huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,973
hosts
106,604
files
126
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 8.134.111.31 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-10-30 |
| 5.172.15.33 Russia · INSYS LLC | exposed-secret | TXT | 1 | 2026-10-30 |
| 66.63.166.31 United States · HostPapa | files | 1 | 2026-10-30 | |
| 74.208.236.225 United States · IONOS SE | files | ONLINE | 1 | 2026-10-30 |
| 153.75.86.243 United Arab Emirates · RouterHosting LLC | files | ONLINE | 1 | 2026-10-30 |
| 89.116.109.56 United Kingdom · Hostinger International Limited | files | COM, CYOU | 2 | 2026-10-30 |
| 195.200.9.160 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.185 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 91.108.103.6 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 185.77.97.235 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-30 |
| 134.209.89.212 The Netherlands · DigitalOcean, LLC | files | TXT | 1 | 2026-10-30 |
| 91.108.103.159 United Kingdom · Hostinger International Limited | files | COM, CYOU | 2 | 2026-10-30 |
| 185.77.97.217 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 95.81.119.22 Finland · FIRST SERVER LIMITED | files | SPACE | 1 | 2026-10-29 |
| 95.161.64.100 The Netherlands · Telegram Messenger Inc | files | ONE | 1 | 2026-10-29 |
| 172.67.132.78 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-29 |
| 104.21.4.174 United States · Cloudflare, Inc. | files | DEV | 1 | 2026-10-29 |
| 195.206.228.52 Slovenia · Optimus IT d.o.o. | files | HTML | 1 | 2026-10-29 |
| 172.67.188.99 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-29 |
| 104.21.40.214 United States · Cloudflare, Inc. | files | TXT | 1 | 2026-10-29 |
| 195.200.9.0 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 89.116.109.121 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 91.108.103.65 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 195.200.9.104 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 195.200.9.162 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 91.108.103.214 United Kingdom · Hostinger International Limited | files | COM, CYOU | 2 | 2026-10-29 |
| 93.102.144.219 Portugal · NOS COMUNICACOES, S.A. | malware mozi elf-binary | ELF | 1 | 2026-10-29 |
| 195.200.9.179 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 5.9.115.199 Germany · Hetzner Online GmbH | exploit exposed-secret | TOP | 1 | 2026-10-29 |
| 45.77.250.252 Singapore · The Constant Company, LLC | files | PHP | 1 | 2026-10-29 |
| 91.108.103.59 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 89.116.109.204 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 195.200.9.205 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 91.108.103.53 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 195.200.9.129 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 195.200.9.109 United Kingdom · Hostinger International Limited | files | COM, CYOU | 3 | 2026-10-29 |
| 185.77.97.194 United States · Hostinger International Limited | files | CYOU, TXT | 2 | 2026-10-29 |
| 195.200.9.14 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 89.116.109.208 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 195.78.49.187 The Netherlands · Mastersoft S.R.L. | files | 1 | 2026-10-29 | |
| 153.56.168.27 Turkey · AS219518 | exposed-secret | PHP | 2 | 2026-10-29 |
| 185.77.97.41 United States · Hostinger International Limited | files | COM, CYOU | 2 | 2026-10-29 |
| 91.108.103.71 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 91.108.103.175 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 185.77.97.74 United States · Hostinger International Limited | files | CYOU | 1 | 2026-10-29 |
| 37.59.91.7 Lithuania · OVH SAS | exposed-secret | TXT | 1 | 2026-10-29 |
| 3.25.204.85 Australia · Amazon.com, Inc. | exposed-secret | TXT | 2 | 2026-10-29 |
| 46.166.162.142 Lithuania · UAB Cherry Servers | exploit malware exposed-secret webshell | LOG, SEEDS, JS, TXT | 1,393 | 2026-10-29 |
| 153.75.81.83 United Arab Emirates · RouterHosting LLC | exploit exposed-secret malware c2 | PY, TXT, LOG, ELF | 91 | 2026-10-29 |
| 196.219.207.179 Egypt · TE-AS | exposed-secret | JSON | 1 | 2026-10-29 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free