huntback / loot

Loot index

When something attacks our decoys, huntback scans the source back and archives what its open directories and staging panels serve: webshells, phishing kits, exploit scripts, C2 configs and miners. This is the public index of those hosts.

5,967
hosts
106,479
files
102
new hosts in 24h

What this page answers

What do attackers keep on their own servers?

SourceServers that attacked our decoys, scanned back
Public hereCounts, labels, file types
Behind sign-inFiles, hashes, one zip per host

How we collect it →

All hostsexposed-secret 2997malware 1225exploit 1134mozi 922c2 314webshell 282ioc-match 88coinminer 66gafgyt 56tsunami 41mirai 38sliver 31meterpreter 16havoc 15

Hosts labelled mozi

HostLabelsFile typesFilesLast seen
175.165.84.140
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
157.245.157.248
Singapore · DigitalOcean, LLC
exposed-secret malware mozi tunnelTXT12026-10-15
175.146.1.197
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
175.149.80.109
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
124.92.76.80
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
170.84.134.172
NI · XINWEI INTELCOM.NIC, S.A.
malware mozi elf-binaryA12026-10-15
170.84.133.235
NI · XINWEI INTELCOM.NIC, S.A.
malware mozi elf-binaryA12026-10-15
170.84.132.250
NI · XINWEI INTELCOM.NIC, S.A.
malware mozi elf-binaryA12026-10-15
123.5.132.134
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
123.14.216.41
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
123.161.90.221
China · Chinanet
malware mozi elf-binaryA12026-10-15
123.15.75.224
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-15
120.84.213.141
China · China Unicom IP network China169 Guangdong province
malware mozi elf-binaryELF12026-10-15
120.84.214.181
China · China Unicom IP network China169 Guangdong province
malware mozi elf-binaryELF12026-10-15
120.28.167.203
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-10-15
119.180.53.149
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
119.180.14.117
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
119.116.38.46
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
116.10.132.105
China · Chinanet
malware mozi elf-binaryA12026-10-15
115.55.207.120
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
115.52.81.24
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-15
115.58.176.160
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-15
115.51.153.198
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-15
113.239.221.244
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-15
112.238.27.166
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-15
105.225.151.155
South Africa · Telkom SA Ltd.
malware mozi elf-binaryA12026-10-15
194.163.148.133
France · Contabo GmbH
exposed-secret exploit malware moziPHP, TXT, MD, JS742026-10-14
38.54.88.188
United States · Kaopu Cloud HK Limited
malware exposed-secret mozi c2PY, SH, ELF, TGZ362026-10-14
58.62.144.229
China · Chinanet
malware exposed-secret mozi pe-binaryPE, OVPN, SH, TAR72026-10-14
61.166.61.44
China · Chinanet
malware mozi elf-binaryA12026-10-14
196.190.224.62
ET · EthioNet
malware mozi elf-binaryA12026-10-13
60.23.238.248
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryELF12026-10-13
66.154.127.156
Canada · MULTACOM CORPORATION
exposed-secret exploit malware c2PY, ELF, SH, MD1102026-10-13
69.46.46.62
United States · Railway
c2 exploit malware moziPS112026-10-12
3.221.186.160
United States · Amazon.com, Inc.
exposed-secret malware moziTXT, PHP, SH, SQL52026-10-12
31.76.79.58
United States · PLAY2GO INTERNATIONAL LIMITED
exposed-secret exploit malware moziSH, PY, PL342026-10-12
36.50.134.86
Vietnam · VPSTTT COMPUTER COMPANY LIMITED
malware mozi elf-binaryELF132026-10-10
213.136.79.115
France · Contabo GmbH
exposed-secret exploit malware c2SH, TXT, JSON, LOG4602026-10-09
112.113.175.13
China · Chinanet
malware mozi elf-binaryA12026-10-08
45.166.188.48
Brazil · Falcon Net
malware mozi elf-binaryA, JSON22026-10-08
61.52.213.183
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
200.115.102.246
Brazil · FiberPon telecom
malware mozi elf-binaryA, JSON22026-10-08
42.234.99.214
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
42.229.175.66
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
222.138.78.101
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
222.160.220.86
China · CHINA UNICOM China169 Backbone
malware mozi elf-binaryA12026-10-08
187.110.223.227
Brazil · AS271724
malware mozi elf-binaryA12026-10-08
180.190.240.131
Philippines · Globe Telecom Inc.
malware mozi elf-binaryA12026-10-08
120.84.214.178
China · China Unicom IP network China169 Guangdong province
malware mozi elf-binaryELF12026-10-08
123.8.8.177
China · CHINA UNICOM China169 Backbone
malware mozi elf-binary12026-10-08
← NewerPage 9 of 19Older →
Open the files, hashes and zips

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free