huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled ioc-match
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 209.99.190.93 Switzerland · SKN Subnet & Telecom Ltd | malware ioc-match pe-binary | PE | 3 | 2026-11-12 |
| 172.67.177.2 United States · Cloudflare, Inc. | exposed-secret ioc-match | JS, SBS | 2 | 2026-11-12 |
| 104.21.35.154 United States · Cloudflare, Inc. | exposed-secret ioc-match | JS, SBS | 2 | 2026-11-12 |
| 172.67.214.70 United States · Cloudflare, Inc. | ioc-match | BIN | 1 | 2026-11-12 |
| 104.21.61.200 United States · Cloudflare, Inc. | ioc-match | BIN | 1 | 2026-11-12 |
| 20.120.242.5 United States · Microsoft Corporation | ioc-match | BIN | 1 | 2026-11-11 |
| 43.198.103.139 China · Amazon.com, Inc. | ioc-match | COM | 2 | 2026-11-11 |
| 185.199.108.133 United States · Fastly, Inc. | exploit ioc-match malware mozi | BAT, DBF, HTA, PS1 | 5 | 2026-11-10 |
| 185.199.109.133 United States · Fastly, Inc. | exploit ioc-match malware mozi | BAT, DBF, HTA, PS1 | 5 | 2026-11-10 |
| 77.239.124.167 The Netherlands · Alfahost LLC | c2 exploit ioc-match tunnel | TXT | 2 | 2026-11-10 |
| 185.199.110.133 United States · Fastly, Inc. | exploit ioc-match malware mozi | BAT, DBF, HTA, PS1 | 5 | 2026-11-09 |
| 63.176.8.218 Germany · Amazon.com, Inc. | exposed-secret ioc-match malware pe-binary | APP, JAR, CLICK, COM | 10 | 2026-11-09 |
| 35.157.26.135 Germany · Amazon.com, Inc. | exposed-secret ioc-match malware pe-binary | APP, JAR, CLICK, COM | 10 | 2026-11-09 |
| 45.207.194.93 Seychelles · cognetcloud INC | ioc-match | COM | 2 | 2026-11-08 |
| 172.67.187.140 United States · Cloudflare, Inc. | ioc-match | JS | 1 | 2026-11-08 |
| 104.21.7.69 United States · Cloudflare, Inc. | ioc-match | JS | 1 | 2026-11-08 |
| 185.199.108.153 United States · Fastly, Inc. | exploit exposed-secret ioc-match tunnel | IO, DMG, TXT | 4 | 2026-11-07 |
| 201.3.225.56 United States | ioc-match tunnel | APK, LIVE | 2 | 2026-11-06 |
| 40.90.229.95 United States · Microsoft Corporation | ioc-match | BIN | 1 | 2026-11-06 |
| 185.199.110.153 United States · Fastly, Inc. | exploit ioc-match | IO, DMG | 3 | 2026-11-06 |
| 185.199.109.153 United States · Fastly, Inc. | exploit ioc-match | IO, DMG | 3 | 2026-11-06 |
| 20.150.121.132 Norway · Microsoft Corporation | ioc-match | ZIP | 1 | 2026-11-05 |
| 172.67.182.13 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 104.21.67.222 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 104.21.64.130 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 172.67.185.214 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-11-03 |
| 151.101.61.194 United States · Fastly, Inc. | ioc-match forced-loot | TXT | 1 | 2026-11-03 |
| 20.209.1.107 United States · Microsoft Corporation | ioc-match webshell | BAT | 1 | 2026-11-03 |
| 172.174.116.94 United States · Microsoft Corporation | ioc-match | BIN | 2 | 2026-11-03 |
| 103.112.98.105 Hong Kong · AROSSCLOUD INC. | exposed-secret ioc-match | TOP | 4 | 2026-11-02 |
| 54.168.18.248 Japan · Amazon.com, Inc. | ioc-match | COM | 5 | 2026-11-02 |
| 104.21.52.177 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.202.89 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.80.4 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.154.68 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.147.187 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.40.152 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.14 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.139.164 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.191.247 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.95.202 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.149.27 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.198 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.33.193 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.198.188 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 104.21.44.107 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 172.67.172.85 United States · Cloudflare, Inc. | exploit ioc-match | TO | 1 | 2026-10-28 |
| 148.135.195.145 United States · Datacamp Limited | ioc-match malware pe-binary | BIN, PE | 2 | 2026-10-27 |
| 16.16.63.239 Sweden · Amazon.com, Inc. | malware c2 ioc-match mozi | PS1, PE, BIN, CPL | 12 | 2026-10-26 |
| 20.60.213.65 United Arab Emirates · Microsoft Corporation | ioc-match | PS1 | 1 | 2026-10-23 |
Page 1 of 2Older →
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free