huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 195.200.9.43 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-11 |
| 195.200.9.164 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-11 |
| 89.116.109.195 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-11 |
| 144.91.73.87 France · Contabo GmbH | exposed-secret | TXT, ENV, JSON | 10 | 2026-11-11 |
| 201.159.91.2 Brazil · Abenet Provedora de Acesso a Internet LTDA | malware mozi elf-binary | A | 1 | 2026-11-11 |
| 195.200.9.130 United Kingdom · Hostinger International Limited | exposed-secret | COM, SHOP | 2 | 2026-11-11 |
| 91.108.103.200 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-11 |
| 89.116.109.188 United Kingdom · Hostinger International Limited | files | COM, SHOP | 2 | 2026-11-11 |
| 91.108.103.128 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-11 |
| 185.77.97.118 United States · Hostinger International Limited | exposed-secret | PHP | 1 | 2026-11-11 |
| 15.235.36.121 Canada · OVH SAS | files | XYZ | 1 | 2026-11-11 |
| 146.103.45.1 United States · Datacamp Limited | files | XYZ | 1 | 2026-11-11 |
| 107.161.23.11 United States · InMotion Hosting, Inc. | exploit | RAR | 2 | 2026-11-11 |
| 172.66.3.26 United States · Cloudflare, Inc. | files | TECH | 1 | 2026-11-11 |
| 162.159.143.30 United States · Cloudflare, Inc. | files | TECH | 1 | 2026-11-11 |
| 89.116.109.177 United Kingdom · Hostinger International Limited | exposed-secret | SHOP | 1 | 2026-11-11 |
| 172.67.176.162 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-11 |
| 23.227.38.65 Canada · Cloudflare, Inc. | files | IN, COM | 3 | 2026-11-11 |
| 185.77.97.102 United States · Hostinger International Limited | exposed-secret | SHOP | 1 | 2026-11-11 |
| 104.21.80.90 United States · Cloudflare, Inc. | files | SHOP | 1 | 2026-11-11 |
| 104.21.55.88 United States · Cloudflare, Inc. | files | XYZ | 1 | 2026-11-11 |
| 104.21.23.153 United States · Cloudflare, Inc. | files | BAR | 1 | 2026-11-11 |
| 172.67.211.176 United States · Cloudflare, Inc. | files | BAR | 1 | 2026-11-11 |
| 89.116.109.53 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-11 |
| 195.200.9.13 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-11 |
| 104.19.168.112 United States · Cloudflare, Inc. | files | SPACE | 1 | 2026-11-11 |
| 104.18.26.246 United States · Cloudflare, Inc. | files | CLICK, LIVE, LOL | 3 | 2026-11-11 |
| 2.57.91.91 Lithuania · Hostinger International Limited | files | COM, ONLINE | 2 | 2026-11-11 |
| 104.19.169.112 United States · Cloudflare, Inc. | files | SPACE | 1 | 2026-11-11 |
| 185.158.133.1 United States · Cloudflare, Inc. | files | APP, COM | 2 | 2026-11-11 |
| 89.116.109.144 United Kingdom · Hostinger International Limited | exposed-secret | COM, PHP, TECH | 3 | 2026-11-11 |
| 185.77.97.174 United States · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-11 |
| 196.251.107.48 Seychelles · FEMO IT SOLUTIONS LIMITED | malware pe-binary | PE | 3 | 2026-11-11 |
| 104.21.63.49 United States · Cloudflare, Inc. | exploit | CC | 1 | 2026-11-11 |
| 172.67.150.8 United States · Cloudflare, Inc. | exploit | CC | 1 | 2026-11-11 |
| 172.67.169.242 United States · Cloudflare, Inc. | exploit | CC | 1 | 2026-11-11 |
| 104.21.79.235 United States · Cloudflare, Inc. | exploit | CC | 1 | 2026-11-11 |
| 172.67.137.39 United States · Cloudflare, Inc. | exploit | CC | 1 | 2026-11-11 |
| 104.21.7.181 United States · Cloudflare, Inc. | exploit | CC | 1 | 2026-11-11 |
| 20.51.202.31 United States · Microsoft Corporation | files | BIN, TXT | 2 | 2026-11-11 |
| 199.91.221.237 United States · BL Networks | c2 exposed-secret exploit malware | JS | 2 | 2026-11-11 |
| 89.58.25.93 Germany · netcup GmbH | malware exposed-secret pe-binary | PE, MANIFE, DEPLOY | 114 | 2026-11-11 |
| 178.128.133.89 United States · DigitalOcean, LLC | exposed-secret | ENV, JSON | 2 | 2026-11-11 |
| 172.104.60.192 Singapore · Akamai Technologies, Inc. | exposed-secret | ENV, TXT | 2 | 2026-11-11 |
| 57.128.226.85 Poland · OVH SAS | exposed-secret exploit | TXT, ENV, JSON | 12 | 2026-11-11 |
| 45.32.57.42 Japan · The Constant Company, LLC | exposed-secret | TXT, ENV, JSON, PHP | 8 | 2026-11-11 |
| 167.99.212.57 The Netherlands · DigitalOcean, LLC | exposed-secret | TXT, ENV | 4 | 2026-11-11 |
| 186.220.69.4 Brazil · Claro NXT Telecomunicacoes Ltda | files | JSON | 1 | 2026-11-11 |
| 12.78.141.86 United States · AT&T Enterprises, LLC | files | BIN | 1 | 2026-11-11 |
| 187.125.160.108 Brazil · V tal | files | JSON | 1 | 2026-11-11 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free