huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled mozi
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 185.199.109.133 United States · Fastly, Inc. | exploit ioc-match malware mozi | BAT, DBF, HTA, PS1 | 5 | 2026-11-10 |
| 185.7.214.119 Russia · changway-as Chang Way Technologies Co. Limited | malware mozi | TXT | 1 | 2026-11-10 |
| 52.172.140.8 India · Microsoft Corporation | exposed-secret exploit c2 webshell | SH, PY, LOG, SQL | 297 | 2026-11-10 |
| 165.227.87.198 United States · DigitalOcean, LLC | malware mozi exposed-secret tunnel | TXT, LOG, PHP | 11 | 2026-11-10 |
| 8.211.180.57 Singapore · Alibaba (US) Technology Co., Ltd. | exploit malware mozi exposed-secret | HTML, LOG, PY | 14 | 2026-11-10 |
| 152.42.162.237 Singapore · DigitalOcean, LLC | exposed-secret exploit malware mozi | PY, TXT, LOG, ELF | 135 | 2026-11-09 |
| 163.52.135.151 unknown network | exposed-secret exploit webshell malware | PY, HTML, TXT, PHP | 611 | 2026-11-09 |
| 168.144.157.73 India · DigitalOcean, LLC | exposed-secret malware mozi exploit | PY, SH, JS, TXT | 633 | 2026-11-09 |
| 185.199.110.133 United States · Fastly, Inc. | exploit ioc-match malware mozi | BAT, DBF, HTA, PS1 | 5 | 2026-11-09 |
| 185.199.111.133 United States · Fastly, Inc. | exploit malware mozi | HTA, TXT | 2 | 2026-11-09 |
| 147.182.133.56 United States · DigitalOcean, LLC | exposed-secret malware exploit c2 | BIN, TXT, PE, HTML | 237 | 2026-11-09 |
| 178.62.235.52 The Netherlands · DigitalOcean, LLC | exposed-secret exploit malware mozi | PY, LOG, HTML, TXT | 209 | 2026-11-09 |
| 132.226.169.119 South Korea · Oracle Corporation | exposed-secret malware mozi tunnel | YAML, SH, BAK, ELF | 36 | 2026-11-09 |
| 8.138.12.59 Singapore · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit malware mozi | PY, JS, LOG, SH | 99 | 2026-11-09 |
| 46.101.155.48 Germany · DigitalOcean, LLC | exposed-secret malware mozi tunnel | JS, LOG, TXT, ELF | 18 | 2026-11-09 |
| 154.217.248.243 United States · AROSSCLOUD INC. | malware mozi exposed-secret | TXT, ENV, JSON, PHP | 9 | 2026-11-09 |
| 125.44.215.58 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-11-09 | |
| 47.84.30.150 United States · Alibaba (US) Technology Co., Ltd. | malware c2 exploit exposed-secret | ELF, C, GZ, PY | 84 | 2026-11-09 |
| 130.94.95.155 Indonesia · NTT America, Inc. | exposed-secret malware mozi c2 | PY, HTML, LOG, JSON | 316 | 2026-11-09 |
| 130.94.31.29 South Korea · NTT America, Inc. | exposed-secret malware mozi elf-binary | BAK, ELF, PE, SH | 14 | 2026-11-09 |
| 123.173.4.27 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-11-09 |
| 146.19.213.192 Russia · ALEXHOST SRL | malware exposed-secret mozi exploit | PY, SH, LOG, TXT | 1,270 | 2026-11-09 |
| 173.231.222.210 United States · InMotion Hosting, Inc. | exposed-secret malware mozi exploit | GZ, SQL, PHP | 28 | 2026-11-08 |
| 39.104.70.157 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret malware mozi exploit | PY, SH, LOG, JAR | 272 | 2026-11-08 |
| 154.12.86.207 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, LOG, JSON, SH | 140 | 2026-11-08 |
| 64.176.34.176 Japan · The Constant Company, LLC | malware c2 mozi webshell | PY, SH, TXT, ELF | 26 | 2026-11-08 |
| 124.198.131.63 United States · 1337 Services GmbH | exposed-secret malware exploit mozi | PY, SH, PE, RAR | 217 | 2026-11-08 |
| 179.43.171.203 Panama · Private Layer INC | exposed-secret exploit malware mozi | LOG, PY, JSON, TXT | 76 | 2026-11-08 |
| 179.43.171.202 Panama · Private Layer INC | exposed-secret exploit malware mozi | LOG, PY, JSON, TXT | 76 | 2026-11-08 |
| 223.151.76.117 China · Chinanet | malware mozi elf-binary | A | 1 | 2026-11-08 |
| 130.94.44.130 Singapore · NTT America, Inc. | exposed-secret exploit webshell malware | TXT, PS1, PY, TOML | 98 | 2026-11-07 |
| 212.11.60.95 Taiwan · OCTOPUS WEB SOLUTION INC | exposed-secret malware mozi | COM, CYOU | 3 | 2026-11-07 |
| 163.52.135.106 unknown network | malware mozi exploit exposed-secret | ELF, JS, TXT, JSON | 33 | 2026-11-07 |
| 38.60.91.186 United States · FASTNET DATA INC | exposed-secret malware mozi exploit | SH, PY, LOG, TXT | 1,039 | 2026-11-07 |
| 192.236.152.232 United States · HostPapa | exploit exposed-secret malware mozi | PY, TXT, SH, LOG | 241 | 2026-11-07 |
| 3.84.186.180 United States · Amazon.com, Inc. | exposed-secret malware mozi exploit | PY, HTML, JS, TXT | 829 | 2026-11-07 |
| 3.128.117.168 United States · Amazon.com, Inc. | exposed-secret exploit malware mozi | PHP, JS, BIN, DB | 256 | 2026-11-07 |
| 64.23.240.211 United States · DigitalOcean, LLC | malware exploit coinminer exposed-secret | PY, LOG, TXT, SH | 386 | 2026-11-07 |
| 8.212.181.6 Philippines · Alibaba (US) Technology Co., Ltd. | exposed-secret malware cobalt-strike c2 | GO, BIN, TXT, PE | 77 | 2026-11-07 |
| 13.215.184.109 Singapore · Amazon.com, Inc. | exposed-secret malware exploit mozi | JSON, TXT, SH, PY | 136 | 2026-11-07 |
| 16.59.36.98 United States · Amazon.com, Inc. | c2 exposed-secret exploit malware | LOG, SH, PY, JSON | 72 | 2026-11-07 |
| 3.26.94.147 Australia · Amazon.com, Inc. | c2 exploit malware exposed-secret | PY, TOC, PE, MD | 67 | 2026-11-07 |
| 13.63.179.207 Sweden · Amazon.com, Inc. | exposed-secret malware mozi c2 | TXT, APK, GITIGN, KEYSTO | 39 | 2026-11-07 |
| 27.206.88.201 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-11-07 | |
| 89.36.231.178 France · ROCKHOSTER PRIVATE LIMITED | malware coinminer exploit c2 | XML, SH, BAT, JAR | 281 | 2026-11-07 |
| 152.175.230.66 Hong Kong · SKR-DE SAKURA INTERNATIONAL INVESTMENT LIMITED | exposed-secret malware mozi exploit | JSON, JS, HTML, TXT | 35 | 2026-11-07 |
| 189.105.68.190 Hong Kong | exploit exposed-secret malware mozi | PY, LOG, JSONL, TXT | 13 | 2026-11-07 |
| 47.99.157.12 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware webshell | PY, SH, PHP, C | 14 | 2026-11-06 |
| 104.16.231.132 United States · Cloudflare, Inc. | c2 malware mozi | COM, JS | 4 | 2026-11-06 |
| 104.16.230.132 United States · Cloudflare, Inc. | c2 malware mozi | COM, JS | 4 | 2026-11-06 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free