare, Inc.
filesLOL12026-11-08
104.21.32.179
United States · Cloudflare, Inc.
exposed-secretCYOU12026-11-08
104.21.23.46
United States · Cloudflare, Inc.
filesCLICK12026-11-08
172.67.209.46
United States · Cloudflare, Inc.
filesCLICK12026-11-08
185.151.30.226
United Kingdom · 20i Limited
exposed-secretJSON12026-11-08
← NewerPage 12 of 120Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free