# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: revetrat, zaratustra

# Reference: https://twitter.com/ScumBots/status/1047543566594179073

queda2122.ddns.net

# Reference: https://twitter.com/ScumBots/status/1047422769712046080

trotokolenigers.onthewifi.com

# Reference: https://twitter.com/ScumBots/status/1046815013401501701

mdformo1.ddns.net

# Reference: https://twitter.com/ScumBots/status/1041469793625407489

farida.ddns.net

# Reference: https://twitter.com/ScumBots/status/1037351538732294145

zxcvbn123456.ddns.net

# Reference: https://twitter.com/ScumBots/status/1038158542736445441

mondns.myftp.biz

# Reference: https://twitter.com/ScumBots/status/1040311939073826816

morfey.hldns.ru

# Reference: https://twitter.com/ScumBots/status/1050046306016747521

office365update.duckdns.org
systen32.ddns.net

# Reference: https://twitter.com/ScumBots/status/1052526398924095488

quedabesouro.ddns.net

# Reference: https://twitter.com/ScumBots/status/1053262497673891841

seekers.hopto.org

# Reference: https://twitter.com/ScumBots/status/1054081645400260608

duckdate.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1063996828516012033

morfey.myftp.org

# Reference: https://twitter.com/ScumBots/status/1064254932528832512

itachituff.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1067565492322410497

farida.ddns.net

# Reference: https://twitter.com/ScumBots/status/1069517101654777857

updatefacebook.ddns.net

# Reference: https://twitter.com/ScumBots/status/1080998862574309377

vivivi.myftp.org

# Reference: https://twitter.com/ScumBots/status/1081317358206156800

nerv7.ddns.net

# Reference: https://twitter.com/ScumBots/status/1081378115526582273

mondns.myftp.biz

# Reference: https://twitter.com/ScumBots/status/1082132730715037696

queda212.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1089336859912744960

microsoftsecure.myq-see.com

# Reference: https://twitter.com/ScumBots/status/1090260035312275456

498408.ddns.net
olhomagicocdt.duckdns.org
systenfailued.ddns.com.br

# Reference: https://twitter.com/ScumBots/status/1090736985315201025

helloweenhagga.ddns.net
helloweenhagga1.ddns.net
helloweenhagga2.ddns.net
helloweenhagga3.ddns.net

# Reference: https://twitter.com/ScumBots/status/1095149123517534208

helloweenhagga4.ddns.net

# Reference: https://twitter.com/ScumBots/status/1095760026923352066

updatesystem.linkpc.net

# Reference: https://twitter.com/ScumBots/status/1097587061329154055

easykill.servebeer.com
easykill1.servepics.com
easykill2.servepics.com
easykill3.servebeer.com

# Reference: https://twitter.com/ScumBots/status/1098145754185633793

haggasinger.ddns.net
haggasinger1.ddns.net
haggasinger2.ddns.net

# Reference: https://twitter.com/ScumBots/status/1101890548661698560

rat24695.ddns.net

# Reference: https://twitter.com/ScumBots/status/1102445323417542658

mastermana1.serveirc.com
mastermana2.serveirc.com
mastermana3.serveirc.com
mastermana4.serveirc.com

# Reference: https://twitter.com/ScumBots/status/1103351296768331776

seskoal7rbe.ddns.net

# Reference: https://twitter.com/ScumBots/status/1103751431318892546

fouirux-59789.portmap.io

81.106.30.119:4444

# Reference: https://twitter.com/ScumBots/status/1104736674087665665

173.46.85.160:5555

# Reference: https://twitter.com/James_inthe_box/status/1107686616624037890
# Reference: https://twitter.com/JAMESWT_MHT/status/1107682800134750211

nobody120.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1108802212543848450

5.9.171.235:333

# Reference: https://twitter.com/ScumBots/status/1110489582494203904

91.192.100.5:1604

# Reference: https://twitter.com/Racco42/status/1112628162872119296

82.223.9.232:98

# Reference: https://twitter.com/TweeterCyber/status/1112919582635745281

kronozzz2.duckdns.org

# Reference: https://twitter.com/F_kZ_/status/1047054463570186241

37.187.155.228:85
nojjdjamel.hopto.org
nojjdjamel2251.hopto.org

# Reference: https://twitter.com/malware_traffic/status/935703820889358336

oamentyga.duckdns.org

# Reference: https://twitter.com/Racco42/status/884324767809056768

37.187.92.171:621

# Reference: https://twitter.com/Racco42/status/882123509350236160

hagroonayazabiiiiii.com
82.165.147.250:621

# Reference: https://twitter.com/luc4m/status/1113433242689052672

oldmandnsch.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1117986483196055552
# Reference: https://twitter.com/ScumBots/status/1123048893170769922
# Reference: https://twitter.com/ScumBots/status/1123675214980833280

95.213.251.165:7070
95.213.251.165:9090
95.213.191.230:9090

# Reference: https://unit42.paloaltonetworks.com/aggah-campaign-bit-ly-blogspot-and-pastebin-used-for-c2-in-large-scale-campaign

frankmana.duckdns.org
workfine11.duckdns.org
oldmandnsch.duckdns.org
blackhagga.duckdns.org
skyrocket1.duckdns.org
kronoz.duckdns.org
oldmandnsch.duckdns.org
kronozzz2.duckdns.org
lulla.duckdns.org
decent.myvnc.com
decent5.myvnc.com
jayztools1.ddns.net
jayztools2.ddns.net
jayztools3.ddns.net
totallol.duckdns.org
totallol1.duckdns.org
totallol2.duckdns.org
totallol3.duckdns.org
decent2.myvnc.com
decent3.myvnc.com
decent1.myvnc.com
decent4.myvnc.com
jordanchen736.sytes.net
jordanchen7361.sytes.net
jordanchen7362.sytes.net
jordanchen7363.sytes.net
lalacious1.serveftp.com
lalacious2.serveftp.com
lalacious3.serveftp.com
lalacious4.serveftp.com
mastermana1.serveirc.com
mastermana2.serveirc.com
mastermana3.serveirc.com
mastermana4.serveirc.com
mastermana5.serveirc.com
lullikhao.ddns.net
lullikhao1.ddns.net
lullikhao2.ddns.net
bullol.duckdns.org
cocomo.ddns.net
haggasinger2.ddns.net
haggasinger.ddns.net
haggasinger1.ddns.net
loramer1.ddnsking.com
easykill.servebeer.com
easykill3.servebeer.com
easykill2.servepics.com
easykill1.servepics.com
easykill3.servepics.com
helloweenhagga.ddns.net
helloweenhagga3.ddns.net
helloweenhagga4.ddns.net
helloweenhagga2.ddns.net
revengerx211.sytes.net
revengerx212.sytes.net
revengerx213.sytes.net
revengerx214.sytes.net
revengerx215.sytes.net
revengerx216.sytes.net
revengerx217.sytes.net
revengerx218.sytes.net
revengerx219.sytes.net
revengerx210.sytes.net
office365update.duckdns.org
systen32.ddns.net
bhenchood.ddns.net
emmanuelstevo.ddns.net
zinderhola1.ddns.net
zinderhola.ddns.net
myownlogs.duckdns.org
cocomo1.ddns.net
cocomo10.serveblog.net
cocomo2.ddns.net
cocomo2.serveblog.net
cocomo3.serveblog.net
cocomo4.serveblog.net
cocomo5.serveblog.net
cocomo6.serveblog.net
cocomo7.serveblog.net
cocomo8.serveblog.net
cocomo9.serveblog.net
mrcode.hopto.org
mrcode1.hopto.org
mrcode2.hopto.org
pussi2442.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1076166793054556160

presentationx.sytes.net

# Reference: https://twitter.com/ScumBots/status/1121497114532618246

5.9.171.229:777

# Reference: https://twitter.com/illegalFawn/status/1122767858126266368

jorenimo55.hopto.org

# Reference: https://twitter.com/ScumBots/status/1126966907511480321

151.80.241.114:666

# Reference: https://twitter.com/HONKONE_K/status/1135760982385483777

queda212.duckdns.org

# Reference: https://twitter.com/James_inthe_box/status/1144358899429986304

185.165.153.250:5478

# Reference: https://twitter.com/ScumBots/status/1145116725970657281

93.90.193.146:213

# Reference: https://twitter.com/ps66uk/status/1145640316856340480

cheryl11.duckdns.org

# Reference: https://twitter.com/powershellcode/status/1148234398703030273

bylgay.hopto.org 
microsoftoutlook.duckdns.org
soucdtevoceumcuzao.duckdns.org

# Reference: https://twitter.com/coderippers/status/1153267389632602114
# Reference: https://www.virustotal.com/gui/ip-address/105.112.98.242/relations

105.112.98.242:1040
blackhill.ddns.net
isaacjekaguleri1234.ddns.net
mbvd.hopto.org
moneybag123.myftp.biz

# Reference: https://twitter.com/coderippers/status/1154003951152484352

mzu.publicvm.com

# Reference: https://twitter.com/ScumBots/status/1154429111198203910

204.152.219.67:1003

# Reference: https://twitter.com/RedDrip7/status/1154696058846322688
# Reference: https://ti.qianxin.com/blog/articles/gorgon-group-campaign-aggah-with-pastebin/

kronozzz2.duckdns.org
microsoftoutlook.duckdns.org
tonypp.duckdns.org
yahakhan.duckdns.org
zoebin.duckdns.org

# Reference: https://twitter.com/Racco42/status/1158745916653920257

194.5.98.242:1212

# Reference: https://twitter.com/James_inthe_box/status/1165603800230481920
# Reference: https://www.virustotal.com/gui/ip-address/82.146.50.128/relations
# Reference: https://www.virustotal.com/gui/ip-address/37.203.214.30/relations

37.203.214.30:5000
82.146.50.128:5000
ahhahaasdas.ddns.net
dafg124.ddns.net
darckcometa.ddns.net
denisvpn2.ddns.net
devedeev.hopto.org
don4ik228.ddns.net
ewqewqewq.ddns.net
hostvimeworld.ddns.net
killler40000.ddns.net
lis1033.hopto.org
makot123.ddns.net
nikolaykolyabb.hopto.org
noinmy.ddns.net
werder3456.hopto.org
anonim001.ddns.net
asfadsvasdfsd.ddns.net
hedswjhrjkwe.freedynamicdns.net
matvey.ddns.net
micromax111.ddns.net
minecrafter1337.ddns.net
nargaroth.ddns.net
orcusbam.ddns.net
q12345gg.hopto.org
q312820ressivr.hopto.org
syka228228ppppp.ddns.net
talgat.ddns.net
uksivthack.mein-vigor.de
vhjrtyg.hldns.ru

# Reference: https://twitter.com/de_aviation/status/1097547526763433985

helloweenhagga.ddns.net
revengerx111.sytes.net

# Reference: https://blog.talosintelligence.com/2019/08/rat-ratatouille-revrat-orcus.html

qstorm.chickenkiller.com
skymast231-001-site1.htempurl.com

# Reference: https://twitter.com/ScumBots/status/1175338135573684224

3.19.114.185:11400

# Reference: https://blog.prevailion.com/2019/10/mastermana-botnet.html
# Reference: https://www.virustotal.com/gui/file/c0878de0c284e2d7fff24672b6bd80d315222bc50a949426401304bd77f56eb7/detection

192.169.69.25:666
rgalldmn.duckdns.org
speeddfox.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1180817132763963394

144.76.134.221:333

# Reference: https://twitter.com/P3pperP0tts/status/1181546654169800705

34.95.176.194:443
bkil.ddns.net

# Reference: https://twitter.com/ScumBots/status/1184367636941029377

18.216.157.58:333

# Reference: https://twitter.com/ScumBots/status/1185658643720626176

193.161.193.99:56282

# Reference: https://twitter.com/ScumBots/status/1185983283408134145

192.241.133.27:5555

# Reference: https://twitter.com/ScumBots/status/1186745945154838528

148.251.11.102:333

# Reference: https://unit42.paloaltonetworks.com/aggah-campaign-bit-ly-blogspot-and-pastebin-used-for-c2-in-large-scale-campaign/

bhenchood.ddns.net
blackhagga.duckdns.org
bullol.duckdns.org
cocomo.ddns.net
cocomo1.ddns.net
cocomo10.serveblog.net
cocomo2.ddns.net
cocomo2.serveblog.net
cocomo3.serveblog.net
cocomo4.serveblog.net
cocomo5.serveblog.net
cocomo6.serveblog.net
cocomo7.serveblog.net
cocomo8.serveblog.net
cocomo9.serveblog.net
cycbra.duckdns.org
decent.myvnc.com
decent1.myvnc.com
decent2.myvnc.com
decent3.myvnc.com
decent4.myvnc.com
decent5.myvnc.com
easykill.servebeer.com
easykill1.servepics.com
easykill2.servepics.com
easykill3.servebeer.com
easykill3.servepics.com
emmanuelstevo.ddns.net
frankmana.duckdns.org
haggasinger.ddns.net
haggasinger1.ddns.net
haggasinger2.ddns.net
helloweenhagga.ddns.net
helloweenhagga2.ddns.net
helloweenhagga3.ddns.net
helloweenhagga4.ddns.net
jayztools1.ddns.net
jayztools2.ddns.net
jayztools3.ddns.net
jordanchen736.sytes.net
jordanchen7361.sytes.net
jordanchen7362.sytes.net
jordanchen7363.sytes.net
kronoz.duckdns.org
kronozzz2.duckdns.org
lalacious1.serveftp.com
lalacious2.serveftp.com
lalacious3.serveftp.com
lalacious4.serveftp.com
loramer1.ddnsking.com
lulla.duckdns.org
lullikhao.ddns.net
lullikhao1.ddns.net
lullikhao2.ddns.net
majorsss.duckdns.org
mastermana1.serveirc.com
mastermana2.serveirc.com
mastermana3.serveirc.com
mastermana4.serveirc.com
mastermana5.serveirc.com
mrcode.hopto.org
mrcode1.hopto.org
mrcode2.hopto.org
myownlogs.duckdns.org
office365update.duckdns.org
oldmandnsch.duckdns.org
pussi2442.ddns.net
revengerx210.sytes.net
revengerx211.sytes.net
revengerx212.sytes.net
revengerx213.sytes.net
revengerx214.sytes.net
revengerx215.sytes.net
revengerx216.sytes.net
revengerx217.sytes.net
revengerx218.sytes.net
revengerx219.sytes.net
skyrocket1.duckdns.org
systen32.ddns.net
totallol.duckdns.org
totallol1.duckdns.org
totallol2.duckdns.org
totallol3.duckdns.org
workfine11.duckdns.org
zinderhola.ddns.net
zinderhola1.ddns.net

# Reference: https://www.virustotal.com/gui/file/96a008b46c9acacccb03a31c01c9c28dac64b621eb819b8c92f242288207973a/detection

45.236.130.17:2022
d0rian2022.ddns.net

# Reference: https://twitter.com/P3pperP0tts/status/1190316504304246786

156.215.159.57:333
lapoire1.hopto.org

# Reference: https://twitter.com/ScumBots/status/1191396450497974274

193.161.193.99:56282

# Reference: https://twitter.com/JAMESWT_MHT/status/1193905361100644352
# Reference: https://app.any.run/tasks/d364f0d3-ed23-44ec-b230-351f75a5b0b3/
# Reference: https://app.any.run/tasks/d51c1833-2053-4d7f-a4d5-4e4f68c0bfe4/

192.169.69.25:5552
ytka.duckdns.org

# Reference: https://twitter.com/JayTHL/status/1189578177368264704

nocbaba1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/639f527b10857a2ef47673e699818f3dd85524ec31a3d8f487e133c73ba4a186/detection

105.112.98.242:5198

# Reference: https://www.virustotal.com/gui/file/27621e43a8b7d8137c432702b03561de7590ef55d7df0c3ad1f296a2891dde79/detection

185.244.29.15:5198
mallorca.myftp.org

# Reference: https://twitter.com/ScumBots/status/1197640092397064192

190.159.103.11:8080

# Reference: https://www.virustotal.com/gui/file/94d9cfda3e2a60aea012b0948c9f9eaf55d1f7d90fb1bc9e9c094a3a064669ad/detection

40999up.sytes.net
acecervolta.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ca3045208e641a504d71b95b312e23b5956540c42390d4fd5c73b0a592605ce2/detection

79.134.225.105:1515

# Reference: https://www.virustotal.com/gui/file/5fcf8adcf19a796ba5be6eafec26b0e735132fbdc9443e64a6622ddccbc622f9/detection

anonyklax.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b8de1bc56ce012c92db35b2fa042cc64949b44561c8b99137b6b9d7352046bd2/detection

212.83.170.126:556

# Reference: https://www.virustotal.com/gui/file/9ad8e7da4c1659aa83b8c26be641cb813ca9b3b3ab66436d39c37355b2060dd8/detection

212.83.170.126:777

# Reference: https://www.virustotal.com/gui/file/57e4b72d810a2060fc33a66712099b1a1c380f6b48fc1b0d2ce551acd5a26280/detection

212.83.170.126:555

# Reference: https://twitter.com/0xCARNAGE/status/1200501488709226498
# Reference: https://app.any.run/tasks/c382b09f-03f7-4680-86c5-28316c5cc5e3/

reviewondoc.hopto.org

# Reference: https://www.virustotal.com/gui/file/194318a6aa15e9b89493527e85e366a620375fb8276a99cbbe60e74c64007cdf/detection

therazor.duckdns.org

# Reference: https://www.virustotal.com/gui/file/53ff9d532c3deb4a523a837c7d0a5e1fc73d9d229505a9b21b9fa5c2e2a75b81/detection

tripplegar.duckdns.org

# Reference: https://www.virustotal.com/gui/file/978785aa90673c5ddc678f1018e3eda34ac89d74746da046c4264716b7ad90ac/detection

raxixe.ddns.net

# Reference: https://www.virustotal.com/gui/file/c0e1cefc0fa326e6fe9bc99b75f3efbe416288bdb9c15419f3d311c74a6d5159/detection

117.102.55.39:27015
196.194.129.126:27015

# Reference: https://www.virustotal.com/gui/file/a22e0bd4c7fb42f0eff06c79882c3978d36036b05365afce51a678940b77d2db/detection

117.102.49.165:27015

# Reference: https://www.virustotal.com/gui/file/866159f1b11fe095f44befc8f854d5088ad102ca5ee1596545551474159e3b54/detection

111.88.66.94:27015
196.62.171.212:27015

# Reference: https://www.virustotal.com/gui/file/f1c7e6b4718c11fdc2480758d92457c3cfb4b76f3904164c6a3385a79bb5129c/detection

82.165.189.152:12
rdp.dgsn.fr

# Reference: https://www.virustotal.com/gui/file/0474fa430b2615ae160aad788b42af3c9c853a18f881d9f2b68142a7758cd677/detection

51.39.52.149:2303

# Reference: https://www.virustotal.com/gui/file/9ca36a408d5a16f3dc423b8d242f4e88801e8182af6ae3a11c7fc33bdb534f8e/detection

79.134.225.81:2303

# Reference: https://www.virustotal.com/gui/file/579dddb5b420ac1e3e0a7fb69aea0ce133a1abb19649e9077d9fad2587dee80f/detection

alien007.my-firewall.org

# Reference: https://www.virustotal.com/gui/file/ae8d20d5b490e43334f8338d3907f02030a2b41332ac23bbce2d450017bc8326/detection

192.253.246.145:8152

# Reference: https://www.virustotal.com/gui/file/a09c08b424b81d1ae51d6f97742e9d6e44adf7269a74d4932b9792f4cc22f077/detection

109.22.233.12:1255
ktama.linkpc.net

# Reference: https://app.any.run/tasks/44fc2e78-b754-499e-b3af-7a79464eb5e6/

102.165.36.254:2336

# Reference: https://www.virustotal.com/gui/file/186bbc489899cf51c242bdc0b015b792f041cf7457122c976ea64e7e7b5dba39/detection

184.82.53.131:333

# Reference: https://www.virustotal.com/gui/file/735f73734a4655eabf8c26ec99743df7ec47f46fcd256fbab553a10f2baada03/detection

184.82.56.227:333
184.82.57.216:333
184.82.60.41:333

# Reference: https://www.virustotal.com/gui/file/2c23d2190d208448017f9277eb99e2440c333175904adc21fd2004f06862d0b5/detection

184.82.49.43:333

# Reference: https://www.virustotal.com/gui/file/91a7176ebe6fee77e0167a84e832aef4cdbc56234a9dd72ac955f51ab43b071b/detection

184.82.55.15:333

# Reference: https://www.virustotal.com/gui/file/ad1cbf644977d986d1c92b3c0fe6350a0ef2c87d1f719f083f35cd4a36707132/detection

184.82.55.236:333

# Reference: https://www.virustotal.com/gui/file/41cd5cbe2bd4a2457887d8dc8dce4ce729e48305d60c82e587674e6a39c0b1e2/detection

184.82.62.180:333

# Reference: https://www.virustotal.com/gui/file/1339337c0a0c174773a4c4b7f6f639f995d11164eddd62d660cf3d0eb04fae46/detection

184.82.61.54:333

# Reference: https://www.virustotal.com/gui/file/664a24c87095b082bacc5ee657ec9ba62edce5f5411ca9d74204f76f52bbcbed/detection

184.82.56.227:333

# Reference: https://twitter.com/malware_traffic/status/1210701849977925635
# Reference: https://app.any.run/tasks/a003dde6-2c61-4301-9323-c767484ccaee/

186.243.111.215:2222
marcialimaadvogados.ddns.net

# Reference: https://www.virustotal.com/gui/file/ce59a9172682feb9cc529510d7f4912591e0ff05b1fb8f218feff4f56b986a5d/detection

blog.capeturk.com

# Reference: https://www.virustotal.com/gui/file/08052cd140d7a3b458bace4be4d795b28136ee259789273e3eec6ce9e93de7f7/detection

nj.monk249.date

# Reference: https://www.virustotal.com/gui/file/2f8c54525f4e26d777471da3d4a417146b670c64639dde29379f5d889b46b5fe/detection

216.176.190.198:2222

# Reference: https://www.virustotal.com/gui/file/533a3ee4340e08faf9fa56c74d1cacbc8c2fbdffbc2b1348372a929e993a5ff6/detection

93.190.51.88:2222

# Reference: https://www.virustotal.com/gui/file/131c6d984601d02a2be36bf7fb71a712619a6d4f54068c58467a9334e6e94789/detection

192.227.121.243:2222

# Reference: https://www.virustotal.com/gui/file/f32da272fbb8be7d539518a7d191e3b698eec1e6cfb9c6c99b7bc26ebb645c0c/detection

193.161.193.99:25878

# Reference: https://www.virustotal.com/gui/file/48b8bf56f5221de8f6c2d0401e94eec04ce3498473fcb24ed947d7feea546a2e/detection

104.244.75.220:38197

# Reference: https://www.virustotal.com/gui/file/568c954a9e363d0e99ff2b20296d288cdd4326283746c7fc6a57782eb594c3e6/detection

104.244.75.220:38197
104.244.75.220:38198
omaitgb.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8596eb18fbed20521e380396707504cb863569f38a4eeb7f67bd206c1966891b/detection

104.244.75.220:3074

# Reference: https://www.virustotal.com/gui/file/8faee7d114e24b7bc762ed857d6087a7975f5c5fc2b11bc48b0c452eab7a055a/detection

drivetask.win

# Reference: https://www.virustotal.com/gui/file/9f8dbd0b0911fcc986fee73a640a0fceee40f10dde5c65692a962bebbce83a42/detection

41.140.185.154:1177
canad.ddns.net

# Reference: https://www.virustotal.com/gui/file/a469892016ef8e6113447bc1499878486d0e57ec8f775a637add59b701eed55e/detection

jvckiwai.ddns.net
phnzmaster1337.ddns.net

# Reference: https://www.virustotal.com/gui/file/3903657504b1808b259ed87f135c99f97724ced294fc79deacb78ce3a6b56aa0/detection

177.126.146.10:1000
177.126.146.29:1000
3030pp.hopto.org

# Reference: https://www.virustotal.com/gui/file/663b1ed354638ffad7b4247152a55e94d256b20a422e8420712a285d5196d600/detection

196.235.119.152:5005

# Reference: https://www.virustotal.com/gui/file/94e5e4566c7119fd856c962028b9a7ecca684ff1a6c8e7ac360cdcf33ac8a609/detection

196.234.181.131:5005

# Reference: https://www.virustotal.com/gui/file/69a7dc6e31ae9b2bdd9e9b91d1c78e82f0afb5c0b15b36d6529d3b08c0af02c4/detection

196.229.217.179:5005

# Reference: https://www.virustotal.com/gui/file/edb9d01d1dc453f3992d0cc01bb2e737a9e9cd18f685bc360dbb56919a5d2341/detection

196.234.130.111:5005
196.234.134.73:5005

# Reference: https://www.virustotal.com/gui/file/8acbacd3c0cf2aa0918107dfce43d4dbe2071fbad3561ef588654fb2e28b1e6c/detection

196.234.170.219:5005

# Reference: https://www.virustotal.com/gui/file/7b368a543d6cb7253135711ba044028794111551a796d0201c02e68799349ea2/detection

196.229.142.14:5005
196.234.196.160:5005

# Reference: https://www.virustotal.com/gui/file/435f1581d05022ab3cd2b1affd6da43513f02189a8f1aa103054d793068ff996/detection

dragonfire-49462.portmap.host

# Reference: https://www.virustotal.com/gui/file/527c7c40a907dea2b874019ac4d81e4965ad8647b60b9bc5af04debf4c6f7ffb/detection

79.134.225.72:2121
sure.spdns.de

# Reference: https://www.virustotal.com/gui/file/1b44b336bf31ef38e47a4df90df8f85efb341d8a3631202ac1c1945602e51dd0/detection

176.136.148.107:333

# Reference: https://twitter.com/ScumBots/status/1213638005254168577

KevinDavis-58161.portmap.host

# Reference: https://www.virustotal.com/gui/file/58f1865d2fb00775add6c9d34aa504118bc962e08fba8fb79b288515320ef933/detection

r3dc0d3r.duckdns.org

# Reference: https://www.virustotal.com/gui/file/858a439028cd32061a2fb29f3a13f4dcb6c09cb6147ff81f660ab19ede26d6e7/detection

103.136.156.186:12301

# Reference: https://twitter.com/ScumBots/status/1213800324630294528
# Reference: https://www.virustotal.com/gui/file/98c053d0a020c3146a1cfee09150fb2fc342f501ce00b0a898935c042ebe7016/detection

174.127.99.217:1016

# Reference: https://twitter.com/ScumBots/status/1215449944041062400

rdp2.dgsn.fr

# Reference: https://twitter.com/reecdeep/status/1215666445264224256

danielgomesb.mooo.com

# Reference: https://www.virustotal.com/gui/file/d9d6a345875324cbe8612ee7d02e6dd18f3f208d743e6aea40a8a2f3a236f8f5/detection

141.255.150.36:1337
danielgomesb.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a4382bc600bfd846a10029bd8ea0e7e94abcdef9819225dc83d581bf7c69df29/detection

179.180.82.144:1337

# Reference: https://www.virustotal.com/gui/file/0e754a806b2813874c47332e98a8c118bd1e33508b44ff0081ac36a48814d769/detection

109.202.107.15:9040
noregisterdomain.zapto.org

# Reference: https://twitter.com/ScumBots/status/1215804781865963521
# Reference: https://www.virustotal.com/gui/ip-address/78.82.164.58/relations

78.82.164.58:5552
yukselofficial.duckdns.org

# Reference: https://www.virustotal.com/gui/file/2fc5217c461e357cef6f9aa68cb752a6834c01a34c25fc133b5a7aa8a540055d/detection

winuptade.homesecuritypc.com

# Reference: https://www.virustotal.com/gui/file/ae8d20d5b490e43334f8338d3907f02030a2b41332ac23bbce2d450017bc8326/detection

192.253.246.140:8152

# Reference: https://www.virustotal.com/gui/file/c64ee1bb47b78cc210d6d68f18064d87eb9054e559cff85f49390af75cb304de/detection

51.38.76.65:8090

# Reference: https://twitter.com/ScumBots/status/1217722417516285952

159.65.15.187:5552

# Reference: https://app.any.run/tasks/99d7ecd4-f627-4d3b-a308-b0ae8f574ea5/

ytka.duckdns.org
192.169.69.25:5552

# Reference: https://twitter.com/ScumBots/status/1219280325630623749

103.70.6.20:1117

# Reference: https://www.virustotal.com/gui/file/e0287568096f94034a8746adef8f4c08db4ef5f51134f90740b1c72eb1b1eb0b/detection

137.74.152.239:333

# Reference: https://www.virustotal.com/gui/file/42e23b5a0fde78a0677c91043c9484aa6a9942fadf7e535a07104ff0dd501cb4/detection

177.126.146.50:1000

# Reference: https://www.virustotal.com/gui/file/c25a614eaad85114dbace254af9eda4c1d3d1383e3ca995d5e2fa9b6edfe60a5/detection

45.74.1.13:5050

# Reference: https://www.virustotal.com/gui/file/37021f720fe980d4c9c463f7362bdd5d86e217694fcd19c670e7ad90be7a0f40/detection

186.241.81.206:333
karinaregistrodns.ddns.net

# Reference: https://www.virustotal.com/gui/file/46ab018333ef331649a4564d485dc51bb3dd5fd647fb36715b0bf8c3717e78ec/detection

177.208.143.211:333

# Reference: https://www.virustotal.com/gui/file/dc0606ed37f0ca5272bd0227901406be6a0aa7c7269df96ae16f04b28399a935/detection

187.126.242.235:2222

# Reference: https://www.virustotal.com/gui/file/3df641748ce9649ec6625ca56bffdeacc77d0401e56623f9f786714478b6c4cf/detection

187.126.242.235:333

# Reference: https://www.virustotal.com/gui/file/3a52673575352f2e2c92de0f5278a4851b2c41f8a9fa3893d148a8686b5ef5a5/detection

152.246.119.195:6000
152.246.119.195:7000
152.246.121.23:6000
152.246.121.23:7000

# Reference: https://www.virustotal.com/gui/file/e570d0257f4e4ecca00963ffa5037b47a47d7095e583142dffc17c830d6f4404/detection

152.246.242.134:555

# Reference: https://www.virustotal.com/gui/file/a64e59ca45cca1f76dcccd1133b8ed1e7a38bb1ec5b9b0b59c0e29e3fc1abf8f/detection

152.246.159.95:555
152.246.38.158:555
189.201.239.249:555

# Reference: https://www.virustotal.com/gui/file/a69a3f554f10cd4e783d661a64b0602c3a27c4f82dd4a248a3dbd862ab9e4b46/detection

152.246.212.34:333
152.246.38.158:333
189.201.239.249:333

# Reference: https://www.virustotal.com/gui/file/5fc4356a2cb5599ef1438c3a237d952b814561a1f7b461dd7f47aea90c1760b9/detection

152.246.38.158:8080
79.134.225.27:333
79.134.225.27:8080

# Reference: https://www.virustotal.com/gui/file/70425c78192211fa613ff8b5ed3e0526c8c477dd1751e3fd0efcd7a9a8a07ae2/detection

189.201.239.243:8080
168.197.229.79:4000
168.197.229.79:1000

# Reference: https://www.virustotal.com/gui/file/2cdb395ef4181e494a648b1651ba079bbd27a00a31f765adf07b034d47e70890/detection

152.246.133.23:8080

# Reference: https://www.virustotal.com/gui/file/998bae2bbc2d3cd1850fd87567857c577cc1c5ce9faeb73f6112b753d0dce2b7/detection

168.197.229.19:8080
168.197.229.127:8080
168.197.229.127:4000
168.197.229.19:4000
168.197.229.127:7974

# Reference: https://twitter.com/ItsReallyNick/status/1222985472139579392

cugugugu.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8c9a0e53d965e7615cf4dad382238013a262449d8fa65bc14ff424eb8c5e2d7f/detection

23.106.160.1:2299
tugatuga.duckdns.org

# Reference: https://www.virustotal.com/gui/file/72d02ba4cebd3e963eb9db394e1927eab46d671378b8393b7f55b65f34c444f4/detection

128.90.115.245:443
winuptade.zapto.org

# Reference: https://www.virustotal.com/gui/file/16b4664969ce27b9914dc9d41b5baa16a341e00f442527efffd478a73a014fa1/detection

156.205.245.221:5552

# Reference: https://pastebin.com/raw/uGwudw5k
# Reference: https://twitter.com/c3rb3ru5d3d53c/status/1224004241062232066

216.170.126.36:592
webmasterbl.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9fdde98e1adcc204393795d30dd5731bdded681373161c7edd73ab09d6889fb3/detection

141.255.154.80:888

# Reference: https://www.virustotal.com/gui/file/906db2d677b2fb3fd7fd03ace459cad0547bd1a846cbe56e5e028de35b81e22d/detection

141.255.157.220:888

# Reference: https://www.virustotal.com/gui/file/b3c3d47e002f7915c2e055d05c0137a15bb9269240c211beee642530772fdc03/detection

141.255.154.80:888

# Reference: https://twitter.com/ScumBots/status/1226148003871952896

80.181.38.234:2222
95.233.69.34:2222
helpdeskcamfrog.ddns.net

# Reference: https://www.virustotal.com/gui/file/4a14f219ba3aa5ee706fa3f3b40983059568093f2a877c75ef3ebbfdf21fa2f7/detection

79.30.213.227:2222

# Reference: https://www.virustotal.com/gui/file/5c3e5f15b9b8cee942cb36206a2f833bd9984d8a4ca667d8ffcf4dc4b6edef55/detection

45.247.4.138:2222

# Reference: https://www.virustotal.com/gui/file/a17998b84107140124c51e80f092403e7a6fc48a908e1634b2292e07c528bd39/detection

45.247.34.8:2222

# Reference: https://www.virustotal.com/gui/file/01034003a84fd8217b5082c97ae709439a1e3244dbb2d936af0df50d709f535a/detection

45.247.7.250:2222

# Reference: https://www.virustotal.com/gui/file/d5736a8fe118a0896596f9d3b23d26c00d49e3a4d2a0f0c0782d8d92882913fe/detection

45.247.153.34:2222

# Reference: https://www.virustotal.com/gui/file/0cdfd28ede6e7a2ff3c55271b7b32b88f428142aefdd7139b6f6699239dcf88e/detection

45.247.223.85:2222

# Reference: https://www.virustotal.com/gui/file/eeeb2e4f35936641b2f687497a064735436a7b18710455d6afae7faf7a1a7d21/detection

45.245.234.203:2222

# Reference: https://www.virustotal.com/gui/file/e7838ac0484850cb7c44914205e13dfd0c05126b895906a84c3528adb20fb68f/detection

80.181.38.234:1188

# Reference: https://twitter.com/ScumBots/status/1225876212075110400

52.143.135.40:1738

# Reference: https://twitter.com/ScumBots/status/1225796939045838848

89.78.12.203:333

# Reference: https://www.virustotal.com/gui/file/d5f6f85cbfd2c95b1a14d09fcf03447c7416dea7c3414d78122a00bbbcad1f7f/detection

216.137.209.114:1337
pullingaporter.duckdns.org

# Reference: https://www.virustotal.com/gui/file/7f4ab1bc842d8339f0958e573182ef37ac8c2bac621ff5547182a5730260b077/detection

216.137.194.74:333

# Reference: https://www.virustotal.com/gui/file/94d8de73814162e6c93c9cf9bacf34f60438ac2ed50ab534d770325aea2617bc/detection

141.255.150.213:1111
hayas.hopto.org

# Reference: https://www.virustotal.com/gui/file/7b184c5cca228af546bac79830f2a0270e0fa63ebee80af220c1cab99c48522e/detection

141.255.144.206:1111

# Reference: https://www.virustotal.com/gui/file/df4d41880d68d0a9b1131ce010bb76e077cd7605a94bd670e22e1d7c9b47ffad/detection

141.255.152.224:1111

# Reference: https://www.virustotal.com/gui/file/ab6e879d217ec77074d33c5576aed774faf582cfab6dc892ed606c3e1661056c/detection

141.255.144.197:3333
fackyou.myq-see.com

# Reference: https://www.virustotal.com/gui/file/e3edccc1d312c7e843773918b6d3ecabd7462b2e4b17e20c696410d08d69953a/detection

141.255.153.71:333
ffaassl.hopto.org

# Reference: https://www.virustotal.com/gui/file/0f9f2ed3669af8502dfad754d0dc2e7682fe7bc4d0044f7cc3ca61a0e1170d15/detection
# Reference: https://www.virustotal.com/gui/domain/memo445.ddns.net/relations

91.109.188.6:1337
91.109.190.9:1337
memo445.ddns.net

# Reference: https://www.virustotal.com/gui/file/467d5848e6e532453dd0452ceabfe3995a12ec39e9cf1af4e31258dec21fc1f8/detection

45.247.72.194:3030

# Reference: https://www.virustotal.com/gui/file/54c74f8f5a82d5379cddf9f24331bc5d7389c810029be09d402c4954e399024e/detection

45.245.238.238:3030
45.247.126.145:3030
45.247.93.176:3030

# Reference: https://www.virustotal.com/gui/file/45815b72b91e1a1dd3ae9340f543eb5bc8a929df3f55714ab4fd913f07dc23b0/detection

168.235.111.253:8000

# Reference: https://www.virustotal.com/gui/file/8eca996c8223b75142fd73e79374585860b03a4d615bbb58e0999a403e64cd70/detection

168.235.111.253:6942

# Reference: https://twitter.com/ScumBots/status/1233071118145261568
# Reference: https://www.virustotal.com/gui/file/9be010b45a81a22f2d50c1d35f31384152c5b91dd7e3a1fe81b2c4fa95bb468c/detection

82.61.221.212:3000

# Reference: https://twitter.com/ScumBots/status/1236026843083558912
# Reference: https://www.virustotal.com/gui/file/b2144af6922d925a99bdb5e2264b40af2d310c556444fa61ee190ced786ff81b/detection

2.8.241.194:1605
steroidigo.ddns.net

# Reference: https://www.virustotal.com/gui/file/2bb44181c7547a69b7ea6a4d7c13baba0e623dd5049c055ad3902b3e04c68f62/detection

141.255.147.5:1177
brwa0772.ddns.net

# Reference: https://twitter.com/ScumBots/status/1237419849338494977

83.159.223.112:1604

# Reference: https://www.virustotal.com/gui/file/8acbacd3c0cf2aa0918107dfce43d4dbe2071fbad3561ef588654fb2e28b1e6c/detection

196.235.70.83:5005

# Reference: https://www.virustotal.com/gui/file/295a8276e98222a6589e2270d293964b7d49b99c13ab8f4e7a327e63d70652d1/detection

196.229.137.245:5005

# Reference: https://www.virustotal.com/gui/file/877267278069bab60988587079d7d3faa65e8f83b462de70d9ea881f19111634/detection

196.235.23.56:5005

# Reference: https://www.virustotal.com/gui/file/4224aad55ef5bacd7597fd954fb3ddcd1511b8b19295b81ef77bc929e360a9cb/detection

196.234.207.160:5005
196.234.209.127:5005

# Reference: https://www.virustotal.com/gui/file/f1691ed34f4150b8a265480f92047397a7f1ff908f8517c2057aaf66a6b977c4/detection

196.234.180.21:5005
196.234.135.188:5005

# Reference: https://twitter.com/ScumBots/status/1237963358986539009
# Reference: https://www.virustotal.com/gui/file/2ef9129b11a31d94a73eaeea4279ade2e58d84c121d3e97eeeb014093002da61/detection

141.255.156.41:8888
alougt.sytes.net

# Reference: https://twitter.com/ScumBots/status/1239911265922945027

119.59.115.179:5556

# Reference: https://www.virustotal.com/gui/file/1587661de0883e18e7098468fde3a3f8d428ffa05ca2204ef4723661e7ce6c46/detection

178.124.140.145:6522
178.124.140.148:6522

# Reference: https://www.virustotal.com/gui/file/d3c22b07a86e188d39af6cd0003965b6c49cf927d71f00413f369f16dc70ea56/detection

35.247.209.230:1337

# Reference: https://www.virustotal.com/gui/file/dfbe56103ba0f2a6a2c10134d0a7bb480180f4d313f8265ee6ea386f13919a90/detection

35.247.209.230:1818
paulav1.sytes.net

# Reference: https://www.virustotal.com/gui/file/232eb849f8e66aa9bd4347c0c9142f04c0f63b37c7941556925db1ebab4482d6/detection

185.165.153.228:9933

# Reference: https://twitter.com/ScumBots/status/1241609885344829440

101.98.203.110:6969

# Reference: https://www.virustotal.com/gui/file/1d95b2c065e5f5c4dee31cb336035caeb32a1c3dbdf0e4b1e2052fc7288d4c53/detection

193.161.193.99:51061

# Reference: https://twitter.com/ScumBots/status/1242206316694777856

193.161.193.99:8888

# Reference: https://www.virustotal.com/gui/file/e6eda9918b257e317e921d294b903f9488929fe7ef2efc0955bd141d19e15855/detection

imaneblueyesvpn.ddns.net

# Reference: https://www.virustotal.com/gui/file/de35000537e325fd8ed05003a1114b71aa7366f23a6185c9d8133a3793673427/detection

105.103.86.231:2016

# Reference: https://www.virustotal.com/gui/file/de35000537e325fd8ed05003a1114b71aa7366f23a6185c9d8133a3793673427/detection

141.255.152.217:333

# Reference: https://twitter.com/ScumBots/status/1242515854144798721

37.47.205.111:2685
miqas.ddns.net

# Reference: https://www.virustotal.com/gui/file/8ec66f95ee3410aff78263f82b0bc0af8a0ce0db445c9ee5e04e7e14398be5b8/detection

microsofft.sytes.net

# Reference: https://www.virustotal.com/gui/file/22a14015aca71a9ed22019f1777be6b72e85c42139eecb58b3c8c171765ce222/detection

45.161.63.8:333
javaupdate.hopto.org

# Reference: https://www.virustotal.com/gui/file/75ad02e0aea62552d29123e7f1ec9ce43808e15ee6c2143dab458bb25f110e1b/detection

45.161.63.8:1000
3030pp.hopto.org

# Reference: https://www.virustotal.com/gui/file/ecd73a6d010ccea884e92491eb555dd244b9b3f8753febcabcdd40d006618a3b/detection

177.126.146.68:1000

# Reference: https://twitter.com/ScumBots/status/1243608169592619011

192.169.69.25:5540

# Reference: https://www.virustotal.com/gui/file/5fe64553142d63b68617515cb153bc2dd2ed78847c29d1cb6415004db582d2d8/detection

141.255.144.49:333
ie83.ddns.net

# Reference: https://www.virustotal.com/gui/file/f2312c671bcf8024e02434aea312a057d44a4c39b0e4573e4e784a6ed981f888/detection

qwer3341.ddns.net

# Reference: https://www.virustotal.com/gui/file/97b25fb6b6b9c92ec259ff7e1e80c5cebdca22458e244c7185cddc9fc95e4530/detection

patopapao.hopto.org

# Reference: https://www.virustotal.com/gui/file/8ed36ddc1de819756d5bd110a6cc91fd0daba62cc4acefe3e27a427233befebe/detection

41.37.209.69:333

# Reference: https://www.virustotal.com/gui/file/5f9ddee77313e7549302a2bdef5b1fbf410badea33632b1830a694788299a0d6/detection

156.223.142.94:333

# Reference: https://www.virustotal.com/gui/file/5029a46dede9fbfc9725d5cb44d6505aa6fb2545ce852153131a71300a46adc1/detection

156.223.150.197:333

# Reference: https://www.virustotal.com/gui/file/f37dd4cf0e5cf5d5a967aa62c54e84610e93d8bdeae5a1cbfb8892bb000a8ab7/detection

156.223.227.74:333

# Reference: https://www.virustotal.com/gui/file/8d58467162a034fdab25c3d1a5b5ea9e879f6baf973300d248777f7d926c3718/detection

41.43.194.123:333

# Reference: https://www.virustotal.com/gui/file/482c3f44b3bb5e3851cf57526bd771a1d446110c155148f14e6de6b3f324a00e/detection

41.238.252.15:333

# Reference: https://www.virustotal.com/gui/file/cf5ac7af995125673232aa83ebe7834492c0e725299d11877889338f9b2244f5/detection

41.238.255.168:333

# Reference: https://www.virustotal.com/gui/file/0265df0f4f86a432ea3d7016c53ed7746278f50abfc3bfee52b03f965b2d5393/detection

81.61.77.92:8000

# Reference: https://www.virustotal.com/gui/file/70df5841dee4dd63adcd6a2ef47b943577bfcf5e02c8bda887c225846e8320bd/detection

sihost.duckdns.org

# Reference: https://www.virustotal.com/gui/file/25ecfdf7be4b09036ee2bf058ee9667d4f098aab012cca5ae7af6f2690f9dd96/detection

81.61.77.92:1000

# Reference: https://www.virustotal.com/gui/file/c963ed1aed3b00d7d07510746db53bec2cf7581024976607bbaa01e9baced4e7/detection

81.61.77.92:1111

# Reference: https://www.virustotal.com/gui/file/972494fe12432d3c2c5caebd7a206222fa5422543db36b6eafaa469b88bdefcb/detection

appdwindows.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8c8d1561bf8a39d4e141d0af274fa8f98a331cb2bc2b726b8f643e16af82bb34/detection

141.255.159.124:82
41.109.208.25:82

# Reference: https://www.virustotal.com/gui/file/40bcbd7c430a2397d240c6a50f17e0306244ead03f36c7a557281106aeaeed2e/detection

41.109.184.203:82

# Reference: https://www.virustotal.com/gui/file/a7ec340204a447bbd3ae94ccf5924b4dc78c9195f61893ea62d0f3b7421d718d/detection

41.104.122.164:82
41.105.197.112:82
41.105.223.87:82
41.108.195.11:82
41.109.153.187:82
41.109.242.126:82
91.109.178.2:82
91.109.182.10:82
91.109.182.2:82
91.109.190.7:82
91.109.190.9:82

# Reference: https://www.virustotal.com/gui/file/00169bbfd209b3e2f36f39241beffe2ab1cbf3af157e6b0137e1cb7fee2e5e78/detection

141.255.157.195:3333

# Reference: https://www.virustotal.com/gui/file/ee47c9c73df3882da35d5f522a4f69fde300906504d496dcd39090a3118bf96c/detection

141.255.157.116:2222
141.255.157.116:3333
mohsosta1177.ddns.net
mohsosta77.ddns.net

# Reference: https://www.virustotal.com/gui/file/927f9e0a1a56671f8ca37a32a43ef9c16da0304954e06ca4f505fbf5106e7407/detection

141.255.159.137:3333

# Reference: https://www.virustotal.com/gui/file/a1922406f9eec1563fbb3f321c97aa7e2415ec3fe375a8d0ffc883812f56bf8c/detection

141.255.158.111:3333

# Reference: https://www.virustotal.com/gui/file/6c2ffc000f20a2d7e513805d594259549209e51343c3e78883367a82e4b5805d/detection

105.235.130.50:3333
141.255.159.45:3333
141.255.145.71:3333
141.255.146.159:3333

# Reference: https://www.virustotal.com/gui/file/26d10dfc83e3cc5ec9f58752e437388ecdf3bdb2f1ea1c58ab84082b950b38b6/detection

141.255.153.185:3333

# Reference: https://www.virustotal.com/gui/file/5bc1e8adc555d96cfa7c6c3581e5325641afaa9aed69b95674a8cb75ed0e52b4/detection

141.255.154.26:3333
141.255.155.129:3333

# Reference: https://www.virustotal.com/gui/file/01f9af6137da80ad3941c230b19df8ff6b9ebb123e0657007c7b362604382511/detection

105.235.130.14:3333

# Reference: https://www.virustotal.com/gui/file/819ad7f67583b21e9aa25c5a4e3157808d0b5a9805409da9e3ba59f49e8b4614/detection

141.255.158.194:3333

# Reference: https://www.virustotal.com/gui/file/7eaeb3390283985406e6335798db83d27938a29cccf7c2f56e9721383ddfd9e7/detection

105.235.130.43:3333

# Reference: https://www.virustotal.com/gui/file/d4c37fb2f809b31c35715b67edc2495f37e8b81ce2f9bb345493b95daeef4292/detection

129.45.80.100:23639
41.102.139.95:23639
41.103.0.224:23639
41.103.20.174:23639
41.103.24.77:23639
41.103.28.254:23639
41.103.3.81:23639
avastui.duckdns.org
presentationfont.myq-see.com

# Reference: https://www.virustotal.com/gui/file/8f776ef60b6298ca08dbd49d8f82ac5a51bc5c817bd663d6a25404c29730938c/detection

141.255.145.14:4000
h4es.ddns.net

# Reference: https://www.virustotal.com/gui/file/f4ddbfe392971c8144ec0427a491cb22a35afd2062431dc7e7d4b9e2e8080eec/detection

177.126.146.27:1000
3030pp.duckdns.org

# Reference: https://www.virustotal.com/gui/file/66596e33e83df59713d3b6c1641c236c0364198e4087cd56dcdbc9b4ccbca7b7/detection

174.36.228.136:82
31.13.86.8:82
74.86.142.55:82
xbox.servebeer.com

# Reference: https://www.virustotal.com/gui/file/4d31cc07db3d4000d766b8bf0e8723c42e02ff542347dbb7859dc53b8d117232/detection
# Reference: https://www.virustotal.com/gui/file/d08d3373636c1ffb62a34b543897e12e4a53305f1037883d3983a48bf5c1f881/detection

204.95.99.26:82
mohor.no-ip.org

# Reference: https://www.virustotal.com/gui/file/4e816f5b3a474347b656b315ac13095bd85767c4f51948919907d7510e3488be/detection

204.95.99.26:888
abodxo.no-ip.org

# Reference: https://twitter.com/0xCARNAGE/status/1246422142427770881
# Reference: https://app.any.run/tasks/a25d886d-bec7-43d4-9015-302f051844de/

aba23564.ngrok.io

# Reference: https://twitter.com/malwrhunterteam/status/1232669447304949762

1ec6b9e8.ngrok.io
91.193.75.155:8989

# Reference: https://twitter.com/gibbersen/status/1242503044996177922

79.134.225.13:8989

# Reference: https://twitter.com/malwrhunterteam/status/1251147017885106177

4ed6a6b1.ngrok.io
185.140.53.25:8989

# Reference: https://twitter.com/ScumBots/status/1251949263795306498

35.232.32.138:5555

# Reference: https://www.virustotal.com/gui/file/173ea015d6ca3e1555b613ae11740833e98e4be67803aa859fc0d764f84b7879/detection

78.159.131.80:82
chemdog.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/7b30c00b02a8d4156370a62664cf453c498ff3cda76b05279fc2852431df6447/detection

dznapster.no-ip.biz

# Reference: https://twitter.com/ScumBots/status/1257428968543866885

93.22.123.135:7000

# Reference: https://twitter.com/ScumBots/status/1257435643661205510

140.82.39.124:1738

# Reference: https://www.virustotal.com/gui/file/10fba0bc9ee902c4623fa8ecea09cf4ecb6c857a164267ad0208a24722897b4d/detection

41.220.146.159:7000

# Reference: https://www.virustotal.com/gui/file/29235055d6844ecfdf074753cb7d4972f42687a708bb9fa65615548c48eed7b6/detection

185.140.53.245:54567

# Reference: https://twitter.com/ScumBots/status/1258140060593119233

188.27.36.44:1028

# Reference: https://www.virustotal.com/gui/file/6c215da4a31c447e85daf3bf72fb8e9f56cb6580c37c3b4eaa8e155c792ea1a3/detection

105.103.157.3:5
tahoo.publicvm.com

# Reference: https://www.virustotal.com/gui/file/1aff134a5206b83064ae4273f1651dcdd231511404716fd416a91f3bf106a8cc/detection

223.206.151.33:22022

# Reference: https://www.virustotal.com/gui/file/0f0d2051d7ddce881d1f85ec1b5f7d8d251aa60b1df35d154d142604cf803115/detection

223.206.146.15:22022

# Reference: https://www.virustotal.com/gui/domain/mammoth01.ddns.net/relations

103.212.180.234:22022
147.50.241.204:22022
182.232.217.172:22022
182.232.217.182:22022
182.232.217.194:22022
182.232.225.43:22022
182.232.228.46:22022
182.232.46.30:22022
223.205.80.236:22022
223.205.82.15:22022
223.205.82.192:22022
223.205.82.213:22022
223.205.83.13:22022
223.205.86.102:22022
223.205.86.13:22022
223.205.86.146:22022
223.205.87.7:22022
223.206.144.116:22022
223.206.144.152:22022
223.206.144.41:22022
223.206.144.9:22022
223.206.145.243:22022
223.206.145.82:22022
223.206.146.120:22022
223.206.147.149:22022
223.206.148.100:22022
223.206.148.194:22022
223.206.149.109:22022
223.206.151.150:22022
223.206.151.156:22022
223.206.64.227:22022
223.206.65.2:22022
223.206.65.33:22022
223.206.66.199:22022
223.206.67.132:22022
223.206.67.230:22022
223.206.67.245:22022
223.206.68.104:22022
223.206.70.166:22022
223.206.70.198:22022
223.206.71.133:22022
223.206.71.28:22022
43.229.151.248:22022
77.78.103.20:22022
94.229.67.133:22022

# Reference: https://www.virustotal.com/gui/file/14f26dc1b6880ba1868b6417190f26609b3f19026b08f451e5fc96cd57f780bc/detection

185.140.53.74:9888

# Reference: https://twitter.com/ScumBots/status/1262424538291286017

170.78.228.248:4000
seila2332.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d856a87fd6b265d914623a7673978b7c66b48308ae797789a4839fb336707801/detection

141.255.144.172:5562
softmy.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1264002438048210944

217.164.84.62:333
bo6y3.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a23f92d952d1b3b4b2284f8a5c129e91f0e050ec2812f08335767e768b8ac66f/detection

196.74.40.168:333

# Reference: https://www.virustotal.com/gui/file/fd3c28cbfa67042043dbe7b361d7194e7ea00e2cc1ea4a6b06c4d435b4f4daba/detection

160.177.186.186:332
160.177.186.186:333

# Reference: https://www.virustotal.com/gui/file/8d6bfff3b382f329ca2201fb0c9cae12bca699e756d1ceee86f63d7229c63fc8/detection

41.141.2.101:332
41.141.2.101:333

# Reference: https://www.virustotal.com/gui/file/46d816aebc52fe493f87a1ccc0b65aed65de285cecc61322753b11ebbcbd445c/detection

141.255.154.218:333
smsyrian.ddnsking.com

# Reference: https://twitter.com/ScumBots/status/1266486304935743489

91.193.75.22:8888

# Reference: https://www.virustotal.com/gui/file/18bafb888824e81481e02f014065ea56c5d150d23b36b7d73a6f7722a9eb56fe/detection

147.253.34.221:1712
clee.no-ip.ca

# Reference: https://www.virustotal.com/gui/file/b319eab6c7f57842888ed81de438b7cddedefd3e397dec67eddccc9d16ea9aa6/detection

43.229.132.76:2222
mysqli.serveminecraft.net

# Reference: https://twitter.com/ScumBots/status/1267890554874052610

193.42.96.111:3280

# Reference: https://twitter.com/ScumBots/status/1268453010990084098

216.170.126.139:3352

# Reference: https://twitter.com/ScumBots/status/1268875857524928513

50.127.14.70:2041
realgrey.ddns.net

# Reference: https://twitter.com/ScumBots/status/1269124936565690368

216.170.126.139:3352

# Reference: https://twitter.com/ScumBots/status/1269185336598573056

41.239.162.107:1122

# Reference: https://www.virustotal.com/gui/file/63e623ac859c854be9396c32344a11ce7f7d3900fe994bb9ccb7432cd1825c17/detection

31.20.134.61:1604
revengerat17.ddns.net

# Reference: https://twitter.com/ScumBots/status/1270465208646012929

43.229.132.76:556

# Reference: https://www.virustotal.com/gui/file/4c859e1bb13836a02369f85b6782056b37386cf18dcb07147e28958ac7754b7c/detection

154.202.2.151:5556

# Reference: https://twitter.com/ScumBots/status/1271873047310610441

35.208.191.165:8081

# Reference: https://twitter.com/ScumBots/status/1272227885970001920

92.201.46.3:1119

# Reference: https://www.virustotal.com/gui/file/94205e5698a4dfdd3c4ed8a734b8c22fd717a30f760347be37ba3aeed9543afc/detection

0xdll.ddns.net

# Reference: https://www.virustotal.com/gui/file/0a64a9cc08d4d0d1993b4974b2900f1be193d5273a6a2605c2dc69b1fcb31b21/detection

77.191.149.139:2405
78.54.12.182:2405
iamintheghettoratatata.ddns.net
x4e360cb6.dyn.telefonica.de

# Reference: https://www.virustotal.com/gui/file/1f227730e450816300f82d5eb1486f38c71e72c80a4c3c1e20cc080a757cc9fa/detection

77.183.29.33:2405

# Reference: https://www.virustotal.com/gui/file/b0b2d398a1ca4758d1b821a856cbd3a336b3485ca07cbb7b9fa044233b23805e/detection

196.229.155.50:5005

# Reference: https://twitter.com/ScumBots/status/1276208761640751105

173.225.115.249:45600
rocketman2012.zapto.org

# Reference: https://twitter.com/ScumBots/status/1276208191383142403

78.109.234.53:18091

# Reference: https://twitter.com/ScumBots/status/1277093773915406336

193.161.193.99:25510
gamedevv-25510.portmap.host

# Reference: https://twitter.com/ScumBots/status/1277161643886215169
# Reference: https://www.virustotal.com/gui/file/b29e203169faf9bbb8ac122dccef487618fb86626dbb3da73f1eefb68c82ae3a/detection

91.106.40.119:333
karar.zapto.org

# Reference: https://www.virustotal.com/gui/file/132e8d89c7475d9afb2b975444e0a467a2a88146a338ae04e4649b9361d01cd1/detection

78.250.25.4:1604
amazigh.ddns.net
amazigh15-43861.portmap.host

# Reference: https://www.virustotal.com/gui/file/95fe807e54b122984470e7ade0525838f0c7876c54087bb45f872e76d8e327e8/detection

192.169.69.25:1012
grace19.duckdns.org

# Reference: https://twitter.com/pmelson/status/1280338551809478664

supertop.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1282023683989680129

193.61.193.99:42332

# Reference: https://www.virustotal.com/gui/file/9a4fb73fa0a3a1fabf7000ef93a4183bfc7a65ffb72944c717806033c104c9f7/detection

186.19.62.249:5000
rodanet77.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1282688057750298624

197.207.161.54:3334
nono45.ddns.net

# Reference: https://www.virustotal.com/gui/file/5d3728e956fface93b6ff60b328522284cae4b008107d084989159e918721923/detection

193.161.193.99:29366
janwiggins.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5263707db34c553d2bf4bd41285b2690a03ca6239f6311c84e36f1d12ee53f81/detection

72.238.156.142:3333
rathead2.chickenkiller.com

# Reference: https://www.virustotal.com/gui/file/ec4d11825f7d3dc9ae9f301817a090a233e931ebe90edfda8d1e431baa22f656/detection

86.132.9.64:1337
rattedlmao.ddns.net

# Reference: https://www.virustotal.com/gui/file/72a4960d777ee63de951c7ef9534f42f0314ddc8553b24c921a48e8e32520afa/detection

196.65.79.163:7788
bitcoingenerator99.ddns.net

# Reference: https://www.virustotal.com/gui/file/e8fffcc5d7e2e92fe3a7cf9bd5c716db698c82e07e523f194884395382ab5a13/detection

172.94.59.115:8152

# Reference: https://www.virustotal.com/gui/file/26596aa65940ae4a09aa30985360d776cd78088d7762f8e048c47d5a799dc1f4/detection

197.162.66.49:11
updatesystem.ddns.net

# Reference: https://www.virustotal.com/gui/file/0a94c45a1be7286c7dc0b46a55db259854e674f23627a72a7209831941832b2a/detection

79.134.225.90:333
giba1.hopto.org

# Reference: https://www.virustotal.com/gui/file/286e62550f9556e6b34179fa1bbe04e6ec367f3cdf025c2fc8e4db1bafa07ff3/detection
# Reference: https://www.virustotal.com/gui/file/f32f3d32a82f16b2e58e219812b99a5a438f78d5778d5e797df7ad236376cd7f/detection

109.206.13.166:5193
178.33.93.88:5193
xxsaaaw.ddns.net

# Reference: https://www.virustotal.com/gui/file/e84d8c99bed032152396a5ccf4dbcd198e41bf9b45e06901453c7fba4e905d1c/detection

141.255.155.236:444

# Reference: https://www.virustotal.com/gui/file/866ea182db70e3e800b62214c6b6e3552a57f75fb87baa8cc36b841fa427bdd4/detection

187.74.197.111:2000

# Reference: https://www.virustotal.com/gui/file/91f90368b3c01157fdaa37e67f24b9c990b20eaf7074dddf0669acaed1adaa31/detection

201.95.219.81:1414

# Reference: https://www.virustotal.com/gui/file/0c2364d650e3f425173a6810448b3bf290c7293c4e4955d782ee5fcb9c62f0fc/detection

196.229.250.88:5005

# Reference: https://www.virustotal.com/gui/file/ed235a8eb09be0cba55a7568fa71d4991a2f34e0289b137232bce55a050adbab/detection

89.138.202.228:1111

# Reference: https://www.virustotal.com/gui/file/ad39dde56b696a24ae5b8f2f358a3b6e4587609973d52facabc950806e779398/detection

141.255.152.25:1337
wifiprotect.ddns.net

# Reference: https://www.virustotal.com/gui/file/4ded8434cdff1c2c6c9c4d196b33195e394fe017fa51596e6190e8dc6aa0ed7a/detection

197.52.26.149:333
rogueszxcv.hopto.org

# Reference: https://www.virustotal.com/gui/file/a5d817b8eaa9029ff9b2457b590dcde06e1ee7b2f37d265d048cb653703a202f/detection

141.255.154.46:333
romeozone1190.ddns.net

# Reference: https://www.virustotal.com/gui/file/7f135d11f4a2c1ca2bdba1e54b4549cd2f9f2dda8343b6cc6155d9aa23f7a8ba/detection

35.192.202.11:5555

# Reference: https://www.virustotal.com/gui/file/080710fa0471add2fe5674697a86d13a74c4728d723d2192c90e8f66edf2a40b/detection

3.23.201.37:13608

# Reference: https://www.virustotal.com/gui/file/8194b12a5f90ab213ca02009c27c5f57353f9742317f4b1fdf165ee269c18872/detection

156.202.89.109:333

# Reference: https://www.virustotal.com/gui/file/c46fb3476db5f029f6658cebb9a3dffbd9010337222577f64f87d520b7eec1fb/detection

156.223.199.149:333
lapoire3.hopto.org

# Reference: https://www.virustotal.com/gui/file/792f04c5efbcc0fd7f879b6b6ceff52f2bb031027aaec0a7a094e12a530cd4f2/detection

ebugud.chickenkiller.com

# Reference: https://www.virustotal.com/gui/file/f69cbb43f1d8f76925ea1d2eb360213dc4624d184784cf5b33c56dc98fe0051c/detection

193.161.193.99:51963
classten.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f678c756940c4b93b9e7429395b6c2f88d55a68b00948028b51d817524abc94f/detection

193.161.193.99:27055

# Reference: https://www.virustotal.com/gui/file/c7035b4663c2ee4c8e7a935667f8c0d013382cc7d9105bbb12450f653ccae6ec/detection
# Reference: https://www.virustotal.com/gui/file/b34c2a8b8bfa67d82cdf360d66a92c14cb838ab2829ca1c10eeadae831cc5f28/detection
# Reference: https://www.virustotal.com/gui/file/eef7103320e82b9138c68637fcc6fcf9505274216edd83295835bddea4e46aae/detection

178.239.21.104:6661
178.239.21.185:6661
181.215.247.189:6661
197.210.29.85:6661
goodgrace101.chickenkiller.com

# Reference: https://www.virustotal.com/gui/file/9241a46e3179544334e05fcbed0f82be4a0fd3002eb5d83eedb90dad7515186f/detection

178.239.21.185:6069

# Reference: https://www.virustotal.com/gui/file/e008d90e0a64be729b60b382e85b5c2e0416628f197c077a96a669c16e63516b/detection
# Reference: https://www.virustotal.com/gui/file/c65076d6a2ab44240c388c28ee078b20f20c40c1fb9a94836e83c582a8feb35a/detection

141.255.153.37:51253
141.255.159.12:51253
jokee3.ddns.net

# Reference: https://www.virustotal.com/gui/file/ed187d921fa6c09920450e83cd7afe843e153dc99a78cd4bafa3b16d9d79cb11/detection

77.81.104.169:8431
sly4.ddns.net

# Reference: https://www.virustotal.com/gui/file/2c3e2bd779d5228ecf2eea93f23f4bc9b7ff07257c6334bcdeff615bad443e59/detection

193.161.193.99:26439
rosicam-26439.portmap.io

# Reference: https://www.virustotal.com/gui/file/72c759403470c28383f8d2d5c4d0ed049c0e91cb10412b620a6b1e6685299490/detection

197.47.61.149:333

# Reference: https://www.virustotal.com/gui/file/88b2021db1adbef7ae55769f541f8d9b9076458178db58077e9af87b86e424e3/detection

193.161.193.99:47113
adorabledeath-47113.portmap.io

# Reference: https://www.virustotal.com/gui/file/19f364a20591872ecb060f6cd4fbcb3af8de08d7c816947767a0349c3aaad3bc/detection

197.35.13.1:1177
dr-mesho.ddns.net

# Reference: https://www.virustotal.com/gui/file/0b2dd65c0d4b521b4e03c0a1c4c0a30fb5cb2229242755bd485d2c7b13323ffd/detection
# Reference: https://www.virustotal.com/gui/file/5b7d22ba94d36c48d92a5770b3e97312decff2d7d4587832810394e9576485c3/detection
# Reference: https://www.virustotal.com/gui/file/dc56c3761411f05c599c659924d452cbc084e2c087da130c9769b5a72fe1fa02/detection
# Reference: https://www.virustotal.com/gui/file/c7b35e3aa3e93292635125c169ff79771ae67e323dd739a4d869efd0cf501541/detection
# Reference: https://www.virustotal.com/gui/file/cd72bf685e489f20f828c22852203abfc30e2f1ba2b532c686a8f5fb87f4e103/detection
# Reference: https://www.virustotal.com/gui/file/23ef8f738fdb02826af1d63318cb7047c9c51c8bdd9ad3ed6c171f75429366e1/detection
# Reference: https://www.virustotal.com/gui/file/bff74869fad788979676812dd156850dec9b796d39571343e57f135d669d1cb5/detection
# Reference: https://www.virustotal.com/gui/file/a605ea821a49c71bcad442ccdda36a851b554cc370622322f545a995f2d608f2/detection
# Reference: https://www.virustotal.com/gui/file/91195d77ee232855f934e2e1a572c863f3b158fccc37aaa6634b9f09535e2745/detection

130.193.200.4:333
130.193.201.165:333
130.193.201.215:333
130.193.206.145:333
130.193.222.85:333
130.193.234.28:333
130.193.253.192:333
151.236.170.165:333
151.236.170.205:333
151.236.171.235:333
194.35.114.198:333
31.25.141.148:333

# Reference: https://www.virustotal.com/gui/file/5e201e94dcb39a47c9b31def7e1a2552e040710fc9156fe82ae5d96e2bfcea4f/detection

ali74864.ddns.net
ali7777.myftp.biz

# Reference: https://www.virustotal.com/gui/file/790a2ee0a0b2746d218775cb55d766c2ef1639cfb5bec36a372e662d8e622015/detection

193.161.193.99:55163
alportoino-55163.portmap.host

# Reference: https://www.virustotal.com/gui/file/1b3198a19da239092be1d004099e668a64700f4737ee14a665363221b85c2127/detection

193.161.193.99:61015
tarem73995-61015.portmap.host

# Reference: https://www.virustotal.com/gui/file/6c588ed6a498cfa7daed22dcee40c69832ad45265ab811ecc7308698d9b70115/detection

156.202.149.108:333

# Reference: https://www.virustotal.com/gui/file/851b940cacd9ac0c8562d7503c2c7a2f259781afc561c3acfdc711439eadb42c/detection

156.223.131.183:333

# Reference: https://www.virustotal.com/gui/file/4d799b595a3f1dd0917d62e43055e59c1b034a8cecf1e4b7bcda262af2423197/detection

193.168.1.3:333

# Reference: https://www.virustotal.com/gui/file/07a0cff4b334fcb9edca29d713dbe157c87dca0ae85fe6b86ebdd52a4b442be5/detection

193.161.193.99:54191

# Reference: https://www.virustotal.com/gui/file/87a61a8109fe8b65433905715e0923b82f081dafdbcc214412a5649985839df8/detection

132.154.121.174:1604

# Reference: https://www.virustotal.com/gui/file/724e6f9d8100c6e364fef74d9aa1c2fd32fcba67ae67334c0d2f10a7d9569214/detection

132.154.124.117:1604

# Reference: https://www.virustotal.com/gui/file/7b9041ed0b745a0c1425a1721aaef87379b45a86248488c9af49fdb393a0276d/detection

223.206.150.68:333
223.206.150.68:5500
apostrophy.ddns.net
apostrophy.sytes.net
rocketman.gotdns.ch

# Reference: https://www.virustotal.com/gui/file/735c4dfc9d21c0c0140b6516821d27865e36d35b374fdcbbbdfb926a136e7ea1/detection

102.187.25.50:4044

# Reference: https://www.virustotal.com/gui/file/e0bbc8e91776ce325719f0acd97494ad6fb152c644689d24ab548b00a9278642/detection

193.161.193.99:57918
dadofdevil20-57918.portmap.host

# Reference: https://www.virustotal.com/gui/file/54491648377505e443028d561b86689b71e6f55101c2e2b63aaed0e17d0e6239/detection

61.110.138.194:5050

# Reference: https://www.virustotal.com/gui/file/92fa59c1aeea84253e9d92b820b086ee8a808c7a296ff80b467fc8b1cf5efd11/detection

34.199.8.144:333
mshar1.ddns.net

# Reference: https://www.virustotal.com/gui/file/ea8aee32d949d237396486f86ea97d11e069252ae435d20bcec0fc7b9f7cb143/detection

193.161.193.99:60011
dk0004-60011.portmap.io

# Reference: https://www.virustotal.com/gui/file/a62eac7125d6a8e953325e4408f6f6ab187c808f9bfc0334e4d8723fae97c021/detection

102.47.208.67:1177
hotkey.ddns.net

# Reference: https://www.virustotal.com/gui/file/ced602ff9094977c33eabbd11a6dcc66656671d5f47596774ecc4792330d2d6a/detection

193.161.193.99:40024

# Reference: https://www.virustotal.com/gui/file/96337453f859782a8193073c8d903ccbe44fc23e86af0e1c08e53cc91aafc44a/detection

149.90.82.67:4040
coelhinhohacker.ddns.net

# Reference: https://www.virustotal.com/gui/file/b620d76117123aa2d044495ee0c0d85b5c1ba0985cb53cb149a350da07ea003c/detection

193.161.193.99:47804
pmoses13-47804.portmap.io

# Reference: https://www.virustotal.com/gui/file/2dd6421f948f25090a18784cab9348d5f5ab04b5b84a386f4ef7a70b19c61236/detection

69.87.219.76:4040

# Reference: https://www.virustotal.com/gui/file/c6204984759803b0498b654dc19e74e5d8791f398d98e3db290da1c89c832004/detection

193.161.193.99:44144
0077.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b3938c08c3bda7ccc7c6f6b412b6fa1171a42708150c2608f0651d00cbad9e53/detection

193.161.193.99:32316
faisaldamazy-32316.portmap.io

# Reference: https://twitter.com/JAMESWT_MHT/status/1311892131372466176
# Reference: https://www.virustotal.com/gui/file/16b4664969ce27b9914dc9d41b5baa16a341e00f442527efffd478a73a014fa1/detection

ytka.duckdns.org

# Reference: https://www.virustotal.com/gui/file/708254cdf41cc083d542ecadbaddde76946d682fcb9feda7d36bcdde81798258/detection

193.161.193.99:31392
amazonsupport789-31392.portmap.host

# Reference: https://www.virustotal.com/gui/file/58b1cda0eed6c9fd00225e9928aa2e2c98d3fb6c78d2bc732507bdc080c6b47f/detection

141.255.156.147:1290
warzibaran.duckdns.org

# Reference: https://www.virustotal.com/gui/file/4c09941ea97cf7234c04823c8fe5e7214326f78019c418f5fad6a54032808523/detection

94.132.5.208:4040
coelhinhohacker2.ddns.net

# Reference: https://www.virustotal.com/gui/file/2f92f46b3b9faf5f6e3c841235dbb588332b8dbc0d231159da50ac5081757585/detection

7777777772.no-ip.org

# Reference: https://twitter.com/JAMESWT_MHT/status/1314832950631043073
# Reference: https://bazaar.abuse.ch/sample/e43d5b8055e41516a21cf4794bafe98c62532207340d65f113a2db6937e1c067/
# Reference: https://www.virustotal.com/gui/file/e43d5b8055e41516a21cf4794bafe98c62532207340d65f113a2db6937e1c067/detection
# Reference: https://www.virustotal.com/gui/file/b184f5d15c4e01f114cf8a437fc2587fcc0277e282fa5adea915c50b5cbcf1a2/detection
# Reference: https://www.virustotal.com/gui/file/fd64a8ed9e9d290e12ea2edce6f6c6bccacfbffa7415216c953d33d7754f2bca/detection

193.56.28.101:7788
91.193.75.158:7788

# Reference: https://www.virustotal.com/gui/file/5d2c8b9c7799adc6d29bffc6b239e5bdccec1e8881b80b4ce04b06a749ed790c/detection
# Reference: https://www.virustotal.com/gui/file/850ffbc398bb2273d01d386e82a70a93df884adcfca8885e4a13a1125f74ed05/detection

185.165.153.250:5478
193.56.28.101:5478
193.56.28.134:5478

# Reference: https://www.virustotal.com/gui/file/5877724afe41bb6092c7644c8dc4c77d6ba0c51b1bcaf2986488067fc8478ebe/detection

3.22.53.161:24154

# Reference: https://www.virustotal.com/gui/file/bfcce43eb7426fa98d6b01b47307db290713a919d7894d6e79cd6bd716832258/detection

1248.myq-see.com

# Reference: https://www.virustotal.com/gui/domain/drang.zapto.org/relations
# Reference: https://www.virustotal.com/gui/file/038b509a42f03359055419095e7d0a9892ea46df3c73e0cb8387aed08f938e5b/detection
# Reference: https://www.virustotal.com/gui/file/c20a425e9607f51e37062134e39b2b20192ee57420adea1b0107f0ba26bb29d9/detection

188.49.171.246:555
27.94.46.241:555
drang.zapto.org
micro-system.sytes.net

# Reference: https://www.virustotal.com/gui/file/aae90b9f17bf8975edbec31f579b2f83537da071c7cd99b42a9b0ca6f6224ae4/detection

185.165.153.140:2405

# Reference: https://www.virustotal.com/gui/file/fbf53aa78f038d417505fcc84a49ec7c60c228ef71bfb6120e3805264db7d9c8/detection

94.190.104.90:1604
17082020host.ddns.net

# Reference: https://www.virustotal.com/gui/file/2f25ac3c8183032ad56a84cd8786aa8a39612e504aa5abbdf06c5e1bd3c79999/detection

333666999.ddns.net

# Reference: https://www.virustotal.com/gui/file/4001307eaae6213053a99684289530a6d0fe91489de3c913964d3d76a2f509d5/detection

141.101.145.214:6162
ravedave.ddns.net

# Reference: https://www.virustotal.com/gui/file/eb3219712305367031f4247dceac012df8a3185185a599f43f58d962fec2a1be/detection

3.22.30.40:12143

# Reference: https://www.virustotal.com/gui/file/0991d25c00e1c20508d2dffa87c5a2d572453756dece220dd3e83db347b4f636/detection

175.143.25.153:4444
mysqlserver.viewdns.net

# Reference: https://www.virustotal.com/gui/file/df94bb47792b33ee6ed059863be6e54764af7e128f944b677dcdac07518c3c09/detection

193.161.193.99:24690
servserver1-24690.portmap.io

# Reference: https://www.virustotal.com/gui/file/885181d22def16a1db84e7e3148fd2d767e41b518dba94aa1fc63d394ca0b21b/detection

182.231.239.47:5050
phr.kro.kr

# Reference: https://www.virustotal.com/gui/file/bc390019213bd6d51e1966bdef6e5b6168f121eb840e6f09eadfea7b01d1c51a/detection

193.161.193.99:55405
newspynote6-55405.portmap.io

# Reference: https://www.virustotal.com/gui/file/070439ab8730f575894667f729b149c4e93d0c2cc8a39383c4f72cf11bbf78a8/detection

93.182.174.36:88

# Reference: https://www.virustotal.com/gui/file/eb2c51d9b2d9e27bcf29aaa784a4738befab6134d18bfea0fa574bba52646b3f/detection

52.172.142.36:333

# Reference: https://www.virustotal.com/gui/file/c9fdfc80a452df13292b647a9b9ea6362420261fdd0839039b207ec8c3d6c807/detection

103.82.249.79:5556

# Reference: https://www.virustotal.com/gui/file/a3933aa9648e59e45b51efdc1b646577b1ea9ca2bf2c0bfab51b9ba7cab362cb/detection

193.161.193.99:49257

# Reference: https://www.virustotal.com/gui/file/6928b86b2c384a0b7220a497229c005e4d2ec6bf085e4bbff804ff0778193013/detection

147.78.221.21:804
hutte.duckdns.org

# Reference: https://www.virustotal.com/gui/file/122e07e643bf9f2a56689faf96ea1c89337b48eb64f8d2ad10afd13e456e8a64/detection
# Reference: https://www.virustotal.com/gui/file/1691cf98473b3ae712d618fd4d4eb151eaf824df6f7c01f3a9ff0ff231d9bac1/detection

revenge01-34775.portmap.host

# Reference: https://www.virustotal.com/gui/file/febdef9974bf664409076ee9ac44df9160df5b01ddde04dc9218ad731ca7486e/detection

112.185.249.185:1111
myclient.kro.kr

# Reference: https://www.virustotal.com/gui/file/2ebc9f7227f6bba53fd445a09361e3ed6a359a6f6a5b6af7b8cedff967abf423/detection

91.109.176.8:333
discord.linkpc.net

# Reference: https://www.virustotal.com/gui/file/f64a444e9610d54dd7250532d19176619979701372723c00e828f8a4f9dc878f/detection

193.161.193.99:47787
shnf-47787.portmap.io

# Reference: https://www.virustotal.com/gui/file/db107694378358951d9f9c5b4bfe99761ef778f63531a10ee2fd4607e79d0c5e/detection

173.234.155.108:5555

# Reference: https://www.virustotal.com/gui/file/ac610045393947ca964d28f15807b623953c07614539b724af3aad7902c53833/detection

193.161.193.99:57334
xzim-57334.portmap.io

# Reference: https://www.virustotal.com/gui/file/fb7d52bfdf184bb47501b1b33ab849c317527c6cee28753c6e8ddee22f599fce/detection

193.161.193.99:20774
xzim1-20774.portmap.io

# Reference: https://www.virustotal.com/gui/file/5d578e29bd558a62cc529693d983dc48265fb3d287be5565c84b5d9268fce83e/detection

starxwor.mypsx.net

# Reference: https://app.any.run/tasks/db517e3b-ecad-41d8-b892-eaceb086a5e1/

38.141.46.20:1111

# Reference: https://twitter.com/jstrosch/status/1333935819380416512
# Reference: https://tria.ge/201202-ph1weyeel2

80.82.68.21:3333

# Reference: https://www.virustotal.com/gui/file/ae53e7a0d59686d3684ed1e14bfee649f53a5fd369090d916a81f74091368b65/detection

3.129.187.220:13284
3.136.65.236:13284

# Reference: https://www.virustotal.com/gui/file/07feae557eab579c338f332acf848b97b0d2a6084f60f10ff7f3ed3fe893a2a6/detection

46.1.172.41:1604
marcosa.duckdns.org

# Reference: https://www.virustotal.com/gui/file/6395eb71979cddf0164b52758b2aa07813a723492108ae349ac9af4983dc0ae5/detection

burdun113.dynu.net
burdun114.dynu.net
karmina112.sytes.net
anunankis1.duckdns.org
anunankis2.duckdns.org

# Reference: https://www.virustotal.com/gui/file/99b79b63630150ba46a9da0abbf186ce92677921cfb953ac8820f14235d7718e/detection

78.138.99.214:333
vps.dgsn.fr

# Reference: https://www.virustotal.com/gui/file/058811b367fc5f4bf1226d365db77b22d09c9325cbdd482ca6ecf60df781c683/detection

78.161.10.108:1604

# Reference: https://www.virustotal.com/gui/file/d55e337427661c52f506073a5d280cd1a25b4489566f06cef9e5dd4bd592c037/detection

88.224.226.50:1604

# Reference: https://www.virustotal.com/gui/file/91bbc93a9644d680bf063f63b3f8e5d442f5d1719c88ba91a81428d7c7091e06/detection

15.228.7.247:5552
ifood.ddns.com.br

# Reference: https://www.virustotal.com/gui/file/db5eb754fff22b0478702d838e7b0e4d7285e8859a4bcf6fe1288ca83ff16a8b/detection

193.161.193.99:37154
rigisterio-37154.portmap.host

# Reference: https://www.virustotal.com/gui/file/fb2f8e8647060c64bd4710d21511c25ba8065797672341649d674dc92e6ed6d3/detection

13.59.15.185:12510

# Reference: https://www.virustotal.com/gui/file/ad4937df3fbf1b24ab75bf35343d6f51e103fb763789d3209e8d05dbe615f67a/detection

193.161.193.99:55169
tchelero-55169.portmap.host

# Reference: https://www.virustotal.com/gui/file/159d1d55c63884c22856ae5b2f6ded5027a9e800d87ef5b87306466906900545/detection

154.202.3.84:4040

# Reference: https://www.virustotal.com/gui/file/ce33e156cf93f70c1e265b51a623a040c42d54c90af89d701c55c4ecdb33e203/detection

185.204.1.236:3312

# Reference: https://app.any.run/tasks/bc4488e0-709f-4f91-91fd-184fd6cfc1bb/

81.215.50.139:4543
keitada43300.duckdns.org

# Reference: https://www.virustotal.com/gui/file/dfda2a6482436d52c205dc4f8e33b9d8789204c967ac948f654ee04928639638/detection

193.161.193.99:57846
hacker64033.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5b1188fbf58e75f2e0af47046ec4bb6d1f8c09a7b9108447c0ed4ce38eea4ff0/detection

41.40.49.136:1551
pepsi.linkpc.net

# Reference: https://www.virustotal.com/gui/file/d257b07f95da8321d50b3fa98234d9ba162f1a7524aeff9778073cd3566c49ba/detection

141.255.151.231:213

# Reference: https://app.any.run/tasks/662bbf01-5e49-4bf7-8839-90d45811693f/

3.128.107.74:14232

# Reference: https://www.virustotal.com/gui/file/2c613f75ba9283d367f61cabf180dcfddb1d54b6b8626e43c6315addf4d6a352/detection

abode1991.system-ns.net

# Reference: https://www.virustotal.com/gui/file/8fabb2c8e3e98469f68db63dae7ef15e96de68f483e8b90c3e7d92a904d98c7a/detection

unknow.system-ns.net

# Reference: https://www.virustotal.com/gui/file/775329406a05ce9243387539908500496cf4496b0a1876701d1f21933cb4b820/detection

random124.ddns.net

# Reference: https://www.virustotal.com/gui/file/042607e0283afa2cf18a230797371467b383422fee72f73d0770ffd64d0f7120/detection

191.101.158.161:20001
dapaka.ddns.net
darpeasypeasy.ddns.net

# Reference: https://www.virustotal.com/gui/file/e1af69a283c6ffc2e0a90cf28c7818878a9a6fd7b70355cc4b33d5c70c674974/detection

191.101.158.161:92
ipv4.servehttp.com

# Reference: https://www.virustotal.com/gui/file/17db65fd5d98fa004c703b6d711e621220f16ff5e890181a22b1bce811be4199/detection

79.182.130.50:1604
myjizzle.ddns.net

# Reference: https://www.virustotal.com/gui/file/6ca651f50dfcc15287b4d1868c96e7c655fc795088909626ec8f6476e6009f92/detection

105.104.196.221:6000
mrx01.myftp.biz

# Reference: https://www.virustotal.com/gui/file/f5a77b987a5c890f8dd70d6ce474bc8c4c9a9dcbd5501b884ddeec5fd90b6592/detection

lgana.ddns.net

# Reference: https://www.virustotal.com/gui/file/ad7d50e284a351d0327e0259aec2ce70bfde82f41118b086f9122071d856d0da/detection

91.109.188.4:333
jelox2121.ddns.net

# Reference: https://www.virustotal.com/gui/file/866baa4b7b0e95625389f442464b6ce0334787ababf2ced7c127b183d8e58544/detection

91.109.178.4:333
wehoul.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c2c4308af7fb0ac9bb7d94c66f6a870baa41c48517eff3d2759645109b02b736/detection

91.109.188.4:5544
hinecro.ddns.net

# Reference: https://www.virustotal.com/gui/file/5fdd47b65e05e12fad7e125298b69de8f9ce9e9a463ac4058b9301dbbc901e85/detection
# Reference: https://www.virustotal.com/gui/file/a12ba2d2a98de7373a8e0de7dd4c47731f188f2d86f7220cc68506b1be7d48c9/detection
# Reference: https://www.virustotal.com/gui/file/0df3cae597d5fbd6df95ea3633479946aa3f10e1c2ef11b90741521dce7cffd6/detection
# Reference: https://www.virustotal.com/gui/file/21e2be195124cf01dfc037ff9a970c6c9e412712196b9e25356c472b5f6203d0/detection

82.199.217.72:1723
91.109.178.2:1723
91.109.186.4:1723
91.109.188.4:1723
soso1.ddns.net

# Reference: https://www.virustotal.com/gui/file/e690ebd15d4863f61573d84ab54b20c1c9c16b363fcfe869a0e109d6cb96b976/detection

109.200.24.62:9984

# Reference: https://www.virustotal.com/gui/file/0160b1a52866d4bb87c6a59fca64e5013c38f89519cb2210ff1f212ef3093a30/detection

185.202.175.170:4477
185.215.151.28:4477
genasispony.hopto.org

# Reference: https://www.virustotal.com/gui/file/941f299cbefbb55912f48b949f2b649bd513780e77ffcf2af468cd804761ceef/detection

194.37.97.135:1188

# Reference: https://www.virustotal.com/gui/file/9ef97e6b9c9f1d54a37be91f4810372c8e1a8ecf21a14e09a5c46a4086820ddc/detection

105.103.138.224:288
kakutahoo.publicvm.com

# Reference: https://www.virustotal.com/gui/file/26fa8bce40741f50edb32b89b472f609efb23ec82c4731e32b2b0194eb2ea57f/detection

35.242.223.68:1962
microsoftdefender.16-b.it

# Reference: https://www.virustotal.com/gui/file/ff8cfc2e738d8fa2f79a1fd87bd8aeb807c788209cbf1ba16433e40562e5a1ac/detection

sameazz.myftp.biz
samesame.myftp.biz

# Reference: https://www.virustotal.com/gui/file/582e1a20371352d634d9a2788d9bfef3d425a585839357b8f4d3d386af12b343/detection
# Reference: https://otx.alienvault.com/pulse/6095a079f4e70329ebb1ac31

bodmas01.zapto.org
builtx.ddns.net
housecommand.duckdns.org
kingslanddomain.ddns.net

# Reference: https://www.virustotal.com/gui/file/3378488a2930d73c433e9bbedbeb9065753dd5e236552aa80dd553a7e73ce693/detection

185.231.113.190:5205
n0ahark2021.ddns.net

# Reference: https://www.virustotal.com/gui/file/630c99cf60e173d6852f5eeff09afe483a71f3c013df71856c09dc580ca88a72/detection

zampoot.myq-see.com

# Reference: https://www.virustotal.com/gui/file/87763562ada4b29e2442c0647e87f9e08f9247973601ba1975706135ef1a9033/detection

156.220.199.118:333
fofa.myq-see.com

# Reference: https://www.virustotal.com/gui/file/5ca1b574ebbd2a58d7413884bf3f26fd72f14bf9c892c83a64d48b7bcec832e2/detection

156.198.242.172:1337
7751.myq-see.com

# Reference: https://www.virustotal.com/gui/file/67e975b8e8879c7e1c0d3008ae2d3206d076e6205db046251c01798d743e254c/detection

134.122.66.170:44852
able-fruit.auto.playit.gg

# Reference: https://www.virustotal.com/gui/file/d4780b514b0556beedba92bcdcc4434c6afcddf48a282323d1adb03a919a41a3/detection

188.116.40.120:3131
193.242.166.48:3131
195.123.220.225:3131
195.123.221.123:3131
37.1.208.100:3131
37.1.218.71:3131
5.187.75.205:3131
nbycm3siji1za.hopto.org

# Reference: https://www.virustotal.com/gui/file/a8b12d8c9b157105d4fff973368fc6e916739ca23aa520548e4fd5955780bf52/detection

116.105.172.123:2501
dylans.ddnsking.com

# Reference: https://www.virustotal.com/gui/file/ba67ed1fa92d3505d477c4e3b70630f10e3199f5483f0ba65a6b23d7905ea470/detection

microsoftserver.servehttp.com

# Reference: https://www.virustotal.com/gui/file/e872d5f3c06be5e001402ad22ceba5a1ea0f71a64dde1010e37892ce316ed149/detection

45.77.226.209:5478
newmember.phatbois.biz
newmember.underpants.online

# Reference: https://www.virustotal.com/gui/file/4482712ba1fd6cdac31e0e9e7d91ba60e38744c176748ab34487ae98a01124c9/detection

79.134.225.109:4770
bright1.awsmppl.com
brightgee.phatbois.biz

# Reference: https://www.virustotal.com/gui/file/9a9c142b9b0002e796c518450aa3c6d86e4da2e1c17fc31a35a8d373df53fe5d/detection
# Reference: https://www.virustotal.com/gui/file/a8750e6a2aca92685d5ea0f30c1913969cc5c5e6d67d2f256e2cf4aee01b82b0/detection

79.134.225.109:9102
79.134.225.109:9303
epiclauncher.duckdns.org

# Reference: https://www.virustotal.com/gui/file/51669459623e47625c0f670db93fb32aaf857fdaec4b4c2627946ef53052186a/detection

77.31.216.59:81
hgavshgavs323s.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/70af852bcbe987aa1d0409b94f2ae1942f053927c11939a658f5fa0007302b86/behavior/C2AE

test111111111111111111-56914.portmap.io

# Reference: https://www.virustotal.com/gui/file/1f2ceca277b002fa595c4a8ac3aa102d0bf2319ec053808e4248112ae31ba1fa/behavior/C2AE

test111111111111111111-37063.portmap.io

# Reference: https://www.virustotal.com/gui/file/e9730417313573a2d67a2f66eb38f1c1eda9b9453b3c0d0cda45d6a4fdde2b83/behavior/C2AE

maymanah.sytes.net

# Reference: https://www.virustotal.com/gui/file/557f1a411c61039b33a8fea771525f43d83bf28ba3f8b106437641cc86594aed/behavior/C2AE

42.114.139.6:6722
nhockgame1230.zapto.org

# Reference: https://www.virustotal.com/gui/file/51b0a34561c1c48321a41381f6be53ef672ce307bfccc3d84ad4acd09b2b4dd3/behavior/C2AE

141.255.147.75:1177
svhostservices.duckdns.org

# Reference: https://www.virustotal.com/gui/file/2cfc68ad22c8a16e19e12f96d3f692a51e2403485a92985b71f8b767bddbb164/behavior/C2AE

spicy-scissors.auto.playit.gg

# Reference: https://www.virustotal.com/gui/file/59baa08c0f774429b35b1047f77b40d2c5e51e9070ebcdfe911bb6f50d20cbaa/behavior/VirusTotal%20Jujubox

top55.hopto.org

# Reference: https://www.virustotal.com/gui/file/5acd7bcbbe39146fdf6ecda464874d8feeb61a33bb7e212aee684668e89396d9/behavior/C2AE

141.255.147.156:333
windows42.ddns.net

# Reference: https://www.virustotal.com/gui/file/8d200fefe0c4ba06346bde386a6f64bcd6287a85590b4579b5c728286bcbc0f1/behavior/C2AE

105.157.253.84:4444
dr6one.myddns.me

# Reference: https://twitter.com/ScumBots/status/1450891004492619792
# Reference: https://www.virustotal.com/gui/file/0cddde30f0a937fd6bf4c41c57567af8de7d841687b9c5c176eda09f57662c71/detection

microsoft.ntdll.top

# Reference: https://www.virustotal.com/gui/file/31bcd06d051b137229c7d07c45cef835910786119004f8bd6d4b664d7676e556/detection

102.187.91.101:4044

# Reference: https://www.virustotal.com/gui/file/a73ff2284343edddc478219ef7fc11a791141a8ea5352d62a75795acb25cbaa7/detection

102.187.97.191:1001
domainwin.servegame.com

# Reference: https://www.virustotal.com/gui/file/d5b93aee8565a0a02131c65d47136587383d9ef8aec312e836a2065c652300bc/detection

41.68.63.215:1001

# Reference: https://www.virustotal.com/gui/file/ea73d0b8af7bb25e53a21a311485d1b5bfde62cd35af2e306c1fcb888f1b8674/detection

156.206.163.181:1001

# Reference: https://www.virustotal.com/gui/file/2daa964c0abf845eab8f17c35ccb6118a46549f6c5c4775663376ae4fa6b9858/detection

41.68.34.146:1001
41.68.40.36:1001

# Reference: https://www.virustotal.com/gui/file/d02d746e991b46ecd5b1c2a08a73a346d7bb7185bb03a6a753870e8aa97bd444/behavior/C2AE

31.134.133.122:1604
day2281.ddns.net

# Reference: https://www.virustotal.com/gui/file/fb64b8eb463e19a29c87118a1c21d356b7ead183850d664775e5d40c7630a610/behavior/C2AE

141.255.145.81:5005
systemmicrosoft.linkpc.net

# Reference: https://www.virustotal.com/gui/file/f18c79ef483f199ec4c4f147a83602451a8ffc869fe60feeee3205f22bdab1a1/behavior/C2AE

196.217.94.182:7788
binarybot.ddns.net

# Reference: https://www.virustotal.com/gui/file/0d5f11f5ce085550f119e348cf807a3c735b6dee214f4381c56f759fc0c7da18/behavior/C2AE

5.157.51.66:8080
sssskh.ddns.net

# Reference: https://www.virustotal.com/gui/file/5bc9dc25c03aefe61cf67fa0264355aef182a1c7fe2171d32c90278706e0e5c1/behavior/C2AE

46.246.6.68:1177
atnmr.ddns.net

# Reference: https://www.virustotal.com/gui/file/e9d726746ccccb05f3cebbe220c3a066fa3465bd4d2972b5b75790316721237f/behavior/C2AE

91.109.176.7:333
71daking.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5d0c3905accca4e627937ac1a5f3f4cbf0e91f4a9354b01b1995002a98ac3b74/behavior/C2AE

41.105.189.91:5553
webtool.publicvm.com

# Reference: https://www.virustotal.com/gui/file/8b4efc0b7c8347d9712e3771bb9b9fb660096f119d89830d8bb500371bc164a0/behavior/C2AE

121.181.81.71:333
5sung.ddns.net

# Reference: https://www.virustotal.com/gui/file/4747e0265376000322e394ef8a5a75da716caeab7758e9d3c95389d2038fa4b7/detection

91.109.190.3:8989
absolutezero.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ecb2f22dd4f4483fa65d4daf576ebcd25a074314e0eed1a792f5d3f388e62e5d/detection

kisohul.duckdns.org

# Reference: https://www.virustotal.com/gui/file/31a4b4651e9c8353cc1e3868909c83b528e1f706f59cff0576ce29c861e1346c

blackgod.sytes.net

# Reference: https://www.virustotal.com/gui/file/f72e4be1648a630a8661d6d5d5f59e3e9f06e751c593c99c19dd3bfaf94d17e5/detection
# Reference: https://www.virustotal.com/gui/file/50d9948bbc446c1ad57ef8e57d4c496f256b88907952e2f09b6dccccba150b26/detection

37.26.45.229:59010
37.26.46.204:58000
ss0048331.camdvr.org

# Reference: https://www.virustotal.com/gui/file/34e3d9377c7ce0e4c8e8d14f5acfa2c40a46eab6efab9339f6ab8eac72ac88c0/detection

37.228.134.84:22202
frankware.ddns.net

# Reference: https://www.virustotal.com/gui/file/c5ca1b00642afb87e197ef2b1a0457a0fcc932d259f7a93eca6e71e3d80220d2/detection

216.250.97.121:4242

# Reference: https://www.virustotal.com/gui/file/a0c5d89d2c3979070eba4a04ae4015b30081c593203b8306b9faf87635b99e5a/detection

alilole.no-ip.biz
aliomar113.no-ip.biz
aliosabaa.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/50f1de8971b6f1f473a87fc8d605aa8d83fc4dfde9540847b456ce961b39b82c/detection

194.5.98.176:24469
asheesh.ddns.net

# Reference: https://www.virustotal.com/gui/file/71210ea3ced4f7adbbb23f6d2bd5602043409f28dd2dcaeb93177d5e5b2ffc21/detection

197.205.65.111:1604
noideavfx.ddns.net

# Reference: https://www.virustotal.com/gui/file/b9d063a2ca9c1aa945ee79e0715a2a3e00c6942e88ea652c9651d27ea1649f3c/detection

68.204.144.159:4142

# Reference: https://www.virustotal.com/gui/file/5bc6c528413e26a52d7ee138451afdf736025f318f5c647055daecd382031c60/behavior/C2AE

197.247.226.232:6070
affasdqa.ddns.net

# Reference: https://www.virustotal.com/gui/file/5896742953a63218733dc91c32ceb2fcd44460991efcc12f6902150403e1979d/behavior/C2AE

220.83.128.89:1975
vpn730650531.opengw.net

# Reference: https://www.virustotal.com/gui/file/9962d76bdf9e11e448e0a739ba8806515c0f9f201de149f8570de5ebf5f163f0/behavior/C2AE

185.115.101.5:6117
gyxha.ddns.net

# Reference: https://www.virustotal.com/gui/file/4547669a4577fd5c03e92ef86bc1ddc77ca9265a40e42baac0b7998f6f8565b3/behavior/Zenbox

narvalo13.ddns.net

# Reference: https://www.virustotal.com/gui/file/089f55b5a8311d5c3d6aa049ac70a2a67050732b0e88d57fad252e40a8062c94/detection

grilder.ddns.net

# Reference: https://www.virustotal.com/gui/file/e92a138719409a1b3f778f4131757a5027713440653c5fd4f5a34bc1cc6676f5/detection

androidmmx.ddns.net

# Reference: https://www.virustotal.com/gui/file/bd7138532fe73dc3a1ccf0900cf8cf535b0ddb0e3e565e488543cfd2216be349/detection

94.130.217.187:8040
call.dnsfor.me

# Reference: https://twitter.com/Srujank48668412/status/1509520095068192780
# Reference: https://app.any.run/tasks/8d1e3216-fd7d-415a-9dc1-f6da26966422/
# Reference: https://www.virustotal.com/gui/file/f6b2c58f9846adcb295edd3c8a5beaec31fff3bc98f6503d04e95be3f9f072e8/detection

http://45.147.230.231
45.147.230.231:2222

# Reference: https://twitter.com/MBThreatIntel/status/1513707264162648064
# Reference: https://www.virustotal.com/gui/file/9513e99c5bda05e1d50aba7eac4f7aa6c074ab146927d6c315241eed9334cdf7/detection
# Reference: https://www.virustotal.com/gui/file/b57a9f7321216c3410ebcc9d4b09e73a652dee9e750f96b2f6d7d1e39e2923d6/detection

38.132.101.45:1111
38.132.101.45:1188

# Reference: https://www.virustotal.com/gui/file/4d79aba82f59220a752e7f1b6ec6e01551d7f79fe1948171b3042c654fc4b799/detection

156.223.73.152:5523
jack100.ddns.net

# Reference: https://www.virustotal.com/gui/file/4af8536f98e03dfc5f5be911ff79ef6c0cbc8b942c855b0dcac530b3058f34b5/detection

75.127.1.230:6000

# Reference: https://www.virustotal.com/gui/file/030e7f0a1735e5b62739b30313664232af9ca92e83080f6189734e1c270da440/detection

194.67.209.128:13373

# Reference: https://www.virustotal.com/gui/file/32b0c48d95e9c4ef2860368bee244489b6e321119d4a51fafa7d9f755e0eee99/detection

198.12.91.245:7575

# Reference: https://www.virustotal.com/gui/file/2edd5fd3f07201b1e17455161c3a63724503028c31ea898d25d772c3dc8f1170/detection

telorino1581.duckdns.org

# Reference: https://twitter.com/h2jazi/status/1622742351046234112
# Reference: https://www.virustotal.com/gui/file/4acc7393b942c7c331ef0d08dc20000177adbe93f7a5202af14735b148c432f7/detection

mydnsftp.myftp.biz

# Reference: https://www.virustotal.com/gui/file/4b12f5d1474a58181a3f39e90acce77d97e81f513e7a671dc76618580cbbdf80/detection

45.8.133.42:8400
tgt55w.ddns.net

# Reference: https://www.virustotal.com/gui/file/e0071260ff95822f2c7dba0bb7283d3a92195509359705908217ab287af89cfb/detection

police-gr.ddns.net
soma.ddns.net

# Reference: https://www.virustotal.com/gui/file/33fdd91bf61f2e16a4db1fbcda74c328b9f31fbadad30b86cae1e8803d4975c4/detection

esco.bounceme.net

# Reference: https://www.virustotal.com/gui/file/d04fddb8e0398ff9e7db2f475d0663f1404f3b0e42df85ea7ee2c2d7e8b96155/detection

rolandomndz.webredirect.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.revenge_rat/

100.26.152.99:5222
101.53.240.19:2222
102.101.61.52:2222
105.190.59.121:2222
105.190.88.181:2222
141.255.145.247:333
141.255.146.83:19855
141.255.151.121:2222
141.255.159.209:333
142.202.189.75:2404
142.202.190.36:2404
147.135.21.144:1111
147.185.221.17:2531
149.28.117.232:3333
154.183.166.54:333
160.161.6.126:2222
176.58.60.145:333
184.105.237.198:1177
185.140.53.71:3436
185.222.57.254:4040
192.169.69.25:1912
194.5.179.83:4040
196.120.237.235:2222
198.23.227.149:7575
216.218.135.117:1604
216.218.135.118:333
23.237.25.123:333
3.138.180.119:16025
37.0.11.45:5900
38.132.101.45:1122
40.127.163.74:4444
42.118.133.241:6722
45.137.22.152:8089
45.148.10.187:333
5.39.19.8:2404
77.247.110.178:5040
79.134.225.53:2021
79.134.225.74:6169
82.1.101.239:1199
85.86.181.192:3333
91.109.180.8:333
91.109.190.9:333

# Reference: https://www.virustotal.com/gui/file/456a7d6b3b429d6a3ef4c78ece49ff774c66dbf26304e96b3fd9695f6bc598f4/detection

177.52.82.124:333
marcelotatuape.ddns.net

# Reference: https://www.virustotal.com/gui/file/68c71900cd7726f2f817f0141eba6fce70555835c8737c51fb57f63afb0d2f82/detection

vvvgxvvv100x1000.zapto.org

# Reference: https://www.virustotal.com/gui/file/c934883030e44fd4f0163c4d8a87f1e1aa7dbf405b6e9af54b1536ee1d69671b/detection

212.237.116.163:4000

# Reference: https://twitter.com/ScumBots/status/1729124745675755827
# Reference: https://www.virustotal.com/gui/file/f89e0e38e38cd6df4720703d2b8b3d2217b25a60e845ec6bbd4a4a45919babb7/detection

177.52.82.174:333

# Reference: https://www.virustotal.com/gui/file/35530b5e630fd7c1b7b2f85286f17bf69ad45c1cd31bbf2e9e17ee377a0b5576/detection

141.255.158.41:666
197.19.182.179:666
noose.servehttp.com

# Reference: https://www.virustotal.com/gui/file/cfb2c414f885bc56f94701b76169ad23920ff5dc21d448360188b2ca72b4420c/detection

185.79.248.171:56541
54.37.149.102:56541
houba0779.ddns.net

# Reference: https://www.virustotal.com/gui/file/01a40a0c84b6e534886217a9c1816494c705b2e21bc0e0f4f32572627b3d94d8/detection

141.255.145.219:689
141.255.151.0:689
141.255.152.75:689
141.255.157.55:689
141.255.157.76:689
141.255.159.23:689
groups.us.to

# Reference: https://www.virustotal.com/gui/file/4bb7b866115bbff116bcb4c8cc36d7621a5fb6ee3e1592035df2dd57b7bdfd1e/detection

188.126.90.68:1199
46.246.4.19:1194
46.246.4.19:1199

# Reference: https://twitter.com/K_N1kolenko/status/1738144236036366746
# Reference: https://www.virustotal.com/gui/file/60913a94ea89659cb9ec70ac990cb6553fe4df85eba1c6bc711e4ed3224364af/detection

193.235.147.38:7997
62.233.57.160:7997
65.108.20.198:7997
77.91.73.70:7997
94.156.161.83:7997
94.156.71.238:7997
rampage.myvnc.com

# Reference: https://www.virustotal.com/gui/file/340f4a7db0024413428f3663d06af5d5b430a2dadc8931a8b6c75b650e951f69/detection

177.52.84.20:333

# Reference: https://www.virustotal.com/gui/ip-address/185.19.85.135/relations

adminlogshost.ddns.net
boyan660.ddns.net
eventoscica.myftp.org
hotfix.dyndns.org
kodein.dynu.net
obaaliadmin.hopto.org
oby125.ddns.net
revengeratlove.ddns.net

# Reference: https://www.virustotal.com/gui/file/0869024a8e1c8d1c12ecedccf9e32ae4702436859c1befa1507075e97362ec6f/detection

104.196.191.53:333
192.169.69.25:333
bozok1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1b37e2706175142d04466602c45d2bb757af0c9563464e699958ef7ca2096e3f/detection

188.126.90.68:1177
i7bk.ddns.net

# Reference: https://www.virustotal.com/gui/file/e904cd8be9630f3f53d4ffee5dc3275e157b16cc5409c34cf93ab4bfaf8f77df/detection

177.131.73.229:444
braboxke.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0e7f74abfcac6d8c3984496f0c53296204fb08b3f796e71f44e7cbaa1b5cb9e2/detection

105.157.163.174:85
osnetwork.duckdns.org
