Public Mosaic C2 indicators

malware family

Mozi

1,035 hosts identified as Mozi botnet nodes: 1,033 still listed, 2 archived. First seen 2026-06-13.

feed checked 2026-10-30 20:37 UTC TLP:CLEAR

hosts 1,035 1,033 still listed

listings 1,093

networks 126

first seen 2026-06-13

About

A peer-to-peer IoT botnet built on published Mirai and leaked Gafgyt code, which finds its peers over the public BitTorrent DHT rather than checking in to a central listener — an approach Hajime used before it. A node can serve the bot over HTTP, from a port it picks at random, and most addresses here were identified from the file they served. Qihoo 360's Netlab reported in 2021 that Mozi's authors had been arrested, and in 2023 a kill switch pushed under the botnet's own signing keys stopped the bot on the nodes it reached and took its place. An address listed here was observed as an infected device, whose owner is the victim, rather than as operator infrastructure; Mozi's documented targets are chiefly routers and DVRs. A listing records what the scanner observed, not that anyone still commands it.

Ports

:344484:369904:410754:447034:464374:513474:605664:358533

The 8 ports with the most hosts, of 951.

Observed changes

Relabelled: 142 hosts earlier labelled Mirai; 10 hosts earlier labelled Cobalt Strike. Only the most recent earlier label is kept.

Detection packs

Rules for this hub's 1,033 still-listed hosts, across all 11 pages of the list, updated with the archive. Withdrawn hosts can stay in these files for up to five minutes. Each listener gets one Suricata rule on its address and port, with the same rule ID in every file: load one set, or let suricata-update merge them. A newer file replaces an older one. YARA rules match file hashes only.

Suricata rules Sigma rules YARA rules Hash list (TXT) View in the live feed

Files

3 files for this family, with hashes and serving hosts →

Hosts · page 8 of 11

Newest first by first seen, so later pages shift as hosts are added. Archived hosts are included and marked.

182.126.201.152MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 115.55.173.148MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 123.5.152.25MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 182.120.43.111MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-07 115.62.181.25MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 115.55.244.240MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 115.63.84.231MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 115.54.133.39MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 175.9.166.233MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-04 115.57.80.149MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 180.191.32.197MoziAS132199 · Globe Telecomlast confirmed 2026-09-09 125.160.139.10MoziAS7713 · PT Telekomunikasi Indonesialast confirmed 2026-09-04 124.6.169.46MoziAS132199 · Globe Telecomlast confirmed 2026-09-05 122.241.130.212MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-05 122.233.29.62MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-04 117.252.240.213MoziAS9829 · National Internet Backbonelast confirmed 2026-09-04 114.226.120.28MoziAS140293 · CHINATELECOM Jiangsu province Changzh…last confirmed 2026-09-10 112.198.130.112MoziAS132199 · Globe Telecomlast confirmed 2026-09-04 112.113.68.159MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-04 61.53.151.142MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 96.125.128.2MoziAS7311 · Frontier Networkslast confirmed 2026-09-20 27.12.96.57MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-09 42.224.78.23MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 42.227.179.13MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 47.215.224.64MoziAS19108 · Optimumlast confirmed 2026-10-08 2.187.98.47MoziAS58224 · Iran Telecommunication Company PJSlast confirmed 2026-09-04 202.1.26.13MoziAS151330 · PLAY BROADBAND (PRIVATE)last confirmed 2026-09-04 219.157.63.238MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 125.43.45.149MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 182.121.239.171MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 112.248.108.140MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 182.126.122.180MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 117.199.77.239MoziAS9829 · National Internet Backbonelast confirmed 2026-09-20 123.10.225.139MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 183.151.171.156MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-04 196.189.9.27MoziAS24757 · Ethio Telecomlast confirmed 2026-09-02 42.233.107.113MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 87.15.14.109MoziAS3269 · Telecom Italia S.p.Alast confirmed 2026-09-09 95.9.35.137MoziAS9121 · Turk Telekomunikasyon Anonim Sirketilast confirmed 2026-09-02 98.252.87.232MoziAS7922 · Comcast Cable Communicationslast confirmed 2026-09-06 27.215.84.127MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 42.224.7.191MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 182.126.84.3MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 115.55.221.28MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 115.49.73.224MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 182.119.191.143MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 112.242.152.173MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 182.119.68.47MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 125.42.14.164MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 125.41.211.58MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 182.124.20.96MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 41.201.226.25MoziAS36947 · Telecom Algerialast confirmed 2026-09-02 103.80.57.126MoziAS135721 · Networklast confirmed 2026-09-02 105.184.31.171MoziAS37457 · Telkom SAlast confirmed 2026-09-03 110.138.3.140MoziAS7713 · PT Telekomunikasi Indonesialast confirmed 2026-09-02 117.131.92.150MoziAS24400 · Shanghai Mobile Communicationslast confirmed 2026-09-12 27.215.80.198MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-13 39.86.115.129MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 42.224.174.102MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 61.53.122.56MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 115.55.62.144MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 105.225.48.83MoziAS37457 · Telkom SAlast confirmed 2026-09-02 222.246.41.226MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-02 222.138.213.176MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 222.137.208.37MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 222.137.132.141MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02archived 221.15.190.37MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 210.208.111.74MoziAS9924 · Taiwan Fixed Network, Telco and Netwo…last confirmed 2026-09-11 210.208.110.4MoziAS9924 · Taiwan Fixed Network, Telco and Netwo…last confirmed 2026-09-12 185.9.139.117MoziAS202710 · ABnet Sh.p.klast confirmed 2026-09-02 183.158.162.161MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-02 183.153.114.172MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-02 183.150.141.1MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-04 182.119.250.57MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 182.118.244.54MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 115.51.180.51MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 119.116.121.152MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-09 115.55.253.18MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 123.12.158.240MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 125.40.74.144MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 115.58.80.45MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 42.232.229.148MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 61.53.120.105MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 125.47.249.24MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 115.52.111.131MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04 42.226.79.45MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 115.55.207.5MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 180.191.22.170MoziAS132199 · Globe Telecomlast confirmed 2026-09-11 122.99.60.138MoziAS9416 · Hoshin Multimedia Centerlast confirmed 2026-09-05 124.234.200.151MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-10 124.235.130.21MoziAS4134 · No.31,Jin-rong Streetlast confirmed 2026-09-06 103.164.128.184MoziAS55736 · Dataknox Ptylast confirmed 2026-09-18 105.186.112.68MoziAS37457 · Telkom SAlast confirmed 2026-09-02 105.186.83.56MoziAS37457 · Telkom SAlast confirmed 2026-09-02 105.187.26.237MoziAS37457 · Telkom SAlast confirmed 2026-09-02 110.136.99.36MoziAS7713 · PT Telekomunikasi Indonesialast confirmed 2026-09-02 42.224.115.189MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-02 43.252.159.78MoziAS149746 · PT Blip Integrator Providerlast confirmed 2026-09-10 45.171.177.193MoziAS268725 · Planex Telecomlast confirmed 2026-09-02 39.87.50.123MoziAS4837 · CHINA UNICOM China169 Backbonelast confirmed 2026-09-04

Listed in error?

These pages are generated by automated scanning. If a listing is wrong, email support@publicmosaic.com or see abuse & takedown. To exclude a network range from scanning, see opt-out.