huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

6,035
hosts
113,007
files
86
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 3057malware 1248exploit 1168mozi 943c2 328webshell 296ioc-match 88coinminer 72gafgyt 63tsunami 44mirai 40sliver 32meterpreter 17havoc 15

Every host we harvested files from, newest first

HostLabelsFile typesFilesLast seen
122.188.45.51
China · CHINA UNICOM China169 Backbone
filesTXT12026-10-20
101.47.31.11
Singapore · Byteplus Pte. Ltd.
filesZIP12026-10-20
101.47.31.104
Singapore · Byteplus Pte. Ltd.
filesZIP12026-10-20
172.66.47.131
United States · Cloudflare, Inc.
filesDEV12026-10-20
172.66.44.125
United States · Cloudflare, Inc.
filesDEV12026-10-20
66.205.236.147
Canada · BLU Fibre Networks inc.
filesJSON12026-10-20
43.153.167.40
Japan · Shenzhen Tencent Computer Systems Company Limited
filesCOM12026-10-20
31.56.209.167
The Netherlands · SWISSNET LLC
ioc-matchMSI12026-10-20
172.67.158.99
United States · Cloudflare, Inc.
exposed-secretTXT12026-10-20
104.21.58.85
United States · Cloudflare, Inc.
exposed-secretTXT12026-10-20
112.175.185.135
South Korea · Korea Telecom
exposed-secretKR42026-10-20
172.67.208.223
United States · Cloudflare, Inc.
ioc-matchZIP12026-10-20
104.21.85.179
United States · Cloudflare, Inc.
ioc-matchZIP12026-10-20
2.26.123.158
Germany · VPSPay Networks LTD
c2TXT22026-10-20
14.251.16.113
Vietnam · VNPT Corp
exposed-secretJSON, TXT22026-10-20
8.138.240.83
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secretTXT, ENV, JSON, PHP72026-10-20
45.155.69.110
The Netherlands · PSB HOSTING LTD
filesBIN12026-10-20
85.155.224.59
Japan · BreezeHost
exposed-secretGD12026-10-20
212.11.60.31
Taiwan · OCTOPUS WEB SOLUTION INC
exposed-secretJP12026-10-20
38.96.31.52
United States · Limestone Networks, Inc.
exposed-secretGD12026-10-20
52.123.129.14
United States · Microsoft Corporation
filesTXT42026-10-19
184.25.193.167
United States · Akamai Technologies, Inc.
filesTXT12026-10-19
198.246.150.131
United States · BI
files12026-10-19
185.15.59.224
The Netherlands · Wikimedia Foundation Inc.
filesTXT12026-10-19
198.246.150.18
United States · BI
files12026-10-19
52.123.128.14
United States · Microsoft Corporation
filesTXT42026-10-19
198.246.150.132
United States · BI
files12026-10-19
198.246.150.133
United States · BI
files12026-10-19
16.15.183.15
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.213.192
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.236.105
United States · Amazon.com, Inc.
filesHTML12026-10-19
188.246.224.242
Russia · JSC Selectel
filesHTML12026-10-19
185.46.42.16
Turkey · Atak Domain Hosting Internet ve Bilgi Teknolojileri Ltd. Sti.
filesCOM12026-10-19
109.111.45.76
United States · ULTRA ONE
filesTXT22026-10-19
16.15.214.222
United States · Amazon.com, Inc.
filesHTML12026-10-19
5.44.245.166
Finland · Zoner Oy
filesFI12026-10-19
5.44.245.57
Finland · Zoner Oy
filesCOM12026-10-19
16.15.199.246
United States · Amazon.com, Inc.
filesHTML12026-10-19
172.67.208.116
United States · Cloudflare, Inc.
filesCLUB12026-10-19
104.21.23.27
United States · Cloudflare, Inc.
filesCLUB12026-10-19
104.17.112.233
United States · Cloudflare, Inc.
c2TXT12026-10-19
104.18.111.161
United States · Cloudflare, Inc.
c2TXT12026-10-19
16.15.183.55
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.229.10
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.160.66
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.199.32
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.213.210
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.213.183
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.163.153
United States · Amazon.com, Inc.
filesHTML12026-10-19
16.15.237.107
United States · Amazon.com, Inc.
filesHTML12026-10-19
← NewerPage 69 of 121Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free