huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,973
hosts
106,604
files
126
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 18.188.149.122 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-10-30 |
| 120.46.86.195 China · Huawei Cloud Service data center | files | SH, GZ | 3 | 2026-10-30 |
| 85.132.34.10 Azerbaijan · CASPEL LLC | webshell exposed-secret | PY, ZIP, SQL, RAR | 24 | 2026-10-30 |
| 195.200.9.97 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 185.77.97.146 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 172.67.138.185 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.79.109 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.167.73 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.78.241 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.145.25 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.135.117 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.6.236 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.11.217 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.16.244 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.37.22 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.203.70 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.217.25 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.181.88 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.59.167 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.170.112 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.28.87 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 172.67.199.15 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 104.21.34.61 United States · Cloudflare, Inc. | exposed-secret | CYOU | 1 | 2026-10-30 |
| 185.77.97.37 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 89.116.109.176 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.169 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 89.116.109.221 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.154 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 185.77.97.234 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.90 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 89.116.109.98 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 104.238.140.55 United States · The Constant Company, LLC | malware exposed-secret c2 exploit | PE, PS1 | 9 | 2026-10-30 |
| 89.116.109.151 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 80.80.250.34 Austria · Stadtwerke Klagenfurt AG | exposed-secret | JSON, PHP | 2 | 2026-10-30 |
| 91.108.103.115 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 185.77.97.205 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 64.177.33.68 United States | coinminer malware elf-binary | ELF | 1 | 2026-10-30 |
| 89.116.109.45 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.251 United Kingdom · Hostinger International Limited | files | CYOU, TXT | 2 | 2026-10-30 |
| 170.187.142.199 United States · Akamai Technologies, Inc. | exposed-secret forced-loot tunnel | ENV, JS, PHP, SQLITE | 5 | 2026-10-30 |
| 89.116.109.97 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 195.200.9.233 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 185.77.97.11 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 39.107.106.210 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware mozi | PHP, LOG, SH, TXT | 421 | 2026-10-30 |
| 186.241.74.242 United States · AROSSCLOUD INC. | malware elf-binary pe-binary | ELF, PE | 5 | 2026-10-30 |
| 185.193.48.129 United States · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-10-30 |
| 45.117.83.34 Vietnam · NhanHoa Software company | exposed-secret malware exploit webshell | LOG, PE, PY, JSON | 48 | 2026-10-30 |
| 39.106.140.144 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware mozi | SH, ELF, LOG, PE | 31 | 2026-10-30 |
| 13.140.168.109 France · Contabo GmbH | exposed-secret webshell | ZIP, PHP | 14 | 2026-10-30 |
| 177.39.122.214 Brazil · MAXXNET TELECOM | files | JSON | 1 | 2026-10-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free