huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,973
hosts
106,604
files
126
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 172.67.151.77 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.12.21 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.130.62 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.3.48 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.197.160 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.61.131 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.21.94 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.210.138 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.63.169 United States · Cloudflare, Inc. | files | COM, PHP | 2 | 2026-10-30 |
| 104.21.10.159 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.135.89 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.26.37 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.171.104 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.184.248 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.180.32 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.185.102 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.190.134 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.76.24 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.29.49 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.89.71 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.156.241 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.129.81 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.76.36 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.32.84 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.186.151 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.2.147 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 104.21.67.192 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 172.67.148.15 United States · Cloudflare, Inc. | files | COM, PHP | 2 | 2026-10-30 |
| 89.116.109.54 United Kingdom · Hostinger International Limited | files | CYOU, TXT | 2 | 2026-10-30 |
| 185.77.97.166 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 64.83.53.29 US · NTT America, Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 45.39.190.148 United States · Cloud Software - FZCO | files | JSON | 1 | 2026-10-30 |
| 31.128.39.24 Russia · Beget LLC | malware mozi exploit exposed-secret | JS, PY, SH, TXT | 455 | 2026-10-30 |
| 80.67.16.224 Germany · Host Europe GmbH | exposed-secret | JSON, PHP | 2 | 2026-10-30 |
| 89.116.109.172 United Kingdom · Hostinger International Limited | files | COM, CYOU | 2 | 2026-10-30 |
| 172.96.250.155 Canada · IT7 Networks Inc | exposed-secret | TXT | 5 | 2026-10-30 |
| 89.116.109.141 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.181 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 185.77.97.196 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 104.21.56.253 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 89.116.109.88 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.197 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 172.67.157.63 United States · Cloudflare, Inc. | exploit | CYOU | 1 | 2026-10-30 |
| 165.154.225.131 Singapore · Scloud Pte Ltd | exposed-secret exploit malware mozi | TXT, BIN, PY, HEADER | 842 | 2026-10-30 |
| 172.67.146.161 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.73.174 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 185.77.97.144 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 89.116.109.12 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 185.77.97.25 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 195.200.9.106 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free