huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 185.77.97.200 United States · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 195.200.9.125 United Kingdom · Hostinger International Limited | exposed-secret | PHP | 1 | 2026-11-10 |
| 91.108.103.43 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 46.225.33.61 Germany · Hetzner Online GmbH | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 18 | 2026-11-10 |
| 209.38.61.60 United States · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-10 |
| 91.108.103.80 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-11-10 |
| 89.116.109.103 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 91.108.103.216 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 91.108.103.209 United Kingdom · Hostinger International Limited | exposed-secret | COM, CYOU, PHP, TECH | 4 | 2026-11-10 |
| 185.77.97.88 United States · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 136.0.141.71 United States · Evoxt Sdn. Bhd. | files | 1 | 2026-11-10 | |
| 16.15.255.254 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.244.42 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.183.228 United States · Amazon.com, Inc. | files | HTML | 2 | 2026-11-10 |
| 93.152.221.150 Bulgaria · "Euro Crypt" EOOD | files | 1 | 2026-11-10 | |
| 162.125.65.18 United States · Dropbox, Inc. | exposed-secret | PDF, ZIP | 4 | 2026-11-10 |
| 172.67.203.21 United States · Cloudflare, Inc. | c2 | COM | 1 | 2026-11-10 |
| 104.21.77.11 United States · Cloudflare, Inc. | c2 | COM | 1 | 2026-11-10 |
| 104.21.9.33 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 172.67.177.134 United States · Cloudflare, Inc. | c2 | COM | 1 | 2026-11-10 |
| 104.21.37.67 United States · Cloudflare, Inc. | c2 exploit | COM | 1 | 2026-11-10 |
| 185.199.108.133 United States · Fastly, Inc. | exploit ioc-match malware mozi | BAT, DBF, HTA, PS1 | 5 | 2026-11-10 |
| 185.199.109.133 United States · Fastly, Inc. | exploit ioc-match malware mozi | BAT, DBF, HTA, PS1 | 5 | 2026-11-10 |
| 43.165.128.22 Japan · Shenzhen Tencent Computer Systems Company Limited | files | TXT | 4 | 2026-11-10 |
| 104.219.250.37 United States · Namecheap, Inc. | files | COM | 1 | 2026-11-10 |
| 89.116.109.100 United Kingdom · Hostinger International Limited | files | CYOU | 1 | 2026-11-10 |
| 2.59.170.20 The Netherlands · WorldStream B.V. | files | COM | 1 | 2026-11-10 |
| 205.196.122.19 United States · MediaFire, LLC | tunnel | ZIP | 1 | 2026-11-10 |
| 104.21.24.147 United States · Cloudflare, Inc. | files | ORG | 1 | 2026-11-10 |
| 194.58.99.179 Russia · "Domain names registrar REG.RU", Ltd | files | COM | 1 | 2026-11-10 |
| 172.67.131.116 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 104.21.10.109 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 104.21.60.205 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-11-10 |
| 172.67.136.69 United States · Cloudflare, Inc. | files | NET | 1 | 2026-11-10 |
| 172.67.219.65 United States · Cloudflare, Inc. | files | ORG | 1 | 2026-11-10 |
| 104.21.54.168 United States · Cloudflare, Inc. | files | PNG | 1 | 2026-11-10 |
| 172.67.140.173 United States · Cloudflare, Inc. | files | PNG | 1 | 2026-11-10 |
| 172.67.201.73 United States · Cloudflare, Inc. | tunnel | COM | 1 | 2026-11-10 |
| 104.21.26.128 United States · Cloudflare, Inc. | files | NET | 1 | 2026-11-10 |
| 185.7.214.119 Russia · changway-as Chang Way Technologies Co. Limited | malware mozi | TXT | 1 | 2026-11-10 |
| 168.144.111.9 Singapore · DigitalOcean, LLC | exposed-secret | TXT | 1 | 2026-11-10 |
| 38.64.187.62 Canada · Cogent Communications | exposed-secret | TXT | 2 | 2026-11-10 |
| 103.117.137.170 Hong Kong · cognetcloud INC | exposed-secret | ENV | 1 | 2026-11-10 |
| 34.49.135.223 United States · Google LLC | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-10 |
| 216.198.79.65 United States · Amazon.com, Inc. | files | CHAT, FUN, HOMES, ONLINE | 6 | 2026-11-10 |
| 64.29.17.65 United States · Amazon.com, Inc. | files | CHAT, FUN, HOMES, IN | 7 | 2026-11-10 |
| 64.29.17.1 United States · Amazon.com, Inc. | files | CHAT, FUN, HOMES, ONLINE | 6 | 2026-11-10 |
| 195.200.9.84 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 185.77.97.132 United States · Hostinger International Limited | files | COM, SHOP | 2 | 2026-11-10 |
| 185.77.97.1 United States · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free