huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
6,195
hosts
117,601
files
131
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 193.233.216.31 Russia · Aeza Group LLC | files | JSON | 1 | 2026-09-27 |
| 193.233.216.13 Russia · Aeza Group LLC | exposed-secret forced-loot | TXT | 1 | 2026-09-27 |
| 193.143.1.35 Russia · Proton66 OOO | exploit exposed-secret c2 tunnel | CSV, PY | 57 | 2026-09-27 |
| 193.143.1.99 Russia · Proton66 OOO | malware exposed-secret exploit elf-binary | ELF, C, GZ, SH | 41 | 2026-09-27 |
| 193.143.1.113 Russia · Proton66 OOO | exposed-secret | TXT, ENV | 5 | 2026-09-27 |
| 176.120.22.177 Russia · Proton66 OOO | files | JSON | 1 | 2026-09-27 |
| 91.215.85.163 Russia · PROSPERO OOO | exposed-secret | TXT | 2 | 2026-09-27 |
| 193.24.123.86 Russia · PROSPERO OOO | exposed-secret | TXT | 1 | 2026-09-27 |
| 193.24.123.71 Russia · PROSPERO OOO | exposed-secret | TXT | 1 | 2026-09-27 |
| 23.252.123.134 United States · WebNX, Inc. | exposed-secret malware c2 mozi | BIN, SH, ZIP, PY | 72 | 2026-09-27 |
| 45.74.3.24 United States · Nerushenko Vyacheslav Nikolaevich | malware elf-binary | ELF, TXT | 2 | 2026-09-27 |
| 178.16.52.101 Germany · Omegatech LTD | exploit | BEER | 1 | 2026-09-27 |
| 185.77.97.45 United States · Hostinger International Limited | files | COM | 1 | 2026-09-27 |
| 68.65.122.208 United States · Namecheap, Inc. | c2 exploit exposed-secret | SITE | 1 | 2026-09-27 |
| 160.153.187.97 United States · GoDaddy.com, LLC | exposed-secret exploit | TXT | 2 | 2026-09-27 |
| 154.217.253.30 United States · AROSSCLOUD INC. | exposed-secret | ENV | 1 | 2026-09-27 |
| 103.67.182.217 India · YOTTA NETWORK SERVICES PRIVATE LIMITED | exposed-secret | HTML | 1 | 2026-09-27 |
| 89.116.109.167 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 217.60.103.74 United States · HostSNAP LLC | exposed-secret | TXT, PHP, ENV, JSON | 29 | 2026-09-26 |
| 89.116.109.190 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 185.77.97.109 United States · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 185.77.97.181 United States · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 91.108.103.21 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 89.116.109.181 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 166.88.141.36 United States · Evoxt Sdn. Bhd. | exposed-secret | COM | 1 | 2026-09-26 |
| 51.159.21.191 France · Scaleway SAS | exposed-secret malware c2 exploit | PHP, PS1, EXE, PY | 286 | 2026-09-26 |
| 172.67.188.1 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-09-26 |
| 104.21.7.202 United States · Cloudflare, Inc. | exposed-secret | ICU | 1 | 2026-09-26 |
| 185.233.39.78 Ukraine · Hosting Ukraine LTD | files | 1 | 2026-09-26 | |
| 172.67.193.242 United States · Cloudflare, Inc. | files | COM | 1 | 2026-09-26 |
| 169.58.211.122 United States · TerraTransit AG | files | COM | 1 | 2026-09-26 |
| 104.21.44.19 United States · Cloudflare, Inc. | files | COM | 1 | 2026-09-26 |
| 69.72.136.205 United States · WHG Hosting Services Ltd | files | COM | 1 | 2026-09-26 |
| 173.249.36.167 France · Contabo GmbH | files | COM | 1 | 2026-09-26 |
| 172.67.189.162 United States · Cloudflare, Inc. | files | COM | 1 | 2026-09-26 |
| 195.200.9.138 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 89.116.109.1 United Kingdom · Hostinger International Limited | files | COM | 1 | 2026-09-26 |
| 104.21.81.142 United States · Cloudflare, Inc. | files | COM | 1 | 2026-09-26 |
| 209.99.191.44 Switzerland · SKN Subnet & Telecom Ltd | files | 1 | 2026-09-26 | |
| 66.29.146.44 United States · Namecheap, Inc. | files | INFO | 1 | 2026-09-26 |
| 193.233.201.114 Austria · AEZA INTERNATIONAL LTD | files | LIFE | 1 | 2026-09-26 |
| 149.137.136.16 United States · Backblaze Inc | c2 exposed-secret | COM | 1 | 2026-09-26 |
| 92.119.164.197 The Netherlands · Julian Achter | exploit | TXT | 1 | 2026-09-26 |
| 151.158.0.157 Hong Kong · Evoxt Sdn. Bhd. | exposed-secret | COM | 1 | 2026-09-26 |
| 185.27.134.221 United Kingdom · Wildcard UK Limited | files | ME | 1 | 2026-09-26 |
| 34.97.169.164 Japan · Google LLC | exposed-secret | COM | 1 | 2026-09-26 |
| 88.99.99.104 Germany · Hetzner Online GmbH | files | COM | 1 | 2026-09-26 |
| 85.117.239.3 United Kingdom · Markahost Telekomunikasyon Ve Ticaret Limited Sirketi | files | PNG | 2 | 2026-09-26 |
| 185.179.26.181 Turkey · Onur Ekren | files | COM | 1 | 2026-09-26 |
| 162.251.80.25 United States · Unified Layer | files | PNG | 1 | 2026-09-26 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free