huntback / loot
Loot index
When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.
5,966
hosts
106,473
files
104
new hosts in 24h
What this page answers
What do attackers keep on their own servers?
SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host
Hosts labelled mozi
| Host | Labels | File types | Files | Last seen |
|---|---|---|---|---|
| 198.44.116.69 United States · HostPapa | exposed-secret malware mozi exploit | PY, SH, JSON, LOG | 733 | 2026-11-03 |
| 198.23.145.14 United States · HostPapa | exposed-secret exploit c2 webshell | SH, PY, SQL, MD | 792 | 2026-11-03 |
| 198.46.252.28 United States · HostPapa | exposed-secret exploit malware mozi | GO, TXT, SH, GZ | 89 | 2026-11-03 |
| 69.12.64.195 United States · HostPapa | exposed-secret malware mozi webshell | PHP, JS, ASP, LOG | 112 | 2026-11-03 |
| 192.227.241.226 United States · HostPapa | exposed-secret exploit malware mozi | PY, SH, LOG, GZ | 538 | 2026-11-03 |
| 159.203.225.195 United States · DigitalOcean, LLC | malware exploit exposed-secret mozi | PE, EXE, BAT, ZIP | 147 | 2026-11-03 |
| 152.42.193.28 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 188.166.206.102 Singapore · DigitalOcean, LLC | exposed-secret malware mozi exploit | SH, PY, TGZ, LOG | 747 | 2026-11-03 |
| 101.126.4.50 China · Beijing Volcano Engine Technology Co., Ltd. | exploit webshell exposed-secret malware | LOG, SH, PY, JSON | 175 | 2026-11-03 |
| 168.144.85.125 India · DigitalOcean, LLC | exposed-secret exploit malware mozi | SH, TXT, PY, DEB | 500 | 2026-11-03 |
| 185.228.168.10 United States · Daniel Cid | exposed-secret malware mozi | TXT | 1 | 2026-11-03 |
| 185.228.168.168 United States · Daniel Cid | exposed-secret malware mozi | ENV, TXT | 2 | 2026-11-03 |
| 104.168.111.208 United States · HostPapa | malware mozi exploit exposed-secret | PY, LOG, SH, PYC | 352 | 2026-11-03 |
| 172.105.156.153 United States · Akamai Technologies, Inc. | exposed-secret exploit malware mozi | TXT, JSON, SH, MD | 163 | 2026-11-03 |
| 194.233.67.247 Singapore · Contabo Asia Private Limited | exploit exposed-secret malware mozi | TXT, PHP, HTML, PY | 354 | 2026-11-02 |
| 173.212.244.40 France · Contabo GmbH | exposed-secret exploit webshell c2 | PY, HTML, MD, PHP | 523 | 2026-11-02 |
| 203.194.115.12 Indonesia · Rumahweb | exposed-secret exploit malware webshell | PY, LOG, PHP, JAR | 360 | 2026-11-02 |
| 83.172.138.182 Germany · M247 Europe SRL | exposed-secret malware mozi exploit | PY, TXT, APK, HTML | 301 | 2026-11-02 |
| 147.93.159.0 Singapore · Contabo Asia Private Limited | exposed-secret exploit webshell malware | PY, PHP, SH, C | 86 | 2026-11-02 |
| 169.58.233.110 United States · TerraTransit AG | exploit exposed-secret malware mozi | LOG, JSON, MD, SH | 125 | 2026-11-02 |
| 45.148.10.183 AD · TECHOFF SRV LIMITED | malware exploit mozi webshell | PE, CMD, PS1, VBS | 18 | 2026-11-02 |
| 92.246.129.98 Brazil · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | JS, JSON, PY, SH | 347 | 2026-11-02 |
| 78.111.90.130 Canada · ITGLOBAL.COM NL B.V. | exposed-secret exploit malware mozi | TXT, SH, JSON, LOG | 243 | 2026-11-02 |
| 64.118.151.226 Hong Kong · Eons Data Communications Limited | exploit exposed-secret malware mozi | SH, LOG, MD, JSON | 147 | 2026-11-02 |
| 181.41.194.136 The Netherlands · OVH SAS | malware mozi c2 exposed-secret | HTA, CMD, BAT, JS | 23 | 2026-11-02 |
| 18.136.195.202 Singapore · Amazon.com, Inc. | exploit exposed-secret malware mozi | PY, LOG, TXT, SH | 213 | 2026-11-02 |
| 107.175.85.215 United States · HostPapa | exploit exposed-secret malware mozi | TXT, BIN, BODY, PY | 28 | 2026-11-02 |
| 101.36.112.205 Hong Kong · UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED | exposed-secret exploit malware webshell | PY, PHP, JS, SH | 161 | 2026-11-02 |
| 43.133.242.81 South Korea · Shenzhen Tencent Computer Systems Company Limited | exposed-secret exploit malware mozi | SH, PY, LOG, TXT | 441 | 2026-11-02 |
| 212.103.62.205 United States · CNSERVERS LLC | exposed-secret malware exploit mozi | SH, PY, ELF, JSON | 387 | 2026-11-02 |
| 38.76.208.29 United States · cognetcloud INC | exploit malware exposed-secret c2 | LOG, PY, JAVA, MACHO | 78 | 2026-11-02 |
| 39.106.13.235 China · Hangzhou Alibaba Advertising Co.,Ltd. | exploit malware mozi exposed-secret | PY, LOG, OUT, JAR | 21 | 2026-11-02 |
| 66.42.33.224 Japan · The Constant Company, LLC | malware exposed-secret mozi sliver | JSON, PS1, PY, LOG | 21 | 2026-11-02 |
| 74.161.43.26 Switzerland · Microsoft Corporation | exposed-secret malware exploit mozi | C, PS1, ELF, PY | 18 | 2026-11-02 |
| 38.60.212.186 JP · Cogent Communications, LLC | exposed-secret malware mozi tunnel | PS1, SH, PY, PYC | 47 | 2026-11-02 |
| 156.239.47.147 United States · AROSSCLOUD INC. | exploit malware mozi c2 | LOG, JSON, PY, JS | 33 | 2026-11-02 |
| 45.156.87.230 The Netherlands · TechTies Inc. | exploit webshell exposed-secret malware | HTML, PHP, PY, TXT | 4 | 2026-11-02 |
| 104.233.217.108 United States · PEG TECH INC | exposed-secret exploit malware mozi | PY, TXT, JS, JSON | 699 | 2026-11-02 |
| 103.117.136.137 Hong Kong · cognetcloud INC | exposed-secret exploit malware mozi | PY, TGZ, SH, JS | 637 | 2026-11-01 |
| 49.51.187.59 United States · Shenzhen Tencent Computer Systems Company Limited | malware exploit exposed-secret mozi | ELF, LOG, B64, DTD | 160 | 2026-11-01 |
| 178.95.25.224 Ukraine · The Constant Company, LLC | exposed-secret malware mozi webshell | SH, JS, TXT, LOG | 697 | 2026-11-01 |
| 31.56.228.126 France · CGI GLOBAL LIMITED | exposed-secret exploit malware mozi | PY, LOG, TXT, HTML | 62 | 2026-11-01 |
| 185.125.24.7 Switzerland · Infomaniak Network SA | exploit exposed-secret malware mozi | XZ, BUILDI, BUILD, CHANGE | 146 | 2026-11-01 |
| 104.200.73.97 United States · GWY IT PTY LTD | exposed-secret exploit malware webshell | PY, ELF, C, TXT | 134 | 2026-11-01 |
| 185.228.168.9 United States · Daniel Cid | exposed-secret malware mozi | ENV, TXT | 2 | 2026-10-31 |
| 39.109.57.67 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | exposed-secret malware exploit mozi | PY, LOG, ELF, SH | 26 | 2026-10-31 |
| 39.109.57.179 Hong Kong · XHKL-AS-AP - XUN HONG KONG LIMITED | malware exploit exposed-secret mozi | ELF, LOG, PY, SH | 9 | 2026-10-31 |
| 96.126.130.81 United States · Evoxt Sdn. Bhd. | malware mozi exploit webshell | EML, SH, PY, LOG | 1,568 | 2026-10-31 |
| 203.204.192.28 Taiwan · Hoshin Multimedia Center Inc. | malware mozi elf-binary | A | 1 | 2026-10-31 |
| 45.155.19.244 Turkey · Samet Girginer | malware mozi exploit exposed-secret | JS, TS, MJS, JSON | 56 | 2026-10-31 |
Open the files, hashes and zips
Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.
Start hunting free