huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 172.67.133.91 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.201.78 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.5.113 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.4.230 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.169.219 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.147.50 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.55.95 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.184.141 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.88.126 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.179.95 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.198.27 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.143.148 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.144.58 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.28.44 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.52.224 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.27.205 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.75.252 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 172.67.204.181 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 104.21.42.11 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 89.116.109.159 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.53 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 185.77.97.79 United States · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 89.116.109.237 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 89.124.67.72 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit malware mozi | PY, MD, LOG, JSON | 10,428 | 2026-10-01 |
| 91.108.103.228 United Kingdom · Hostinger International Limited | files | COM, TXT | 2 | 2026-10-01 |
| 185.77.97.208 United States · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.121 United Kingdom · Hostinger International Limited | files | COM | 2 | 2026-10-01 |
| 91.108.103.237 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.186 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.110 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 185.77.97.43 United States · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 89.116.109.173 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 185.77.97.149 United States · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 178.16.53.67 The Netherlands · Omegatech LTD | malware exposed-secret exploit webshell | PE, PS1, JSON, VBS | 154 | 2026-10-01 |
| 104.21.95.75 United States · Cloudflare, Inc. | files | EU | 1 | 2026-10-01 |
| 91.108.103.133 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 89.116.109.164 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 91.108.103.38 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 23.94.145.224 United States · DEDIK SERVICES LIMITED | exposed-secret | TXT | 1 | 2026-10-01 |
| 47.236.83.240 United States · Alibaba (US) Technology Co., Ltd. | malware exploit c2 exposed-secret | MACHO, BIN, JS, GITIGN | 65 | 2026-10-01 |
| 103.230.240.83 Hong Kong · CTG Server Limited | files | JSON | 1 | 2026-10-01 |
| 103.254.148.169 Hong Kong · SonderCloud Limited | exposed-secret | JSON, TXT | 2 | 2026-10-01 |
| 154.18.187.160 Singapore · Ultahost, Inc. | files | JSON | 1 | 2026-10-01 |
| 47.254.120.61 United States · Alibaba (US) Technology Co., Ltd. | exposed-secret | JSON | 1 | 2026-10-01 |
| 112.213.108.85 Hong Kong · CTG Server Limited | files | JSON | 1 | 2026-10-01 |
| 107.175.49.181 United States · HostPapa | exposed-secret | ENV | 1 | 2026-10-01 |
| 45.58.168.253 United States · Sharktech | exploit exposed-secret | TXT | 1 | 2026-10-01 |
| 91.108.103.155 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.9 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 91.108.103.109 United Kingdom · Hostinger International Limited | files | COM | 2 | 2026-10-01 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free