huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,967
hosts
106,479
files
102
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled mozi
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 65.21.188.160 Finland · Hetzner Online GmbH | exposed-secret exploit malware mozi | PHP, MD, SH, TXT | 57 | 2026-09-30 |
| 103.131.51.199 Indonesia · PT. Jupiter Jala Arta | exposed-secret exploit malware mozi | PHP, MD, TXT, GITIGN | 46 | 2026-09-30 |
| 162.35.183.192 United States · Interserver, Inc | exposed-secret exploit malware mozi | TXT, PY, GITIGN, SH | 8 | 2026-09-30 |
| 46.250.255.73 Japan · Contabo Asia Private Limited | exposed-secret exploit malware mozi | PY, TXT, MD, B72E8E | 14 | 2026-09-30 |
| 195.154.191.187 France · Scaleway SAS | malware mozi exploit c2 | PY, CSV, MD, HTML | 17 | 2026-09-30 |
| 178.104.146.251 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, TXT, MD, BACKUP | 48 | 2026-09-30 |
| 176.65.148.59 The Netherlands · Pfcloud UG (haftungsbeschrankt) | exposed-secret exploit malware mozi | SH, MD, LOG, PY | 88 | 2026-09-30 |
| 184.168.31.120 United States · GoDaddy.com, LLC | exposed-secret exploit malware mozi | PHP, LOCK, TXT, HTML | 45 | 2026-09-30 |
| 32.236.62.30 Australia · Amazon.com, Inc. | malware mozi webshell exposed-secret | JSP, JS | 11 | 2026-09-30 |
| 178.104.231.250 Germany · Hetzner Online GmbH | exploit exposed-secret c2 malware | SQL, PY, TXT, SH | 125 | 2026-09-30 |
| 207.57.188.152 United States · Zillion Network Inc. | malware mozi exploit exposed-secret | PY, GO, ELF, PYC | 9 | 2026-09-30 |
| 23.252.123.134 United States · WebNX, Inc. | exposed-secret malware c2 mozi | BIN, SH, ZIP, PY | 72 | 2026-09-27 |
| 51.159.21.191 France · Scaleway SAS | exposed-secret malware c2 exploit | PHP, PS1, EXE, PY | 286 | 2026-09-26 |
| 93.157.253.209 Russia · JSC "Ufanet" | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 89.189.181.54 Russia · Sibirskie Seti Ltd. | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 94.156.166.84 Bulgaria · Gezim Cerri | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 94.156.166.167 Bulgaria · Gezim Cerri | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 95.56.232.109 Kazakhstan · JSC Kazakhtelecom | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 88.115.204.4 Finland · RIPE Network Coordination Centre | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 115.72.161.174 Vietnam · Viettel Group | malware mozi elf-binary | ELF, SH | 5 | 2026-09-26 |
| 91.190.84.93 Russia · Smart Telecom Limited | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 88.249.100.137 Turkey · Turk Telekomunikasyon Anonim Sirketi | malware mozi elf-binary | 1 | 2026-09-26 | |
| 87.13.96.192 Italy · Telecom Italia S.p.A. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 85.15.114.111 Russia · Vostoktelecom Telephone Company Limited Liability Company | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 79.106.74.167 Albania · ONE ALBANIA SH.A. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 68.195.40.192 United States · Cablevision Systems Corp. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 85.219.201.2 Poland · T-Mobile Polska S.A. | malware mozi elf-binary | 1 | 2026-09-26 | |
| 81.227.54.149 Sweden · Telia Company AB | malware mozi elf-binary | 1 | 2026-09-26 | |
| 78.73.72.248 Sweden · Telia Company AB | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 78.38.19.164 Iran · Iran Telecommunication Company PJS | malware mozi elf-binary | 1 | 2026-09-26 | |
| 81.200.217.34 Russia · "Region Svyaz Konsalt" LLC | malware mozi elf-binary | 1 | 2026-09-26 | |
| 78.188.196.206 Turkey · Turk Telekomunikasyon Anonim Sirketi | malware mozi elf-binary | 1 | 2026-09-26 | |
| 61.71.255.225 Taiwan · Hoshin Multimedia Center Inc. | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 77.53.231.107 Sweden · Bredband2 AB | malware mozi elf-binary | 1 | 2026-09-26 | |
| 60.217.161.244 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 61.53.122.4 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-09-26 | |
| 61.52.158.118 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-09-26 | |
| 61.53.92.5 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 61.137.200.53 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 61.52.195.226 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-09-26 | |
| 78.153.29.33 Russia · MTS PJSC | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 60.22.254.252 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 60.161.2.64 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 60.186.209.6 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 61.137.206.222 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
| 60.13.84.124 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 60.13.81.224 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | A | 1 | 2026-09-26 |
| 59.103.116.83 Pakistan · Cyber Internet Services (Private) Limited | malware mozi elf-binary | 1 | 2026-09-26 | |
| 59.97.248.47 India · Bharat Sanchar Nigam Ltd | malware mozi elf-binary | 1 | 2026-09-26 | |
| 5.59.107.34 Ukraine · SPD Chernega Aleksandr Anatolevich | malware mozi elf-binary | ELF | 1 | 2026-09-26 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free