huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,965
hosts
106,472
files
103
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled mozi
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 222.127.77.227 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-11-06 |
| 110.42.215.163 China · Shenzhen Tencent Computer Systems Company Limited | exploit exposed-secret malware mozi | GO, LOG, PY, PS1 | 317 | 2026-11-06 |
| 125.44.58.32 China · CHINA UNICOM China169 Backbone | malware mozi elf-binary | 1 | 2026-11-06 | |
| 46.216.199.241 Belarus · Mobile TeleSystems JLLC | malware mozi elf-binary | ELF | 1 | 2026-11-06 |
| 120.28.222.207 Philippines · Globe Telecom Inc. | malware mozi elf-binary | A | 1 | 2026-11-05 |
| 185.28.119.18 United Kingdom · BlueVPS OU | exploit exposed-secret webshell malware | MD, PY, SH, LOG | 160 | 2026-11-05 |
| 35.190.27.135 United States · Google LLC | malware mozi | ONLINE | 2 | 2026-11-05 |
| 212.11.60.204 Taiwan · OCTOPUS WEB SOLUTION INC | exposed-secret malware mozi | COM | 2 | 2026-11-05 |
| 89.108.69.199 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.158 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.108 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 37.140.192.28 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.148 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 185.217.198.154 Russia · FIRST SERVER LIMITED | malware mozi | M3U | 1 | 2026-11-05 |
| 43.135.35.8 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | malware mozi exposed-secret exploit | SH, PY, LOG, JS | 582 | 2026-11-05 |
| 109.238.87.159 United Kingdom · B2 Net Solutions Inc. | exposed-secret malware mozi exploit | TXT, SH, BIN, JSON | 11 | 2026-11-05 |
| 89.108.69.89 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 37.140.193.79 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.204 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 194.58.127.32 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 37.140.193.250 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.94 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.159 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 89.108.69.77 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 161.33.148.80 Japan · Oracle Corporation | exposed-secret malware mozi exploit | HDR, SH, TGZ, TXT | 294 | 2026-11-05 |
| 31.31.194.141 Russia · "Domain names registrar REG.RU", Ltd | malware mozi | JS | 1 | 2026-11-05 |
| 43.161.243.73 Hong Kong · Shenzhen Tencent Computer Systems Company Limited | exploit malware exposed-secret mozi | LOG, PY, MACHO, SH | 417 | 2026-11-05 |
| 168.144.251.199 United States | exploit exposed-secret webshell malware | PHP, HTML, LOG, PY | 146 | 2026-11-05 |
| 94.130.22.61 Germany · Hetzner Online GmbH | exposed-secret exploit malware mozi | PY, EML, JSON, TXT | 1,209 | 2026-11-05 |
| 23.27.25.75 United States · Evoxt Sdn. Bhd. | exposed-secret malware mozi exploit | PY, SQL, JSON, LOG | 129 | 2026-11-05 |
| 202.95.14.76 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 202.95.14.69 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 23.248.226.189 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.187 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.188 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.186 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 23.248.226.190 United States · YANCY LIMITED | exposed-secret exploit malware mozi | GZ, GITIGN, MD, PHP | 115 | 2026-11-04 |
| 202.95.14.60 Hong Kong · CTG Server Limited | exploit malware mozi exposed-secret | PHP, PY, TXT, ZIP | 417 | 2026-11-04 |
| 130.94.31.86 South Korea · NTT America, Inc. | malware mozi exposed-secret tunnel | TXT, PY, ENV, JSON | 11 | 2026-11-04 |
| 207.56.221.47 United States · NTT America, Inc. | exposed-secret malware mozi exploit | PY, LOG, SH, TXT | 625 | 2026-11-04 |
| 38.54.88.171 United States · Kaopu Cloud HK Limited | exploit exposed-secret malware mozi | PY, SH, LOG, TXT | 200 | 2026-11-04 |
| 38.60.227.210 United States · Kaopu Cloud HK Limited | exposed-secret malware mozi c2 | PY, TXT, SH, PS1 | 1,000 | 2026-11-04 |
| 158.247.218.226 South Korea · The Constant Company, LLC | exposed-secret malware mozi exploit | PY, JS, LOG, TXT | 388 | 2026-11-04 |
| 172.105.156.56 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.109 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 172.105.156.161 United States · Akamai Technologies, Inc. | exposed-secret malware mozi exploit | PHP, TXT | 4 | 2026-11-04 |
| 64.20.61.134 United States · Interserver, Inc | exposed-secret malware mozi tunnel | JSON, JS, TXT, HTML | 38 | 2026-11-03 |
| 39.99.242.80 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit exposed-secret malware mozi | PY, TXT, SH, MD | 128 | 2026-11-03 |
| 39.96.205.8 China · Hangzhou Alibaba Advertising Co.,Ltd. | exposed-secret exploit webshell malware | GO, LOG, PY, TXT | 576 | 2026-11-03 |
| 198.44.116.69 United States · HostPapa | exposed-secret malware mozi exploit | PY, SH, JSON, LOG | 733 | 2026-11-03 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free