huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled coinminer
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 47.76.239.114 United States · Alibaba (US) Technology Co., Ltd. | malware coinminer exposed-secret exploit | PE, BIN, PEM, CMD | 25 | 2026-10-19 |
| 95.133.253.15 Finland · DataCrunch Oy | malware coinminer elf-binary tunnel | ELF, GZ, BAK, BAK3 | 12 | 2026-10-19 |
| 47.102.192.23 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware exploit mozi | PY, TXT, LOG, SH | 484 | 2026-10-15 |
| 207.244.234.243 United States · Contabo Inc. | exposed-secret exploit malware c2 | TXT, ELF | 124 | 2026-10-15 |
| 15.204.85.94 United States · OVH SAS | malware coinminer elf-binary | ELF | 3 | 2026-10-15 |
| 213.136.79.115 France · Contabo GmbH | exposed-secret exploit malware c2 | SH, TXT, JSON, LOG | 460 | 2026-10-09 |
| 222.186.57.10 China · Chinanet | exposed-secret coinminer exploit malware | TXT, ZIP | 2 | 2026-10-06 |
| 195.178.110.48 AD · TECHOFF SRV LIMITED | coinminer malware exploit exposed-secret | TXT, ELF, GZ, JSON | 8 | 2026-10-06 |
| 158.220.105.179 France · Contabo GmbH | coinminer malware exposed-secret c2 | SH, GZ, JS, TGZ | 13 | 2026-10-06 |
| 34.254.202.253 Ireland · Amazon.com, Inc. | malware coinminer exposed-secret exploit | LOG, TXT, PY, ELF | 26 | 2026-10-05 |
| 61.107.2.121 South Korea · DREAMLINE CO. | coinminer malware tunnel | TXT | 1 | 2026-10-03 |
| 190.84.232.232 Colombia · Telmex Colombia S.A. | coinminer malware exposed-secret webshell | K4MIL4, CMD, PHP, D34D | 28 | 2026-09-30 |
| 81.70.21.248 China · Shenzhen Tencent Computer Systems Company Limited | exploit malware exposed-secret webshell | TXT, PY, GITIGN, IN | 28 | 2026-09-30 |
| 118.25.25.81 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware gafgyt | PY, MD, LOG, SH | 107 | 2026-09-30 |
| 217.217.233.97 China · TeraSwitch Networks Inc. | malware coinminer webshell c2 | SH, GZ, ELF, PS1 | 18 | 2026-09-26 |
| 138.197.174.121 Canada · DigitalOcean, LLC | coinminer malware exposed-secret c2 | GZ, SH, JS | 9 | 2026-09-22 |
← NewerPage 2 of 2
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free