huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,965
hosts
106,472
files
103
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2996malware 1224exploit 1134mozi 921c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled ioc-match

HostLabelsFile typesFilesLast seen
104.21.49.116
United States · Cloudflare, Inc.
ioc-match12026-10-23
172.67.162.119
United States · Cloudflare, Inc.
ioc-match12026-10-23
203.23.179.12
Germany · GSL Networks Pty LTD
ioc-matchBIN12026-10-22
203.23.179.10
Germany · GSL Networks Pty LTD
ioc-matchBIN12026-10-22
135.130.197.97
United States · Microsoft Corporation
ioc-matchMSI12026-10-22
104.21.86.4
United States · Cloudflare, Inc.
ioc-match12026-10-22
172.67.213.80
United States · Cloudflare, Inc.
ioc-match12026-10-22
52.74.54.75
Singapore · Amazon.com, Inc.
ioc-match malware pe-binaryPE12026-10-20
31.56.209.167
The Netherlands · SWISSNET LLC
ioc-matchMSI12026-10-20
172.67.208.223
United States · Cloudflare, Inc.
ioc-matchZIP12026-10-20
104.21.85.179
United States · Cloudflare, Inc.
ioc-matchZIP12026-10-20
106.55.34.199
China · Shenzhen Tencent Computer Systems Company Limited
exposed-secret ioc-matchTXT22026-10-17
196.251.121.216
Seychelles · AS219443
ioc-matchVBS12026-10-16
172.67.216.229
United States · Cloudflare, Inc.
ioc-matchLNK12026-10-09
104.21.93.247
United States · Cloudflare, Inc.
ioc-matchLNK12026-10-09
41.111.128.195
DZ · Telecom Algeria
exposed-secret ioc-matchCOM12026-10-06
104.21.67.62
United States · Cloudflare, Inc.
exposed-secret ioc-matchCOM12026-10-06
172.67.214.253
United States · Cloudflare, Inc.
exposed-secret ioc-matchCOM12026-10-06
172.67.154.5
United States · Cloudflare, Inc.
ioc-matchZIP12026-10-03
104.21.13.4
United States · Cloudflare, Inc.
ioc-matchZIP12026-10-03
217.60.102.5
United States · HostSNAP LLC
ioc-matchTXT12026-10-03
204.0.57.85
United States · Zhilian Technology CO., LTD.
ioc-match12026-10-02
162.243.189.2
United States · DigitalOcean, LLC
ioc-matchMSI12026-10-02
150.241.80.169
The Netherlands · LLC "HOSTOFF CSL"
ioc-matchTOP12026-09-29
37.142.77.163
Israel · Hot-Net internet services Ltd.
ioc-match malware elf-binaryELF12026-09-27
88.8.20.75
Spain · TELEFONICA DE ESPANA S.A.U.
ioc-match malware elf-binaryELF12026-09-27
5.185.55.173
Poland · Orange Polska Spolka Akcyjna
ioc-match malware elf-binaryBIN, ELF22026-09-27
212.156.106.146
Turkey · Turk Telekomunikasyon Anonim Sirketi
ioc-match malware elf-binaryELF12026-09-27
88.86.246.233
France · ADISTA SAS
ioc-match malware elf-binaryELF12026-09-27
185.32.179.229
Israel · HOT Mobile Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.54.85.90
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.54.89.92
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.55.94.142
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryELF12026-09-27
2.136.203.189
Spain · TELEFONICA DE ESPANA S.A.U.
ioc-match malware elf-binaryELF12026-09-27
2.54.81.12
Israel · Partner Communications Ltd.
ioc-match malware elf-binaryBIN, ELF22026-09-27
185.166.91.145
The Netherlands · Critical Core BV
ioc-match malware elf-binaryELF12026-09-27
136.233.149.66
India · Reliance Jio Infocomm Limited
ioc-match malware elf-binaryELF12026-09-27
216.9.224.48
United States · Fiba Cloud Operation Company, LLC
ioc-matchTXT12026-09-26
← NewerPage 2 of 2
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free