huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled mozi
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 187.141.71.166 Mexico · Uninet S.A. de C.V. | malware mozi exposed-secret | TXT, ENV, JSON | 7 | 2026-10-06 |
| 77.83.39.109 The Netherlands · KPROHOST LLC | exploit exposed-secret malware mozi | TXT | 1 | 2026-10-06 |
| 74.88.7.20 United States · Cablevision Systems Corp. | malware mozi | PHP, ZIP | 3 | 2026-10-06 |
| 217.60.195.187 The Netherlands · SWISSNET LLC | malware mozi elf-binary | ELF | 9 | 2026-10-06 |
| 189.217.130.86 Mexico · Cablevision, S.A. de C.V. | malware mozi | PHP | 1 | 2026-10-06 |
| 92.42.134.120 Russia · Limited Company Digital channel | malware mozi elf-binary | 1 | 2026-10-06 | |
| 42.230.205.25 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 60.23.235.214 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-06 |
| 27.21.24.136 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 115.49.77.201 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 125.47.92.67 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-06 | |
| 182.53.98.93 Thailand · TOT Public Company Limited | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 105.225.183.47 South Africa · Telkom SA Ltd. | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 60.23.238.24 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-10-06 |
| 1.57.109.163 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 27.210.89.227 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-10-06 |
| 34.254.202.253 Ireland · Amazon.com, Inc. | malware coinminer exposed-secret exploit | LOG, TXT, PY, ELF | 26 | 2026-10-05 |
| 185.244.43.186 Germany · Kontel LLC | malware mozi exposed-secret | PY, LOG, BIN | 9 | 2026-10-04 |
| 185.11.72.171 Russia · JSC Selectel | exploit malware mozi tunnel | LOG, PY, SH, JSON | 11 | 2026-10-04 |
| 61.168.141.86 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-10-04 | |
| 43.163.124.78 Singapore · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret malware meterpreter | TXT, ELF, MD, PY | 81 | 2026-10-03 |
| 209.99.188.155 Switzerland · SKN Subnet & Telecom Ltd | exposed-secret malware mozi exploit | TXT, SH, PY, JSON | 347 | 2026-10-02 |
| 178.16.52.154 Germany · Omegatech LTD | exposed-secret exploit malware mozi | GZ, LOG, PY, DONE | 154 | 2026-10-02 |
| 89.124.67.72 The Netherlands · SERVERS TECH FZCO | exposed-secret exploit malware mozi | PY, MD, LOG, JSON | 10,428 | 2026-10-01 |
| 178.16.53.67 The Netherlands · Omegatech LTD | malware exposed-secret exploit webshell | PE, PS1, JSON, VBS | 154 | 2026-10-01 |
| 47.108.208.69 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware mozi pe-binary | PHP, JS, GITIGN, MAP | 37 | 2026-10-01 |
| 117.55.235.249 Australia · MULTACOM CORPORATION | malware mozi | ZIP, C | 5 | 2026-10-01 |
| 1.196.90.7 China · Chinanet | malware mozi elf-binary | ELF | 1 | 2026-09-30 |
| 62.3.58.98 Russia · TIME-HOST LTD | exposed-secret exploit malware mozi | PY, LOG, TXT, SH | 148 | 2026-09-30 |
| 218.3.160.34 China · Chinanet | exposed-secret malware exploit mozi | PHP, BAT, B64, PS1 | 88 | 2026-09-30 |
| 124.220.164.14 China · Shenzhen Tencent Computer Systems Company Limited | malware exploit exposed-secret c2 | MACHO, TXT, JAVA, SH | 89 | 2026-09-30 |
| 185.148.144.99 Bulgaria · Belcloud LTD | exposed-secret exploit malware mozi | PHP, JS, TXT, PY | 306 | 2026-09-30 |
| 94.26.3.238 United States · MillenialHost Limited | exposed-secret malware mozi exploit | LOG, SH, PY, ZIP | 70 | 2026-09-30 |
| 77.243.80.38 Kazakhstan · PS Internet Company LLP | malware mozi | JSON | 1 | 2026-09-30 |
| 34.22.116.191 Belgium · Google LLC | exposed-secret malware mozi tunnel | JS, JSON, HTML, PL | 22 | 2026-09-30 |
| 151.246.242.140 Thailand · DEXSERVER | malware mozi | LOG, ZIP | 3 | 2026-09-30 |
| 45.146.165.38 Russia · Beget LLC | malware mozi exploit webshell | PY, LOG, JSON, CSV | 46 | 2026-09-30 |
| 91.197.98.188 Russia · "Domain names registrar REG.RU", Ltd | malware exposed-secret mozi pe-binary | PE, BAT, PS1 | 12 | 2026-09-30 |
| 37.60.248.174 France · Contabo GmbH | exploit exposed-secret webshell malware | TXT, JSON, JS, MD | 365 | 2026-09-30 |
| 43.129.51.137 Indonesia · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware gafgyt exploit | PY, MD, LOG, JSON | 115 | 2026-09-30 |
| 46.225.118.210 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, JSON, LOG, BAK | 45 | 2026-09-30 |
| 124.221.101.41 China · Shenzhen Tencent Computer Systems Company Limited | malware mozi | JS, PY | 25 | 2026-09-30 |
| 101.35.210.248 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware mozi tunnel | JS, JSON, HTML, PL | 22 | 2026-09-30 |
| 49.234.49.58 China · Shenzhen Tencent Computer Systems Company Limited | exposed-secret malware gafgyt exploit | JSON, PY, SH, DB | 63 | 2026-09-30 |
| 81.70.21.248 China · Shenzhen Tencent Computer Systems Company Limited | exploit malware exposed-secret webshell | TXT, PY, GITIGN, IN | 28 | 2026-09-30 |
| 207.180.219.101 France · Contabo GmbH | exploit exposed-secret malware mozi | HTML, MD, PY, LOG | 34 | 2026-09-30 |
| 5.78.118.60 United States · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, TXT, MD, GITIGN | 33 | 2026-09-30 |
| 72.56.114.234 Seychelles · Timeweb, LLP | exposed-secret malware mozi exploit | PY, LOG, JSON, SH | 171 | 2026-09-30 |
| 183.101.139.124 South Korea · Korea Telecom | exposed-secret malware mozi exploit | PY, TXT, JS, MD | 95 | 2026-09-30 |
| 84.32.34.6 The Netherlands · UAB Cherry Servers | malware exposed-secret mozi exploit | PY, GZ, TXT, BAK | 55 | 2026-09-30 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free