huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,185
hosts
117,458
files
125
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 185.77.97.6 United States · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 89.116.109.64 United Kingdom · Hostinger International Limited | files | COM | 2 | 2026-10-01 |
| 91.108.103.72 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 185.77.97.29 United States · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 89.116.109.38 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.180 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.31 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 185.77.97.28 United States · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.244 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.19 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 185.77.97.95 United States · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 89.116.109.4 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.33 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 91.108.103.110 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 89.116.109.13 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 185.100.234.137 The Netherlands · WorldStream B.V. | exploit exposed-secret | INFO | 1 | 2026-10-01 |
| 89.116.109.63 United Kingdom · Hostinger International Limited | files | COM, TXT | 2 | 2026-10-01 |
| 195.200.9.46 United Kingdom · Hostinger International Limited | files | COM, TXT | 2 | 2026-10-01 |
| 195.200.9.166 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 185.77.97.233 United States · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.171 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 91.108.103.165 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 45.82.67.241 The Netherlands · WorldStream B.V. | exploit exposed-secret | COM | 1 | 2026-10-01 |
| 8.216.48.50 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret c2 | SH, TXT, JS, LOG | 7 | 2026-10-01 |
| 212.32.229.174 The Netherlands · LeaseWeb Netherlands B.V. | exposed-secret | COM | 1 | 2026-10-01 |
| 49.77.137.146 China · Chinanet | malware pe-binary tunnel | ZIP, PE, RAR, BAT | 31 | 2026-10-01 |
| 47.108.208.69 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware mozi pe-binary | PHP, JS, GITIGN, MAP | 37 | 2026-10-01 |
| 85.13.166.85 Germany · Neue Medien Muennich GmbH | exposed-secret | DE | 1 | 2026-10-01 |
| 89.116.109.113 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.37 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-10-01 |
| 195.200.9.140 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 185.77.97.115 United States · Hostinger International Limited | files | COM | 1 | 2026-10-01 |
| 3.24.186.0 Australia · Amazon.com, Inc. | malware exploit pe-binary | PE, PS1 | 43 | 2026-10-01 |
| 96.62.71.22 India · SECURED SERVERS LLC | malware pe-binary | PE, HTA, PS1 | 4 | 2026-10-01 |
| 117.55.235.249 Australia · MULTACOM CORPORATION | malware mozi | ZIP, C | 5 | 2026-10-01 |
| 43.128.253.47 Japan · Shenzhen Tencent Computer Systems Company Limited | files | TXT | 2 | 2026-10-01 |
| 104.21.60.57 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-01 |
| 77.112.150.228 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-01 |
| 172.67.192.120 United States · Cloudflare, Inc. | files | COM | 1 | 2026-10-01 |
| 217.160.0.108 Germany · IONOS SE | files | HTML | 1 | 2026-10-01 |
| 94.154.43.100 Turkey · Net Gate Telecom S.R.L. | malware elf-binary | ELF, SH | 13 | 2026-09-30 |
| 89.116.109.92 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 91.108.103.124 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 195.200.9.185 United Kingdom · Hostinger International Limited | files | TXT | 1 | 2026-09-30 |
| 185.77.97.173 United States · Hostinger International Limited | files | TXT | 1 | 2026-09-30 |
| 185.77.97.171 United States · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 89.116.109.70 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 195.200.9.58 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-30 |
| 165.140.71.100 United States · Name Hero, LLC | files | COM | 2 | 2026-09-30 |
| 1.196.90.7 China · Chinanet | malware mozi elf-binary | ELF | 1 | 2026-09-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free