huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
101
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Every host we harvested files from, newest first
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 91.108.103.168 United Kingdom · Hostinger International Limited | exposed-secret | COM, PHP, TECH | 3 | 2026-11-10 |
| 16.15.158.47 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.213.242 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.212.120 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 172.67.141.106 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 16.15.207.69 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.207.237 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 91.108.103.106 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 185.77.97.85 United States · Hostinger International Limited | exposed-secret | PHP | 1 | 2026-11-10 |
| 89.116.109.245 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 89.116.109.33 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 95.78.120.151 Russia · JSC "ER-Telecom Holding" | exposed-secret | TXT | 1 | 2026-11-10 |
| 34.49.135.54 United States · Google LLC | exposed-secret | TXT | 1 | 2026-11-10 |
| 52.172.140.8 India · Microsoft Corporation | exposed-secret exploit c2 webshell | SH, PY, LOG, SQL | 297 | 2026-11-10 |
| 89.116.109.48 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 195.200.9.119 United Kingdom · Hostinger International Limited | files | SHOP | 1 | 2026-11-10 |
| 195.200.9.238 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 91.108.103.62 United Kingdom · Hostinger International Limited | exposed-secret | PHP, TECH | 2 | 2026-11-10 |
| 172.67.133.218 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 104.21.5.211 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 16.15.183.116 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.215.228 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 16.15.191.199 United States · Amazon.com, Inc. | files | HTML | 1 | 2026-11-10 |
| 144.31.223.247 Germany · VPSPay Networks LTD | files | 1 | 2026-11-10 | |
| 77.239.124.167 The Netherlands · Alfahost LLC | c2 exploit ioc-match tunnel | TXT | 2 | 2026-11-10 |
| 165.22.220.74 India · DigitalOcean, LLC | exposed-secret exploit | TXT | 2 | 2026-11-10 |
| 216.150.1.1 United States · Amazon.com, Inc. | files | COM | 1 | 2026-11-10 |
| 172.67.222.141 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 104.21.43.74 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 172.67.204.110 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 104.21.85.97 United States · Cloudflare, Inc. | exposed-secret | NET | 1 | 2026-11-10 |
| 172.67.203.156 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 172.67.211.35 United States · Cloudflare, Inc. | exposed-secret | LIFE | 1 | 2026-11-10 |
| 104.21.83.34 United States · Cloudflare, Inc. | exposed-secret | LIFE | 1 | 2026-11-10 |
| 104.21.69.35 United States · Cloudflare, Inc. | files | COM | 1 | 2026-11-10 |
| 144.31.106.40 Germany · Kyonix Networks Limited | exposed-secret tunnel | SHOP | 1 | 2026-11-10 |
| 153.52.255.25 United States · Railway | files | COM | 1 | 2026-11-10 |
| 27.110.235.238 Philippines · Philippine Long Distance Telephone Co. | exposed-secret | TXT, ENV, JSON, PHP | 27 | 2026-11-10 |
| 165.227.87.198 United States · DigitalOcean, LLC | malware mozi exposed-secret tunnel | TXT, LOG, PHP | 11 | 2026-11-10 |
| 169.58.10.238 United States · TerraTransit AG | exposed-secret | TXT, ENV, JSON, PHP | 6 | 2026-11-10 |
| 47.99.199.212 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret | TXT | 1 | 2026-11-10 |
| 51.89.98.132 Germany · OVH SAS | malware mirai | SH | 1 | 2026-11-10 |
| 192.121.162.248 Japan · M247 Europe SRL | exposed-secret | TXT | 1 | 2026-11-10 |
| 169.58.109.98 United States · TerraTransit AG | exposed-secret exploit | TXT, ENV | 3 | 2026-11-10 |
| 8.211.180.57 Singapore · Alibaba (US) Technology Co., Ltd. | exploit malware mozi exposed-secret | HTML, LOG, PY | 14 | 2026-11-10 |
| 193.84.177.215 Spain · XNET CORE SL | files | SITE | 1 | 2026-11-10 |
| 8.218.8.249 Singapore · Alibaba (US) Technology Co., Ltd. | exposed-secret | TXT | 1 | 2026-11-10 |
| 221.139.14.94 South Korea · SK Broadband Co Ltd | files | TXT | 1 | 2026-11-10 |
| 186.244.215.55 United States · Uscloud Inc | exposed-secret | TXT | 2 | 2026-11-10 |
| 32.190.234.244 United States · Amazon.com, Inc. | exposed-secret | TXT | 1 | 2026-11-10 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free