huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled mozi

HostLabelsFile typesFilesLast seen
77.236.89.203
Russia · Ltd. "SPA"Impulse"
exposed-secret malware mozi pe-binaryBZ2, ZIP, PE, KEY1012026-10-19
8.138.166.206
Singapore · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret exploit malware c2PY, TXT, XML, LOG932026-10-19
47.52.70.58
United States · Alibaba (US) Technology Co., Ltd.
exploit exposed-secret malware moziPY, JS, MD, BAT132026-10-19
146.103.123.60
The Netherlands · SERVERS TECH FZCO
exposed-secret exploit malware moziLOG, PY, KEY, TXT1092026-10-19
38.9.96.215
United States · Cogent Communications
malware c2 havoc moziELF, SH, LOG152026-10-18
166.88.95.90
United States · Evoxt Sdn. Bhd.
malware exposed-secret mozi pe-binaryPE, TXT72026-10-17
45.139.104.36
United States · 49.3 Networking LLC
malware mozi exploit exposed-secretMD, JSON, JS, MJS312026-10-16
38.137.248.35
Ukraine · Lekol LLC
malware mozi elf-binary12026-10-16
194.233.72.68
Singapore · Contabo Asia Private Limited
exploit exposed-secret malware webshellPY, TXT, PHP, MD2852026-10-16
168.220.248.106
India · WEBYNE DATA CENTRE PRIVATE LIMITED
exploit malware moziSH12026-10-16
182.127.111.173
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-16
182.117.119.237
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-16
218.61.29.103
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-16
103.200.219.143
Singapore · NewMedia Express Pte Ltd
exploit exposed-secret malware moziTXT, YAML, OVPN272026-10-16
47.102.192.23
China · Hangzhou Alibaba Advertising Co.,Ltd.
exposed-secret malware exploit moziPY, TXT, LOG, SH4842026-10-15
188.225.24.13
Russia · JSC "TIMEWEB"
malware moziPHP12026-10-15
95.237.154.159
Italy · Telecom Italia S.p.A.
malware mozi elf-binaryA12026-10-15
83.233.56.26
Sweden · Bredband2 AB
malware mozi elf-binaryA12026-10-15
207.244.234.243
United States · Contabo Inc.
exposed-secret exploit malware c2TXT, ELF1242026-10-15
61.243.141.19
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
61.53.86.56
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
47.215.224.64
United States · Suddenlink Communications
malware mozi elf-binary12026-10-15
60.23.232.97
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
5.165.233.43
Russia · JSC "ER-Telecom Holding"
malware mozi elf-binaryELF12026-10-15
46.236.65.27
Sweden · Bredband2 AB
malware mozi elf-binary12026-10-15
42.4.97.14
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
46.252.33.253
Albania · Vodafone Albania Sh.A.
malware mozi elf-binaryA12026-10-15
42.235.72.7
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-15
46.236.65.9
Sweden · Bredband2 AB
malware mozi elf-binary12026-10-15
42.231.215.119
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
42.228.247.58
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
42.180.33.60
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
221.227.105.162
China · Chinanet
malware mozi elf-binaryELF12026-10-15
222.137.37.123
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
222.137.20.110
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
42.224.174.209
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
42.177.100.35
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
219.157.61.33
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
216.129.184.213
United States · Arvig Enterprises Inc.
malware mozi elf-binary12026-10-15
222.127.251.169
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-10-15
219.155.208.94
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
221.15.14.153
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
218.60.183.2
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
221.15.174.1
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-15
218.74.111.34
China · Chinanet
malware mozi elf-binaryA12026-10-15
212.54.86.171
Denmark · Telenor A/S
malware mozi elf-binaryA12026-10-15
216.126.86.64
Canada · Frontier Networks
malware mozi elf-binaryA12026-10-15
183.12.167.180
China · Chinanet
malware mozi elf-binaryA12026-10-15
182.121.137.144
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
196.210.57.231
South Africa · Dimension Data
malware mozi elf-binaryA12026-10-15
← NewerPage 8 of 19Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free