# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Note: Continuation of /maltrail/trails/static/malware/njrat.txt

# Reference: https://www.virustotal.com/gui/file/0913b8486c4ea2783806d678485462564003520209cdf54a67762e47faf6516f/detection

37.236.39.49:1177
easralahtane.ddns.net

# Reference: https://www.virustotal.com/gui/file/6aceb59f88b26f538acb7d291f6cb82a67e93dd1b644528c3f1b3ce92108513a/detection

20.106.232.4:5552

# Reference: https://www.virustotal.com/gui/file/163edda57b727333906617b366529adb1d27af8a853ab0886999bd7214714099/detection

37.0.14.215:5001
losprofetas100.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ab0659903f6a7d19d746d6fb78a5e045c263eb8ec3c55552f69e57e0526d4c87/detection

194.5.98.207:2054
asas2021.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e9fc051590c634e1fe8bbe06f0e8d4c949748a57b0ec89120f149beef1d85502/detection

185.140.53.159:5672

# Reference: https://www.virustotal.com/gui/file/ae17e8296d0d18abe9e5861fea5a417058644a00a55c0f085bbb1e3104755c90/detection

185.140.53.159:7659

# Reference: https://www.virustotal.com/gui/file/a15ba2a1acd7e7248978ac3e77d4669fd85a0ea7e0dbd828c49fc11b3900ac2b/detection

googelplay.ddns.net

# Reference: https://www.virustotal.com/gui/file/844cc95785a5341ca4fc0c7c0edcbed91bb0da5fc97f95d3891ffedeae8fc44c/detection

mmoh.ddns.net

# Reference: https://www.virustotal.com/gui/file/e76bdd365b1c1de144370c2bbbe7b067b4a911ef7cc3f636664f7a9db2f0aa6b/detection
# Reference: https://www.virustotal.com/gui/file/e76bdd365b1c1de144370c2bbbe7b067b4a911ef7cc3f636664f7a9db2f0aa6b/detection

141.255.145.6:1177
loweey.ddns.net

# Reference: https://www.virustotal.com/gui/file/f2e2b0d5a777f81da06bf9e7502c4db0b055d4f8ccbbc0c00b7fce8e7c95e7ba/detection

141.255.146.167:8080
h4kk333d.ddns.net

# Reference: https://www.virustotal.com/gui/file/05adcdce1363862dc2aa884645f7bf7a6deafc87c4e6866a1f8dabd4edd7efb9/detection

41.107.28.45:1177
psycho77777.myq-see.com

# Reference: https://www.virustotal.com/gui/file/006d648283dc295e3bdefe8a8518329b1f1a888c5d564d637eccff5c3ff8bd81/detection

psycho777.myq-see.com

# Reference: https://www.virustotal.com/gui/file/ccd2f193dbecff75ddd6db7ad82cef24741bcd1481612fbff0132a9f10488265/detection

141.255.146.167:2020
adeuapesco.ddns.net

# Reference: https://www.virustotal.com/gui/file/8aa03b1e921b60a476b776bbb28c12120147d16b7ddb07f6df288c08b3fe1a4c/detection

37.237.203.215:1976
borm55.zapto.org

# Reference: https://www.virustotal.com/gui/file/3d0b2dccea0a17a901b3c5933316a6e73fc3ce6b1f37dd9467b915fb9fcacf61/detection

141.255.150.238:1177
camiad.duckdns.org

# Reference: https://www.virustotal.com/gui/file/7435a228cf386ace63bf873a4804b56fa65d7b6babc502435eb655d5c648e23b/detection

82.129.20.121:1177
adm01010.ddns.net

# Reference: https://www.virustotal.com/gui/file/024ad80ef2bb57f4acf6f8a87825e383b7bc9d0c7edbd0e05e9c7005fe1c6071/detection

141.255.159.173:1177

# Reference: https://www.virustotal.com/gui/file/c4d91faa43fba5722a70d24bfae8c4156739a6a1a618a015c298db8436f5cf3e/detection

213.152.161.35:5502

# Reference: https://www.virustotal.com/gui/file/34a26cda7f0251648bbc5c791ff2e27eb66162463bdc73799a9afe05d53f7ae2/detection

141.255.147.148:19822

# Reference: https://www.virustotal.com/gui/file/23d52f7beed636ac34b94e47172d5a236a54d784098f7bd0881e1bbdff8fed76/detection

185.140.53.76:6578

# Reference: https://www.virustotal.com/gui/file/9c596a651b7941761ac2b61cc99c0c4f4e4261812c654df5afeae4bf72068dc3/detection

213.152.161.35:5502

# Reference: https://www.virustotal.com/gui/file/5608afe058f3a84428b1239ee00bbfdee093bcb1d1a7c705c19b34d71d0cc77b/detection

francodelinger.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e2775c09aadc674bdb8d78cd479b26f4d743ce6a988b5724c22f8187b951c71e/detection

31.146.205.186:333

# Reference: https://www.virustotal.com/gui/file/d8618581c4c3fd73972b4c7b0f4ee33309186dac04aea90b6160203a8ba84f11/detection

31.146.205.186:8989

# Reference: https://www.virustotal.com/gui/file/bd3aa38f970a8c2f3dbc60bb42118fc92f39f22cd5d6906f8ffa325ae8992f3c/detection

41.37.43.225:333
5.62.62.142:333
net.loseyourip.com

# Reference: https://www.virustotal.com/gui/file/95a097db8d6c29a9df12d56fa33b729994bceeedffeff6a5f24be641efc3bfab/detection
# Reference: https://www.virustotal.com/gui/file/9967814ceb179eac6f1b5e3752898c3db5be49119f6006491061811937d32698/detection

37.212.9.126:7777
geyporno.hopto.org

# Reference: https://www.virustotal.com/gui/file/93bcaffa457080d6476deecf62386ba015ec3aeed3992800883d5633e9c49f40/detection

85.140.117.168:2558
kicyao123.hopto.org

# Reference: https://www.virustotal.com/gui/file/0dba9de376c02dfa9b4c5d413eab186a3029891a1d4eeef5daf10cdcfc75b380/detection

blackpoint.hopto.org

# Reference: https://www.virustotal.com/gui/file/5cfe87bde8c987ce7165f0d935362a8c3a778138a5c85ac2afaba4169a545e62/detection

89.109.63.240:7777
wtf321.hopto.org

# Reference: https://tria.ge/220806-hgxcdsbffl/behavioral2

190.70.123.162:2547
puerto2547.duckdns.org

# Reference: https://www.virustotal.com/gui/file/999fd9c215a2fdaf3bff8681d0c94d2d6411e63aca34680ef66bc84f0a29a27c/detection

141.255.146.77:19811
bokkuvirde.ddns.net

# Reference: https://www.virustotal.com/gui/file/1a83a19d6219ab2e76cdaa026447c8bc5f9b51c8a30696c0adc32a3cea9f7599/detection

90.34.49.193:777

# Reference: https://www.virustotal.com/gui/file/57ade4e02f1849dce97be2b61f7cd64ccdcddfd532381aa2cad614b32ecbc779/detection

178.215.245.105:1604

# Reference: https://www.virustotal.com/gui/file/587b97b640a8dfeac34d79b554f86ff78b394dca416f9204db40a9a372cffbbf/detection

185.51.247.57:1604
mlvps.ml

# Reference: https://www.virustotal.com/gui/file/516d2bcbd047f1b5e60fc364d3fbfc95ca0854f4ecfe0df41e91ca363cbb144e/detection

174.138.45.26:443

# Reference: https://www.virustotal.com/gui/file/04044f0d9de7da2b921ea7bbf8510960ef72858b8344a33231dd3ae2509cef27/detection

105.103.240.196:5
publicvm.duckdns.org

# Reference: https://www.virustotal.com/gui/file/067b5c6142b0f3d78010164f83be7680443525d0152aff14d06b83af7c61e641/detection

159.0.222.239:1177
jar.linkpc.net

# Reference: https://www.virustotal.com/gui/file/fc0721f1ff37e5f8826401d862d36bd807caf882d4feca5b763019c00ff45b1e/detection
# Reference: https://www.virustotal.com/gui/file/0b87d9dca169fff0f36095ed0ca5396782d414a6c3eedb62d7af026d8ba1cd0e/detection

37.235.48.20:12345
dikmzkalqz.ddns.net

# Reference: https://www.virustotal.com/gui/file/f02ddbd98e022d370dd99894e80f5750fe05a3df215467aaef4193e4d87a593d/detection

77.234.43.167:6969

# Reference: https://www.virustotal.com/gui/file/283a0c0874c5b6c02776b6f277f34580a7cf9ac1848a460ae9b3e16733903cba/detection

isthatair.airdns.org

# Reference: https://www.virustotal.com/gui/file/573204b8b3160c4ffde984beab2a02be8a5728d10809ba5ad55c51110a5d20a0/detection

comeback2me.airdns.org

# Reference: https://www.virustotal.com/gui/file/3ed6e12108568e38df96fa8b3ec7fe4afcdca0225bbc6397f133e948f4046418/detection

sdfklxcjv8r89234uijxdzsfsrfwdfsdf.linkpc.net

# Reference: https://www.virustotal.com/gui/file/9611f1208311a40fc1129502680a14e2751479046c9fbaa434c6662f7d620dab/detection

141.255.151.37:444
liouas.ddns.net

# Reference: https://www.virustotal.com/gui/file/90d3d96c87cc3b2cf0b63c99142096a5ed8345e256bfee36dd32d6bb748fc5c8/detection

194.40.243.241:4446
pest045.ddns.net
supergod567.ddns.net

# Reference: https://www.virustotal.com/gui/file/6aeec6592d3fe400a3523bf0a93d6d0b718bdcdc8c6fc6769cf39ff1a7a9535a/detection

191.88.250.6:2427

# Reference: https://www.virustotal.com/gui/file/e72e52aaf8711d579fd8497089fbb81632c3dd1ef349b9fb36517684b837d0a9/detection

186.18.237.251:5000
roda777.linkpc.net

# Reference: https://www.virustotal.com/gui/file/6a6fe230d323e24aabb5c325722902e33e0f84437f6a0af483294707e16e5161/detection

reham2022.ddns.net

# Reference: https://twitter.com/Threatlabz/status/1567620560158625792
# Reference: https://www.virustotal.com/gui/file/30c82c8e58a8a0d54a51f3953c3fc8a3712e16e26eb448a1116f6b841f92bc8c/detection

204.48.16.32:5552

# Reference: https://www.virustotal.com/gui/file/dacf5cc68ed3aef5ceb103620284e01731efc96ddfe0292fcbdd169012b0dce2/detection

105.99.208.213:5552
koko20.hopto.org

# Reference: https://www.virustotal.com/gui/file/300b0dc155f031d5162979097ebc08748a92a7842d657e6e90cdfc06cb9c937f/detection
# Reference: https://www.virustotal.com/gui/file/7a07ead2c4b06d43fa7530ea4cb5fba3748a530df0719ddbbaf540aeeaa09e16/detection
# Reference: https://www.virustotal.com/gui/file/2fb98e8d22a31e6edc7f0ef3beb33382ded0a1690859382173c3b1aca7bfbfc9/detection
# Reference: https://www.virustotal.com/gui/file/7bed72601c92f0944eea0b8de70ddb34ebe1479ac9b68c7da4f85b4771f0ae32/detection
# Reference: https://www.virustotal.com/gui/file/a8c88164edc6039ac21e13cb655d0e0fae86745825c3ab2fb9a15e14f397cab8/detection
# Reference: https://www.virustotal.com/gui/file/1a39dc03f151a691ab4eb6b75ab6cb8851b7cf75fbf3cec0de035b7c20dddf04/detection

107.182.129.168:7070
107.182.129.168:7575
107.182.129.168:9595
mob7070.duckdns.org
mob9595.duckdns.org
mobnew6565.duckdns.org
venom2023.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0e9afe49c2dc9316c94578ebfcfdc38937fbb28cac5f2d05e37e90b5c5d697e0/detection

keyauth.servehttp.com

# Reference: https://www.virustotal.com/gui/file/caf29d8012bb4944fdf6c70d44843551aa9741b30c303088cc24d88b0083d048/detection

medello2021.con-ip.com

# Reference: https://www.virustotal.com/gui/file/009daf992c3a4be0784d7aae20d497d6d08ce5b3915b870181a21c9077699645/detection

22f213fc.duckdns.org
orcharddns.duckdns.org

# Reference: https://www.virustotal.com/gui/file/6da341e51a2ee55de51cf2de093ef51ddb10351696fe38af325a1a644624c8b7/detection

197.204.120.183:1477
colaa.serveftp.com

# Reference: https://twitter.com/ScumBots/status/1575638386055987200
# Reference: https://www.virustotal.com/gui/file/459339ad24f46b7d4d28e0badbc1eac08f16af67c88ccde5cbd9b4fd99ee46ab/detection

177.255.84.82:8787
winry7.duckdns.org

# Reference: https://www.virustotal.com/gui/file/7a6c5815545f2172e0717732eb817b464b324c7a218b85266d5ccfdb62423cda/detection

206.123.129.93:2023
adminneiva.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/204.76.203.9/relations
# Reference: https://www.virustotal.com/gui/file/dfd204c6366e038ebc534becc3bccb7c24e10cb0438a6aa81039c79d1faa1580/detection

boobies.ddns.net

# Reference: https://www.virustotal.com/gui/file/0b7283de2d654f363a91390eca15987927b3eaae77d678d787e152d1a1dd3ee3/detection

kaviancyber.gotdns.ch

# Reference: https://www.virustotal.com/gui/file/011648187c4ad523e8bcc80b7e150bcf143aefd9096bad5a3ba54c79c9d95e7d/detection

177.34.243.39:2014
racionais.hopto.org

# Reference: https://www.virustotal.com/gui/file/33ed1e3376287f587994bb9d1cc66141b0320a6e99d6811d56d54fac68e1aa73/detection

blueyesimane.ddns.net

# Reference: https://tria.ge/221010-t3ng6acgcm/behavioral1

64.44.167.136:57831
nyas22.duckdns.org

# Reference: https://tria.ge/221010-t26bkscee9/behavioral1

64.44.115.185:35999
njpe.duckdns.org

# Reference: https://tria.ge/221010-t26bkscgcl/behavioral1

64.44.115.185:35888

# Reference: https://tria.ge/221010-t26bkscgcj/behavioral1

64.44.167.136:57829

# Reference: https://tria.ge/221010-t251tacee8/behavioral1

64.44.167.136:57830

# Reference: https://www.virustotal.com/gui/file/e24e53d922913ea9694a57d9fc5df93a1a3764010e98721ea14527cc0e49dc5c/detection

bola2014.ddns.net

# Reference: https://www.virustotal.com/gui/file/8cfc982eda76590d0f94364011c8687cba9248b53bbd4b711ce2170a8b8f4615/detection

141.255.153.111:5552
systm32.giize.com

# Reference: https://www.virustotal.com/gui/file/829f60811373198b0e2e4fb5c24d634e6ed9cdc7fda8a6869a3574a25589ad1a/detection
# Reference: https://www.virustotal.com/gui/file/47a6ad8648e5a9a41542d413b353bdd9317e79b5321eda5caee3c17d64761099/detection

189.48.68.237:5552
91.109.188.21:5552
weshkk.duckdns.org

# Reference: https://www.virustotal.com/gui/file/11b80c0d14105819be39def94a657187a1cb4d4beaab3cc18c46fc7e7838da02/detection

176.169.52.65:1604
foobosmy.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5cdd03b3e6711f66c7f741b8d4b8e34e5a79c114d227edf94935ccd9cc9d3c84/detection

156.192.143.44:5552
mrjokar111.hopto.org

# Reference: https://www.virustotal.com/gui/file/a0f634b85b260947fd30b4f0b45139a739a5aab749ee9433d2e2f1ba71ce7a2d/detection
# Reference: https://www.virustotal.com/gui/file/a008a1cc17ab7b85afe4ac39bdf41b2922a9cddca0782ecc91fa830aa7aa48ac/detection
# Reference: https://www.virustotal.com/gui/file/855ffd333c54db277b728c433e11abc4e907fc1a2ceaef286a7c90fdd74dfebf/detection
# Reference: https://www.virustotal.com/gui/file/2feb7695b427e238eb8abeb5689ac9e55adc24245b99e7f4ab3837f2bf749e9f/detection

141.226.182.85:1177
141.255.144.193:5552
141.255.144.193:6565
141.255.145.63:1177
141.255.150.204:7070
141.255.158.113:1177
1asdbanwindows.hopto.org

# Reference: https://www.virustotal.com/gui/file/7b2a751a9af69cdc119755601ee27693dd105aa1702fd5f5cd6fcf697ac47bb6/detection

194.180.48.115:4042
royaldanger.sytes.net

# Reference: https://www.virustotal.com/gui/file/bd5ac82e0dd7c27cbf3fb00f5666a2c46bf51a744bf2bd5cee8789f26637b131/detection
# Reference: https://www.virustotal.com/gui/file/35d38e82566f3f3ec4431e12e997a9e83068ce11babef3eeaf12361e287ae102/detection

googler.sytes.net

# Reference: https://www.virustotal.com/gui/file/9edb14ec7b2cd0390b83893b1de230476e6e0b2aeefeabee11cc086ede2a5d6b/detection

171.6.234.4:1997
coppers.sytes.net

# Reference: https://tria.ge/221022-zwk2caehbn/behavioral1

104.128.188.242:35888
njnjnjs.duckdns.org

# Reference: https://tria.ge/221022-zwk2caehbm/behavioral1

104.128.188.242:35999
njnjs.duckdns.org

# Reference: https://tria.ge/221022-zwk2caefg8/behavioral1

207.244.231.35:57831
njnjnj.duckdns.org

# Reference: https://tria.ge/221022-zv1emsefg5/behavioral1

46.246.80.15:9988
r9dominios.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c3b7ed0ef790caf0f899beba235fb89fe2593fd5064da49a359b2c325ee5ea0e/detection

86.124.228.119:22005
86.124.224.153:22005
smss.sytes.net

# Reference: https://www.virustotal.com/gui/file/68c7712b5b9711bbf07a9ed2551412d4f2a382b4b99ecf64530f6add9e9e7272/detection

186.84.96.11:2798

# Reference: https://www.virustotal.com/gui/file/cf39e9bf0b576c2462ffcf023f4cf38ac34fa2f9b6aacf2e59bb632fe8ecb2dc/detection

181.141.2.160:2306
favboard.publicvm.com
mayo21.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9664b724abd8cc4dca9dd910bde9f4dc21605332186a8100c25c4f4a0a3e5b47/detection

104.128.189.195:2163
mr1963.duckdns.org

# Reference: https://www.virustotal.com/gui/file/fc7f90609e7004f1a95872200a6d903b60038d99142aa07421d7d0e86607300c/detection

93.80.41.114:7777
0120301201.ddns.net

# Reference: https://www.virustotal.com/gui/file/8157adb882f6f5b2dcdc95b5cf237c3efe068d2f8cc73bca842cdccd96caa95d/detection

87.110.86.120:6522
000void000.ddns.net

# Reference: https://www.virustotal.com/gui/file/986cbcf15972b2600d84434c43e202cd8cdccef9d0d82d91df74e7ab4ca12e8d/detection

007.ddns.net

# Reference: https://www.virustotal.com/gui/file/f2185a54be4a12ea9e0df18661570ba1b75b9960947f6c9a356f33861adaa973/detection

01001100.ddns.net

# Reference: https://www.virustotal.com/gui/file/38669ccdcbc2bd22ac4e277f9871ddcbd334032dfc04c1072d0ea2d889f2df3b/detection

5.138.76.241:6522
77.39.44.140:6522
01012.ddns.net

# Reference: https://www.virustotal.com/gui/file/3df078ce310282955b9ebe2316f1a1fc8ce519965c8a4437c22b39fc21a321ab/detection

41.109.209.27:9100
01020304.ddns.net

# Reference: https://www.virustotal.com/gui/file/1e49bb7bc2054ca7de797e077863ed533d28dc88c4fd03fa11bd113c13a3f428/detection

197.206.217.75:1177
010203m05.ddns.net

# Reference: https://www.virustotal.com/gui/file/957164d236a3c3a40da7071502ff6cec048c0f6d12523ecb546f9da72809d39d/detection

197.60.107.207:5552
01026733634.ddns.net

# Reference: https://twitter.com/ScumBots/status/1590649796980887558
# Reference: https://www.virustotal.com/gui/file/fb818a56a82e83858eb76d42248ea2f5d8d49e7a1ed2016adf2e8689b57ebc0a/detection

145.82.70.243:8888
azurehosting.ddns.net

# Reference: https://www.virustotal.com/gui/file/c51220297b1d7759f4d5db653dac0151d60da5257a8753f746c5acddb9f06bb7/detection

193.239.147.74:2541
a.supportmozilla.org

# Reference: https://www.virustotal.com/gui/ip-address/193.106.191.105/relations
# Reference: https://www.virustotal.com/gui/file/1c4ff83f2ae497e65d751d8382dc26c881c707be5ee7a2e71f544ad2a74392c1/detection

sucursal.quest
wps.quest
1805mayo.duckdns.org

# Reference: https://www.virustotal.com/gui/file/488593e57e76f546908c9fb6b4a73a77c45ce8763d6bd26e88605558bd4709f8/detection

213.223.165.140:3009
pearl.crabdance.com

# Reference: https://www.virustotal.com/gui/file/7e5a27e9cfbbbb54e7014e54128f96cc83ab56322c10a087b21ad6703088e03c/detection

95.214.24.140:4545

# Reference: https://www.virustotal.com/gui/file/30d5c5d335d728d11997f1656d689a54ec7041762bfa77c954afac35e9cf8f8f/detection

141.255.151.206:4545
ratkings.ddns.net

# Reference: https://tria.ge/221117-kq1ghsaa7t/behavioral1

207.244.231.35:35555
nxja.duckdns.org

# Reference: https://1275.ru/ioc/755/njrat/ (Russian)

103.147.184.73:7103

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/

101.132.67.159:3165
102.156.54.76:1177
102.156.86.171:5552
102.158.9.188:5552
102.185.4.188:4444
102.42.240.236:6522
103.149.13.61:4545
103.170.255.246:1111
103.212.182.45:2001
103.212.182.45:2003
103.231.107.52:1717
103.47.144.80:49703
103.91.207.235:2564
104.128.188.242:35888
104.128.189.195:2163
104.168.7.110:5552
104.22.32.240:443
104.243.35.208:4004
104.243.37.233:4003
105.105.101.14:11560
105.105.64.232:11560
105.105.83.129:11560
105.110.153.161:1000
105.110.73.121:1000
105.155.245.141:55554
105.158.21.149:1177
107.148.12.158:5552
107.182.129.168:9595
108.158.147.14:443
109.134.166.58:5554
109.197.196.135:1604
109.197.196.135:9991
109.206.243.59:4444
123.99.198.201:20192
124.248.67.68:20192
124.248.67.68:21842
128.90.154.235:5552
129.159.194.161:5552
13.229.3.203:10233
13.229.3.203:10504
13.229.3.203:15281
13.229.3.203:443
13.37.224.132:5552
13.58.157.220:10195
13.58.157.220:10809
13.58.157.220:11009
13.58.157.220:13955
13.58.157.220:14197
13.58.157.220:15086
13.58.157.220:16635
13.58.157.220:18577
13.59.15.185:10117
13.59.15.185:10771
13.59.15.185:13817
13.59.15.185:15056
13.59.15.185:15117
13.59.15.185:16837
13.59.15.185:16924
13.59.15.185:18436
13.59.15.185:19280
136.243.111.71:741
138.199.47.194:8080
138.201.177.87:443
141.226.182.85:1177
141.255.144.116:1177
141.255.144.188:16472
141.255.144.193:5552
141.255.144.193:6565
141.255.145.181:19811
141.255.145.186:1177
141.255.145.63:1177
141.255.146.232:19444
141.255.146.233:19444
141.255.146.249:1182
141.255.146.249:1188
141.255.147.164:1177
141.255.147.171:19444
141.255.147.252:19811
141.255.147.50:1182
141.255.147.61:5552
141.255.147.75:1177
141.255.147.80:19444
141.255.147.80:19822
141.255.150.204:7070
141.255.151.10:1177
141.255.151.213:8973
141.255.151.253:1177
141.255.152.125:5552
141.255.152.251:1177
141.255.153.128:5552
141.255.153.154:19444
141.255.153.28:5552
141.255.156.18:1177
141.255.156.1:19822
141.255.156.210:5552
141.255.157.160:1177
141.255.157.41:19444
141.255.157.41:19822
141.255.158.113:1177
141.255.158.120:1177
141.255.158.190:1170
141.255.159.28:1605
141.255.159.61:1170
141.255.159.61:1176
141.255.159.61:1182
141.255.159.61:1188
141.95.84.40:3001
141.95.84.40:8888
142.132.227.105:1339
145.82.45.238:8888
145.82.5.58:8888
145.82.70.243:8888
146.158.73.209:5552
146.59.185.74:2010
147.185.221.180:14456
147.185.221.180:14457
147.185.221.180:21340
147.185.221.224:13426
147.185.221.224:24460
147.50.252.113:117
147.50.252.18:5552
147.50.253.218:1112
147.50.253.218:5552
147.50.253.226:5555
147.50.253.226:5556
149.154.154.78:5578
15.235.53.10:3000
154.177.120.120:5552
154.177.40.158:5552
154.177.64.164:5552
154.178.178.140:5552
154.180.41.24:1177
156.193.192.47:9999
156.204.116.218:5552
156.218.167.144:1177
156.218.52.139:5552
156.222.29.10:6070
157.245.135.253:4975
157.90.140.17:443
157.90.140.28:443
159.69.153.93:5552
160.177.64.255:1326
162.246.185.103:2022
162.255.46.184:443
165.227.31.192:22537
167.71.56.116:22217
172.111.133.74:7721
172.93.231.202:5552
175.118.210.58:5552
176.126.113.95:5656
176.37.53.55:7777
177.75.89.26:5552
177.83.47.175:5552
178.66.239.69:6522
179.14.9.250:1995
179.235.50.235:27010
18.136.148.247:10233
18.136.148.247:13864
18.136.148.247:16792
18.136.148.247:443
18.139.9.214:10881
18.139.9.214:15281
18.139.9.214:19664
18.139.9.214:443
18.141.129.246:15281
18.156.13.209:10008
18.156.13.209:10152
18.156.13.209:10257
18.156.13.209:10659
18.156.13.209:10696
18.156.13.209:10724
18.156.13.209:10896
18.156.13.209:11024
18.156.13.209:11138
18.156.13.209:11696
18.156.13.209:12196
18.156.13.209:12241
18.156.13.209:12633
18.156.13.209:13002
18.156.13.209:13570
18.156.13.209:14899
18.156.13.209:15441
18.156.13.209:15537
18.156.13.209:15600
18.156.13.209:16171
18.156.13.209:16763
18.156.13.209:17529
18.156.13.209:17696
18.156.13.209:18163
18.156.13.209:18491
18.156.13.209:18666
18.156.13.209:18718
18.156.13.209:19184
18.157.68.73:10008
18.157.68.73:10152
18.157.68.73:10224
18.157.68.73:10257
18.157.68.73:10542
18.157.68.73:10659
18.157.68.73:10724
18.157.68.73:11024
18.157.68.73:11457
18.157.68.73:12196
18.157.68.73:12633
18.157.68.73:13002
18.157.68.73:13904
18.157.68.73:14473
18.157.68.73:14794
18.157.68.73:15240
18.157.68.73:15352
18.157.68.73:15441
18.157.68.73:15600
18.157.68.73:15642
18.157.68.73:15873
18.157.68.73:16171
18.157.68.73:16328
18.157.68.73:16632
18.157.68.73:17297
18.157.68.73:17504
18.157.68.73:17529
18.157.68.73:18211
18.157.68.73:18440
18.157.68.73:18666
18.157.68.73:18718
18.157.68.73:19184
18.158.249.75:10040
18.158.249.75:10172
18.158.249.75:10202
18.158.249.75:10319
18.158.249.75:10776
18.158.249.75:11177
18.158.249.75:11752
18.158.249.75:11800
18.158.249.75:12251
18.158.249.75:12656
18.158.249.75:13880
18.158.249.75:13980
18.158.249.75:14378
18.158.249.75:14504
18.158.249.75:14880
18.158.249.75:15024
18.158.249.75:15266
18.158.249.75:15552
18.158.249.75:16251
18.158.249.75:16426
18.158.249.75:16872
18.158.249.75:17139
18.158.249.75:17312
18.158.249.75:17355
18.158.249.75:17981
18.158.249.75:18668
18.158.249.75:18787
18.158.249.75:19016
18.158.249.75:19875
18.158.58.205:10058
18.158.58.205:10264
18.158.58.205:10289
18.158.58.205:10875
18.158.58.205:11180
18.158.58.205:12266
18.158.58.205:12673
18.158.58.205:13674
18.158.58.205:13736
18.158.58.205:14228
18.158.58.205:14307
18.158.58.205:14577
18.158.58.205:15049
18.158.58.205:15728
18.158.58.205:16049
18.158.58.205:16091
18.158.58.205:16130
18.158.58.205:16416
18.158.58.205:17569
18.158.58.205:18050
18.158.58.205:18776
18.158.58.205:18840
18.158.58.205:19785
18.158.58.205:19964
18.158.58.205:19987
18.176.183.3:13528
18.177.53.48:13528
18.177.60.68:13528
18.177.76.42:13528
18.189.106.45:10737
18.189.106.45:13173
18.189.106.45:14868
18.189.106.45:17162
18.189.106.45:18420
18.189.106.45:18498
18.192.31.165:10040
18.192.31.165:10172
18.192.31.165:10185
18.192.31.165:10202
18.192.31.165:10319
18.192.31.165:10427
18.192.31.165:10776
18.192.31.165:11177
18.192.31.165:11800
18.192.31.165:11993
18.192.31.165:12329
18.192.31.165:12337
18.192.31.165:12656
18.192.31.165:12705
18.192.31.165:13065
18.192.31.165:13489
18.192.31.165:14504
18.192.31.165:14880
18.192.31.165:15401
18.192.31.165:15857
18.192.31.165:16872
18.192.31.165:16987
18.192.31.165:17139
18.192.31.165:17194
18.192.31.165:17312
18.192.31.165:17640
18.192.31.165:18362
18.192.31.165:18468
18.192.31.165:18494
18.192.31.165:18787
18.192.31.165:19875
18.192.93.86:10008
18.192.93.86:10224
18.192.93.86:10542
18.192.93.86:10659
18.192.93.86:10688
18.192.93.86:11138
18.192.93.86:11969
18.192.93.86:12241
18.192.93.86:13889
18.192.93.86:14794
18.192.93.86:14899
18.192.93.86:15441
18.192.93.86:15537
18.192.93.86:15642
18.192.93.86:15768
18.192.93.86:15873
18.192.93.86:15986
18.192.93.86:16171
18.192.93.86:16632
18.192.93.86:17248
18.192.93.86:17297
18.192.93.86:17504
18.192.93.86:17529
18.192.93.86:17696
18.192.93.86:18211
18.192.93.86:18440
18.192.93.86:18465
18.192.93.86:18491
18.192.93.86:18666
18.192.93.86:18718
18.192.93.86:19184
18.197.239.109:10146
18.197.239.109:10224
18.197.239.109:10384
18.197.239.109:10705
18.197.239.109:10945
18.197.239.109:11548
18.197.239.109:11553
18.197.239.109:11672
18.197.239.109:11713
18.197.239.109:12072
18.197.239.109:12180
18.197.239.109:12392
18.197.239.109:12420
18.197.239.109:12786
18.197.239.109:12872
18.197.239.109:13090
18.197.239.109:13730
18.197.239.109:13992
18.197.239.109:14453
18.197.239.109:16211
18.197.239.109:16424
18.197.239.109:17297
18.197.239.109:17674
18.197.239.109:17752
18.197.239.109:18168
18.197.239.109:18280
18.197.239.109:18313
18.197.239.109:18528
18.197.239.109:18736
18.197.239.109:18888
18.197.239.109:19161
18.197.239.109:19304
18.197.239.109:19905
18.197.239.5:10008
18.197.239.5:10152
18.197.239.5:10224
18.197.239.5:10542
18.197.239.5:10659
18.197.239.5:10688
18.197.239.5:10896
18.197.239.5:11696
18.197.239.5:12196
18.197.239.5:12241
18.197.239.5:13002
18.197.239.5:13570
18.197.239.5:13889
18.197.239.5:13904
18.197.239.5:14473
18.197.239.5:14794
18.197.239.5:15240
18.197.239.5:15352
18.197.239.5:15441
18.197.239.5:15768
18.197.239.5:15873
18.197.239.5:15986
18.197.239.5:16328
18.197.239.5:16763
18.197.239.5:17248
18.197.239.5:17529
18.197.239.5:17696
18.197.239.5:18440
18.197.239.5:18491
18.197.239.5:18666
18.197.239.5:18718
18.197.239.5:19184
18.198.77.177:10256
18.198.77.177:10610
18.198.77.177:11216
18.198.77.177:11353
18.198.77.177:11415
18.198.77.177:11517
18.198.77.177:11610
18.198.77.177:12433
18.198.77.177:13642
18.198.77.177:13817
18.198.77.177:14545
18.198.77.177:15025
18.198.77.177:15404
18.198.77.177:15472
18.198.77.177:15489
18.198.77.177:15785
18.198.77.177:15907
18.198.77.177:16409
18.198.77.177:16728
18.198.77.177:16977
18.198.77.177:17475
18.198.77.177:17514
18.198.77.177:17538
18.198.77.177:17576
18.198.77.177:17824
18.198.77.177:17872
18.198.77.177:17953
18.198.77.177:17963
18.198.77.177:18069
18.198.77.177:18402
18.198.77.177:18541
18.198.77.177:18936
18.198.77.177:19453
18.228.115.60:10112
18.228.115.60:11496
18.228.115.60:12024
18.228.115.60:12425
18.228.115.60:13176
18.228.115.60:13560
18.228.115.60:14240
18.228.115.60:16984
18.228.115.60:17056
18.228.115.60:17240
18.228.115.60:17728
18.228.115.60:18728
18.228.115.60:19489
18.228.115.60:19784
18.228.115.60:26266
18.229.146.63:10008
18.229.146.63:10112
18.229.146.63:10192
18.229.146.63:11496
18.229.146.63:12425
18.229.146.63:12568
18.229.146.63:13176
18.229.146.63:13305
18.229.146.63:14240
18.229.146.63:16984
18.229.146.63:17728
18.229.146.63:19441
18.229.146.63:26266
18.229.248.167:10192
18.229.248.167:11496
18.229.248.167:11856
18.229.248.167:12024
18.229.248.167:12568
18.229.248.167:13305
18.229.248.167:13480
18.229.248.167:13496
18.229.248.167:14240
18.229.248.167:14921
18.229.248.167:17056
18.229.248.167:17728
18.229.248.167:18728
18.229.248.167:19489
18.229.248.167:19513
18.229.248.167:19784
18.229.248.167:26266
18.231.93.153:10112
18.231.93.153:10416
18.231.93.153:11496
18.231.93.153:11664
18.231.93.153:11856
18.231.93.153:12024
18.231.93.153:12425
18.231.93.153:12568
18.231.93.153:13176
18.231.93.153:13305
18.231.93.153:13480
18.231.93.153:13496
18.231.93.153:14921
18.231.93.153:15538
18.231.93.153:16488
18.231.93.153:17240
18.231.93.153:17728
181.131.217.96:9966
181.141.1.67:2008
181.141.1.67:2009
181.141.1.67:2010
181.141.1.86:1991
181.141.42.35:2021
181.206.46.140:5000
181.214.130.17:50100
182.186.6.189:6903
182.54.238.167:35565
182.54.238.236:6662
184.105.237.195:7412
184.105.237.198:6000
185.162.21.232:2512
185.167.96.202:5552
185.216.71.242:8080
185.223.28.192:1370
185.243.115.3:4444
185.245.182.241:5553
185.249.198.205:5552
186.169.41.31:8080
187.6.238.120:9500
188.134.84.29:5500
188.165.120.123:6523
188.48.201.83:9090
189.30.136.88:2770
189.39.103.246:2000
191.135.95.200:10006
191.242.13.211:1177
191.242.28.173:1177
191.242.29.94:1177
191.88.250.6:2427
192.169.69.25:1338
192.169.69.25:1666
192.169.69.25:1701
192.169.69.25:1920
192.169.69.25:2889
192.169.69.25:6540
192.169.69.25:8080
192.169.69.25:94
192.169.69.26:1122
192.169.69.26:1954
192.169.69.26:4434
192.169.69.26:5556
192.169.69.26:8044
192.223.27.228:5552
193.109.78.54:2512
193.161.193.99:1194
193.161.193.99:33707
193.161.193.99:36084
193.161.193.99:47454
193.161.193.99:60000
194.180.48.115:4042
194.31.98.108:8989
194.5.97.6:7005
194.5.98.10:4030
194.5.98.12:45981
194.5.98.137:4030
194.5.98.13:5392
194.5.98.151:4030
194.5.98.188:4003
194.5.98.19:7771
194.5.98.212:6200
194.5.98.8:50710
194.5.98.9:5392
194.71.126.120:443
196.77.105.142:6522
197.0.19.219:1177
197.202.206.220:9090
197.35.160.37:5552
197.35.63.146:5552
198.23.212.148:1011
2.58.149.171:9734
20.111.25.126:5552
20.117.121.229:5552
20.206.75.74:5552
20.212.176.142:3334
20.218.135.231:5552
20.223.155.39:8080
20.226.20.223:7777
20.39.226.157:8082
20.52.0.223:302
20.62.174.59:6666
20.7.14.99:5552
201.41.182.43:9091
203.78.129.191:1150
206.123.129.93:2023
207.244.231.35:35555
207.244.231.35:57831
207.32.216.118:1337
209.25.140.180:48431
209.25.140.181:16214
209.25.140.181:17629
209.25.140.211:29414
209.25.140.212:21834
209.25.141.180:13774
209.25.141.180:14456
209.25.141.180:24598
209.25.141.180:27733
209.25.141.180:30114
209.25.141.180:32832
209.25.141.180:34098
209.25.141.180:34938
209.25.141.180:37677
209.25.141.180:38505
209.25.141.180:38979
209.25.141.180:57644
209.25.141.180:59826
209.25.141.180:63934
209.25.141.180:6549
209.25.141.180:9693
209.25.141.181:11268
209.25.141.181:1502
209.25.141.181:16214
209.25.141.181:17464
209.25.141.181:17552
209.25.141.181:17560
209.25.141.181:21112
209.25.141.181:21584
209.25.141.181:22113
209.25.141.181:24620
209.25.141.181:26430
209.25.141.181:26461
209.25.141.181:26716
209.25.141.181:4441
209.25.141.181:4710
209.25.141.211:21960
209.25.141.211:25565
209.25.141.211:25940
209.25.141.211:39787
209.25.141.211:45976
209.25.141.211:58158
209.25.141.212:21834
209.25.141.212:42876
209.25.141.212:48498
209.25.141.212:54131
209.25.141.223:11861
209.25.141.223:26058
209.25.141.224:23401
209.25.141.229:12719
209.25.141.229:26879
209.25.141.229:42320
209.25.142.229:28434
212.174.242.50:6522
212.187.4.161:3232
212.227.197.141:5761
212.33.100.174:5552
213.159.212.161:5552
213.248.191.157:1605
216.218.135.117:2323
216.218.135.117:8280
216.218.135.118:3604
216.250.251.104:2028
217.215.234.181:2323
217.66.243.106:1177
27.147.169.101:5555
3.121.139.82:11216
3.121.139.82:11415
3.121.139.82:11610
3.121.139.82:11814
3.121.139.82:12248
3.121.139.82:12354
3.121.139.82:12433
3.121.139.82:12756
3.121.139.82:13504
3.121.139.82:13642
3.121.139.82:13817
3.121.139.82:13913
3.121.139.82:14090
3.121.139.82:14545
3.121.139.82:15404
3.121.139.82:15409
3.121.139.82:15450
3.121.139.82:15472
3.121.139.82:15489
3.121.139.82:15634
3.121.139.82:17475
3.121.139.82:17576
3.121.139.82:17824
3.121.139.82:17872
3.121.139.82:18541
3.121.139.82:18714
3.121.139.82:19057
3.121.139.82:19184
3.121.139.82:19376
3.121.139.82:19453
3.124.142.205:10040
3.124.142.205:10172
3.124.142.205:10185
3.124.142.205:10202
3.124.142.205:10505
3.124.142.205:10776
3.124.142.205:11177
3.124.142.205:11752
3.124.142.205:11883
3.124.142.205:11993
3.124.142.205:12065
3.124.142.205:12208
3.124.142.205:12329
3.124.142.205:12360
3.124.142.205:12656
3.124.142.205:13065
3.124.142.205:13489
3.124.142.205:13779
3.124.142.205:13820
3.124.142.205:13980
3.124.142.205:14219
3.124.142.205:15024
3.124.142.205:15401
3.124.142.205:15890
3.124.142.205:16872
3.124.142.205:16986
3.124.142.205:17139
3.124.142.205:17194
3.124.142.205:17312
3.124.142.205:17640
3.124.142.205:17724
3.124.142.205:17981
3.124.142.205:18211
3.124.142.205:18468
3.124.142.205:18668
3.124.142.205:18787
3.124.142.205:19016
3.124.142.205:19875
3.124.142.205:19977
3.124.67.191:10205
3.124.67.191:10352
3.124.67.191:10504
3.124.67.191:10529
3.124.67.191:11417
3.124.67.191:11680
3.124.67.191:12322
3.124.67.191:12761
3.124.67.191:13225
3.124.67.191:13744
3.124.67.191:13984
3.124.67.191:14058
3.124.67.191:14625
3.124.67.191:14650
3.124.67.191:15073
3.124.67.191:15168
3.124.67.191:16929
3.124.67.191:16970
3.124.67.191:17409
3.124.67.191:17882
3.124.67.191:18097
3.124.67.191:18211
3.124.67.191:18936
3.124.67.191:18982
3.124.67.191:19169
3.124.67.191:19276
3.124.67.191:19280
3.124.67.191:19345
3.124.67.191:19379
3.124.67.191:19512
3.125.102.39:10185
3.125.102.39:10776
3.125.102.39:10809
3.125.102.39:11177
3.125.102.39:11800
3.125.102.39:11883
3.125.102.39:11993
3.125.102.39:12048
3.125.102.39:12065
3.125.102.39:12251
3.125.102.39:12563
3.125.102.39:12656
3.125.102.39:12705
3.125.102.39:13065
3.125.102.39:13489
3.125.102.39:13779
3.125.102.39:13820
3.125.102.39:13880
3.125.102.39:13980
3.125.102.39:14880
3.125.102.39:14888
3.125.102.39:15024
3.125.102.39:15266
3.125.102.39:15401
3.125.102.39:15552
3.125.102.39:15890
3.125.102.39:16744
3.125.102.39:16872
3.125.102.39:17194
3.125.102.39:17640
3.125.102.39:17981
3.125.102.39:18211
3.125.102.39:18362
3.125.102.39:18468
3.125.102.39:18494
3.125.102.39:18521
3.125.102.39:18668
3.125.102.39:18787
3.125.102.39:19875
3.125.102.39:19977
3.125.188.168:10097
3.125.188.168:10352
3.125.188.168:10504
3.125.188.168:10529
3.125.188.168:11337
3.125.188.168:11680
3.125.188.168:11888
3.125.188.168:12322
3.125.188.168:13744
3.125.188.168:13984
3.125.188.168:14008
3.125.188.168:14058
3.125.188.168:14650
3.125.188.168:14885
3.125.188.168:15504
3.125.188.168:16592
3.125.188.168:16970
3.125.188.168:18065
3.125.188.168:18097
3.125.188.168:18211
3.125.188.168:18458
3.125.188.168:18762
3.125.188.168:18807
3.125.188.168:18982
3.125.188.168:19169
3.125.188.168:19276
3.125.188.168:19280
3.125.188.168:19345
3.125.188.168:19379
3.125.188.168:19812
3.125.209.94:10040
3.125.209.94:10172
3.125.209.94:10185
3.125.209.94:10202
3.125.209.94:10319
3.125.209.94:10776
3.125.209.94:10809
3.125.209.94:12065
3.125.209.94:12251
3.125.209.94:12705
3.125.209.94:13065
3.125.209.94:13489
3.125.209.94:13880
3.125.209.94:13980
3.125.209.94:14219
3.125.209.94:14504
3.125.209.94:15024
3.125.209.94:15266
3.125.209.94:15552
3.125.209.94:15890
3.125.209.94:16251
3.125.209.94:16872
3.125.209.94:16987
3.125.209.94:17139
3.125.209.94:17312
3.125.209.94:17355
3.125.209.94:17640
3.125.209.94:17981
3.125.209.94:18362
3.125.209.94:18468
3.125.209.94:18521
3.125.209.94:18592
3.125.209.94:18648
3.125.209.94:19016
3.125.209.94:19875
3.125.223.134:10040
3.125.223.134:10202
3.125.223.134:10809
3.125.223.134:11177
3.125.223.134:11544
3.125.223.134:11800
3.125.223.134:11883
3.125.223.134:11993
3.125.223.134:12705
3.125.223.134:13489
3.125.223.134:13779
3.125.223.134:13820
3.125.223.134:13880
3.125.223.134:14504
3.125.223.134:15401
3.125.223.134:16744
3.125.223.134:16872
3.125.223.134:16986
3.125.223.134:16987
3.125.223.134:17139
3.125.223.134:17312
3.125.223.134:17355
3.125.223.134:18088
3.125.223.134:18211
3.125.223.134:18494
3.125.223.134:18521
3.125.223.134:18787
3.125.223.134:19016
3.126.224.214:10097
3.126.224.214:10205
3.126.224.214:10529
3.126.224.214:11226
3.126.224.214:11680
3.126.224.214:11888
3.126.224.214:13225
3.126.224.214:13744
3.126.224.214:13984
3.126.224.214:14008
3.126.224.214:14650
3.126.224.214:14885
3.126.224.214:15168
3.126.224.214:15593
3.126.224.214:16592
3.126.224.214:16929
3.126.224.214:16970
3.126.224.214:17409
3.126.224.214:17882
3.126.224.214:18211
3.126.224.214:18346
3.126.224.214:18458
3.126.224.214:18807
3.126.224.214:18851
3.126.224.214:18982
3.126.224.214:19169
3.126.224.214:19276
3.126.224.214:19280
3.126.224.214:19379
3.126.224.214:19512
3.126.224.214:19586
3.126.224.214:19729
3.126.224.214:19812
3.126.37.18:10008
3.126.37.18:10036
3.126.37.18:10542
3.126.37.18:10659
3.126.37.18:10688
3.126.37.18:11024
3.126.37.18:11457
3.126.37.18:11969
3.126.37.18:12241
3.126.37.18:12280
3.126.37.18:13570
3.126.37.18:13889
3.126.37.18:14899
3.126.37.18:15240
3.126.37.18:15282
3.126.37.18:15352
3.126.37.18:15410
3.126.37.18:15441
3.126.37.18:15642
3.126.37.18:16171
3.126.37.18:16328
3.126.37.18:16763
3.126.37.18:17297
3.126.37.18:17504
3.126.37.18:17696
3.126.37.18:18211
3.126.37.18:18666
3.127.138.57:10152
3.127.138.57:10224
3.127.138.57:10257
3.127.138.57:10542
3.127.138.57:10659
3.127.138.57:10688
3.127.138.57:10896
3.127.138.57:11024
3.127.138.57:11138
3.127.138.57:11696
3.127.138.57:11969
3.127.138.57:12241
3.127.138.57:12633
3.127.138.57:13002
3.127.138.57:13570
3.127.138.57:13904
3.127.138.57:14473
3.127.138.57:14794
3.127.138.57:14899
3.127.138.57:15441
3.127.138.57:15537
3.127.138.57:15600
3.127.138.57:15768
3.127.138.57:15873
3.127.138.57:15986
3.127.138.57:16280
3.127.138.57:16632
3.127.138.57:16763
3.127.138.57:17248
3.127.138.57:17297
3.127.138.57:17425
3.127.138.57:18440
3.127.138.57:18491
3.127.138.57:18666
3.127.138.57:18718
3.127.138.57:19184
3.127.181.115:10289
3.127.181.115:10875
3.127.181.115:11129
3.127.181.115:11180
3.127.181.115:12006
3.127.181.115:12266
3.127.181.115:13674
3.127.181.115:13720
3.127.181.115:14228
3.127.181.115:14322
3.127.181.115:14338
3.127.181.115:16049
3.127.181.115:16091
3.127.181.115:16130
3.127.181.115:16416
3.127.181.115:17569
3.127.181.115:17730
3.127.181.115:18050
3.127.181.115:18115
3.127.181.115:19224
3.127.181.115:19394
3.127.181.115:19449
3.127.253.86:10610
3.127.253.86:11216
3.127.253.86:11353
3.127.253.86:11517
3.127.253.86:11610
3.127.253.86:11814
3.127.253.86:12248
3.127.253.86:12354
3.127.253.86:12433
3.127.253.86:12756
3.127.253.86:13876
3.127.253.86:14898
3.127.253.86:15025
3.127.253.86:15232
3.127.253.86:15404
3.127.253.86:15409
3.127.253.86:15450
3.127.253.86:16409
3.127.253.86:16612
3.127.253.86:16977
3.127.253.86:17475
3.127.253.86:17561
3.127.253.86:17576
3.127.253.86:17824
3.127.253.86:17872
3.127.253.86:18018
3.127.253.86:18714
3.127.253.86:19184
3.127.59.75:10296
3.127.59.75:11415
3.127.59.75:11610
3.127.59.75:11814
3.127.59.75:12248
3.127.59.75:12354
3.127.59.75:12433
3.127.59.75:12756
3.127.59.75:13008
3.127.59.75:13642
3.127.59.75:13817
3.127.59.75:13913
3.127.59.75:14090
3.127.59.75:14545
3.127.59.75:14898
3.127.59.75:14962
3.127.59.75:15025
3.127.59.75:15232
3.127.59.75:15404
3.127.59.75:15450
3.127.59.75:15651
3.127.59.75:16409
3.127.59.75:16977
3.127.59.75:17049
3.127.59.75:17475
3.127.59.75:17514
3.127.59.75:17576
3.127.59.75:17824
3.127.59.75:17872
3.127.59.75:17953
3.127.59.75:17963
3.127.59.75:18402
3.127.59.75:18541
3.127.59.75:19057
3.127.59.75:19376
3.127.59.75:19453
3.128.107.74:10117
3.128.107.74:11572
3.128.107.74:11962
3.128.107.74:12365
3.128.107.74:13817
3.128.107.74:14954
3.128.107.74:15056
3.128.107.74:15090
3.128.107.74:15117
3.128.107.74:16659
3.128.107.74:16837
3.128.107.74:16924
3.128.107.74:17021
3.128.107.74:19280
3.129.187.220:11044
3.129.187.220:12496
3.129.187.220:12759
3.129.187.220:13705
3.129.187.220:15925
3.129.187.220:16280
3.129.187.220:17755
3.129.187.220:17811
3.129.187.220:18766
3.129.187.220:19155
3.13.191.225:11081
3.13.191.225:12019
3.13.191.225:12178
3.13.191.225:13451
3.13.191.225:13651
3.13.191.225:14274
3.13.191.225:15046
3.13.191.225:15844
3.13.191.225:17413
3.13.191.225:17553
3.13.191.225:17590
3.13.191.225:18169
3.131.147.49:11044
3.131.147.49:12759
3.131.147.49:13648
3.131.147.49:13705
3.131.147.49:13961
3.131.147.49:15925
3.131.147.49:16280
3.131.147.49:16292
3.131.147.49:17811
3.131.147.49:18766
3.131.207.170:10117
3.131.207.170:10771
3.131.207.170:12365
3.131.207.170:13817
3.131.207.170:14402
3.131.207.170:14404
3.131.207.170:14954
3.131.207.170:15056
3.131.207.170:15117
3.131.207.170:16659
3.131.207.170:16837
3.131.207.170:16924
3.131.207.170:17021
3.131.207.170:17939
3.131.207.170:18436
3.131.207.170:19280
3.132.159.158:10737
3.132.159.158:10813
3.132.159.158:14098
3.132.159.158:15544
3.132.159.158:15725
3.132.159.158:16228
3.132.159.158:17162
3.132.159.158:18498
3.132.159.158:19493
3.133.207.110:11044
3.133.207.110:13705
3.133.207.110:13961
3.133.207.110:15925
3.133.207.110:16280
3.133.207.110:16292
3.133.207.110:17755
3.133.207.110:17811
3.133.207.110:18766
3.133.207.110:19155
3.134.125.175:10224
3.134.125.175:11081
3.134.125.175:12178
3.134.125.175:12971
3.134.125.175:13766
3.134.125.175:14564
3.134.125.175:14963
3.134.125.175:15046
3.134.125.175:15844
3.134.125.175:16088
3.134.125.175:17413
3.134.125.175:19120
3.134.125.175:19536
3.134.39.220:11081
3.134.39.220:12971
3.134.39.220:13186
3.134.39.220:13651
3.134.39.220:14963
3.134.39.220:15844
3.134.39.220:16088
3.134.39.220:16462
3.134.39.220:17553
3.134.39.220:17590
3.134.39.220:18169
3.136.65.236:11044
3.136.65.236:12759
3.136.65.236:12919
3.136.65.236:13648
3.136.65.236:13705
3.136.65.236:16280
3.136.65.236:16292
3.136.65.236:17755
3.136.65.236:17811
3.136.65.236:18766
3.138.180.119:11044
3.138.180.119:12759
3.138.180.119:12919
3.138.180.119:13648
3.138.180.119:13961
3.138.180.119:15925
3.138.180.119:16280
3.138.180.119:16292
3.138.180.119:17755
3.138.180.119:17811
3.138.180.119:18766
3.138.180.119:19155
3.138.45.170:10117
3.138.45.170:11962
3.138.45.170:12365
3.138.45.170:14402
3.138.45.170:14404
3.138.45.170:14954
3.138.45.170:15117
3.138.45.170:16837
3.138.45.170:16976
3.138.45.170:17021
3.138.45.170:19280
3.14.182.203:12019
3.14.182.203:12971
3.14.182.203:13651
3.14.182.203:14963
3.14.182.203:15046
3.14.182.203:15844
3.14.182.203:16462
3.14.182.203:17413
3.14.182.203:17553
3.14.182.203:18169
3.14.182.203:18236
3.14.182.203:19120
3.140.223.7:10813
3.140.223.7:14868
3.140.223.7:15544
3.140.223.7:15545
3.140.223.7:15725
3.140.223.7:16228
3.140.223.7:16471
3.140.223.7:17162
3.141.126.222:28280
3.141.142.211:10813
3.141.142.211:13173
3.141.142.211:14868
3.141.142.211:15545
3.141.142.211:16471
3.141.142.211:17162
3.141.142.211:19493
3.141.177.1:13173
3.141.177.1:15545
3.141.177.1:15725
3.141.177.1:15907
3.141.177.1:16228
3.141.177.1:16471
3.141.177.1:17162
3.141.177.1:18498
3.141.177.1:19493
3.141.204.47:28280
3.141.210.37:10737
3.141.210.37:14098
3.141.210.37:14868
3.141.210.37:15545
3.141.210.37:15725
3.141.210.37:16228
3.141.210.37:18498
3.141.210.37:19493
3.142.129.56:10809
3.142.129.56:11200
3.142.129.56:12166
3.142.129.56:14793
3.142.129.56:15086
3.142.129.56:16635
3.142.129.56:16697
3.142.129.56:17987
3.142.129.56:18577
3.142.157.76:28280
3.142.167.4:10809
3.142.167.4:11009
3.142.167.4:11200
3.142.167.4:12006
3.142.167.4:12166
3.142.167.4:12198
3.142.167.4:14197
3.142.167.4:14793
3.142.167.4:16388
3.142.167.4:17987
3.142.167.54:11009
3.142.167.54:11200
3.142.167.54:12006
3.142.167.54:12166
3.142.167.54:12198
3.142.167.54:13955
3.142.167.54:14197
3.142.167.54:14793
3.142.167.54:15086
3.142.167.54:16388
3.142.167.54:16697
3.142.167.54:17987
3.142.167.54:18577
3.142.167.54:19840
3.142.71.14:28280
3.142.81.166:11009
3.142.81.166:12006
3.142.81.166:12166
3.142.81.166:12198
3.142.81.166:12836
3.142.81.166:13955
3.142.81.166:14793
3.142.81.166:16388
3.142.81.166:16697
3.142.81.166:17987
3.142.81.166:18577
3.142.81.166:19840
3.16.105.95:28280
3.17.7.232:10224
3.17.7.232:11081
3.17.7.232:12295
3.17.7.232:13186
3.17.7.232:13451
3.17.7.232:13766
3.17.7.232:14564
3.17.7.232:14963
3.17.7.232:15046
3.17.7.232:17506
3.17.7.232:17553
3.17.7.232:17590
3.17.7.232:18089
3.17.7.232:18169
3.17.7.232:18236
3.17.7.232:19120
3.19.130.43:11009
3.19.130.43:12006
3.19.130.43:12198
3.19.130.43:12836
3.19.130.43:13955
3.19.130.43:14793
3.19.130.43:15086
3.19.130.43:16388
3.19.130.43:16454
3.19.130.43:16635
3.19.130.43:16697
3.19.130.43:17406
3.19.130.43:18577
3.19.130.43:19840
3.22.15.135:12919
3.22.15.135:13648
3.22.15.135:15925
3.22.15.135:16292
3.22.15.135:17755
3.22.15.135:17811
3.22.15.135:18766
3.22.15.135:19155
3.22.30.40:10224
3.22.30.40:12019
3.22.30.40:12178
3.22.30.40:12468
3.22.30.40:13451
3.22.30.40:13651
3.22.30.40:13766
3.22.30.40:15046
3.22.30.40:15844
3.22.30.40:16088
3.22.30.40:17553
3.22.30.40:17590
3.22.30.40:18089
3.22.30.40:18236
3.22.30.40:19120
3.22.30.40:19536
3.22.53.161:10771
3.22.53.161:11572
3.22.53.161:11962
3.22.53.161:12365
3.22.53.161:13817
3.22.53.161:14954
3.22.53.161:15090
3.22.53.161:15117
3.22.53.161:16295
3.22.53.161:16837
3.22.53.161:16924
3.22.53.161:16976
3.22.53.161:17021
3.6.115.182:11408
3.6.115.182:16440
3.6.115.182:16952
3.6.115.182:18640
3.6.115.64:11408
3.6.115.64:15504
3.6.115.64:16952
3.6.122.107:16440
3.6.122.107:18824
3.6.30.85:11408
3.6.30.85:18552
3.6.98.232:11408
3.6.98.232:16440
3.6.98.232:16952
3.64.4.198:10058
3.64.4.198:10264
3.64.4.198:10289
3.64.4.198:10875
3.64.4.198:11129
3.64.4.198:11180
3.64.4.198:12006
3.64.4.198:12059
3.64.4.198:12266
3.64.4.198:12673
3.64.4.198:12987
3.64.4.198:13674
3.64.4.198:13736
3.64.4.198:14322
3.64.4.198:15049
3.64.4.198:15728
3.64.4.198:16049
3.64.4.198:16130
3.64.4.198:16416
3.64.4.198:18763
3.64.4.198:18776
3.64.4.198:19738
3.64.4.198:19741
3.66.38.117:10146
3.66.38.117:10291
3.66.38.117:10705
3.66.38.117:11672
3.66.38.117:11713
3.66.38.117:12072
3.66.38.117:12180
3.66.38.117:12872
3.66.38.117:13090
3.66.38.117:13458
3.66.38.117:13730
3.66.38.117:14104
3.66.38.117:14453
3.66.38.117:14916
3.66.38.117:16320
3.66.38.117:16577
3.66.38.117:17297
3.66.38.117:17674
3.66.38.117:17752
3.66.38.117:18064
3.66.38.117:18168
3.66.38.117:18280
3.66.38.117:18528
3.66.38.117:18644
3.66.38.117:18736
3.66.38.117:18888
3.66.38.117:19161
3.66.38.117:19304
3.66.38.117:19905
3.67.112.102:10058
3.67.112.102:12006
3.67.112.102:12266
3.67.112.102:13674
3.67.112.102:13720
3.67.112.102:13736
3.67.112.102:14228
3.67.112.102:14307
3.67.112.102:14338
3.67.112.102:14577
3.67.112.102:15728
3.67.112.102:16130
3.67.112.102:16416
3.67.112.102:17569
3.67.112.102:17656
3.67.112.102:18050
3.67.112.102:18763
3.67.112.102:18923
3.67.112.102:19394
3.67.112.102:19964
3.67.112.102:19987
3.67.15.169:10097
3.67.15.169:10205
3.67.15.169:10352
3.67.15.169:10504
3.67.15.169:10649
3.67.15.169:11226
3.67.15.169:11680
3.67.15.169:11730
3.67.15.169:12322
3.67.15.169:12761
3.67.15.169:13850
3.67.15.169:13984
3.67.15.169:14625
3.67.15.169:14650
3.67.15.169:15504
3.67.15.169:15593
3.67.15.169:16929
3.67.15.169:17409
3.67.15.169:17882
3.67.15.169:18049
3.67.15.169:18065
3.67.15.169:18458
3.67.15.169:18762
3.67.15.169:18982
3.67.15.169:19169
3.67.15.169:19280
3.67.15.169:19345
3.67.15.169:19379
3.67.15.169:19729
3.67.161.133:10264
3.67.161.133:11129
3.67.161.133:12006
3.67.161.133:12059
3.67.161.133:12673
3.67.161.133:12987
3.67.161.133:13313
3.67.161.133:13674
3.67.161.133:13720
3.67.161.133:14228
3.67.161.133:14322
3.67.161.133:14338
3.67.161.133:14626
3.67.161.133:15049
3.67.161.133:15728
3.67.161.133:16091
3.67.161.133:16130
3.67.161.133:16684
3.67.161.133:18050
3.67.161.133:18763
3.67.161.133:18776
3.67.161.133:18840
3.67.161.133:19449
3.67.161.133:19987
3.67.62.142:10264
3.67.62.142:10875
3.67.62.142:11129
3.67.62.142:12059
3.67.62.142:12673
3.67.62.142:13674
3.67.62.142:13720
3.67.62.142:13736
3.67.62.142:14228
3.67.62.142:14307
3.67.62.142:14338
3.67.62.142:14577
3.67.62.142:15049
3.67.62.142:15728
3.67.62.142:16049
3.67.62.142:16091
3.67.62.142:16130
3.67.62.142:16416
3.67.62.142:17656
3.67.62.142:18050
3.67.62.142:18763
3.67.62.142:18776
3.67.62.142:18840
3.67.62.142:19394
3.67.62.142:19785
3.67.62.142:19964
3.68.171.119:10280
3.68.171.119:10291
3.68.171.119:10945
3.68.171.119:11553
3.68.171.119:12224
3.68.171.119:12420
3.68.171.119:12582
3.68.171.119:12786
3.68.171.119:12801
3.68.171.119:12872
3.68.171.119:13090
3.68.171.119:13458
3.68.171.119:13484
3.68.171.119:13730
3.68.171.119:13992
3.68.171.119:14000
3.68.171.119:14104
3.68.171.119:16211
3.68.171.119:17297
3.68.171.119:17675
3.68.171.119:18280
3.68.171.119:18313
3.68.171.119:18528
3.68.171.119:18736
3.68.171.119:18888
3.68.171.119:19161
3.68.171.119:19304
3.68.56.232:11288
3.68.56.232:11417
3.68.56.232:11888
3.68.56.232:12322
3.68.56.232:12761
3.68.56.232:14008
3.68.56.232:14650
3.68.56.232:16592
3.68.56.232:16970
3.68.56.232:17409
3.68.56.232:18211
3.68.56.232:18762
3.68.56.232:18807
3.68.56.232:19169
3.68.56.232:19280
3.68.56.232:19379
3.68.56.232:19458
3.68.56.232:19512
3.68.56.232:19729
3.69.115.178:10146
3.69.115.178:10224
3.69.115.178:10291
3.69.115.178:10384
3.69.115.178:10945
3.69.115.178:11553
3.69.115.178:11672
3.69.115.178:12072
3.69.115.178:12180
3.69.115.178:12224
3.69.115.178:12420
3.69.115.178:12582
3.69.115.178:12786
3.69.115.178:12801
3.69.115.178:12872
3.69.115.178:13730
3.69.115.178:13992
3.69.115.178:14000
3.69.115.178:14104
3.69.115.178:14453
3.69.115.178:14544
3.69.115.178:16577
3.69.115.178:17752
3.69.115.178:18064
3.69.115.178:18168
3.69.115.178:18280
3.69.115.178:19304
3.69.115.178:19905
3.69.157.220:10146
3.69.157.220:10224
3.69.157.220:10384
3.69.157.220:10945
3.69.157.220:11553
3.69.157.220:11713
3.69.157.220:12180
3.69.157.220:12420
3.69.157.220:12582
3.69.157.220:13090
3.69.157.220:13458
3.69.157.220:13730
3.69.157.220:13992
3.69.157.220:14000
3.69.157.220:14104
3.69.157.220:14453
3.69.157.220:16211
3.69.157.220:16320
3.69.157.220:16424
3.69.157.220:17297
3.69.157.220:17674
3.69.157.220:17882
3.69.157.220:18168
3.69.157.220:18280
3.69.157.220:18313
3.69.157.220:18644
3.69.157.220:18736
3.69.157.220:19905
34.125.123.200:5006
34.68.118.32:5050
35.157.111.131:10352
35.157.111.131:10504
35.157.111.131:10529
35.157.111.131:11417
35.157.111.131:12322
35.157.111.131:12392
35.157.111.131:12761
35.157.111.131:13744
35.157.111.131:13850
35.157.111.131:14008
35.157.111.131:14058
35.157.111.131:14625
35.157.111.131:14650
35.157.111.131:15593
35.157.111.131:16929
35.157.111.131:16970
35.157.111.131:17994
35.157.111.131:18211
35.157.111.131:18807
35.157.111.131:19280
35.157.111.131:19345
35.157.111.131:19379
35.157.111.131:19512
35.157.111.131:19729
35.157.111.131:19812
35.158.159.254:10610
35.158.159.254:11216
35.158.159.254:11353
35.158.159.254:11814
35.158.159.254:13008
35.158.159.254:13504
35.158.159.254:13876
35.158.159.254:13913
35.158.159.254:14090
35.158.159.254:14545
35.158.159.254:14898
35.158.159.254:15404
35.158.159.254:15450
35.158.159.254:15634
35.158.159.254:15651
35.158.159.254:15907
35.158.159.254:16728
35.158.159.254:17475
35.158.159.254:17497
35.158.159.254:17514
35.158.159.254:18069
35.158.159.254:18541
35.158.159.254:18714
35.158.159.254:18936
35.158.159.254:19184
35.158.159.254:19453
37.0.14.215:4676
37.1.217.131:3333
37.1.222.208:4444
37.120.159.237:5552
37.144.68.25:8080
37.147.137.225:3019
37.235.48.20:2022
37.38.244.230:1449
4.227.145.160:4444
41.102.0.15:582
41.103.11.65:999
41.103.17.182:999
41.103.172.79:999
41.103.178.158:999
41.103.180.209:999
41.103.60.237:999
41.104.37.66:5552
41.105.208.43:7896
41.108.115.221:1988
41.108.181.141:5552
41.108.184.148:1177
41.109.224.182:7896
41.109.251.66:7896
41.109.68.239:1177
41.230.155.2:1177
41.233.172.236:6522
41.238.101.232:1177
41.36.255.72:6522
43.245.199.210:5852
43.254.134.157:4415
43.255.241.81:5552
45.133.174.114:5772
45.141.26.54:1337
45.141.27.207:2004
45.151.88.101:4444
45.32.108.159:5552
45.61.48.65:8486
45.88.67.63:2666
46.1.54.232:5552
46.153.238.24:9090
46.246.12.12:1994
46.246.12.6:1981
46.246.14.17:8899
46.246.4.12:2815
46.246.4.2:2815
46.246.4.7:7777
46.246.80.9:2815
46.246.82.6:2054
46.246.84.5:8899
46.246.86.18:8899
46.246.86.3:2815
5.165.69.147:4444
5.227.248.32:7787
5.249.160.56:2137
51.103.25.183:5552
51.161.104.189:2837
51.222.15.27:222
51.38.112.16:13337
51.38.112.16:6522
51.68.160.90:5552
51.79.205.152:5552
51.89.91.139:5050
52.14.18.129:10117
52.14.18.129:11572
52.14.18.129:15090
52.14.18.129:16659
52.14.18.129:16924
52.14.18.129:17939
52.14.18.129:18436
52.14.18.129:19280
52.220.121.212:10881
52.220.121.212:15281
52.220.121.212:443
52.23.204.241:1177
52.231.142.87:1177
52.28.112.211:10610
52.28.112.211:11216
52.28.112.211:11353
52.28.112.211:11517
52.28.112.211:11814
52.28.112.211:12433
52.28.112.211:12756
52.28.112.211:13008
52.28.112.211:13642
52.28.112.211:13667
52.28.112.211:13817
52.28.112.211:13876
52.28.112.211:14090
52.28.112.211:15025
52.28.112.211:15232
52.28.112.211:15404
52.28.112.211:15409
52.28.112.211:15450
52.28.112.211:15472
52.28.112.211:15489
52.28.112.211:16409
52.28.112.211:16728
52.28.112.211:16977
52.28.112.211:17576
52.28.112.211:17809
52.28.112.211:17953
52.28.112.211:18018
52.28.112.211:18069
52.28.112.211:18402
52.28.112.211:18714
52.28.112.211:19184
52.28.112.211:19330
52.28.112.211:19376
52.28.112.211:19453
52.28.112.211:19817
52.28.247.255:10291
52.28.247.255:10384
52.28.247.255:10705
52.28.247.255:10712
52.28.247.255:10945
52.28.247.255:11553
52.28.247.255:11672
52.28.247.255:11713
52.28.247.255:12072
52.28.247.255:12180
52.28.247.255:12224
52.28.247.255:12420
52.28.247.255:12582
52.28.247.255:12786
52.28.247.255:12801
52.28.247.255:13090
52.28.247.255:13458
52.28.247.255:13730
52.28.247.255:13992
52.28.247.255:14104
52.28.247.255:14453
52.28.247.255:15192
52.28.247.255:16211
52.28.247.255:16320
52.28.247.255:16424
52.28.247.255:16577
52.28.247.255:17674
52.28.247.255:17752
52.28.247.255:18168
52.28.247.255:18280
52.28.247.255:18528
52.28.247.255:18736
52.28.247.255:18888
52.28.247.255:19161
52.28.247.255:19304
54.94.248.37:12024
54.94.248.37:12425
54.94.248.37:13305
54.94.248.37:13480
54.94.248.37:13496
54.94.248.37:14921
54.94.248.37:16984
54.94.248.37:17240
54.94.248.37:18728
54.94.248.37:19784
62.210.10.132:543
64.44.115.185:35999
64.44.167.136:57829
64.44.167.136:57830
64.44.167.136:57831
64.44.167.203:8579
65.0.50.125:22289
65.109.233.167:1177
77.73.131.250:5552
78.173.184.33:5552
78.173.186.112:5552
79.127.113.223:1177
79.134.225.59:7788
79.134.225.85:7080
8.208.27.218:1234
80.85.157.115:4441
81.163.98.210:7777
83.59.237.34:5553
83.59.239.120:5553
85.15.86.52:1703
85.253.68.72:1604
85.31.46.67:4432
88.237.125.214:2222
89.190.226.232:5554
89.3.24.168:50033
90.153.238.135:3030
91.109.178.10:5050
91.109.178.11:5050
91.109.178.12:5050
91.109.178.13:3333
91.109.178.16:1177
91.109.178.3:1177
91.109.178.4:1177
91.109.178.4:1212
91.109.178.5:1964
91.109.178.5:3973
91.109.178.8:1177
91.109.178.9:3973
91.109.180.12:5050
91.109.180.13:5050
91.109.180.17:5552
91.109.180.19:7896
91.109.180.2:3973
91.109.180.5:5050
91.109.180.6:5050
91.109.180.8:1176
91.109.180.9:1177
91.109.180.9:5050
91.109.182.10:7771
91.109.182.11:1177
91.109.182.12:5050
91.109.182.2:5050
91.109.182.2:5554
91.109.182.3:5050
91.109.182.4:5050
91.109.182.5:5050
91.109.182.6:5050
91.109.182.8:5050
91.109.184.10:5050
91.109.184.12:5050
91.109.184.3:1177
91.109.184.3:1338
91.109.184.3:5050
91.109.184.5:3973
91.109.184.6:5050
91.109.184.6:5552
91.109.184.8:1177
91.109.184.8:5552
91.109.186.11:3973
91.109.186.12:1194
91.109.186.14:5050
91.109.186.4:5050
91.109.186.5:5552
91.109.186.6:1338
91.109.186.6:5050
91.109.186.7:443
91.109.188.11:5050
91.109.188.12:1177
91.109.188.15:1177
91.109.188.15:5050
91.109.188.19:5552
91.109.188.4:5050
91.109.188.7:5050
91.109.190.11:3973
91.109.190.13:1177
91.109.190.16:5050
91.109.190.3:5050
91.109.190.4:5454
91.193.75.191:5900
91.193.75.205:2000
91.193.75.234:6857
91.193.75.242:1849
93.44.176.117:1604
93.56.127.246:5552
95.104.60.114:5552
hero9780.duckdns.org
mundoloco.duckdns.org

# Reference: https://www.virustotal.com/gui/file/00cb0795efc4104c5f4f121172a9728af0d5387cee5d8c7abf8e416f443acc05/detection

147.185.221.180:7582
23.133.216.180:7582

# Reference: https://www.virustotal.com/gui/file/2fce09a64c49609a4b60d0659c9602c991a057ed8673e4dfd1b884bee662b493/detection

54.94.248.37:14952
54.94.248.37:15400

# Reference: https://www.virustotal.com/gui/file/2fce09a64c49609a4b60d0659c9602c991a057ed8673e4dfd1b884bee662b493/detection
# Reference: https://www.virustotal.com/gui/file/d79ed8e107ad6f764b7ba3e6e4a112f64efaba597deb588d8b7a224f3e3d00b3/detection

18.228.115.60:13024
18.228.115.60:13417
18.228.115.60:14576
18.228.115.60:15337
18.228.115.60:15400
18.229.146.63:13024
18.229.248.167:13024
18.231.93.153:13024
54.94.248.37:13024

# Reference: https://twitter.com/souiten/status/1598552816511250432
# Reference: https://www.virustotal.com/gui/file/e98f7351f84480a4a0288f029031250142f46842d60ea87e8f85e6960f73b188/detection

23.237.25.120:8000
wins23novok.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9a2e865fa85a61a9c7cf364d17e3034b41fb851f0199033abe6a0d5585916c6e/detection

23.237.25.120:8002
prueba30novok.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f4ddd638a56ab3607b2ecbc00fe2130c0ece91b6e1d5c816b60ae9038ff217ce/detection

18.228.115.60:17376
18.229.146.63:17376
18.229.248.167:17376
18.231.93.153:17376
54.94.248.37:17376

# Reference: https://twitter.com/ScumBots/status/1602877117318008834
# Reference: https://www.virustotal.com/gui/file/3e693c7fe738b2daf0c196d9d1050384174007b37a9be4a797d16be0703d0d47/behavior

179.13.2.89:2023
proyecto23.dnsdojo.org

# Reference: https://twitter.com/ScumBots/status/1603046986076372993
# Reference: https://www.virustotal.com/gui/file/bdfd04c6f78ead0c29ccdb73c99a45c10061a7cd002971664b02d6f959a0062e/detection

181.128.229.194:7779
refuds.selfip.info

# Reference: https://twitter.com/ScumBots/status/1603054555192856578
# Reference: https://www.virustotal.com/gui/file/f88cca2794c39a528fe68f3b69f9f13d54846b089abb8e7b403b00d4d9050545/detection

181.131.217.190:2627
bendito2.con-ip.com

# Reference: https://twitter.com/ScumBots/status/1603062093468557312
# Reference: https://www.virustotal.com/gui/file/b634457ac0ddec74a691647b08aff04633119a49dce253141ef4fcaeee23f1c9/detection

46.246.12.18:3030
septiembre2022.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f19fa496adfdf43af3b6c66bf2f83a0b62ce14f32b710d708dfc4b10bd8fc752/detection

157.245.135.253:5794
ya20q23.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1603416922187599877
# Reference: https://www.virustotal.com/gui/file/2e3e15880f85f6fd78ee06033895d9fe68d4a229bf47e774d381d97cde666979/detection

179.13.8.247:8080
trictomm.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1603586791759642627
# Reference: https://www.virustotal.com/gui/file/182198163b1d17b3d5524bbe792b4546e404c00a5995e5f471371646a632bfe4/detection

46.246.12.11:2054
navidad202223.duckdns.org

# Reference: https://www.virustotal.com/gui/file/4064f2206af106da31eab7b7c2cdfa841e5b7269840a9654d7e95dd5e6856192/detection

132.sytes.net

# Reference: https://www.virustotal.com/gui/file/fa5eaee07a9904193e7356482c65b9985aca870bafed5d54c3258ad3e678174c/detection

fuckyourselfman.ddns.net

# Reference: https://www.virustotal.com/gui/file/8ef2d837736dfd03d3c444843eb2e24d46904c5989b5ee8dff1ad51051c17218/detection

jpmito.duckdns.org

# Reference: https://www.virustotal.com/gui/file/be6289b4f253cb131ce16d394832b6e7d58e0071c2c3e0a03df3cf8efbcd5ada/detection

tmr313.ddns.net

# Reference: https://www.virustotal.com/gui/file/fdb801888e1bafb180b07264a273234eab1719dae2605cfbb45d847e680026d9/detection

141.255.144.126:5552
gojib64084.ddns.net

# Reference: https://www.virustotal.com/gui/file/751ae8076b21f6a2448d384367e62192e1de1eca1a7ea859e849cc65b3c3d800/detection

94.129.51.202:1177
tmorh.hopto.org

# Reference: https://www.virustotal.com/gui/file/6887f00803c1110200b495ae8d36c0a850c4fc43c40c3b3a4c78038424ae26be/detection

0xy4hy4.hopto.org

# Reference: https://www.virustotal.com/gui/file/c37630631f0b7e6f6899aa57f8304eb72cba7060fa4ff94554f1a35d3fcfd614/detection

41.225.142.34:8080
0x1337.hopto.org
/0xp4n3el

# Reference: https://www.virustotal.com/gui/file/8bd6accd0ff93a160350855fd458cd53cf6af0a0593b3de40d10e5899c8367d6/detection

178.33.93.88:5558
123123123123.hopto.org

# Reference: https://www.virustotal.com/gui/file/998775cbd4a059044ef1aca6f40dd322eaac7f7a92035e45b5c8fed1a8ac4f44/detection

37.252.11.171:5552
1233211.hopto.org

# Reference: https://www.virustotal.com/gui/file/02cb1ba52483c9af931bd7852d54bbc50d279576c4bce60b20fe016b3b413a56/detection

45.138.99.2:2398
1234567890000.hopto.org

# Reference: https://www.virustotal.com/gui/file/99ef8aec2f28f3da1aa62025467b785551c4df81e5d9c1f66ea44850106ac336/detection

45.10.88.108:2288
1234567890123.hopto.org

# Reference: https://www.virustotal.com/gui/file/6e739ca63a185ae919c5bf5a17666915ed41a706043df7debdea9d6535c4c7f3/detection

1234567891.hopto.org

# Reference: https://www.virustotal.com/gui/file/292b5347f696a0728c6cddf36685954146584b0b33058c0a7d8ca876d42d31ba/detection

1234otavio.hopto.org

# Reference: https://www.virustotal.com/gui/file/97b4c1bd9eed15c71a5faaa72554814d3eebffb19ec514d39e81471db1ad4e4f/detection

194.38.20.82:3344
1234qwer.hopto.org

# Reference: https://www.virustotal.com/gui/file/64c222ecc50bbb1f7915835500b5fd11ec597d461eca812fcabbf1faca3c8a70/detection

197.52.104.70:5552
123ahm123ed.hopto.org

# Reference: https://www.virustotal.com/gui/file/00d80b858661a16024b16277d15bc6807292a7fc5df4e71c8645e332f6271d4a/detection

45.114.116.192:9292
123asd12sd1.hopto.org

# Reference: https://www.virustotal.com/gui/file/b5c29b6133524c23dd257593d9447c7570734e5a17a4435ddd8176e2f12d1473/detection

109.120.28.179:1605
123tesak.hopto.org

# Reference: https://www.virustotal.com/gui/file/8daeb21ea53696413ae22a2228ffefe424678a1953240d2c6ca9b62f3f40099f/detection

82.202.166.213:9294
1243.hopto.org

# Reference: https://www.virustotal.com/gui/file/187983659d6cf2e76b4929d0e015b2428a0ba6b3055d0f5f57fbfa2e6aed9ab0/detection

35.247.209.230:1818
1244.hopto.org

# Reference: https://www.virustotal.com/gui/file/00e3a64da6014086d1eace4e366fa05af5d17178f45c1dc5718428ec73a5710f/detection

213.110.133.165:7777
13372281337.hopto.org

# Reference: https://www.virustotal.com/gui/file/da98c876df78c7cb4007ca15e43f1490a7ba00962223eedf01fa16bf3ef1dab2/detection

13mystto.hopto.org

# Reference: https://www.virustotal.com/gui/file/4b8999e454cac2de749b470f2f90a159a13636d9de5b8fb42a271d105dbb44d0/detection

82.131.101.66:55

# Reference: https://www.virustotal.com/gui/file/541ed77540c39603a9cb562073ca5cb014498f639c59e26e4130bedc847d8683/detection

185.120.89.48:5502
18652598704211.hopto.org

# Reference: https://www.virustotal.com/gui/file/543fd262ff6b009896b4f7ac548b75e40ec635ff7d64118990d19159b0078b03/detection

20172017.hopto.org

# Reference: https://www.virustotal.com/gui/file/14a0eeb320a87608068a377d8a481aeafd2c57dc03a612026c5e5761bb1cb4d2/detection

187.40.200.237:1453
2019-bola.hopto.org

# Reference: https://www.virustotal.com/gui/file/9c34f8e0d0c287d2fee7e29a97a4db0a8537a9b18e34ec7853b3da135fb665d7/detection

141.255.167.104:6153
2020njrat.hopto.org

# Reference: https://www.virustotal.com/gui/file/eeeca6c4ea9af6256d3a6e8742e8049665dbd1babf4024857389549ee913f36f/detection

105.110.217.37:1177
213123.hopto.org

# Reference: https://www.virustotal.com/gui/file/f9c68c186e58b5d857a5ea00a4fadd2438bf3d7836466d59c13be6781daf7965/detection

128.68.96.37:7777
222.hopto.org

# Reference: https://www.virustotal.com/gui/file/61247ab05cb095abde755e16ea7a7f1ccb7486cd6efa3989fa0e55d0ddde7658/detection

94.243.196.190:7777
228337.hopto.org

# Reference: https://www.virustotal.com/gui/file/c9ef3cb3a6946237c6ebf455a866fc06c6c4b501460d7d929d18a471175847b0/detection

185.82.217.154:2788
2788.hopto.org

# Reference: https://www.virustotal.com/gui/file/9c367688f1a055513347b6d0995a451c2a595c7791199aed60a7ea70bcdc220f/detection
# Reference: https://www.virustotal.com/gui/file/c689d214089ef3ef0c324c0aa6831ce0bcbd1763498db050014fd0b5e2a92ece/detection

178.175.138.153:5421
2dz.hopto.org

# Reference: https://www.virustotal.com/gui/file/c26992552d39f13d8d2b2eb2c4237868a1a785b1acdbb6f6647834098d241a66/detection

128.70.167.130:1604
2gxcqz26022lesbl.hopto.org

# Reference: https://www.virustotal.com/gui/file/3099206cb7db28552e5614d387e390516eb193259b400c2f6c9197e3d509b592/detection

18.229.146.63:10272
18.229.248.167:10272
18.231.93.153:10272
54.94.248.37:10272

# Reference: https://twitter.com/ScumBots/status/1611393991236255748
# Reference: https://www.joesandbox.com/analysis/779262?idtype=analysisid#iocs

18.229.146.63:15538
18.229.146.63:15984

# Reference: https://www.virustotal.com/gui/file/e1e078162ba1f0fb4bb97c865e7ce17116553c4c3313b8e0041ff643736ef3f8/detection

055s4d5sldl.ddns.net

# Reference: https://www.virustotal.com/gui/file/f796271204370838af5ad68705231f47fb4ea7162a5965862be159eb3ca1239e/detection
# Reference: https://www.virustotal.com/gui/file/097b76d6453de6fda491ea4c16ce568cce7f15ec1a69a749ff64c20d7e8c8dc5/detection

141.255.151.243:6522
05bbfa3441.ddns.net

# Reference: https://www.virustotal.com/gui/file/c081517b4ba8211ca242b92c4ebc2261e00fd1bfd2b6d43d1ff367912fe56356/detection
# Reference: https://www.virustotal.com/gui/file/bac3f1c040e209d48a5fd59cad0bdcc7978f47301874c5a2aac9211ecc948855/detection
# Reference: https://www.virustotal.com/gui/file/8b8818294823cdc2125e3568ac2e49e5e2dcee7b142023551a2945f63fb4a1f7/detection

197.26.123.62:1177
0666.ddns.net

# Reference: https://www.virustotal.com/gui/file/e403b2cff02ccfecb92c8b08577f7fcc768f6545d4b48cf3d43db96158729bae/detection

142.154.41.240:5518
199.66.93.128:5518
00i.ddns.net

# Reference: https://www.virustotal.com/gui/file/0c26ee4e8ac0c5e17346516fde2ef0fdc60fad2d2f057ef2287a379cf398a75d/detection

87.222.90.30:8766
0block32.ddns.net

# Reference: https://www.virustotal.com/gui/file/e772a9ebe53bf5db5b4a8c3cbd56c84aeaa9abc5f35d4d5b4f184d362de2a0e5/detection

125.180.175.168:1
3123.p-e.kr

# Reference: https://www.virustotal.com/gui/file/c419b5279bcbe2a366cd7a17964e0bca36090f2b71d61c5f27bf501cbfc96ed9/detection

182.212.80.196:49747
31.p-e.kr

# Reference: https://www.virustotal.com/gui/file/a79d6af6babee6f7e025169a7a2570e1fd43194e97fe43b10f548122eb2c1795/detection

aaaaaaaaa.p-e.kr

# Reference: https://www.virustotal.com/gui/file/e07c0665138a8bdc4541c0dbc658a8d1d2ab4354862758370a090d98c2e1f6f9/detection

61.253.140.156:6060
asdml.p-e.kr

# Reference: https://www.virustotal.com/gui/file/e7612db482896950612635fdc8e65df59af6afbe9f80abb1f1f6a211f3a86292/detection

14.4.186.90:5552
asdsadsadada.p-e.kr

# Reference: https://www.virustotal.com/gui/file/a0bb47a875a644c40312b89f59549f69a56ae7fcb2522247eff904492a1e14cf/detection

156.234.68.100:5466
beracon.p-e.kr

# Reference: https://www.virustotal.com/gui/file/fb26de34391aba318c7806d64a84b0e859911db7f6b3011e29cf4039b8612315/detection

108.160.138.234:2090
botsbuy.p-e.kr

# Reference: https://www.virustotal.com/gui/file/59f0b4ebb3aa47c20c7d3c0e9e5ff496d55e49e739df4d20d7399f2b5c413f60/detection

182.216.160.125:1
cronos.p-e.kr

# Reference: https://www.virustotal.com/gui/file/a84caf5bdd26a54bd43589e1e02e5f5f5fc21a7ed464ad9bcd56473a9187e657/detection

myanotherego.kro.kr

# Reference: https://www.virustotal.com/gui/file/50a18fb52b200c10b598b8cb59a5ab27de9f9dddb42669073cc4931a4f86d60a/detection

121.135.18.217:2000
00000.kro.kr

# Reference: https://www.virustotal.com/gui/file/4a3f1a24e0834716f826239446f5562000a032c4049ed1292049ef5773c214a6/detection

14.41.107.124:6522
0372949.kro.kr

# Reference: https://www.virustotal.com/gui/file/723eabd5e94021be676e42688e2c3f53655824678f5debb237192dd478efb79b/detection

112.173.121.122:9999
04130713.kro.kr

# Reference: https://www.virustotal.com/gui/file/efbeb95075372fa5dee86fb620505a2597fc3881bcab061c014faeb5c87d7309/detection

58.120.172.98:1
0suk.kro.kr

# Reference: https://www.virustotal.com/gui/file/9f29c4bc105d28eb72b99e9820ed802aeaadfeab561fc865cf514aea30d34a6a/detection

180.83.51.85:8080
0xb10568f5ba.kro.kr

# Reference: https://www.virustotal.com/gui/file/2d57094c23ab028f9e60246ae2778ed18c9a82987121bc6dd0522519c8461a78/detection

1513.kro.kr

# Reference: https://www.virustotal.com/gui/file/f10020a1a5f5481e76faf6fc83ba6c0139752a8bb894db0a44b0a4b9b34b5bbe/detection

180.69.143.247:2222
197ddd.kro.kr

# Reference: https://twitter.com/h2jazi/status/1613586314749775877
# Reference: https://www.virustotal.com/gui/file/360ead71ece913d158114411716f0762e186f3544cc8addc1d6fc91897448bfd/detection
# Reference: https://www.virustotal.com/gui/file/1216e4a8ed3e79a18937f07234b2b50311630641be978973b9ae1e11cafe82f4/detection
# Reference: https://www.virustotal.com/gui/file/1e1c070a0f2d2545be43e14814124b18bb46f458fb7f66e51c6a6a426f8ad4da/detection
# Reference: https://www.virustotal.com/gui/file/cf3fa450ee6a5df68a822168aa6b8abc408aa99291bfe2f38fe756e7e2483a5f/detection
# Reference: https://www.virustotal.com/gui/file/e19e990829ec855b168d1dcc9233a65191adcf91aece191977d5397f03adfa11/detection

104.250.169.34:2525
45.74.0.162:2525
45.74.0.163:2525
45.74.7.19:2525
2525.libya2020.com.ly

# Reference: https://www.virustotal.com/gui/file/0856427e08b8900fc43f185c1b64be16c4fa7dd4d17bfdc58fa97e398de46ad2/detection

141.95.84.40:1337

# Reference: https://www.virustotal.com/gui/file/9b8ec99af2deb98405ec091c6cecc312899244d5f42af58d9f2debfbfccb3b73/detection

141.95.84.40:3079
141.95.99.22:3079
15.235.53.10:3079
161.129.66.224:3079
67.214.175.69:3079

# Reference: https://www.virustotal.com/gui/file/5c1dcd24e4687d75756c3c94e46445a436981fbb7ac21515a5b4f7ea3c09c1c8/detection

141.95.84.40:3002
38.79.142.66:3002

# Reference: https://www.virustotal.com/gui/file/170dc852197286642dbfa3f8fe1d8ddedfa2fe26c836c41f07fd9854a1b312bc/detection

141.95.84.40:3009

# Reference: https://www.virustotal.com/gui/file/6bddb592e3b006a2e526bf7d3ff8f94f03b3e25897cea915960e648ef48869b3/detection

javaoracle.hopto.org

# Reference: https://twitter.com/ScumBots/status/1617622129372979222
# Reference: https://www.virustotal.com/gui/file/0016d12f15f1d7f0f89dbcb14f724fc9d77a0d8df8ebbb49d0b9d8d62a4067ee/detection

18.229.248.167:11664
54.94.248.37:11664

# Reference: https://twitter.com/ScumBots/status/1618943735227613184
# Reference: https://www.virustotal.com/gui/file/848d2b13244077e886eb2d82de5811f8e6a3e8df67784a21f0078ea2fa8f856f/detection

46.246.4.3:415
matarife.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1619064531363237911
# Reference: https://www.virustotal.com/gui/ip-address/181.141.6.119/relations
# Reference: https://www.virustotal.com/gui/file/58da30c1f79e0d3450fdbc7683337fca0c404773019c37f5d27cadf0293c27d1/detection

181.141.6.119:2019
carlitosmoreno1790.duckdns.org
carlitosmoreno1791.duckdns.org
carlitosmoreno1792.duckdns.org
carlitosmoreno1793.duckdns.org

# Reference: https://www.virustotal.com/gui/file/00039b2a266f85901386cf2f76a01a028c82719528e1d5e771036bb0e5e10b88/detection

213.183.58.4:5558

# Reference: https://www.virustotal.com/gui/file/15d5605f08420bd6b2ed02d9e08885e442c3f3e0bd4423b2ca7450f593799963/detection

46.246.86.17:2054

# Reference: https://twitter.com/ScumBots/status/1620891568851886093
# Reference: https://www.virustotal.com/gui/file/b7b0b7eeec44ec80f82a9bf0a99fe471898e0106a2541ba5eb5a48d7ce3a48be/detection

46.246.6.22:2815

# Reference: https://twitter.com/souiten/status/1621038364509229056
# Reference: https://www.virustotal.com/gui/file/9d691f77914108232b4f6c36ae4e2a8d2a0efece5874044cd24b6668e5623a7c/detection

91.192.100.6:1986
env2023nue.duckdns.org

# Reference: https://www.virustotal.com/gui/file/4f48cce2f95299daf621eb8524edb0c21ff9628337a09047e6b527882bc441b0/detection

156.204.180.55:5552
qwerhack.ddns.net

# Reference: https://www.virustotal.com/gui/file/71a683ed12bd4d0fccbeb7d093ed78436ef0f5e6089d286d16994998d9f82dbc/detection

18.228.115.60:19513
18.229.146.63:19513
18.229.248.167:19513

# Reference: https://twitter.com/ScumBots/status/1623367887271432201
# Reference: https://www.virustotal.com/gui/file/11ad2567eac856e69a0e013936830a52614caa6b3a1e2da4ca8ad08c995b72c0/detection

46.246.12.6:1981
cachi.duckdns.org

# Reference: https://www.virustotal.com/gui/file/cdc5d37977496357492a527b84917e893c9fef589bccad7854e60571c2263460/detection

noip12345.chickenkiller.com
noip12345.crabdance.com
noip12345.craftx.biz
noip12345.sytes.net

# Reference: https://www.virustotal.com/gui/file/763deca7a53fc621684b5aff4f1b049f026a41642600a0b03e6ce285d7128306/detection

193.138.218.162:24507
dvjhg.theworkpc.com

# Reference: https://www.virustotal.com/gui/file/0b239bcda208b05bcd35079aa1583c3dd8ab0a7ad9ef420be899650d8f16abcc/detection

41.102.0.15:582
infra02.ddns.net

# Reference: https://www.virustotal.com/gui/file/6bbaa6a2c3169548a607bfeed0fe2f7562790c06d24ba54edb3376dbadb8a7cc/detection

79.134.225.126:7080
cryptoban.ddns.net

# Reference: https://www.virustotal.com/gui/file/6212534947a40f8276316d2c766695f2862e01c6734608f36713c852b56c045b/detection

46.246.4.12:2815

# Reference: https://twitter.com/peterkruse/status/1631568084413689862

njmorado1963.duckdns.org

# Reference: https://www.virustotal.com/gui/file/21ff346dc78d3dd4c0d6c3d00cd6c4ad94bc48546fe3cffed0ada390602f2967/detection

46.246.12.5:5552
freetime.theworkpc.com

# Reference: https://www.virustotal.com/gui/file/23433a2e32f56b0c2458dd2b22ab21c4343f99b7a049ac51d2d6ceefbd1fc150/detection

46.246.14.17:2020
rusia.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1a963a6b754c2b7b48e6c5284d8dba72ac0932be1e2681996198c85e34c63e4c/detection

91.109.178.9:5555
nikintcputa.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e7672c149b6b541b249b105348f988d1c4687cff90e1d505975a1556f9dff898/detection
# Reference: https://www.virustotal.com/gui/file/4c5e683d0f7fe39191c27dc13a6628ab828e215b56839a6d057a411b41fc6921/detection
# Reference: https://www.virustotal.com/gui/file/3a326f0612b5b169d4bda6ce8186377bd5a0172748c6b5f27b4c84f730191a69/detection
# Reference: https://www.virustotal.com/gui/file/f0fd717ab38b74846980c9edd434913c78ccca6ac79d9abf9c442bfb70b207a7/detection
# Reference: https://www.virustotal.com/gui/file/f0ec806acb15a30aa894bf90f3fb50ffc10b805ee1e20ba53da0ac49aaff34d5/detection
# Reference: https://www.virustotal.com/gui/file/d9369bd9562f258436e9d125fe82c7f31853029d9dde7b714fb95d8c7934f4cf/detection
# Reference: https://www.virustotal.com/gui/file/d7300565ec86b6e28a7d3b66ce7e18877b47769ca25e4696324924a20f5e864f/detection
# Reference: https://www.virustotal.com/gui/file/94798b4e9bbe2a2794d544b986ed52bd7cf1c296b9506b457c57aa8b217f50ad/detection
# Reference: https://www.virustotal.com/gui/file/7e1c9ca346e13d6317b0b10fb0a8d6efc1b7f4c045da758a11326a9be2f74774/detection
# Reference: https://www.virustotal.com/gui/file/273c993e8cd091515f659b93419cc310f856a72dcdd5059c7b3adea1cf466c81/detection

46.82.174.69:5552
87.71.13.126:5552
87.71.84.177:5552
91.109.178.9:5552
91.109.186.12:5552
91.109.178.13:5552
91.109.178.9:5552
91.109.186.8:5552
91.109.188.9:5552
91.109.190.4:5552
91.109.190.5:5552
123456789l.ddns.net

# Reference: https://www.virustotal.com/gui/file/bdaab27499ad7c7fded45f175fe80dbe9e620be8f5a0680a8b16d20790a882ee/detection
# Reference: https://www.virustotal.com/gui/file/b33d856d675d1e414c7448ed5fadf38f981b7bcf6f42b3c7ecfdf76d3e1fe157/detection
# Reference: https://www.virustotal.com/gui/file/b25adf4231c15458618cfa0330fa682bbc29ffe53d586b3dfc9b9920d28b6792/detection
# Reference: https://www.virustotal.com/gui/file/772b276e36074dfde178fb53057364fb18fdcd472291036a299304395bacd70a/detection
# Reference: https://www.virustotal.com/gui/file/6811d74a9d7851eaf2b00fd26cc6fe60ad690882776b85fc7272170c3d7e8d76/detection
# Reference: https://www.virustotal.com/gui/file/3890e204d0d65a2e428bf4dc32d2e2b6e39d60e469b231d5cded8d0aa139ab63/detection

188.236.137.150:1177
188.236.184.134:1177
37.37.123.9:1177
91.109.176.6:1177
91.109.184.9:1177
91.109.188.4:1177
91.109.190.5:1177
afmrx.ddns.net

# Reference: https://www.virustotal.com/gui/file/4c03d895d318059c816596cf98d452d8892396c732d08e4b7fba7ed71fb17bb5/detection
# Reference: https://www.virustotal.com/gui/file/ae9090cab682e2e53dbb1fac115a3db105e100ab4d34838ac64ec43d921a2fd4/detection
# Reference: https://www.virustotal.com/gui/file/a1ce71bed43b9ff9ded31a631a3a2c5a1b9d40dca03aac3e4ac0549791a843fe/detection
# Reference: https://www.virustotal.com/gui/file/857b6350e171d9c80440d308da6cc9bbe0da04965e6157e3a5c4282d91afdb6c/detection
# Reference: https://www.virustotal.com/gui/file/73100d9193b9fc96ee8ea3573561a7f6f5434d3b9562cb519b90ae72b390c207/detection
# Reference: https://www.virustotal.com/gui/file/2a0548b2c35aa9e89688292e7a89b9ecd079d3382c3f6379747f70ed7ddffbcb/detection

102.41.215.30:5552
102.41.216.11:1177
102.41.216.11:5552
156.203.43.194:288
156.203.43.194:5552
41.42.243.69:5552
91.109.176.10:5552
alitalip76.ddns.net

# Reference: https://www.virustotal.com/gui/file/f20237b8b65d9235a0bd0dfb82d57f9e5b0d815416d88428b640cb04ba9e2a51/detection
# Reference: https://www.virustotal.com/gui/file/d7121c3d28273bfa76fb9281a79ddcf5344a50fd38f0402f808e45b72d989756/detection
# Reference: https://www.virustotal.com/gui/file/8972996d731c36964ccb76bd7616bb48104832c338c85ba30e879c84a8ce8120/detection
# Reference: https://www.virustotal.com/gui/file/817b29d4fd82f0e316a6aadec551210572d6dac7337696cdb2a75a48badd25a1/detection
# Reference: https://www.virustotal.com/gui/file/515d48bc251b4d29dfb35b0445d776f1230c2419c28a16da401e6d7690c0ff61/detection
# Reference: https://www.virustotal.com/gui/file/134678f29802b4d1195c8eeb0c1f8ffe8506dc3bf737b5ebd77a357c575685c0/detection

85.108.117.178:1122
91.109.176.5:1122
91.109.178.3:1122
91.109.178.9:1122
91.109.184.3:1122
91.109.190.14:1122
91.109.190.5:1122
anjfkie84uj.hopto.org

# Reference: https://www.virustotal.com/gui/file/3b9f26640b9687c3de1ebdf17a25a8028af3a35d144f17c5c7f1ee3e53960836/detection

91.109.188.2:1177
anonymousfp.duckdns.org

# Reference: https://www.virustotal.com/gui/file/fdaf03bc71974bb17db7ab9538bf9304c9bdcc02c2b124d8b52f4e79f478fc51/detection
# Reference: https://www.virustotal.com/gui/file/d6863d8a10efb057a3d425e0994b0f00dcb6c905b55bc3b6fd2bc30ec77c9677/detection
# Reference: https://www.virustotal.com/gui/file/d40e3b22392ba5c75f9b3a4dcfc5b1e51b466a2ec090d5e601e15f4421a38bf4/detection
# Reference: https://www.virustotal.com/gui/file/83304d39f476124bf71e6f95ab95e142e393fb75a63500d561e067392cf8b907/detection
# Reference: https://www.virustotal.com/gui/file/7abba93f49ba74fce527920cb29a4fe93e8ec16b74e1e0b39ec2bcb12a2b9489/detection
# Reference: https://www.virustotal.com/gui/file/68d430b1e10c20c1de02cec1a3a4adcb3cb9a2cb015468cffb91e5ca27a9b870/detection
# Reference: https://www.virustotal.com/gui/file/30e3925488ebeb569aeab1630fd040139faa758b32fe57dfa4527474a9631aa4/detection
# Reference: https://www.virustotal.com/gui/file/0a5d21315c5b1a5b9fe3846e732d034da2aaad578be4ef17514bedabbd827f2a/detection
# Reference: https://www.virustotal.com/gui/file/04d8508685f84464ac8853543dbeccb74a58522bb03d7b170974ab6de7a1c36a/detection

141.255.147.90:7
77.137.2.59:1155
77.137.2.59:55552
91.109.178.6:1155
91.109.182.6:55552
91.109.182.7:55552
91.109.184.5:1188
91.109.184.5:5552
91.109.188.12:55552
91.109.190.2:55552
bachir7.ddns.net

# Reference: https://www.virustotal.com/gui/file/c3feb87b21234cffe6c89e00134c848c8dd588a51b6091f2b67d54d4891de7a3/detection
# Reference: https://www.virustotal.com/gui/file/803750ab09794edcbabd0cd349042a608854910aafc70d2867d7f3400203be55/detection
# Reference: https://www.virustotal.com/gui/file/33431d6914d15cd2d4942eeb3cbcabc5997cd37d897796a0b0b095ee625383dd/detection
# Reference: https://www.virustotal.com/gui/file/1f244c4c093c1daa7c24d73eac62b3279032ef3f90e6ba0c29a82d0307e87f59/detection

91.109.178.5:1212
91.109.178.9:1212
91.109.180.10:1212
91.109.188.6:1212
bxytuto.duckdns.org
clearz7zz.duckdns.org
creater1.ddns.net
davidsins.ddns.net
dc1.ddns.net
ee12ss.gotdns.ch
essai2.3utilities.com
googleevluod.hopto.org
hack7.ddns.net
heloo1no.ddns.net
hemo3.ddns.net
httpb.duckdns.org
iratscammerslol.freemyip.com
kizimada.ddns.net
knorx.duckdns.org
kurd.noip.me
legit.ddns.net
maxstell321.ddns.net
milla2.ddns.net
mnxzhg.servepics.com
modsupport2006.duckdns.org
mr1hema1.hopto.org
nikintcputa.duckdns.org
nourvip.publicvm.com
osaam2014.ddns.net
outlaw.publicvm.com
rlk123.duckdns.org
sadad-mdfoaat.ddns.net
saiwanpro.ddns.net
shop20192020.ddns.net
sky8888xxx999sky.ddns.net
swisscomch.duckdns.org
trollzin.chickenkiller.com
truck-man.ddns.net
vuvu02321.ddns.net
w7xyomaislouco.duckdns.org
whatsapp.webhop.me
wizz.hopto.org
wolfspnet1.ddns.net

# Reference: https://www.virustotal.com/gui/file/611d5a9534b98a97b7e926b5ef03793a75d7190d6c02995f8feeb12f75489055/detection

212.87.204.83:5552

# Reference: https://twitter.com/ScumBots/status/1633242954755375105
# Reference: https://www.virustotal.com/gui/file/e05a921cb0193db227eab1d08459541252a91d603f4259aa75d0fd821fc6f25f/detection

46.246.86.4:5143
lavidaesbella202351.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ae8a19111dcc0b707fab05a94d6a712a7912f7ec99c6d11d403dc6b901d84d85/detection

172.111.136.105:8092
adminazul.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b3bf0d040723a646920394e69b341d5f686bdbee4f5ac2c7e62b5e919b1c8bef/detection

181.206.46.140:5000
nj-zul-09-11-22.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0ad08fcc29eb4b50a8e333d1aa7eb48dac633daf7456e83f3e6a77522c9efd22/detection

181.136.184.210:8989
ecuadorcity.duckdns.org

# Reference: https://www.virustotal.com/gui/file/dbb440584f6254ebc0e7ae59ff74f9b40581c8d2755c865b2c8073ae2a6e1baf/detection
# Reference: https://www.virustotal.com/gui/file/d3fb0d9110c11ef7bee3feea888a87ec46c25c2e722aad2c6d321d7e21b8aaae/detection

181.141.1.250:6503
190.147.63.63:6503
skandia.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5438dbc3d6f125a85ebf05983ecde1701fb963f8f49171f7d87d1c80c01002c2/detection

128.90.115.55:2798
telorino.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d670b5acb546cf635eadcee6de31da861e1af7fb27a3da07373939e2ccf71e17/detection
# Reference: https://www.virustotal.com/gui/file/2d9903698f3dc172af1a7e15a9111acc4c3a6d5dd8f6e7ffd6d6428384f45129/detection

46.246.4.13:2158
46.246.6.22:2158
46.246.84.12:2158
njacs.duckdns.org

# Reference: https://www.virustotal.com/gui/file/bbe7b0534d7fdcf6b5b5352dbf5a062925aefd940a50ba5bf8e8aeebafc95d8f/detection

181.71.216.77:1958
bendecido58.duckdns.org

# Reference: https://www.virustotal.com/gui/file/4c66dad945b2e0196f5dd9a86a81e34f3d326d3eaa369ee3ac1dfda930ec7576/detection
# Reference: https://www.virustotal.com/gui/file/31a07836cf62279a2413bda741834d24cabb646394fdf70c4f165162a4404f21/detection

http://45.57.245.101
46.246.26.10:3051
46.246.80.15:1980
clik1980.duckdns.org

# Reference: https://www.virustotal.com/gui/file/bfc18427ad8b9968af60e235e77eca9e911791bff9fbd0a8f9fab080644e678f/detection

46.246.6.12:1980
nlucex.duckdns.org

# Reference: https://lab52.io/blog/apt-c-36-from-njrat-to-apt-c-36/
# Reference: https://www.virustotal.com/gui/file/751c22494fa2fefd865efe91a6ef20930b8ee0197d36c7072fead216aca5853b/detection

46.246.84.21:1994
enero2023.duckdns.org
fortuna777.duckdns.org

# Reference: https://www.virustotal.com/gui/file/502ccd94a1e7744941ab2bc6ee448107b17d026490cfdf7c02146045088efa18/detection

18.228.115.60:16664
18.229.146.63:16664
18.229.248.167:16664
18.231.93.153:16664
54.94.248.37:16664

# Reference: https://www.virustotal.com/gui/file/28e8fa60cb51cc2a6700666f5b659b117fde7a097e3bde08b63543c92d1566cb/detection

18.228.115.60:16664
18.229.146.63:16664
18.229.248.167:16664
18.231.93.153:16664
54.94.248.37:16664

# Reference: https://www.virustotal.com/gui/file/27d7942099c932c0091ae518341193d28d06ac7b5efe0b548499be25217f046f/detection

3.125.188.168:10930
3.67.15.169:10930
3.68.56.232:10930
35.157.111.131:10930

# Reference: https://twitter.com/ScumBots/status/1636595044596547584
# Reference: https://www.virustotal.com/gui/file/546d7be50a9f2e5172fe46d3e20031f8d743d1f1cca29a432dfa3df9d109e292/detection

3.13.191.225:17506
3.14.182.203:17506
3.22.30.40:17506

# Reference: https://www.virustotal.com/gui/file/46ea8061668df7c3ba14092e752cee86cd2d0410dcb7085e5626d5865a4354fc/detection

18.228.115.60:14240
18.229.146.63:14240
18.229.248.167:14240
18.231.93.153:14240
54.94.248.37:14240

# Reference: https://www.virustotal.com/gui/file/a89946e9a909b4f13fade2c8a9e42e715877d6cb84e6a43b452c8c38c7d417c3/detection

18.228.115.60:14921
18.229.146.63:14921
18.229.248.167:14921
18.231.93.153:14921
54.94.248.37:14921

# Reference: https://www.virustotal.com/gui/file/3a07daefd68fc95fa0ab44882ea966fb45969015e49914a5e3ca4abce43aff54/detection

18.228.115.60:15953
18.229.146.63:15953
18.229.248.167:15953
18.231.93.153:15953
54.94.248.37:15953

# Reference: https://www.virustotal.com/gui/file/e235fa50b2fd6764c53eacb33714815824f4d0448fd5c6ac5ff6d6877eb66891/detection

3.128.107.74:16052
3.131.207.170:16052
52.14.18.129:16052

# Reference: https://www.virustotal.com/gui/file/d11cc7508d420994e19a1df2327d313303117948b62d386b00d8120e17666be7/detection

18.228.115.60:12257
18.229.146.63:12257
18.229.248.167:12257
18.231.93.153:12257
54.94.248.37:12257

# Reference: https://www.virustotal.com/gui/file/4b54fe5466cde6d4b3082cd5809aa4741c5741ab3bf682c54dd6a07fba2241a6/detection

185.70.104.58:6857
91.193.75.234:6857

# Reference: https://www.virustotal.com/gui/file/7b60b49bb3a7c410268d4784ad66432b1d1599066f08eb4a352479f350b9a715/detection

181.141.1.67:2010
verderesilencia.duckdns.org

# Reference: https://www.virustotal.com/gui/file/741e8ee05169f46b6e86b9959320f13865aca2b3507f6bccc891af78e0bfacf3/detection

181.141.1.67:2009
resilencia2023.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c91396295344d30392af37b3cd3e62b5e76f6729e598e97bdf1f0c7db0ce6334/detection
# Reference: https://www.virustotal.com/gui/file/96d781bee5fb01ff1f6e8b9395511acf929ec0d5bf1067a45d194a22c98c8a50/detection
# Reference: https://www.virustotal.com/gui/file/190f861821f7db7c349899498807f9de14534386c89c8018eb13a9807997084a/detection

88.170.200.74:32768
njrat.freeboxos.fr

# Reference: https://www.virustotal.com/gui/file/f5105dd4273c18d0c5368e4345e4207e736875aa3edcaf94d1f49679f06a3e36/detection

88.127.106.242:32678
njrat2.freeboxos.fr

# Reference: https://www.virustotal.com/gui/file/f51c887cf46d6b1f7ea4865359db9151689c185fe89c3ca76edada34a828cda3/detection

78.230.224.39:5524
njrat55.freeboxos.fr

# Reference: https://www.virustotal.com/gui/file/4c2fbd350ddc2fb5ef70ba737de8b9cc9189147ba1a7a210df7a7f52f636efd8/detection

31.166.93.56:5552
tesdhacke321.ddns.net

# Reference: https://www.virustotal.com/gui/file/4e0003a91e56586c4ef9be27b9ef4689291f8548d29644809711c371b0a4c0e9/detection

rap.servegame.com

# Reference: https://www.virustotal.com/gui/file/f992830e9ea85867dceb3bb510420545fded1c2f769f7269960559ab80da7bce/detection

104.237.252.34:6440
194.187.251.155:6440

# Reference: https://www.virustotal.com/gui/file/59b4af2cac78ae4f86a4a9b963bff9f6250ccd6abcf48741a8492b670b979602/detection

18.228.115.60:19057
18.229.146.63:19057
54.94.248.37:19057

# Reference: https://www.virustotal.com/gui/file/b89a23a48291ff461066119159de8c48eaa1179ceabd422b528b44a5d215d255/detection
# Reference: https://www.virustotal.com/gui/file/48b724a4671eeff59c3e04ad7208ec3f6b5f57b19fb9b1353ad3860638b615ef/detection
# Reference: https://www.virustotal.com/gui/file/31fdf07a27b32a2d6bee31d06b5945ddddcedafef3b61272e6b9b9622e003d32/detection

20.90.10.6:1177
91.109.186.7:16521
91.109.186.7:4444
93.46.8.90:1177
2avv.webhop.me
gghh1954.ddns.net

# Reference: https://www.virustotal.com/gui/file/90e83393be506e22153e067c0431a85b35cfd6f61e2f4435e0986a1e29b806ca/detection

91.109.186.4:1177
91.109.186.5:1177
91.109.178.10:1177
milla11.publicvm.com

# Reference: https://www.virustotal.com/gui/file/62296a15cefca28272b06a9d71334ecb048b323dacf3ac15f2149c547a0559bf/detection

51.142.140.85:5050
91.109.182.3:5050
91.109.186.4:5050
millaa.publicvm.com

# Reference: https://www.virustotal.com/gui/file/111bea5eb34f2dfb02beb34c5079bfed5a97cfd4c2059bad6ea3927c9c9514ac/detection

91.109.186.3:1194
projetotroia.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d064927313fab724be4c94af7dff673f1a603dcfdb6e0d8be5406c13b3478753/detection
# Reference: https://www.virustotal.com/gui/file/6cdd79489fd6aef3aee187e1a993bd3bcc669fb705456359ea605bad480adcbf/detection

94.47.24.23:1986
94.47.24.23:963
puros.ddns.net

# Reference: https://www.virustotal.com/gui/file/89b40df0b1ec9322695558f07120ecf34122217edb5970646cbc9940c65d0347/detection

141.255.150.82:8181
196.75.215.136:8181
razanben2.ddns.net

# Reference: https://www.virustotal.com/gui/file/6818a0e81119f75375e4e63469ccf736f9e31aaa250f4b1c5336e8ce2dced5fa/detection

197.39.212.179:4545
romeo55555.ddns.net

# Reference: https://www.virustotal.com/gui/file/0cbe101ea48836e800109edf73f1c04aa579c077de23e3c2928eb61026ca1b53/detection
# Reference: https://www.virustotal.com/gui/file/1f3fa500fe1c62e70d9a62f6cc006eeb54073aa334fd6708d5680a727a2c3ce1/detection
# Reference: https://www.virustotal.com/gui/file/7300b8f99b91d7946f3cd6d9ea593cc9e2076dce72a02ba290b2d74b21a8fe22/detection
# Reference: https://www.virustotal.com/gui/file/ac7440be4cce00e38eca6789d3a372e58dfff32da9f5b5bd4e7529ee3b82bf1e/detection

37.238.235.10:1177
91.109.188.2:1177
91.109.186.4:1177
xss.hopto.org

# Reference: https://www.virustotal.com/gui/file/4b36165a51554a20acd29fec9332cc719a72c659208ea48086e53421ec19a404/detection

185.254.97.165:5552

# Reference: https://www.virustotal.com/gui/file/a3ff8ffdbf04d86290921fc907056c234df14f9d69083845a64bc59df7f9254d/detection

18.229.248.167:13921
18.231.93.153:13921
54.94.248.37:13921

# Reference: https://www.virustotal.com/gui/file/5acc192328ff8da64e933aedb47108bf1e8caef9ebe4fe7846b080cdf8bc8428/detection

189.41.254.232:5552
cryptersandtools.hopto.org

# Reference: https://www.virustotal.com/gui/file/ceb664af1544013b77f703604fda32a9bb25378dec12b9b8b007e7aa2d2d9f73/detection

18.228.115.60:19448
18.229.146.63:19448
18.229.248.167:19448
18.231.93.153:19448
54.94.248.37:19448

# Reference: https://www.virustotal.com/gui/file/64135b29aad6b2d04fbdb58f71267dd1c36ffa276b2d2221981302b07425358c/detection

177.254.20.160:7492
nov231122.con-ip.com

# Reference: https://www.virustotal.com/gui/file/15d5605f08420bd6b2ed02d9e08885e442c3f3e0bd4423b2ca7450f593799963/detection

46.246.80.19:2054
46.246.86.17:2054

# Reference: https://www.virustotal.com/gui/file/8dbc87b4b51a4138bc834ce54b429d4267250e953ef68e345ead7311017450a3/detection

46.246.4.210:1980
nlucex1980.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5355e4a5a499fcde32196e0e47328ad6b61849687299e385d71235498015121b/detection

194.26.192.121:5551
194.26.192.121:5552

# Reference: https://www.virustotal.com/gui/ip-address/81.61.77.92/relations
# Reference: https://www.virustotal.com/gui/file/e891a7c7d6de330a026fd3265794dffd80b82dfbd4614785a164d795335252a9/detection

3k3sl6.loseyourip.com
3nq5ma.loseyourip.com
7eylk3.loseyourip.com
9m7xju.loseyourip.com
accesointerne.theworkpc.com
appfwindows.duckdns.org
appgwindows.duckdns.org
apphwindows.duckdns.org
appwindows.duckdns.org
chopa.mywire.org
cyhost.hopto.org
guarderia.dynu.com
guarderia.mywire.org
houhost.hopto.org
localred.duckdns.org
palometas.hopto.org
redethernet.duckdns.org
redloca.hopto.org
redlocal.con-ip.com
redlocale.hopto.org
redtool.hopto.org
sargo.hopto.org
sound.giize.com

# Reference: https://www.virustotal.com/gui/file/2da3735079e006f6d94022a18085135a970f8ea105118008e1f96eb9ae3a19a6/detection

46.246.86.6:2054
quilleras.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f6ce0fb9b04d3ed91220f3144df5fe76d51eb52977a847a98e39b7c844f228f6/detection

zchrome-microsoft.duckdns.org

# Reference: https://www.virustotal.com/gui/file/556a0de2e532cfc54e6862253ac1f33ed8e1c3ee06ae4a533cba709cccc38b62/detection

191.55.155.248:5552

# Reference: https://www.virustotal.com/gui/file/ff7c120fbef25763588b82d27ffa2c3ac04dca2665f6f5d5e3aa0911b7a29012/detection

172.111.251.139:69
edge.servep2p.com

# Reference: https://www.virustotal.com/gui/file/d42fe6247c5396f6385d9d57adb62a19d2d7fff3773348e16dfb646f8d8fea8e/detection
# Reference: https://www.virustotal.com/gui/file/780ba0448b61ac3e64094b7bb9f2dca7ba6846859846d9c6fa16cee0d5d2a514/detection

141.255.146.149:5552
141.255.157.34:5552
0lxi.ddns.net

# Reference: https://www.virustotal.com/gui/file/7867ec2dbce1bc34d559e44341377d131daf80d14406b32b80b67f722169a631/detection

141.255.157.43:1177
0xe.ddns.net

# Reference: https://www.virustotal.com/gui/file/ae7cbc13f36d7dc9a1a84f6fc81d511dab09d0fb0e75836e2f5b3fb8a522b43f/detection

141.255.159.55:1177
0xtoken.ddns.net

# Reference: https://www.virustotal.com/gui/file/6b7420e86b4a56008f584e600110ac1c1707862455599972f60b689df856babd/detection
# Reference: https://www.virustotal.com/gui/file/620e6fadbd112c04a9812a0826ea62fd520313abf667c25bc85bd138b4323c4b/detection

185.19.85.187:5552
23.105.131.248:5552
0xzea.ddns.net

# Reference: https://www.virustotal.com/gui/file/922d23b68e34bcec08329fcb3045ecdb08fef83c3b0b6c29651d1771d5730121/detection

176.97.70.164:1313

# Reference: https://www.virustotal.com/gui/file/64e8f2e649e4af365581b9e2226ba6b997009053862e9a00e796da47e5781aab/detection

176.97.70.164:1778

# Reference: https://www.virustotal.com/gui/file/24ee643afa1342ada2dc1f037f76f270a571d7a131aa76cc1bfa70ae2cbb3e3f/detection

176.97.70.164:4336

# Reference: https://www.virustotal.com/gui/file/a104c701fa2ce9ea1e012dbcc4167f0343c8ad007ced74ed3fc7356e9aeb09d6/detection

189.103.168.68:1177

# Reference: https://www.virustotal.com/gui/file/9f569fe89cc14159292161cca2642af54e2bfd4b4ab0f10f95d358690fbf1375/detection

179.233.81.56:9003

# Reference: https://www.virustotal.com/gui/file/0b5acb10d86e0c543ca2c6113bad8f61e8bf5ad8a32db3abfb1ce5e9364d05ce/detection

system88.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8a25d3f198074ac32a82d84198f4c3952e9e1fe31a7d35c2934d87a36cb5f33a/detection

91.109.180.4:5552
91.109.188.15:5552
1337neon.ddns.net
30111999.ddns.net
3nkwwbanj2461.ddns.net
4321llll.ddns.net
695744c9b1ddnc.sytes.net
6yz.ddns.net
adnan07803996609.myftp.biz
ahmed30m.ddns.net
alabrzi505.ddns.net
algdz.ddns.net
australiatracking.duckdns.org
azer08.ddns.net
b2m.ddns.net
b4b3.ddns.net
barny122.hopto.org
bashco.ddns.net
bebopubg.ddns.net
blackghostorg21.ddns.net
blockchainsupport.duckdns.org
bn7kore.ddns.net
brzani505.ddns.net
burakdemiz2.ddns.net
cobaindeh12.zapto.org
colombeofrat.ddns.net
dangercom1.ddns.net
darkwebent.ddns.net
davidkholio.ddns.net
dhjashgjdhagd.duckdns.org
dijimi3511.ddns.net
dileksolmaz.ddns.net
discord-gg.duckdns.org
dnsxyne.duckdns.org
dominiofilipe.duckdns.org
doxcybe3r00.ddns.net
doza122.con-ip.com
drnasre2019.ddns.net
dushoks71.duckdns.org
eaminsmailer.ddns.net
ee12ss.ddns.net
elday6699.ddns.net
eslbeh999.ddns.net
fabulousike222.ddns.net
fedyazza.ddns.net
firewall.publicvm.com
forensics1814.myftp.org
foxxxw.ddns.net
frankshakor.hopto.org
frztrojanzada.duckdns.org
fukpubg.ddns.net
gabsz.duckdns.org
gemyaa.ddns.net
ggdhhj.ddns.net
gogohk.duckdns.org
govabod73.ddns.net
h45hdecrep7.ddns.net
hackerd190.ddns.net
handachi.hopto.org
hanyfathey18.ddns.net
hassan510.ddns.net
hayderchalawi313.ddns.net
hosthosin.ddns.net
hvc.sytes.net
hzb55.ddns.net
iiyoyo.duckdns.org
janelli1.duckdns.org
joker3.publicvm.com
jookin2020.hopto.org
jota22.duckdns.org
kaz0.ddns.net
kazimalia100.ddns.net
kemekel.ddns.net
kiomanito.freemyip.com
kjslkdf.sytes.net
kokoboko.publicvm.com
konaklamacity.ddns.net
landlover.ddns.net
lcdotrembala.ddns.net
leenux.freemyip.com
lionsari2.ddns.net
lolyouhoe.hopto.org
lopxloi.myftp.biz
lrxldlfdrxvfdf.sytes.net
manera2020virus.ddns.net
mariaboooler1973.ddns.net
mary222.ddns.net
masterhat.ddns.net
masterlaith.publicvm.com
matlooom.ddns.net
maxmax321.ddns.net
maxstell.ddns.net
meemo155.ddns.net
miguel01.ddns.net
mkgf.ddns.net
mm.serveirc.com
mobarak.ddns.net
mohammad74751.hopto.org
mokako12.gotdns.ch
mosratos.ddns.net
mrx11.ddns.net
mssaw3d.ddns.net
mygame.ddns.net
myhostest.ddns.net
narkyla11.ddns.net
narutohack.ddns.net
natwest.ddns.net
neer.ddns.net
nftnaveia1.duckdns.org
nics3.sytes.net
nopop.freemyip.com
nosystemissafe.ddns.net
okbb123.hopto.org
pckjjk.duckdns.org
perseufullbory.duckdns.org
python.ddns.net
ram2.ddns.net
regedit.sytes.net
ronymahmoud.ddns.net
rtrt12.no-ip.biz
saad2.ddns.net
semolove.ddns.net
shiyrookhalil.ddns.net
slothdacc.ddns.net
snowteste3.duckdns.org
sonasona1973.ddns.net
spacardportal.ddns.net
survive2000.duckdns.org
system64-serves.duckdns.org
theeus.duckdns.org
thehill.ddns.net
tm1020.duckdns.org
top5050.ddns.net
ucharfliler.ddns.net
ulol.duckdns.org
ultra64.duckdns.org
unknown974.ddns.net
valorant.ddns.net
vicnj.ddns.net
w-t.ddns.net
wewewe.ddns.net
whatsappmod.ddns.net
windowssystem.ddns.net
wiz.bounceme.net
yassen19771988.ddns.net
zlkdkk.duckdns.org
zlkdominokk.duckdns.org
zoik763.duckdns.org

# Reference: https://www.virustotal.com/gui/file/018edb9e2a7a722f3cd7bfc4abd9c2f1b70a3fce023a11ba05d5331c891428d0/detection

194.38.20.82:5553
ozoon2.linkpc.net

# Reference: https://www.virustotal.com/gui/file/bcf3be634d5e2d03250615b34dc45438410cc7de544238258f753a194b9c4edb/detection

18.229.146.63:15360
18.229.248.167:15360
18.231.93.153:15360
54.94.248.37:15360

# Reference: https://www.virustotal.com/gui/file/baa3ce1c32265c95939826fcde314bf1c6db861cc769293058f527e5bf22bebb/detection

18.228.115.60:17888
18.229.146.63:17888
18.229.248.167:17888
18.231.93.153:17888
54.94.248.37:17888

# Reference: https://www.virustotal.com/gui/file/5311203e87129260304fae4b153b915e66ffbb3a019b2539c125409be5d59fb6/detection

54.94.248.37:15257

# Reference: https://www.virustotal.com/gui/file/d08a31ec8b8a3d3488075102f377e80bd569ea06d6d3551c846a1ba7568e46ae/detection

18.228.115.60:16192
18.229.146.63:16192
18.229.248.167:16192
18.231.93.153:16192
54.94.248.37:16192

# Reference: https://www.virustotal.com/gui/file/8f4045c3361edc62e06bd54604a4386699d032d854713dec6948b2e9cc7cf8bc/detection

18.228.115.60:11048
18.229.248.167:11048
54.94.248.37:11048

# Reference: https://www.virustotal.com/gui/file/062fe280829b395e5c9170c0eafc37e3630cfa03a5c931fae375c1f178fcb156/detection

0053287.no-ip.org

# Reference: https://www.virustotal.com/gui/file/faab53bf43fddfe134b645da7faf50d5a655623c86051719f29640fb2a4d4002/detection

0771994.no-ip.org

# Reference: https://www.virustotal.com/gui/file/ba08783f420dfd3f1c55efafaf5a77843fa69f3de45f70d9e1827028ef3046d0/detection

0788827703.no-ip.org

# Reference: https://twitter.com/0xToxin/status/1653480964956274708
# Reference: https://tria.ge/230502-xjxhhacb58/behavioral2

18.231.93.153:11249

# Reference: https://twitter.com/g0njxa/status/1654133987537764353

179.83.165.250:1177
wwndr3.ddns.net

# Reference: https://blog.talosintelligence.com/threat-roundup-0428-0505/ (# Win.Packed.njRAT-9999411-0)

bobica.no-ip.info
de7kaaat.zapto.org
hamzahacker84.no-ip.biz
test0102.zapto.org
torrent-leech.servebeer.com

# Reference: https://www.virustotal.com/gui/file/d9378a72f4bc362305334a47a64dd2fb426b065e1d050b3f05044b891711a8fe/detection

196.242.244.229:1177

# Reference: https://www.virustotal.com/gui/file/66dd7ed996c94ded0cc643de805dd9f2276b20e290e4fdeea55eefa129513dfb/detection

79.134.225.40:6970
marcapalgo.ug
masonp.ac.ug

# Reference: https://twitter.com/pmmkowalczyk/status/1660960181369335809
# Reference: https://www.virustotal.com/gui/file/c019e154a2f6977979d1ad6ba4e25187cf477215b7603f51a7fe5bec4356e75e/detection
# Reference: https://www.virustotal.com/gui/file/a2804192b26360a25c115aba8aa7ee0e7400bdc5bc4470c3e9e06b84bc8f42cd/detection

194.99.105.69:5552
83.31.217.82:1826
83.31.217.82:47074

# Reference: https://www.virustotal.com/gui/file/22c52c0d1a65ac399be0c96f572b33eaf325431803447b6515431fd0cd8afb66/detection

201.121.116.76:81
/CRYPS/QWERS/NEW24/
/CRYPS/QWERS/

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (04 Jun 2023)

156.218.252.212:1177
18.156.13.209:18907
18.157.68.73:18907
18.158.249.75:10264
18.158.249.75:17042
18.192.31.165:14555
18.192.31.165:17042
18.192.93.86:18907
18.197.239.5:18907
18.229.248.167:11729
194.147.140.138:53561
194.55.224.37:7777
194.62.1.7:5552
3.124.142.205:10264
3.125.102.39:10264
3.125.102.39:14555
3.125.102.39:17042
3.125.209.94:10264
3.125.209.94:14555
3.125.223.134:14555
3.125.223.134:17042
3.126.224.214:17683
3.126.37.18:18907
3.127.138.57:18907
3.127.59.75:19705
3.64.4.198:10625
3.67.112.102:10625
3.67.15.169:17683
3.67.161.133:10625
3.67.62.142:10625
35.157.111.131:17683
35.158.159.254:19705
46.246.4.2:2054
46.246.6.17:2054
52.28.112.211:19705
83.31.217.82:6522
respaldo2424.duckdns.org

# Reference: https://www.virustotal.com/gui/file/4526550c8049ed3e6f192cc95cff2d693c237d1aee12d3b16d361fa30e36144d/detection

ksa-ok.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/1ae2a77001ef89fb2f69ab2b827163d218016e3abf28336f92573502bc160e8e/detection

169.159.97.165:24007
cfo111.ddns.net
cfo111.hopto.org

# Reference: https://www.virustotal.com/gui/file/1d4229ed0b6446a14621498377722898f8954ad42237756d22093ebc99eb1d66/detection

181.206.46.140:5000
nzul13-3-23.duckdns.org

# Reference: https://www.virustotal.com/gui/file/642664b453ed3b1754705ca12403289f1837180dbd511d339d901402e11d44c8/detection

172.111.140.79:6098
amuccm.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f7200c5fb4b76977b2d73ad68bc6eb4d1b2f61c88fc804fe028f9701361b4bf3/detection

41.200.177.12:1177
msvenom.ddns.net

# Reference: https://www.virustotal.com/gui/file/7e2529bf89a9227da9f9fe7591b73a76eb2c4b22d3cac23db1e226b4371c3e57/detection

172.111.136.105:8092
office365microsoft.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8b9807fbe4bb55b9818215ac035afdc2ac36fd528229e760a1b8ede16b2a9d47/detection

46.246.4.2:1994
tiagoodiaz.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5047d7914217f2a32b227be477e244b47bfc20655886202af6fd536c01e5cef3/detection

181.141.4.153:2121
nj2121.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1f9df2954bb86ad7145c3e7069814847e3c8663b870a3a3b4f0dea01fefa34bf/detection

94.158.247.9:8000
mayocap12ok.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f16c186667562a18459a97a57a0a407e7e552c92c0e5bc6c0146359e79aa75f2/detection

46.246.4.2:1994
46.246.84.4:1994
dubay.duckdns.org

# Reference: https://www.virustotal.com/gui/file/da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520/detection

191.89.243.236:6543

# Reference: https://www.virustotal.com/gui/file/497aab76298a6bd2bb31f37a6a555cc88b417cd6905d2fd9585ba715afdcec7d/detection

195.88.57.178:8000
20junok.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9da4778fce03b654f62009b3d88958213f139b2f35fe1bed438100fae35bdfbf/detection

209.25.141.194:54835
209.25.142.194:54835
documents-elegant.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/46218700e3edead893b37eeb0cfc7599b915761bcb65ef97789b51f708be1b4e/detection

191.88.248.2:1984
envisep.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a4565de8728f2196a30e7337c45d94b0b7f8dfca1bd610f5bd0d597e483d1b37/detection

172.111.136.105:2019
173.44.50.71:7782
173.44.50.71:7784
administradorv.duckdns.org
enero2022async.duckdns.org
verde2021.duckdns.org

# Reference: https://www.virustotal.com/gui/file/257d66d9dc5b7e9cc863f241c2375e798634e1fd9e545f374fbd21535999ba13/detection

172.111.136.105:8092
oficinabogotanor.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d01a2418151d645228f63d9f9b14862170abd071b6425a2d6f6a5f3c6163ead1/detection

190.28.155.201:4343
todosnj4343.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c3d8ec480b7ef3ddf89926f297910438a370292c7773a635780e808e565d3e6e/detection

18.228.115.60:16852
18.231.93.153:16852
54.94.248.37:16852

# Reference: https://blog.cyble.com/2023/07/13/trojanized-application-preying-on-teamviewer-users/
# Reference: https://www.virustotal.com/gui/file/224ae485b6e4c1f925fff5d9de1684415670f133f3f8faa5f23914c78148fc31/detection
# Reference: https://www.virustotal.com/gui/file/9bcb093f911234d702a80a238cea14121c17f0b27d51bb023768e84c27f1262a/detection

kkk.no-ip.biz

# Reference: https://www.virustotal.com/gui/ip-address/204.95.99.109/relations

djalelovicnjrat.no-ip.biz
njr1979.no-ip.biz
njrat-pidrou.no-ip.biz
njrat.serveftp.com
njrat000port.no-ip.biz
njrat2.no-ip.biz
njrat68.no-ip.biz
njrathamaezel.no-ip.biz
njratnj.no-ip.biz
njratozil1.zapto.org
njratprof.no-ip.biz
njratrun.no-ip.biz
njratxxx2.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/0d2c9dda3475a1326148ea172afb2c555ae7bb9b16669deb8da583209dab30c0/detection

193.105.29.137:7080
testscamahasikan.ddns.net

# Reference: https://www.virustotal.com/gui/file/ce6f0090d1c38351a4a9dab52bf4ad817c3f2ea5a6e5cef4dd139311ea1e4c54/detection

18.228.115.60:14729
18.229.146.63:14729
18.229.248.167:14729
18.231.93.153:14729
54.94.248.37:14729

# Reference: https://www.virustotal.com/gui/file/53924ec04fd027a17ceec00ef3d0e77637a8c372b2ee1b6095bf1ee4cf288fc4/detection

18.229.146.63:18145
18.229.248.167:18145
18.231.93.153:18145
54.94.248.37:18145

# Reference: https://www.virustotal.com/gui/file/3cb22c29fad4b8369e7c77f5b7d7bf81941cbe57bc5df6fcadff39810234ee31/detection

18.228.115.60:15992
18.229.146.63:15992
18.231.93.153:15992
54.94.248.37:15992

# Reference: https://www.virustotal.com/gui/ip-address/154.12.254.215/relations

vxnon.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-07-23)

105.110.10.96:1000
131.153.48.254:444
154.12.254.215:35888
154.247.154.37:5552
156.196.15.211:5552
176.146.4.190:5552
18.136.148.247:17073
18.139.9.214:17073
18.156.13.209:10091
18.156.13.209:10216
18.156.13.209:13250
18.156.13.209:14368
18.156.13.209:15473
18.156.13.209:15545
18.156.13.209:16032
18.156.13.209:16445
18.156.13.209:18260
18.157.68.73:10091
18.157.68.73:10216
18.157.68.73:11920
18.157.68.73:14368
18.157.68.73:15473
18.157.68.73:15545
18.157.68.73:16032
18.157.68.73:17360
18.157.68.73:19328
18.158.249.75:10067
18.158.249.75:19740
18.158.58.205:13226
18.158.58.205:13266
18.192.31.165:11604
18.192.31.165:18041
18.192.31.165:19740
18.192.93.86:10091
18.192.93.86:11920
18.192.93.86:13250
18.192.93.86:14368
18.192.93.86:15473
18.192.93.86:16032
18.192.93.86:18260
18.197.239.109:15224
18.197.239.5:10216
18.197.239.5:11920
18.197.239.5:13250
18.197.239.5:14368
18.197.239.5:15545
18.197.239.5:16445
18.197.239.5:17360
18.197.239.5:18260
18.198.77.177:10536
18.198.77.177:15721
18.198.77.177:16299
18.198.77.177:19554
18.228.115.60:12760
18.228.115.60:17200
18.228.115.60:17720
18.229.146.63:17720
18.229.248.167:11552
18.229.248.167:12760
18.229.248.167:13904
18.229.248.167:17200
18.231.93.153:11552
18.231.93.153:12760
18.231.93.153:13904
18.231.93.153:17200
18.231.93.153:17720
181.141.4.199:5050
181.52.102.110:2010
184.105.237.196:1056
185.32.6.121:2000
191.184.140.5:1177
192.169.69.25:1503
193.161.193.99:38092
209.25.140.181:32789
209.25.140.212:16694
209.25.140.212:17057
209.25.141.180:2509
209.25.141.181:45038
209.25.141.211:50709
209.25.141.212:16694
209.25.141.212:17869
209.25.141.212:27486
209.25.142.212:17869
3.124.142.205:11604
3.124.142.205:25565
3.124.67.191:10145
3.124.67.191:10490
3.124.67.191:11664
3.124.67.191:13920
3.124.67.191:14936
3.125.102.39:10067
3.125.102.39:11604
3.125.188.168:10145
3.125.188.168:10490
3.125.188.168:11664
3.125.188.168:12937
3.125.209.94:10067
3.125.209.94:16261
3.125.223.134:11604
3.125.223.134:19740
3.125.223.134:25565
3.126.224.214:10145
3.126.224.214:10241
3.126.224.214:12937
3.126.224.214:13920
3.126.224.214:19809
3.126.37.18:10091
3.126.37.18:11920
3.126.37.18:13250
3.126.37.18:14368
3.126.37.18:15473
3.126.37.18:15545
3.126.37.18:16032
3.126.37.18:19328
3.127.138.57:10216
3.127.138.57:13250
3.127.138.57:14368
3.127.138.57:16032
3.127.138.57:16445
3.127.138.57:17360
3.127.138.57:18260
3.127.138.57:19328
3.127.181.115:13266
3.127.253.86:15721
3.127.253.86:16299
3.127.253.86:17194
3.127.253.86:19554
3.127.59.75:16299
3.127.59.75:17194
3.129.187.220:17683
3.129.187.220:18816
3.133.207.110:18816
3.136.65.236:17683
3.136.65.236:18816
3.138.180.119:18816
3.140.223.7:14394
3.141.142.211:14394
3.141.177.1:14394
3.141.177.1:16704
3.141.210.37:16704
3.142.129.56:11090
3.142.167.54:11090
3.22.15.135:18816
3.64.4.198:13266
3.66.38.117:15224
3.67.112.102:13266
3.67.15.169:10490
3.67.15.169:14936
3.67.15.169:19809
3.67.161.133:13226
3.67.161.133:13266
3.67.62.142:13226
3.68.171.119:15224
3.68.171.119:16154
3.68.56.232:10145
3.68.56.232:10241
3.68.56.232:10490
3.68.56.232:14936
3.68.56.232:19809
3.69.157.220:15224
35.157.111.131:10145
35.157.111.131:11664
35.157.111.131:12937
35.157.111.131:13920
35.157.111.131:14936
35.158.159.254:15721
35.158.159.254:17194
41.233.42.161:5552
41.237.177.231:5552
46.246.6.9:1994
46.246.80.3:3030
46.246.84.24:1994
52.220.121.212:17073
52.28.112.211:14650
52.28.112.211:17194
52.28.112.211:19554
52.28.247.255:15224
52.28.247.255:16154
54.94.248.37:11552
54.94.248.37:12760
54.94.248.37:13904
54.94.248.37:17720
65.0.50.125:22797
77.241.20.215:55915
81.23.151.222:352

# Reference: https://twitter.com/ScumBots/status/1683916861329530900
# Reference: https://www.virustotal.com/gui/ip-address/46.246.12.10/relations
# Reference: https://www.virustotal.com/gui/file/fa212567cb826ef3ce6f6fe5189f923b73d1af1411206d14184cbad3eb2da524/detection

46.246.12.10:5050
blackback.zapto.org
dpm4vpn.familyds.org
indea123.duckdns.org
master1981.duckdns.org
pedro1010.duckdns.org
petro4343.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-07-26)

147.185.221.16:2043
18.198.77.177:11249
18.198.77.177:13186
209.25.141.223:27926
209.25.141.223:29383
3.121.139.82:11249
3.127.253.86:11249
3.127.59.75:13186
3.14.182.203:18267
35.158.159.254:11249
35.158.159.254:13186
41.44.233.236:5552
52.28.112.211:13186
65.0.50.125:22533
91.109.180.11:1177

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-07-27)

18.156.13.209:14968
18.156.13.209:19912
18.157.68.73:14968
18.158.249.75:11674
18.192.31.165:11674
18.192.93.86:14968
192.169.69.25:1314
209.25.141.181:52328
3.124.142.205:11674
3.125.223.134:11674
3.127.181.115:11354
3.127.253.86:13186
3.64.4.198:11354
3.67.112.102:11354
3.67.62.142:11354

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-07-30)

13.229.3.203:11272
147.185.221.16:4496
18.136.148.247:11272
18.139.9.214:11272
18.141.129.246:11272
18.156.13.209:16730
18.157.68.73:16730
18.192.93.86:16730
18.197.239.109:12660
18.229.248.167:11529
18.231.93.153:11529
209.25.141.212:31568
3.124.67.191:19100
3.125.188.168:19100
3.127.138.57:16730
3.127.59.75:11176
3.67.161.133:11992
3.67.62.142:11992
3.68.171.119:12660
3.69.115.178:12660
3.69.157.220:12660
35.158.159.254:11176
52.220.121.212:11272
52.28.112.211:11176
52.28.247.255:12660

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/  (# 2023-07-31)

101.132.25.152:8089
147.185.221.16:4947
18.158.58.205:14400
18.198.77.177:10666
20.55.68.184:7777
3.124.67.191:13003
3.125.188.168:13003
3.126.224.214:13003
3.127.181.115:14400
3.64.4.198:14400
3.67.112.102:14400
3.67.15.169:13003
3.67.161.133:14400

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/  (# 2023-08-01)

147.185.221.16:9093
18.192.31.165:19120
209.25.141.181:30345
3.124.142.205:19120
3.125.209.94:19120
3.125.223.134:19120

# Reference: https://twitter.com/ScumBots/status/1686384591152852992
# Reference: https://www.virustotal.com/gui/file/17ce77ba51558d7591c2563cc6a528e03b2a5aa17f9383d4ff8859541b2a5ee9/detection

18.228.115.60:14760
18.229.146.63:14760
18.229.248.167:14760
18.231.93.153:14760
54.94.248.37:14760

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-02)

13.229.3.203:11677
18.136.148.247:11677
18.141.129.246:11677
18.158.249.75:18364
18.158.249.75:19209
18.158.58.205:13480
18.192.31.165:18364
18.192.31.165:19209
18.228.115.60:19136
18.229.248.167:19136
18.231.93.153:19136
3.124.142.205:18364
3.124.142.205:19209
3.125.209.94:18364
3.125.223.134:19209
3.127.181.115:13480
3.64.4.198:13480
3.67.112.102:13480
3.67.161.133:13480
54.36.239.255:9900

# Reference: https://www.virustotal.com/gui/file/ef6dd0b7f2a58fed94a7060e36f29924c6d6d04163d216e72d3b8b27b5cdfd57/detection
# Reference: https://www.virustotal.com/gui/file/7776e93e4db60f02db9be4474b64cc4c84ea851b9d819d046fed69c3df15f806/detection

105.104.9.111:5550
105.104.7.171:5551
41.200.209.143:5551
252525.con-ip.com

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-03)

18.156.13.209:19565
18.157.68.73:19565
18.158.249.75:18953
18.192.31.165:18953
3.124.142.205:18953
3.125.102.39:18953
3.125.209.94:18953
3.126.37.18:19565
3.134.125.175:11080
3.134.39.220:11080
3.17.7.232:11080

# Reference: https://app.any.run/tasks/d76af589-bddc-4523-8cce-c44a4a41fdbb/

18.192.93.86:12729
3.127.138.57:12729

# Reference: https://www.virustotal.com/gui/file/d7443e8971985f4cbd75219edfdedde221be125432c421d6b0d1537f7d8b36d5/detection

177.255.88.161:2525
estreno1-caso.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-05)

18.197.239.109:16370
222.99.238.23:1
3.64.4.198:19544
3.66.38.117:16370
3.67.161.133:19544
3.68.171.119:10784
3.68.171.119:19025
3.69.115.178:10784
3.69.115.178:16370
3.69.157.220:10784
3.69.157.220:16370
52.28.247.255:10784
52.28.247.255:16370
52.28.247.255:19025

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-07)

18.198.77.177:16689
3.125.188.168:19225
3.126.224.214:19225
3.127.253.86:16689
3.127.59.75:16689
3.67.15.169:19225
35.157.111.131:19225
45.74.0.213:1000
52.28.112.211:16689

# Reference: https://www.virustotal.com/gui/file/98eb460cc5909a390a39f544c3377933fa1fa8c4fa922ef9d1309c353bb4fdc8/detection

104.28.228.104:5572
6oo.myftp.org

# Reference: https://www.virustotal.com/gui/file/6e81917232d1900d943bbb73b5ac5a96453e17896cdcf2b309242be6cc988dd0/detection

18.229.146.63:12728
54.94.248.37:12728

# Reference: https://threatfox.abuse.ch/ioc/1149082/

18.231.93.153:12728

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-09)

18.158.58.205:16198
3.127.181.115:16198
3.129.187.220:12181
3.133.207.110:12181
3.134.125.175:12502
3.134.39.220:12502
3.136.65.236:12181
3.17.7.232:12502
3.22.15.135:12181
3.22.30.40:12502
3.64.4.198:16198

# Reference: https://www.virustotal.com/gui/file/ef1e23d4e80f53f0cc4b13bbc2c37a167916673f5ce41841d2a70f6de00f9f26/detection

18.228.115.60:11216
18.229.146.63:11216
54.94.248.37:11216

# Reference: https://www.virustotal.com/gui/file/0f4725b32cccc869792e78f7ba4a2546f0aab248b74d9598a991d6131b960f01/detection

105.105.13.238:5552
bareche1995.ddns.net

# Reference: https://www.virustotal.com/gui/file/787ed9aeca155d295395f3ca3ddadf29cfc8c7f66ad01978b61d1a5925b05e20/detection

46.246.82.6:1994

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-11)

18.156.13.209:10992
18.158.58.205:15673
3.126.37.18:10992
3.127.138.57:10992
3.142.81.166:18888
3.19.130.43:18888
3.64.4.198:15673
3.67.62.142:15673

# Reference: https://twitter.com/malwrhunterteam/status/1689894749400911873
# Reference: https://www.virustotal.com/gui/file/dbebb179b1d007eb15349de7a9e0e13f1ab1831b5e4f74afbdbc59e6ce3f439f/detection

207.148.117.249:18443
apsoftworld.com
cloud.apsoftworld.com
ytb1.apsoftworld.com

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-13)

3.133.207.110:15278
3.136.65.236:15278
18.157.68.73:10992
3.22.15.135:15278
18.158.58.205:15706
3.124.142.205:17651
3.127.181.115:15706
3.127.181.115:19186
3.67.161.133:15706
3.67.62.142:15706

# Reference: https://www.virustotal.com/gui/file/0bb8981ed490b5740f005651bf80b8b4ef43995d2b35e8b8fa65ca919eacde92/detection

bot-rox.com

# Reference: https://www.virustotal.com/gui/file/847f9f041806776e957a60cda7cb58b332583e151eda78e431f4abd82bf7a488/detection

147.50.253.218:1234

# Reference: https://www.virustotal.com/gui/file/77679f6e9ec46dd904fc38e726e4ba135f1500a5ad5cb2fdd429d7c9dfdb8ca7/detection

talalq8.ddns.net

# Reference: https://www.virustotal.com/gui/file/7d2f88fadc1bccd5c359befb287c6ecbe111b97f38ae4c9245f4ab274a75dceb/detection

177.157.175.37:2008
dadzkiler.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-15)

102.44.58.158:1177
18.157.68.73:14265
18.192.93.86:14265
18.197.239.109:13034
18.197.239.5:11281
18.197.239.5:14265
3.126.37.18:14265
3.127.138.57:11281
3.127.138.57:14265
3.66.38.117:13034
3.67.161.133:15180
3.68.171.119:13034
3.69.157.220:13034
46.246.14.22:1994
52.28.247.255:13034

# Reference: https://www.virustotal.com/gui/file/3b781b488b32f1c1feb8f5531cb3de921177018c051ddcf751df9162f103f2fe/detection

141.255.154.38:1177
001100tt.ddns.net

# Reference: https://www.virustotal.com/gui/file/db6b47e97b18b90783bd2bd69ca6b2c829b64bc81198d09c05f376d5ee999beb/detection

001122.ddns.net

# Reference: https://www.virustotal.com/gui/file/32e560f89c0f6696562329f0353826a3bd90cf2799890ed686f13bcff8f12c39/detection

000webmaster.ddns.net

# Reference: https://www.virustotal.com/gui/file/b2476572f4b08169f9c93c6d3b442f48a29028601fe361c50c0e8e8f186bd791/detection

01203.ddns.net

# Reference: https://www.virustotal.com/gui/file/6f9feff46ec4fb9b411181d99c2defd95ae8871edd784f3703aa19ffadb9119e/detection

18.197.239.109:19832
3.66.38.117:19832
3.68.171.119:19832
3.69.157.220:19832

# Reference: https://threatfox.abuse.ch/ioc/1150349/

35.157.111.131:14986

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-17)

114.200.45.42:6522
141.98.6.153:5577
18.157.68.73:14569
18.158.249.75:15185
18.192.31.165:15185
18.192.93.86:14569
18.197.239.109:13480
18.197.239.5:14569
191.89.247.6:9993
3.121.139.82:15179
3.121.139.82:18046
3.124.142.205:15185
3.125.102.39:15185
3.125.209.94:15185
3.125.223.134:15185
3.126.37.18:15056
3.127.138.57:14569
3.127.253.86:15179
3.127.253.86:18046
3.127.59.75:18046
3.68.171.119:13480
3.69.115.178:13480
3.69.157.220:13480
35.158.159.254:18046
52.28.112.211:15179
52.28.247.255:13480

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-19)

147.185.221.16:16587
18.198.77.177:12880
209.25.140.212:18225
3.121.139.82:12880
3.124.67.191:14130
3.127.59.75:12880
3.68.56.232:14130
35.157.111.131:14130
52.28.112.211:12880
91.109.178.9:1177
91.109.178.9:5050

# Reference: https://www.virustotal.com/gui/ip-address/209.25.140.212/relations

212.ip.joinmc.link
212.ip.playit.gg
212.ip.ply.gg
leave-civil.craft.ply.gg
list-costs.craft.ply.gg
leave-civil.craft.ply.gg
list-costs.craft.ply.gg
above-passes.at.ply.gg
academic-naturals.at.ply.gg
action-vocabulary.at.ply.gg
activities-equal.at.ply.gg
activities-swap.at.ply.gg
add-emacs.at.ply.gg
additional-thanks.at.ply.gg
ads-dell.at.ply.gg
africa-manga.at.ply.gg
against-troy.at.ply.gg
agency-admissions.at.playit.gg
agents-everybody.at.ply.gg
ago-played.at.ply.gg
among-tx.at.ply.gg
an-too.at.ply.gg
animals-dense.at.ply.gg
answers-hollywood.at.ply.gg
are-scored.at.ply.gg
artist-neither.at.ply.gg
as-baskets.at.ply.gg
at-victoria.at.ply.gg
audio-ranking.at.ply.gg
authority-toward.at.ply.gg
auto-herbs.at.ply.gg
availability-genre.at.ply.gg
award-pest.at.ply.gg
az-sv.at.ply.gg
b-boc.at.ply.gg
b-pairs.at.ply.gg
backup-meeep.tk
bank-ethernet.at.playit.gg
bar-polyester.at.ply.gg
base-attacked.at.playit.gg
based-certain.at.ply.gg
be-commentary.at.ply.gg
bed-cheat.at.ply.gg
before-available.at.ply.gg
bill-lbs.at.ply.gg
bill-xp.at.ply.gg
bit-specifics.at.ply.gg
block-letting.at.ply.gg
boards-eh.at.ply.gg
both-towns.at.ply.gg
brands-suse.at.ply.gg
brown-drops.at.ply.gg
budget-centre.at.ply.gg
build-moral.at.ply.gg
buying-seriously.at.ply.gg
c-jewish.at.ply.gg
ca-assistance.at.ply.gg
california-lit.at.ply.gg
canada-consistency.at.ply.gg
cards-just.at.ply.gg
catalog-borough.at.ply.gg
category-in.at.ply.gg
center-lake.at.ply.gg
charge-cons.at.ply.gg
chicago-hook.at.ply.gg
chicago-oz.at.ply.gg
chinese-around.at.playit.gg
chinese-informational.at.ply.gg
christmas-ambient.at.playit.gg
civil-computer.at.ply.gg
classes-jp.at.ply.gg
classic-lovers.at.ply.gg
code-asking.at.ply.gg
color-asia.at.ply.gg
comes-aid.at.ply.gg
command-nd.at.ply.gg
comments-eg.at.ply.gg
committee-truck.at.ply.gg
common-template.at.ply.gg
companies-pokemon.at.ply.gg
contains-defense.at.ply.gg
contract-dim.at.ply.gg
cool-dos.at.ply.gg
cost-goal.at.ply.gg
costs-divided.at.ply.gg
council-contract.at.ply.gg
courses-assess.at.playit.gg
cross-jul.at.ply.gg
current-necessity.at.ply.gg
currently-kind.at.ply.gg
customers-meta.at.ply.gg
d-intel.at.playit.gg
d-intel.at.ply.gg
daily-root.at.ply.gg
dark-handbook.at.ply.gg
days-diy.craft.ply.gg
de-accommodations.at.playit.gg
de-accommodations.at.ply.gg
dead-rick.at.ply.gg
deal-prime.at.ply.gg
deals-softball.at.ply.gg
deep-albania.at.ply.gg
deep-erik.at.ply.gg
department-gt.at.ply.gg
description-imposed.at.playit.gg
description-lease.at.ply.gg
design-skype.at.playit.gg
develop-directory.at.ply.gg
develop-lesser.at.ply.gg
develop-morris.at.ply.gg
did-seat.at.playit.gg
display-opportunities.at.ply.gg
division-phase.at.ply.gg
documents-timely.at.ply.gg
door-hop.at.ply.gg
drug-definition.at.ply.gg
early-drinking.at.ply.gg
earth-sw.at.ply.gg
effective-script.at.playit.gg
effects-clock.at.ply.gg
el-resolve.at.ply.gg
email-join.at.ply.gg
email-midwest.at.ply.gg
engineering-metadata.at.ply.gg
enough-fabulous.at.ply.gg
enter-intellectual.at.ply.gg
entertainment-delight.at.ply.gg
error-november.at.ply.gg
eur-mambo.at.ply.gg
everything-forgot.at.ply.gg
example-implementing.at.ply.gg
except-operate.at.ply.gg
existing-compatible.at.ply.gg
existing-preliminary.at.ply.gg
faculty-consecutive.at.ply.gg
faq-savings.at.ply.gg
favorite-public.at.playit.gg
featured-anticipated.at.ply.gg
feed-measures.at.ply.gg
female-custody.at.ply.gg
female-touring.at.playit.gg
female-touring.at.ply.gg
few-seed.at.ply.gg
final-lol.at.ply.gg
find-bhutan.at.ply.gg
flash-mainstream.at.ply.gg
focus-issues.at.ply.gg
forward-isle.at.ply.gg
found-guys.at.ply.gg
france-browser.at.ply.gg
france-reply.at.ply.gg
free-advanced.at.ply.gg
friday-transfer.at.playit.gg
friend-trials.at.ply.gg
function-parents.at.ply.gg
gallery-website.at.ply.gg
games-nursery.at.ply.gg
games-romania.at.ply.gg
george-interface.at.ply.gg
germany-terminals.at.ply.gg
gifts-importantly.at.ply.gg
global-lows.at.ply.gg
goods-switching.at.ply.gg
google-skills.at.ply.gg
government-incorrect.craft.ply.gg
graphics-absorption.at.playit.gg
graphics-absorption.at.ply.gg
great-movie.at.ply.gg
green-lawn.at.ply.gg
green-makes.at.ply.gg
ground-complaint.at.ply.gg
groups-hon.at.ply.gg
groups-integral.at.ply.gg
hair-number.at.ply.gg
happy-produced.at.ply.gg
held-honor.at.ply.gg
hit-pichunter.at.ply.gg
holiday-village.at.ply.gg
hope-mutual.at.ply.gg
horse-statutory.at.ply.gg
host-blah.at.ply.gg
hosting-apache.at.ply.gg
hot-ph.at.ply.gg
hp-apartment.at.ply.gg
huge-majority.at.ply.gg
human-declare.at.ply.gg
includes-marilyn.at.ply.gg
increase-vsnet.at.ply.gg
increased-religious.at.ply.gg
independent-rows.at.ply.gg
individual-between.at.ply.gg
industry-temperatures.at.ply.gg
industry-tramadol.at.ply.gg
int-caution.at.playit.gg
interested-deaf.at.ply.gg
interested-remix.at.ply.gg
into-mining.at.ply.gg
involved-actress.at.ply.gg
issue-min.at.ply.gg
j-session.at.ply.gg
james-bean.at.ply.gg
japanese-partner.at.ply.gg
jersey-fridge.at.ply.gg
jobs-font.at.ply.gg
join-plastics.at.ply.gg
journal-dvds.at.ply.gg
july-pty.at.ply.gg
kind-induced.at.ply.gg
kitchen-animated.at.ply.gg
last-electron.at.ply.gg
leave-civil.craft.ply.gg
less-monitor.at.playit.gg
less-monitor.at.ply.gg
letter-macro.at.ply.gg
level-baseline.at.ply.gg
likely-widespread.at.ply.gg
list-costs.craft.ply.gg
little-container.at.ply.gg
look-eastern.at.ply.gg
lost-constitute.at.ply.gg
lukecloud.playit.gg
lyrics-host.at.ply.gg
lyrics-orchestra.at.ply.gg
ma-gothic.at.ply.gg
main-ix.at.ply.gg
maintenance-financing.at.ply.gg
makes-conferences.at.ply.gg
management-wp.at.ply.gg
map-reno.at.ply.gg
market-galaxy.at.playit.gg
match-americans.at.ply.gg
media-boom.at.playit.gg
medicine-instrumentation.at.ply.gg
medicine-marks.at.ply.gg
medium-supplies.at.ply.gg
men-universe.at.ply.gg
message-epic.at.ply.gg
metal-jennifer.at.ply.gg
methods-cams.at.ply.gg
methods-tapes.at.ply.gg
michael-dts.at.ply.gg
million-focus.at.ply.gg
million-luxury.at.ply.gg
min-publishing.at.ply.gg
mini-mw.at.ply.gg
minimum-housewives.at.ply.gg
mission-retro.at.ply.gg
modern-novel.at.ply.gg
months-documents.at.playit.gg
months-documents.at.ply.gg
more-declined.at.ply.gg
move-concepts.at.ply.gg
mr-species.at.ply.gg
music-treatment.at.ply.gg
my-alternatives.at.ply.gg
my-mild.at.ply.gg
n-verified.at.ply.gg
names-sender.at.ply.gg
natural-kw.at.ply.gg
new-knee.at.ply.gg
news-chamber.at.ply.gg
of-disco.at.ply.gg
off-stack.at.ply.gg
office-hours.at.ply.gg
once-wifi.at.ply.gg
online-br.at.ply.gg
opinion-marine.at.ply.gg
options-oaks.at.ply.gg
options-orlando.at.ply.gg
or-realtor.at.ply.gg
other-show.at.ply.gg
outdoor-keen.at.ply.gg
overall-unavailable.at.ply.gg
paid-grid.at.ply.gg
panel-compiler.at.ply.gg
parties-class.at.ply.gg
pass-variable.at.playit.gg
paul-look.at.ply.gg
pay-traditions.at.ply.gg
pdf-rough.at.ply.gg
perfect-subsidiaries.at.ply.gg
picture-olympus.at.ply.gg
place-dated.at.ply.gg
play-zoloft.at.ply.gg
police-levy.at.ply.gg
policies-transmission.at.ply.gg
policy-generating.at.ply.gg
policy-tennis.at.ply.gg
pool-divide.at.ply.gg
population-generate.at.ply.gg
primary-comment.at.playit.gg
printer-rats.at.ply.gg
private-buzz.at.ply.gg
probably-custody.at.ply.gg
product-adapter.at.ply.gg
programs-scsi.at.ply.gg
provide-exchange.at.ply.gg
provided-contain.at.ply.gg
public-specifically.at.ply.gg
publications-parks.at.playit.gg
publications-parks.at.ply.gg
purposes-initiatives.at.playit.gg
questions-outdoor.at.ply.gg
r-council.at.ply.gg
rather-dominican.at.ply.gg
ratings-lies.at.ply.gg
received-electro.at.ply.gg
recent-infinite.at.ply.gg
regional-communication.at.ply.gg
release-namibia.at.ply.gg
remember-performance.at.ply.gg
rental-kilometers.at.ply.gg
require-entitled.at.ply.gg
require-sonic.at.ply.gg
richard-western.at.ply.gg
role-bottle.at.ply.gg
running-absorption.at.ply.gg
same-impact.at.ply.gg
sat-japanese.at.ply.gg
save-paste.at.playit.gg
save-paste.at.ply.gg
says-fda.at.ply.gg
schedule-hot.at.ply.gg
schedule-mortgages.at.ply.gg
school-funny.at.ply.gg
science-andy.at.ply.gg
score-deadline.at.ply.gg
search-framework.at.ply.gg
season-delays.at.ply.gg
section-contract.at.playit.gg
secure-potential.at.ply.gg
seller-ranges.at.ply.gg
sep-deep.at.ply.gg
sep-slideshow.at.ply.gg
session-buy.at.ply.gg
share-tubes.at.ply.gg
she-sustainability.at.ply.gg
shipping-taiwan.at.ply.gg
shoes-bargains.at.ply.gg
shop-useful.at.ply.gg
show-impressive.at.ply.gg
sign-melbourne.at.ply.gg
significant-plastic.at.ply.gg
silver-changelog.at.ply.gg
simply-macintosh.at.ply.gg
size-amsterdam.at.ply.gg
size-om.at.ply.gg
social-cyprus.at.ply.gg
society-cotton.at.ply.gg
society-lakes.at.ply.gg
some-exchange.at.ply.gg
songs-auburn.at.ply.gg
songs-transfer.at.ply.gg
sources-proudly.at.ply.gg
sponsored-program.at.playit.gg
sport-discuss.at.playit.gg
states-internet.at.ply.gg
status-flooring.at.ply.gg
stay-assistance.at.ply.gg
stock-accent.at.ply.gg
stories-clearing.at.ply.gg
stories-pointing.at.ply.gg
structure-tour.at.ply.gg
students-leaving.at.ply.gg
studies-royal.at.ply.gg
study-silly.at.ply.gg
subscribe-nowhere.at.ply.gg
super-myth.at.ply.gg
support-refurbished.at.ply.gg
sure-ing.at.ply.gg
table-supplier.at.ply.gg
take-diagnostic.at.ply.gg
taken-between.at.ply.gg
target-tn.at.ply.gg
teaching-juice.at.ply.gg
technologies-penny.at.ply.gg
teen-mid.at.ply.gg
telephone-amounts.at.ply.gg
then-principal.at.ply.gg
three-identifies.at.ply.gg
thus-harmony.at.ply.gg
thus-sir.at.ply.gg
topic-southern.at.ply.gg
topics-yrs.at.ply.gg
true-bizrate.at.ply.gg
true-subjective.at.ply.gg
turn-ieee.at.ply.gg
tv-recycling.at.ply.gg
type-investments.at.ply.gg
types-accessory.at.ply.gg
union-des.at.ply.gg
unit-dishes.at.playit.gg
unituhc.playit.gg
unless-mixed.at.ply.gg
up-account.at.ply.gg
updates-minnesota.at.ply.gg
us-mime.at.ply.gg
usa-departments.at.ply.gg
usb-systems.at.ply.gg
use-flexible.at.ply.gg
user-interface.at.ply.gg
users-equipped.at.playit.gg
vacation-seas.at.ply.gg
version-friendship.at.ply.gg
video-differently.at.ply.gg
videos-baltimore.at.ply.gg
view-binary.at.ply.gg
virtual-rome.at.ply.gg
visit-bra.at.ply.gg
visit-usda.at.ply.gg
visual-buf.at.ply.gg
web-amateur.at.ply.gg
web-scales.at.ply.gg
website-mysimon.at.ply.gg
wed-band.at.ply.gg
wednesday-auction.at.ply.gg
went-progressive.at.ply.gg
which-db.at.ply.gg
win-grades.at.ply.gg
window-shoulder.at.ply.gg
without-accessory.at.ply.gg
world-gibson.at.ply.gg
wrong-permanent.at.playit.gg
you-duty.at.playit.gg
you-himself.at.ply.gg
zip-geological.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/25d96b9c5c2e53811b3677ad65b1088c752670fe0cbcd0b3187567976af15774/detection

1a2015.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-08-20)

3.124.67.191:18476
3.125.188.168:18476
3.67.15.169:18476
3.68.56.232:18476
35.157.111.131:18476

# Reference: https://www.virustotal.com/gui/file/3699a793c6a4a6ddcd4ed80dd5115f3bbe4c4348eb050532770bae1ed7aa940d/detection
# Reference: https://www.virustotal.com/gui/file/9b9c6f46ff50a1df7a0d8c904e24ccdac89882b2d2ffd1aac3048e4cd37507e4/detection

18.228.115.60:12993
18.229.146.63:12993
18.229.248.167:12993
18.231.93.153:12993
54.94.248.37:12993

# Reference: https://www.virustotal.com/gui/file/006267d3bc491b155ff2e5a884f00ee2e1783780b8e439a92ee80adf3595a40f/detection

91.109.178.9:3333
vops.ddns.net

# Reference: https://twitter.com/pmelson/status/1693342246563627400
# Reference: https://pastebin.com/BThmj07d

103.134.3.22:4444
103.134.3.22:8080
109.236.86.66:45477
109.236.88.103:38675
147.185.221.16:24471
154.40.45.213:49684
162.210.192.135:26453
178.132.0.83:37615
185.212.47.90:1980
192.210.175.4:1070
193.161.193.99:29103
193.233.255.42:6522
195.154.43.182:35439
2.69.109.185:4449
20.111.40.139:8848
202.124.119.24:7777
217.23.13.32:40249
23.111.200.80:4045
27.76.144.71:4449
3.64.4.198:11684
45.92.1.13:8080
62.112.10.76:43931
64.44.83.66:2055
69.64.52.28:36393
81.99.162.48:23773
89.38.96.110:37107
93.190.139.161:40327
94.237.66.38:4449
16.ip.gl.ply.gg
browse-tea.gl.at.ply.gg
discussion-lib.at.ply.gg
housing-ibm.gl.at.ply.gg
kitchen-suicide.gl.at.ply.gg
monkeygang123-29103.portmap.host
rsa2048authtorapi.sytes.net
shadowExe-47527.portmap.host
soon-relationships.gl.at.ply.gg
their-snowboard.gl.at.ply.gg
u-latter.at.ply.gg
wide-content.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-08-21)

18.158.249.75:14634
181.52.102.110:2009
3.124.142.205:14634
3.125.102.39:14634
3.125.223.134:14634
46.246.6.17:1994

# Reference: https://www.virustotal.com/gui/file/114d799d0ae49db96db881877e7a2453376e925eec0b5c301414dff28bb611c5/detection
# Reference: https://www.virustotal.com/gui/file/0fc2d9e32525a234bc29810656f3ec33e2b794e65c1370d1b56c6b1fd9888eff/detection

209.145.56.0:1922
cot.sells-it.net

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-08-23)

147.185.221.180:42335
147.50.253.241:6522
18.158.249.75:19067
18.192.31.165:19067
3.124.142.205:19067
3.125.209.94:19067
3.125.223.134:19067

# Reference: https://threatfox.abuse.ch/ioc/1151950/

95.104.156.145:5432

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-08-25)

18.158.249.75:17561
18.192.31.165:17561
3.124.142.205:17561
3.125.102.39:17561
3.125.223.134:17561
3.66.38.117:12360
52.28.247.255:12360

# Reference: https://www.virustotal.com/gui/file/c1564ff5e4540accd7921c43bb48e567a92fd432bcf35062faf300bb9fbb7818/detection

46.246.82.7:1982
berlin777.duckdns.org

# Reference: https://www.virustotal.com/gui/file/24a7ccc545119bdcfbb2dabe8f5341ba1658c9dc96edaee67ca44aaa6958323d/detection

cyberbull.ddns.net

# Reference: https://www.virustotal.com/gui/file/a37c80228c9608b43ac517f1be89438dd183a2a4e7a605b963c00ae8d51029fa/detection
# Reference: https://www.virustotal.com/gui/file/a0a3036205ce63510cf68b2b90703b697249fcc05a1d4d8b81ec27f4eb6f45b3/detection

37.214.52.191:7777
fannlezy.ddns.net

# Reference: https://www.virustotal.com/gui/file/c70e49cc1b6300f3450cf099ad51e98cc9445e3de7396a0521790a1298acfb9a/detection
# Reference: https://www.virustotal.com/gui/file/404928e7c114c0fd761e035f58df80d22e7bec12ef6fd2986b8de71932ad0744/detection

99.28.56.10:1177
elitehost.ddns.net

# Reference: https://www.virustotal.com/gui/file/00071ef09c1d2b6a261f6d0a2c25f1b0e4e4f764eb3945e8ec776246ae0569e5/detection

31.163.33.159:9999
hornon.hopto.org

# Reference: https://www.virustotal.com/gui/file/002b9be003780f2189453540aa50f36be24182f6c9a87a6283064aa8613df6b0/detection

mohamedansary757.hopto.org

# Reference: https://www.virustotal.com/gui/file/0030d668d5467178bd9a92b11b650ea5715b40df59d448c1e0a6e977beda5ec6/detection

123456789b.hopto.org

# Reference: https://www.virustotal.com/gui/file/0004802ae75a7a06e1426ebca6d0cdef35d14007b250ebdf3031cc9c1058f53a/detection

rildodasc.hopto.org

# Reference: https://www.virustotal.com/gui/file/10d8c75d31632c0ab10806ba5d76f422c036a5bf0cc2122772336379abdba895/detection

0027.zapto.org

# Reference: https://www.virustotal.com/gui/file/8dc325e4d564bea751ac9c1c826cfe4efead089c4fe7e1ad1fa7387f3e290687/detection

007007009.zapto.org

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-08-26)

18.157.68.73:17165
18.192.93.86:17165
3.126.37.18:17165

# Reference: https://www.virustotal.com/gui/file/14a0fb0c4f39f0882d1aaf6c364ea044392a58e3cbd84ee14eb65f5d69f48f51/detection

hhhhh11111.no-ip.biz
nx.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/000022bb4d4e7b62c1426cec21f1fd7eef254c50aca79e72dcf3673daf21bacd/detection

khalidoxx.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/7333c7b8465d865023f7ca9426e1e017d2c5564e0689e4b5c99861495a898998/detection

007810212541.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/7e18416d27579f744749bb3b6c60bf48f386d52706c50b36504c64879a47df3a/detection

007asas.no-ip.biz
007asas.no-ip.biz.ovh.net

# Reference: https://www.virustotal.com/gui/file/7420b5a7656cfc9ee4a6c076113c461e2a0b102cc1802cb102a0216619ae3035/detection

007moh.no-ip.biz
007panel.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/f2b281de207dfbb3cb552e4adbf5a719352cadebfcb257b2912f95d88b02e157/detection

37.8.47.218:1777
0099887766.no-ip.biz
0108590536.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/2ea7428f724ea24dde64d7189665fd765ec8641fe7d14e629aaaa1aa9ecbf889/detection
# Reference: https://www.virustotal.com/gui/file/f791ab4f4f9957589767bda984fc359cd58f8ce8b14bf6f236b8ba6484672619/detection

012.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/a15a57a0cc3b273e36a7a3452fc9ab6137e2686a0bd6ec8548c5fc9d99199bff/detection

03032010223.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/8ed62648ecbad4b65bc89526f1461525f58c5c6c8661ff29071638c06255062c/detection

0548973019.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/f0d291f8afeeb556d14a5404d1d58b5a29b0b80afa2e55d50b920c599027727d/detection

011290371193.no-ip.biz
06249244208.no-ip.biz
1111142909818353.servehalflife.com
111198367187968.servehttp.com
118336473297.servehttp.com
124032260.no-ip.info
201611244243782.servehalflife.com
201611265129248.no-ip.biz
20206224349512.servehalflife.com
6657721338400.servehttp.com
a47798095.go.3322.org
a85533091.go.3322.org
b11217070670034.go.3322.org

# Reference: https://www.virustotal.com/gui/file/5a4960b1ad3d7003501aaa18e82ff8a24d4e645b7c48ec948af4856b1def4dc8/detection

06249292838.no-ip.biz
20216224373692.servehalflife.com
6657807093473.servehttp.com
a47846006.go.3322.org

# Reference: https://www.virustotal.com/gui/file/60dd4635f41608e7c638299d714b7a217a039c6e2c7799220f9606c14984170d/detection

07.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/ec10a447125fde5f519fc6df2cdc566eac7024cfff39b0df6cc7a7b9eb31b8c5/detection

0770.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/0bf4c6d4f5fb9525b54fc2335ffde13231474bc9ed90908c8b974dbf318264b1/detection

07821555640.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/2ecbb801e03029c4ed68dc629be5e7f0e945c896a84c8d728b01a8314716a646/detection

0790.no-ip.biz

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-08-27)

140.238.249.14:3334
147.185.221.16:33087
18.136.148.247:17008
18.139.9.214:17008
18.141.129.246:17008
18.198.77.177:17760
18.229.146.63:19096
18.231.93.153:19096
3.127.181.115:16739
3.127.59.75:17760
3.64.4.198:16739
3.67.161.133:16739
3.67.62.142:16739
35.158.159.254:17760
52.220.121.212:17008
54.94.248.37:19096

# Reference: https://twitter.com/PratimaLohar/status/1696210688023085367
# Reference: https://www.virustotal.com/gui/file/2adc80237470f1d07e1f8aade0b386cec89a358aee369956dbabf41bbe75fcea/detection

188.17.40.23:4567
dhbgtfrhtg.hopto.org

# Reference: https://twitter.com/DmitriyMelikov/status/1696050783790207060
# Reference: https://www.virustotal.com/gui/file/66702e21faa38c24f49a33112d2036d8f3b6bcfd686db47299a4dc44dedf13d8/detection

128.199.5.0:2255
netflex.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9bd0de1fb1f1871065106eb18545b8722eac8999274b1483acb2a94df467d461/detection

46.246.6.17:3030
46.246.82.17:3030
46.246.86.21:3030

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-08-30)

18.156.13.209:14334
18.157.68.73:14334
18.158.58.205:19337
18.192.93.86:14334
3.127.138.57:14334
3.127.181.115:19337
3.64.4.198:19337

# Reference: https://www.virustotal.com/gui/file/8deb48a9d5d45d9f8cbf1708db73970f38b4c78e6a8501d1b351dd7a143cac06/detection

140.150.224.11:1576

# Reference: https://threatfox.abuse.ch/ioc/1152865/

209.25.141.181:54077

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-08-31)

3.127.138.57:10690
3.126.37.18:10690
18.156.13.209:10690
3.121.139.82:13211
3.127.59.75:13211
35.158.159.254:13211
18.192.31.165:16962
3.124.142.205:16962
3.125.102.39:16962

# Reference: https://www.virustotal.com/gui/file/7598961daa8affac4886d4aface1b5cbae1500e386ac42cafca7fc3d9ae5f6c7/detection

179.13.6.226:3110
gremabenj.duckdns.org

# Reference: https://www.virustotal.com/gui/file/41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb/detection

172.111.136.105:2015
adminbogota.duckdns.org
adminwork.duckdns.org

# Reference: https://www.virustotal.com/gui/file/6967f1a5da12f10eb491bdbc40f6242c957326c41202883e7d1563a4a0e58ebd/detection

179.13.6.226:9600

# Reference: https://www.virustotal.com/gui/ip-address/46.246.80.4/relations
# Reference: https://www.virustotal.com/gui/file/e07b114dc126e3c9b27cabb8077931d1c3805457eee0d83db6b9717f185874c8/detection

46.246.80.4:1982
ant-ec.duckdns.org
asyn2306.duckdns.org
axelworm27.duckdns.org
carlos7013.duckdns.org
diazpool14.duckdns.org
ena2021.duckdns.org
envirojo2021.duckdns.org
estereoflow.duckdns.org
framework27.duckdns.org
miwarzo.duckdns.org
mleek1122.ddns.net
nene.linkpc.net
paris46.duckdns.org
raz8090.duckdns.org
sos2021jr.duckdns.org
themachine.i234.me
tpbindu.ddns.net
yurenvi.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ef08b4f5e3b178e08bcb947492ccbb4c07290d124241f195145299acb08a1f24/detection

52.255.194.54:6565
allclop.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/mr1928.ddns.net/relations

mr1928.ddns.net

# Reference: https://threatfox.abuse.ch/ioc/1155121/

18.158.58.205:15312

# Reference: https://www.virustotal.com/gui/file/afa1925b54b7d405a44749b2d349dd7c658ebf4c1e5725e181874919ea22c132/detection

179.13.6.226:9966
unicornio2020.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/172.94.40.145/relations
# Reference: https://www.virustotal.com/gui/file/25dc0059d6af20a87dd34f08184da79a228c1858ceb720c9710b57bf46eafdd1/detection

172.94.40.145:9000
04agostook.duckdns.org
25juliook.duckdns.org
wins0404ok.duckdns.org
wins14dicojo9000.duckdns.org
wins1805ok.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-09-05)

172.94.40.145:9000
179.13.6.226:9966
18.156.13.209:15245
18.157.68.73:15245
18.158.249.75:19120
18.158.58.205:15474
18.192.31.165:15305
18.197.239.109:15925
18.197.239.109:16193
18.197.239.109:17545
18.198.77.177:14899
18.198.77.177:15300
209.25.141.229:54720
3.121.139.82:11728
3.124.142.205:15305
3.125.102.39:15305
3.125.188.168:12866
3.125.188.168:15021
3.125.188.168:19994
3.125.209.94:15305
3.125.223.134:15305
3.126.224.214:15021
3.126.224.214:19994
3.127.181.115:12512
3.127.253.86:11728
3.127.253.86:15300
3.127.59.75:14899
3.13.191.225:25565
3.134.125.175:25565
3.22.30.40:25565
3.64.4.198:10309
3.64.4.198:12512
3.64.4.198:15474
3.66.38.117:15925
3.67.112.102:10309
3.67.112.102:12512
3.67.112.102:15474
3.67.15.169:15021
3.67.15.169:19994
3.67.161.133:15474
3.67.62.142:10309
3.68.171.119:16193
3.68.56.232:12866
3.68.56.232:15021
3.69.115.178:16193
3.69.157.220:15925
3.69.157.220:16193
35.157.111.131:12866
35.157.111.131:19994
35.158.159.254:11728
35.158.159.254:14899
35.158.159.254:15300
52.28.112.211:11728
52.28.112.211:15300
52.28.247.255:16193
91.109.180.3:5050

# Reference: https://app.any.run/tasks/7b76258d-33ee-4c0a-a2e3-21393ddba7d8/

105.154.230.199:4000

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/blob/main/DDGroup/historical_C2_Domains.txt

asyrwart.ddns.net
bitendhatung.servebeer.com 
darwin090.gleeze.com
mmdedi02.freeddns.org

# Reference: https://www.virustotal.com/gui/file/663c2b9e7d92bf199c066fe3f0f7f99092d280993ffabee22b42483b55d4b4c5/detection

bluenew23.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c3b45f26e7dc917ec624fa54173b1b85a74ff4bdfef9da5a15a0bb8fd82ac07e/detection

18.192.93.86:10212
41.68.165.218:1177
41.69.229.205:1177
attaatta.ddns.net

# Reference: https://www.virustotal.com/gui/file/b42a47eb5cd524c73a0aacfefd6f9d4e700c86b64435c9fc4bd3e1dad43204e4/detection

3.69.157.220:19776

# Reference: https://threatfox.abuse.ch/browse/tag/njrat/ (# 2023-09-09)

18.158.249.75:17176
18.192.31.165:16377
3.124.142.205:16377
3.124.142.205:17176
3.125.102.39:16377
3.125.209.94:17176
3.125.223.134:16377

# Reference: https://www.virustotal.com/gui/file/0044f81c0c0a7d40a0b38ff12bc82123e695b104cf689eb14d1630820063f6c6/detection

147.185.221.16:1299

# Reference: https://www.virustotal.com/gui/file/001204abb7d38dabf1e166d171e08ee4acb02ee007e4c37fb7ebb12eefc94ee8/detection

147.185.221.16:33255

# Reference: https://www.virustotal.com/gui/file/02135932a2cf05896e07717901e5feb98fa7bc8b82d90a50c849efab5d254ff7/detection

147.185.221.16:39071
see-honduras.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/ioc/1155792/

147.185.221.16:41398

# Reference: https://www.virustotal.com/gui/file/01d52724cde0266e5def6cc783752cf39e4ab5b0d109e2a4e09733ea81bed93d/detection

147.185.221.16:10215
new-interfaces.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/22b3320b0c3690da7226f3ae74548e35bca88ee6525d8332d7bedc34905177cb/detection

147.185.221.16:39301
mission-leading.gl.at.ply.gg
wcpanel.hackcrack.io

# Reference: https://www.virustotal.com/gui/file/0175c119f51a221f5e4a91d0c90ff7bd054edbbc21017d8ba323195b632d6587/detection

185.215.148.47:8086
hackcrack.io
blog.hackcrack.io

# Reference: https://www.virustotal.com/gui/file/21485b5709847afe8ce1830603821de9e34fe8887f954afee13c6d96bade2a5f/detection

103.180.135.107:1111
nockken.hackcrack.io

# Reference: https://www.virustotal.com/gui/file/a89e6964d668e44e6f4abd48f45fd8761ebe2910f54c1de0c9c1d4d979fd0de7/detection

103.170.255.246:1111
kata.hackcrack.io

# Reference: https://www.virustotal.com/gui/file/0d96485a2133755f94266b331a292d0427940d6e7dd30ac179f4a81cada01e35/detection

209.25.142.224:22157
zcpanel.hackcrack.io

# Reference: https://www.virustotal.com/gui/file/09b0a196f7d8aab9d2a4d023fdb4ea6103466ee0e99d73d5ded0fea0cb337b7f/detection

85.209.87.138:8085
amazonhost.thedreamsop.com
xcpanel.hackcrack.io

# Reference: https://www.virustotal.com/gui/file/0feeb8481e07c0d5c1973f7a1644b788d56c9616c82ae0ce73505893664804a1/detection

185.215.148.47:8086
vcpanel.hackcrack.io
ycpanel.hackcrack.io

# Reference: https://www.virustotal.com/gui/ip-address/147.185.221.16/relations

abstract-beads.gl.at.ply.gg
abstract-specials.gl.at.ply.gg
academic-extends.gl.at.ply.gg
access-bids.gl.at.ply.gg
account-counting.gl.at.ply.gg
act-inventory.gl.at.ply.gg
action-list.gl.at.ply.gg
activities-divx.gl.at.ply.gg
ad-garage.gl.at.ply.gg
address-rentals.gl.at.ply.gg
adult-purchased.gl.at.ply.gg
adult-want.gl.at.ply.gg
advanced-rx.gl.at.ply.gg
africa-surf.gl.at.ply.gg
agent-motorcycle.gl.at.ply.gg
ago-regression.gl.at.ply.gg
ago-shopper.gl.at.ply.gg
agreement-ball.gl.at.ply.gg
aid-cowboy.gl.at.ply.gg
air-papers.gl.at.ply.gg
almost-k.gl.at.ply.gg
always-layers.gl.at.ply.gg
amazon-engineers.gl.at.ply.gg
american-resume.gl.at.ply.gg
an-volunteer.gl.at.ply.gg
annual-six.gl.at.ply.gg
any-bed.gl.at.ply.gg
anything-cad.gl.at.ply.gg
apple-broadband.gl.at.ply.gg
apple-workshops.gl.at.ply.gg
application-forum.gl.at.ply.gg
approved-carefully.gl.at.ply.gg
approved-instantly.gl.at.ply.gg
april-symphony.gl.at.ply.gg
archives-nikon.gl.at.ply.gg
artists-economy.gl.at.ply.gg
asked-facility.gl.at.ply.gg
assessment-good.gl.at.ply.gg
assessment-mardi.gl.at.ply.gg
at-compression.gl.at.ply.gg
aug-geographic.gl.at.ply.gg
australia-inquiry.gl.at.ply.gg
authors-running.gl.at.ply.gg
auto-productive.gl.at.ply.gg
availability-blink.gl.at.ply.gg
availability-cafe.gl.at.ply.gg
average-example.gl.at.ply.gg
average-notion.gl.at.ply.gg
awards-since.gl.at.ply.gg
awsservice.duckdns.org
baby-laser.gl.at.ply.gg
back-refinance.gl.at.ply.gg
bad-peers.gl.at.ply.gg
bad-primarily.gl.at.ply.gg
bar-editor.gl.at.ply.gg
based-housewives.gl.at.ply.gg
based-zoloft.gl.at.ply.gg
basis-tries.gl.at.ply.gg
beauty-offshore.gl.at.ply.gg
been-p.gl.at.ply.gg
behind-composition.gl.at.ply.gg
behind-naval.gl.at.ply.gg
being-sim.gl.at.ply.gg
below-broadcast.gl.at.ply.gg
benefits-ia.gl.at.ply.gg
benefits-injury.gl.at.ply.gg
best-derby.gl.at.ply.gg
best-jpeg.gl.at.ply.gg
best-recycling.gl.at.ply.gg
bid-turn.gl.at.ply.gg
blood-walking.gl.at.ply.gg
board-celebrity.gl.at.ply.gg
board-proposition.gl.at.ply.gg
books-seven.gl.at.ply.gg
books-wake.gl.at.ply.gg
both-refrigerator.gl.at.ply.gg
boys-labeled.gl.at.ply.gg
brand-partly.gl.at.ply.gg
browse-count.gl.at.ply.gg
budget-nations.gl.at.ply.gg
building-ha.gl.at.ply.gg
built-treated.gl.at.ply.gg
businesses-dig.gl.at.ply.gg
businesses-newport.gl.at.ply.gg
buy-lang.gl.at.ply.gg
buy-lodge.gl.at.ply.gg
calendar-closely.gl.at.ply.gg
calendar-commands.gl.at.ply.gg
calendar-permission.gl.at.ply.gg
call-princeton.gl.at.ply.gg
camera-shadows.gl.at.ply.gg
can-imports.gl.at.ply.gg
capacity-january.gl.at.ply.gg
car-decade.gl.at.ply.gg
card-independently.gl.at.ply.gg
casino-economy.gl.at.ply.gg
cause-world.gl.at.ply.gg
cell-thick.gl.at.ply.gg
center-lies.gl.at.ply.gg
central-muslims.gl.at.ply.gg
certain-homeless.gl.at.ply.gg
certain-organizations.gl.at.ply.gg
character-scottish.gl.at.ply.gg
children-phil.gl.at.ply.gg
china-seasons.gl.at.ply.gg
chinese-specifications.gl.at.ply.gg
choose-filters.gl.at.ply.gg
cities-winner.gl.at.ply.gg
class-lauren.gl.at.ply.gg
classic-journalists.gl.at.ply.gg
close-aged.gl.at.ply.gg
clothing-fragrances.gl.at.ply.gg
cnet-collection.gl.at.ply.gg
cnet-sole.gl.at.ply.gg
com-retailer.gl.at.ply.gg
comes-owen.gl.at.ply.gg
coming-beads.gl.at.ply.gg
command-jury.gl.at.ply.gg
commercial-tft.gl.at.ply.gg
common-self.gl.at.ply.gg
communications-leaving.gl.at.ply.gg
compare-hill.gl.at.ply.gg
computer-richard.gl.at.ply.gg
condition-dear.gl.at.ply.gg
connection-britain.gl.at.ply.gg
contains-admitted.gl.at.ply.gg
contract-mental.gl.at.ply.gg
contract-sally.gl.at.ply.gg
cool-portrait.gl.at.ply.gg
copy-cultures.gl.at.ply.gg
copy-marco.gl.at.ply.gg
core-vids.gl.at.ply.gg
corporate-nevada.gl.at.ply.gg
corporate-ron.gl.at.ply.gg
cost-cultural.gl.at.ply.gg
cost-floors.gl.at.ply.gg
costs-lafayette.gl.at.ply.gg
court-basketball.gl.at.ply.gg
created-requiring.gl.at.ply.gg
credit-governor.gl.at.ply.gg
cross-romania.gl.at.ply.gg
current-thu.gl.at.ply.gg
d-logic.gl.at.ply.gg
dating-jesse.gl.at.ply.gg
david-camcorder.gl.at.ply.gg
day-cache.gl.at.ply.gg
dc-envelope.gl.at.ply.gg
deep-modifications.gl.at.ply.gg
default-obligation.gl.at.ply.gg
degree-timer.gl.at.ply.gg
description-mandatory.gl.at.ply.gg
description-ottawa.gl.at.ply.gg
designed-subscribers.gl.at.ply.gg
desktop-pasta.gl.at.ply.gg
digital-oracle.gl.at.ply.gg
digital-ver.gl.at.ply.gg
directory-shell.gl.at.ply.gg
discussion-penetration.gl.at.ply.gg
discussion-supplemental.gl.at.ply.gg
disease-muscle.gl.at.ply.gg
display-proposition.gl.at.ply.gg
distribution-cycles.gl.at.ply.gg
document-alpha.gl.at.ply.gg
documents-these.gl.at.ply.gg
does-luck.gl.at.ply.gg
doing-drawn.gl.at.ply.gg
done-arch.gl.at.ply.gg
door-saint.gl.at.ply.gg
down-nuke.gl.at.ply.gg
down-welcome.gl.at.ply.gg
download-arrange.gl.at.ply.gg
downloads-horse.gl.at.ply.gg
downloads-nation.gl.at.ply.gg
driver-mint.gl.at.ply.gg
due-capitol.gl.at.ply.gg
due-drink.gl.at.ply.gg
early-program.gl.at.ply.gg
earth-queen.gl.at.ply.gg
ed-scripting.gl.at.ply.gg
edition-carrying.gl.at.ply.gg
el-relaxation.gl.at.ply.gg
electric-guest.gl.at.ply.gg
electronic-luxembourg.gl.at.ply.gg
else-lexington.gl.at.ply.gg
email-cover.gl.at.ply.gg
email-west.gl.at.ply.gg
employees-implemented.gl.at.ply.gg
engine-accounts.gl.at.ply.gg
engine-curious.gl.at.ply.gg
enjoy-individual.gl.at.ply.gg
ensure-bedrooms.gl.at.ply.gg
enterprise-calm.gl.at.ply.gg
enterprise-chicken.gl.at.ply.gg
environment-leads.gl.at.ply.gg
environment-price.gl.at.ply.gg
equipment-find.gl.at.ply.gg
especially-journalist.gl.at.ply.gg
especially-rather.gl.at.ply.gg
established-opportunities.gl.at.ply.gg
estate-advisors.gl.at.ply.gg
estate-motel.gl.at.ply.gg
european-plymouth.gl.at.ply.gg
example-clinic.gl.at.ply.gg
express-trucks.gl.at.ply.gg
face-kissing.gl.at.ply.gg
fair-organize.gl.at.ply.gg
faq-optional.gl.at.ply.gg
faq-rg.gl.at.ply.gg
fast-videos.gl.at.ply.gg
fat-shoe.gl.at.ply.gg
fat-zdnet.gl.at.ply.gg
feature-trade.gl.at.ply.gg
february-rn.gl.at.ply.gg
february-warnings.gl.at.ply.gg
federal-true.gl.at.ply.gg
fee-harmful.gl.at.ply.gg
fees-cutting.gl.at.ply.gg
fees-deployment.gl.at.ply.gg
feet-examines.gl.at.ply.gg
female-crimes.gl.at.ply.gg
female-refinance.gl.at.ply.gg
few-brandon.gl.at.ply.gg
field-premier.gl.at.ply.gg
figure-penn.gl.at.ply.gg
filter-simulation.gl.at.ply.gg
final-instances.gl.at.ply.gg
finally-ebook.gl.at.ply.gg
financial-metabolism.gl.at.ply.gg
fine-bruce.gl.at.ply.gg
fl-distributions.gl.at.ply.gg
floor-forces.gl.at.ply.gg
food-appeared.gl.at.ply.gg
football-tba.gl.at.ply.gg
for-duke.gl.at.ply.gg
form-allied.gl.at.ply.gg
format-implement.gl.at.ply.gg
found-commonly.gl.at.ply.gg
foundation-informative.gl.at.ply.gg
foundation-partners.gl.at.ply.gg
free-conf.gl.at.ply.gg
free-fm.gl.at.ply.gg
fri-site.gl.at.ply.gg
fri-wider.gl.at.ply.gg
friend-deer.gl.at.ply.gg
friend-discussion.gl.at.ply.gg
friend-producers.gl.at.ply.gg
function-reproduced.gl.at.ply.gg
functions-screensavers.gl.at.ply.gg
future-bedrooms.gl.at.ply.gg
gallery-mexican.gl.at.ply.gg
gay-norwegian.gl.at.ply.gg
gift-my.gl.at.ply.gg
give-grows.gl.at.ply.gg
gold-peoples.gl.at.ply.gg
golf-leaders.gl.at.ply.gg
goods-arms.gl.at.ply.gg
goods-imports.gl.at.ply.gg
got-sense.gl.at.ply.gg
government-mls.gl.at.ply.gg
grand-organisation.gl.at.ply.gg
graphics-calculation.gl.at.ply.gg
greater-characteristics.gl.at.ply.gg
groups-toshiba.gl.at.ply.gg
guide-usage.gl.at.ply.gg
guides-hungary.gl.at.ply.gg
guides-pt.gl.at.ply.gg
hall-convergence.gl.at.ply.gg
hall-kidney.gl.at.ply.gg
hardware-constant.gl.at.ply.gg
have-manufacturers.gl.at.ply.gg
having-nevertheless.gl.at.ply.gg
her-featuring.gl.at.ply.gg
hi-aspect.gl.at.ply.gg
his-observer.gl.at.ply.gg
hit-tunisia.gl.at.ply.gg
hold-simply.gl.at.ply.gg
homepage-acknowledged.gl.at.ply.gg
homepage-furthermore.gl.at.ply.gg
homepage-messaging.gl.at.ply.gg
hospital-math.gl.at.ply.gg
hosting-declared.gl.at.ply.gg
hotel-fixtures.gl.at.ply.gg
hp-encourage.gl.at.ply.gg
huge-developmental.gl.at.ply.gg
human-grammar.gl.at.ply.gg
ideas-message.gl.at.ply.gg
images-column.gl.at.ply.gg
inc-earlier.gl.at.ply.gg
inc-flip.gl.at.ply.gg
including-venice.gl.at.ply.gg
income-dd.gl.at.ply.gg
independent-de.gl.at.ply.gg
india-britney.gl.at.ply.gg
individual-comments.gl.at.ply.gg
input-helps.gl.at.ply.gg
int-calculated.gl.at.ply.gg
international-schedule.gl.at.ply.gg
into-croatia.gl.at.ply.gg
introduction-prevention.gl.at.ply.gg
investment-cab.gl.at.ply.gg
investment-unwrap.gl.at.ply.gg
island-households.gl.at.ply.gg
island-practical.gl.at.ply.gg
items-cl.gl.at.ply.gg
itself-wide.gl.at.ply.gg
japanese-youth.gl.at.ply.gg
java-mls.gl.at.ply.gg
jersey-provides.gl.at.ply.gg
job-downtown.gl.at.ply.gg
jobs-among.gl.at.ply.gg
joined-turkish.gl.at.ply.gg
joined-zimbabwe.gl.at.ply.gg
jul-nelson.gl.at.ply.gg
july-las.gl.at.ply.gg
jun-breath.gl.at.ply.gg
june-occupations.gl.at.ply.gg
keep-carbon.gl.at.ply.gg
key-stunning.gl.at.ply.gg
kids-reported.gl.at.ply.gg
king-towers.gl.at.ply.gg
kitchen-nissan.gl.at.ply.gg
knowledge-variance.gl.at.ply.gg
known-cholesterol.gl.at.ply.gg
language-migration.gl.at.ply.gg
las-listings.gl.at.ply.gg
last-singapore.gl.at.ply.gg
learning-gays.gl.at.ply.gg
legal-ten.gl.at.ply.gg
level-massage.gl.at.ply.gg
license-sequences.gl.at.ply.gg
license-wordpress.gl.at.ply.gg
likely-photo.gl.at.ply.gg
limited-customized.gl.at.ply.gg
line-ellis.gl.at.ply.gg
list-slow.gl.at.ply.gg
little-control.gl.at.ply.gg
loans-larger.gl.at.ply.gg
log-disappointed.gl.at.ply.gg
log-nut.gl.at.ply.gg
london-ferry.gl.at.ply.gg
long-adopt.gl.at.ply.gg
los-whereas.gl.at.ply.gg
loss-cigarette.gl.at.ply.gg
low-sequence.gl.at.ply.gg
m-az.gl.at.ply.gg
made-showtimes.gl.at.ply.gg
mailing-valid.gl.at.ply.gg
main-colleagues.gl.at.ply.gg
main-lewis.gl.at.ply.gg
making-john.gl.at.ply.gg
man-aurora.gl.at.ply.gg
man-exploring.gl.at.ply.gg
march-hawk.gl.at.ply.gg
mark-mai.gl.at.ply.gg
mark-snow.gl.at.ply.gg
master-canal.gl.at.ply.gg
materials-accessible.gl.at.ply.gg
maximum-moon.gl.at.ply.gg
may-donations.gl.at.ply.gg
md-beauty.gl.at.ply.gg
me-start.gl.at.ply.gg
medium-inbox.gl.at.ply.gg
members-biology.gl.at.ply.gg
members-cave.gl.at.ply.gg
members-vocal.gl.at.ply.gg
memory-eclipse.gl.at.ply.gg
message-gave.gl.at.ply.gg
message-pockets.gl.at.ply.gg
method-finest.gl.at.ply.gg
middle-ballot.gl.at.ply.gg
middle-hydrocodone.gl.at.ply.gg
might-doe.gl.at.ply.gg
million-walls.gl.at.ply.gg
mini-ohio.gl.at.ply.gg
mission-placed.gl.at.ply.gg
mm-certain.gl.at.ply.gg
mm-transferred.gl.at.ply.gg
mobile-reject.gl.at.ply.gg
mode-apollo.gl.at.ply.gg
models-travels.gl.at.ply.gg
modified-trap.gl.at.ply.gg
monday-slovenia.gl.at.ply.gg
monday-upset.gl.at.ply.gg
money-powers.gl.at.ply.gg
month-gerald.gl.at.ply.gg
months-clearance.gl.at.ply.gg
more-rate.gl.at.ply.gg
most-temp.gl.at.ply.gg
mountain-royalty.gl.at.ply.gg
moving-being.gl.at.ply.gg
moving-seeking.gl.at.ply.gg
moving-sys.gl.at.ply.gg
msn-announce.gl.at.ply.gg
msn-objective.gl.at.ply.gg
much-appendix.gl.at.ply.gg
much-decades.gl.at.ply.gg
multi-asia.gl.at.ply.gg
multi-bay.gl.at.ply.gg
multi-quilt.gl.at.ply.gg
murder-drones-rp.playit.gg
mykolateam.ddns.net
name-offshore.gl.at.ply.gg
navigation-creative.gl.at.ply.gg
needed-expenses.gl.at.ply.gg
needed-und.gl.at.ply.gg
needs-undertake.gl.at.ply.gg
net-important.gl.at.ply.gg
net-keyboard.gl.at.ply.gg
net-wells.gl.at.ply.gg
network-amounts.gl.at.ply.gg
network-prepare.gl.at.ply.gg
network-subtle.gl.at.ply.gg
never-nightmare.gl.at.ply.gg
new-graphs.gl.at.ply.gg
next-lying.gl.at.ply.gg
night-circular.gl.at.ply.gg
no-bunny.gl.at.ply.gg
no-wifi.gl.at.ply.gg
nokia-partnership.gl.at.ply.gg
nokia-statutes.gl.at.ply.gg
northern-sept.gl.at.ply.gg
northern-therapist.gl.at.ply.gg
not-mailman.gl.at.ply.gg
notice-complaint.gl.at.ply.gg
november-buzz.gl.at.ply.gg
of-cheap.gl.at.ply.gg
office-smoke.gl.at.ply.gg
officer-however.gl.at.ply.gg
oh-apparatus.gl.at.ply.gg
oh-text.gl.at.ply.gg
oil-psychology.gl.at.ply.gg
oil-titans.gl.at.ply.gg
ok-depth.gl.at.ply.gg
online-expanding.gl.at.ply.gg
online-loops.gl.at.ply.gg
open-column.gl.at.ply.gg
operations-township.gl.at.ply.gg
opinion-pennsylvania.gl.at.ply.gg
opportunities-playstation.gl.at.ply.gg
opportunity-mandate.gl.at.ply.gg
opportunity-pillow.gl.at.ply.gg
options-november.gl.at.ply.gg
or-bible.gl.at.ply.gg
our-political.gl.at.ply.gg
over-andreas.gl.at.ply.gg
over-llp.gl.at.ply.gg
over-wings.gl.at.ply.gg
owner-little.gl.at.ply.gg
p-alike.gl.at.ply.gg
p-gently.gl.at.ply.gg
pacific-lips.gl.at.ply.gg
pages-chronicles.gl.at.ply.gg
pages-guard.gl.at.ply.gg
paper-guestbook.gl.at.ply.gg
papers-basically.gl.at.ply.gg
papers-undefined.gl.at.ply.gg
parents-venezuela.gl.at.ply.gg
parts-distribution.gl.at.ply.gg
parts-msn.gl.at.ply.gg
parts-pocket.gl.at.ply.gg
paypal-adam.gl.at.ply.gg
pc-sk.gl.at.ply.gg
per-antonio.gl.at.ply.gg
period-ken.gl.at.ply.gg
person-correction.gl.at.ply.gg
peter-references.gl.at.ply.gg
peter-tuning.gl.at.ply.gg
phentermine-pine.gl.at.ply.gg
physical-cingular.gl.at.ply.gg
physical-serve.gl.at.ply.gg
picture-not.gl.at.ply.gg
picture-replacement.gl.at.ply.gg
picture-striking.gl.at.ply.gg
pictures-prague.gl.at.ply.gg
place-viewed.gl.at.ply.gg
places-diagnosis.gl.at.ply.gg
plans-zu.gl.at.ply.gg
plant-pts.gl.at.ply.gg
please-loc.gl.at.ply.gg
plus-configurations.gl.at.ply.gg
plus-imports.gl.at.ply.gg
point-croatia.gl.at.ply.gg
policies-marked.gl.at.ply.gg
politics-pm.gl.at.ply.gg
politics-premiere.gl.at.ply.gg
population-tmp.gl.at.ply.gg
post-craps.gl.at.ply.gg
posted-disposition.gl.at.ply.gg
potential-instances.gl.at.ply.gg
pre-clubs.gl.at.ply.gg
pressure-powers.gl.at.ply.gg
print-financial.gl.at.ply.gg
printer-wearing.gl.at.ply.gg
private-spreading.gl.at.ply.gg
probably-sister.gl.at.ply.gg
processing-escape.gl.at.ply.gg
products-es.gl.at.ply.gg
profile-optics.gl.at.ply.gg
program-ln.gl.at.ply.gg
programs-events.gl.at.ply.gg
programs-nearby.gl.at.ply.gg
project-fan.gl.at.ply.gg
proposed-protection.gl.at.ply.gg
protection-freely.gl.at.ply.gg
provided-freeze.gl.at.ply.gg
provided-sun.gl.at.ply.gg
provided-ul.gl.at.ply.gg
publications-southwest.gl.at.ply.gg
quality-tribute.gl.at.ply.gg
quotes-ac.gl.at.ply.gg
race-mas.gl.at.ply.gg
race-oracle.gl.at.ply.gg
radio-strong.gl.at.ply.gg
rate-filled.gl.at.ply.gg
rate-solutions.gl.at.ply.gg
rated-enough.gl.at.ply.gg
rates-conjunction.gl.at.ply.gg
ratings-mistress.gl.at.ply.gg
ratings-proprietary.gl.at.ply.gg
reader-condo.gl.at.ply.gg
reader-growth.gl.at.ply.gg
ready-stereo.gl.at.ply.gg
receive-brands.gl.at.ply.gg
receive-knee.gl.at.ply.gg
received-cuba.gl.at.ply.gg
recent-michel.gl.at.ply.gg
recently-swingers.gl.at.ply.gg
records-rogers.gl.at.ply.gg
regional-clear.gl.at.ply.gg
regional-replacement.gl.at.ply.gg
registration-for.gl.at.ply.gg
related-stories.gl.at.ply.gg
release-evil.gl.at.ply.gg
released-genres.gl.at.ply.gg
released-uw.gl.at.ply.gg
remote-cfr.gl.at.ply.gg
rental-wm.gl.at.ply.gg
reply-brooklyn.gl.at.ply.gg
reply-foto.gl.at.ply.gg
reply-mesa.gl.at.ply.gg
report-evaluate.gl.at.ply.gg
reports-code.gl.at.ply.gg
republic-ton.gl.at.ply.gg
request-local.gl.at.ply.gg
require-build.gl.at.ply.gg
required-promptly.gl.at.ply.gg
required-shots.gl.at.ply.gg
requirements-filed.gl.at.ply.gg
research-scanner.gl.at.ply.gg
rest-morning.gl.at.ply.gg
restaurant-respondents.gl.at.ply.gg
restaurants-training.gl.at.ply.gg
richard-dg.gl.at.ply.gg
richard-republican.gl.at.ply.gg
risk-groove.gl.at.ply.gg
road-mining.gl.at.ply.gg
rock-tournaments.gl.at.ply.gg
role-grade.gl.at.ply.gg
role-maintains.gl.at.ply.gg
room-anti.gl.at.ply.gg
room-guru.gl.at.ply.gg
room-required.gl.at.ply.gg
rooms-kw.gl.at.ply.gg
running-questions.gl.at.ply.gg
s-pin.gl.at.ply.gg
safe-smallest.gl.at.ply.gg
safety-cancelled.gl.at.ply.gg
sales-browser.gl.at.ply.gg
sales-rapidly.gl.at.ply.gg
same-increase.gl.at.ply.gg
sat-diverse.gl.at.ply.gg
sat-wizard.gl.at.ply.gg
saw-harley.gl.at.ply.gg
says-names.gl.at.ply.gg
schedule-precipitation.gl.at.ply.gg
science-periodically.gl.at.ply.gg
score-years.gl.at.ply.gg
scpanel.hackcrack.io
screen-tagged.gl.at.ply.gg
sea-lesbian.gl.at.ply.gg
season-recording.gl.at.ply.gg
secure-conversion.gl.at.ply.gg
secure-elsewhere.gl.at.ply.gg
selected-mario.gl.at.ply.gg
selection-chorus.gl.at.ply.gg
series-mpegs.gl.at.ply.gg
server.haryanvideveloper.live
sets-require.gl.at.ply.gg
several-jackets.gl.at.ply.gg
shall-diesel.gl.at.ply.gg
shatrix13.duckdns.org
she-existence.gl.at.ply.gg
ship-expert.gl.at.ply.gg
ship-patrick.gl.at.ply.gg
shop-activity.gl.at.ply.gg
shop-indonesia.gl.at.ply.gg
shop-needed.gl.at.ply.gg
shopping-imperial.gl.at.ply.gg
short-rough.gl.at.ply.gg
should-matter.gl.at.ply.gg
shows-brussels.gl.at.ply.gg
similar-cells.gl.at.ply.gg
simple-bathroom.gl.at.ply.gg
site-burst.gl.at.ply.gg
sites-neo.gl.at.ply.gg
sites-sing.gl.at.ply.gg
small-edt.gl.at.ply.gg
so-kilometers.gl.at.ply.gg
social-freedom.gl.at.ply.gg
software-buying.gl.at.ply.gg
solutions-carlos.gl.at.ply.gg
someone-barrel.gl.at.ply.gg
song-webpage.gl.at.ply.gg
sort-worried.gl.at.ply.gg
south-pub.gl.at.ply.gg
space-mug.gl.at.ply.gg
specified-cuba.gl.at.ply.gg
speed-awards.gl.at.ply.gg
standard-ordered.gl.at.ply.gg
standards-tex.gl.at.ply.gg
start-screensaver.gl.at.ply.gg
started-flux.gl.at.ply.gg
starting-plain.gl.at.ply.gg
states-identified.gl.at.ply.gg
statistics-holidays.gl.at.ply.gg
statistics-manufacturers.gl.at.ply.gg
stay-politics.gl.at.ply.gg
step-understood.gl.at.ply.gg
stock-territory.gl.at.ply.gg
storage-meaning.gl.at.ply.gg
stores-omissions.gl.at.ply.gg
story-classification.gl.at.ply.gg
street-contribution.gl.at.ply.gg
string-jj.gl.at.ply.gg
strong-perception.gl.at.ply.gg
students-monitoring.gl.at.ply.gg
submit-might.gl.at.ply.gg
sunday-sides.gl.at.ply.gg
super-die.gl.at.ply.gg
supply-dressing.gl.at.ply.gg
supply-recorders.gl.at.ply.gg
support-teacher.gl.at.ply.gg
sure-david.gl.at.ply.gg
sure-graph.gl.at.ply.gg
sure-hist.gl.at.ply.gg
system-saints.gl.at.ply.gg
t-driving.gl.at.ply.gg
taking-indigenous.gl.at.ply.gg
taking-purchased.gl.at.ply.gg
talk-hardcover.gl.at.ply.gg
tax-norfolk.gl.at.ply.gg
tax-sequences.gl.at.ply.gg
teachers-remember.gl.at.ply.gg
teachers-tn.gl.at.ply.gg
technology-madonna.gl.at.ply.gg
teens-scroll.gl.at.ply.gg
television-projected.gl.at.ply.gg
term-butler.gl.at.ply.gg
test-century.gl.at.ply.gg
test-geometry.gl.at.ply.gg
text-publishers.gl.at.ply.gg
them-investment.gl.at.ply.gg
theory-tag.gl.at.ply.gg
therefore-realtor.gl.at.ply.gg
this-hunter.gl.at.ply.gg
this-traveller.gl.at.ply.gg
throughout-antivirus.gl.at.ply.gg
thursday-suggest.gl.at.ply.gg
time-librarian.gl.at.ply.gg
tips-society.gl.at.ply.gg
tmanhomeassis.duckdns.org
to-laden.gl.at.ply.gg
told-impossible.gl.at.ply.gg
told-women.gl.at.ply.gg
top-onion.gl.at.ply.gg
topic-seconds.gl.at.ply.gg
topics-explain.gl.at.ply.gg
topstripclub.click
tour-indian.gl.at.ply.gg
transfer-reservation.gl.at.ply.gg
transportation-mambo.gl.at.ply.gg
transportation-practitioners.gl.at.ply.gg
trial-optimal.gl.at.ply.gg
true-external.gl.at.ply.gg
trying-pad.gl.at.ply.gg
tuesday-acm.gl.at.ply.gg
turn-ticket.gl.at.ply.gg
tv-guarantees.gl.at.ply.gg
tx-mouse.gl.at.ply.gg
tx-somebody.gl.at.ply.gg
tx-travelling.gl.at.ply.gg
unique-leonard.gl.at.ply.gg
unique-pressed.gl.at.ply.gg
unknown-causes.gl.at.ply.gg
until-researchers.gl.at.ply.gg
upon-uzbekistan.gl.at.ply.gg
url-people.gl.at.ply.gg
us-salaries.gl.at.ply.gg
usb-drawings.gl.at.ply.gg
useful-pairs.gl.at.ply.gg
useful-sim.gl.at.ply.gg
vacation-fancy.gl.at.ply.gg
valid-plasma.gl.at.ply.gg
van-floppy.gl.at.ply.gg
van-turtle.gl.at.ply.gg
vanillaonline.online
variety-planet.gl.at.ply.gg
vehicle-pond.gl.at.ply.gg
virtual-blonde.gl.at.ply.gg
virtual-court.gl.at.ply.gg
visual-framework.gl.at.ply.gg
vote-ascii.gl.at.ply.gg
w-sussex.gl.at.ply.gg
want-else.gl.at.ply.gg
want-tapes.gl.at.ply.gg
wanted-heard.gl.at.ply.gg
wanted-modules.gl.at.ply.gg
warning-fc.gl.at.ply.gg
washington-investigations.gl.at.ply.gg
watch-homeland.gl.at.ply.gg
watch-took.gl.at.ply.gg
wed-france.gl.at.ply.gg
wedding-howto.gl.at.ply.gg
wednesday-raise.gl.at.ply.gg
week-commitment.gl.at.ply.gg
week-lakes.gl.at.ply.gg
weeks-deployment.gl.at.ply.gg
weeks-nine.gl.at.ply.gg
were-providers.gl.at.ply.gg
western-albany.gl.at.ply.gg
what-guilty.gl.at.ply.gg
which-missed.gl.at.ply.gg
whole-cattle.gl.at.ply.gg
william-wishes.gl.at.ply.gg
windows-gc.gl.at.ply.gg
winter-moved.gl.at.ply.gg
with-enhancement.gl.at.ply.gg
working-creature.gl.at.ply.gg
world-loads.gl.at.ply.gg
worth-bonus.gl.at.ply.gg
worth-insurance.gl.at.ply.gg
worth-virtual.gl.at.ply.gg
xml-ottawa.gl.at.ply.gg
yellow-classes.gl.at.ply.gg
yet-wired.gl.at.ply.gg
young-oscar.gl.at.ply.gg
zoomoo.playit.gg

# Reference: https://threatfox.abuse.ch/ioc/1155926/

147.185.221.16:25168

# Reference: https://threatfox.abuse.ch/ioc/1162694/

23.94.171.142:1124

# Reference: https://www.virustotal.com/gui/file/d91b29aef9739b6612085293e8951e9069e5663e0c5fbb1617b2d79fc3746050/detection

sostmarz.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8913060b11bc48db875a12a562e8f684ecdf6017fb9c00c1b48e315a5acea4cf/detection

94.156.6.20:3388

# Reference: https://www.virustotal.com/gui/file/b7be6b5b19d828af4d471403cf42208720f3241dc406875530bc6d7a8652923c/detection

185.94.29.109:1111

# Reference: https://www.virustotal.com/gui/file/4f30d5ce5bbffe86314d9f9a60d2de416b0d85f07b7b9a96218fa4bb8c0aab52/detection

177.106.210.102:5552
nodetecton.duckdns.org

# Reference: https://www.virustotal.com/gui/file/eff6aaeb772d0315098c03cd75f0efe84275499d604889e5888547116b8ff7c9/detection

20.197.224.91:1098

# Reference: https://www.virustotal.com/gui/file/43cae63b7d75e320e2fa2defa6adc78859c50d685576ea5024dc4463b9b33744/detection

147.185.221.16:40615

# Reference: https://www.virustotal.com/gui/file/410e999c7495976a0e968dcd03bba00202fd0bd5bfe60f679c0a8836ae5924ec/detection

46.246.14.9:7771
berlynm98.duckdns.org
musica7160.duckdns.org

# Reference: https://threatfox.abuse.ch/ioc/1164484/

52.14.81.142:27670

# Reference: https://www.virustotal.com/gui/file/b4dda8e4ae1e31abe16b6a64d7665b27166daa3cc7e88d4eae87a93aa870bea0/detection

213.152.161.117:11718
toppunkdns.airdns.org

# Reference: https://www.virustotal.com/gui/file/991ffd2fe1920b738ca00d2f828de831148717207836e251a127a32affaf09c4/detection

46.246.12.24:2020

# Reference: https://www.virustotal.com/gui/file/10948ccd5801345a860f0f591d7b86ed2cbc807987555dcc91059b806a75498b/detection

46.246.12.24:1177
coldzero.no-ip.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-09-19)

3.121.139.82:18098
3.127.253.86:18098
3.127.59.75:18098
52.28.112.211:18098

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-09-20)

13.229.3.203:14298
147.185.221.16:48659
18.136.148.247:14298
18.139.9.214:14298
52.220.121.212:14298

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-09-21)

103.232.54.237:39645
3.6.115.64:19400
3.6.122.107:19400
3.6.30.85:19400
3.6.98.232:19400
85.203.4.248:2247

# Reference: https://www.virustotal.com/gui/file/1f65e11f3a4dcb08f9c370cce15b66f8f19f91bfaf895b22be618ee6add4087f/detection
# Reference: https://www.virustotal.com/gui/file/4515807396108293a1ce64b972754596d09b04f9c156d7897011ad8e868011a6/detection

141.255.154.73:2019
141.255.154.73:4455
656378.ddns.net

# Reference: https://www.virustotal.com/gui/file/3569c836f3475f0966c7c3420296a00865f941975e97f692aff137472acd6002/detection

141.255.144.160:5553
41.108.196.19:5553
aminezoro.hopto.org

# Reference: https://www.virustotal.com/gui/file/1b0f677d4d8bba749cc612bf53b4cbdb0f8bf55db6d13104d34a5d33ef820723/detection

141.255.153.218:1177
gmss.ddns.net

# Reference: https://www.virustotal.com/gui/file/4b2d7b6e17b29d2b3074631aa178c85f3b662793911705cf65a9f7c3501f6cee/detection

141.255.147.10:4455
149.200.196.164:4455
212.34.22.250:4455
hammam.ddns.net

# Reference: https://www.virustotal.com/gui/file/1428ccc4527318676480acba5280e99e2c52b40e43e957a408b5724a917e19ec/detection

hcksmktjn.ddns.net

# Reference: https://www.virustotal.com/gui/file/297126df3f422f8f239d4ebcfb14d56bd036d2c8e115e71c3289c25ee7eefc48/detection

141.255.150.209:4444
nboy.ddns.net

# Reference: https://www.virustotal.com/gui/file/3516a85f63bf2ae3c83f7323ddc71b39727f178b9f9eb2a4463384f4e5b6bd72/detection

qbsitfm.duckdns.org

# Reference: https://www.virustotal.com/gui/file/3d50656d2c0f610fdcc33db80ec3363094d9deb4d290bf93f589a5135ba28bd4/detection

pingtesting13.publicvm.com
windowsfile2901.instanthq.com
windowsupdating762.youdontcare.com

# Reference: https://www.virustotal.com/gui/file/3194ddd3f868f21439d31acb92d63de20936533936cfbb3bec42ae8a07b2aa2a/detection

46.246.82.2:8000

# Reference: https://www.virustotal.com/gui/file/28e7b162e1a91dbf48998a667b5eeca8c7141f1bd1f362184362c9d7d4ca9f97/detection

191.30.5.131:123

# Reference: https://threatfox.abuse.ch/ioc/1166922/

178.238.184.127:1010

# Reference: https://www.virustotal.com/gui/file/1290a92f63d733881d64815eadeceb94cec811fc7e6179a4b18b6dcb8a2157ab/detection

103.156.90.3:5552
3.219.34.39:5552
1368.vnh.wtf

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/blob/main/NJRat/njrat_c2s_2020_to_2023.txt

http://1.227.134.55
http://109.197.196.135
http://119.59.112.212
http://178.33.93.88
http://185.20.224.121
http://185.20.224.252
http://185.20.225.129
http://194.58.97.191
http://197.1.176.28
http://81.207.153.51
http://84.217.125.142
103.125.234.199:5552
103.147.184.73:8319
103.153.78.241:7851
103.153.78.241:8871
103.156.92.140:5489
103.200.5.128:6565
103.45.182.184:5552
103.70.5.247:5555
103.70.5.250:1166
103.70.6.159:1111
103.91.205.79:30111
104.156.230.187:8080
104.168.144.111:4080
104.168.7.110:5553
104.20.68.143:54077
104.214.30.166:6821
104.234.10.114:4242
104.236.139.113:1604
104.255.168.159:5200
107.152.99.41:54893
107.155.132.152:5552
107.167.244.67:18971
107.175.38.101:6194
109.0.221.45:7006
109.184.99.155:5552
109.191.143.206:7777
109.197.74.13:5557
109.197.9.213:1604
109.202.54.48:6522
109.230.215.181:5552
109.252.122.56:1601
109.252.23.56:5552
109.62.136.78:1604
109.86.1.56:7711
109.94.12.57:1000
111.90.149.115:10443
111.90.149.115:9443
112.154.163.88:5229
112.166.177.15:1
114.200.138.100:1
115.186.136.237:2020
115.23.109.127:1155
116.127.220.82:1
121.174.23.41:5552
122.40.249.187:5552
123.0.0.1:5555
124.220.178.26:5552
125.76.244.247:5552
128.0.139.72:5552
128.14.74.6:319
128.69.46.210:7777
128.69.46.210:8888
128.70.98.64:52762
128.71.235.16:2222
129.151.203.1:16934
134.249.136.1:5552
134.249.177.58:1604
138.197.139.130:1985
138.199.21.211:5552
139.180.135.112:1994
139.59.120.43:5552
139.99.219.85:110
14.46.160.76:5552
14.46.160.76:8080
140.82.13.202:1994
141.170.251.52:7777
141.255.148.28:1177
141.255.151.56:5552
141.94.203.45:5552
141.98.252.168:60000
142.11.252.230:8088
145.255.1.81:5552
145.255.22.89:6522
146.120.222.2:5552
146.120.244.6:5552
146.158.124.6:6522
146.158.124.6:7777
147.185.221.16:41845
147.185.221.16:7771
147.185.221.181:24308
147.185.221.181:51752
147.185.221.181:8080
147.185.221.223:33684
148.163.80.217:6665
148.163.80.217:6668
148.251.208.46:5552
149.154.154.78:3333
149.154.158.40:5552
149.3.49.153:1604
149.3.49.153:5552
15.223.46.207:5552
151.237.185.211:47736
154.16.201.10:666
154.202.3.44:5555
154.202.3.44:5562
154.202.3.46:117
156.146.36.99:1337
157.230.30.126:1470
157.245.220.192:1177
158.58.168.61:5625
158.58.168.80:5552
159.89.121.217:54321
159.89.26.167:46903
159.89.86.174:4443
160.20.146.252:5552
162.223.94.57:12550
162.246.22.75:1994
165.227.31.192:22806
165.227.31.192:22867
167.71.56.116:22232
167.71.56.116:22804
167.99.114.148:5552
170.78.228.248:1177
172.0.0.1:6522
172.0.0.1:6666
172.241.29.150:4848
172.245.25.173:4001
172.93.148.209:5552
172.94.18.243:3001
172.94.19.69:6918
173.225.115.127:1194
173.225.115.127:4444
173.225.115.159:8080
173.225.115.68:5353
173.254.223.99:7248
173.254.247.200:2468
174.127.99.136:1604
174.127.99.136:200
174.127.99.137:1177
174.127.99.150:1104
174.127.99.175:1166
174.127.99.249:1177
175.119.4.194:5552
176.108.15.230:5552
176.108.15.230:7777
176.110.225.62:10000
176.114.216.96:1414
176.115.70.97:5552
176.117.230.253:1604
176.121.198.4:9192
176.121.252.203:5552
176.122.125.116:5552
176.134.253.108:1604
176.191.104.143:8080
176.193.118.94:7777
176.209.121.11:7777
176.213.150.56:6522
176.215.49.108:7777
176.226.157.254:49599
176.36.142.63:1604
176.36.142.63:1605
176.36.142.63:5555
176.49.27.95:5552
176.49.94.124:51165
176.50.108.138:6444
176.59.197.143:6522
176.96.12.4:5552
177.130.49.118:4444
177.98.243.94:5552
178.127.65.223:6522
178.137.210.251:5552
178.166.189.147:7777
178.186.120.155:6666
178.20.44.131:6522
178.251.228.146:1604
178.33.93.88:1488
178.33.93.88:1742
178.33.93.88:2313
178.33.93.88:6522
178.44.199.23:7777
178.65.60.120:1604
178.66.1.87:27015
178.70.15.55:6522
178.91.202.131:6522
179.43.174.181:5444
179.43.174.181:5552
179.43.174.181:7248
18.196.192.39:5552
182.191.88.102:5555
184.105.214.85:1604
185.105.116.170:5552
185.116.214.58:3468
185.116.214.58:7777
185.13.112.12:7777
185.130.53.166:5552
185.140.53.176:7678
185.140.53.63:6547
185.140.53.71:3429
185.140.53.71:4446
185.140.53.71:5634
185.140.53.71:5643
185.140.53.71:6572
185.16.30.74:3549
185.163.47.163:6522
185.165.153.215:5552
185.17.1.198:1604
185.204.1.234:5555
185.204.1.236:1111
185.204.1.236:1665
185.204.1.236:8648
185.204.1.237:8503
185.209.85.73:9991
185.216.34.82:7777
185.222.57.150:7788
185.222.57.203:2282
185.222.57.203:5515
185.25.50.196:7576
185.250.241.154:4444
185.254.97.165:8000
185.30.117.29:6522
185.35.9.62:25565
185.41.154.223:2222
185.60.133.214:6444
185.65.201.27:3232
185.65.201.27:4928
185.81.157.83:90
185.82.217.154:25565
185.82.217.154:9591
185.84.181.76:7777
185.84.181.88:8280
185.84.181.89:8280
185.9.60.178:1177
187.46.180.240:420
188.134.84.29:1200
188.138.210.137:1177
188.161.5.52:5552
188.162.229.70:6522
188.162.239.237:7000
188.163.43.147:7777
188.163.97.125:21
188.163.97.125:2222
188.164.251.215:1800
188.226.49.54:1414
188.230.78.10:5552
188.237.193.159:30005
188.32.70.4:7777
188.35.131.223:7777
188.49.246.250:5553
189.123.249.151:2020
190.213.72.103:5005
191.101.23.190:5552
191.239.255.3:5552
192.121.87.11:33214
192.162.141.93:7733
192.162.246.31:9309
192.164.1.4:7777
192.169.0.5:7777
192.198.0.1:5552
192.3.154.50:8844
192.30.83.230:5552
192lol.no-ip.org
193.0.200.131:35689
193.106.185.37:7777
193.151.106.148:5552
193.161.193.99:23399
193.161.193.99:39116
193.161.193.99:56139
193.161.193.99:6522
193.163.88.106:45632
193.218.141.160:1100
193.218.143.165:1177
193.219.117.144:7777
193.233.174.208:6522
193.242.166.43:1605
193.242.166.48:3544
193.242.166.48:7070
193.34.76.44:5555
194.32.157.104:3131
194.33.45.46:4785
194.34.132.152:7576
194.34.132.153:5566
194.34.132.153:60000
194.42.113.87:6522
194.44.205.88:5552
194.5.97.142:6547
194.5.97.156:7654
194.5.97.26:4002
194.5.98.210:4040
194.5.98.249:4040
194.5.99.17:6521
194.67.209.128:19216
194.68.59.58:6759
194.71.126.120:17954
194.87.172.80:25565
195.123.210.61:3003
195.123.210.61:5552
195.123.210.61:5874
195.123.217.189:10050
195.123.220.225:3223
195.123.220.225:7777
195.123.221.123:2143
195.123.221.123:4343
195.123.221.123:7373
195.123.246.161:5552
195.184.211.14:5552
195.184.211.14:6052
195.206.105.12:2049
195.208.220.145:1805
195.222.172.238:5228
196.53.10.147:5552
197.0.252.102:90
197.119.95.210:1177
197.200.25.189:5552
197.200.42.112:5552
197.204.3.223:1177
197.205.191.254:1478
197.205.191.254:4561
198.0.0.2:6666
198.16.70.27:1709
198.169.0.1:1604
198.244.142.77:5552
198.54.133.75:54893
199.241.146.179:31922
2.132.107.223:6522
2.133.189.217:7777
2.56.214.165:5552
2.58.149.13:5552
2.60.38.237:7777
2.61.31.155:1604
2.94.113.188:7777
2.94.84.197:7777
2.95.50.14:4165
2.95.50.14:5552
20.113.57.84:1604
20.194.35.6:8023
20.199.40.163:4444
20.226.89.14:8080
20.231.55.108:5552
20.38.13.152:7707
20.77.246.121:5552
20.79.249.125:1604
20.89.209.24:1604
20.94.209.182:8080
203.159.92.167:2323
204.44.127.151:5552
204.48.16.32:27015
204.48.16.32:5551
204.48.16.32:5555
204.48.16.32:5557
204.48.16.32:6661
207.148.72.125:2005
209.25.141.180:27891
210.117.110.81:5552
211.213.183.65:8639
211.217.115.142:1212
211.47.116.45:1
212.103.97.61:1604
212.164.65.28:7777
212.192.241.42:5552
212.47.247.76:1333
212.47.247.76:5551
212.5.200.131:5552
212.7.208.123:6020
212.7.208.91:6020
212.74.202.203:5552
212.74.202.205:5552
212.83.167.116:1604
213.108.174.254:7777
213.136.69.72:5552
213.159.212.162:1111
213.159.212.162:5050
213.159.212.162:6666
213.159.212.162:7020
213.159.212.162:8472
213.167.222.86:1177
213.167.222.86:1477
213.179.214.38:2222
213.184.252.78:5552
213.211.123.77:5000
213.231.11.194:5552
213.8.166.188:7777
213.80.178.124:7777
217.107.115.141:7777
217.107.193.137:7777
217.114.218.109:5552
217.118.79.35:6522
217.118.93.88:4555
217.170.201.67:1641
217.23.69.26:7777
217.25.223.27:5552
217.66.159.178:3232
217.66.227.42:5552
217.89.106.104:3333
218.158.123.169:1313
218.158.123.71:1212
221.145.156.199:1313
222.114.210.216:1313
23.105.131.151:1604
23.105.131.197:9020
23.105.131.200:9009
23.105.131.206:8812
23.227.202.157:7777
23.237.25.124:1234
23.94.188.213:5555
23.95.132.55:5552
23.95.24.218:5560
24.3.246.227:1604
25.103.24.11:6522
25.122.86.215:5552
25.22.247.130:5552
25.40.195.41:5552
25.40.63.164:4433
25.42.192.202:6522
25.44.232.139:5552
25.45.164.207:5552
25.45.164.207:6522
25.49.186.13:5552
25.64.3.15:2283
25.75.145.231:5552
25.78.235.40:5552
25.92.22.16:6522
25.93.215.70:7777
26.17.19.114:5552
26.226.34.147:5552
26.58.220.94:5552
26.63.188.232:1604
27.115.99.126:44443
3.128.107.74:13425
3.144.124.4:5552
3.17.7.232:11436
31.10.120.162:5555
31.129.65.105:6522
31.132.176.189:5444
31.132.178.127:5552
31.132.179.73:1605
31.132.179.73:19180
31.132.179.73:7777
31.148.177.38:1604
31.202.217.240:25565
31.207.237.252:9184
31.23.184.107:6522
31.29.196.62:6522
31.41.97.168:7777
31.9.48.141:1177
31.9.48.141:1199
31.9.48.141:1960
31.9.48.141:5552
31.9.48.164:1166
34.176.64.245:5552
35.237.4.214:7000
35.239.113.16:1604
37.1.207.27:5552
37.1.208.100:1005
37.1.215.39:5554
37.1.217.131:7373
37.1.222.208:1337
37.1.222.208:51163
37.1.222.208:5555
37.1.222.208:5654
37.1.222.208:9643
37.107.184.236:5552
37.120.141.158:18892
37.145.148.238:5552
37.147.77.87:7777
37.192.18.134:5552
37.193.85.99:5552
37.21.79.250:7777
37.235.48.20:20115
37.235.48.20:35723
37.235.48.20:35732
37.235.48.20:5552
37.236.162.9:5552
37.252.11.171:7777
37.252.7.150:5554
37.29.40.140:7777
37.46.117.90:38624
37.48.81.42:14172
37.59.250.182:8080
37.78.180.49:27017
37.79.11.117:1604
38.89.142.205:1414
40.80.147.203:8080
41.227.188.49:1177
41.234.224.29:5552
41.248.145.45:1177
43.229.151.64:5552
45.10.88.108:5723
45.10.88.108:7777
45.114.116.192:1604
45.137.22.146:5553
45.138.99.2:1414
45.154.98.130:5555
45.155.165.74:7778
45.76.159.108:8090
45.81.39.83:2015
45.84.227.157:5012
45.88.9.178:5552
45.95.11.128:2709
46.0.228.73:7777
46.119.202.246:25565
46.147.175.250:777
46.147.63.61:5552
46.158.156.37:27018
46.165.209.109:1000
46.22.211.178:45898
46.22.211.178:46544
46.241.79.172:5552
46.246.73.171:1177
46.249.59.91:5555
46.32.67.126:5552
46.43.204.115:5552
46.43.94.45:5552
46.72.27.241:7777
46.99.2.113:5552
49.169.166.107:5552
5.1.49.49:25565
5.101.151.106:500
5.101.21.20:1555
5.101.21.20:1556
5.101.21.20:6552
5.139.0.154:7777
5.139.2.168:5553
5.139.79.157:7777
5.140.245.28:7777
5.189.227.145:11502
5.197.225.140:5552
5.254.106.214:82
5.34.183.64:1699
5.43.242.29:7777
5.58.29.129:7777
5.78.41.13:5552
51.103.75.40:53011
52.14.18.129:16543
60.48.39.240:1144
62.109.11.164:5552
62.133.162.0:6522
62.148.157.251:5552
62.212.86.13:4444
62.217.186.29:5522
62.33.159.162:5674
62.33.2.50:2222
62.4.23.61:5552
65.111.173.161:5553
66.70.178.216:1337
66.70.242.36:8080
67.215.224.80:5552
68.184.98.251:5552
68.235.38.175:5552
71.93.102.231:9003
72.11.156.229:3000
72.137.104.149:5552
73.161.121.196:1336
73.182.242.123:2006
74.15.227.133:5552
74.199.99.159:6606
75.4.61.28:11111
77.111.244.4:5552
77.247.127.72:189
77.248.111.83:1818
77.83.116.4:5446
77.94.7.49:5552
78.119.158.28:6567
78.132.174.134:1604
78.140.249.179:1604
78.191.8.50:27015
78.219.82.2:1177
78.58.25.3:1604
78.84.58.37:5552
78.85.177.140:5552
79.105.172.151:7777
79.108.247.0:1177
79.110.52.237:4545
79.126.55.29:7777
79.126.88.114:6555
79.140.166.40:22222
79.179.59.109:5552
8.202.167.202:1080
80.3.189.149:1234
80.64.80.233:8007
80.76.42.45:5212
80.77.37.102:6522
80.80.194.234:3311
81.1.156.80:23764
81.177.127.213:7777
81.177.211.199:12846
81.207.215.136:1337
82.102.229.134:1090
82.146.50.128:1111
82.146.50.128:2302
82.146.50.128:3231
82.146.50.128:5552
82.146.50.128:8800
82.146.50.49:1600
82.146.51.150:1212
82.146.51.150:1555
82.146.51.150:1991
82.146.51.150:2012
82.146.51.150:2988
82.146.51.150:4444
82.162.122.178:5552
82.193.104.21:5137
82.202.167.182:20738
82.202.167.182:2745
82.202.167.194:1018
82.202.167.196:9292
82.202.167.202:3838
82.202.167.230:7777
82.202.167.58:4929
82.202.167.67:7790
82.233.253.105:1010
83.139.179.174:8507
83.143.240.4:1177
83.237.180.194:32339
83.237.212.129:4444
84.244.45.236:10973
84.51.52.166:1977
84.51.52.166:555
84.52.4.49:5213
85.140.114.45:7777
85.140.77.139:1177
85.172.92.26:7777
85.172.93.82:6522
85.253.176.179:1604
85.93.59.126:5552
86.118.188.90:5552
86.227.87.77:1605
86.25.39.82:1378
87.1.10.253:6522
87.110.97.141:777
87.117.63.187:6522
87.225.73.26:7777
88.150.224.102:5678
88.200.215.65:6522
89.145.148.189:5551
89.148.241.97:9291
89.149.78.51:5552
89.149.79.148:4464
89.156.24.108:1738
89.163.245.168:6606
89.169.9.166:7777
89.174.13.136:5554
89.185.22.166:7777
89.23.0.28:1177
89.248.164.54:5552
89.252.155.138:1177
89.38.98.132:3636
89.46.100.217:5167
89.46.100.217:5561
89.46.100.217:6472
89.46.100.217:6666
89.94.35.57:1604
90.151.150.173:51897
90.151.91.193:6767
90.188.254.82:5552
90.191.122.120:6522
90.206.4.137:3389
90.52.215.251:27015
91.105.239.37:7777
91.109.188.11:551
91.123.28.157:7777
91.189.181.22:5552
91.189.181.22:9297
91.193.75.252:7654
91.200.138.192:1398
91.206.5.224:1212
91.206.5.224:8888
91.213.44.57:9
91.214.84.166:1337
91.215.69.145:8080
91.218.15.52:6522
91.219.28.11:5552
91.220.173.20:1604
91.222.62.64:25565
91.222.62.64:7777
91.226.122.106:7777
91.226.137.236:2280
91.232.111.212:7777
91.234.146.123:6969
91.236.116.112:1604
91.236.116.124:2222
91.236.116.131:7777
91.236.116.182:7777
91.236.116.188:2222
92.240.245.188:5552
92.30.33.180:5552
92.37.179.15:7777
92.53.120.201:5552
92.63.110.250:25565
92.63.110.250:5433
93.1.167.189:5552
93.115.83.37:16500
93.116.164.196:28030
93.170.4.5:6666
93.181.217.238:7777
93.181.219.38:5552
93.190.176.172:5552
94.103.94.222:555
94.103.94.222:5552
94.124.25.112:5201
94.139.231.250:27015
94.156.219.248:1337
94.158.15.22:5552
94.158.88.225:7777
94.180.141.85:1604
94.180.24.188:5552
94.180.24.188:7777
94.181.44.9:25565
94.181.88.171:3245
94.232.66.189:9309
94.233.240.67:7777
94.244.28.246:31280
94.245.175.163:7777
94.253.36.197:5552
94.96.40.40:5552
95.107.204.28:5552
95.138.242.118:6463
95.154.199.64:25565
95.154.199.64:3232
95.154.199.64:3435
95.154.199.64:7777
95.154.199.64:8745
95.189.181.248:7777
95.211.239.203:96
95.211.239.205:550
95.27.105.214:5554
95.28.72.135:7777
95.32.131.72:7777
95.45.40.152:7777
95.46.152.118:1604
95.55.12.8:6522
95.66.216.156:1177
95.71.180.87:7890
95.73.183.231:6666
95.85.74.163:7777
96.9.225.104:6667
03130.no-ip.biz
01287288615.no-ip.biz
0788878940.no-ip.org
1.libya-10.com.ly
110xxx.zapto.org
1204abril.duckdns.org
123456789ddop.ddns.net
123456789gg.ddns.net
123456789vvbb.ddns.net
123456z.ddns.net
12345rizgar.ddns.net
123eer.hopto.org
123mh.ddns.net
124990149-mwkeof.webhop.me
12mh.ddns.net
161612di9cdic.duckdns.org
1deoct.ddns.net
20142014.no-ip.biz
2024.libya2020.com.ly
21aciu9obz2dggfn0acid1319b9bacaf3b6bb.duckdns.org
229.ip.ply.gg
2323novnov.duckdns.org
2605mayo5434.duckdns.org
2626.libya2020.com.ly
28x00x01.mine.nu
31231332rgfd.ddns.net
3244.zapto.org
3468.ddns.net
347bs.duckdns.org
3arabi.ddns.net
3azef001.ddns.net
3elwa.no-ip.org
3mmmeeeddd.no-ip.info
3omdas.no-ip.biz
40028922123.no-ip.org
43kpnfdgndf.ddns.net
4949hamd.servegame.com
4len0satani1234.hopto.org
5488.hopto.org
5683812xs-43939.portmap.host
6522.ddns.net
6543etfd2-59719.portmap.host
7zb.ddns.net
8000njsept.duckdns.org
808080.ddns.net
808080.ml
8816.hopto.org
9alo-garo.no-ip.org
a213123sada.ddns.net
a3653512.ddns.net
a3b4.no-ip.org
a777a.no-ip.biz
a7a-22a.no-ip.biz
a7mad511.no-ip.org
a7mdz8.no-ip.biz
aa123.sytes.net
aaaffaay.no-ip.biz
aaasss.linkpc.net
aaddbbkk.hopto.org
aafmm.no-ip.biz
aalmyzed.hopto.org
aalniami1.no-ip.biz
aazzeeddiinnee.ddns.net
ab00dy44.myftp.biz
ababab.sytes.net
abada.ddns.net
abalse.no-ip.biz
abasali00.no-ip.biz
abasrab16.no-ip.biz
abasshacker.no-ip.info
abatata.ddns.net
abbas3.ddns.net
abbccc.zapto.org
abcdefg434334.zapto.org
abdalahhaker.no-ip.biz
abdelalihack.no-ip.biz
abdelkader123.no-ip.biz
abdellah1.ddns.net
abdellah21.no-ip.biz
abdo333.ddns.net
abdokhoua.no-ip.biz
abdou0.no-ip.info
abdou05dz.no-ip.biz
abdou1230.no-ip.biz
abdou1999abdou.no-ip.biz
abdou5rah.sytes.net
abdoudz.ddns.net
abdouhacker16.no-ip.org
abdouyakuzataleb.publicvm.com
abdulahacker3.no-ip.biz
abdulaziz.ddns.net
abdullah-2000.myq-see.com
abdullah1122.no-ip.biz
abdullahackiran.no-ip.org
abdwlashexane.ddns.net
aboo3zhh.ddns.net
abood147741.noip.me
abooddado.no-ip.info
aboodiy.zapto.org
aboody-16.no-ip.biz
aboodydody.no-ip.biz
aboodyhackar3.ddns.net
aboudmonster.no-ip.biz
abraheemkhalil917.no-ip.biz
abu3mrh.myq-see.com
abukabar.ddns.net
abunasreeeecom.ddns.net
abuzhrh.no-ip.org
acabnikdola.no-ip.biz
academic-furnishings.at.ply.gg
account.ndplc.gq
achille123.no-ip.biz
acideburn.no-ip.info
ad93.myq-see.com
adam1424.ddns.net
adamkhattab.no-ip.biz
adasas.no-ip.org
adata.ddns.net
adddsdsfdf.ddns.net
addhack00.no-ip.biz
adel00771.no-ip.biz
adel007711.no-ip.biz
adel15011972.no-ip.org
adelame.no-ip.biz
adeleshtayaa.ddns.net
adelhacker04.no-ip.org
adelkabyle.no-ip.biz
adelsami123.no-ip.org
adem.publicvm.com
ademdjr.ddns.net
ademhaker.ddns.net
admadm.no-ip.biz
adminka12.ddns.net
admiralaaaaaaa.ddns.net
admralnet.no-ip.biz
adnanza.no-ip.biz
adrian20031424.hopto.org
advengence.no-ip.biz
adventurousxxx.no-ip.biz
advice-llc.at.playit.gg
aemanklyal.ddns.net
aesabanke1.ddns.net
afmin.ddns.net
afrreewww.ddns.net
afson.hopto.org
aggore.ddns.net
agilizavacunate202120212021.duckdns.org
agord.no-ip.biz
agostiando.duckdns.org
ahadx0.no-ip.biz
ahahahahah.ddns.net
ahmad-rimawi1998.zapto.org
ahmad-server1.ddns.net
ahmad112233.no-ip.biz
ahmad12test.no-ip.biz
ahmadcecee.ddns.net
ahmadhamodd2.no-ip.biz
ahmadin22.no-ip.info
ahmadov1995.no-ip.org
ahmadps1.no-ip.biz
ahmda.zapto.org
ahmed-070.no-ip.biz
ahmed-ahmedmr.no-ip.biz
ahmed-ghost.ddns.net
ahmed-hacker.zapto.org
ahmed12300.no-ip.biz
ahmed124.no-ip.biz
ahmed200365.hopto.org
ahmed71955.no-ip.biz
ahmed88.ddns.net
ahmedabdo255.no-ip.biz
ahmedabdou.no-ip.biz
ahmedabkareno.no-ip.biz
ahmedaboud.zapto.org
ahmedahmed10.no-ip.biz
ahmedalfurjani.no-ip.biz
ahmedalsisi.no-ip.biz
ahmedcr.no-ip.biz
ahmedd120.ddns.net
ahmedesam13.no-ip.biz
ahmedfakry.zapto.org
ahmedfav15.no-ip.biz
ahmedgaradi55.zapto.org
ahmedhackxxx.no-ip.org
ahmedhoba.publicvm.com
ahmedjoy.no-ip.org
ahmedloay.ddns.net
ahmedlosha.no-ip.biz
ahmedlove.no-ip.org
ahmedn2020.ddns.net
ahmednasser201523.no-ip.biz
ahmedop.no-ip.biz
ahmedtiger1232.ddns.net
ahmedtita.ddns.net
ahmedvirusrap.noip.me
ahmedwind.no-ip.org
ahyatezy15.no-ip.biz
aiach.ddns.net
ail-2015.ddns.net
ailail07821532043.no-ip.biz
ailail1998.ddns.net
ailnor.no-ip.biz
aimbotcs.no-ip.org
aiss123.no-ip.biz
ajxpadrin.ddns.net
ak477.no-ip.biz
akamaru.ddns.net
akamhk2.no-ip.biz
akinorihalfado.ddns.net
ako666.hopto.org
akraara.ddns.net
akrab48.no-ip.org
akramsystem.no-ip.biz
akrien.ddns.net
al5rab7lkksaad.no-ip.biz
al8mil.ddns.net
alaa2017.no-ip.org
alaaadly2.no-ip.biz
alaboo20.ddns.net
alagha12345.no-ip.biz
alagha555.ddns.net
alainluis.ddns.net
alaisnoob.no-ip.org
alankpot888.no-ip.org
alasmer123.ddns.net
alawe5.ddns.net
alawi-123.ddns.net
alcachofa724-46937.portmap.host
alda2024.duckdns.org
alexanderhk228.hopto.org
alexhack95.no-ip.org
algeriathrees.ddns.net
algiriano.ddns.net
algopryal.no-ip.info
alhosaneee.bounceme.net
alhula.noip.me
ali-hackr.no-ip.org
ali2015.noip.me
ali50500.ddns.net
ali5319ali.mooo.com
aliaaaiub2000.no-ip.org
aliabodabbos.myq-see.com
aliahmahhmod.no-ip.biz
alialassad.ddns.net
alialassad1.no-ip.biz
alialiraqi964.no-ip.biz
alialnasry.no-ip.biz
alialtimime.webhop.me
alidz.ddns.net
alihack12345.no-ip.biz
alihacker123.ddns.net
aliiali.ddns.net
alikasm111.no-ip.biz
alimohamed90.no-ip.biz
alimohameed.zapto.org
alinjrat8.no-ip.org
aliosei.ddns.net
alir3za.no-ip.info
alirashad.ddns.net
aljokergz.no-ip.biz
alkhorsan.no-ip.biz
allnew7015.duckdns.org
alloiwalasadi11.no-ip.biz
alloushketlona99.ddns.net
alm3lm100.noip.me
almansi.ddns.net
almodamir.no-ip.org
almsrby.ddns.net
alnms555.ddns.net
alnser0.zapto.org
alomre310.hopto.org
alonecod.zapto.org
aloneone91.hopper.pw
alonewolf-45132.portmap.host
alord-ameer21.no-ip.biz
aloyenj.no-ip.org
alpha-7.no-ip.biz
alpha228.hopto.org
alshareeftwtw-28524.portmap.host
alsinyorq8.no-ip.org
altyyarabdoo.no-ip.biz
alwerfalli.ddns.net
alzaeem3.linkpc.net
amar-refaey.no-ip.biz
amardz.no-ip.info
amazon.thedreamsop.com
ameen-haker2.no-ip.biz
ameen.myftp.biz
ameer1991.zapto.org
ameerof.no-ip.org
amen03.no-ip.biz
amer12345nofal.no-ip.biz
america007.ddns.net
amersyria2.hopto.rog
amerwaheej.no-ip.org
amgas2015.no-ip.org
amibas8720.ddns.net
amiguinho.ddns.net
aminadz.no-ip.biz
amine12345.ddns.net
aminealgerie.no-ip.biz
aminebenali2015.ddns.net
aminedeuxm.ddns.net
amino4747.ddns.net
amirmetarfi.ddns.net
amnes1a.zapto.org
amofamilia.duckdns.org
amoraa.gotdns.ch
amr123.no-ip.biz
amrahmed123.ddns.net
amrashrafserver1.myftp.biz
an0nym0us.ddns.net
anabaskota.noip.me
anakhaled20.no-ip.biz
anakrhetc999.ddns.net
anamitchell12.ddns.net
anasboe.no-ip.org
anass-nj.no-ip.biz
anassovichd12.sytes.net
andreastrahan.ddns.net
andreqnq.noip.me
andriod-apk.bounceme.net
android321.no-ip.info
androshack.ddns.net
anemosajdabya2000.no-ip.org
angel666hack.ddns.net
anis76.no-ip.biz
anonghost0.no-ip.biz
anonimo2795.ddns.net
anonimo666ofc.duckdns.org
anonj0ker.ddns.net
anonsasukeu.zapto.org
anonuevo.duckdns.org
anonxtn23.no-ip.biz
anony.linkpc.net
anonym0z.ddns.net
anonymous000007.ddns.net
anonymous93.no-ip.biz
anonymousdz13000.ddns.net
anonymouse123.noip.me
anonysk5842145.no-ip.biz
anouardzk.ddns.net
anti96.myq-see.com
antihackv9.duckdns.org
antoniocometa.ddns.net
antrasha.ddns.net
anwermner.no-ip.biz
anythingeverlol.ddns.net
aout17.hopto.org
apahk.zapto.org
apdellhhaker.no-ip.biz
apilsin.host.org
applications-tri.at.ply.gg
apps.myftp.org
aquatic12345.ddns.net
ar-rat.no-ip.biz
arabfucktania.no-ip.info
arbil.sytes.net
arch20.ddns.net
archive.soundcast.me
arena1.dynu.net
argeek.no-ip.org
arivan.no-ip.biz
arme5.hopto.org
artemsla6235.ddns.net
artkar.ddns.net
arto.sytes.net
artur9625423.ddns.net
asasasbb.hopto.org
asdf012.ddns.net
asdfgh57.ddns.net
asdfghjklghj.myftp.biz
asdfgud07.no-ip.biz
asdman216.ddns.net
aseel123.ddns.net
asel1996.no-ip.biz
ashlkxx2.ddns.net
ashqataqtaqi.no-ip.biz
asil66.no-ip.info
asmae.no-ip.biz
asmamohmedmohmed.no-ip.biz
asoom.hopto.org
asra0.no-ip.biz
assassinodz.ddns.net
assdassd90.no-ip.biz
assessment-epinions.at.playit.gg
aszx.ddns.net
atacknet.no-ip.biz
ativadores2021.sytes.net
atoo5050.no-ip.biz
attackddos.chickenkiller.com
attiya-dz.no-ip.biz
audiodgx.hopto.org
autism123.duckdns.org
autosytes.sytes.net
avano1994.ddns.net
avastupdate.us.to
avgika.no-ip.biz
awaear.no-biz
ax4.duckdns.org
ayezhiznboram.ddns.net
ayham.ddns.net
ayman-hack.ddns.net
ayman1.no-ip.biz
ayman201333.no-ip.biz
aymaneel.nc-ip.biz
aymen-emino.no-ip.biz
aymen-mouffok98.no-ip.biz
aymenuryaz201.no-ip.biz
ayoub1997.no-ip.biz
ayoubrezki.myq-see.com
ayouxi2014.no-ip.biz
ayyad99.no-ip.biz
azadaus2000.ddns.net
azeddine21.zapto.org
azizkingboy58.no-ip.org
baadboy.ddns.net
baba19.no-ip.biz
babil1177.no-ip.info
baccar.zapto.org
bachir39.ddns.net
bachirdzx.ddns.net
bachirhacker.hopto.org
back007.ddns.net
backdoor25.no-ip.org
backup.thedreamsop.com
backxtrack.no-ip.org
badboy2020.ddns.net
badboyx.adultdns.net
badino213.no-ip.biz
badkaboos-king-hack.myq-see.com
badprince.no-ip.biz
badrob.ddns.net
badrya2.no-ip.info
baggard14.ddns.net
bagno.ddns.net
bahaa.no-ip.bz
bahamass1.no-ip.biz
bahez22.no-ip.org
baja19n.hopto.org
bajismail.no-ip.org
bakaihasan.hopto.org
bakser.duckdns.org
bakup1.willbeban2fabused.xyz
baladarin3.no-ip.biz
balagyan.no-ip.biz
balckhack.zapto.org
baltouch.no-ip.org
bande22.hopto.org
bando222.no-ip.biz
banjoo.codns.com
bannityjtube.ddns.net
baqer21.ddns.net
barackvictim123.bounceme.net
barasseur.ddns.net
barbaros-dz.no-ip.biz
barby.no-ip.biz
barretodgrau.ddns.net
barry101.ddns.net
basbas.no-ip.biz
basha19992015.no-ip.org
basmaa.no-ip.biz
bassem-tn.zapto.org
basurax64.duckdns.org
batman2015.no-ip.biz
batooor.no-ip.org
batoor123.chickenkiller.com
baxom-anonm.zapto.org
baypal.no-ip.org
bbbbbbbdss.no-ip.info
bblh.ddns.net
bbwbbw.no-ip.org
bcdihackers.publicvm.com
bdf2015.ddns.net
be09dd19.ddns.net
bearkassad.no-ip.biz
bebika.ddns.net
bechir-bechir.no-ip.org
beda45.ddns.net
bedo112.ddns.net
beercontest.servebeer.com
bellragazzo.no-ip.biz
besoo952.myq-see.com
besso1a1.ddns.net
betabetabetabeta.no-ip.info
bharhacker.ddns.net
bibaandboba.ddns.net
big12.zapto.org
bigassfuck.no-ip.biz
biggsmall.no-ip.biz
bighacker333.ddnsfree.com
bigshow2020.no-ip.biz
bilal123456789.ddns.net
bilaljjfh.ddns.net
bilel0770.no-ip.biz
biloouux.ddns.net
bilou04.no-ip.org
binbazhacker.zapto.org
binjrat123.no-ip.biz
bisbotbako.ddns.net
bisutvaritspecnj.ddns.net
bisutvarspeccz.bounceme.net
bixo33.no-ip.biz
black-hacker.no-ip.biz
black36.no-ip.org
blackacoleka.ddns.net
blackblader11.no-ip.org
blackcat666.ddns.net
blackdevil154.zapto.org
blackhacked.ddns.net
blackman00000.no-ip.biz
blackovy.no-ip.biz
bliter.hopto.org
blog-unit.at.ply.gg
blog.biliianstore.com
bluelinux.ddns.net
bluetooth.sytes.net
bmhha.ddns.net
bnatf54.myftp.biz
bnl-hacker.no-ip.biz
bob541882.e2.luyouxia.net
bocanua12.ddns.net
bodyhack777.no-ip.org
bodylol2.no-ip.biz
bogota2023.duckdns.org
bola2016.ddns.net
bolldoll.duckdns.org
bomj1337.hopto.org
bomjgang228.hopto.org
bondok.ddns.net
bondok12.no-ip.biz
bool12.no-ip.biz
booob1.linkpc.net
boopftp.ddns.net
bos3eed.ddns.net
bosra2014.no-ip.biz
bosshacker.no-ip.biz
botha.no-ip.info
botnetnotepad1.no-ip.biz
botupc.noip.me
botvip.kro.kr
boukraaf0707.hopto.org
boumadda.no-ip.biz
boxfox555.zapto.org
boxylibya.no-ip.org
boy-amy.at.playit.gg
boyangle.no-ip.org
boyhacker.no-ip.org
boykar.ddns.net
boysdark.no-ip.biz
bpsta.no-ip.org
bqzer4hack.ddns.net
bren111.zapto.org
brmel9898.zapto.org
bro2517.adultdns.net
brookshacking.duckdns.org
brostec7.ddns.net
brothersteam.ddns.net
brown-aus.at.playit.gg
browserskype.duckdns.org
brunorekbirisse26.ddns.net
brunoupss.ddns.net
btc123.ddns.net
btcworldvip.ddns.net
bulletofmercy.ddns.net
burdun115.dynu.net
business-fuel.at.playit.gg
buybuy.ddns.net
c4cerrah.dyndns.org
cab05.no-ip.biz
cabonjazul.duckdns.org
callmeosos.no-ip.biz
cameran.no-ip.biz
campershoot.ddns.net
captinsp.no-ip.biz
carapuce-2014.no-ip.biz
care-strictly.at.ply.gg
carizma.ddns.net
carrasco602.no-ip.biz
cart-updates.at.ply.gg
cash-title.at.playit.gg
cauchmard-67.zapto.org
cavalopt23.ddns.net
cb4cb4.ddns.net
cc15.no-ip.biz
ccsbooking.hopto.org
cdanger492.duckdns.org
cenabilhamaliyev.duckdns.org
ch-cyber2.no-ip.info
chacky.no-ip.biz
chakibmohamed301.no-ip.org
chalohacker.no-ip.org
chamsi.ddns.net
chapter-julia.at.ply.gg
charlosamp.ddns.net
chawg.no-ip.biz
cheatleha228.ddns.net
cheatparalol123.ddns.net
checkout.ddns.net
chensky152-33707.portmap.host
chidonsky.linkpc.net
chiheb147.no-ip.biz
chiko-chiko.no-ip.org
chikos.no-ip.net
chipo.publicvm.com
chlbo9.no-ip.biz
chormer.sytes.net
chouaibmizou.no-ip.biz
choukiba.no-ip.org
christophermiehl775.duckdns.org
chrom.no-ip.biz
chromeupdate.duckdns.org
chromeupdate.serveirc.com
chromeupdate.servepics.com
cicops.ddns.net
cisco5319.ddns.net
cleenjordancleen.no-ip.info
clist.thruhere.net
closhop.duckdns.org
cmpunker.no-ip.biz
code-backed.at.ply.gg
cololo.myq-see.com
combatserver.no-ip.org
comes-corruption.at.ply.gg
commandant30.no-ip.biz
configpaid.hopto.org
connect1212.ddns.net
connectdns.duckdns.org
connertyler58.ddns.net
conp7896.duckdns.org
conqhook.ddns.net
contahacker.ddns.net
contents-burn.at.playit.gg
contratos2020.duckdns.org
controlmycomputer2.ddns.net
cool-fire.no-ip.org
cr1st4l.ddns.net
crackxoor.net.chickenkiller.com
crazydz.no-ip.biz
cresie.ddns.net
crlnegolamx.ddns.net
crlslost.ddns.net
crossony228.hopto.org
crouziss.ddns.net
csgo98437.ddns.net
csgocheat.hopto.org
cswdakchitaya3jbni.servecounterstrike.com
ctaenl.hopto.org
ctl-plg-ap-8.nsa.gov
cuorematto.no-ip.org
cxzcxz.zz.am
cyberghost44.ddns.net
cypergatetata.no-ip.biz
d3dx-botnet.portmap.host
d3ss.duckdns.org
d3sxhack.no-ip.biz
d5roooshe.ddns.net
d7d7th.linkpc.net
dad4me.no-ip.biz
daddygvgv.ddns.net
dadsatefa.no-ip.biz
dadude007.no-ip.biz
daleriamz.ddns.net
damassnip2014.zapto.org
danalana2008.ddns.net
danamuhammad12.no-ip.org
dangerous.3utilities.com
dangerousrat-30172.portmap.io
dangomra.duckdns.org
daniihack1989.no-ip.biz
danilwhitenjrat-57320.portmap.host
daon.o-r.kr
daoudi.no-ip.biz
dark-killer.no-ip.biz
dark24683.codns.com
darkangel.no-ip.biz
darkdx2002.no-ip.biz
darkghost.myq-see.com
darkhorsehacker.no-ip.biz
darknode87.duckdns.org
darkpro1.ddns.net
darkroot.myftp.biz
darkshionhkgm.ddns.net
darkspamer-17.no-ip.biz
darwnhacker.no-ip.biz
database55.duckdns.org
daudas.ddns.net
david2001515.no-ip.biz
david3421.duckdns.org
dawlatalislem.no-ip.org
dayda1996.no-ip.org
dazc0918.duckdns.org
dccgroup.duckdns.org
dcom11.no-ip.org
dcsacrevc-46676.portmap.host
dddddddd111.zapto.org
ddnsnet100.ddns.net
ddodds.ddns.net
ddong00.r-e.kr
ddosoo.ddns.net
ddrsemo.no-ip.biz
dead666hacker.no-ip.biz
deadfrontier.ddns.net
debt-bar.at.ply.gg
dedarkurd2000.ddns.net
dedo.no-ip.org
default-flashing.at.ply.gg
deidaranjrat.no-ip.org
deko2010.no-ip.biz
delfow-hacker.no-ip.org
dench.myq-see.com
denemeciiso.duckdns.org
denemedarkdarkxxa.duckdns.org
denky.ddns.net
desgarrada1.no-ip.org
desso0667.no-ip.biz
dethracemalkawi.no-ip.biz
dethracer.ddns.net
devil-rpk.ddns.net
devil6669.ddns.net
dex4madara.no-ip.biz
dexter008.ddns.net
dgdhsisj.ddns.net
dgever.ddns.net
dhunter2.ddns.net
didodido123.no-ip.biz
diffdns.duckdns.org
digatjr.ddns.net
dikodiko.ddns.net
dikodiko1.ddns.net
dima715626.ddns.net
dimadz.no-ip.biz
dimaraja2005.ddns.net
dimitro27.duckdns.org
dimok.ddns.net
dinga.chickenkiller.com
diouzinnhackingg.no-ip.org
direccionimpuetos.ignorelist.com
directlink.no-ip.biz
distribucionesdiva.duckdns.org
djeyson.ddns.net
djouhacker22.zapto.org
djrogerinho06.ddns.net
djubo.hopto.org
dkslcood.ddns.net
dlersalm.no-ip.biz
dllsys.duckdns.org
dlltrojan.no-ip.biz
dm8951.ddns.net
dmaarr.no.ip.info
dmx22.no-ip.biz
dns.kingspy.info
dns.sabifati.xyz
dnsproxi2022.duckdns.org
dnsq.myq-see.com
doa2dw.zapto.org
doc.mypsx.net
dodo654.no-ip.biz
dofus-hack.myftp.biz
dofuscoom.ddns.net
domhackerov0002.hopto.org
domin4forever.sytes.net
dominiktadejnejc.no-ip.org
dominio12.duckdns.org
dominiospikado7.ddns.net
dominostark2024.duckdns.org
domne.ddns.net
donaldsvip1234.ddns.net
dongreg202020.kozow.com
dongyoun.ddns.net
donmark22.publicvm.com
donxo.duckdns.org
doppl9r.ddns.net
dotzero.duckdns.org
downloadmanager.zapto.org
dox2006.ddns.net
doyoueven1337.duckdns.org
dr-camex98348.no-ip.org
dracula00.no-ip.biz
drcheeks102.ddns.net
drcheeks102.mooo.com
dribouy.no-ip.org
driver-computational.at.ply.gg
driverwii.ddns.net
drmido.no-ip.biz
drnaif.no-ip.biz
drontchanging-24954.portmap.io
drparano.hopto.org
dsadsadsafagagaga.p-e.kr
dsc001.crabdance.com
duduhackernoob.no-ip.org
dugpanan.ddns.net
duhaaaa1995.zapto.org
dun2unpn2021ham21.no-ip.biz
dunhcheats.duckdns.org
dutchrape.ddns.net
duvida.duckdns.org
dyarykarzan.no-ip.biz
dyatnt.no-ip.biz
dyia.myq-see.com
dz-17.no-ip.biz
dz1991.zapto.org
dz39.no-ip.biz
dz403.no-ip.biz
dz47hk.ddns.net
dz4u.no-ip.biz
dzbox.no-ip.biz
dzdzdzdz21.zapto.org
dzdzkacker.no-ip.org
dzghost16.ddns.net
dzjimmy123.ddns.net
dzlove.ddns.net
dzmafia05.no-ip.biz
dzmomo.zapto.org
dzsaw10.no-ip.biz
dztopac123.no-ip.biz
e7b7793232.ddns.net
eagle-eye.cable-modem.org
earnwhilehome.ddns.net
ebay.thedreamsop.com
ebo000000.ddns.net
ebrahem100.no-ip.biz
ebuddy87.ddns.net
ecstatic-water-14400.pktriot.net
ecutuning.ddns.net
edfghfdahj21.hopto.org
edu2015.no-ip.biz
effdff.ddns.net
efficient-oil.auto.playit.gg
efgrdhgrdhtrdh.noip.me
efsefwesrfg.ddns.net
egyarmy12.ddns.net
ehab123.no-ip.biz
ehpal.sytes.net
eidnafa522.ddns.net
ejokersxxx.ddns.net
ekhtouni.zapto.org
el-punisher.no-ip.biz
elazhariabd.zapto.org
elbarondz2015.no-ip.biz
elbayadh32.no-ip.biz
electros6o.ddns.net
elembratormaged.ddns.net
elgen1.zapto.org
elgentleeee.no-ip.biz
elgzar201.no-ip.biz
elhajri123.no-ip.biz
elie-asper2.no-ip.biz
elkasri.ddns.net
elkbigfootnjrat.no-ip.biz
elmerngy.no-ip.biz
elmistr0o.ddns.net
eloahsh.no-ip.info
elvincsgo.ddns.net
elwahyelasil.no-ip.biz
emachines123.no-ip.info
emad123321.ddns.net
eminem9989.ddns.net
emmamasclef.ddns.net
emoloveemomoody2020.ddns.net
end-purchases.at.ply.gg
enderop44-36084.portmap.host
enderop44-46254.portmap.io
enderzzz.no-ip.biz
endhacker.ddns.net
endoftheworld.ddns.net
england-disability.at.ply.gg
engmounirian.noip.me
enternet.ddns.net
envios000.duckdns.org
envirat.duckdns.org
enzoazez.ddns.net
eopaas8989.no-ip.biz
eoqmalucos.duckdns.org
eragooon.zapto.org
eroxsik.ddns.net
erresten.hopto.org
erro404.ddns.net
errror0410.no-ip.biz
esafsemsem2015.no-ip.info
esam7070.ddns.net
eses46.noip.me
esetnod123.ddns.net
eslam2.no-ip.biz
eslam33432.no-ip.biz
eslam512.no-ip.biz
eslamali209070.no-ip.biz
eslamdarko.no-ip.org
eslamhack.no-ip.biz
essamerdanao.ddns.net
estcelb.ddns.net
eunyou.kro.kr
europ.no-ip.org
evan-evo.no-ip.biz
evanov-evo.no-ip.biz
evanov-evoo.no-ip.biz
evmuaev.ddns.net
ewwe000.no-ip.biz
example32.no-ip.biz
experience-cage.at.ply.gg
explorer.gotdns.ch
explorercmd.gotdns.ch
explorett.duckdns.org
eyaddeo.ddns.net
eye-dramatic.at.ply.gg
eyepatch.ddns.net
ezelraed.no-ip.org
f3609e192fe8d18133.servehalflife.com
f3f.no-ip.biz
faccbookcom.zapto.org
facebook-sports.publicvm.com
facebookhadeelhp.zapto.org
facebookmohamed.no-ip.org
faceboozned.ddns.net
facepook.no-ip.biz
fackup.ddns.net
fackyouself.ddns.net
fade-2e7.no-ip.biz
fafa23.no-ip.biz
fafaffaff.ddns.net
fafl50.ddns.net
fafsad.duckdns.org
fahad2.ddns.net
fahaddz.ddns.net
faisal0536.ddns.net
faisal1337.ddns.net
fakeasda.no-ip.biz
falkonhacker.ddns.net
falloutsystem.ddns.net
fares123kara.no-ip.biz
faressss.no-ip.biz
faressyria.no-ip.biz
farman33.no-ip.biz
farosmasan.no-ip.biz
farouk2014.no-ip.biz
fastayko.no-ip.biz
fawaz050.noip.me
fayezhaked.no.ip.biz
fazoro25.ddns.net
febrero22.duckdns.org
federalma.ddns.net
feel-passport.at.ply.gg
feellovedud.no-ip.biz
felofox.hopto.org
female-javascript.at.ply.gg
fep.myftp.biz
fer3aun.ddns.net
feras9999.no-ip.biz
fereswael.no-ip.org
ferne.ddns.net
fewrgfg.no-ip.biz
ffgga.ddns.net
fh-oode.no-ip.biz
fighttodie.no-ip.biz
finally-bunch.at.ply.gg
firasayari99.no-ip.biz
firasshamma.noip.me
firefox1155.no-ip.biz
firewallblock.ddns.net
first1one.ddns.net
fjdhyuz.zapto.org
fkscsgo.ddns.net
flarps2200.ddns.net
flashplayer1.no-ip.biz
fluxscam.duckdns.org
fnansoft.dynu.com
fngmf4.ddns.net
fnhost1.ddns.net
fogame.ddns.net
forever12qut.hopto.org
foreverkoora.zapto.org
forfaitnet.no-ip.biz
forme1.hopto.org
forthewin.ddns.net
foulanbelkacem94.ddns.net
fourat852.no-ip.biz
foxconn.myftp.biz
fqrgwerfergertbertt.no-ip.info
fr001.nerdpol.ovh
fr33k-dz.zapto.org
france20201.casacam.net
france24.ddns.net
francia.ydns.eu
frankohacker.strangled.net
freedomh12r00.no-ip.org
freeopen.ddns.net
freepage.sytes.net
freesyrian-army.no-ip.biz
freiheitstern.no-ip.biz
fsgxbv.bounceme.net
fsky2.hopto.org
fsociety.myq-see.com
fsociety11.kozow.com
fsociety249.duckdns.org
fthbhd.no-ip.biz
ftp2017.serveftp.com
fuark123.no-ip.biz
fuck10.no-ip.biz
fuckand.duckdns.org
fucker-hacked.no-ip.biz
fuckitup.duckdns.org
full-qui.at.playit.gg
fumeta.noip.me
fun4.dynu.com
funkymalware.zapto.org
fur1a.duckdns.org
futabas.no-ip.biz
fuzzyhf.duckdns.org
fvdl38.duckdns.org
g3ntle.ddns.net
gabrireimice.no-ip.biz
gadahmed604.no-ip.org
gagamoga8.no-ip.biz
gamer213121.ddns.net
gamer543.ddns.net
gandalfelite.zapto.org
garboza.ddns.net
gat2015.ddns.net
gaymerval05-47556.portmap.host
gazapc.ddns.net
gazik500.ddns.net
gazwan99.no-ip.biz
gbarpresencewriterprint.duckdns.org
gbup.no-ip.biz
gedux.no-ip.biz
gel5.ga
georg777.ddns.net
gerente2022.duckdns.org
gfxcvfgsewrwrqwergvcbx.duckdns.org
gghack.ddns.net
gghosting221.ddns.net
ggwp90wp.hopto.org
ggxb.ddns.net
ghaithadeeb.no-ip.org
ghaithalkassar-42536.portmap.io
ghaithkassar999-47454.portmap.io
ghassan2019.ddns.net
ghassira0530.no-ip.biz
ghayth.no-ip.org
ghdh623.zapto.org
ghfx.ddns.net
ghhhjghjghjg.duckdns.org
ghilas16.myq-see.com
ghilasjsmb.no-ip.org
gho3stseek.no-ip.biz
ghost-vpn.no-ip.biz
ghost1234.zapto.org
ghost28.ddns.net
ghostfreak.no-ip.biz
ghsan.no-ip.biz
ghssan7833.no-ip.biz
gigilolo.hopto.org
girls-definitely.at.playit.gg
girtatapke.duckdns.org
gitxnjrat.myftp.biz
give-graphical.at.ply.gg
gjigja2015.no-ip.biz
gladyatur.no-ip.biz
glanaga66.ddns.net
gleidson2018.duckdns.org
glo32.no-ip.biz
globeslord.duckdns.org
gmdremotesupport.ddns.net
gods123.no-ip.info
godson5m.ddns.net
gogj.hopto.org
goldartem.ddns.net
goldenfor.hopto.org
goldx.hopto.org
gololosd.ddns.net
golyana310.no-ip.biz
good.bounceme.net
goods-reel.at.ply.gg
goodu.ddns.net
google32.sytes.net
google90.no-ip.biz
googleads2.publicvm.com
googlecloud.servegame.com
googledownload.ddns.net
googlemaintenanceservice.duckdns.org
googly95.no-ip.org
gothambodh.no-ip.org
governmentservice.servebeer.com
govno123.hopto.org
goy.zapto.org
gozimamir.ddns.net
gr1z0uu.zapto.org
graphics-posted.at.ply.gg
graphics5.duckdns.org
gravatron.duckdns.org
gribouillefr.ddns.net
grimfuck.no-ip.org
grthom2h.no-ip.biz
gta5lohi.ddns.net
gtawins.ddns.net
gtech7.ddns.net
guccimane1337.ddns.net
gud819.hopto.org
guepardatef.ddns.net
gugu.zapto.org
guizika.duckdns.org
gulfup.no-ip.biz
gwly.no-ip.org
h2opvping.no-ip.org
h3llratnik.hopto.org
h3q.myq-see.com
h43vipforyou.ddns.net
h4cker007.no-ip.org
h5214h1.no-ip.info
habbotanji.no-ip.org
habche77.no-ip.org
haced11111.no-ip.biz
hack619.no-ip.biz
hack9.no-ip.org
hack90.no-ip.org
hackana.no-ip.biz
hackback.ddns.net
hackbossblack.ddns.net
hacked12323.ddns.net
hacked5319.mooo.com
hacked8765.ddns.net
hackedbyhacker123.ddns.net
hacker-120.no-ip.org
hacker-140.no-ip.biz
hacker-dz.zapto.org
hacker009.no-ip.biz
hacker04.no-ip.org
hacker12345678.no-ip.biz
hacker1236.hoto.org
hacker1hack.ddns.net
hacker21312.bounceme.net
hacker228.ddns.net
hacker327.no-ip.biz
hacker33.ddns.net
hacker4884.no-ip.biz
hacker5389282.no-ip.biz
hacker666king.ddns.net
hackerahmed123.no-ip.biz
hackerback.no-ip.biz
hackerbmx.ddns.net
hackerboy0505.no-ip.biz
hackerbyoz2014.no-ip.biz
hackercairo.ddns.net
hackerdz16.no-ip.biz
hackerdz213.ddns.net
hackerguru.ddns.net
hackerhackerz.ddns.net
hackerhamzh.ddns.net
hackerimad.zapto.org
hackeriq.ddns.net
hackerlikeaboss.ddns.net
hackermasrpro.no-ip.org
hackerred.no-ip.biz
hackers-012.myq-see.com
hackersapopi.no-ip.org
hackersela7rosea.no-ip.biz
hackersmorocco.no-ip.org
hackersyr.ddns.net
hackertrojans.no-ip.biz
hackertroll.ddns.net
hackerwwar.no-ip.biz
hackerzes.no-ip.biz
hackerzizo.noip.me
hacking.freedynamicdns.net
hackingdnss.duckdns.org
hackingnetlol.ddns.net
hackip96.zapto.org
hacklibya9898.no-ip.biz
hackmadoxx.no-ip.biz
hackmeifucan.noip.me
hacknett.ddns.net
hackok2015.no-ip.biz
hackpb85.no-ip.org
hackshacks1994.ddns.net
hackston.no-ip.biz
hackteam1.spdns.de
hackthenoob.ddns.net
hacktrojancy.ddns.net
hacktwxi.noip.me
hadesfirst.ddns.net
hairandnails.zapto.org
haithemhnjrat.ddns.net
hak55essa.no-ip.biz
hakdzking.no-ip.biz
hakeemo.no-ip.biz
haker-da3che1.no-ip.biz
haker2017.ddns.net
haker7up.noip.me
haker90.no-ip.biz
hakerforever.ddns.net
hakerlink.zapto.org
hakers1995.ddns.net
hakimkaniro.no-ip.biz
hakohaker.ddns.net
hakrspy.ddns.net
halbzhardn112233.no-ip.biz
halimoullah.no-ip.org
haliplc.no-ip.info
haloooo123.no-ip.biz
hama111komar.ddns.net
hamada50.no-ip.org
hamagamer.no-ip.info
hamah1214564231dfg.ddns.net
hamd1992.ddns.net
hamdi45.no-ip.org
hamilessel.ddns.net
hamo0ode.ddns.net
hamod2001.no-ip.biz
hamodi-hack1234.no-ip.biz
hamzakamali.no-ip.org
hamzauarist.zapto.org
hands-social.at.ply.gg
hansk4.no_ip.biz
hanskazan.no-ip.biz
hanzo20.ddns.net
haok.hopto.org
happy-t.at.ply.gg
haraga.no-ip.org
harbahawas.ddns.net
hardbone.ddns.net
harde1.no-ip.biz
hardysalah.no-ip.biz
harhar147.ddns.net
harony2.no-io.biz
harounraed.ddns.net
hasniimed.no-ip.biz
hasony2334.no-ip.org
hasony58093.ddns.net
hassan19955.linkpc.net
hassonali.no-ip.org
hastanawa.ddns.net
hasvan212.ddns.net
hawar-masify.ddns.net
haydardz.no-ip.biz
hazardfps.ddns.net
hbeeb1990.ddns.net
hbeebxooox.ddns.net
hbj1.myq-see.com
hboduck2013.duckdns.org
hccr.sytes.net
hcker17.no-ip.biz
hdsser.no-ip.biz
hdtv1.no-ip.biz
hedihakar3000.no-ip.biz
hee2014.zapto.org
hehehackbyme.no-ip.biz
hellwin.no-ip.org
helpmepls123.ddns.net
hema11020.no-ip.biz
hemahmhm.no-ip.biz
hemo.hopto.org
henrizbrabo2.ddns.net
hermes2021.duckdns.org
heroasd.no-ip.biz
heroman1.no-ip.org
heroznt1.no-ip.biz
heseen2012.no-ip.biz
heshamshe.ddns.net
hevarkurd.no-ip.biz
hexerhasone.no-ip.biz
hexfivem.ddns.net
hgjdjs.0pe.kr
hguvhr-1.no-ip.biz
hha.no-ip.biz
hhacer.ddns.net
hhbeeb99.ddns.net
hhdinani.no-ip.biz
hheemma.zapto.org
hhh12.ddns.net
hhheeedddiii1.no-ip.biz
hhhh.no-ip.biz
hhhhaaaa.ddns.net
hhhhhhh768768.no-ip.info
hhhhhkrufnrrrs1982.zapto.org
hicham123.ddns.net
hicham2241990.no-ip.biz
hicham3062015.no-ip.biz
hiddenman.duckdns.org
hihaha.zapto.org
hipbaba.chickenkiller.com
hisham9511.no-ip.org
histr.ddns.net
hitcherhacker.no-ip.biz
hitlarletounisian.noip.me
hitler-2015.no-ip.info
hjcnbr12.ddns.net
hkrohkrohkro.ddns.net
hkrooz.no-ip.biz
hkrz123.no-ip.biz
hkyourpc.ddns.net
hmmj1234.zapto.org
hmod44.ddns.net
hoasd.ddns.net
hodaahmed.publicvm.com
hode15.no-ip.biz
hogr.no-ip.info
hoho02.ddns.net
hoho4000.ddns.net
hohohoho12.no-ip.biz
holabankzgotyoucovered.camdvr.org
hold-oo.at.ply.gg
hom135.ddns.net
home.3utilities.com
home47736.ddns.net
hooleg.ddns.net
hoomanbvb.no-ip.biz
hoormoor.ddns.net
horakulo100.no-ip.org
hosen123.no-ip.biz
hosny20.no-ip.info
hosnymaster.ddns.net
hossensaif2016.no-ip.biz
hossensaif2016.no-ip.org
host123123.hopto.org
host1for2njrat.no-ip.biz
host3456h.duckdns.org
hostakilador.duckdns.org
hostlll.ddns.net
hostmorning.no-ip.biz
hostnjart1212.no-ip.biz
hostoll.hopto.org
hostshit.ddns.net
houariaek.no-ip.biz
houssem2014.no-ip.biz
howtolive913-31335.portmap.host
hp200.spdns.eu
hp600.spdns.eu
hshli123.no-ip.biz
hsn85.no-ip.biz
htn4231.zapto.org
htoo112.ddns.net
http-server.sytes.net
httpss.ddns.net
httr.zapto.org
huassin1999.no-ip.org
huda3.linkpc.net
huesosnjrat.zapto.org
hueta.hopto.org
huragamanana22.hopto.org
hussain26300.no-ip.org
hussain812.no-ip.org
hussein2348.no-ip.org
husseinsaif.linkpc.net
hussen-wael.no-ip.biz
hussien.no-ip.org
hv2022.dyndns.ws
hvbhj.duckdns.org
hxps15.no-ip.org
hydrometal.duckdns.org
hyptonix.ddns.net
hysy0516.codns.com
hyunjoon.n-e.kr
i-br.noip.me
iammuhammed.noip.me
iamsprey.ddns.net
ibnelsahra.ddns.net
ibrahemrap79.no-ip.biz
ibrahima7mad.no-ip.info
if-prairie.at.ply.gg
iferuss.ddns.net
ighost899.no-ip.biz
ihab2001.no-ip.org
ihackv247.no-ip.org
ihebmokhles.no-ip.org
ihebxx-idoudi.ddns.net
iiksa.ddns.net
iill.zapto.org
iimoded.ddns.net
il-prince.at.playit.gg
ilfuoco.crabdance.com
iliassfox1.no-ip.biz
ilovehack.ddns.net
ilovetohack.ddns.net
ilyahack.hopto.org
ilyapetrov48.hopto.org
ilyasssdirii.no-ip.biz
ilyastiiwtiw.ddns.net
imaddriton444.ddns.net
image-attitude.at.ply.gg
imed19.no-ip.org
imfares.ddns.net
imloveratnik.ddns.net
immoniter.mooo.com
inconnu.no-ip.biz
indian-knowledgestorm.at.playit.gg
information-mod.at.ply.gg
insanehh.no-ip.org
integralcalc.ddns.net
interest-stomach.at.ply.gg
interest-throwing.at.ply.gg
internet-explorer-background.duckdns.org
invadegames.duckdns.org
io.rrshost.in
ioere.hopto.org
ippoo.no-ip.org
ipv6ceth0.sytes.net
iq-luv2014.no-ip.biz
iraq2005.no-ip.biz
iraqiiraqi.no-ip.biz
isanachase.duckdns.org
islam1988.no-ip.biz
islamachour.no-ip.org
islamhackerdz.no-ip.info
islamway.no-ip.org
islob00641.hopto.org
issam085.ddns.net
issame100.no-ip.biz
issmail.publicvm.com
issudden.no-ip.org
item-religious.at.ply.gg
ixml7os.no-ip.biz
j-gig.at.ply.gg
j-rawww.no-ip.biz
jack2336.no-ip.biz
jackcopias.duckdns.org
jafares.ddns.net
jajdale.ddns.net
jaki3254.ddns.net
jakuza625.hopto.org
jalal100.serveftp.com
jalp2020.duckdns.org
jameka.ddns.net
januszpawlacz.mooo.com
japanese-valid.at.ply.gg
jardson7700.hopto.org
jasser9.ddns.net
jebar6770.no-ip.biz
jenukulafu133.bounceme.net
jerry193000.no-ip.biz
jesus141.ddns.net
jesusisgod.duckdns.org
jezevm8.ddns.net
jgieajpi.ddns.net
jgjg.hopto.org
jihed2013.zapto.org
jinmo0721.kro.kr
jmkrar.no-ip.biz
jnrat-9.no-ip.org
joao2412.ddns.net
joaozinbrl.no-ip.org
jocker311.no-ip.biz
johnnypeace.no-ip.org
johnricardomilos-33746.portmap.io
jojo228.hopto.org
joker111111.no-ip.biz
joker1787.no-ip.biz
jookerjooker.no-ip.biz
jord4n.no-ip.biz
jorjpepa.ddns.net
jose32.ddns.net
josefnabila.noip.me
joseph9999.no-ip.org
joujounette974.ddns.net
joune14.no-ip.biz
jounjoune.no-ip.biz
journal-serial.at.playit.gg
jpg100102015.no-ip.biz
jpmagu2525.ddns.net
juancaf4000.duckdns.org
juazeirops22.no-ip.org
judo50.sytes.net
jumpy-advice.auto.playit.gg
juneed93.zapto.org
justarandomthing-22825.portmap.host
justforlearn.ddns.net
justme10.no-ip.org
juziamodz.servegame.com
jxe-hosting.ddns.net
k3rry1xrd.hopto.org
kachkot.no-ip.biz
kacouma47.no-ip.biz
kadi41.no-ip.org
kadi48.no-ip.biz
kadimon1.no-ip.info
kahilo94.no-ip.biz
kairaw.ddns.net
kaka1286.myq-see.com
kakaha.ddns.net
kakais221.hopto.org
kakashisenpai.no-ip.biz
kaksomar.ddns.net
kaled.kill.me.biz
kali.morroco.publicvm.com
kali12.no-ip.info
kalil12.no-ip.biz
kallnot0011.ddns.net
kamaly.myq-see.com
kamenshik222.hopto.org
kami14.no-ip.biz
kami1548.ddns.net
kamokamo.no-ip.biz
kane2008.ddns.com
kanibal.1794.ddns.net
kano.blackunix.com
kanompangkeez.ddns.net
karamjihad1997.ddns.net
karamnaser321.ddns.net
karar101.ddns.net
kararalasadi43.no-ip.biz
karigar9171.ddns.net
karim7ado.no-ip.biz
karimivo1.no-ip.biz
karkarkar.no-ip.biz
karkouba535.no-ip.biz
karmina114.sytes.net
karmina115.sytes.net
karn.ddns.net
karrar44.myq-see.com
karrarhacker100.ddns.net
kartoffelnayazhaba.ddns.net
karzanwww.no-ip.biz
kaserdamar.no-ip.org
kasimabwin130.noip.me
kassar963-63714.portmap.host
katana.noip.me
kawtherkahla.ddns.net
kazutohex.ddns.net
kazya1.hopto.org
kbum1963.duckdns.org
kchalloub.ddns.net
kcm_1999.oa.to
kemo711.ddns.net
kfdklhghghjytj.myddns.me
kha2012lid.no-ip.info
khaled-exe.ddns.net
khaled132.no-ip.biz
khalid-2015.no-ip.info
khalil-ca12.no-ip.biz
khalil-soukahras.zapto.org
khattab1987.ddns.net
khizo.ddns.net
khweldx7.zapto.org
kian2019.ddns.net
kichdmsnet.no-ip.biz
kidaoloko.no-ip.org
kikasse.ddns.net
kill.blackunix.com
kill2342.ddns.net
killer6666.no-ip.biz
killerfo2.ddns.net
killerfo22.ddns.net
killerice123.ddns.net
killerkawli.myftp.biz
killerpal.no-ip.info
killerpk.no-ip.info
killtrchannel.hopto.org
killua.hackerz.chickenkiller.com
kilme.hopto.org
kimo-cabiste.no-ip.biz
kinconina.ddns.net
kind-resonance-23542.pktriot.net
king-abci.no-ip.biz
king14.duckdns.org
king4488.ddns.net
king7779999.zapto.org
kingarmada.no-ip.org
kinghacker1.no-ip.biz
kinghackers10.no-ip.biz
kinghmod6.ddns.net
kingoravrus.ddns.net
kingos1112.no-ip.biz
kingpainfockyou.ddns.net
kingprog.publicvm.com
kingspy.myq-see.com
kingxf.ddns.net
kirixay.ddns.net
kirkukihama.no-ip.biz
kiryache.ddns.net
kiscjxzsscvond.ddns.net
kissme1988.no-ip.biz
kissmefast.ddns.net
kissmi.no-ip.biz
kitkat-egy.ddns.net
kitkatdomin.dynu.com
kixeye20071.no-ip.biz
kizza.duckdns.org
kjhaukshnckuqjrhcasscasfsw.duckdns.org
kjkhhd8whde9wdh.zapto.org
kjsf6gj9.no-ip.info
kkickass.ddns.net
klawess1.no-ip.org
kleencshn.duckdns.org
knowledge-winds.at.ply.gg
ko0zo.ddns.net
kodoskoko1998.dynu.com
koka2014.ddns.net
kokikoki99.linkpc.net
kolyasik228.ddns.net
komay.no-ip.biz
konan20013.no-ip.biz
koolhays3.ddns.net
korabika198.no-ip.info
kornporp.duckdns.org
koukou23.myq-see.com
kr-net.kro.kr
kralist.duckdns.org
kratos12.duckdns.org
krimo2015.noip.me
ksa-99.ddns.net
ksa-ok.ddns.net
ksa03ksa.ddns.net
ksmklol.ddns.net
ktkot12345.no-ip.biz
kunaguero.no-ip.info
kurasha111.ddns.net
kurd-expert.ddns.net
kurdimilanista.ddns.net
kurdio.ddns.net
kurdistan1.no-ip.org
kurdistan22.ddns.net
kurisoran.no-ip.org
kurtm.blackunix.com
kurwa.securitymessures.com
kurwapoland.homepc.it
kuryslimany.hopto.org
kussaisouf.no-ip.org
l7n88.ddns.net
labrechadera.duckdns.org
lacroisade.ddns.net
laczin.duckdns.org
lafhacking65.duckdns.org
laith-hack.no-ip.biz
laith204.no-ip.info
laith21388.no-ip.biz
laith23.no-ip.biz
laith7714008223.no-ip.biz
laka1010.hopto.org
lakikali.sytes.net
lam83iss.hopto.org
lammer123456789.hopto.org
lammer2001.no-ip.org
lammerzinobrabo.ddns.net
last-last.no-ip.org
lastmanearth.duckdns.org
lati.ddns.net
lbghost.no-ip.org
leehenrymale2015.no-ip.biz
legacy123.ddns.net
legendz.ddns.net
leloprosto000.ddns.net
leofire.no-ip.biz
lexy.hopto.org
lezhar.linkpc.net
lganashadow.servemp3.com
liber8.no-ip.biz
liberoaaaa.no-ip.info
lifehax.no-ip.biz
lightcf.ddns.net
lime.portmap.host
lina89.zapto.org
lindaevans323.no-ip.org
line-calls.at.ply.gg
lioualioualioua.ddns.net
ljs7714.codns.com
llegallega.duckdns.org
llllllllllllllllllabril26de2021vacunate.duckdns.org
lmarajayanzawiko.ddns.net
loaimajdi.no-ip.biz
loawdrf.ddns.net
localhosts.anondns.net
lockme.no-ip.biz
loco-repo.noip.me
login-servers.ddns.net
lohru209721.hopto.org
lokman00.no-ip.biz
lokmane88.ddns.net
lol034.ddns.net
lol1.hopto.org
lol9d.ddns.net
lolaty.no-ip.biz
loldzezhack2015.no-ip.biz
lolfrags.ddns.net
lollkkek.ddns.net
lololyo.no-ip.biz
lolomedo2014.zapto.org
lona123.no-ip.org
lonayara79.no-ip.biz
london-banned.at.ply.gg
loneskins.ddnsking.com
lonlyman.no-ip.biz
lool123lool.no-ip.biz
looneytunes.twilightparadox.com
loosseer1212.no-ip.biz
lorixo-40605.portmap.host
lorixo123.gotdns.ch
lorixo666-43778.portmap.host
lorixo666-56372.portmap.io
losavionesvuelan.ddns.net
loufichkoupie.ddns.net
love100.no-ip.org
loveeeeee.ddns.net
loverhousse.no-ip.biz
loves.zapto.org
lovesafa.no-ip.biz
loveuo11222.ddns.net
loveyoubbbb.ddns.net
lovleymedo88.no-ip.biz
loxlox1337.ddns.net
ludiglup123.duckdns.org
lup1n2nb.duckdns.org
lusika.ddns.net
ly17a1z2e3z4.no-ip.org
lynnnaz.ddns.net
m19921992.ddns.net
m2321.no-ip.biz
m3z0f.ddns.net
m4k0y.duckdns.org
m6no0o5.myq-see.com
m7tref2015.ddns.net
m9r83x.ddns.net
ma20092009.zapto.org
maaher1.no-ip.biz
macacolouco3059.ddns.net
machakil.no-ip.biz
mack2.3utilities.com
madomc.no-ip.biz
madrid7.zapto.org
madxtn1.linkpc.net
mafiadz.myq-see.com
mafred.duckdns.org
magic123.no-ip.org
magnetico7.no-ip.org
magraotm.ddns.net
magsi.no-ip.biz
mahamabd88.no.ip-biz
mahamadhawrami11.ddns.net
mahamadhawrami123.ddns.net
mahboldz.no-ip.biz
mahmoodgn.ddns.net
mahmoud1177.no-ip.biz
mahmuodayman22.no-ip.biz
mai2082.no-ip.biz
main-peers.at.ply.gg
maintenanceservicefirefox.duckdns.org
maip01.noip.me
maistro.no-ip.org
majadd.zapto.org
majdi-ard.no-ip.org
majhol.ddns.net
majhoul.no-ip.biz
majhouljoker.ddns.net
majnoonjrema.ddns.net
makote.ddns.net
makram380.no-ip.org
maksongg.ddns.net
mal3on.linkpc.net
malak15.ddns.net
malikess.no-ip.biz
mam-m.ddns.net
mamapapa2015.no-ip.biz
mamba3.ddns.net
mamindz.zapto.org
mammonth222.ddns.net
mamomamo.no-ip.biz
mamostayanpoolllll.ddns.net
man.from-ks.com
managermiseajour.sytes.net
manakailia.hopto.org
manalmona7.no-ip.biz
mandoawad1.no-ip.biz
mandouza.zapto.org
manel.zapto.org
mannjrat.no-ip.biz
mantk123.no-ip.biz
maqlogeming.hopto.org
mara12.no-ip.biz
maratdddd.ddns.net
maravillas2022.duckdns.org
marbeyli.ddns.net
marektop1337.ddns.net
margusmodz.ddns.net
marianajoselime1101.duckdns.org
mark3000011.no-ip.biz
mark4454.ddns.net
mark76666-52473.portmap.host
markindejunojib.ddns.net
markjak.ddns.net
markwawy.no-ip.biz
maro2001a1.serveminecraft.net
maro5252.no-ip.biz
marocmix93.ddns.net
maroco3az.no-ip.biz
martonerds.no-ip.biz
maruku.no-ip.info
marvelcomics.ddns.net
marvnmbc.no-ip.biz
marwanashraf.ddns.net
marwangyan1234.no-ip.info
mast3rbrain.chickenkiller.com
master1520.duckdns.org
master2018.no-ip.biz
masterhaxor786.no-ip.biz
mastermindest.no-ip.biz
masterov03.ddns.net
masterplanc1ty.ddns.net
mastervx.no-ip.org
matadorx1.no-ip.biz
matrix123.ddns.net
matrix251.webhop.me
matthacking.duckdns.org
mauriciocaballerolora09.duckdns.org
max-payne.myq-see.com
max07805044289.no-ip.org
max555.ddns.net
max900.no-ip.org
max92.zapto.org
maxim890.ddns.net
maximgg.ddns.net
maximus99.ddns.net
maxxrocker.dlinkddns.com
mazalou3ayech.ddns.net
mazen123.no-ip.biz
mba.sytes.net
mbahuck.no-ip.biz
mc-blacklife.no-ip.biz
mdmrhm11.ddns.net
mdr22.ddns.net
mectref.duckdns.org
medalwaely.no-ip.biz
mediamall098.freedynamicdns.org
medlag03.ddns.net
medlucasss.no-ip.org
medo979.no-ip.biz
medofekry111.ddns.net
medohack.no-ip.biz
medoowo20140.no-ip.biz
medou0099.no-ip.biz
medoyho.no-ip.biz
medozezobadr.no-ip.org
megaton1122334455.ddns.net
mehdibenmhamed.ddns.net
mehdimoro.ddns.net
meilleurmutuelle.hopto.org
mekhata02.linkpc.net
melhortrojanrerer.duckdns.org
memo.no-ip.info
memoalaa.no-ip.biz
memodanger97.no-ip.biz
menticolino1566.duckdns.org
mester.no-ip.biz
meuconfigs.ddns.net
mezo1993.ddns.net
mezomezo.ddns.net
mghannam142142.ddns.net
mhacker783.no-ip.org
mhamad-l.ddns.net
mhamadhasan8.no-ip.org
mhamadhawlery.no-ip.info
mhses.no-ip.biz
mhsozmen.no-ip.biz
microo.no-ip.biz
micros.zapto.org
microsoft-team1.no-ip.biz
microsoft10.ddns.net
microsoftdnsbug.duckdns.org
microsoftsecurityessentials.duckdns.org
microsoftserver.linkpc.net
microsoftservice761.ddns.net
microsoftssuy.no-ip.biz
microsofttask.zapto.org
microssff.ddns.net
microstfoenvio.duckdns.org
midohack.no-ip.biz
midoo602.no-ip.biz
midowalid11.ddns.net
mikaeldopao.ddns.net
mike.blogsyte.com
mikpektis.no-ip.biz
mila56.no-ip.biz
milove.duckdns.org
mimo-salah.bo-ip.biz
mimoj47no.no-ip.org
mina1235454.ddns.net
mina200588000600jhkjl.myq-see.com
minanakhla.no-ip.biz
minecraft.myftp.biz
mineflame.ddns.net
mingggu.kro.kr
minhacontanjrat.ddns.net
minhahostvitimas.ddns.net
minhkhanh62.no-ip.org
minimum-certainly.at.ply.gg
minko.zz.am
miop.ddns.net
mirodz0057.no-ip.biz
mischa228.hopto.org
misha104.ddns.net
mission-panels.at.ply.gg
mistertromperie.no-ip.biz
misty-sun-47407.pktriot.net
mizaje.no-ip.biz
mj95jfhrd690jm1995.serveftp.com
mjrm-r14161.ddns.net
mkawyhack.no-ip.biz
mkd12.ddns.net
mking9898mm.no-ip.biz
mmekni.sytes.net
mmmk88.no-ip.biz
mmmooommm.no-ip.biz
mmnevvconsult.duckdns.org
mmo.no-ip.org
mmss19901990.no-ip.biz
mmusta11.ddns.net
mnqatqathackernym.no-ip.biz
mo7ameed.no-ip.biz
moaaz3000.ddns.net
moade.no-ip.biz
mochakis.no-ip.biz
modcod166.ddns.net
modelove.no-ip.org
modrty12432.no-ip.biz
modyalgen.ddns.net
mofmof93.no-ip.biz
mogasolution.ddns.net
moh-2014.linkpc.net
moh20142014.no-ip.biz
moha22.no-ip.biz
mohae.no-ip.biz
mohamad-sardini.no-ip.biz
mohamad2050.ddns.net
mohamad98.no-ip.biz
mohamadkalary.no-ip.info
mohamadmanasha2.mooo.com
mohamed-isper.ddns.net
mohamed021.hopto.org
mohamed665337.ddns.net
mohamed80.ddns.net
mohamedahmad.ddns.net
mohamedbiyad.ddns.net
mohamedelshenawy.no-ip.biz
mohamedgafer55.ddns.net
mohamedmed.no-ip.biz
mohamednjrat111.myftp.biz
mohamedsami1234.no-ip.biz
mohamedsamir2.noip.me
mohamee.zapto.org
mohamiiid.no-ip.biz
mohammadbkar.no-ip.biz
mohammed119.no-ip.biz
mohammed2.no-ip.biz
mohammed221.ddns.net
mohammed29928.ddns.net
mohammeds1001nj.ddns.net
mohd77a.no-ip.biz
mohhope.no-ip.info
mohmad95.no-ip.biz
mohqwew.no-ip.biz
mohsab2.no-ip.biz
mohsabry.no-ip.biz
mohundm.no-ip.biz
mokahacker.ddns.net
mokla.no-ip.biz
molham.no-ip.biz
momo-ha.no-ip.biz
momodz.no-ip.biz
monahu.no-ip.info
money2022.ddns.net
monocell09.duckdns.org
monshbido.no-ip.biz
montadher.ddns.net
moom99.ddns.net
moon2015.myq-see.com
mora333.ddns.net
moradjojo.no-ip.biz
moradmaro.ddns.net
moroccanhawk.ddns.net
moroccansniper.ddns.net
mosa55.no-ip.biz
moskitu.ddns.net
mosleem.ddns.net
mospid.iq.ddns.net
mosratos.no-ip.biz
motaga12.no-ip.biz
motaga8.no-ip.biz
motaro.ddns.net
motorgp200.no-ip.biz
mouaz22.ddns.net
moudi1997.no-ip.org
mouhamed0123.no-ip.biz
mouhamedjinn2.ddns.net
mouhamedrez.no-ip.org
moussagroup.no-ip.biz
moussaoui.noip.me
mpyass.no-ip.biz
mqo-zz.x64.me
mr-ahmadov.no-ip.biz
mr-drakola.no-ip.biz
mram12345.no-ip.biz
mramer12.no-ip.biz
mrasim98.no-ip.org
mrcod.publicvm.com
mrhacked.no-ip.org
mrhacker2020-38092.portmap.host
mrhackeralisaad.ddns.net
mrjuniorkarriba.no-ip.org
mrkoko.publicvm.com
mrnjserver.warzonedns.com
mrpola.ddns.net
mrrah.zapto.org
mrsahier.no-ip.biz
mrtzza.no-ip.biz
mrwolf.3utilities.com
ms-punisher.no-ip.org
ms-slovakia.at.ply.gg
ms13hack.no-ip.biz
msboukadoum.no-ip.biz
mslabtech.ignorelist.com
mstafa-king1.ddns.net
msvhote.ddns.net
mt2ps.no-ip.biz
mta-rp.ddns.net
mtnmr.ddns.net
mu7a.no-ip.biz
muamal33.no-ip.biz
muath0592.no-ip.org
mubarak91.hopto.org
mugens.no-ip.info
muhamadaboeltih22.no-ip.biz
muhamed-kirkuk.no-ip.biz
muhamed1.no-ip.biz
muhammadali.ddns.net
muhammadsabah.no-ip.biz
muhammadtakya.no-ip.biz
muhammadzaghloul.no-ip.biz
muhammed1.ddns.net
muisrael.ddns.net
multi12multi.duckdns.org
munnzia.crabdance.com
murtadha1233.ddns.net
must123123.ddns.net
mustafaalbzone.no-ip.biz
mustafahack12.no-ip.biz
mustaffahacker.ddns.net
mustaffahacker112.ddns.net
muzikas.no-ip.biz
mychat.servehttp.com
mynameisne0.no-ip.biz
mypisa.ddns.net
myreturn.ddns.net
mys7ery-22338.portmap.host
mys7ery2-20549.portmap.host
mysparta322.myftp.biz
mysterguys.ddns.net
mytest12.no-ip.biz
mytheblubtest.ddns.net
mywin7man.p-e.kr
mzeona.no-ip.biz
mzmzisis.ddns.net
nabile444.no-ip.biz
nabilou.no-ip.biz
naceurhackerz.no-ip.biz
nacrekosse.linkpc.net
nadeemiraq1994.linkpc.net
naeem03.no-ip.biz
nahas.no-ip.org
nahda10.ddns.net
naifhacker.duckdns.org
naizak0450.ddns.net
naj.no-ip.biz
najrat13.no-ip.info
nakedman22.no-ip.biz
name.bounceme.net
namrod.ddns.net
nanat.ddns.net
nansy123hacker.no-ip.biz
narcotraf.mooo.com
narotomagic.publicvm.com
narutoa.ddns.net
nasr23200.fe100.net
nassimben.ddns.net
natsudragneelsucksdick.chickenkiller.com
nauhancs.duckdns.org
nawrasoon.ddns.net
nayma5151.no-ip.biz
nazarfraih97s.no-ip.biz
nazeerkira99.no-ip.biz
nbvnf.no-ip.biz
nchadakn7wik.hopto.org
needs-unlike.at.playit.gg
neelixtop.no-ip.org
neeloves1njrat.ddns.net
nefos6o.myftp.biz
nellayani.ddns.net
neooo.duckdns.org
neos07.ddns.net
nephgo.chickenkiller.com
nephgo.duckdns.org
nephgo.no-ip.biz
netcatclink.ddns.net
netw0rkmonitor127.ddns.net
nevermind74.3utilities.com
new.libya2020.com.ly
new4love.myftp.biz
new8rood.no-ip.biz
newbackhost.ddns.net
newgrowtopia.duckdns.org
newhostforgrux.ddns.net
newman.hopto.org
newone2020.ddns.net
newpartyfrmaap.ddns.net
newyear2020.ddns.net
nicedayforyou.ddns.net
nicepics.no-ip.biz
nigro02.no-ip.info
nihad474.no-ip.biz
nik0nn1337.no-ip.biz
nikita22811.ddns.net
nikitabalakin.ddns.net
nikitka22848.ddns.net
nikits.ddns.net
nikosts123.chickenkiller.com
niks123.no-ip.biz
nimoru.ddns.net
ninja-dz12.myq-see.com
ninja123456.no-ip.org
ninoahmed.no-ip.biz
niras.no-ip.org
nishica.no-ip.biz
nj0509.duckdns.org
nj11.no-ip.biz
nj1337.ddns.net
nj1rat.no-ip.biz
nj2020.duckdns.org
nj5887.duckdns.org
njazul19022021.duckdns.org
njfree2play.cloudns.cc
njgreen2021.duckdns.org
njj2rat.ddns.net
njnj.ddns.net
njnyancan2021.duckdns.org
njpeople.duckdns.org
njrat-akramkader.no-ip.biz
njrat-haloul.no-ip.biz
njrat-serv.ddns.net
njrat.ddnsking.com
njrat1231.no-ip.info
njrat1337.publicvm.com
njrat159.ddns.net
njrat255.ddns.net
njrat26.ddns.net
njrat2k.no-ip.biz
njrat712345.no-ip.biz
njrat7777.ddns.net
njrat7p.no-ip.org
njrat999.no-ip.biz
njratfree.no-ip.org
njrathakcer.no-ip.biz
njrathost12.no-ip.org
njrathost94.ddns.net
njratmemz.hopto.org
njrats.ddns.net
njratv07d.no-ip.biz
njty.ddns.net
nluckyboy.ddns.net
nm2070hnmh.ddns.net
nmch32.no-ip.biz
nndmb-42891.portmap.host
nnew748.myvnc.com
nnfe123.no-ip.biz
no0name.ddns.net
nobs12.ddns.net
nodio.blackunix.com
nodio.blackunix.net
nofacenoplace.no-ip.biz
noip-1111.no-ip.biz
noip3333333.ddns.net
noipmestar.noip.me
nomemt.no-ip.biz
nomorelife15.ddns.net
nono111.no-ip.biz
noobxz13.ddns.net
noor-alia.no-ip.biz
noorsab.no-ip.biz
noorslash99.ddns.net
nordine1234.no-ip.org
noriaz-hack.no-ip.biz
not.3utilities.com
notes-scale.at.ply.gg
nothingissecurelol.chickenkiller.com
nouhnouh.ddns.net
nouhparo.no-ip.biz
nouro.zapto.org
nov1.myvnc.com
novatohex.noip.me
noway74.ddns.net
noxytng.no-ip.org
np21tda.no-ip.biz
nrj.ddns.net
nseael3.no-ip.org
ntyart.no-ip.biz
nuevito2dos.duckdns.org
nuevo1.duckdns.org
nuevocindy.duckdns.org
nuevos-ecuador2022.duckdns.org
nuevos3.duckdns.org
numbers-characterization.at.ply.gg
nwsarrrrr.no-ip.org
nyheu3938.no-ip.biz
nyroxpvp.ddns.net
oaoaoaoa.no-ip.biz
obadahamad.no-ip.biz
octubrelomejor.duckdns.org
odiesmadi.myq-see.com
ogamshi.myq-see.com
oklad9932s.hopto.org
oldboypirate.no-ip.biz
oldtwenty123123-21666.portmap.host
oldtwenty123123-59308.portmap.host
olixso123-58330.portmap.hos
oluakachuks.linkpc.net
oluhh-50585.portmap.io
omar17.noip.me
omar25.no-ip.org
omarayman.zapto.org
omarooney.no-ip.biz
omarosama123456.ddns.net
omarzzt.no-ip.biz
omerhost.no-ip.org
omezzine.no-ip.biz
omg100.ddns.net
ommmar1999.ddns.net
omogelekeleke.linkpc.net
onairesalah1.no-ip.biz
onepiece.no-ip.info
onetap123421.hopto.org
onyedi123.no-ip.net
oommaaww.no-ip.biz
oooodddd.ddns.net
opaeda123.no-ip.biz
openport5327-59758.portmap.io
opika.linkpc.net
optimous.no-ip.org
oqbpregoqbpreg.ddns.net
orestporest1.hopto.org
org.publicvm.com
org.sells-it.net
orkmrvirus.zapto.org
oryshan.no-ip.org
osadragon.ddns.net
osamaali.no-ip.biz
osamaosamaad.no-ip.biz
osammer2014.no-ip.biz
osbios.net
othmanbugi.no-ip.org
ouenza100.ddns.net
ouifilstonoui.ddns.net
ouissamahackerdz.ddns.net
ousema1.myq-see.com
oussama-exinisien.no-ip.biz
oussama092.no-ip.org
oussama1598.servehttp.com
oussamalakhtiri.no-ip.biz
oussamato.no-ip.biz
outdoor-geo.at.ply.gg
outside-fine.at.ply.gg
overlamer.ddns.net
owais5050-61656.portmap.io
oz112.no-ip.org
oziiiiii.no-ip.info
ozowara.duckdns.org
ozpz.ddns.net
p133.hopto.org
package-read.at.ply.gg
pages-tion.at.ply.gg
palat223.ddns.net
palestine66.no-ip.biz
paloma.ddns.net
paloma.no-ip.biz
paltalkv.myq-see.com
panda2014.no-ip.biz
pandozax.ddns.net
papaiiia132.hopto.org
paradox.uno
paragetirmebana.duckdns.org
paravant.no-ip.org
parosh22.ddns.net
password0.no-ip.biz
pasub.kro.kr
paulorado7cfno.ddns.net
paypal15.ddns.net
pbblackoutservices.ddns.net
pcpc64.ddns.net
pedrobedoya20190411.duckdns.org
pedrobedoya201905.duckdns.org
pedrobedoya2021.duckdns.org
pegarpefar.duckdns.org
peixe.no-ip.org
peixess.duckdns.org
pendesigns.ddns.net
peniscareca.ddns.net
pepos2015.no-ip.biz
pereira2022.duckdns.org
perflogs.duckdns.org
peru2022peru.duckdns.org
pet.donalbidden.ga
petite-bars-raise-82-45-123-4.loca.lt
petyx228.hopto.org
phenokami00.no-ip.biz
phentermine-exchange.at.ply.gg
picka.linkpc.net
picobis-20350.portmap.io
pidor2106.ddns.net
pikopiko.ddns.net
pingalgeri.zapto.org
pipislaallaa.hopto.org
pivtgavera.no-ip.org
plankxd.ddns.net
player23.no-ip.org
poga.ddns.net
pointblank.no-ip.biz
pointblank.servegame.com
poles2014.no-ip.biz
policyprivacy.duckdns.org
ponoc.ddns.net
pooopoff.no-ip.org
popeyeth.mooo.com
popsik1337.hopto.org
popup.onthewifi.com
portablepolicy.duckdns.org
portforward.hopto.org
positive-achieved.at.ply.gg
potential-singer.at.ply.gg
power12345.ddns.net
pp1013gg0208.kro.kr
pptp.ipjetable.net
pr0fsn1p3r.myvnc.com
princealsham.ddns.net
princemahmoudsamir.no-ip.biz
privetvzlom.hopto.org
problem-download.at.ply.gg
prof15.sytes.net
program1.noip.me
programer123.no-ip.biz
project-noted.at.ply.gg
property-served.at.playit.gg
prostobomj.hopto.org
pruebaagosto.duckdns.org
pruebados.myftp.org
pry0.chickenkiller.com
pspspsmoo.no-ip.biz
pubg1.myftp.biz
puerto1722.duckdns.org
puerto3738.duckdns.org
puerto8596.duckdns.org
punizzer.no-ip.biz
purpose-nuke.at.ply.gg
pussy.n-e.kr
q22k.ddns.net
qaher123.ddns.net
qanaslraq.ddns.net
qarsan-al-dora.no-ip.biz
qazqaz.ddns.net
qquuali.ddns.net
qqw879.no-ip.biz
qqwq1234.codns.com
quart.ddns.net
queenjood2020.ddns.net
qweasdzxc123.ddns.net
qwerrty123321.ddns.net
qwertyuiop-2015.no-ip.info
qyq2015.ddns.net
r4dm3a.ddns.net
raarmoodhettop.no-ip.biz
rachid3391.ddns.net
rachidhaythamdz.no-ip.biz
radea.ddns.net
radio-dos.at.ply.gg
radouan-oujdi.no-ip.biz
radouane-chorti.no-ip.biz
radwane.no-ip.biz
rafa0530.no-ip.biz
rafael-2014.zapto.org
rafde2015.no-ip.biz
ragbr010.no-ip.biz
ragheb.no-ip.biz
raheemchisteel.org
ralacapeta.no-ip.biz
rama7.no-ip.biz
rameobeidi.ddns.net
rami1995r.ddns.net
ramibensab3ini.ddns.net
ramnani1.hopt.org
ramo45.zapto.org
ramy01dz.ddns.net
ramy1999.no-ip.biz
ramyok.no-ip.biz
ramzi10.ddns.net
ramzyyss22.no-ip.biz
randomsunshine.chickenkiller.com
rangohh.hopto.org
ranouchabiba.no-ip.biz
ranyaa06.no-ip.biz
rastaanis.zapto.org
rat.ydns.eu
rat012.duckdns.org
ratchomli.hopto.org
rattesting.no-ip.biz
raul-amen.no-ip.biz
raya.zapto.org
rayan100010001000.no-ip.biz
rayan312.no-ip.com
raymondong.no-ip.org
rbs2119.ddns.net
rcode4444.ddns.net
rdp2021.duckdns.org
rdxen.ddns.net
reald27.duckdns.org
rebazboy.ddns.net
receive-dating.at.playit.gg
recommended-cia.at.ply.gg
red-devil.no-ip.biz
red4.hopto.org
redon-2015.ddns.net
redwaneboudaa.zapto.org
reeem20102010.ddns.net
refuseniks.no-ip.biz
rekan123.no-ip.biz
relaxjh.p-e.kr
rendomaname.duckdns.org
renko.ddns.net
rerereka.zapto.org
reserva01.duckdns.org
resistencia98.duckdns.org
return-room.at.ply.gg
revengeee14.no-ip.biz
revg.duckdns.org
rezhwanhack.noip.me
rezultbox.zapto.org
rgaege.ddns.net
rhkstkd99.0pe.kr
ri0710.ddns.net
riadhacker.no-ip.biz
riadhacker00000.no-ip.biz
rid1999.ddns.net
rida1999.ddns.net
riyad213.sytes.net
riz0.no-ip.biz
rjdfm222.no-ip.biz
rlawlsl154.codns.com
robertpasko.mooo.com
roblucci.ddns.net
rodtrojan.duckdns.org
roko.duckdns.org
romancee.no-ip.com
romel1.no-ip.biz
ronymahmoud1993.webhop.me
root1455.ddns.net
rootydead5454.no-ip.org
rorayan1234.ddns.net
roro.gotdns.com
roro60600.ddns.net
rosinject.ddns.net
rosst.ddns.net
rostislav404.ddns.net
rothilione-41041.portmap.io
royanlox.ddns.net
rr123.zapto.org
rrerokdeifnvmowpkdjfdfwfgrfd.jumpingcrab.com
russia5319.ddns.net
rustirt.ddns.net
s7spomp.no-ip.info
sa3bolah1.ddns.net
sa3eka7.no-ip.biz
saadk.no-ip.biz
sabifati.duckdns.org
sabrina.noip.me
saculo.com
sadatsdays-32203.portmap.io
sadeqq.ddns.net
sadoun.myddns.me
safahkarbala.ddns.net
safeconnection.ddns.net
saghax5.duckdns.org
sahin35.duckdns.org
sahinerol1.no-ip.org
saidpolini113.no-ip.biz
saifaemaed2.myftp.org
saifdanger.no-ip.biz
saiflivy.no-ip.biz
saifmuhannad.no-ip.biz
saifxdtree.no-ip.biz
sailingbeneath.ddns.net
sajad123455sajad.no-ip.biz
sakarsakar.no-ip.biz
saladz.no-ip.org
salahizwi.no-ip.biz
saleh200.hopto.org
salemsalemas123.no-ip.org
salemtunsi.no-ip.org
sallystark.ddns.net
salmanisa840.no-ip.biz
salohash1998.no-ip.biz
salopit.no-ip.info
samanbaban1980.ddns.net
samasd.webhop.me
sameazz.no-ip.biz
samel123.hopto.org
samer123.no-ip.biz
samer1993.no-ip.biz
samerrrr.no-ip.org
samhkr13.ddns.net
samir-russi.no-ip.biz
samir.zapto.org
samir123.no-ip.biz
samirsamir12.no-ip.biz
samistboy.ddns.net
samistrong.ddns.net
sand-boxie.ddns.net
sandrabeauty.noip.me
sanmiguel2022.duckdns.org
santa94.no-ip.biz
sanyor77.ddns.net
saod2005.no-ip.info
saoudi-004.ddns.net
saqarhack.no-ip.biz
saraaa88.no-ip.biz
sarafindlove.no-ip.biz
sarah27.ddns.net
saralol.no-ip.biz
sarcoci.ddns.net
sarmad122.no-ip.biz
saror.no-ip.biz
sasjelloun.ddns.net
satan2.no-ip.biz
satanhoks666.no-ip.biz
sattar1995.no-ip.biz
savedat.duckdns.org
savioanon.ddns.net
savioanon.no-ip.biz
savvxcs.no-ip.org
saw1.no-ip.biz
saw4.playit.gg
scamher.chickenkiller.com
scammersbeware.ddns.net
sco-sco.no-ip.org
scoh.no-ip.biz
screamy9999.noip.me
screenprotection.hopto.org
scuba90.codns.com
sdeeeek.no-ip.biz
sdfdgsagsdf.duckdns.org
sdfgry4.duckdns.org
sdgsfghhg.duckdns.org
sdkosjdjkss.no-ip.biz
secksme.ddns.net
secure135.hopto.org
securepage.ddns.net
secvoya.ddns.net
sedon1.ddns.net
seeme.ignorelist.com
segundito22.duckdns.org
sejdra.no-ip.biz
selluehaikon.ddns.net
semper01.no-ip.biz
senator123.ddns.net
send-diversity.at.ply.gg
senior12.ddns.net
senpailikeyou.ddns.net
septiembre2.duckdns.org
ser-multi2015fuck.ddns.net
server-online.myftp.org
server321.ddns.net
service-http.servehttp.com
service.net-freaks.com
servicefacebook.serveftp.com
servicemicro.publicvm.com
serviceswin.publicvm.com
sese.no-ip.org
setokaiba.no-ip.biz
seucrackudokk.duckdns.org
sever12.ddns.net
sex4233.no-ip.biz
sexy93ros.ddns.net
sey69.no-ip.bisey69.no-ip.biz
sezar19900.no-ip.biz
sezohac.no-ip.biz
sfa7hack9211.ddns.net
sfanx.no.biz
sggffgcc.p-e.kr
sghshsh2656.hopto.org
sgsg.ddns.net
shaban123.no-ip.biz
shabh853.ddns.net
shadow1assassin.dnsd.info
shadow20199.ddns.net
shadowcrow1997.duckdns.org
shadowhost1.ddns.net
shadowpro87.ddns.net
shadowraze.ddns.net
shaiya-hemen.no-ip.org
shakeu123.duckdns.org
shamir11.no-ip.org
shamsvip.no-ip.org
share-earthlink.servecounterstrike.com
sharky1590.no-ip.biz
shell.blackunix.com
shell.blackunix.net
sheluha.hopto.org
shemo.no-ip.org
shenma554109.e1.luyouxia.net
sherief.ddns.net
shfloot.no-ip.biz
shfshfmohxxrexr.ddns.net
shicogenius1.no-ip.biz
shironeki.ddns.net
shit29.ddns.net
shitgotreal.duckdns.org
shker.ddns.net
shniederdk.no-ip.biz
shooey.ddns.net
shopviabitcoin.ddns.net
should-conjunction.at.ply.gg
shrekishere.ddns.net
shshsh.no-ip.org
shvan123.no-ip.biz
shvchosts.ddns.net
sicuz78.hopto.org
sidahmed-1973.no-ip.biz
sidahmed132013.no-ip.biz
sidebar.sytes.net
sidoa3.no-ip.biz
sific227asmm.ddns.net
silent1213.no-ip.biz
silkroad5.ddns.net
silkroads.ddns.net
simben158.no-ip.biz
simo1997.zapto.org
simoonovid.ddns.net
simows.no-ip.org
simoxhacker98.no-ip.biz
sinane.no-ip.biz
sisoko.no-ip.info
sisten32.ddns.net
six6uk.duckdns.org
sizar23.dnsd.info
skillhacking1.ddns.net
skorepyo1.no-ip.org
skovichhack.no-ip.biz
skyb.ddns.net
skype-all.sytes.net
skype.nightowldvr.com
skypemicrosoft.ddns.net
sl00m.ddns.net
slapt.ddns.net
slerim.no-ip.biz
sli.linkpc.net
slimanomix1.ddns.net
slowburn.linkpc.net
smadihack.no-ip.org
smaqad.ddns.com
smara.ddns.net
smndr123.no-ip.biz
smsm.ddns.net
smsmhack.no-ip.biz
smuktnet.ddns.net
snc2015.no-ip.biz
snhacker.ddns.net
sniper-hacker.no-ip.biz
sniper-speed.no-ip.org
sniper228.ddns.net
sniper881.no-ip.biz
sniperghazadz.no-ip.org
sniperghost.no-ip.biz
snopi.ddns.net
snowgato.duckdns.org
sobhiismyname.no-ip.org
socketw1.duckdns.org
sofe-hacker.ddns.net
sofe2424.no-ip.biz
sofiane85.no-ip.biz
sofix-bourne.blogdns.com
softdev.no-ip.biz
solarintel.linkpc.net
son1.ddns.net
soomaar.no-ip.biz
sooorry2012.ddns.net
sooosoo45.publicvm.com
soport-587.zapto.org
soportes.duckdns.org
sorriso062.ddns.net
sosamail1211.no-ip.biz
sosibibu228.hopto.org
sould.no-ip.biz
souljaz.myq-see.com
soultaker1.ddns.net
source-seconds.at.ply.gg
spamerdz9161.hopto.org
sparkmanthomas.hopto.org
sparks123543.ddns.net
spartacuse88.no-ip.biz
spartanazul.duckdns.org
specific-algeria.at.ply.gg
sphack7.no-ip.biz
spiner847.servehalflife.com
spiritcrusher.ddns.net
sportnet.ddns.net
spsp12.kro.kr
sptx1.duckdns.org
spynet2016.no-ip.org
sqlinjection19202.ddns.net
sqsameh9.no-ip.biz
srfer.hopto.org
sror001.no-ip.biz
srsrytop52.no-ip.org
srujana1.hopt.org
ssd10.ddns.net
ssh.urlcuts.com
ssssaaaa.myftp.biz
stalker1.zapto.org
stallkermonolit9.ddns.net
standardchbank.servehttp.com
starmimo7.ddns.net
staroo.ddns.net
starstar.duckdns.org
startitit2-23969.portmap.host
starton.no-ip.org
startx12345.no-ip.biz
starzizou.no-ip.biz
steam.user32.com
steamuser1.no-ip.org
stepaglek228227.ddns.net
steve17.no-ip.biz
steven11.ddns.net
stiktiktik2014.no-ip.org
stinger4577.hopto.org
stita.no-ip.org
stivadns.zapto.org
stop15-52833.portmap.host
storydex.hopto.org
strangerstrek.duckdns.org
strangler89.no-ip.org
street-shut.at.ply.gg
stromox.hopto.org
stx3000.no-ip.biz
style-camps.craft.ply.gg
subject-assure.at.ply.gg
submergerezi123.duckdns.org
subscribedao3001.hopto.org
sultanalwsultan.no-ip.org
sumair.ddns.net
summer-semester.at.ply.gg
sunskill.ddns.net
sup3rd3ad.duckdns.org
super-toxica.no-ip.biz
super.zapto.org
superman88.no-ip.biz
supermorad.no-ip.biz
supernovaswag.ignorelist.com
superstart.myq-see.com
supporknowledgebase.ddns.net
suprimax92.duckdns.org
sureboyz.ddns.net
susnj.hopto.org
suspended.duckdns.org
suvorova1212.ddns.net
svakabomja333.hopto.org
svalka2.ddns.net
svalka23.hopto.org
svalkabomja333.hopto.org
swaswa.no-ip.biz
swordfish.no-ip.biz
sxeodus12.duckdns.org
sye.zapto.org
sylis.no-ip.biz
sylviaoslh012.ddns.net
synapsecracked.duckdns.org
syriablackhackers.no-ip.org
syriaforus.no-ip.org
syriahackers.no-ip.biz
syrianvirusexe.ddns.net
sysmanage.linkpc.net
systamkurdesh.sytes.net
system111.no-ip.org
system77.no-ip.biz
systema32.ddns.net
systems-pc.hopto.org
t2wentyh2cker.ddns.net
tagaldenasas.no-ip.biz
tagmoute123.no-ip.biz
tahamoga.no-ip.biz
tahaouniss.ddns.net
taher2014.no-ip.org
taiarip.no-ip.biz
tajrask.ddns.net
tamer2003999.ddns.net
tamtojan.no-ip.org
tanyakurd.no-ip.biz
taqtaq1.no-ip.biz
taragazmyy.noip.me
tarikkungfeude.no-ip.biz
tasks.sytes.net
tawta5rafih.zapto.org
tchikou.no-ip.info
tdfshell3d.no-ip.biz
te0am.hopto.org
teamcrackerisback.ddns.net
techhack.ddns.net
teculio20.duckdns.org
teddytroja.duckdns.org
tehhallthehall.ddns.net
tehran.ddns.net
tell-academic.at.playit.gg
temp123456.ddns.net
tenebrax.duckdns.org
terhax.duckdns.org
terminator30.hopto.org
terminator8.zapto.org
test0day.zapto.org
test1xa.duckdns.org
test333.no-ip.org
test777test.ddns.net
testdns224.mooo.com
testdo1.sytes.net
teste1bb.ddns.net
testerlinux.ddns.net
testet.redirectme.net
testhost1.sytes.net
testnjrat.no-ip.biz
testsevaer.kro.kr
tesxnext.duckdns.org
tfestboy.hopto.org
th3-jazzz.no-ip.biz
th3buntry.ddns.net
th3pr0sy.ddns.net
th3pro2014.no-ip.biz
thamerr.no-ip.biz
thankforthisfdp.crabdance.com
the-monible.no-ip.biz
the-return.no-ip.org
theblack2015.ddns.net
thedangerous619.no-ip.biz
thedark1988.no-ip.biz
theend.ddns.net
thef15.linkpc.net
thegoldfair01ifu8ck.hopto.org
thejoker0528.ddns.net
thekewlhost123.duckdns.org
theking.myq-see.com
thekrayat11.no-ip.biz
themarlborough.co.vu
themasterofhack.noip.me
themixa22.ddns.net
themonsters131.ddns.net
theponasher.no-ip.org
thepredator.no-ip.biz
thesidali007002.ddns.net
thewindows10.ddns.net
thiagoman.no-ip.org
thunderhack.duckdns.org
tiagrxax.no-ip.biz
tichtonadoksikana.ddns.net
tigerhack.hopto.org
timofeytop.hopto.org
tipoconecct.ddns.net
tips-longer.at.ply.gg
tissasamir.ddns.net
tito30.ddns.net
titoaalex.no-ip.biz
titopeo1.duckdns.org
titorero.no-ip.biz
tjrltjr9644.conds.com
tnay4life.ddns.net
tnero30.no-ip.biz
tnoh.no-ip.biz
tnt7007.no-ip.biz
tolga182-49359.portmap.host
toma22.zapto.org
tomekgos3.ddns.net
tomm2100.zapto.org
tomm21000.zapto.org
tommaray.strangled.net
tony20051.no-ip.biz
toot122.no-ip.biz
toothless.myq-see.com
topbatha2.noip.me
topgamer.duckdns.org
tophack.no-ip.biz
tophacker.ddns.net
topic-jacksonville.at.ply.gg
topmath.no-ip.biz
topo2015.no-ip.biz
topsayed223.no-ip.biz
torcity.chickenkiller.com
torj0281821.duckdns.org
torremas.duckdns.org
toshiba.no-ip.biz
touchedhost.no-ip.org
tr1.dynu.com
tr14.mooo.com
trabajo-rikys.duckdns.org
trabajo8312.duckdns.org
trabajovalle2023.duckdns.org
trabsonrx.duckdns.org
traderforex.no-ip.biz
tradingrecovery.duckdns.org
tragicdux.chickenkiller.com
transporte.crabdance.com
tremdoamassa.duckdns.org
trip998877.hopto.org
trippytriptrip.ddns.net
trogen123.ddns.net
troianteste.ddns.net
trojan777.duckdns.org
trojandonugh.ddns.net
trojanhackninja.ddns.net
trojannjrat.ddns.net
trojanyangabriel.ddns.net
trung0979774557.homeip.net
trustedhelp.chickenkiller.com
tst.3utilities.com
ttaahhaa4321.ddns.net
ttufuck.ddns.net
tuanaodcod-33208.portmap.host
turkmurat.no-ip.org
tv5.no-ip.biz
tvgjhegjhfgveht86.servecounterstrike.com
twitchsupport.no-ip.ifno
tyfdfdfs.ddns.net
u1will1do.ddns.net
u34.no-ip.biz
ubnt4.no-ip.biz
uk-brakes.at.ply.gg
ulisse-31.no-ip.biz
ullr21.ddns.net
umang.chickenkiller.com
umbrella2017.ddns.net
umbro.ddns.net
uncharted1998.zapto.org
understand-recommendation.at.playit.gg
unholyblanket.ddns.net
unkdamas7.ddns.net
unlimx.noip.me
untilwemeet.no-ip.biz
uotterfox.linkpc.net
up18gr.ddns.net
updateing.zapto.org
updater-discord.duckdns.org
updaterwindows.ddns.net
updateshost.zapto.org
uphcrunchi.ddns.net
urbanhuman123.duckdns.org
usaedc.dynu.com
usb.p-e.kr
use-courses.at.ply.gg
used-trucks.at.ply.gg
user882019.dlinkddns.com
usmh.sytes.net
utorrent.serveftp.com
uuyytedfgh.duckdns.org
uuyyuuyy76.no-ip.biz
uytegkuytuytu.ddns.net
v7y.no-ip.biz
vagacarga.ddns.net
vagadz16.no-ip.org
valeraservice.hopto.org
vamo.linkpc.net
vanea123.hopto.org
vardarkdevil.redirectme.net
vasiliypetrovich11.hopto.org
vbre231.no-ip.biz
vbsecrett.mooo.com
vegetata.duckdns.org
vendetta.no-ip.biz
vendetta2020.ddns.net
veprex.hopto.org
verde2020.duckdns.org
verjiniya.ddns.net
vesperiskindagoated.hopto.org
vibopart.ddns.net
videntev.duckdns.org
videoaulafb.duckdns.org
videobabshering.ru
vip009988.ddns.net
vip0f.hopto.org
viperisher.ddns.net
viperr.no-ip.org
vipper24.hopto.org
virus187.no-ip.biz
virustop.no-ip.biz
visichatrooms.no-ip.info
visual-design.ddns.net
visualbasic.ddns.net
vitimas.servegame.com
vitimascsgocheat.duckdns.org
vitimassubindo.duckdns.org
vivo00007.no-ip.biz
vlad71.hopto.org
vlc.servehttp.com
voip19.ddns.net
volkov2014.ddns.net
voltei1.duckdns.org
voracity.ddns.net
voseoddl.ddns.net
vps001.strangled.net
vslogtffgfgdwd.hopto.org
vzlomkakahi222.ddns.net
w9101.zapto.org
wadani.hopto.org
waegwan.theworkpc.com
waelwaheed2014.no-ip.biz
wahdhack.no-ip.biz
wahida161.hopto.org
wajih-125.no-ip.biz
wallalhazen.no-ip.org
warhosting.ddns.net
warning.ddns.net
wasfi1000.ddns.net
wawe2014.linkpc.net
waww.on.ip.baz
waysportatrojans2.ddns.net
waywayeyey2014.no-ip.org
wdex.ddns.net
weak-edge.auto.playit.gg
weareone83.ddns.net
webhosting.no-ip.biz
weldtn.no-ip.biz
well-chassis.at.ply.gg
weltxyt5925600.hopto.org
wesam2014.no-ip.biz
whadmv.ddns.net
whitehackeriv.ddns.net
whiteserver.mooo.com
whity.ddns.net
whmfix009.cf
who-hack.no-ip.biz
wibnj.duckdns.org
wildofthenight.no-ip.biz
wildsafari.no-ip.info
willkicksomeass.no-ip.biz
win123.no-ip.biz
wind7.no-ip.org
windeeo.no-ip.biz
windownssystem.ddns.net
windowold.zapto.org
windows-defender-update.duckdns.org
windows-signed.linkpc.net
windows.waely.com
windows1.ddns.net
windowsupdateservice.mypi.co
windwosupdata.ddns.net
winlogosystem.ddns.net
wins0310ok.duckdns.org
wins10ok.duckdns.org
wins2021ok.duckdns.org
wins2109ok.duckdns.org
wins29dicok.duckdns.org
wins8003ok.duckdns.org
winter-rd.at.ply.gg
winupdat.zapto.org
winxs.ddns.net
wissamhd.ddns.net
withgod.hopper.pw
within-morning.at.ply.gg
withoutzy.ddns.net
wizarddingy.duckdns.org
wkipir1cfg.ddns.net
wlkjdaui828.ddns.net
wmazen.no-ip.biz
wnsdud123.kro.kr
wolfsniper22.no-ip.org
wololo31.duckdns.org
worm.access.ly
wrdx321.no-ip.biz
wrfnn.ddns.net
wsam1987.no-ip.biz
wtf222.hopto.org
wtf4134.ddns.net
wtfrudoing.ddns.net
wvs123.ddns.net
wwee222.zapto.org
www-avast.sytes.net
www-avira1.sytes.net
www-eset.sytes.net
www.homelink.publicvm.com
www.infor.publicvm.com
wwwcom.redirectme.net
wwwwwwwwww1978.no-ip.biz
x-devil50099005.ddns.net
x014.hopto.org
x7modxx.no-ip.biz
x98.no-ip.biz
x99vnw.no-ip.biz
xacearmada01.zapto.org
xaker100.ddns.net
xandy239.no-ip.org
xanonimohp.no.ip.org
xatabomsha1470.ddns.net
xatabomsha544.ddns.net
xbbu.myq-see.com
xbox1.servebeer.com
xcheater.589.no-ip.biz
xcheater589.no-ip.biz
xcx.zapto.org
xd91801.ddns.net
xdfghjkl.ddns.net
xekko.no-ip.org
xersqil237bvcxz.no-ip.biz
xhamadx.no-ip.biz
xhxix.no-ip.org
xiperx.ddns.net
xk03.no-ip.biz
xke.ddns.net
xmaster123.no-ip.biz
xnxx2000.no-ip.biz
xnxxbang.zapto.org
xnxxcr7.servecounterstrike.com
xoxo.ddns.net
xoxoyi.no-ip.biz
xozgahacker.no-ip.biz
xplackx.no-ip.biz
xplo567.ddns.net
xrakx.no-ip.info
xrat3141.zapto.org
xribery7.no-ip.biz
xsad.ddns.net
xssdfd.xxxerer.com
xssx.no-ip.org
xterm.myq-see.com
xtra3.zapto.org
xtracker81.no-ip.org
xtremerat2016.no-ip.biz
xttapsha.ddns.net
xviurs.no-ip.biz
xwarning.ddns.net
xxfuck.servequake.com
xxsozy.no-ip.biz
xxvrsiq.noip.me
xxx99.zapto.org
xxxx008.no-ip.biz
xziro.zapto.org
yabalboy.p-e.kr
yaelkom.ddns.net
yahayaha.no-ip.biz
yahmanioi.no-ip.biz
yahoo.no-ip.org
yaman82.no-ip.biz
yar1221.ddns.net
yarikqq.hopto.org
yasinmcaaminos.zapto.org
yassar.ddns.net
yasser12.ddns.net
yasser77.no-ip.org
yasserbugatti.no-ip.org
yasserentraficdz1.no-ip.biz
yassine-hacker.no-ip.org
yassineouhaniii.myq-see.com
yassinesh28.no-ip.biz
yassir007.linkpc.net
yassser.no-ip.org
yayo.ddns.net
yazanabbas11.no-ip.info
yazidhack123.no-ip.biz
yemennet.no-ip.biz
yesyehya.no-ip.biz
yintsukidaddy.ddns.net
yjjy.no-ip.biz
yoooos.ddns.net
yossef123.no-ip.org
youcanseeme.zapto.org
youcef-34.no-ip.biz
youcefzianee.ddns.net
youfb.ddns.net
youguns337.ddns.net
younameonyourhost3.no-ip.biz
younexshadow007.ddns.net
youport.ddns.net
yourdownload.hopto.org
yourmother.ns0.it
yousef01.ddns.net
youssef-el.no-ip.org
youssef-faris.no-ip.biz
youssef1233211.no-ip.biz
youssef20.ddns.net
youssefhackersyrian.hopto.org
youtub.publicvm.com
youtubecom.ddns.net
yoyojoee.no-ip.org
yoyoyo12345.no-ip.biz
ysef1999norhan.ddns.net
yuan1111.ddns.net
yukimura13.ddns.net
yummy-limit.auto.playit.gg
yunhwan.kro.kr
yur2021.duckdns.org
yusifhacker123.no-ip.biz
yyquyq677.no-ip.biz
yyytuit7rt.no-ip.org
z0rdexx-24386.portmap.io
z1cker.ddns.net
z87armrh.ddns.net
z8h.ddns.net
za3tour.no-ip.cam
zaba20.noip.me
zabanahacker.no-ip.org
zacinemzabi.bounceme.net
zadhad321.ddns.net
zafarullah.zapto.org
zahrou29.ddns.net
zainsk.hopto.org
zakakaminto.no-ip.biz
zakariabouziane.no-ip.biz
zaki-botnet.portmap.host
zakimiro07123.no-ip.biz
zal3ahack.no-ip.info
zampahost.no-ip.biz
zanyarc.no-ip.biz
zapzip.system-ns.ru
zaqxswcdes.no-ip.biz
zarga.ddns.net
zarga1234.no-ip.biz
zargo77.no-ip.biz
zarilwabch.zapto.org
zaroiocego.ddns.net
zarrouki2015.ddns.net
zasaceley0006.hopto.org
zaza1234567899.ddns.net
zazagamer.no-ip.biz
zazs.codns.com
zcvtyug.linkpc.net
zeen-ahmed.no-ip.biz
zeko623.no-ip.biz
zelenui.gotdns.ch
zelgen89.ddns.com
zerhacked123.ddns.net
zetsubranco.duckdns.org
zhackedconnect.no-ip.biz
zhiyar98.no-ip.org
ziedsalama.no-ip.biz
zig115.ddns.net
zikass.no-ip.info
zines6o.myftp.biz
zizo.myftp.biz
zizou07biskra.no-ip.biz
zizouuz.no-ip.biz
zlatanchoko.ddns.net
zmz-zmz.no-ip.biz
zmz-zmz10.no-ip.biz
zokomek.no-ip.org
zola777.no-ip.biz
zombi16.ddns.net
zonemap123.no-ip.biz
zonemedhell.ddns.net
zouheirelkarous.ddns.net
zrxdctfgvbhnjkm.no-ip.org
zrzrzrqazr.ddns.net
zukoho3.no-ip.biz
zvezdahackerrssa.no-ip.biz
zxcxz.no-ip.biz
zydx.no-ip.biz
zzaaxx.no-ip.biz
zzaz10dz.no-ip.biz
zzdczzrdasxcd.no-ip.biz
zzeuss.ddns.net

# Reference: https://threatfox.abuse.ch/ioc/1178858/

147.185.221.16:5262

# Reference: https://www.virustotal.com/gui/file/a2a7df2819a5abdd7d805706afc93b2043087dd5b3d17a2ec94b3f12cd23622f/detection

46.246.6.7:2020

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-10-02)

147.185.221.16:47426
147.50.253.101:5633
18.192.31.165:11534
193.27.72.137:1177
3.124.142.205:11534
3.125.102.39:11534
3.125.209.94:11534
3.126.224.214:15371
46.246.82.16:2020

# Reference: https://www.virustotal.com/gui/file/d292286a614b1c35f42ea04335bab20018d7f5e67451fcf653facef327a8721a/detection

147.185.221.16:56307

# Reference: https://www.virustotal.com/gui/file/36e7a6354dd47aa8ebbf23bdb13b899b6f78dda18b96bfb50d3ffad2ce0fa097/detection

20.197.231.178:1018

# Reference: https://www.virustotal.com/gui/file/40f07bdfb74e61fe7d7973bcd4167ffefcff2f8ba2ed6f82e9fcb5a295aaf113/detection

18.158.58.205:11854
18.228.115.60:21422
18.229.146.63:21422
18.229.248.167:21422
3.67.112.102:11854
3.67.161.133:11854
54.94.248.37:21422

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-10-10)

18.158.249.75:18985
18.197.239.109:10922
3.125.102.39:18985
3.125.209.94:18985
3.125.223.134:18985
3.68.171.119:10922
3.69.115.178:10922
3.69.157.220:10922
52.28.247.255:10922

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-10-13)

18.158.249.75:19568
18.228.115.60:12976
3.124.142.205:19568
3.125.223.134:19568

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-10-19)

105.158.135.238:5552
141.255.156.27:9091
156.222.217.110:6070
172.188.56.113:7070
177.80.180.40:1338
18.158.249.75:15889
3.124.142.205:15889
3.125.102.39:15889
3.125.209.94:15889
3.125.223.134:15889
3.126.224.214:18145
3.127.181.115:10738
3.127.181.115:16354
3.67.112.102:10738
3.67.112.102:16354
3.67.62.142:10738
3.67.62.142:16354
3.68.56.232:18145
35.157.111.131:18145
49.12.227.77:5552

# Reference: https://www.virustotal.com/gui/file/e197a603535676ea16c0c345b3305cbc030d045ebb9112272fc3a00b3c58201c/detection

141.255.156.244:1177
00yoyo00.hopto.org

# Reference: https://www.virustotal.com/gui/file/3e99950e95dd134b51fb480278f6952e5e8422b1437b4aad2eb9dec9760b8b1a/detection

156.202.137.167:4430
luio.ddns.net

# Reference: https://www.virustotal.com/gui/file/01f21cdf6f6770587b3c06f4259710fca0ca082051744de7ca77079716328a5f/detection

24.82.79.122:1998
mrxud.ddns.net

# Reference: https://www.virustotal.com/gui/file/f539fca002eb72913cc795120269b11cba26dda79bb4f491053a4f142aee627f/detection

186.169.37.205:7705
newsr.duckdns.org
scitie.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-10-21)

141.255.156.162:1177
141.255.156.162:9091
156.199.93.46:5552
3.69.157.220:11498

# Reference: https://www.virustotal.com/gui/file/00246dd32e2fa0dceb50f609a895d49228475325113454f0626cb461e5109d65/detection

3.66.38.117:15984
3.69.115.178:15984
3.69.157.220:15984

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-10-24)

13.229.3.203:17138
156.207.236.180:5552
156.222.19.62:6070
18.136.148.247:17138
18.139.9.214:17138
18.141.129.246:17138
18.158.249.75:12449
18.158.249.75:14516
18.192.31.165:12449
3.124.142.205:12449
3.124.142.205:14516
3.125.102.39:12449
3.125.223.134:12449
41.44.79.212:5552

# Reference: https://www.virustotal.com/gui/file/096d974a744eff570c7e45a9da310768215f218295f18030de2a3459b55feb90/detection

179.13.0.48:8520
dominicananjv.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-10-27)

13.229.3.203:17648
147.185.221.17:3442
147.185.221.17:5631
147.50.253.211:1177
18.136.148.247:17648
18.139.9.214:17648
18.158.58.205:14817
18.192.31.165:16825
18.228.115.60:13490
18.229.146.63:13490
18.229.146.63:14192
18.229.248.167:13490
18.229.248.167:14192
18.231.93.153:13490
18.231.93.153:14192
181.217.95.27:1024
3.125.209.94:16825
3.126.224.214:19698
3.127.181.115:14817
3.64.4.198:14817
3.67.112.102:14817
3.67.161.133:14817
3.67.62.142:14817
3.68.56.232:19698
41.103.29.232:999
46.246.86.18:2815
52.220.121.212:17648
54.94.248.37:15928
91.109.188.2:5050

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-01)

18.156.13.209:13144
18.157.68.73:13144
18.197.239.5:13144
3.126.37.18:13144
3.127.138.57:13144
45.91.134.6:1177

# Reference: https://www.virustotal.com/gui/file/88e3771d0df5183c6e49438db031e378b1d85be315f6f477617a1ca698944ada/detection

18.228.115.60:11608
18.229.248.167:11608
18.231.93.153:11608
54.94.248.37:11608

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-02)

147.50.253.108:1177
156.196.88.201:5552
18.192.31.165:11337
18.192.31.165:19097
192.169.69.25:3399
3.124.142.205:11337
3.124.142.205:19097
3.125.102.39:11337
3.125.102.39:19097
3.125.209.94:11337
3.125.223.134:11337
41.97.223.104:5552

# Reference: https://app.validin.com/axon?find=141.255.150.87&type=ip4
# Reference: https://www.virustotal.com/gui/file/b60b3f6fd310060f1e9d61b5c43856907637dd33850ad32c4412dc0e34c81878/detection

141.255.145.31:51271
141.255.155.139:51270
winltf.linkpc.net
winltf2.linkpc.net
winltf.myq-see.com
winltf2.myq-see.com

# Reference: https://www.virustotal.com/gui/file/251c466c455bf348c0f1ff56bab3ed48f4bc5b3a2f79c26c36ac38d14a0a94ea/detection

novahak.myddns.me

# Reference: https://www.virustotal.com/gui/file/681b202b0ff599a6750772bebdb3ddeefd1c1bad6c8bad450fbc624cf83ab332/detection

141.255.152.245:5553
141.255.157.242:5553
testando001.hopto.org

# Reference: https://app.validin.com/axon?find=141.255.150.88&type=ip

ajeer-company.ddns.net

# Reference: https://www.virustotal.com/gui/file/0b4d08f340fcbc4710e41890b501c5a05b7dcf931d96abcd419338060118607b/detection
# Reference: https://www.virustotal.com/gui/file/8fdfefacaad38424767e500a8bce44487486856c7f7b3619b944825f2b72bd22/detection
# Reference: https://www.virustotal.com/gui/file/c1358cb2b16798ddc2fa9f21919b61b7961425e788c617fa8aca43231fa524f6/detection

105.157.73.194:1177
156.203.4.79:1177
jackfake984.ddns.net

# Reference: https://www.virustotal.com/gui/file/fa197ff519acb37743a4d9cf05f472cbe6b785aff35c05dbe8e066253c21e004/detection
# Reference: https://www.virustotal.com/gui/file/b0e743bcc7fcc82d0ec9ee6c6a73175954b43269abe936ec36b95fc4c3c67a3b/detection
# Reference: https://www.virustotal.com/gui/file/9f579e4d32ad512842db7395383fcc75dd650986bbcb0f35f0ecb38689684b15/detection
# Reference: https://www.virustotal.com/gui/file/0e965a7b41c51e5a9505042e4bfd1cf7550262bca7b0647c661cc71e3c5e5e9c/detection

141.255.147.12:1177
141.255.150.87:1177
crossfirez8games.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ae5a0bad7bfff1cff44ed88dab1b8039719da37fdbe140a9d3daa571c88336ad/detection

141.255.144.80:1166
darian12.duckdns.org

# Reference: https://www.virustotal.com/gui/file/26d97aff6b4b32dc7f4354ba68af5e9504f79425044c8d96f5958c4ddef66924/detection

85.242.178.237:1177
85.242.178.237:8080
nikaosilva.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1f83528f0b99023838bd223ff8cc393651e3984a576b3d091b0afe3a1a90d07c/detection

141.255.150.113:1177
trojanha.duckdns.org

# Reference: https://app.validin.com/axon?find=141.255.150.91&type=ip4

ubuntudz.ddns.net

# Reference: https://app.validin.com/axon?find=141.255.150.90/31&type=ip4

androidplus.hopto.org
grandizer.zapto.org

# Reference: https://www.virustotal.com/gui/file/fca8d84369d0830327d3161d59faff31896dcb1b2c2642ba15536d1bb8e6d941/detection

141.255.151.45:5555
testandoo.hopto.org

# Reference: https://www.virustotal.com/gui/file/99273154c07a76b475ef1cfa816f021631baafdd93f3290971313b8484198028/detection

141.255.145.59:1170
141.255.146.130:1170
141.255.156.90:1170
141.255.158.190:1170
midou.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0f44e1d2c45279e238751ee65863325a6ca9fc386026b7b917e5eb6bc5b97882/detection

141.255.144.57:1177
multiproo157.ddns.net

# Reference: https://www.virustotal.com/gui/file/00eef07074196a85f08760b9b6ba100b0beccffc0a6c91ee4f8fba75c687e398/detection

141.255.144.53:1962
141.255.145.48:1962
179.233.95.207:1962
46.82.174.69:1962
93.46.8.90:1962
luminx.ddns.net

# Reference: https://www.virustotal.com/gui/file/19b8a55e1f4c9bce058e64fb99ed210c698a57eb5a233aafd48b28d47e8645aa/detection

141.255.150.56:3000
coroteblue.duckdns.org

# Reference: https://www.virustotal.com/gui/file/57a189ba690288c62af67df27716bfbaf7db72a16faef3e3def0293e9b843913/detection

141.255.145.130:1177
sniper7x1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1b862be2be938fe44cad466567a95faf2c135eb9f9ddb6d6e9953df85924897d/detection

141.255.150.171:6522
crackpc424.ddns.net

# Reference: https://www.virustotal.com/gui/file/feedfc4147c797bb7797175318df95bfac9f3119aeff66d3371e471d34968cf4/detection
# Reference: https://www.virustotal.com/gui/file/eb97cf7c957c2a591ce1a39891d5b38c8af5a2650544939d36752492be2dd7df/detection
# Reference: https://www.virustotal.com/gui/file/e9e978aa327f10f9c230a485f8f2b8bfc0fd10e89347279dfec380bb8f9f6bc5/detection

141.255.144.142:10072
141.255.147.82:20082
141.255.153.91:10072
141.255.156.101:10072
sinister.ddns.net

# Reference: https://app.validin.com/axon?find=141.255.150.80/29&type=ip4

mada-pay.ddns.net
wildcard.ddns.net

# Reference: https://www.virustotal.com/gui/file/7781475091b72584fe85eac51f02f515951fd4997612265918d52adde38bd648/detection

141.255.153.43:1177
trojandamzr.duckdns.org

# Reference: https://www.virustotal.com/gui/file/cdbcec5d97060f50aa00feffa7e1acc1075891863fb4229e855e8727238039e3/detection
# Reference: https://www.virustotal.com/gui/file/62d5fd8369f045fe8cf7c768d2644f72fd6e28db4cac6cb4862b634eb15db7d6/detection
# Reference: https://www.virustotal.com/gui/file/454944034334717b16ed63ec45c388ec095b44f88886c5d827afb734b533770f/detection
# Reference: https://www.virustotal.com/gui/file/33864c91656d86a40cbe0cf4604b4ad88ea31f111814d8ad77ab09cce00da99b/detection

141.255.147.31:1443
141.255.157.23:1443
141.255.157.23:45033
141.255.157.23:7500
194.113.198.97:1443
orsystem.duckdns.org

# Reference: https://www.virustotal.com/gui/file/05960c00ed8469f4a163f8474e35c61a8dc38221cdaea4b80a82fa173262a5ec/detection

138.255.218.64:1179
141.255.151.98:1179

# Reference: https://www.virustotal.com/gui/file/a832679f18c9528e56cc021a48e32e46af62a8dd2892526e2e05661073e044f1/detection

186.235.230.14:1177
mariovieira.zapto.org

# Reference: https://www.virustotal.com/gui/file/5ae7e2e7b2d6f2d7c4b36eb19b710eab5a7b971d63591723a277ef0d3d80accb/detection
# Reference: https://www.virustotal.com/gui/file/c099fb175379b9ac57892017ceafe46b45175c60820f45dad3e3f4790c280526/detection
# Reference: https://www.virustotal.com/gui/file/e416efbf96a9be97d2f76babbee63c8506899257ebb098782816636cc1ab3c31/detection
# Reference: https://www.virustotal.com/gui/file/ef4bdb2c3fddde3f6642e5fbea3a58f00cda7430e6d44c24eff1b88116c9436e/detection

193.180.164.241:1177
badhack.ddns.net

# Reference: https://www.virustotal.com/gui/file/08b02009789050541c794a1662f63483e7d1c2f936a8c3f539836407ac1fa87b/detection

ali12.duckdns.org

# Reference: https://www.virustotal.com/gui/file/2189090911592feb48b108b69bff076bcd729063b23530a1613e122410809e65/detection

212.60.74.50:9412
ratking.ddns.net

# Reference: https://www.virustotal.com/gui/file/0023dd4c2eb6ff3e13f253b96c224d3e355196266d5d094221a77d3c51dc3687/detection

131.196.217.70:1177
otariodokrl157.duckdns.org

# Reference: https://www.virustotal.com/gui/file/33b253169924318cd68156e2e7370853197445e9faa5ec85dfd920e4b3a6dc5c/detection

anonimo8512.duckdns.org

# Reference: https://www.virustotal.com/gui/file/acf53f6112392e3909e05b3cfeae0973df3a8c1cf20d2e91950991938d49351f/detection

141.255.157.48:4646
cloudhostservice.ddns.net

# Reference: https://www.virustotal.com/gui/file/7ea69c35bb86f02eb58a7625f5a0f042733aacc7d9fc62e15985f89902474356/detection

103.14.128.134:1177
nkhacker21.ddns.net

# Reference: https://www.virustotal.com/gui/domain/cmd.ddns.net/relations

cmd.ddns.net

# Reference: https://www.virustotal.com/gui/file/00bc9cf7efeddd2c4415510db2ed0150a3aace2d4ebfe163c59c237695e7305f/detection

158.247.7.199:1177
irossihacker.no-ip.me

# Reference: https://www.virustotal.com/gui/file/08021e64fbb08b82dc9744b91c4060c1f1c3128056b8ebd3427d8210804ec142/detection

hades1234.no-ip.org

# Reference: https://www.virustotal.com/gui/file/0afd67ec9758f321b7928b142273b48235df0ffae77a0bed7d437ac747238ce7/detection

a-gwas-01.dyndns.org
a-gwas-01.slyip.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-06)

141.11.232.26:1177
147.50.253.15:1177

# Reference: https://www.virustotal.com/gui/file/f983ddd5a79817b432ae02033a7a814bbb42890db414a957073c8b98beb0801a/detection

178.45.184.249:1337
hostynjrat222.hopto.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.158.187/relations

01online.hopto.org
teba1.myvnc.com

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-07)

147.185.221.17:11278
18.197.239.109:14456
3.124.67.191:13427
3.124.67.191:15752
3.126.224.214:15752
3.67.15.169:13427
3.69.115.178:14456
3.69.157.220:14456
35.157.111.131:13427
41.104.212.15:1177
52.28.247.255:14456

# Reference: https://www.virustotal.com/gui/ip-address/192.169.69.25/relations
# Reference: https://www.virustotal.com/gui/file/c72932545d0c1aa61a9702360b7d66ab379f55f736d7e958daa384a1b48c7d24/detection

cr4cker6.duckdns.org
nana7.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ccb9d5410fb7de08be8d0961d3569db58d7746c0d8461f2928046f4c56be76e0/detection

192.169.69.25:8109
socketw2.duckdns.org

# Reference: https://www.virustotal.com/gui/file/430389a9a7ca76a8f83ce20cf8fcbef317ef0a7f9b9f47830aae2ae42e328f19/detection

config1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/2d75a3358b66db6109a8b22b1af5c4b4239f1872270a464da0b88c00dcdf2cfe/detection

six7uk.duckdns.org

# Reference: https://twitter.com/fr0s7_/status/1722937477441175701
# Reference: https://www.virustotal.com/gui/file/0e57700740fd2c57b7d7b2393cb10fceaffdbe3b8305181a29befe665054a856/detection
# Reference: https://www.virustotal.com/gui/file/a0451d0dcefc78cbd024a08d586078f2aa66f9ff8cb75aa9d46cc26a4c93abab/detection
# Reference: https://www.virustotal.com/gui/file/f1cabf40754437cd92f0c671b2a62c019f2f3e6279fbcf00eee60f9722561747/detection
# Reference: https://www.virustotal.com/gui/file/4ec76c6c6b2b93873c53cbf094d1b4ad911e9615947039d8735e3e72e9b34ca2/detection
# Reference: https://www.virustotal.com/gui/file/4f019ff00800875a621b3b3c95b563c3e3f797ff5e3ba89145995220ba5677d3/detection
# Reference: https://www.virustotal.com/gui/file/4ec76c6c6b2b93873c53cbf094d1b4ad911e9615947039d8735e3e72e9b34ca2/detection
# Reference: https://www.virustotal.com/gui/file/33c27b38e6bef1ad7d892a7a82a13123723324aaed6caa483bb6409aa793072e/detection

172.111.139.159:1199
172.111.139.37:1188
206.123.132.39:1177
206.123.132.78:1177
5.75.156.19:1177
5.75.156.19:1188
javawz.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-10)

109.248.144.235:1997
13.229.3.203:17689
147.50.252.143:117
147.50.253.84:1177
18.139.9.214:17689
18.141.129.246:17689
18.158.58.205:12153
18.198.77.177:15960
3.121.139.82:15960
3.124.67.191:11170
3.125.188.168:11170
3.127.181.115:12153
3.127.253.86:11793
3.127.59.75:11793
3.127.59.75:15960
3.129.187.220:19367
3.131.147.49:19321
3.133.207.110:19321
3.133.207.110:19367
3.136.65.236:19321
3.138.180.119:19367
3.22.15.135:19367
3.64.4.198:12153
3.67.112.102:12153
3.67.161.133:19360
35.157.111.131:11170
35.158.159.254:11793
35.158.159.254:15960
41.97.121.174:1177
46.246.80.6:1111
52.28.112.211:15960
77.91.151.189:1177

# Reference: https://app.validin.com/axon?find=78.159.143.172&type=ip

cowboy1983.no-ip.biz
domreg.no-ip.org
eternal.no-ip.org
football12.no-ip.info
gaza.no-ip.org
goggs2009.no-ip.biz
gtasamyth.no-ip.biz
hatamleh.no-ip.biz
hector.no-ip.org
hippo.no-ip.org
hybris.no-ip.org
ik7.no-ip.biz
immigration.no-ip.org
installone.no-ip.biz
iyftech.zapto.org
javascript.no-ip.org
johanna.no-ip.org
josephcorvetti.no-ip.biz
julius95.zapto.org
lordspartner.no-ip.info
m-ohamed.no-ip.biz
marwan1990.no-ip.biz
masaki.no-ip.org
rschider.zapto.org
teck-style.no-ip.info
terrores.zapto.org
trudio.zapto.org
ulkekeremrat.zapto.org
wallpaper.no-ip.org

# Reference: https://www.virustotal.com/gui/file/8aa4adb3f5037e9f27772613406deecbd759e49b96df3e10b009a00a647ad6ad/detection

sasa.no-ip.info

# Reference: https://www.virustotal.com/gui/file/c74511b0c2cc2aad7f83065cd4e41d7a2be7057635aa13e123ca6b7a7c74b766/detection

95.218.222.8:5552
zffffz.ddns.net

# Reference: https://www.virustotal.com/gui/file/8e66e79d98652c6265e2d992101fee31879383398888ae24bb711c62ff773e8d/detection

45.150.67.164:4545
weex1337.ddns.net

# Reference: https://www.virustotal.com/gui/file/5d8e858f41067e80539c38d7f7a5251cfce9d88a4f6b297b39386d55cce94148/detection
# Reference: https://www.virustotal.com/gui/file/d52181d97aac6ff8636f1c5fc69ed3b69eb3833be6f861323f6310c466b524a5/detection

reedisemconexao1.ddns.net

# Reference: https://www.virustotal.com/gui/file/f5a7c59d88453e60ccd44f77a11f60f91697f687be9761e22a09c8988c210996/detection

kaka.zapto.org

# Reference: https://www.virustotal.com/gui/file/18fce43d126370aaa0437c0a0c8d50945d5b07937c931da3b1a773fb6e53d932/detection

160.179.90.22:1177
216.146.39.125:1177
hecfmeknes0514.game-server.cc

# Reference: https://www.virustotal.com/gui/file/31851e98fc8e7d5997a58fc23938d065182768707b936b4793035bcfb5c1c526/detection

160.179.90.22:1158
213.6.25.62:1158
216.146.39.125:1158

# Reference: https://www.virustotal.com/gui/file/96f2897d683457fdd701914e04755c27865692e1a9dac8c11eb9e080576b3370/detection

160.177.78.10:5000
160.179.90.22:5000
216.146.39.125:5000

# Reference: https://www.virustotal.com/gui/file/ace8d71221471d61bd4cbd4a83b70651c1e8fb7c206329a34cab8f8582e5cd2b/detection

160.179.90.22:1159
213.6.229.158:1159
216.146.39.125:1159
41.248.114.232:1159

# Reference: https://www.virustotal.com/gui/file/bcfccbdc8fc59ec000c567c4280029b057e664e8a949d4561a1ba3c19783c85f/detection

160.179.90.22:1199
216.146.39.125:1199
41.142.19.112:1199

# Reference: https://www.virustotal.com/gui/file/fbacc38a27bb070eb6e13a403d27817a236c5c7a8e03b9edf628e0e4e24cf53a/detection

160.179.90.22:1157
213.6.229.158:1157
216.146.39.125:1157
41.248.114.232:1157

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-18)

18.229.248.167:12232
3.124.67.191:17339
3.125.188.168:17339
3.126.224.214:17339
3.68.56.232:17339
35.157.111.131:17339
46.246.12.3:2054

# Reference: https://www.virustotal.com/gui/file/e0f2f297d71e73ee0edb86d085e8d380fd3208a6cabf0b80ef8082e51a96d0c0/detection

105.110.76.190:9801
itsbobocom.ddns.net

# Reference: https://www.virustotal.com/gui/file/0f8e778e39f1081958559e6acc11cc01051481d2fcb6920419b651ae8cad77dd/detection

185.246.116.195:5553
integration.nerdpol.ovh

# Reference: https://www.virustotal.com/gui/file/024d4cc08b1badd5d5c72d09eb638fec489fec3953a14fd1a9208e11f88f85ac/detection

216.108.228.131:8080
binanweb.ath.cx
javaupdate1.publicvm.com
webservicepag.webhop.net

# Reference: https://www.virustotal.com/gui/ip-address/200.83.148.79/relations

aa.servecounterstrike.com
acawiicaax1341.publicvm.com
allswork.servebbs.com
allswork2.servebbs.com
asdfghj123.ddns.net
azu.ddns.net
bajofondoagujereador.publicvm.com
camservice.publicvm.com
charlesransom.ddns.net
contentpack.linkpc.net
elaspany.ddns.net
googelcom.ddns.net
google-plus.redirectme.net
gulop.hopto.org
iplocation.linkpc.net
iranwork.ddns.net
justrigvps.blogdns.com
mi0.bounceme.net
onlinegame.servecounterstrike.com
premiumwindows.linkpc.net
recupwor.blogdns.com
solocmywnoip.is-a-blogger.com
solonuevowor.dyndns-blog.com
updatebss.linkpc.net
updlate.serveminecraft.net
vipvip2.dyndns.org
vipvip3.dyndns.org
web1705.ath.cx
wigetup1.publicvm.com
wigetup2.publicvm.com

# Reference: https://www.virustotal.com/gui/ip-address/200.104.143.222/relations

1giv.mooo.com
delet.ddns.net
paranj.ignorelist.com
updatebs.ignorelist.com
webhotead.blogsite.org

# Reference: https://www.virustotal.com/gui/file/003f0865080db2dccc99fea09b1edc5fe5af62227bfe6611a0bf465b3dcab73b/detection

200.83.148.79:1177
022121563.ddns.net

# Reference: https://www.virustotal.com/gui/file/122230ccc4f63f588cfcbc8dc42a6efd1719eb187d0b8b444b0b273828a5a017/detection
# Reference: https://www.virustotal.com/gui/file/a01f7f6cc0fb747a193928accfa6e582b3581e9036a2f8154b49359df264c185/detection

code205.ddns.net

# Reference: https://www.virustotal.com/gui/file/71aadfc659eab1cead2a4fa747d9cc3049e1aa89050a4dffe8b6cc1a513d1c2f/detection

cj299.ddns.net

# Reference: https://app.validin.com/axon?find=200.83.148.79&type=ip

09300778421996.linkpc.net
1millionboy.duckdns.org
abbeycafe.duckdns.org
aihjzonkh.servecounterstrike.com
applelovers-international.duckdns.org
crs.servecounterstrike.com
ctwonx221.ddns.net
ebad.servecounterstrike.com
gtr2.ddnsking.com
swiss-y.servecounterstrike.com
tanlinmonder.servecounterstrike.com

# Reference: https://www.virustotal.com/gui/file/6b73bcb307c8cf30f3afad35dec9fcb5f1b427bca6050082bb9ce40286a01053/detection

37.0.14.199:45981

# Reference: https://www.virustotal.com/gui/file/212d7c3ed4dca43a505a557c669f9c5f5cfcdde8a1abd692dd23dfd6f755a23e/detection

197.210.54.200:6536
futurist40.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-21)

103.97.209.13:1313
18.189.106.45:13615
3.132.159.158:13615
3.140.223.7:13615
3.141.142.211:13615
3.141.177.1:13615
3.141.210.37:13615
18.157.68.73:15203
18.197.239.5:15203
3.127.138.57:15203

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-25)

18.156.13.209:10759
18.157.68.73:10759
3.127.138.57:10759
3.67.62.142:14794
34.77.105.34:6152
46.246.80.7:2054
89.213.176.120:1177

# Reference: https://www.virustotal.com/gui/file/aef64a36d0fc84553eb2e08eccc8587fe20ce92720d22046ab31f28f5f213ff7/detection

zaita.ddns.net

# Reference: https://www.virustotal.com/gui/file/e932461f3ae3c174b7ef81fa29e99cd37d8976bed3f532e97cb983f84250369b/detection

78.101.175.204:1177
sbsss.ddns.net

# Reference: https://www.virustotal.com/gui/file/0001abab4d135827993310bca56b644c74375c4bf090625ab4fd70ac018f5eaa/detection

187.107.247.10:1177

# Reference: https://www.virustotal.com/gui/file/8bd1bf47555653e2b9a0270f38567f6ea162124db7208ac67e9984dae3ab40dd/detection

197.35.162.229:5555

# Reference: https://www.virustotal.com/gui/file/a40f89342781c10820481afe392675e03dfc0681f65b9ffde8e4bf0d6eed6d25/detection

156.217.44.159:2001
007788.ddns.net

# Reference: https://www.virustotal.com/gui/file/a2ce3cf299ee1ea56c1849ffc482f132dcb825d17c0733036ef2a2a34a5da6b7/detection

0077.ddns.net

# Reference: https://www.virustotal.com/gui/file/c89a53198a19a58e347917919db74f3e5f8689c957cc52c219bad92ed6326929/detection

008fdd88.ddns.net

# Reference: https://www.virustotal.com/gui/file/a3bea755126135fd982ad16d6ab0ed5f58a9589d31b18b1f8fe5628cba26d80b/detection

00smart00.ddns.net

# Reference: https://www.virustotal.com/gui/file/db6bd1119f1653b252ac53f11d964890166f183a4d783e711d8414c2d77c89e1/detection

00sorrynoname63.ddns.net

# Reference: https://www.virustotal.com/gui/file/2a9cecd7ed5e6b2112780899917f4ad6dc6dcfe573bab142211eedcb774f5df9/detection

010203.ddns.net

# Reference: https://threatfox.abuse.ch/ioc/1206460/

41.108.217.244:1177

# Reference: https://www.virustotal.com/gui/file/f346358c5a150a5f858683adc6fa1c43d279be6983a26cd6c8495784e1443688/detection

46.53.24.168:1177
theghost1995.zapto.org

# Reference: https://www.virustotal.com/gui/file/8b991ee6b3393d0297c29a7821ec51037e7768dae665a85a0592a4194952aa60/detection

mai123.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/1e2f2324649f788ea176992fdcc8a8681a3845c7e4644060ff82eaae23acc378/detection

googlle.myvnc.com

# Reference: https://www.virustotal.com/gui/file/133eaa0f0f6170f74958c5eb48e6b69422e345f2a50a1d17787384a466c89b44/detection

91.235.168.163:1177
sakooo3.no-ip.biz

# Reference: https://www.virustotal.com/gui/ip-address/204.95.99.26/relations
# Reference: https://app.validin.com/axon?find=204.95.99.26&type=ip

3aaaa.no-ip.biz
9br.no-ip.biz
9br.no-ip.org
aaccf16.no-ip.org
abdelhack.zapto.org
abdo7070.zapto.org
abdouannabi.no-ip.org
adeka15.no-ip.org
adem-team.zapto.org
ademnounou.myftp.org
ahmadov.no-ip.info
ahmedalasady631.no-ip.biz
akonpop200.no-ip.biz
al-zubaidy.no-ip.biz
alaamessi.no-ip.biz
alfhaddd-hakr.myftp.biz
alfhadddd.bounceme.net
alfhadddd.myftp.biz
alhassan26.no-ip.biz
alhassan266.no-ip.biz
ali612.no-ip.biz
aliali2013.no-ip.org
alialsraf22.no-ip.biz
alihalall.no-ip.biz
amineadam.no-ip.org
aminearo.no-ip.info
aminexhack.zapto.org
amis.servegame.com
anamimo1.no-ip.biz
anananana.no-ip.org
anonymous18.no-ip.org
apatedns.no-ip.org
aqeel1993.no-ip.org
asaadqwe.no-ip.org
asra.no-ip.org
ay23raj.no-ip.org
aymen42.no-ip.biz
basball2532.no-ip.biz
bbbb4.myftp.biz
blac-hack.no-ip.info
black12z.no-ip.biz
blackbeards.no-ip.org
bosh12345.no-ip.org
capoo76.no-ip.biz
chuva009.no-ip.org
configure-java.myvnc.com
cyberhacker.no-ip.org
daar114.servepics.com
dali1120.myftp.biz
danielovic.hopto.org
did-poison.no-ip.org
dns-service.no-ip.biz
doida.no-ip.org
doolaa.no-ip.org
doublette.zapto.org
doudousalmi2012.no-ip.biz
downloadfree.servecounterstrike.com
dsjokar.no-ip.org
dzzawba3a.zapto.org
egyway.no-ip.org
emjidaa.no-ip.org
enternet.myftp.biz
evilbaghdad.no-ip.biz
explorer-internet.myvnc.com
fainkedbr0.zapto.org
fatouma.no-ip.org
fckyou.no-ip.org
fouadelyaouti7.no-ip.org
foustaz2.no-ip.biz
fuckyoubydz.no-ip.biz
futfutfut.no-ip.org
gamingmylife.no-ip.org
gatous.no-ip.org
genocidist.no-ip.org
genoo.no-ip.org
ghazibsd.no-ip.org
h1h1h12.no-ip.biz
hack11.serveftp.com
hackedfack-you.no-ip.org
hackerabdulla.no-ip.biz
hackers1000.no-ip.biz
hackerz006.no-ip.org
haider4321.no-ip.biz
hakeralwaset.no-ip.org
hakkkk1888.no-ip.biz
hamdi1234.no-ip.biz
hasone.no-ip.org
hatemxrb.no-ip.biz
hatm.no-ip.org
hect.no-ip.biz
help.serveftp.com
hemnhhit.no-ip.biz
hexo7777.no-ip.org
homam1111111111.no-ip.biz
hoseen111.no-ip.org
host-l6w.no-ip.biz
hostag.no-ip.biz
hussien98.no-ip.biz
iamlegend0.no-ip.biz
ibrahim12320.no-ip.biz
iraqi2004.no-ip.biz
irirme.no-ip.biz
kaka100.no-ip.biz
kararsamer123.myftp.biz
karomhamad.zapto.org
kaspersex.no-ip.org
khaledtuedu.serveblog.net
khalidayman.no-ip.org
khames.no-ip.org
kirasahli.no-ip.org
korabica.zapto.org
kzk.no-ip.org
laravirus.zapto.org
loored23.no-ip.org
luffy007.no-ip.biz
m1999a1999-sy.zapto.org
majadd46.no-ip.biz
mamimami.zapto.org
man200.no-ip.org
mbc2.no-ip.biz
mca1.no-ip.org
mergle.no-ip.biz
mero12.no-ip.org
mezo.zapto.org
mezoalkber.no-ip.biz
mgrm707.no-ip.org
michlan255.servemp3.com
microsoft-dns.no-ip.org
microsoftoffice.myvnc.com
mjmj.no-ip.org
mohamd1979.no-ip.org
mohamed4ch.no-ip.org
monsifmonsifmonsif.no-ip.info
morahacker.no-ip.org
mostalirapraghkkgl.no-ip.org
mostaliraprapali.no-ip.org
mozzila.servehttp.com
mr-xj.zapto.org
muamal2010.no-ip.biz
mus11mus.no-ip.org
mustapha2223.no-ip.biz
muzic-mania11.no-ip.biz
myseko.servegame.com
n23k56.3utilities.com
naroto115.no-ip.org
nasir82.no-ip.biz
nasira.zapto.org
naskola.no-ip.biz
nawaf4hack.no-ip.biz
newhacker21.zapto.org
nicokiller.no-ip.org
nicola-555.no-ip.biz
nj5hack.no-ip.org
njdzhack.no-ip.org
njrat7d.zapto.org
njratfahd.no-ip.org
nnnbt5543.servepics.com
no12no1.no-ip.biz
noorsen.servebeer.com
nouri0724.no-ip.org
oussamartx.no-ip.biz
outip.no-ip.biz
paul404.no-ip.info
pexell.zapto.org
pizap.no-ip.biz
pootchix.no-ip.org
pr0hack.no-ip.info
prouta-prouta.no-ip.biz
qpalzmvfr.servecounterstrike.com
qwertyqwertyu.no-ip.org
raad88.zapto.org
ranihkamtak.no-ip.info
raouf.no-ip.org
rastaking.no-ip.org
razan12.no-ip.org
rbg1.no-ip.biz
red123123.no-ip.org
reeveenge.no-ip.org
regedit.no-ip.org
rmpxa.zapto.org
rooom.zapto.org
sad77.no-ip.biz
safanaali.no-ip.biz
safi737000.no-ip.biz
sajad999.no-ip.biz
samicanardo.no-ip.biz
sandy12.hopto.org
saras.zapto.org
saw56.no-ip.org
scream9993.no-ip.org
securtbaldeat.no-ip.biz
semmi.no-ip.org
servicetools.redirectme.net
sexyrr.no-ip.biz
shadowk7.no-ip.biz
shivahacker111.no-ip.org
silentmemo9.no-ip.biz
skyper.zapto.org
skypeskypeskype.no-ip.info
smart555.no-ip.org
snoker.no-ip.org
software-group1.sytes.net
soljaboy.no-ip.biz
spawn1992.no-ip.org
sqll.redirectme.net
ss69ss.no-ip.org
ss77ss7.no-ip.biz
sssxxxsss.no-ip.org
strangeintherain.no-ip.biz
sumere444.no-ip.biz
suuport.redirectme.net
svhost.zapto.org
swat.no-ip.biz
system16.no-ip.org
system23.redirectme.net
syteam23.no-ip.org
taghit05.zapto.org
tariqalr.no-ip.org
totahiphop.zapto.org
trwi8.no-ip.org
updatee.myvnc.com
userwalid.no-ip.org
vatou.no-ip.org
waelalasadi.no-ip.biz
waleed50274.zapto.org
whitehacker3.no-ip.biz
windonwsupdate.3utilities.com
windows111.no-ip.biz
windowsmicrosoft.zapto.org
xvirus007.no-ip.biz
yahho.no-ip.org
zaki2013.zapto.org
zifou.servegame.com
zlatan.zapto.org

# Reference: https://www.virustotal.com/gui/file/5f441fd147b6c5cf068becd19d4d7d8e919c369b5fb670fb2acc40021bbf4974/detection

1.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/37c157eb083f87ad1a0953cf4e24568457f42181c19cf332eb5a212e14e98acc/detection

37.237.62.166:19966
k77.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/1a1a498e4a92832f808c1cd15c7e36b35780590b02484e01985507c3d109d2df/detection
# Reference: https://www.virustotal.com/gui/file/1bd2f5520640155cf16f574568dc5330f4fc4620226d21dca747526d58b168e9/detection

204.95.99.26:1175
usf.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/89c041778157067876bdb0b7ee00c360d31b678d0cea69964cab5761a065a55f/detection

leash.no-ip.org

# Reference: https://www.virustotal.com/gui/file/398346c0d822a4b808abb47441141e983ba50894157c82b96607e8b154a6a9d6/detection

alhacker.zapto.org

# Reference: https://www.virustotal.com/gui/file/e5e67913740354ce9c103f63324cd350652550beec4be92c6ab13aec54a51661/detection

q123.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/0565840d3915d3d13c6aa42b582db0450c3982f36b5d754d3a3fec4825ace9bf/detection

141.255.151.134:4050
sara.no-ip.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-11-26)

18.157.68.73:11531
18.192.93.86:11531
3.127.138.57:11531
45.137.69.211:5552

# Reference: https://www.virustotal.com/gui/file/4f6bbf75d79d723053b483ff58cc230716d1e0d2fb49da91cebc628dcd5b8b18/detection
# Reference: https://www.virustotal.com/gui/file/359269d481155600680a11aac86255ccc972c78d970ec4b2c11c98c2251a636b/detection
# Reference: https://www.virustotal.com/gui/file/2a4ff69533c94dab7b5626dc9580b6fa2a8bc3fce25733ab2b022dc1a7a4e5ab/detection

mocxom.no-ip.org

# Reference: https://www.virustotal.com/gui/file/defec415793e9bcf719f0858df5b8415a8919bf4c10d67deef03776e089bda20/detection

3.128.107.74:12740
3.131.207.170:12740
3.138.45.170:12740
52.14.18.129:12740
dtoxlab.link
hotlink.dtoxlab.link

# Reference: https://www.virustotal.com/gui/ip-address/46.246.12.11/relations

tek0c0p0.david3421.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f4dbc72bf46d7aeabca2f69a3bf89a37a6d941a78c55e55cac65351995385eb4/detection
# Reference: https://www.virustotal.com/gui/file/e48572a8ee5dc204ce36427ba1b40b9012e289c98e32d85d26df88ed748649bd/detection

facebookcoc.sytes.net

# Reference: https://www.virustotal.com/gui/file/5bdbe82e1b712409bd7303c47f62d65643c822903d5914abb41610c9f10bd345/detection
# Reference: https://www.virustotal.com/gui/file/3f866c3b385f4fcc2f414f0dec4c725636a5d2d3b89e86daf99694697ec7d232/detection

46.246.12.6:4477
46.246.84.3:4477
nj4477.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e1b915a78f533695e7691e021aaabb8dcb347c53df162709f6e78c5b4659010e/detection
# Reference: https://www.virustotal.com/gui/file/9054978151327e58994992a16dfb8c1677bd5be822294ce2c4482c857ab2d014/detection
# Reference: https://www.virustotal.com/gui/file/63981af0d0c7ba18980b84329a7cbaf8f8230d7546d2e38f05824e3c3957b4d3/detection

194.5.98.207:2054
46.246.26.22:2054
46.246.6.10:2054
colpaswer.coolpage.biz
surtidora2022.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a450269de73c1c088a261accd0b9f39324d53865e89850d1e5a44b2a20609242/detection

190.28.246.177:6666
morrocoy.duckdns.org

# Reference: https://www.virustotal.com/gui/file/58a6a223e09ffbb4d6be6cbb6db4e6802fb1be39887b00eadf8e2192413670c7/detection

46.246.84.4:2012
italiaroma.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.153.2/relations

amibas8700.ddns.net
antetokumpo.ddns.net
blacknight93.ddns.net
clawvp.myddns.me
kada20.ddns.net
unknownservice.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.153.3/relations

mjeed12.ddns.net
nswag.hopto.org
rat4242.ddns.net
rumpels.ddns.net
slvr.ddns.net
sysbreaker.duckdns.org
wadoud.hopto.org
whyareyougay.ddns.net

# Reference: https://www.virustotal.com/gui/file/d7c69378049930a47e733566d2d6bc2d927d7cc6a96f849782e29814399eaa2e/detection

muriloteste.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8d8c07bc43943d05913c7e4057f8c668e6139afbf42f1c7c0499ae775118c4df/detection

178.18.206.151:7781
1877.ddns.net

# Reference: https://www.virustotal.com/gui/file/90714cfef1f81e1b363e61fdb2d5feaadce3da2525119a924671e19e34c8333e/detection

178.73.192.4:1981
njrbd.duckdns.org

# Reference: https://app.validin.com/axon?find=141.255.152.0/23&type=ip4
# Reference: https://www.virustotal.com/gui/file/3cdd552a4c4b0daf1443ae768594ede9e1b03809a798d8b4a44628908152d9bd/detection

141.255.156.113:1177
201.46.20.144:1177
171py.duckdns.org
ssaa.ddns.net
windowswebhost.ddns.net

# Reference: https://www.virustotal.com/gui/file/01d3a8519dcc09bb44f7309904fcb8863802c54c1227a8ccaf32276535e251d1/detection

fami07.ddns.net
houba07.linkpc.net

# Reference: https://www.virustotal.com/gui/file/5db7deae62fda7da0043ef235ca028906d36c153b67e26d8afa40d5a9d68ca91/detection

software-extra.linkpc.net

# Reference: https://www.virustotal.com/gui/file/0d7013b0a9f8af1586510190b83712f738046472b2a734ef797e28ec79075908/detection

177.27.208.133:9091
xx1xx2.ddns.net

# Reference: https://www.virustotal.com/gui/file/83f4be3d6bc80f5b230b341ba657f9e0d07d162a9d4c0049de98cf0ef89711c4/detection

mustafamahdy31.noip.me

# Reference: https://www.virustotal.com/gui/ip-address/141.255.156.180/relations

12ddhpw.hopto.org
ameer22.ddns.net
cyber12.ddns.net
fsociety255ir.ddns.net
mohamoha123.ddns.net
theghostking.ddns.net
ts55.linkpc.net
viola.hopto.org
waitdulu.ddns.net

# Reference: https://www.virustotal.com/gui/file/5820ad97015d140e5cbc6a8c285db5814d27b384a7ac401647511131ded8fd8e/detection

ichapeleiro.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d4aa086775e60374f2d8504bac970caf3018148e2f5bad0a9b0df5e8feb27f12/detection

141.255.156.180:1177
mub3s.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.156.181/relations
# Reference: https://www.virustotal.com/gui/file/039f909b892a9264acb586dfd9a2ce2dd32ae32aba06565576e3c56caeade557/detection

141.255.144.77:1177
141.255.156.181:1177
aabass42560.ddns.net
ahmadhac.ddns.net
chaposokk0222.ddns.net
fathiyassin22.ddns.net
hackerwinchester97.zapto.org
jenyfer.duckdns.org
koko33.freedynamicdns.net
lucenafull.duckdns.org
read8899.ddns.net
reptptyliano.duckdns.org
trojanamaral.hopto.org
uberdescontos2019.ddns.net
winds32.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1730619594392457407
# Reference: https://www.virustotal.com/gui/file/259f3e4c5ddeb1aface878f1dfaba982ef622118c7ac5ef361c25f8d8c67fe03/detection

191.55.155.244:5552
nodetecton.ddns.net

# Reference: https://www.virustotal.com/gui/file/b25fc1ad34f34af390c9149125b0bce7a273ee1790bcd6224fbb82d8b712969e/detection
# Reference: https://www.virustotal.com/gui/file/819821205ecbc1b9c82dc593b6b7de2109d0a986cabd1dd83a64c855b07afd01/detection

185.81.157.149:8886
fr002.nerdpol.ovh

# Reference: https://www.virustotal.com/gui/file/d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89/detection

173.44.50.84:2015
adminwd.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c5a3c3fcca7195afae8aaefff1d993539541fe5fb57936985f82dee97c080423/detection
# Reference: https://www.virustotal.com/gui/file/7cdbcbaf8a3be51ab2daec8d6f19e3b3c6985671a5a66871be9338b7fe0dd94b/detection

177.255.91.0:8091
191.91.176.38:8091
pxryzen.duckdns.org

# Reference: https://www.virustotal.com/gui/file/15ee79cc4942085dadda581f60e185b074eb2e21c2c63c9ba22d2b25e20146e8/detection

arangojuancarlos44.duckdns.org
julio2020.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e46bb1b72d2824791d7fc3f7397c0383e3e0923a47d938248572dd3f26f15b68/detection
# Reference: https://www.virustotal.com/gui/file/3cca5cb2b5bddf800cc4556aa59de844373b858692ee83d91390fa2e7d95d7d8/detection

162.246.185.103:3876
191.91.177.6:3876
junio2020.duckdns.org

# Reference: https://www.virustotal.com/gui/file/3cf9a3c7f350e0b332a8c085769b3bff5643c39c4338eb211501f5e4c2f1eee1/detection
# Reference: https://www.virustotal.com/gui/file/0ab82633340eef571fdf8dedbbe5062db36c75fa0a70fbf6323796de7b06345e/detection

177.255.91.97:8000
njrat2j.duckdns.org

# Reference: https://www.virustotal.com/gui/file/080f9d8944e1af0a44a6e8d1e967de1923ab4ad43708c0d67aff98dc9241796c/detection

192.169.69.26:9090
200.116.159.187:9090
empresae208.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5e0dcc0a57e100943e1a9c565dc52ae7411d92f474fbbd2f600b48f12f1575cf/detection

181.52.104.42:7782
andfrodriguez.duckdns.org

# Reference: https://twitter.com/g0njxa/status/1730552678856495378
# Reference: https://app.any.run/tasks/cc678b1f-d4af-4a2f-96b4-e204dd3f8eed/

http://161.35.124.71
65.0.50.125:22355

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.115/relations
# Reference: https://www.virustotal.com/gui/file/284683096b38777775a6f3adfb86ef322803bd687f161a40fa87aea99db14433/detection

141.255.146.115:288
berlin1415.bounceme.net
blackmirror.ddns.net
ikaroj.no-ip.org
kannibal.ddns.net
lak0v.ddns.net
night099.duckdns.org
xman887.hopto.org
zerox.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.114/relations
# Reference: https://www.virustotal.com/gui/file/7576379ccae10af4a145c639d959f4e897c6e96ab035cdb9e1dbaee0f3994d37/detection

141.255.146.114:1123
abdelh00112.ddns.net
aedfzsa.ddns.net
alasadic4j.no-ip.biz
blckmrr.duckdns.org
carioquinha.duckdns.org
jokerwin.ddns.net
njratrumple.ddns.net
patobranco.duckdns.org
programareduzkb.ddns.net
snaws.hopto.org
spl44shdomain.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.117/relations

berlinjrat.duckdns.org
cuidadoviado.ddns.net
ddtank167.ddns.net
easy-server.sytes.net
jellouli.ddns.net
kizerdthprizer.ddns.net
microsoft191.ddns.net

# Reference: https://www.virustotal.com/gui/file/04d8e5933872b737b60dad09dfe78df8be69c41cca995f95b9e698c4e613a38b/detection

141.255.147.29:1177
marcoatn1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a463e7d3e5a115ad869ee867ab261c54229e1a6fe1a20e7b902815c35417a022/detection
# Reference: https://www.virustotal.com/gui/file/6e54fadaa16cda7cd1fce9b17f58b53883e067356784eb5a0be1c0fb99812aa4/detection

141.255.155.30:1177
ralfszka.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.118/relations
# Reference: https://www.virustotal.com/gui/file/2780819cd196cce4659b770ba51664cf74cf0c815fd05020b2345c12b0741f31/detection

141.255.146.118:1177
alfaressn.ddns.net
asdamdasd30.ddns.net
coloninha.ddns.net
freefirebr.ddns.net
leebodf.hopto.org
lsplinter.ddns.net
marcoatn1.duckdns.org
mrn7r188.ddns.net
noterefen.ddns.net
pornhubsex.servehttp.com
rurkei.duckdns.org
s-zenoxfr.ddns.net
wormnego.ddns.net
www99.zapto.org
yeto.ddns.net

# Reference: https://www.virustotal.com/gui/file/064e7c9cd9edfec3f576ba782730efbf719fbd80fc847bc71247ff8bfd2e541a/detection

141.255.146.119:1177
afonsohost909.hopto.org
alohajdskjfksfhhueyw.duckdns.org
anojokamp354.ddns.net
apatedns.duckdns.org
crossfireeal.duckdns.org
curucuadfgvsjkfdgv.duckdns.org
felipesoueu.duckdns.org
fucklol.ddns.net
ivanildopereiralima53.ddns.net
myfile.hopto.org
sos92.myftp.biz
thauantde123.duckdns.org
vitinho100.duckdns.org
xbizn13.no-ip.biz

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.120/relations
# Reference: https://www.virustotal.com/gui/file/23671b3e740e691f034a28d3bf884dc5e1be1175fb2f217c474d53af11a92135/detection

141.255.146.120:1188
aland.hopto.org
aqq-507.ddns.net
fodase2001.ddns.net
gamer92.myq-see.com
h4x4you.duckdns.org
jana109.ddns.net
matheus22.duckdns.org
ruanoriente157.ddns.net
samuelhacker.duckdns.org
tdsn.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.121/relations
# Reference: https://www.virustotal.com/gui/file/6b64e741f68f2cbc963d3bf5740c4dff084bacca750816d24bab4cd23e0f727a/detection
# Reference: https://www.virustotal.com/gui/file/39f6e7c840c8512e09654954cf82138aa5e90a603b38a556e60086e9c1bd8dd6/detection

141.255.146.121:5552
betano10kkk.ddns.net
darck001.ddns.net
hidden00person.ddns.net
jararaca.ddns.net
mohamedsayed2.no-ip.biz
orangeuser.servehttp.com
soogod1337.ddns.net
spyspy10.ddns.net
teste122.ddns.net
vitimassemparar.ddns.net
walid12002.ddns.net

# Reference: https://app.validin.com/axon?source=DNS&type=ip&find=160.176.24.21
# Reference: https://www.virustotal.com/gui/file/e4e167ac90c58d82218643db646795542a1a3f2d0485a430a0dc33f2d5b97ac1/detection

localhosting.publicvm.com
mosaadaagadir.sytes.net

# Reference: https://www.virustotal.com/gui/file/34db06e7f4fee69923af66de3df6d21c7259e882f469264b3a1b11b67e2ef34d/detection

frasha99.ddns.net

# Reference: https://www.virustotal.com/gui/file/11b00dca96416b82791050b5229a63908e68652a29da02951c7d8076b3cce7e9/detection
# Reference: https://www.virustotal.com/gui/file/026ebff191ec3d91b50725c0653b503f73665f7a8970989235169c1808131688/detection

199.16.158.190:2255
31.13.66.1:2255
serveres-gmail.myftp.biz

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.122/relations
# Reference: https://www.virustotal.com/gui/file/4d080a7646de168eb8c2f30095a916dbd177711715ae6ee7b98b2d3aaca15955/detection

141.255.146.122:1177
alanik5817.ddns.net
carazikaanonymous.duckdns.org
chromerx.ddns.net
lilxan.duckdns.org
panda123zica.duckdns.org
superrafelo1.freedynamicdns.net
wormz.ddns.net
youssef777.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-12-03)

141.255.153.30:5552
141.255.159.83:1177
147.50.252.48:1177
179.155.103.154:1177
18.156.13.209:16458
18.156.13.209:18200
18.157.68.73:16458
18.157.68.73:18200
18.158.58.205:13940
18.192.31.165:15505
18.197.239.109:19220
18.197.239.5:16458
18.197.239.5:18200
18.228.115.60:15448
18.229.248.167:15448
18.231.93.153:15448
201.24.206.40:1177
217.76.59.48:1981
217.76.59.48:9878
3.121.139.82:19177
3.124.142.205:15505
3.124.142.205:17987
3.125.102.39:15505
3.126.224.214:12603
3.126.224.214:14627
3.126.37.18:16458
3.127.138.57:16458
3.127.138.57:18200
3.127.181.115:11520
3.127.59.75:19177
3.64.4.198:11520
3.66.38.117:12147
3.66.38.117:19220
3.67.112.102:13940
3.67.15.169:12603
3.67.15.169:14627
3.67.161.133:11520
3.67.161.133:13940
3.67.62.142:13940
3.68.171.119:12147
3.68.171.119:19220
3.68.56.232:14627
3.69.115.178:12147
3.69.115.178:19220
3.69.157.220:12147
3.69.157.220:19220
35.157.111.131:12603
35.157.111.131:14627
35.158.159.254:19177
4.240.60.121:5552
41.109.90.34:1177
46.246.14.14:2054
46.246.86.8:3030
52.28.112.211:19177
52.28.247.255:19220

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.124/relations
# Reference: https://www.virustotal.com/gui/file/49e5b7c250751f1c96137ca10d51f4c3ce3d7d6306424f8c421d3561b204d56b/detection

141.255.146.124:1150
agram.myddns.me
alskrcom97.ddns.net
ayoobwww.hopto.org
diraasimo.ddns.net
fuckmylife.ddns.net
gustavoakbarr.ddns.net
kimuchi.ddns.net
m7trf-hkr2018.ddns.net
maroxvs.ddns.net
mecha39302.ddns.net
modamer17.hopto.org
sappy.ddns.net
sayinspy.ddns.net
testenew.duckdns.org
xxxhacker.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.125/relations
# Reference: https://www.virustotal.com/gui/file/05eb96afa82213d1df5980a9173aa088ce6b5ab08605ff580373c0648682391c/detection

141.255.146.125:1177
cesar99.hopto.org
dzmed.ddns.net
hamodhack.ddns.net
nabil001.ddns.net
pluginaza.ddns.net
samuelsr.ddns.net
xuanhathudong.ddns.net

# Reference: https://www.virustotal.com/gui/file/9c1d4c4f2cbe4dd07f01a3ad09eda5b944b6a3cefce2fc3ff136cd268a39f99e/detection

141.255.152.225:5552
architect.hopto.org

# Reference: https://www.virustotal.com/gui/file/18f7212352a293f0ad6e761c1e656df9fdcfb2b1374239616b718c762fa723af/detection

cooc16.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.127/relations
# Reference: https://www.virustotal.com/gui/file/d3112b6931941a681b4055ec68ce8e228c885af390e2e65d138a7ed9cbea5ad4/detection
# Reference: https://www.virustotal.com/gui/file/7187b0e114750c630bd507bff9aa725fa842ca670094ca53fdec220fe3c74463/detection

141.255.146.127:5555
ciscopark.ciscofreak.com
cloudfront.sytes.net
devhax69.ddns.net
fahed99-88.no-ip.biz
ganghaskvpn.ddns.net
hermosta.ddns.net
ipjetable1993.myftp.biz
myapps.myddns.me
nauhan77.duckdns.org
taskhost.serveftp.com
vitimas4321.duckdns.org

# Reference: https://www.virustotal.com/gui/file/01eec44489a991feabf6728656a83e7d5ef0436652d0338e02cc50adde558426/detection

200.83.136.8:8000

# Reference: https://www.virustotal.com/gui/file/8044ad8f7e163687ccaf2bb3b5ccdb796953867efc05cc5f55540c6b2b67978f/detection

173.225.115.254:7777
njratkurt.ddns.net

# Reference: https://www.virustotal.com/gui/file/5047ed578b1435436b5ac7a7de63c246625ffbd8e7929970174e6e58744075fd/detection

46.246.14.14:2054

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-12-07)

147.50.253.33:1177
18.158.249.75:16921
3.124.142.205:16921
3.124.142.205:16929
3.125.102.39:16921
3.125.223.134:16921
3.68.171.119:11952
3.68.171.119:13150
3.69.115.178:11952
3.69.157.220:11952

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-12-08)

147.50.253.45:1177
178.80.10.215:49111
18.158.58.205:19513
18.192.31.165:15713
18.198.77.177:14849
209.25.141.180:49131
3.121.139.82:14849
3.124.142.205:15713
3.124.142.205:15872
3.125.102.39:15713
3.125.102.39:15872
3.125.209.94:15713
3.125.209.94:15872
3.125.223.134:15872
3.127.181.115:19513
3.127.59.75:14849
3.67.112.102:19513
3.67.161.133:19513
3.67.62.142:19513
46.246.4.20:9988
91.92.240.141:5577

# Reference: https://www.virustotal.com/gui/file/7a1728c9c05a8c8a63b126febb18c566ee9e5e3533702ea122b8cd1a38b0db1f/detection

3.125.223.134:13922

# Reference: https://www.virustotal.com/gui/file/c7ef522946c2e6a05bb2253e4b2dc790385ac5bd3bd8ec9a6a1f8b603e210dc7/detection

0911.no-ip.info

# Reference: https://www.virustotal.com/gui/file/25444a5ce0887c1f55f2d0a1227fc4b577b76693c7e9f19054ee985fea6486f7/detection

88.227.87.237:199
0933.no-ip.info

# Reference: https://www.virustotal.com/gui/file/0a16cec9e60eb71bdb25ba1e6779542541c5419afc7ea41f137da5845d425ba8/detection
# Reference: https://www.virustotal.com/gui/file/4b0de1858c7c741272a393a15623574b6086f4ba20dfe95d2043e3b7db8264f8/detection

0944.no-ip.info

# Reference: https://www.virustotal.com/gui/file/eca50a3b2d67666cdbf30f003b4052ad03ed2f5c0aa267e2f371ece7fcddd2e9/detection

186.236.125.233:1177

# Reference: https://www.virustotal.com/gui/file/9b577f164c0b7f48dec95fea9bc84afd323426441a5211c822d5da426e84a3cf/detection

11.255.144.4:20132
141.255.144.4:20132

# Reference: https://www.virustotal.com/gui/file/999caab0d59f02d2d0ee93c9bb1d759bb561dab7e0d68c61540e5bda527a4df6/detection

141.255.144.4:2020
179.223.224.220:2020
bagx.ddns.net
lastyinj3ct.ddns.net

# Reference: https://www.virustotal.com/gui/file/a92e45e43be0b884f094e02dec0e9b5cc586cace8271e9a2436d90b413d3cac0/detection

masteruser-o.ddns.net

# Reference: https://www.virustotal.com/gui/file/fab8cdff9f318d54b7e25480ea0600c343960cf12168bcf585e53b1abf5c7dcc/detection

141.255.144.6:1177
177.177.199.123:1177
186.247.125.61:1177
187.15.191.73:1177
hackedfz1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/023508424f1d164c4bbd30aa878a2a84f83838413e930dad34a3d6a7e58a9762/detection

lucasmarty.ddns.net

# Reference: https://www.virustotal.com/gui/file/11631c582215a2f79e7331844e97c7d43837e7d65d08d758b9c4f9938405f0d1/detection

141.255.144.1:1177

# Reference: https://www.virustotal.com/gui/file/11bc5c9bd574ddd8cf9e4d6e5523164b9567fd97d6268a9d0c19f4f39813c650/detection

141.255.144.3:1177

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.10/relations

123456780.ddns.net
38324613pi.hopto.org
ahmdallame.no-ip.biz
ahmed-root.ddns.net
alal001.myftp.biz
alali1.ddns.net
alxhack.ddns.net
armario157.hopto.org
attak007.ddns.net
batatafoda.ddns.net
bisnis10.ddns.net
booswns.ddns.net
boss12121.ddns.net
cnssma.publicvm.com
co950.duckdns.org
contatop100.ddns.net
damy2019.ddns.net
darkahbbd.ddns.net
dejrah.ddns.net
desgraza.duckdns.org
diegowner.duckdns.org
doza122.ddns.net
elizamarques.hopto.org
faceebok21.hopto.org
fares88.ddns.net
gusta123.ddns.net
hackervip.ddns.net
haduck.duckdns.org
hoamihacking.ddns.net
hztaxtolo.ddns.net
imhere.ddns.net
ipkiller.dynu.net
isolado.ddns.net
jajawawa.ddns.net
java-pluguin.servehttp.com
jhonatantay1.ddns.net
k52r66.ddns.net
kalda.hopto.org
kalilinux09.ddns.net
kamikaz-hacked.zapto.org
kolacoca.ddns.net
lamk.ddns.net
lammerez.duckdns.org
lucky786.ddns.net
luizfelipemartinsdasilva.duckdns.org
lukka.duckdns.org
mefilmaglobo.duckdns.org
meuhostlinduu.ddns.net
moi29.ddns.net
mtss23.duckdns.org
myegghack.duckdns.org
myhostl.ddns.net
nounoualger.myftp.biz
novodh4x.duckdns.org
nshwan1997.ddns.net
osama5555.ddns.net
pbhackpb.duckdns.org
peixonauta.duckdns.org
rafit222.ddns.net
ramz3.ddns.net
saad1998.hopto.org
sadhacker.ddns.net
salemhaggan73.hopto.org
salvepbwc.ddns.net
saraweleam99.ddns.net
scott177.ddns.net
serveral.duckdns.org
servercyber105.duckdns.org
slaoqss.duckdns.org
slhacker123.duckdns.org
smadav.hopto.org
sqmn.sytes.net
supernatural.ddns.net
svchost-microsoft.ddns.net
tasaitou.ddns.net
tikapikles.hopto.org
tiomadara666.ddns.net
tomround.hopto.org
trojan5555.ddns.net
trojeiro12.ddns.net
update02.sytes.net
virosf16.ddns.net
win86.ddns.net
windir.serveirc.com
windowsxp3000.ddns.net
www.slhacker123.duckdns.org
xerebebel.ddns.net
xzxcwowcxzx.duckdns.org
youdonotfindme.noip.me
yousuckhomie.hopto.org
zeeadd.sytes.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.102/relations
# Reference: https://www.virustotal.com/gui/file/4137bfaf8aed41df6b0dc35560818de5525c228abb042d695774bbe8bdebca89/detection
# Reference: https://www.virustotal.com/gui/file/6a02faa504a44d2e655135637aa5edb8941a4214fe3e88d3a84c1861118f9d0c/detection

141.255.144.102:1177
azuul01.ddns.net
bbog777.zapto.org
comandovitimas.duckdns.org
geradordenitro.ddns.net
gleidson84856745.ddns.net
mrjoker01.linkpc.net
playboy9650.ddns.net
r3b-hack.hopto.org
th3hdz.no-ip.biz
thackedbb.duckdns.org
vpsrdp.publicvm.com
windowservices.sytes.net

# Reference: https://www.virustotal.com/gui/file/6e0d1801c0839964e63b174d65e5d4da48faa2860f18af2798583a86596bfcf0/detection

141.255.150.166:1177
amjd.no-ip.biz
daggerfp123.ddns.net
hacker-cf01.duckdns.org
sechost.ddns.net
yasminlinda.ddns.net

# Reference: https://www.virustotal.com/gui/file/169cbb8320f9c9cb0d4b134b783cdf76879e77d92901bca22c2973d53ac33385/detection

googlee.ddns.net

# Reference: https://www.virustotal.com/gui/file/9d3ebf6b2b8a291215135bb40648159ff44a26ad7dc292a26a5a3c01e299859a/detection

177.37.145.145:1177
milenaaymor.ddns.net

# Reference: https://www.virustotal.com/gui/file/63a3c157e28ca6decad80ecf7ab1f8190fe4d8d9b94f3c261d1e39d561f035b2/detection

http://168.235.102.228
141.255.144.67:1177

# Reference: https://www.virustotal.com/gui/file/4107d6bedc27054d625feb703f822898a902ac3892c39e4d77378e962efb9350/detection

gznjrar.ddns.net

# Reference: https://www.virustotal.com/gui/file/1120f4c9dd24c3e3f599942a0d9be799ffb09b39a11d2301390cd29c09c33827/detection

141.255.144.67:1177

# Reference: https://www.virustotal.com/gui/file/14198aeaa9c3e0e80d319f3d074d5be71b4336c6b414b201470135a5a969a40c/detection

141.255.157.63:4444
king212.ddns.net

# Reference: https://www.virustotal.com/gui/file/567b5f06aa01f4c94176485b4aef0c670d06784e86bc38c906f0ad46d0bec30b/detection

20.79.43.133:5553
windows-services.linkpc.net

# Reference: https://www.virustotal.com/gui/file/02b67c57b30335a6143813f1e23394897fdee766aefbb308777eaf8c8caec411/detection

141.255.156.12:1177
141.255.148.25:1177
andlmartins9.duckdns.org

# Reference: https://www.virustotal.com/gui/file/4d5b77cc922acb1e0c239d94a205441c5d4293de51415de2068cf17859bfecd6/detection

141.255.148.26:8080
updatehost.duckdns.org

# Reference: https://www.virustotal.com/gui/file/af1598fb962d73445d7a975d3ee0f8150a90ba118a5c9642786531dde0aa127c/detection

nokia.no-ip.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.149.172/relations
# Reference: https://www.virustotal.com/gui/file/3465b495e9296921ba8f67d1c1e49122eec6c079b7168263e3e23e1050cdb3fd/detection
# Reference: https://www.virustotal.com/gui/file/3f3d708d67dca040f4dabd5d206ae44a3e9cd9d30cbdbfe0bc15b65c03fddf1c/detection

141.255.149.172:1923
browseonline.duckdns.org
lilsamzy22.duckdns.org
markosaman6.ddns.net
mifthasurya19.no-ip.biz
nomaddns123.duckdns.org
salam7iraq.hopto.org
srbatata.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.148.99/relations
# Reference: https://www.virustotal.com/gui/file/4efc7deb9e3661e36675eacf2b064fe7035108c3e8d53842737ecf576a8f3e45/detection

141.255.148.99:1177
alialkapa.hopto.org
ayad0772.ddns.net
thedark123456789.ddns.net

# Reference: https://www.virustotal.com/gui/file/032cc440a622f81871ddaefd91a037eb176d4e9009580c990be672a77526f51a/detection

105.235.131.135:5656
141.255.153.16:5656
team-hacker.ddns.net

# Reference: https://www.virustotal.com/gui/file/059bda7a9dc6a0e84519b00b95ecfb467c7512d0a8f449aea812a801f9cca7ef/detection

141.255.150.11:1337
141.255.158.113:1337
49.205.156.166:1337
49.205.157.211:1337
7odaa.ddns.net
jikk.ddns.net
jubranism.hopto.org
microsoftwindows.ddns.net
nikiyo.ddns.net
omaee435.ddns.net
pubgmobile.servegame.com
sheinegostoso.ddns.net
youandme.ddns.net

# Reference: https://www.virustotal.com/gui/file/b7ec34bf1cb5e99e75903ff915cd2fb3f3454627b96b6db00b89456dbc057390/detection
# Reference: https://www.virustotal.com/gui/file/471a2f56b0f7283aeb1ac9c2ce01db6114888dd7e1f3889c247be65056fe9681/detection

141.255.145.52:5553
188.161.88.142:5553
sdfg.3utilities.com

# Reference: https://www.virustotal.com/gui/ip-address/141.255.146.157/relations
# Reference: https://www.virustotal.com/gui/file/7a2355a9d80ffe236f76e7e4c32d8bc42b50bce6d7fca5034b137bceae424552/detection

141.255.146.157:1177
aanonymous123.ddns.net
bokkuvirde.ddns.net
cqrzh122.ddns.net
d0c.duckdns.org
deno8747.duckdns.org
efilisminmendham.ddns.net
hackdoido.ddns.net
hackfone.ddns.net
hosien1991.ddns.net
i7if7hack.no-ip.biz
jogosgratispravoce.duckdns.org
juker1987.ddns.net
m3tz333.hopto.org
neguinhbotsnj890.ddns.net
system123.linkpc.net
thauantde123.duckdns.org
tnakhh.ddns.net
xxxphenomxxx.ddns.net
y13.kro.kr

# Reference: https://www.virustotal.com/gui/ip-address/141.255.157.76/relations
# Reference: https://www.virustotal.com/gui/file/074386a5700dfd37c1adbb4e61caf537ccd57d96c1b8fcf6cc7b27227771d600/detection

141.255.157.76:1605
al3nzi.linkpc.net
amazonservice.mypi.co
anonymouss123.ddns.net
bagtraq157.duckdns.org
krarkingiraq.ddns.net
mrkimo933.hopto.org
omar13.ddns.net
sexyboy30.ddns.net
sosos.ddns.net
ssas.ddns.net
thainan.duckdns.org
w187.ddns.net
windowsnet.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.152.26/relations
# Reference: https://www.virustotal.com/gui/file/3eacea08132ad06f3e56ca6f4ccbe72d265f36994698bd6e73d2e86b822a1f22/detection

141.255.146.191:5552
141.255.152.26:5552
9513braga.duckdns.org
cqrzh122.ddns.net
henrique2019.duckdns.org
jaww1122ww.ddns.net
lam1000.duckdns.org
thepunisher0000.ddns.net
youarehere.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.158.172/relations
# Reference: https://www.virustotal.com/gui/file/0e466c315f687fa964ba9a7c51857a816cbca13cc7f7ccb2c4f3bcec8fead72c/detection

141.255.158.172:1188
google1994.no-ip.org
houndcraft.ddns.net
kickboxing.duckdns.org
leto.hopto.org
smokinghacker.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.151.201/relations
# Reference: https://www.virustotal.com/gui/file/6b5448877a08f4ec0e63d03190be1b9fd1676a667b038b95da1795c87f2973e1/detection

141.255.151.201:3389
androter.serveftp.com
ckinderor.duckdns.org
donbvvc.ddns.net
hammam1996.ddns.net
pocona.ddns.net
samire.ddns.net
specwzrd-windows.redirectme.net
tetojor1.zapto.org
zexter.ddns.net

# Reference: https://www.virustotal.com/gui/file/e85eca4243eff1fd67017f9f7c8fc9d4e9922f16456706117bd1aed09633f77e/detection

196.92.99.51:1177
logs7wa.ddns.net

# Reference: https://www.virustotal.com/gui/file/21ff66b6d39beff84cb4f8c211fec891eeeabbe48dc65fa4a48fd2f97fd05428/detection

105.155.93.227:1177
41.248.156.216:1177
hostpipi.ddns.net

# Reference: https://www.virustotal.com/gui/file/8f8e23c06f9c7047d368733d30c7add242a1aac0f281ec3e9f0b42f089d078f3/detection

177.179.28.110:1177
191.242.7.214:2019
btctest.ddns.net
thesubscoder.duckdns.org
vulgoricijo.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.97/relations

almolkolilah.hopto.org
filinha.duckdns.org
gtxgtxgtx444.hopto.org
irineupt.ddns.net
jphacking.duckdns.org
kossaa.ddns.net
sniper6o.ddns.net
trojanmj.linkpc.net
trojeiropc.ddns.net
update.servemp3.com

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.100/relations
# Reference: https://www.virustotal.com/gui/file/2c415e5c0d585ac9b5b77b8235a67028424c8518fb37d020fe84e97bfe5d1d0c/detection

141.255.144.100:5552
141.255.145.236:5552
crewman420.ddns.net
fullpowergamer34.ddns.net
googleplay.ddns.net
minouski.myftp.biz
miscrosoft.ddns.net
qq11.ddns.net
vtnc12345.ddns.net
wesam9797.hopto.org

# Reference: https://www.virustotal.com/gui/file/0340a9f7cbd9745a0d4c426005fe28e38ea10e18419ec5e32e0b271d4bc7b57a/detection

bugtraqspy-net157.no-ip.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.101/relations

deivid1177.duckdns.org
dfkefen123.ddns.net
lammerdomal.duckdns.org
levetfm.duckdns.org
pimba222.duckdns.org
saad2020.ddns.net
saifnjrat55.myq-see.com
spl4sh.duckdns.org
troianoshacking.duckdns.org

# Reference: https://www.virustotal.com/gui/file/159ca614d05417a45f43d8cd8b312d33670b5f3ed60e83af343c036c7f132304/detection

177.83.114.65:1177
85.244.117.188:1177
plxsh.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e1ac7483d265b290d31c50128706b8cba0dcda24ed389a657910584ad597c066/detection
# Reference: https://www.virustotal.com/gui/file/8d0176fc6e8551bd39d20ca9d541907ad0fe16c8dc2a797d8f549076f28db062/detection

170.39.76.57:7788
mynameisfury.duckdns.org
winupdt2023.000webhostapp.com

# Reference: https://www.virustotal.com/gui/ip-address/141.255.152.87/relations
# Reference: https://www.virustotal.com/gui/file/5a313301e58a767ba6740e48aff1c5d4834303291f6a890f7f797e6720a9685c/detection

141.255.152.87:5566
bbc.ddns.net
googlchrome.ddns.net
ouazirilyasse.hopto.org
rabobankbankieren.webredirect.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.145.243/relations
# Reference: https://www.virustotal.com/gui/file/216ceaa4194978c38a966b155b540e17cd72458406ef72d6164a3c28021619c4/detection

141.255.145.243:5588
anonymus14.no-ip.org
crossfireduck22.duckdns.org
crossfireduck23.duckdns.org
hostpe480e.ddns.net
kanibal1794.ddns.net
karzan.hopto.org
koshbat.ddns.net
naifun.ddns.net
ramzi100.myddns.me
sotola.ddns.net
sweetblack.zapto.org

# Reference: https://www.virustotal.com/gui/file/02f48f8d34ce2e0a63bb7a7ee53932e4e5682012242fc4a9b1f3df8636a3d6f4/detection

141.255.153.162:2030
77.232.127.76:2030
mookdla.myq-see.com

# Reference: https://www.virustotal.com/gui/ip-address/141.255.145.242/relations
# Reference: https://www.virustotal.com/gui/file/1a64d9f542f7b63751b3ecbc2ad176f757f8a26882494846095ac291d2c59517/detection

141.255.145.242:1177
141.255.147.146:1177
cochinhatext.ddns.net
hhh1.ddns.net
k4yk0h4ck.duckdns.org
kikis3215.ddns.net
kukukluxxx.ddns.net
nj789.ddns.net
whoamihacking.ddns.net

# Reference: https://www.virustotal.com/gui/file/aa2fc30a16bce75ac63faa640e59ad69471a4f37eba27503e759f2cec0439a21/detection
# Reference: https://www.virustotal.com/gui/file/51e66f42299c3bdf1ef00c9a7d0ac5cc010c0f58c57d7aff9d7845778f762dd9/detection

141.255.145.244:87
toxto.linkpc.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.145.244/relations
# Reference: https://www.virustotal.com/gui/file/0ce8f5307eeb5ed850c9cf9a1cdbb42210692996842e0a97cd9b5d3ec3bb40dc/detection

141.255.145.244:81

# Reference: https://www.virustotal.com/gui/file/2de4df9b70ef1fd0c64372a73826e00cb87fbbcd24aee76c0a9c75ba13c38070/detection

meemo1233.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.145.244/relations

dz28dz28.ddns.net
fffcssas4.ddns.net
habeah.freedynamicdns.org
kaneki9030.ddns.net
myfisrtrat.hopto.org
royhan76.hopto.org
tkotabored.ddns.net
virus0003.no-ip.org
wafabel568.ddns.net
windows2.ddns.net
z3r0slaman.ddns.net

# Reference: https://www.virustotal.com/gui/file/0e3170d57d616773a39509918467fa88e5b49c84f69711de0cfe455262e152e0/detection

141.255.144.95:5552
141.255.147.41:5552
160.178.204.175:5552
gibi.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.145.225/relations

aabbcceedd.ddns.net
alexhacker.ddns.net
darkmeta313.ddns.net
filla.ddns.net
hackehacker.ddns.net
imade360.ddns.net
queimanao.ddns.net
salamaleiko.duckdns.org
sandboxupdate.ddns.net
vmhowna.duckdns.org
zazafart.ddns.net

# Reference: https://www.virustotal.com/gui/file/75eb6aa91fbcf892989d7be34e4737650298fd47a5aa779991f975302e327cd8/detection

141.255.144.8:1177

# Reference: https://www.virustotal.com/gui/file/f6de3297860930ce59a5c5bc90e35454582b168c7755ac80891764816071715f/detection

mohsnaliali123.ddns.net

# Reference: https://www.virustotal.com/gui/file/3ac70ef4f8905eda165e6663c3afa50f15082b7951aba94d2c0a50470df93299/detection

141.255.144.9:1177
141.255.155.245:1177
141.255.158.241:1177

# Reference: https://www.virustotal.com/gui/ip-address/141.255.145.1/relations
# Reference: https://www.virustotal.com/gui/file/304ae337f96ac21ce949466ad7bb994a8c48c7c3ff261f38d8418dec887fe0f3/detection

141.255.145.1:1177
khayouch.ddns.net
koso0fi.hopto.org
mxmopk.ddns.net
pruebanumero1.ddns.net
rafaelsnusuki302.ddns.net
rms.no-ip.org
wormratx.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.145.0/relations
# Reference: https://www.virustotal.com/gui/file/00eadee5ec1c0fac53c28e6e53603ac44ae0ef99cb8e5610b67446d6cdc4dae1/detection

141.255.145.0:1337
eocanalha.ddns.net
fveupdate.ddns.net
lord-kannibal.ddns.net
mdchefe123.duckdns.org
mgrmking.ddns.net
nes.ddns.net
networki.duckdns.org
njrattroja.duckdns.org

# Reference: https://www.virustotal.com/gui/file/7d75d7b74710ed590f083a3ee13570bba1f91d2cbeee86905f1af329320b4f5a/detection

141.255.144.121:5552
141.255.144.210:5552
141.255.145.198:5552
141.255.146.153:5552
141.255.146.168:5552
141.255.146.32:5552
141.255.151.173:5552
141.255.152.113:5552
141.255.156.32:5552
141.255.158.45:5552
141.255.158.98:5552
149.56.234.189:5552
37.236.22.43:5552
45.151.79.97:5552
rustsexylove.ddns.net

# Reference: https://www.virustotal.com/gui/file/3468c4d4f4213d4fed324138599056c2d4f42af07f1f656bfc317d8c8583f605/detection

141.255.158.138:9001
141.255.159.110:9001
andro1980.zapto.org

# Reference: https://www.virustotal.com/gui/file/5878785a15a69406ea9edfdb129022e5be104d0ced64e3f3f509a68defdd4728/detection

141.255.146.205:2890

# Reference: https://www.virustotal.com/gui/file/af61dd9dac7b83840482a40755f339daca9c10ece711ae69ccc9b4c3f17480b2/detection

85.215.218.19:2026
java-runtime.servehttp.com

# Reference: https://www.virustotal.com/gui/file/995307a9e470736cc0ff2d25275769b3a33c7021cdd09d2cad955d3fcddc7e92/detection

51.79.230.40:1123

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-12-12)

3.121.139.82:19768
3.127.253.86:19768
35.158.159.254:19768
52.28.112.211:19768

# Reference: https://www.virustotal.com/gui/file/5d17b7b97d7abbbb7b6a977c3dec9c555c4c16bca5e1a55edf03d971674c7699/detection

204.44.124.113:3042

# Reference: https://www.virustotal.com/gui/file/b60b4fc83e153c461c86ce4a081a441b756f25f4794a819e3693ac25ed51af8c/detection

141.255.150.197:7771
141.255.153.139:7771
wissowisso.ddns.net

# Reference: https://www.virustotal.com/gui/file/ddc27865c90e0dfcebd8f137be3f4db9b35e4b9910559d2439a024a2a8874499/detection

46.246.86.15:6770
medellin2022.duckdns.org
medellin230.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a50a080a33d74fad62065389fe7d2961049597ffd7cc3728c5ab99b6d024f070/detection

arquivos2798nj.duckdns.org

# Reference: https://www.virustotal.com/gui/file/22b923e691f512282327dd19399d63687071527f2310464604ccd41306d8a874/detection

181.141.6.14:1528
216.218.135.117:56362
nj11p1528.duckdns.org

# Reference: https://www.virustotal.com/gui/file/be598a0515f9268d983696a99c482dda73711ecb0723014fb68b52952f2cf173/detection
# Reference: https://www.virustotal.com/gui/file/16141c5e1184ff51dae087c0c01fd0da99321602c45a5a075e221668607499ef/detection

188.126.90.76:8010
46.246.26.10:8010
verdenjj.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b9e42ca48458249dacfaf20def9d6d83aa9d5b16fe0b489850aa2c372754836d/detection

46.246.84.11:4433
diciembre2.duckdns.org

# Reference: https://www.virustotal.com/gui/file/95abf30272294b8358a9c124d2f82b4392cc920de0b85aab5bb5bb5206e5e81a/detection

46.246.71.201:4433

# Reference: https://www.virustotal.com/gui/file/1969037cd8453eeeba47070f0cd469698f2528d425aa75d6398afae26b67e431/detection

46.246.71.140:4433

# Reference: https://www.virustotal.com/gui/file/db7dee9ae8100de761fb7c96e8b1ce9131ca935de4c2572a3971eabe812c5f8b/detection

188.126.90.10:511
188.126.90.15:511
188.126.90.21:511
188.126.90.3:511
188.126.90.7:511
188.126.90.9:511
46.246.12.13:511
46.246.14.10:511
46.246.26.19:511
46.246.26.8:511
46.246.4.27:511
46.246.80.9:511
46.246.82.11:511
46.246.82.15:511
46.246.82.16:511
46.246.82.17:511
46.246.82.2:511
46.246.82.20:511
46.246.82.9:511
73.47.174.145:511
server.3utilities.com

# Reference: https://www.virustotal.com/gui/file/c94ea04b56c5128160ec52745d56322b4d53212ff00c6a9a82023480e2a2572d/detection
# Reference: https://www.virustotal.com/gui/file/6a1fe809c0222b9bf50359986369cfd2dcf1d634d94d0b2e9dab395f27a3ed8d/detection
# Reference: https://www.virustotal.com/gui/file/5a9b35d25b73696d8f4c3631dc573cb1420438bd668ed4e464985ffd9eb1db90/detection
# Reference: https://www.virustotal.com/gui/file/59e7838f156c6dc3fc1a1ca1617943428e544cf52c350a0811a727d975c14eb1/detection
# Reference: https://www.virustotal.com/gui/file/4c42a2762cbaa36e5ab630d3e1d54691a13136109114eed9bf4fb4c7b6fb622e/detection
# Reference: https://www.virustotal.com/gui/file/19ab0bc969a874c62e89469a1363f58e65eb315c2f58fd5dfca0c95be634b223/detection

188.126.90.9:14725
46.246.26.19:14725
46.246.82.11:14725
46.246.82.15:14725
46.246.82.2:14725
46.246.82.3:1346
46.246.82.9:1346

# Reference: https://www.virustotal.com/gui/ip-address/23.237.25.120/relations
# Reference: https://app.validin.com/axon?source=DNS&type=ip&find=46.246.14.16

babilonok.duckdns.org
cn309.mooo.com
cn340.mooo.com
cn671.mooo.com
cn903.mooo.com
cn983.mooo.com
douglaschannel.duckdns.org
mynameiswhoiami.duckdns.org
notaria2182109.duckdns.org
wins0111ok.duckdns.org
wins03novok.duckdns.org
wins20dicok.duckdns.org
wins21novok.duckdns.org
wins2207ok.duckdns.org
wins2609ok.duckdns.org

# Reference: https://www.virustotal.com/gui/file/be6e89f861f6559315c4cb32c3331522f6aed42fa8de49567bebc41985f21fdd/detection

46.246.4.5:1177
asad4654.ddns.net

# Reference: https://www.virustotal.com/gui/file/21eb7053e1080b8d636ed78f24b62cbd17bbdfde91f8c8feebb5bf34a62a49b3/detection

46.246.4.5:1980

# Reference: https://www.virustotal.com/gui/file/8a438d7e6f2b3984f51fd588fccd5fc18c620babf929484736267f653c77c923/detection

amiroshacker.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/83f75746816e9085c0033673c5dab88aa92a7d30cb8e8220861ed835301501ec/detection

mzmzxx.ddns.net

# Reference: https://www.virustotal.com/gui/file/f9790dd8fbee111017f11776aa068acce0bd71f4eb1c3000bbad3ff1f0bc7333/detection
# Reference: https://www.virustotal.com/gui/file/9cab17262ffd23634cba14a25cf5cafb6c1abca868b7482a461e1e4726e82d26/detection

46.246.84.20:1177
samideejay.ddns.net

# Reference: https://www.virustotal.com/gui/file/d3841f071e1715e96d07a4fa65aee7a66a76d564ca5101f7dfff846d3f2edb20/detection

ssssaaa2000.ddns.net

# Reference: https://www.virustotal.com/gui/file/6cabc82e20d8d609c5ab0578d13d40b5ef68c1cc12ba1e6d7dec9e5e457e5fcb/detection

46.246.14.19:8000

# Reference: https://www.virustotal.com/gui/file/84491bfe269401a17e0fde093ee9926494856966a8a437e757b8eddc19ad4820/detection
# Reference: https://www.virustotal.com/gui/file/7c1f3c809481fd0780c575bf9e6193aaa2e1b63d31279c6b37b7166e8453948f/detection
# Reference: https://www.virustotal.com/gui/file/3b19bf6a7e1e2bf0761d07961ba77d5ca8a528356f3ce953db12ea6d8967d0c1/detection
# Reference: https://www.virustotal.com/gui/file/01daab7bcb10504f33b12a04525fe62d3c3ac8c13b8867e4db594e5e142dfe68/detection

178.73.219.87:1213
46.246.13.92:1213
46.246.85.89:3012
njrat12.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e692b5c96dca703d6496cd7f79c9643592e1813b0e30d4254e9716708d532858/detection
# Reference: https://www.virustotal.com/gui/file/45fe28d176cff770b766ecce210fec01ab07cb9ceda2c79e15911390fe53b545/detection

178.73.193.98:3013
178.73.219.87:3014
rat12nj.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d633f1e97ac1b3e3ee981e5bc9aeba112d08eda8ba1de4f19b40326b7e2cfe3c/detection

46.246.4.21:5552

# Reference: https://www.virustotal.com/gui/file/c0a7637f014e3481c649fdbd575abd8cbf9c4a16123f932aa87d74c1a954b190/detection

46.246.80.13:2121
46.246.82.10:2121
46.246.84.18:2121

# Reference: https://www.virustotal.com/gui/file/62fb84601dc9a71d22253d1d59e668121a6950779e831f2c2d54101d21ece67d/detection
# Reference: https://www.virustotal.com/gui/file/4264326368c93bce5de16cd3212ecdd610de941b37a061804ae303bbcd819711/detection

46.246.84.18:1177
hackking.no-ip.biz
sheikmasterpro.no-ip.org

# Reference: https://www.virustotal.com/gui/file/c1fdfed5942bbcbea68f5207a6057c360ff2bbe5a93349c212728c47b1a46b29/detection

46.246.6.13:1963

# Reference: https://www.virustotal.com/gui/file/ab3fe2c6406d9c6f7d5cbb776342560ffc328615e153735e577d275c81bfcf1e/detection

178.73.192.2:2798
188.126.90.25:1963
188.126.90.25:2525
188.126.90.25:2798

# Reference: https://www.virustotal.com/gui/file/77f117508aadd88dded698b3cfec0ad5d6bafcb6ddfa994179abf9c86df36a84/detection

46.246.86.19:1963
46.246.86.19:2525
46.246.86.19:8090

# Reference: https://www.virustotal.com/gui/file/2d0b31db2cc12523a5183d1eb4b559ddd7a5b0dcd835cf7f6b4beed07e5d0e41/detection

181.141.10.27:1963
181.141.2.160:1963

# Reference: https://www.virustotal.com/gui/file/0e25b5299c3df59e05d296b1478d43094d5d81e1a5b8706fd355b36388244326/detection

46.246.86.19:2798

# Reference: https://www.virustotal.com/gui/file/ca2d5576e84532294426e3091a0b79984576229952a4f4245f403878ef88c5da/detection

bendito.duckdns.org
vinijr27.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/njrbd.duckdns.org/relations
# Reference: https://www.virustotal.com/gui/file/c89b4922bad07b1a0b83d7a766e0bd552d0db579f7683e5a67947041e5ded037/detection

178.73.192.4:1981
46.246.12.21:1981
46.246.14.10:1981
46.246.4.18:1981
46.246.80.17:1981
46.246.80.5:1981
46.246.82.14:1981
46.246.84.6:1981
46.246.86.3:1981
46.246.86.5:1981

# Reference: https://www.virustotal.com/gui/file/d5bc5645dc5f58a04cc76289a6527f24fd7e4d6691b9e2d8d1ec298074788289/detection

46.246.4.8:9898
121672.ddns.net

# Reference: https://www.virustotal.com/gui/file/419987b116403c55c603f6ba3642ddb4dfc9cdecca466d549e87f35b269f3f36/detection

46.246.4.6:2020

# Reference: https://www.virustotal.com/gui/file/c170bccaec05112a372db5cfab6a131e2cf5c8f5aa554964c7fa2f062bb6c86e/detection

46.246.4.24:1144
well1122334455.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/73e4a7bd34b67d787a4adcf491bb7d5c464b9aa7d4296d116e065e0cf1f6b0ed/detection

46.246.4.24:1132
5.246.211.70:1132
ckk.ddns.net

# Reference: https://www.virustotal.com/gui/file/ee72811aea0a3bee85ab6e1e97bf3d494cf04f1cf94a82bb8b06035a7226c60f/detection

http://5.42.199.120
46.246.14.18:1994

# Reference: https://www.virustotal.com/gui/file/d171138f7a2951df80f25cad3621dcc6fa2f2fd93d09eed9f7c0bee4fa1db2f1/detection
# Reference: https://www.virustotal.com/gui/file/1f07c272f3e625fdb740a571c78dd4566ae6740f0b0a3d4787ea8b2d9d365405/detection

46.246.14.18:5552
46.246.80.8:5552
78.95.40.43:5552
azzamrat.ddns.net

# Reference: https://www.virustotal.com/gui/file/b581db63a5efbc915614f23656565e0ce18cfbe866854e2912fb4296d72b5da6/detection
# Reference: https://www.virustotal.com/gui/file/624b292fc302076d6ea666b33a72257a9780997ecade28b33a4215164d4d5b36/detection

46.246.14.18:1177
jordanhackers.ddns.net

# Reference: https://www.virustotal.com/gui/file/3ebade4069da6e1eb627d7af76dc983b0b58e3e0c14a68b5740bda4d3fb5fac3/detection

fuckallhacker123.webhop.me

# Reference: https://www.virustotal.com/gui/ip-address/46.246.14.18/relations

guti4789.duckdns.org
mostafa63.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/8c2ef76c7d494efa3c1d927d5132b64a3e09ccbc4fb2c2d8393abb2d8d58bf67/detection

46.246.82.18:3333
pereira33.duckdns.org

# Reference: https://www.virustotal.com/gui/file/15800787860c1e735ad6b5f2a1b0915b1e3dc1b63264eb5c8af4a1386d5a2e07/detection

46.246.82.18:1994

# Reference: https://www.virustotal.com/gui/file/60b647d0b2744cf371340847831432d9174921caa66a344db50ed0b40f3864e4/detection
# Reference: https://www.virustotal.com/gui/file/f401d3eaa05785e0a1516f45eeebe598f3d660fcb48a217fdb24a3c2777c8ed5/detection

46.246.12.22:2054
46.246.14.11:2054
46.246.4.16:2054
46.246.4.2:2054
46.246.6.10:2054
46.246.80.20:2054
46.246.80.5:2054
46.246.84.7:2054
jminversiones.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b3936c91831a7ae3075926767414865594d0b588730df47527f5ef24ba4537bf/detection

46.246.12.14:1177
moamen.ddns.net

# Reference: https://www.virustotal.com/gui/file/c15294ab5e0f7fb0d3c5a4a491f79c801d66033eff4a2cc86bfe272764f82021/detection

46.246.12.14:9988
wfe.ddns.net

# Reference: https://www.virustotal.com/gui/file/f6fa91624fb4408de63af04b92ae1924b45cacbed23e232ed043a05cccb71a74/detection

46.246.82.4:7777

# Reference: https://www.virustotal.com/gui/file/dec1a35affcb807836c50345fa084d62010dea61eb4f3d653a568beedb264146/detection

146.251.48.124:1132
46.246.6.16:1132

# Reference: https://www.virustotal.com/gui/file/bbe4a419c309254db273562f421644079c2f981428dee1bd24af2a1e24124d96/detection
# Reference: https://www.virustotal.com/gui/file/b6a29c101ff7ec5e8b9e9accccea3cb01881e52229617c5c2f6bde8133779143/detection

46.246.6.16:5552
5.8.48.45:5552
mastarmoh.ddns.net

# Reference: https://www.virustotal.com/gui/file/8a877c2563ddcdb3f07d8a0d1bf472c9323cb56a53676ad2cda6273acc102a4c/detection

46.246.6.16:3525

# Reference: https://www.virustotal.com/gui/file/236c75051279bd4ece91b1959bafe630a9aabb20c6e0237e4e6ec85a2e0e244c/detection

hackedsajad.ddns.net

# Reference: https://www.virustotal.com/gui/file/0d61c7c25cf1481da11e574f88139034cfc87242de6a2dd1a7944e8eb01f04a2/detection

hack-ala7zan.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/cf1a3c803f40b97049cfaeb1b7a236190ffd69733268faf6c231749b8cab6c44/detection

46.246.84.13:1540

# Reference: https://www.virustotal.com/gui/file/4c68a7067ba0dbf78111b219cce00883b3dc71ca1c41cf0a8f6f25f165aefa72/detection

46.246.84.13:1177
austincud.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/37a1342ba62b71a50713e5825befff88baada4412cbaac3ee032fbf5a01dfb10/detection

46.246.84.13:5887

# Reference: https://www.virustotal.com/gui/file/25b6e64181c471a7d7ae8229c2dc9e2b6561b271e045098e811e47bde452255b/detection

46.246.84.13:4343

# Reference: https://www.virustotal.com/gui/file/6aaa24a4a57b1b036a59aa7567e731d4dae3bc0a2b65520c0a633849f24e96fc/detection

46.246.12.20:1177

# Reference: https://www.virustotal.com/gui/file/602565f3d8d3fbc624e8f2dfd517130589eb5279e1c34b6f8eb626b5b671fdaa/detection

46.246.12.20:2054

# Reference: https://www.virustotal.com/gui/ip-address/46.246.12.20/relations

vj15173.duckdns.org
xxxhhhxxx.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/dbe64bcbcebcb49f84b40ff4d478afb002bb159a6ad2b3a4cee9b635bc58792f/detection

mhmmed123456.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/b634457ac0ddec74a691647b08aff04633119a49dce253141ef4fcaeee23f1c9/detection

46.246.6.18:3030
46.246.80.16:3030

# Reference: https://www.virustotal.com/gui/file/3a1d5e1e6539a761c687394628c1de8b728d92aaf28f294dc61543f44e36fe86/detection

46.246.6.18:2020

# Reference: https://www.virustotal.com/gui/ip-address/46.246.14.25/relations
# Reference: https://www.virustotal.com/gui/file/a3c591edfdaccccb16b18db2511d69cbb8ec58f7c2bf95024b76fd19e48280b8/detection

178.73.192.8:8090
181.141.1.250:8090
181.141.2.156:8090
181.141.4.151:8090
181.141.6.14:8090
181.55.20.101:8090
181.58.82.181:8090
181.55.20.101:8090
191.156.72.157:8090
46.246.12.25:8090
46.246.12.4:8090
46.246.12.66:8090
46.246.14.25:8090
46.246.26.67:8090
46.246.26.71:8090
46.246.4.78:8090
46.246.6.14:8090
46.246.6.77:8090
46.246.80.17:8090
46.246.80.18:8090
46.246.80.66:8090
46.246.80.69:8090
46.246.82.14:8090
46.246.82.71:8090
46.246.84.76:8090
46.246.84.9:8090
46.246.86.12:8090
46.246.86.75:8090
46.246.86.83:8090
79.134.225.5:8090
85.208.139.83:8090
asyn2306.duckdns.org

# Reference: https://www.virustotal.com/gui/file/15e1b3b57027a16fd45af73c84c21fa14e37b360e02b5c434782b1d6575cc13a/detection

46.246.84.8:8888
ml7os.ddns.net

# Reference: https://www.virustotal.com/gui/file/a6f2097779d72619c03fe0e5c9338e957daa582dbf97225080ac78208a59fd66/detection

46.246.12.23:1177
hackermatador.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/7b32653cafffad8aee685bd537dfd4f4bafa9b908370d28a39c89db791377e6c/detection
# Reference: https://www.virustotal.com/gui/file/1b37de170ad898b51cf5f62541324be0e1c31826cbb24b7bc6a253f545d7a759/detection

add123.no-ip.biz

# Reference: https://www.virustotal.com/gui/domain/reald27.duckdns.org/relations
# Reference: https://www.virustotal.com/gui/file/f1229c4c79308785678ef602c176e52d557522ea853ae77308828328f133ddae/detection

179.13.8.247:3525
179.14.8.131:3525
181.141.0.148:3525
181.71.216.77:3525
46.246.12.11:3525
46.246.12.15:3525
46.246.12.20:3525
46.246.12.22:3525
46.246.12.2:3525
46.246.14.13:3525
46.246.14.14:3525
46.246.14.7:3525
46.246.26.11:3525
46.246.26.12:3525
46.246.26.13:3525
46.246.26.18:3525
46.246.26.19:3525
46.246.26.23:3525
46.246.4.18:3525
46.246.4.9:3525
46.246.6.10:3525
46.246.6.11:3525
46.246.80.12:3525
46.246.80.15:3525
46.246.80.16:3525
46.246.80.21:3525
46.246.80.3:3525
46.246.80.6:3525
46.246.80.9:3525
46.246.82.16:3525
46.246.82.17:3525
46.246.82.18:3525
46.246.82.19:3525
46.246.82.23:3525
46.246.82.9:3525
46.246.84.11:3525
46.246.84.14:3525
46.246.84.18:3525
46.246.84.4:3525
46.246.84.5:3525
46.246.86.17:3525
46.246.86.3:3525
46.246.86.4:3525

# Reference: https://www.virustotal.com/gui/file/c977547895603a89607e183ddfc6ed012fe41b5f3ce43fb5e441f3520c49822d/detection

46.246.4.11:7080

# Reference: https://www.virustotal.com/gui/file/aeaa1d0b93a6bb7b94c8afcea3c4f33558a94b6543974bbe51ce422c9ab99d5a/detection

46.246.14.15:5552
46.246.4.11:5552

# Reference: https://www.virustotal.com/gui/file/7e0420ae96442a21ec5590e6b8c208ada69261dfe9e9de26a84948bab6923247/detection

46.246.4.11:2054

# Reference: https://www.virustotal.com/gui/file/6869b06b409ae22f8da233ee227971a969fb876d5d1ae1dd852df55437973e7a/detection

46.246.14.212:1030

# Reference: https://www.virustotal.com/gui/file/0001063ad19fa39f63b3e89b0881033f713079e987401a5318d7e64814ccdcb8/detection
# Reference: https://www.virustotal.com/gui/file/6ecfa1078ab1013458281e9fb98b48690b411cc59853ece3ebe53e88723ec01c/detection

178.18.10.14:1604
nnnnnfff.ddns.net

# Reference: https://www.virustotal.com/gui/file/0003d7b8be4345d0a6666b3c27790e49e687f81a9fd5755e11061e5163828249/detection

213.7.80.127:5552
51.68.86.21:6666
regrowth.ddns.net

# Reference: https://www.virustotal.com/gui/file/870874c51034d5a34e75dea92d7b84268d41bce6e5eef101fb653f28b9c7e859/detection

18.228.115.60:26994
18.229.146.63:26994
18.231.93.153:26994
54.94.248.37:26994

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-12-17)

103.212.81.159:4001
107.2.6.1:5552
141.255.145.87:1177
146.19.230.52:4456
147.185.221.17:9847
147.50.253.242:1177
172.94.4.171:7772
18.156.13.209:18490
18.157.68.73:18490
18.192.93.86:14218
18.197.239.109:13549
18.197.239.5:14218
18.228.115.60:15776
18.229.146.63:12537
18.229.146.63:15776
18.229.248.167:12537
18.229.248.167:15776
18.231.93.153:12537
185.254.37.137:7788
185.38.142.252:443
209.126.4.184:1177
211.46.138.35:5552
212.90.36.66:5552
3.121.139.82:18064
3.124.67.191:10888
3.126.224.214:10888
3.126.37.18:14218
3.126.37.18:18490
3.127.138.57:18490
3.127.59.75:18064
3.66.38.117:12419
3.68.171.119:12419
3.68.171.119:13549
3.68.56.232:10888
3.69.115.178:12419
3.69.115.178:13003
3.69.157.220:13003
31.28.240.86:1080
35.157.111.131:10888
37.209.239.84:5552
45.141.27.54:6522
45.67.229.124:7777
52.28.112.211:18064
52.28.247.255:12419
52.28.247.255:13003
52.28.247.255:13549
54.94.248.37:12537
54.94.248.37:15776
82.117.255.113:1525
85.108.113.75:1604
87.65.150.78:5552
89.23.99.53:332
90.11.66.45:5552
001anonimo.duckdns.org
1234567bbbhasn.ddns.net
account-stevens.at.ply.gg
adminash.duckdns.org
amman.duckdns.org
argentina1100.ddns.net
atefyatef.ddns.net
being-awards.gl.at.ply.gg
construction-circles.gl.at.ply.gg
dahom502.ddns.net
damential.ddns.net
dark100.hopto.org
dnsbase505.ddns.net
dolaaultra.no-ip.biz
dushengsistema.duckdns.org
fdsasda.ddns.net
hostbolvan.hopto.org
ibrahim123200.no-ip.biz
kaisosnavas17.ddns.net
kevinmitnick121.dushengsistema.duckdns.org
m5tlhackerwlak.ddns.net
mrwan.hopto.org
privatekey-41054.portmap.host
privatekey-64986.portmap.host
quintoelemento22.duckdns.org
results-ownership.gl.at.ply.gg
secded21.duckdns.org
system-reported.gl.at.ply.gg
thuramtfm.duckdns.org
toys-bouquet.gl.at.ply.gg
vlad71.hopto.org
web3.hopto.org

# Reference: https://www.virustotal.com/gui/file/2763cd6052061ee9f2cdc2b0b7140a156677f2b2f3165bf38796023e3d499837/detection

141.255.150.199:1177
fahad2002.hopto.org

# Reference: https://www.virustotal.com/gui/file/abdd3a1d93c08ec6759b73c97c28fd8ee3527ee022b503270d1ec525dcca347f/detection

141.255.150.196:1177
blackgokuu.hopto.org

# Reference: https://www.virustotal.com/gui/file/d2313ac3818f07904ecc9fe35abe9b3af136521abe6e42c6c8fbe3ec62d97812/detection

jheysonnc.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.150.199/relations

gabriel0802.duckdns.org
henriquedebruna.duckdns.org
serverstupid.ddns.net
sj0802.duckdns.org
zabi34.ddns.net

# Reference: https://www.virustotal.com/gui/file/04b4fbb1efac0e311b4a28d3a230d7307c0b473b13edcce00cefff468d61824c/detection

141.255.153.11:5552
141.255.157.165:5552
141.255.159.206:5552
37.236.97.13:5552
37.236.97.18:5552
37.236.97.24:5552
37.236.97.31:5552
37.236.97.43:5552
37.236.97.45:5552
37.237.201.33:5552
37.238.151.120:5552
37.238.151.132:5552
37.238.151.133:5552
37.238.151.160:5552
37.238.151.164:5552
37.238.151.39:5552
37.238.151.47:5552
37.238.151.74:5552
37.238.40.8:5552
37.239.134.84:5552
91.109.178.12:5552
91.109.178.2:5552
91.109.180.6:5552
91.109.180.7:5552
91.109.182.4:5552
91.109.188.5:5552
91.109.190.6:5552
aali25465.ddns.net

# Reference: https://www.virustotal.com/gui/file/7f4d82a156de71e929f6d93c621c2e7076dcf24574c545106c735b42929eb22a/detection

jawa19.hopto.org

# Reference: https://www.virustotal.com/gui/file/2558f56d4650e5d21c4f3292da50be13a06f50bbc840e326245105ca8333c410/detection

matheusemeulindo.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2023-12-24)

102.40.46.101:1177
141.255.145.242:1177
141.255.145.89:1177
141.255.146.183:1177
141.255.152.15:19811
141.255.159.46:1177
147.185.221.16:3958
147.185.221.16:56591
147.185.221.17:24544
147.185.221.17:30710
147.185.221.17:47287
176.29.41.251:8000
177.7.164.13:1177
18.156.13.209:19354
18.156.13.209:19483
18.157.68.73:12460
18.157.68.73:15020
18.157.68.73:19354
18.157.68.73:19483
18.158.58.205:12816
18.158.58.205:13017
18.158.58.205:13064
18.192.93.86:12460
18.192.93.86:15020
18.192.93.86:19354
18.197.239.109:10298
18.197.239.5:14776
18.197.239.5:15020
18.198.77.177:13739
18.228.115.60:10977
18.228.115.60:12288
18.229.146.63:12288
18.229.146.63:13352
18.229.248.167:10977
18.229.248.167:12288
18.231.93.153:10977
18.231.93.153:12288
18.231.93.153:12944
185.71.67.60:6522
221.154.107.221:8080
3.121.139.82:13739
3.124.142.205:13328
3.126.37.18:19354
3.126.37.18:19483
3.127.138.57:12460
3.127.138.57:19483
3.127.181.115:13064
3.127.181.115:19866
3.127.253.86:13739
3.64.4.198:12064
3.64.4.198:13064
3.66.38.117:10298
3.66.38.117:14402
3.67.112.102:12816
3.67.112.102:17450
3.67.161.133:12064
3.67.161.133:12816
3.67.161.133:13017
3.67.161.133:13064
3.67.161.133:19866
3.67.62.142:12064
3.67.62.142:13017
3.67.62.142:17450
3.68.171.119:14402
3.69.115.178:10298
3.69.115.178:14402
3.69.157.220:10298
3.69.157.220:14402
45.32.159.208:1177
46.246.12.15:2054
52.28.247.255:14402
54.94.248.37:10977
54.94.248.37:13352
95.54.8.107:3112
anysh0p.servebeer.com
discordsh.kro.kr
hip-snakes-trade-82-45-123-4.loca.lt
j0k3r420.ddnsking.com
magas69.tk
moriartynjratka.myftp.org
msspools.https443.com
myvnc.myftp.biz
settings8888.geoiplookup.live
sxtrm.myftp.biz

# Reference: https://www.virustotal.com/gui/file/e0e7374b1ef277b72dd90631fb6789d20416eb22f84f64c2101f95066efa2bbe/detection
# Reference: https://www.virustotal.com/gui/file/2f5b5a9b202f0b193fe20bdbdcd3bd9c5a66dbc6c9747914e1f0d4f3bf0e225e/detection

141.255.145.227:4444
141.255.150.169:4444
141.255.151.191:4444
141.255.153.156:4444
141.255.156.33:4444
141.255.159.100:4444
141.255.159.118:4444
shllfast2013.ddns.net

# Reference: https://www.virustotal.com/gui/file/218b6c086a5ca4718c5776995e11d399e2a694730a35a44d882526cbbb7a1bc6/detection

141.255.144.252:1177
141.255.144.43:1177
141.255.144.60:1177
141.255.145.103:1177
141.255.146.111:1177
141.255.146.183:1177
141.255.150.150:1177
141.255.151.5:1177
141.255.158.43:1177
141.255.158.95:1177
141.255.159.161:1177
141.255.159.170:1177
141.255.159.177:1177
141.255.159.188:1177
141.255.159.233:1177
141.255.159.238:1177
141.255.159.29:1177
84.196.37.209:1177
141.255.144.252:1717
141.255.144.43:1717
141.255.144.60:1717
141.255.145.103:1717
141.255.146.111:1717
141.255.146.183:1717
141.255.147.134:1717
141.255.150.150:1717
141.255.151.240:1717
141.255.151.5:1717
141.255.158.43:1717
141.255.158.95:1717
141.255.159.161:1717
141.255.159.170:1717
141.255.159.177:1717
141.255.159.188:1717
141.255.159.233:1717
141.255.159.238:1717
141.255.159.29:1717
141.255.159.83:1717
84.196.37.209:1717
al5al015.ddns.net

# Reference: https://www.virustotal.com/gui/file/40260c3608ea28115cfd68818059634d40ce7b1c41f06339e944d1333beba139/detection
# Reference: https://www.virustotal.com/gui/file/61d05ac8330f31b94c0a648177d51be0373962e2d2b4a9c519ac1617e8c9e841/detection

188.161.179.161:5552
sudo.ddns.net

# Reference: https://www.virustotal.com/gui/file/2f12ba69b8712d424f9292f479e86d1aa32f683a1d945699179346feb8b621e1/detection
# Reference: https://www.virustotal.com/gui/file/ed5143286fdc05e9de8ef6bfa903d0ff36af2f861cc5bf32e081fbaf06f90cc2/detection

5.225.60.141:6198
torminator.ddns.net

# Reference: https://twitter.com/netresec/status/1744378756641288517

147.185.221.17:58297

# Reference: https://twitter.com/K_N1kolenko/status/1744614256484474895
# Reference: https://www.virustotal.com/gui/file/438f2faa604d9a0bb38970294c814f473eded0c5c62eceb4c120230944200cf4/detection
# Reference: https://www.virustotal.com/gui/file/0932b8f8a5a27562f8b5d9cc6a5156a13ad63ed9fd109431d9fe437ea690919a/detection
# Reference: https://www.virustotal.com/gui/file/011000d4b36bf9c9a5744c3ad57561420dceb6d98a65eb39ce40b685607e26b9/detection

147.185.221.16:1773
141.255.145.28:4444
141.255.146.146:4444
141.255.150.203:4444
141.255.152.150:4444
namydalis2023.ddns.net

# Reference: https://www.virustotal.com/gui/file/c62a19295b0e7fe56135d786dad65b1e2773eea90733799c0e068bd11bdaaa47/detection

46.246.4.8:2054
clarosecurity-com.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ffbdf132128ccce0bc9bc623d66f9c9d9b249cc210b633e395b33717ca45c0a2/detection
# Reference: https://www.virustotal.com/gui/file/ae901b23f2da9336815c25a8c3d114f620a70dc9665d5586d32d8f61ac5a6656/detection
# Reference: https://www.virustotal.com/gui/file/adc87aac71b24c26d516b78f736ab2d4103343db30054b7d985d71aaedf65aa5/detection

178.73.192.21:1337
46.246.4.8:187
46.246.4.8:9090
demand.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/181.134.20.211/relations
# Reference: https://www.virustotal.com/gui/file/5b512d0e5174cdbeccf9114781d1032cdf15c340000a6fc8aed7946ea59383c2/detection

181.134.20.211:2019
archazzul.duckdns.org
bogoenvi.duckdns.org
bogotaenvio.ddns.net
proandre.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b73abf4b325bcb6b36fa8be012931031101e602470369d3d771ea7e4a60733b9/detection

23.237.25.134:81
officesec.webredirect.org

# Reference: https://www.virustotal.com/gui/file/b0b1754d4029fa9d14e48d8b01c3dcece81c685f6bf79c1a8e9a65e510b98239/detection

23.237.25.134:5050
officesec.ydns.eu

# Reference: https://www.virustotal.com/gui/file/7fab6a28c04dbd5ad8b2a83ab418df27574aa1bd28c3875b00016535250a4f9b/detection

23.237.25.134:5025

# Reference: https://www.virustotal.com/gui/ip-address/23.237.25.133/relations

2022abril.duckdns.org
28marzo.duckdns.org
marzo23.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5fe417e86fbb66ef7fe11ec07d52013af9d7939f34c9a2d02fe060420c5b04c0/detection
# Reference: https://www.virustotal.com/gui/file/b6dcd8aea48a1ac8ffcf8cbd805db9e751baa4e6452b715d6dbccd9615a247c8/detection

46.246.80.205:2001
febrero152022.duckdns.org
hkhkhk.ddns.net
otrofebrero.duckdns.org

# Reference: https://twitter.com/noexceptcpp/status/1745839114283270198
# Reference: https://app.any.run/tasks/ffb4866b-456a-4a79-8f4e-4fe8184243d4/

18.229.146.63:21412

# Reference: https://twitter.com/ScumBots/status/1746957322906185886
# Reference: https://www.virustotal.com/gui/file/3b6328bc9c4ed0d726532f54199f241477c0f621577c3e0d47cadc84419f901c/detection

200.173.124.79:1177
spykronic.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-01-15)

13.229.3.203:18777
18.136.148.247:18777
18.198.77.177:15595
18.228.115.60:12232
18.228.115.60:13904
18.229.146.63:12232
18.231.93.153:12232
35.158.159.254:15595
41.99.178.129:1177
52.220.121.212:18777
52.28.112.211:15595
54.94.248.37:12232

# Reference: https://www.virustotal.com/gui/file/9fcede2fe80c31c00102d9a01cbce1e6110c8d7f473d43111adbcd13fa877132/detection
# Reference: https://www.virustotal.com/gui/file/02e505dc7b4b2c438d1413310777d2092c7f45753c9379f1b47dd4740728dda7/detection

187.19.179.225:1010
safeprojectbr.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d75b4df1105730904b312f15d499e935f60abda47d36aa7dc2efc51f46df56a1/detection
# Reference: https://www.virustotal.com/gui/file/731220ac2cf7e9b9cd6b9ba53630c834af814e1cd5130c0258b7aea56ef3ba49/detection

119.154.138.58:5552
119.159.176.100:5552
119.159.189.231:5552
182.188.227.146:5552
182.189.249.69:5552
jazz111.hopto.org

# Reference: https://www.virustotal.com/gui/file/f3f54289806a7b51c97e3bc76e86759b70e673b1e191d2c354b08648dc98cc6c/detection
# Reference: https://www.virustotal.com/gui/file/9b100a9543e0729551e690fcf433da65667033c1d84f27bc6ed1938ee52a8d99/detection

01112005123.hopto.org

# Reference: https://www.virustotal.com/gui/file/44bd9d6a498ed0771813194e7a426f05f75ac96525518075c032bd74cc81a127/detection

oswecua.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f8bfedaf1e3ed91c0b95f891e9a5cea76c273d707f14d9bbd0f0f5e5fbca71b1/detection

46.246.6.77:2214
negamerproteiper87.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1748738990679671087
# Reference: https://www.virustotal.com/gui/file/59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031/detection

20.201.119.163:1026

# Reference: https://www.virustotal.com/gui/file/edd3693089ac4a0c7bd2fb8453d684db087d771efc674c9c6157d99ba3faf295/detection

139.180.171.110:22096
vibrant-frost-53467.pktriot.net

# Reference: https://www.virustotal.com/gui/file/e5d52eb607a215419fcfeeb58a8ab61680da4cb480598de4bf4299624e19f4d4/detection

20.234.71.164:1021

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-01-23)

141.255.159.169:5552
141.255.159.227:1177
147.185.221.18:1445
147.50.253.167:1177
147.50.253.9:1177
165.227.31.192:22509
18.156.13.209:13957
18.158.249.75:12517
18.158.249.75:14834
18.158.249.75:14937
18.158.249.75:15184
18.158.58.205:15617
18.192.31.165:14834
18.192.31.165:14937
18.192.31.165:15184
18.198.77.177:10929
18.198.77.177:16495
18.228.115.60:17000
18.228.115.60:19025
18.229.146.63:14744
18.229.146.63:17000
18.229.248.167:14744
18.229.248.167:18912
18.231.93.153:12706
18.231.93.153:14744
18.231.93.153:17000
191.242.28.210:1177
192.121.82.119:5553
20.201.116.50:1024
3.121.139.82:16495
3.124.142.205:12517
3.124.142.205:14834
3.124.142.205:14937
3.124.142.205:15634
3.124.142.205:25505
3.124.67.191:10369
3.125.102.39:12517
3.125.102.39:14834
3.125.102.39:15184
3.125.102.39:15634
3.125.102.39:25505
3.125.188.168:10369
3.125.209.94:12517
3.125.209.94:15634
3.125.209.94:25505
3.126.224.214:10369
3.126.37.18:13957
3.127.181.115:15617
3.127.253.86:10929
3.127.253.86:16495
3.127.253.86:19378
3.127.59.75:16495
3.127.59.75:19378
3.66.38.117:12954
3.67.15.169:10369
3.67.15.169:14434
3.67.161.133:15617
3.67.62.142:15617
3.68.56.232:14434
35.158.159.254:10929
35.158.159.254:16495
45.81.232.176:1177
52.28.112.211:16495
52.28.112.211:19378
54.94.248.37:14744
54.94.248.37:17000
92.63.178.58:442
95.173.255.238:4444

# Reference: https://twitter.com/K_N1kolenko/status/1749313210027503840

164.155.231.13:5552

# Reference: https://twitter.com/ScumBots/status/1749977148855595009
# Reference: https://www.virustotal.com/gui/file/7e1441a69d94d63e8038883c2e11640b9184e88e3106c1f599fd52fa11f5797f/detection

6ded-177-50-200-148.ngrok-free.app

# Reference: https://www.virustotal.com/gui/file/dbe98e518832e5c6611af2df7be37d7ba31a0e64bfdf2e2f0874fe8fe70181b0/detection

91.245.44.46:4445

# Reference: https://www.virustotal.com/gui/file/0aab0a87ef6c2323ff7e456882c6b0c958d635300656c098b6a071b37b222c4e/detection

141.255.153.59:1177
hackingfoxer.hopto.org

# Reference: https://www.virustotal.com/gui/file/43d182e3ae08c5f373b4ef39fdfbae58827f7f0ec1bce3a2723cd38fd2999f46/detection

41.248.12.241:1177
kesrar1004.ddns.net

# Reference: https://www.virustotal.com/gui/file/da949abde03e6341eeed42cfe3367b7040a6aeeaaf3a1db6c82d91a761cb85a9/detection

141.255.144.137:1177
141.255.144.225:1177
141.255.146.99:1177
141.255.151.77:1177
141.255.154.218:1177
141.255.155.45:1177
141.255.157.103:1177
141.255.157.238:1177
reactorbrasil.duckdns.org

# Reference: https://www.virustotal.com/gui/file/50280f82e961f92266211b43d20525fc25d53146d384f50e619281c523f07497/detection
# Reference: https://www.virustotal.com/gui/file/44674d3dc6435735fc59215f06036caf72e22a779790a5a61b966e5bdd7d3689/detection
# Reference: https://www.virustotal.com/gui/file/3ccae56cb0bc5549be0b53cf005b3cf439a8c7cb86a088d224d7c52216387bb4/detection

141.255.144.137:1111
141.255.144.225:1111
141.255.146.99:1111
141.255.151.11:1111
141.255.154.218:1111
141.255.155.45:1111
141.255.157.103:1111
141.255.157.238:1111
yacine10-boui.ddns.net

# Reference: https://www.virustotal.com/gui/file/2ea8697d561bd17e934a39b7f561a75ca07c15f4f9247a15695cbc56cff2ec98/detection

141.255.144.136:92
41.109.4.90:92

# Reference: https://www.virustotal.com/gui/file/abad3bd236e29003ae45916c6e45ed708cc45807db85329134d2410364c0cceb/detection
# Reference: https://www.virustotal.com/gui/file/299c7796f65c30bdb52d844bcf563ec0ab0b7d2272d82f29314d8ee3347782d1/detection

141.255.144.136:1720
141.255.145.171:1720
141.255.152.21:1720
141.255.156.199:1720
141.255.158.56:1720
185.234.103.7:1720
141.255.144.136:2500
141.255.145.171:2500
141.255.152.21:2500
141.255.156.199:2500
141.255.158.56:2500
185.234.103.7:2500
asdfasdf1212as.servebeer.com
aselaecc22.serveminecraft.net

# Reference: https://www.virustotal.com/gui/file/f93b0fd522d09b7c9a3e9fa74c52033c03e63dc1ac28dc557bcf678d2ce7443b/detection
# Reference: https://www.virustotal.com/gui/file/c7f73698a8a1a9873f817e77c76abdc23a321e3feb32e30509d7edd50424e2c7/detection
# Reference: https://www.virustotal.com/gui/file/0901da019fe36c780e37b5c7890455f77e62947e23b6f6d5aaae00268784a754/detection

141.255.144.136:1604
141.255.145.171:1604
141.255.151.229:1604
141.255.152.21:1604
141.255.156.199:1604
141.255.158.56:1604
157.39.103.108:1604
185.234.103.7:1604
bahadursipahibhago.ddns.net

# Reference: https://www.virustotal.com/gui/file/8d1a5d72b5b3aafbccaa9840699ff15ed9162bc737406bbf03362d6165c141f7/detection

geovannehacking.ddns.net

# Reference: https://www.virustotal.com/gui/file/be11cad38a2e4c03a801de96c38dadd105f6275e9b35d9e7728629f3465cc142/detection

141.255.145.118:22003
ltcross123.ddns.net

# Reference: https://www.virustotal.com/gui/file/7e7c1fe81c50e3397f944991e6aa2ae2aa532c2093cde6fbc6bc89144884cea3/detection

141.255.158.81:1177
mateus666.no-ip.org

# Reference: https://www.virustotal.com/gui/file/fa2238935f12a373696730e7037a27b4d1c0eaf77828827b925cfc3d93f1bef8/detection

141.255.144.136:6060
141.255.147.182:6060
141.255.151.101:6060
141.255.152.70:6060
170.82.181.7:6060
51.254.36.196:6060
netstat.duckdns.org

# Reference: https://www.virustotal.com/gui/file/12783ab5661ef00ad45ae3a8ddfa4ff367405f0441eba2ed14cec62b59a1db47/detection

141.255.151.142:1177
oussama2003.hopto.org

# Reference: https://www.virustotal.com/gui/file/783e9d3c41a4cb14d772813a453d64cf9fa589e63f6335353079b3a8f23339f4/detection

rassed321.publicvm.com

# Reference: https://www.virustotal.com/gui/file/af7a9e8d5daa8e8d3906a61adc5376c5ef24b5827aaf8ea11baf3d390101d686/detection

saadalhlale1988.ddns.net

# Reference: https://www.virustotal.com/gui/file/6e1df620a754aadb3d470d1ac2c9f2dd981a1f56911119903b97300890e04a0c/detection

cleissandroo.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/1925a1426f154478099db08d71e45b8c9d038e9ad50e2852f238aa31cbf1b11e/detection

141.255.144.139:5552
mrzizom.myftp.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.139/relations

119900.ddns.net
albashkani89.no-ip.biz
crossfire-lammer.ddns.net
fsecity.hopto.org
iloveyoubaby.sytes.net
jpkstv1.duckdns.org
spyburg.ddns.net
sx2.ddns.net
system64.linkpc.net
xxxooo.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.138/relations

102030ph.ddns.net
a3lk.ddns.net
dedier.duckdns.org
freefirebr2020.ddns.net
mandarin5553.ddns.net
melblackinggg.hopto.org
oioioi123.duckdns.org
prazerpsycho.duckdns.org
xhunter987.publicvm.com

# Reference: https://www.virustotal.com/gui/file/00a36aab5b2b31735ca7a8925e5bb2c0c0fd7a0b94e417fc1bd8e52db5950a16/detection

141.255.144.133:48443

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.133/relations

0x47art.duckdns.org
bboy1.ddns.net
fqcebook.servebeer.com
sounou.ddns.net
yousefj2121.ddns.net

# Reference: https://www.virustotal.com/gui/file/d758a783e06352386d86cf66482b7465c1ec0bdbfb939564e342612ec925494a/detection

141.255.144.134:5554

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.134/relations

bimbo09.ddns.net
calculadora.ddns.net
fuck69x.ddns.net
gingaltooop.ddns.net
haizerspzl9.ddns.net
lioncup.ddns.net
lucasstress.duckdns.org
piranhavem.hopto.org
proxyfree.duckdns.org
querendoqueimarne.hopto.org
youcego.ddns.net

# Reference: https://www.virustotal.com/gui/file/4268895df61e8956a85ffc40e54aae50029af75283b6eb693e3c7beeda55d393/detection

141.255.144.131:1995
www4234.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.131/relations

1r0a-1phuja9rb.reserva01.duckdns.org
ahmedabusisi10.no-ip.biz
aqrrb1kimxxl.babaloo.duckdns.org
ayyad1.ddns.net
blackoopsm.ddns.net
hackerss1.no-ip.biz
hackingadam.myvnc.com
jinjone6789.ddns.net
josefreitas01.ddns.net
loveharith123.dynu.net
raimundobmbmmk.ddns.net
tramponovo123aleatorio.duckdns.org
younes1234.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.130/relations
# Reference: https://www.virustotal.com/gui/file/08a9456805776f24452c301fd3e704aec88f08e5fe687c87b0c724d203a0d325/detection

141.255.144.130:5552
141.255.151.155:5552
akkot543.ddns.net
aliking1122.ddns.net
igtdsce.ddns.net
isolado.duckdns.org
leakten.twilightparadox.com
natto000777.ddns.net
negaobranco.ddns.net
xommox.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/1b2a908ebf3cef89d47cc6f93588305004c13f0485274ffda5a919d556a779d4/detection

imcrying.ddns.net

# Reference: https://www.virustotal.com/gui/file/32451738664a47da683578262945fb5e323e3e3f3d5ec1dd7056cd857f520c51/detection

129.208.129.71:1177

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.128/relations

coucoume.ddns.net
d7oomf15.ddns.net
fox69.no-ip.biz
xblack77vp.ddns.net
youtube35820.3utilities.com

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.135/relations
# Reference: https://www.virustotal.com/gui/file/6838fbe0c7fa115f151dfd0c7d1ba0178366c0de8bcdfb1521d293abdc784e8a/detection

141.255.144.135:5553
141.255.144.57:5553
185.166.24.3:5553
bielzeirasjc.duckdns.org
callzeus.ddns.net
hknj.duckdns.org
jamalnajjar123.ddns.net
jonz89.ddns.net
malekasakra000999.ddns.net
serverconeecthouse.ddns.net
smile88.hopto.org
sofianvps.hopto.org
sorrisonh6.ddns.net
teste12345.ddns.net
wortk.hopto.org

# Reference: https://www.virustotal.com/gui/file/dad18cc5fb9a471bc234b95da39dadd0c4aff3f02a240c808d13cb09c458a7eb/detection
# Reference: https://www.virustotal.com/gui/file/cf83ec5266ae8c2e2a3610ec735459cb4be70229e58f52b70d7e0f1d519a1e72/detection
# Reference: https://www.virustotal.com/gui/file/aa700578b5049d538faaf4e034d30f1c9fc098b8d16ec39c29b6d45940e3c443/detection
# Reference: https://www.virustotal.com/gui/file/61bf984752aafb7e674ed4f51dbfb1029e7a5f5294b0dd6b1ec05a2cc4b250a8/detection
# Reference: https://www.virustotal.com/gui/file/22fd4d4648abc31a8d403b38fd1b70c28258e487b1ea49dcd799a98d540d67fb/detection

156.204.125.193:5552
156.204.228.11:1177
156.204.228.11:5552
197.46.56.46:1177
197.46.56.46:5552
ghostprohack.ddns.net

# Reference: https://www.virustotal.com/gui/file/f63a22853e8acb166b8283111dbed89cb76015a0af26a8dc57202a2bff0e7c61/detection

37.236.176.40:1177
37.236.176.55:1177
37.236.176.66:1177
37.236.176.89:1177
xnxx11.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.32/relations
# Reference: https://www.virustotal.com/gui/file/65109c597e19db2b7d1019c00fc349075517da2c4fa45e54125c8b6a7b1a329b/detection

141.255.144.32:1177
141.255.145.247:1177
boyboy.myftp.org
caralhosaci.duckdns.org
coxinhatemperada.ddns.net
gabrielgosit.duckdns.org
gemz.ddns.net
helfa08022.duckdns.org
luissuarez1.ddns.net
mhamood22.ddns.net
microsoftsync.webredirect.org
nabusr.ddns.net
pruebahost.hopto.org
retlawcell.ddns.net
silent911.ddns.net
svchosit.ddns.net
xnxx2020.no-ip.org

# Reference: https://www.virustotal.com/gui/file/948b299f55c2171f98de8d08218510166d90f11621295917df0e18d43a15f618/detection

141.255.158.37:7077
blacklaabel.duckdns.org
worthofkings.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.75/relations
# Reference: https://www.virustotal.com/gui/file/450c9de92c0676f14b7055abb7346ac0816138b23801e183c3fb4379a3f6b4a1/detection

141.255.144.75:1177
ahmed188.ddns.net
felipehostttc.duckdns.org
jasime1968.no-ip.biz
justyou.ddns.net
mask25.ddns.net
mintyland.duckdns.org
paowks.duckdns.org
projetoaberto2019.duckdns.org
servicesgoogle.hopto.org
ss7exe.ddns.net
theripperjohn3.ddns.net
worthofkings.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0ccd62578aa12f696d59b14b1be640c6c7111a435d310a8dbcec8c190196b64e/detection

141.255.144.84:5050
algeren.hopto.org

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.36/relations

2512728.ddns.net
addnj.ddns.net
arabsec.dynu.com
gtegvbg234354.no-ip.biz
jocker-tn.ddns.net
leginegox.ddns.net
lofico.ddns.net
rezoon123.hopto.org
softwaregod.duckdns.org
system64.ddns.net
vitimashacked.duckdns.org
wfhaking.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.61/relations

ahmadhassan2vip.publicvm.com
cheatsvalorant01.duckdns.org
claylc.duckdns.org
darkzinho337.ddns.net
oaelgsar.myq-see.com
thelokopvp.hopto.org
yazeed1993.hopto.org
zpz8games.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.42/relations
# Reference: https://www.virustotal.com/gui/file/d90269a73250fa98b42445a5195234a20f50ae90bfb712591c3c1cb1fe2eeed4/detection

141.255.144.42:999
ali251.no-ip.biz
claodflairit.sytes.net
hass16mugi.publicvm.com

# Reference: https://www.virustotal.com/gui/ip-address/141.255.144.50/relations
# Reference: https://www.virustotal.com/gui/file/132601e5707fa1a6ed9b3e3426f8d21fea32b042b01767768ef5db2eae15d300/detection

141.255.144.50:1996
al00.zapto.org
2killfoox.hopto.org
al00.zapto.org
boberto.hopto.org
bololofithaha.ddns.net
c448.kro.kr
chrome134313.gleeze.com
me2020.ddns.net
moudihallak.ddns.net
n7r123456.ddns.net
noorzoo1.hopto.org
playstore.servebeer.com
vidaloka676.duckdns.org
xkill.sytes.net

# Reference: https://www.virustotal.com/gui/file/f077ea4eccc1a1924a5021b528107597454ae8b7fa667f7be8ad4e7c895d45e6/detection

159.146.50.117:5
odibdydupwudozwpoioisdsia.000webhostapp.com
zaner12.duckdns.org

# Reference: https://twitter.com/ankit_anubhav/status/1750782544965149138
# Reference: https://www.virustotal.com/gui/file/bb7829a047ba28ed1a189c20ee9117bd149001f0add2c9ff806ee9736aff6599/detection

livepanel.info
mysergiosanz.syncroapi.com

# Reference: https://twitter.com/karol_paciorek/status/1751972910191784072
# Reference: https://www.virustotal.com/gui/file/e1e792da45d40e98763c3c9a1e50084c83cf20e6072f1337c8a46d2d1ae28293/detection

147.50.253.30:6522

# Reference: https://www.virustotal.com/gui/file/fc016fa8ab1ce3a8708c49257b2713fc2174b06dc0624fead1394ba6dd49b6e0/detection

51.68.152.226:1177

# Reference: https://www.virustotal.com/gui/file/dd7f3e07e5458e887a1291ebe6d3019cb4c01a9d4bec72ea7d9b8eae54948bb7/detection

vikapip.ddns.net

# Reference: https://www.virustotal.com/gui/file/dac82b09cb4a053882deacaf42dc1e088bd062106889d9c7d155c3d24f7eda45/detection

51.68.180.4:1177
51.68.180.4:81
hehegokhan.duckdns.org

# Reference: https://www.virustotal.com/gui/file/cb8b6e5c3c6e50c054d737bd903af8d501811e13df49b113e4926bfbddf21a9e/detection

nikito1.ddns.net

# Reference: https://www.virustotal.com/gui/file/c854d2d38a78a92d644cc8946e0f6cb371cf00ec4da63f3ffdb78f14dbcc6ec5/detection

51.68.152.226:1177
googel.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/51.68.152.226/relations

almusawa.ddns.net
blackbird71.diskstation.me
francavenus.duckdns.org
haberci1.giize.com
jester321.duckdns.org
kinglove562.zapto.org
lire.duckdns.org
microsfit.duckdns.org
netro.ddns.net
nteech1.ddns.net
onqaz.ddns.net
onqaz.myftp.org
onqaz.sytes.net
parlo.duckdns.org
rap.linkpc.net
serverhassio.duckdns.org
wizarddingy.sytes.net

# Reference: https://twitter.com/SarlackLab/status/1751722118604018092

206.189.80.59:22614

# Reference: https://twitter.com/SarlackLab/status/1751938630052966657

3.17.7.232:14868
3.22.30.40:14868

# Reference: https://twitter.com/SarlackLab/status/1752029333919518997
# Reference: https://www.virustotal.com/gui/ip-address/147.185.221.18/relations

147.185.221.18:15309
18.ip.gl.ply.gg
accommodation-solid.gl.at.ply.gg
according-north.gl.at.ply.gg
act-mess.gl.at.ply.gg
active-avatar.gl.at.ply.gg
activities-puzzle.gl.at.ply.gg
ad-railway.gl.at.ply.gg
address-si.gl.at.ply.gg
agency-adapter.gl.at.ply.gg
air-registration.gl.at.ply.gg
all-few.gl.at.ply.gg
allows-adjustments.gl.at.ply.gg
alternative-whenever.gl.at.ply.gg
among-fire.gl.at.ply.gg
an-numbers.gl.at.ply.gg
analysis-maria.gl.at.ply.gg
another-contamination.gl.at.ply.gg
answer-snap.gl.at.ply.gg
anti-pierce.gl.at.ply.gg
apple-disputes.gl.at.ply.gg
apply-memorabilia.gl.at.ply.gg
approach-convenience.gl.at.ply.gg
approved-operated.gl.at.ply.gg
archive-touched.gl.at.ply.gg
art-coordinate.gl.at.ply.gg
artists-signing.gl.at.ply.gg
as-tobago.gl.at.ply.gg
asked-inexpensive.gl.at.ply.gg
associated-satisfy.gl.at.ply.gg
association-depends.gl.at.ply.gg
authority-keeping.gl.at.ply.gg
authors-nov.gl.at.ply.gg
auto-benjamin.gl.at.ply.gg
bar-latvia.gl.at.ply.gg
based-ladder.gl.at.ply.gg
bay-gadgets.gl.at.ply.gg
be-validation.gl.at.ply.gg
beauty-electric.gl.at.ply.gg
beauty-preventing.gl.at.ply.gg
because-earrings.gl.at.ply.gg
been-advertisements.gl.at.ply.gg
being-bold.gl.at.ply.gg
believe-apple.gl.at.ply.gg
better-retro.gl.at.ply.gg
bin-orlando.gl.at.ply.gg
bit-bread.gl.at.ply.gg
brands-coaches.gl.at.ply.gg
brands-securely.gl.at.ply.gg
break-meal.gl.at.ply.gg
browser-slave.gl.at.ply.gg
built-rejected.gl.at.ply.gg
button-vary.gl.at.ply.gg
buy-initiative.gl.at.ply.gg
california-industry.gl.at.ply.gg
canada-pope.gl.at.ply.gg
capacity-bet.gl.at.ply.gg
care-application.gl.at.ply.gg
carolina-berry.gl.at.ply.gg
case-marks.gl.at.ply.gg
cases-suicide.gl.at.ply.gg
casino-strongly.gl.at.ply.gg
changes-beta.gl.at.ply.gg
chicago-cloud.gl.at.ply.gg
class-murray.gl.at.ply.gg
club-habitat.gl.at.ply.gg
code-aug.gl.at.ply.gg
common-transferred.gl.at.ply.gg
complete-nervous.gl.at.ply.gg
components-acknowledge.gl.at.ply.gg
condition-mounted.gl.at.ply.gg
content-royal.gl.at.ply.gg
continue-nail.gl.at.ply.gg
course-ebooks.gl.at.ply.gg
custom-basically.gl.at.ply.gg
d-remedy.gl.at.ply.gg
dc-accurately.gl.at.ply.gg
deal-hosting.gl.at.ply.gg
death-pole.gl.at.ply.gg
developed-newport.gl.at.ply.gg
disease-webcast.gl.at.ply.gg
division-ot.gl.at.ply.gg
does-rejected.gl.at.ply.gg
double-hospitals.gl.at.ply.gg
drug-commonly.gl.at.ply.gg
during-deeper.gl.at.ply.gg
each-victoria.gl.at.ply.gg
ebay-detail.gl.at.ply.gg
economic-bringing.gl.at.ply.gg
effects-pants.gl.at.ply.gg
electric-mauritius.gl.at.ply.gg
else-movers.gl.at.ply.gg
engine-wi.gl.at.ply.gg
enjoy-logged.gl.at.ply.gg
ensure-lcd.gl.at.ply.gg
entertainment-ignore.gl.at.ply.gg
equipment-nasdaq.gl.at.ply.gg
error-fellow.gl.at.ply.gg
estate-yugoslavia.gl.at.ply.gg
even-bahrain.gl.at.ply.gg
expected-bed.gl.at.ply.gg
expected-identifies.gl.at.ply.gg
family-upload.gl.at.ply.gg
fat-different.gl.at.ply.gg
fax-areas.gl.at.ply.gg
feature-crude.gl.at.ply.gg
features-daddy.gl.at.ply.gg
feb-managing.gl.at.ply.gg
feet-bored.gl.at.ply.gg
file-pursue.gl.at.ply.gg
final-consequently.gl.at.ply.gg
food-fiscal.gl.at.ply.gg
for-pace.gl.at.ply.gg
friday-ebook.gl.at.ply.gg
friends-wellness.gl.at.ply.gg
function-selecting.gl.at.ply.gg
functions-stud.gl.at.ply.gg
gallery-gulf.gl.at.ply.gg
general-remember.gl.at.ply.gg
general-tribunal.gl.at.ply.gg
getting-tariff.gl.at.ply.gg
given-obvious.gl.at.ply.gg
great-fossil.gl.at.ply.gg
ground-gsm.gl.at.ply.gg
groups-construction.gl.at.ply.gg
guest-comp.gl.at.ply.gg
guide-things.gl.at.ply.gg
guides-teaches.gl.at.ply.gg
hall-dt.gl.at.ply.gg
ie-virtual.gl.at.ply.gg
if-poet.gl.at.ply.gg
il-treaty.gl.at.ply.gg
image-domestic.gl.at.ply.gg
included-efforts.gl.at.ply.gg
income-vehicle.gl.at.ply.gg
individual-antibody.gl.at.ply.gg
industry-ent.gl.at.ply.gg
input-flexibility.gl.at.ply.gg
institute-tagged.gl.at.ply.gg
institute-u.gl.at.ply.gg
internet-guestbook.gl.at.ply.gg
jersey-strain.gl.at.ply.gg
john-thong.gl.at.ply.gg
journal-read.gl.at.ply.gg
key-indices.gl.at.ply.gg
king-whole.gl.at.ply.gg
kingdom-haiti.gl.at.ply.gg
kit-german.gl.at.ply.gg
language-obviously.gl.at.ply.gg
least-rebate.gl.at.ply.gg
leave-hrs.gl.at.ply.gg
left-trailer.gl.at.ply.gg
levels-sierra.gl.at.ply.gg
life-architecture.gl.at.ply.gg
light-garcia.gl.at.ply.gg
limited-screens.gl.at.ply.gg
linux-successful.gl.at.ply.gg
listings-low.gl.at.ply.gg
little-paraguay.gl.at.ply.gg
local-cricket.gl.at.ply.gg
login-sterling.gl.at.ply.gg
logo-vanilla.gl.at.ply.gg
looking-florence.gl.at.ply.gg
low-elizabeth.gl.at.ply.gg
mac-compete.gl.at.ply.gg
magazine-zones.gl.at.ply.gg
make-pasta.gl.at.ply.gg
man-bobby.gl.at.ply.gg
management-plug.gl.at.ply.gg
map-gen.gl.at.ply.gg
mar-fact.gl.at.ply.gg
mary-rosa.gl.at.ply.gg
material-ranked.gl.at.ply.gg
memory-tricks.gl.at.ply.gg
menu-portugal.gl.at.ply.gg
message-charm.gl.at.ply.gg
might-shore.gl.at.ply.gg
million-stockings.gl.at.ply.gg
mind-welding.gl.at.ply.gg
mission-anger.gl.at.ply.gg
modified-analytical.gl.at.ply.gg
mountain-damages.gl.at.ply.gg
mountain-observer.gl.at.ply.gg
movie-responses.gl.at.ply.gg
mr-placed.gl.at.ply.gg
navigation-will.gl.at.ply.gg
night-sms.gl.at.ply.gg
no-pubmed.gl.at.ply.gg
notes-argentina.gl.at.ply.gg
nothing-oc.gl.at.ply.gg
ny-weed.gl.at.ply.gg
oh-sw.gl.at.ply.gg
ok-colony.gl.at.ply.gg
ok-killing.gl.at.ply.gg
on-toolbox.gl.at.ply.gg
one-grill.gl.at.ply.gg
options-az.gl.at.ply.gg
other-richmond.gl.at.ply.gg
outside-favorites.gl.at.ply.gg
outside-quad.gl.at.ply.gg
outside-throat.gl.at.ply.gg
over-them.gl.at.ply.gg
overall-negative.gl.at.ply.gg
pa-indices.gl.at.ply.gg
panel-hewlett.gl.at.ply.gg
paper-lightbox.gl.at.ply.gg
paris-remix.gl.at.ply.gg
park-spas.gl.at.ply.gg
payment-aquatic.gl.at.ply.gg
pc-afternoon.gl.at.ply.gg
people-idle.gl.at.ply.gg
people-primarily.gl.at.ply.gg
performance-travelers.gl.at.ply.gg
phentermine-fort.gl.at.ply.gg
photography-ringtones.gl.at.ply.gg
places-mills.gl.at.ply.gg
plans-spatial.gl.at.ply.gg
player-belle.gl.at.ply.gg
plus-subcommittee.gl.at.ply.gg
policy-any.gl.at.ply.gg
policy-ride.gl.at.ply.gg
port-bind.gl.at.ply.gg
pressure-mv.gl.at.ply.gg
pretty-lecture.gl.at.ply.gg
pretty-proprietary.gl.at.ply.gg
prev-ag.gl.at.ply.gg
price-slow.gl.at.ply.gg
project-hairy.gl.at.ply.gg
project-hitting.gl.at.ply.gg
properties-programme.gl.at.ply.gg
protection-stages.gl.at.ply.gg
published-says.gl.at.ply.gg
publisher-aid.gl.at.ply.gg
purchase-globe.gl.at.ply.gg
purpose-routing.gl.at.ply.gg
questions-deer.gl.at.ply.gg
range-ls.gl.at.ply.gg
rate-ericsson.gl.at.ply.gg
receive-exclusively.gl.at.ply.gg
related-alternative.gl.at.ply.gg
relations-cure.gl.at.ply.gg
rentals-dc.gl.at.ply.gg
reply-units.gl.at.ply.gg
reports-determined.gl.at.ply.gg
republic-following.gl.at.ply.gg
required-reaching.gl.at.ply.gg
resource-msgstr.gl.at.ply.gg
right-chemical.gl.at.ply.gg
robert-independent.gl.at.ply.gg
safe-sections.gl.at.ply.gg
says-complications.gl.at.ply.gg
schools-matrix.gl.at.ply.gg
sector-customers.gl.at.ply.gg
senior-resumes.gl.at.ply.gg
senior-vt.gl.at.ply.gg
sep-archive.gl.at.ply.gg
september-tree.gl.at.ply.gg
she-experience.gl.at.ply.gg
shopping-deployment.gl.at.ply.gg
shopping-jar.gl.at.ply.gg
side-image.gl.at.ply.gg
single-gifts.gl.at.ply.gg
sites-example.gl.at.ply.gg
small-dod.gl.at.ply.gg
smith-rack.gl.at.ply.gg
spain-justin.gl.at.ply.gg
spain-leave.gl.at.ply.gg
specified-luggage.gl.at.ply.gg
sponsored-ate.gl.at.ply.gg
st-institution.gl.at.ply.gg
standard-instrumentation.gl.at.ply.gg
states-newcastle.gl.at.ply.gg
station-sixth.gl.at.ply.gg
statistics-unnecessary.gl.at.ply.gg
still-bracelets.gl.at.ply.gg
stories-boulevard.gl.at.ply.gg
story-stunning.gl.at.ply.gg
subjects-feof.gl.at.ply.gg
such-buyers.gl.at.ply.gg
summary-attachments.gl.at.ply.gg
summer-pressed.gl.at.ply.gg
super-meal.gl.at.ply.gg
survey-all.gl.at.ply.gg
survey-dover.gl.at.ply.gg
tax-macro.gl.at.ply.gg
team-bizarre.gl.at.ply.gg
teen-imports.gl.at.ply.gg
testing-rich.gl.at.ply.gg
the-hardcover.gl.at.ply.gg
then-minority.gl.at.ply.gg
these-tobacco.gl.at.ply.gg
they-marriott.gl.at.ply.gg
thing-change.gl.at.ply.gg
thing-korean.gl.at.ply.gg
thing-volvo.gl.at.ply.gg
think-triangle.gl.at.ply.gg
thread-inspiration.gl.at.ply.gg
through-cable.gl.at.ply.gg
times-meters.gl.at.ply.gg
title-file.gl.at.ply.gg
today-minnesota.gl.at.ply.gg
today-tales.gl.at.ply.gg
took-true.gl.at.ply.gg
topics-seas.gl.at.ply.gg
toys-broadband.gl.at.ply.gg
transportation-successfully.gl.at.ply.gg
transportation-yea.gl.at.ply.gg
tue-smilies.gl.at.ply.gg
updated-votes.gl.at.ply.gg
use-flash.gl.at.ply.gg
vacation-ng.gl.at.ply.gg
valid-saint.gl.at.ply.gg
value-purchased.gl.at.ply.gg
various-episode.gl.at.ply.gg
via-eq.gl.at.ply.gg
water-relief.gl.at.ply.gg
we-should.gl.at.ply.gg
wedding-marie.gl.at.ply.gg
well-favors.gl.at.ply.gg
winter-continuously.gl.at.ply.gg
women-tons.gl.at.ply.gg
wood-cg.gl.at.ply.gg
wood-himself.gl.at.ply.gg
youth-compromise.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/1142df24d0e1049a26b115c564a62aed6f01903a2a5ea84ee00d4ecd6989bbc0/detection

ahlehup.club
chanchandomain.club
microsoftofficeservehttpcom.000webhostapp.com
windowsofficeserver.000webhostapp.com

# Reference: https://www.virustotal.com/gui/file/caffc990b18133478cd266593351c4a8a39e4c32e868732d0e786a738a94846b/detection

20.106.168.188:5050
91.109.176.3:5050
91.109.180.10:5050
91.109.180.8:5050
91.109.182.13:5050
91.109.184.8:5050
91.109.186.3:5050

# Reference: https://twitter.com/SarlackLab/status/1753086067459207546

147.185.221.17:9561
agency-fishing.gl.at.ply.gg
almost-rj.gl.at.ply.gg
amazon-nr.gl.at.ply.gg
answer-sql.gl.at.ply.gg
artist-burton.gl.at.ply.gg
artists-keyboards.gl.at.ply.gg
asia-trip.gl.at.ply.gg
building-scared.gl.at.ply.gg
but-passed.gl.at.ply.gg
canada-pc.gl.at.ply.gg
capacity-revealed.gl.at.ply.gg
central-backing.gl.at.ply.gg
coming-arctic.gl.at.ply.gg
could-enhancements.gl.at.ply.gg
create-centuries.gl.at.ply.gg
custom-involves.gl.at.ply.gg
date-aimed.gl.at.ply.gg
dc-peer.gl.at.ply.gg
de-collect.gl.at.ply.gg
deal-md.gl.at.ply.gg
death-clip.gl.at.ply.gg
degree-yourself.gl.at.ply.gg
delivery-stronger.gl.at.ply.gg
device-yahoo.gl.at.ply.gg
did-simple.gl.at.ply.gg
do-realtor.gl.at.ply.gg
each-selection.gl.at.ply.gg
excellent-frequent.gl.at.ply.gg
existing-grace.gl.at.ply.gg
express-cached.gl.at.ply.gg
fine-cases.gl.at.ply.gg
floor-defining.gl.at.ply.gg
format-cite.gl.at.ply.gg
foundation-operates.gl.at.ply.gg
four-vacancies.gl.at.ply.gg
go-actors.gl.at.ply.gg
graphics-bite.gl.at.ply.gg
have-continually.gl.at.ply.gg
inc-zdnet.gl.at.ply.gg
islands-atlas.gl.at.ply.gg
joined-php.gl.at.ply.gg
july-port.gl.at.ply.gg
library-evaluated.gl.at.ply.gg
library-waiting.gl.at.ply.gg
like-canon.gl.at.ply.gg
local-header.gl.at.ply.gg
longer-el.gl.at.ply.gg
made-necessary.gl.at.ply.gg
magazine-terminals.gl.at.ply.gg
major-months.gl.at.ply.gg
mary-cottage.gl.at.ply.gg
media-wedding.gl.at.ply.gg
mexico-comedy.gl.at.ply.gg
minutes-loc.gl.at.ply.gg
mobile-senator.gl.at.ply.gg
morning-usc.gl.at.ply.gg
nice-interactions.gl.at.ply.gg
numbers-fighters.gl.at.ply.gg
officer-rage.gl.at.ply.gg
official-stupid.gl.at.ply.gg
official-summary.gl.at.ply.gg
one-an.gl.at.ply.gg
paid-immediate.gl.at.ply.gg
paper-infinite.gl.at.ply.gg
patients-fruits.gl.at.ply.gg
peter-bikini.gl.at.ply.gg
phones-acre.gl.at.ply.gg
photos-baking.gl.at.ply.gg
places-intl.gl.at.ply.gg
potential-lakes.gl.at.ply.gg
processing-lyrics.gl.at.ply.gg
processing-optical.gl.at.ply.gg
property-lance.gl.at.ply.gg
rating-therapist.gl.at.ply.gg
ready-rated.gl.at.ply.gg
received-perfume.gl.at.ply.gg
recommended-pg.gl.at.ply.gg
rule-lit.gl.at.ply.gg
safe-cb.gl.at.ply.gg
schedule-pl.gl.at.ply.gg
sources-charlotte.gl.at.ply.gg
staff-fires.gl.at.ply.gg
status-mitsubishi.gl.at.ply.gg
storage-ir.gl.at.ply.gg
sun-copyrighted.gl.at.ply.gg
taken-charm.gl.at.ply.gg
taking-mapping.gl.at.ply.gg
tech-lines.gl.at.ply.gg
terms-retired.gl.at.ply.gg
testing-filename.gl.at.ply.gg
this-purchases.gl.at.ply.gg
three-azerbaijan.gl.at.ply.gg
took-shortcuts.gl.at.ply.gg
true-baghdad.gl.at.ply.gg
us-readers.gl.at.ply.gg
welcome-iraq.gl.at.ply.gg
wide-nhl.gl.at.ply.gg
william-onto.gl.at.ply.gg
without-oracle.gl.at.ply.gg
writing-workflow.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-02-03)

105.96.242.45:1177
13.58.157.220:12738
147.185.221.17:53003
147.185.221.18:14881
18.156.13.209:18227
18.157.68.73:13538
18.157.68.73:14272
18.157.68.73:18227
18.158.58.205:11024
18.192.31.165:11544
18.192.31.165:16777
18.192.93.86:11797
18.192.93.86:18227
18.197.239.109:10673
18.197.239.109:11080
18.197.239.109:12041
18.197.239.109:15520
18.197.239.5:14272
18.198.77.177:17426
18.228.115.60:11264
18.228.115.60:18785
18.229.146.63:18785
18.229.248.167:18785
18.231.93.153:11264
186.169.37.61:5552
186.169.71.216:5552
191.233.28.7:1024
193.161.193.99:30520
213.159.61.169:1177
3.121.139.82:16322
3.121.139.82:17426
3.124.142.205:11544
3.125.102.39:11544
3.125.102.39:16777
3.125.188.168:14537
3.125.209.94:11544
3.125.209.94:16777
3.125.223.134:16777
3.126.224.214:14537
3.126.37.18:14272
3.127.138.57:13538
3.127.138.57:17960
3.127.138.57:18227
3.127.253.86:16322
3.127.253.86:17426
3.127.59.75:17426
3.13.191.225:13747
3.134.125.175:13747
3.14.182.203:13747
3.140.223.7:15696
3.141.210.37:15696
3.142.129.56:10093
3.142.167.4:12738
3.142.167.54:10093
3.142.167.54:12738
3.142.81.166:12738
3.19.130.43:10093
3.19.130.43:12738
3.22.30.40:13747
3.64.4.198:11024
3.66.38.117:12041
3.66.38.117:15520
3.67.112.102:11024
3.67.15.169:14537
3.67.161.133:11024
3.67.62.142:11024
3.68.171.119:12041
3.68.56.232:14537
3.69.115.178:10673
3.69.115.178:11080
3.69.115.178:12041
3.69.115.178:15520
3.69.157.220:10673
3.69.157.220:11080
3.69.157.220:15520
35.157.111.131:14537
41.97.220.8:1177
46.246.4.20:3030
46.246.86.4:101
52.28.247.255:11080
54.94.248.37:11264
54.94.248.37:12136
jd03-30520.portmap.io
noiphabibi.ddns.net
qcpanel.hackcrack.io
vbatallafinal23.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5079d77c36ad411dc614e579e28c2a95b96fc2372effd822f1c718fda39abb5a/detection

178.73.218.3:101

# Reference: https://www.virustotal.com/gui/file/3fefee9b40937cee06e62b19ff289bcefdbda8cbf3f2bddac230a345dcf9bb0b/detection

178.73.218.5:8989
vbf8989.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d625b3744ecb6e6dc66dbb3d4298a32f2dbed12bf40eaa88bd25c6bcee3671dd/detection
# Reference: https://www.virustotal.com/gui/file/c44393856230982c27bb6ab647502277d4481908fe6ee386d5f22a0697b2acaf/detection

178.73.218.5:1111
46.246.26.138:1111
46.246.14.3:1111
[2002:2ef6:411::2ef6:411]:1111
v8-1c.giize.com

# Reference: https://twitter.com/SarlackLab/status/1754445247537381391

45.142.182.104:4568

# Reference: https://www.virustotal.com/gui/file/184cc07e9c17fb1575bc37cda2b225299b5f479b73492165e07ce9ff0d9a7177/detection

74.91.116.12:5552

# Reference: https://www.virustotal.com/gui/file/c671155c2ff3529435a4facaabd8a06c6f5e559ff24763d6f387bc818c453727/detection

46.246.12.11:2552
46.246.12.8:2552
46.246.14.16:2552
46.246.4.9:2552
alma27.duckdns.org

# Reference: https://www.virustotal.com/gui/file/fc7d185bf95bec7111daae71589f927205db56373dc2058395fe9da23f022430/detection

46.246.80.2:4478
46.246.84.3:4478
car22.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b7b1e90b3c759be59d68b6f03fbd1cc247ef10e26b591684db3ff0df87241f82/detection

178.73.192.20:4478

# Reference: https://www.virustotal.com/gui/file/07c7268c2f8a736f5c74f9dabfdf5e10c8a4580fdfcf11eaa7e20a88dd52cae8/detection

46.246.82.8:8899
46.246.86.2:8899
46.246.90.11:8899

# Reference: https://www.virustotal.com/gui/file/079e8e80987004b754b7ba87c382bfeddca0f230dfce3f1443b5d417b54ec70e/detection

103.85.247.61:3232

# Reference: https://twitter.com/SarlackLab/status/1755124484401418633

65.0.50.125:22220

# Reference: https://www.virustotal.com/gui/file/3584010af4c61f06ddedbc2d740c5c787ac08e62e00f6ec267cd73baef3b21f4/detection

46.246.84.15:1995

# Reference: https://www.virustotal.com/gui/file/86a385af82154816c819180b7501f5c614f442482957599b56a7932eb6691135/detection

berlyndnero.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e5500e3e098ef980ecbe1c2b15ac1ed33df88cc03197dc10e5abf999b6517845/detection

46.246.82.5:3000
antrochr.duckdns.org

# Reference: https://twitter.com/SarlackLab/status/1756332411212738638

46.246.82.3:5552

# Reference: https://www.virustotal.com/gui/file/dbb6627b84af33de11025addb2f4b39a0b005afcb286e2a3f493fb530f1a2aae/detection

167.86.86.15:3333
junio2023.duckdns.org

# Reference: https://www.virustotal.com/gui/file/00ae8b2a1f9d34b377d5cec89852212673d7531a373a3b605a96d64e658a8379/detection

5.39.43.50:9871

# Reference: https://twitter.com/SarlackLab/status/1756694931807092956

5.39.43.50:7777

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-02-12)

147.185.221.18:5204
18.156.13.209:10445
18.157.68.73:10445
18.158.249.75:17888
18.158.58.205:19920
18.192.31.165:17888
18.192.93.86:10445
18.192.93.86:13056
18.197.239.109:16992
18.197.239.109:17032
18.197.239.5:10445
18.197.239.5:13056
18.198.77.177:19762
194.38.20.230:6666
3.121.139.82:19762
3.124.142.205:17888
3.124.67.191:12609
3.125.102.39:17888
3.125.188.168:12609
3.125.209.94:14114
3.125.209.94:17888
3.125.223.134:17888
3.126.37.18:10445
3.127.138.57:10445
3.127.181.115:19920
3.127.59.75:19762
3.6.115.182:15032
3.6.115.182:19208
3.6.115.64:15032
3.6.115.64:19208
3.6.122.107:15032
3.6.122.107:19208
3.6.30.85:19208
3.6.98.232:15032
3.6.98.232:19208
3.66.38.117:16992
3.66.38.117:17032
3.67.161.133:13977
3.67.161.133:19920
3.67.62.142:19920
3.68.171.119:16992
3.68.56.232:12555
3.69.115.178:16992
35.158.159.254:19762
41.96.128.248:1177
45.153.230.56:7777
46.246.6.12:1995
46.246.80.14:2054
46.246.80.9:1995
5.39.43.50:1609
5.39.43.50:1610
85.192.32.83:1194

# Reference: https://twitter.com/SarlackLab/status/1757772115153948975

5.39.43.50:1050

# Reference: https://twitter.com/SarlackLab/status/1758114239955284246
# Reference: https://www.virustotal.com/gui/file/b872b135c8a9552c211ac279507055f44186322915c428640c7007aea52d4e0e/detection
# Reference: https://www.virustotal.com/gui/file/b2bd029b9481eb30b72b2b49805ae989ddfa1393950d15c7af4b130a7597a1d7/detection
# Reference: https://www.virustotal.com/gui/file/3792524100bb9e7468dad52bbdd3a84175effa0cceb78dea77cefe46ffc2e4b2/detection

154.197.124.161:1111
154.197.124.161:2222
154.197.124.161:5545
llllllllllllllllllllllllllll.site

# Reference: https://www.virustotal.com/gui/ip-address/164.68.120.78/relations

mor22.duckdns.org
ponchozuleta.duckdns.org
proxiiiii33.duckdns.org
sostener11.duckdns.org

# Reference: https://twitter.com/SarlackLab/status/1758174555774849267

46.246.86.20:415
yuya0415.duckdns.org

# Reference: https://www.virustotal.com/gui/file/de2c2e95d721ac419a05842a106cdd3cc831802ed2302d42a15357669efd82e9/detection

201.27.74.239:1337

# Reference: https://www.virustotal.com/gui/file/73cb2cafa83f8eafefd85bd6bbed5d803f6457c1d622cb9617a8cdffc69ed14d/detection

46.246.80.3:2994

# Reference: https://twitter.com/SarlackLab/status/1758914709254791367

147.185.221.18:35017

# Reference: https://twitter.com/SarlackLab/status/1759265359540945124

193.161.193.99:31620
nanoudu30-31620.portmap.host

# Reference: https://twitter.com/SarlackLab/status/1759265133572796586

147.185.221.18:29182

# Reference: https://www.virustotal.com/gui/file/320d8a84449d21e82a785eedcc43d7234a8218fcb325fb226c9f7b145b3bfce5/detection

188.126.90.13:1516

# Reference: https://www.virustotal.com/gui/file/4020c82e05c355e3097935e9e093334dfd5f1cd8765b2465276b43a1e1691fdc/detection

194.156.88.113:55069
w01aw120.ddns.net

# Reference: https://www.virustotal.com/gui/file/b5ba589b21c3044c1fa133a94473b53b27bbd817121647e2c570a65e8b6198ff/detection
# Reference: https://www.virustotal.com/gui/file/59dc7fc9f3f3e19749fbdcb61c18b320e352c05ba29b67d44172819ebb6b257f/detection
# Reference: https://www.virustotal.com/gui/file/05aecd42c1ee012b35875dab4a31fcf17580b7ee43da0620acbd5fd6c6c1f1ce/detection

188.71.238.56:55069
wwbatbda.ddns.net

# Reference: https://www.virustotal.com/gui/file/ce298fbcfc186362b0b6b3b36b89db6f62d280cde50d230384e6d74c503dd2fc/detection

188.70.23.226:1177
91.109.178.7:1177

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-02-24)

http://147.185.221.18
102.47.184.255:1177
147.185.221.16:38277
147.185.221.17:10652
147.185.221.18:32544
147.185.221.18:36364
147.185.221.18:3639
147.185.221.18:37064
18.156.13.209:18876
18.157.68.73:15217
18.158.249.75:10540
18.158.249.75:12044
18.158.249.75:13406
18.158.249.75:16904
18.158.249.75:18563
18.158.249.75:19599
18.158.58.205:13326
18.192.31.165:12044
18.192.31.165:13406
18.192.31.165:18563
18.192.31.165:19599
18.192.93.86:18876
18.197.239.109:17155
18.197.239.5:18876
196.112.147.229:5577
222.186.174.9:43268
3.124.142.205:12607
3.124.142.205:18563
3.124.142.205:19599
3.124.67.191:15119
3.125.102.39:12044
3.125.102.39:12607
3.125.102.39:13406
3.125.102.39:16904
3.125.102.39:18563
3.125.102.39:19599
3.125.209.94:10540
3.125.209.94:12044
3.125.209.94:12607
3.125.209.94:13406
3.125.209.94:16904
3.125.209.94:18563
3.125.209.94:19599
3.125.223.134:12044
3.125.223.134:16904
3.125.223.134:19599
3.126.37.18:15020
3.126.37.18:18876
3.127.138.57:13627
3.127.138.57:15020
3.127.138.57:18876
3.127.181.115:13326
3.142.167.4:19346
3.142.167.54:19346
3.19.130.43:19346
3.69.157.220:17155
31.10.67.116:5552
35.157.111.131:15119
46.246.12.14:1994
46.246.12.14:1995
46.246.12.6:2054
46.246.14.2:1998
46.246.6.4:1994
46.246.80.3:1994
52.28.247.255:17155
52.28.247.255:19437
65.0.50.125:22158
cut-britney.gl.at.ply.gg
ecuaecua.duckdns.org
mangaforme.cloud
nature-dawn.gl.at.ply.gg
pcpanel.hackcrack.io
than-electoral.gl.at.ply.gg
training-invasion.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/ip-address/46.246.80.71/relations
# Reference: https://www.virustotal.com/gui/file/cabefcbafeb635832ee95c34da10993a8e47231de1bae661d3448e5ddd7aa2f3/detection

46.246.80.71:7771
ba9i.ddns.net
berlyndinero.duckdns.org
fadee5202.ddns.net
perezluism95.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/46.246.84.66/relations
# Reference: https://www.virustotal.com/gui/file/05f42e42b9ba62484cd806c884b194875f8f7b6dfaca0c9cf01dffecf99d9dec/detection

46.246.84.66:1177
benjitrolleyhome.ddns.net
firas2210.noip.me
linda1956.ddns.net
m6er.ddns.net
nuyek.ddns.me
powers.duckdns.org

# Reference: https://twitter.com/SarlackLab/status/1761406055475503190

95.86.227.200:25565
kisel228.zapto.org

# Reference: https://www.virustotal.com/gui/file/f0f3e5326a55c80d491873afe09874cf89d13cf0e4f69c0e6bfddde5504e7bec/detection

91.109.186.11:1177
91.109.188.3:1177
91.109.188.7:1177
ronymahmoud.camdvr.org
ronymahmoud.casacam.net

# Reference: https://twitter.com/SarlackLab/status/1761769385360777709

34.86.252.187:5050

# Reference: https://www.virustotal.com/gui/file/daa6e519cd8b5d39726e0c5f3c51643510ecf77c259c9d8533ea37ec9963db64/detection

46.246.84.5:2054

# Reference: https://www.virustotal.com/gui/file/f891493860e6db5d303d84ec57185491f8ae1cebaec13d9b0cf5c26a1ccd1edd/detection

46.246.86.69:2054
ecuado2021.duckdns.org

# Reference: https://www.virustotal.com/gui/file/eaf993b71b3d90929656a26aab1bf76d052fcddc2253ea492957130a4a2bd7eb/detection

46.246.6.67:2054

# Reference: https://www.virustotal.com/gui/file/55103a93ad402a0f1339f1dbc2366bfeb32453154613a68d5eb580ca5fd96bb8/detection

46.246.86.76:2054

# Reference: https://www.virustotal.com/gui/file/3d5451c583ea9892866af74321c56ced975bde3afe03f0d40b8835b806696ec8/detection

46.246.26.72:2054

# Reference: https://www.virustotal.com/gui/file/1b94427863e2e3b48835ca5e2bc4635f2ce2f59837967ad4c12e2ce1c9de6a8c/detection

46.246.14.78:2054
46.246.6.68:2054

# Reference: https://www.virustotal.com/gui/file/59a15e2c0a04e3dfaa3817f01cc6aba53c58b34b48437bef7005ff3bbb936e56/detection

46.246.14.67:7771
46.246.80.65:7771

# Reference: https://www.virustotal.com/gui/file/ced2e33337ab004feeadb97b963c919593c096ae762de8b874de120fe883d493/detection

206.72.195.35:1177

# Reference: https://www.virustotal.com/gui/file/cf5dc4be9a0257588d8aad0ff12cd6bb2ae45b5e819f4b8372d488ce43d2cd1f/detection

212.7.208.105:1177

# Reference: https://www.virustotal.com/gui/file/7a0fa8c8d955305dd70d872b2d2959138e39e849ce17da22145680891354db04/detection

137.74.157.93:1177

# Reference: https://twitter.com/SarlackLab/status/1763172696790102145

154.38.160.55:35888

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-02-29)

http://147.185.221.17
147.185.221.17:55430
147.185.221.18:43389
147.185.221.18:43519
149.102.235.115:3000
162.19.25.207:8080
18.158.249.75:12607
18.158.249.75:12780
18.192.31.165:12607
18.228.115.60:12778
18.229.146.63:12778
18.229.248.167:12778
18.231.93.153:12778
192.169.69.26:8651
193.161.193.99:20543
3.124.142.205:12780
3.125.102.39:12780
3.125.209.94:12780
3.125.223.134:12780
3.126.37.18:16653
34.86.252.187:1177
43.229.148.210:5556
54.94.248.37:12778
79.228.201.177:666
appserv.ddns.net
conference-cal.gl.at.ply.gg
male-stephen.gl.at.ply.gg
mrado.kozow.com
multi-bidding.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/f26ecc757ff4011225d0936a5fbd014c7b428cdd7832f50356f28d78c0df43a5/detection

45.91.203.110:44331
hostapp.ddns.net

# Reference: https://www.virustotal.com/gui/file/d5023c28e72dc8d87a2fe0460203bf5b5327f3bfaddee74cbd496073c5cf9af8/detection

45.91.203.110:47021
xdxd.store
wwws.xdxd.store

# Reference: https://www.virustotal.com/gui/file/55f37c2e2876881297e574afe0ef662e9ae6c45d7dcc9a59a7b514d535e88879/detection

43.229.148.210:5556
sys.xdxd.store

# Reference: https://www.virustotal.com/gui/file/2f5144a84d4340b071f29e4d83707050be207b5f8ff726f8768f3eee0e0b1ad9/detection

dl.xdxd.store

# Reference: https://www.virustotal.com/gui/file/135aa0f73e6a6ea2c529e2260ac7751fbfc71f7021a93fae6dc7f863f385a26a/detection

191.89.241.116:5552
888juantriana88.dynuddns.net

# Reference: https://www.virustotal.com/gui/ip-address/191.89.247.6/relations

nuevosegurotodoriesgo.dynuddns.com

# Reference: https://www.virustotal.com/gui/file/1a0b11a56bc27869a3b2c8daffcd040597af2d79d2306985f7e3956a2d202383/detection

83.59.238.229:5553
campestre.ydns.eu

# Reference: https://www.virustotal.com/gui/file/3f89db66f8e98331083b23a4ae782dc62ba9ffee8cbfb562aec1b657c09bb5a9/detection

83.59.237.16:5554

# Reference: https://www.zscaler.com/blogs/security-research/android-and-windows-rats-distributed-online-meeting-lures

join-skype.info
online-cloudmeeting.pro
us06webzoomus.pro

# Reference: https://www.virustotal.com/gui/file/83c291860ac161eb4b4aa3c121bd579be835bcc565f6328149ab6de19a7cf668/detection

186.169.53.81:2025

# Reference: https://www.virustotal.com/gui/file/8f21cc5b66c620a939e64945799b90330b3a1a9e2b915e1293ca118a4e504d56/detection

46.246.6.12:2054
mexico2020.duckdns.org

# Reference: https://www.virustotal.com/gui/file/de0ce89d0d96f42cef03f6c529567d0f95dc093b68940b6d4d98610606263d34/detection

186.169.55.62:5552

# Reference: https://www.virustotal.com/gui/file/68d14565cc2d7523aaa4ba96d121b53eef301281c8f7445091d3e8f7f4ae85d9/detection

110.164.146.49:1177

# Reference: https://any.run/malware-trends/njrat

adminplusnj.duckdns.org
ncpanel.hackcrack.io
njtrial.duckdns.org
over-restrictions.gl.at.ply.gg
wanted-bernard.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-03-17)

103.253.73.222:117
147.124.205.158:9561
147.185.221.16:30641
147.185.221.18:38122
147.185.221.18:47077
147.185.221.18:49833
178.63.148.180:5552
18.156.13.209:17647
18.158.249.75:10757
18.158.249.75:16779
18.158.249.75:17485
18.158.249.75:19080
18.158.249.75:19607
18.192.31.165:10757
18.192.31.165:11258
18.192.31.165:12353
18.192.31.165:16779
18.192.31.165:17485
18.192.31.165:19080
18.192.31.165:19607
18.197.239.109:11599
18.197.239.109:12765
18.197.239.109:13672
18.198.77.177:11855
18.198.77.177:14314
18.198.77.177:17526
18.229.248.167:19606
18.231.93.153:19606
191.89.247.6:5552
198.27.120.241:1337
209.25.141.2:41730
209.25.141.2:41735
209.25.141.2:42754
209.25.141.2:43778
3.121.139.82:14314
3.124.142.205:10757
3.124.142.205:11258
3.124.142.205:12353
3.124.142.205:16267
3.124.142.205:17485
3.124.142.205:18909
3.124.142.205:19080
3.124.142.205:19607
3.124.67.191:15966
3.125.102.39:10202
3.125.102.39:10757
3.125.102.39:11258
3.125.102.39:16267
3.125.102.39:16779
3.125.102.39:17485
3.125.102.39:19080
3.125.102.39:19607
3.125.188.168:14402
3.125.188.168:15966
3.125.209.94:10757
3.125.209.94:11258
3.125.209.94:12353
3.125.209.94:17485
3.125.209.94:19607
3.125.223.134:10757
3.125.223.134:11258
3.125.223.134:12607
3.125.223.134:16779
3.125.223.134:17485
3.125.223.134:19080
3.125.223.134:19607
3.127.138.57:17647
3.127.181.115:10058
3.127.253.86:14314
3.127.59.75:11855
3.127.59.75:14314
3.64.4.198:19976
3.66.38.117:12765
3.66.38.117:13040
3.66.38.117:13672
3.67.112.102:19976
3.67.161.133:10058
3.68.171.119:12125
3.68.171.119:12765
3.68.56.232:10352
3.68.56.232:15966
3.69.115.178:13672
3.69.115.178:14744
3.69.157.220:12125
3.69.157.220:12765
3.69.157.220:13672
3.69.157.220:14744
35.158.159.254:11855
35.158.159.254:14314
41.103.44.20:999
41.109.32.78:1177
45.144.166.168:1234
45.83.207.249:1177
46.246.84.18:1981
52.14.81.142:22206
52.28.112.211:11855
52.28.112.211:14314
52.28.247.255:13672
89.117.23.25:35888
89.245.33.186:25565
89.245.33.186:3000
94.72.114.95:5552
andaluciabeach.net
artist-shared.gl.at.ply.gg
links-annually.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-03-20)

109.248.12.212:5501
142.11.201.122:7010
147.185.221.17:57514
147.185.221.18:41414
147.185.221.18:56522
18.156.13.209:15449
18.157.68.73:15449
18.158.249.75:11326
18.158.249.75:12051
18.158.249.75:12664
18.192.31.165:11326
18.192.31.165:12664
18.192.93.86:15449
18.197.239.109:12377
18.197.239.5:15449
193.161.193.99:48079
20.206.240.63:1024
24.42.99.89:191
3.124.142.205:11256
3.124.142.205:11326
3.124.142.205:12664
3.125.102.39:11326
3.125.102.39:12664
3.125.209.94:11256
3.125.209.94:11326
3.125.223.134:12664
3.127.138.57:15449
3.66.38.117:12377
3.66.38.117:17008
3.68.171.119:12377
46.246.84.18:3100
89.245.33.102:25565
89.245.35.152:25565
ameerpplus.ddns.net
authority-amazon.gl.at.ply.gg
having-jackson.gl.at.ply.gg
luisro2158.duckdns.org
microsoftdll.duckdns.org
microsoftdell1.duckdns.org
microsoftdell2.duckdns.org
microsoftdell4.duckdns.org
pidorgeio-48079.portmap.host

# Reference: https://twitter.com/ScumBots/status/1770497360864379244
# Reference: https://www.virustotal.com/gui/file/12f378e81fd46ac069f032a9405dbec88a40449848c6fd0c25de3e6279df17be/detection

128.90.102.235:58989
128.90.61.239:58989
187.45.55.48:58989
googleservices.ddnsfree.com

# Reference: https://www.virustotal.com/gui/file/cdb2580b515e92d91c18ba0cf1e5c8f0db6de62a2edd83f070da7abdeeccdc80/detection

193.161.193.99:22324
swuhh3-22324.portmap.host

# Reference: https://www.virustotal.com/gui/file/ce385b77503279ba23996904ff4cf68febd2cca79e0dec8182fa116583e536d5/detection

lafiro8872-20597.portmap.host

# Reference: https://www.virustotal.com/gui/file/701cc17fe689004b0abccf63a362bd1dbdd2ff8707646bf2ebd8bc418edae788/detection
# Reference: https://www.virustotal.com/gui/file/fd4c67f25433190d1218441b4bdf8256e0f01130f1b419d3d97c6c9307692166/detection

178.73.192.12:5552
178.73.218.15:5552

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-03-24)

105.158.47.40:10000
160.177.59.183:10000
179.14.8.182:2009
18.158.249.75:13241
18.158.249.75:18335
18.192.31.165:18335
3.124.142.205:13241
3.124.142.205:18335
3.125.102.39:13241
3.125.102.39:18335
3.125.209.94:13241
3.125.209.94:18335
3.125.223.134:13241
3.125.223.134:18335

# Reference: https://twitter.com/SarlackLab/status/1773718174824894718
# Reference: https://www.virustotal.com/gui/ip-address/147.185.221.19/relations

147.185.221.19:5491
about-jackson.gl.at.ply.gg
action-yesterday.gl.at.ply.gg
ad-philadelphia.gl.at.ply.gg
advertise-resources.gl.at.ply.gg
again-non.gl.at.ply.gg
agreement-rate.gl.at.ply.gg
america-right.gl.at.ply.gg
anti-televisions.gl.at.ply.gg
associates-thorough.gl.at.ply.gg
authors-rules.gl.at.ply.gg
bay-currencies.gl.at.ply.gg
below-folks.gl.at.ply.gg
bin-bands.gl.at.ply.gg
bin-estates.gl.at.ply.gg
body-charges.gl.at.ply.gg
body-sodium.gl.at.ply.gg
bring-recorder.gl.at.ply.gg
cell-bug.gl.at.ply.gg
centre-medicare.gl.at.ply.gg
close-specialty.gl.at.ply.gg
collection-furthermore.gl.at.ply.gg
condition-clearance.gl.at.ply.gg
contact-mb.gl.at.ply.gg
copy-cad.gl.at.ply.gg
copyright-them.gl.at.ply.gg
course-sudan.gl.at.ply.gg
daily-retrieved.gl.at.ply.gg
database-choices.gl.at.ply.gg
details-sitting.gl.at.ply.gg
development-org.gl.at.ply.gg
different-derek.gl.at.ply.gg
discussion-wanted.gl.at.ply.gg
does-moment.gl.at.ply.gg
downloads-invest.gl.at.ply.gg
education-fragrance.gl.at.ply.gg
educational-streaming.gl.at.ply.gg
ever-assembled.gl.at.ply.gg
f-helen.gl.at.ply.gg
fair-victoria.gl.at.ply.gg
finance-receive.gl.at.ply.gg
financial-titans.gl.at.ply.gg
fine-second.gl.at.ply.gg
fl-pen.gl.at.ply.gg
going-agenda.gl.at.ply.gg
h-prefer.gl.at.ply.gg
head-formatting.gl.at.ply.gg
heart-julie.gl.at.ply.gg
hope-luxembourg.gl.at.ply.gg
horse-proudly.gl.at.ply.gg
huytruong.ddns.net
impact-brandon.gl.at.ply.gg
important-mouse.gl.at.ply.gg
independent-cartoons.gl.at.ply.gg
investment-bidding.gl.at.ply.gg
iraq-wolf.gl.at.ply.gg
itself-boost.gl.at.ply.gg
keywords-students.gl.at.ply.gg
length-mpegs.gl.at.ply.gg
lincup.ddns.net
lists-preserve.gl.at.ply.gg
longer-steady.gl.at.ply.gg
make-acquisition.gl.at.ply.gg
mar-offering.gl.at.ply.gg
me-infrastructure.gl.at.ply.gg
million-flexibility.gl.at.ply.gg
minimum-terrorist.gl.at.ply.gg
mon-devel.gl.at.ply.gg
no-speed.gl.at.ply.gg
ok-examination.gl.at.ply.gg
open-yamaha.gl.at.ply.gg
operations-longer.gl.at.ply.gg
outdoor-mailed.gl.at.ply.gg
partner-maintained.gl.at.ply.gg
pre-descending.gl.at.ply.gg
prior-gently.gl.at.ply.gg
privacy-processing.gl.at.ply.gg
private-invision.gl.at.ply.gg
probably-detailed.gl.at.ply.gg
programs-pixels.gl.at.ply.gg
purposes-pike.gl.at.ply.gg
registration-nil.gl.at.ply.gg
remote-cologne.gl.at.ply.gg
require-flight.gl.at.ply.gg
research-aus.gl.at.ply.gg
reserved-gcc.gl.at.ply.gg
rules-consider.gl.at.ply.gg
running-impression.gl.at.ply.gg
sales-convertible.gl.at.ply.gg
seen-pal.gl.at.ply.gg
site-danger.gl.at.ply.gg
size-sentences.gl.at.ply.gg
staff-regarded.gl.at.ply.gg
statistics-press.gl.at.ply.gg
string-makes.gl.at.ply.gg
supply-ciao.gl.at.ply.gg
taking-podcast.gl.at.ply.gg
taking-rom.gl.at.ply.gg
television-greatly.gl.at.ply.gg
than-assignment.gl.at.ply.gg
the-princeton.gl.at.ply.gg
tools-ski.gl.at.ply.gg
trip-linear.gl.at.ply.gg
true-act.gl.at.ply.gg
ubuntu.zapto.org
understand-gaming.gl.at.ply.gg
united-logistics.gl.at.ply.gg
user-enlarge.gl.at.ply.gg
views-tons.gl.at.ply.gg
wed-hayes.gl.at.ply.gg
years-therefore.gl.at.ply.gg
years-transcripts.gl.at.ply.gg
york-magazines.gl.at.ply.gg
zip-mailing.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/4ce97d20fdf83c2fac60b6660a08aaaab2f0e793fe9958cb2ab2c789e13c7a60/detection

179.104.87.8:5552
serverupdated.duckdns.org

# Reference: https://twitter.com/SarlackLab/status/1773123552385859859

147.185.221.18:54056
above-accordance.gl.at.ply.gg
accessories-airports.gl.at.ply.gg
accommodation-solo.gl.at.ply.gg
act-freebsd.gl.at.ply.gg
action-confident.gl.at.ply.gg
action-handmade.gl.at.ply.gg
action-stations.gl.at.ply.gg
advanced-stuffed.gl.at.ply.gg
advertising-pty.gl.at.ply.gg
advice-impaired.gl.at.ply.gg
age-reforms.gl.at.ply.gg
all-iceland.gl.at.ply.gg
along-promising.gl.at.ply.gg
always-stopped.gl.at.ply.gg
amazon-gmbh.gl.at.ply.gg
american-strengthen.gl.at.ply.gg
any-or.gl.at.ply.gg
anything-each.gl.at.ply.gg
apple-coupled.gl.at.ply.gg
apply-liberal.gl.at.ply.gg
approach-atomic.gl.at.ply.gg
appropriate-fabric.gl.at.ply.gg
arts-estimation.gl.at.ply.gg
aug-grounds.gl.at.ply.gg
authority-meyer.gl.at.ply.gg
auto-pie.gl.at.ply.gg
availability-quotes.gl.at.ply.gg
award-urgent.gl.at.ply.gg
awards-nu.gl.at.ply.gg
az-above.gl.at.ply.gg
back-comm.gl.at.ply.gg
band-restructuring.gl.at.ply.gg
bar-lemon.gl.at.ply.gg
battery-education.gl.at.ply.gg
bay-ball.gl.at.ply.gg
bay-helps.gl.at.ply.gg
be-similar.gl.at.ply.gg
been-pupils.gl.at.ply.gg
been-republic.gl.at.ply.gg
before-brunei.gl.at.ply.gg
beginning-restoration.gl.at.ply.gg
behind-array.gl.at.ply.gg
being-neo.gl.at.ply.gg
believe-layer.gl.at.ply.gg
between-threshold.gl.at.ply.gg
big-ab.gl.at.ply.gg
big-mambo.gl.at.ply.gg
block-achieve.gl.at.ply.gg
block-releases.gl.at.ply.gg
blood-person.gl.at.ply.gg
blue-reverse.gl.at.ply.gg
both-gym.gl.at.ply.gg
browse-er.gl.at.ply.gg
building-cedar.gl.at.ply.gg
bush-amazing.gl.at.ply.gg
business-exemption.gl.at.ply.gg
button-nav.gl.at.ply.gg
ca-code.gl.at.ply.gg
called-if.gl.at.ply.gg
can-bodies.gl.at.ply.gg
capital-weapons.gl.at.ply.gg
car-building.gl.at.ply.gg
car-helped.gl.at.ply.gg
cash-york.gl.at.ply.gg
casino-acids.gl.at.ply.gg
casino-utilize.gl.at.ply.gg
cause-hats.gl.at.ply.gg
cd-vii.gl.at.ply.gg
cell-couple.gl.at.ply.gg
cell-rebound.gl.at.ply.gg
center-pan.gl.at.ply.gg
centre-shaped.gl.at.ply.gg
channel-gauge.gl.at.ply.gg
choose-rentals.gl.at.ply.gg
church-creatures.gl.at.ply.gg
classes-fioricet.gl.at.ply.gg
clear-puzzle.gl.at.ply.gg
cnet-tobacco.gl.at.ply.gg
college-scenarios.gl.at.ply.gg
comes-bennett.gl.at.ply.gg
command-webcam.gl.at.ply.gg
common-congratulations.gl.at.ply.gg
company-housewives.gl.at.ply.gg
complete-collections.gl.at.ply.gg
complete-energy.gl.at.ply.gg
components-occasionally.gl.at.ply.gg
computer-immune.gl.at.ply.gg
consider-literally.gl.at.ply.gg
consumer-contributor.gl.at.ply.gg
content-flowers.gl.at.ply.gg
continue-silk.gl.at.ply.gg
control-third.gl.at.ply.gg
corporate-supplements.gl.at.ply.gg
corporation-ver.gl.at.ply.gg
could-sheets.gl.at.ply.gg
county-counted.gl.at.ply.gg
created-don.gl.at.ply.gg
created-zero.gl.at.ply.gg
credit-roller.gl.at.ply.gg
customers-defend.gl.at.ply.gg
daily-mon.gl.at.ply.gg
daily-revenge.gl.at.ply.gg
dark-hearings.gl.at.ply.gg
death-reflects.gl.at.ply.gg
december-feb.gl.at.ply.gg
deep-router.gl.at.ply.gg
device-boat.gl.at.ply.gg
digital-johnson.gl.at.ply.gg
digital-scope.gl.at.ply.gg
directly-cure.gl.at.ply.gg
distance-paying.gl.at.ply.gg
distance-refer.gl.at.ply.gg
do-roads.gl.at.ply.gg
document-comparisons.gl.at.ply.gg
document-usb.gl.at.ply.gg
does-cow.gl.at.ply.gg
door-frequencies.gl.at.ply.gg
door-mats.gl.at.ply.gg
door-nsw.gl.at.ply.gg
double-ati.gl.at.ply.gg
downloads-distinct.gl.at.ply.gg
downloads-doc.gl.at.ply.gg
driver-territories.gl.at.ply.gg
during-competitive.gl.at.ply.gg
dvd-b.gl.at.ply.gg
each-systematic.gl.at.ply.gg
economic-auction.gl.at.ply.gg
effect-nigeria.gl.at.ply.gg
eg-matthew.gl.at.ply.gg
else-socket.gl.at.ply.gg
email-comic.gl.at.ply.gg
email-partnership.gl.at.ply.gg
employees-governing.gl.at.ply.gg
employment-issn.gl.at.ply.gg
england-latter.gl.at.ply.gg
english-carolina.gl.at.ply.gg
enjoy-everybody.gl.at.ply.gg
ensure-synthesis.gl.at.ply.gg
enter-di.gl.at.ply.gg
entertainment-deutsch.gl.at.ply.gg
environmental-occasion.gl.at.ply.gg
events-xml.gl.at.ply.gg
everyone-filme.gl.at.ply.gg
everything-applies.gl.at.ply.gg
f-fe.gl.at.ply.gg
f-wagner.gl.at.ply.gg
face-opening.gl.at.ply.gg
faculty-smoking.gl.at.ply.gg
featured-bookings.gl.at.ply.gg
featured-dakota.gl.at.ply.gg
federal-possibilities.gl.at.ply.gg
fee-fig.gl.at.ply.gg
files-old.gl.at.ply.gg
flowers-blade.gl.at.ply.gg
flowers-gentle.gl.at.ply.gg
following-af.gl.at.ply.gg
for-atlantic.gl.at.ply.gg
for-cio.gl.at.ply.gg
form-openings.gl.at.ply.gg
forward-categories.gl.at.ply.gg
france-platforms.gl.at.ply.gg
friday-passes.gl.at.ply.gg
friendly-destiny.gl.at.ply.gg
friends-arthritis.gl.at.ply.gg
future-chicken.gl.at.ply.gg
germany-loc.gl.at.ply.gg
getting-escorts.gl.at.ply.gg
getting-scott.gl.at.ply.gg
girl-folks.gl.at.ply.gg
girls-promo.gl.at.ply.gg
global-criteria.gl.at.ply.gg
gold-temporal.gl.at.ply.gg
government-treat.gl.at.ply.gg
grade-exercises.gl.at.ply.gg
growth-preston.gl.at.ply.gg
guest-negotiations.gl.at.ply.gg
guide-substances.gl.at.ply.gg
hard-appendix.gl.at.ply.gg
having-turn.gl.at.ply.gg
health-post.gl.at.ply.gg
here-gaps.gl.at.ply.gg
history-figures.gl.at.ply.gg
homepage-certificates.gl.at.ply.gg
host-confidence.gl.at.ply.gg
hour-vii.gl.at.ply.gg
hp-considerable.gl.at.ply.gg
html-behavioral.gl.at.ply.gg
impact-profits.gl.at.ply.gg
income-inches.gl.at.ply.gg
independent-collectibles.gl.at.ply.gg
inn-lessons.gl.at.ply.gg
input-houston.gl.at.ply.gg
inside-blogging.gl.at.ply.gg
instead-locked.gl.at.ply.gg
int-sparc.gl.at.ply.gg
into-hybrid.gl.at.ply.gg
involved-hurt.gl.at.ply.gg
involved-introduces.gl.at.ply.gg
ireland-organisations.gl.at.ply.gg
islands-makes.gl.at.ply.gg
it-volt.gl.at.ply.gg
itself-lf.gl.at.ply.gg
japan-genuine.gl.at.ply.gg
japanese-walt.gl.at.ply.gg
joined-toronto.gl.at.ply.gg
k-brooks.gl.at.ply.gg
keywords-stripes.gl.at.ply.gg
la-engagement.gl.at.ply.gg
large-grateful.gl.at.ply.gg
las-protected.gl.at.ply.gg
late-colored.gl.at.ply.gg
learning-se.gl.at.ply.gg
learning-tion.gl.at.ply.gg
length-postage.gl.at.ply.gg
lesbian-onion.gl.at.ply.gg
letter-raises.gl.at.ply.gg
level-experiments.gl.at.ply.gg
link-alien.gl.at.ply.gg
links-finds.gl.at.ply.gg
loan-means.gl.at.ply.gg
loans-catherine.gl.at.ply.gg
located-thehun.gl.at.ply.gg
looking-memphis.gl.at.ply.gg
lot-variable.gl.at.ply.gg
low-feeding.gl.at.ply.gg
lower-fisheries.gl.at.ply.gg
ma-publicity.gl.at.ply.gg
ma-recorder.gl.at.ply.gg
mac-deleted.gl.at.ply.gg
machine-holidays.gl.at.ply.gg
machine-ld.gl.at.ply.gg
maintenance-celebrate.gl.at.ply.gg
maintenance-quotations.gl.at.ply.gg
male-philip.gl.at.ply.gg
man-closure.gl.at.ply.gg
manufacturer-chocolate.gl.at.ply.gg
mary-securely.gl.at.ply.gg
matter-shepherd.gl.at.ply.gg
mb-each.gl.at.ply.gg
mean-feels.gl.at.ply.gg
means-effects.gl.at.ply.gg
media-transferred.gl.at.ply.gg
medical-finish.gl.at.ply.gg
metal-mambo.gl.at.ply.gg
mexico-wayne.gl.at.ply.gg
microsoft-commands.gl.at.ply.gg
mike-col.gl.at.ply.gg
miles-dogs.gl.at.ply.gg
military-gentleman.gl.at.ply.gg
military-nba.gl.at.ply.gg
mini-danger.gl.at.ply.gg
mini-responsible.gl.at.ply.gg
mm-predict.gl.at.ply.gg
morning-titles.gl.at.ply.gg
msn-cosmetics.gl.at.ply.gg
multiple-growth.gl.at.ply.gg
name-roof.gl.at.ply.gg
near-overhead.gl.at.ply.gg
needed-prague.gl.at.ply.gg
next-dive.gl.at.ply.gg
no-glory.gl.at.ply.gg
no-rounds.gl.at.ply.gg
none-tactics.gl.at.ply.gg
north-ah.gl.at.ply.gg
not-agree.gl.at.ply.gg
number-doing.gl.at.ply.gg
oct-sudden.gl.at.ply.gg
october-rev.gl.at.ply.gg
offer-puerto.gl.at.ply.gg
open-pubs.gl.at.ply.gg
operating-noble.gl.at.ply.gg
operation-corn.gl.at.ply.gg
option-judges.gl.at.ply.gg
orders-paradise.gl.at.ply.gg
organization-implemented.gl.at.ply.gg
others-portions.gl.at.ply.gg
outdoor-an.gl.at.ply.gg
outside-pose.gl.at.ply.gg
outside-wilson.gl.at.ply.gg
overall-meyer.gl.at.ply.gg
own-engineer.gl.at.ply.gg
owner-demonstrate.gl.at.ply.gg
owners-gadgets.gl.at.ply.gg
p-significance.gl.at.ply.gg
pacific-freight.gl.at.ply.gg
pack-rocket.gl.at.ply.gg
pack-talked.gl.at.ply.gg
park-thomson.gl.at.ply.gg
parts-department.gl.at.ply.gg
parts-disco.gl.at.ply.gg
parts-infections.gl.at.ply.gg
paul-debian.gl.at.ply.gg
paul-jc.gl.at.ply.gg
perfect-willing.gl.at.ply.gg
period-disabilities.gl.at.ply.gg
peter-potter.gl.at.ply.gg
photo-bin.gl.at.ply.gg
photo-meant.gl.at.ply.gg
photos-diana.gl.at.ply.gg
places-far.gl.at.ply.gg
places-handling.gl.at.ply.gg
plan-estimates.gl.at.ply.gg
planning-exhibition.gl.at.ply.gg
plans-obligation.gl.at.ply.gg
plans-potter.gl.at.ply.gg
play-graduate.gl.at.ply.gg
plus-tension.gl.at.ply.gg
point-decrease.gl.at.ply.gg
poker-maintains.gl.at.ply.gg
political-weed.gl.at.ply.gg
possible-wellness.gl.at.ply.gg
post-feet.gl.at.ply.gg
price-update.gl.at.ply.gg
privacy-netherlands.gl.at.ply.gg
professional-curriculum.gl.at.ply.gg
property-reporters.gl.at.ply.gg
property-wheels.gl.at.ply.gg
publication-searches.gl.at.ply.gg
purpose-voyeurweb.gl.at.ply.gg
quite-headline.gl.at.ply.gg
race-combat.gl.at.ply.gg
radio-princeton.gl.at.ply.gg
range-hills.gl.at.ply.gg
range-integral.gl.at.ply.gg
rate-daily.gl.at.ply.gg
rated-wanting.gl.at.ply.gg
rather-drawings.gl.at.ply.gg
re-separation.gl.at.ply.gg
reader-poems.gl.at.ply.gg
recently-working.gl.at.ply.gg
regarding-brave.gl.at.ply.gg
region-vip.gl.at.ply.gg
regular-rely.gl.at.ply.gg
relations-three.gl.at.ply.gg
release-accident.gl.at.ply.gg
remote-body.gl.at.ply.gg
remote-produce.gl.at.ply.gg
rental-zip.gl.at.ply.gg
report-amounts.gl.at.ply.gg
reports-fox.gl.at.ply.gg
republic-ins.gl.at.ply.gg
request-surplus.gl.at.ply.gg
requirements-css.gl.at.ply.gg
resource-hands.gl.at.ply.gg
responsible-corruption.gl.at.ply.gg
responsible-sandwich.gl.at.ply.gg
result-ui.gl.at.ply.gg
results-nike.gl.at.ply.gg
results-outdoors.gl.at.ply.gg
retail-consult.gl.at.ply.gg
right-peas.gl.at.ply.gg
robert-strategic.gl.at.ply.gg
rules-encourage.gl.at.ply.gg
running-hometown.gl.at.ply.gg
s-adam.gl.at.ply.gg
saturday-withdrawal.gl.at.ply.gg
save-trackbacks.gl.at.ply.gg
saw-retrieval.gl.at.ply.gg
school-otherwise.gl.at.ply.gg
schools-context.gl.at.ply.gg
season-certain.gl.at.ply.gg
second-action.gl.at.ply.gg
secure-tune.gl.at.ply.gg
selection-trap.gl.at.ply.gg
sent-blues.gl.at.ply.gg
sent-walked.gl.at.ply.gg
sep-coordinate.gl.at.ply.gg
september-ez.gl.at.ply.gg
september-hazard.gl.at.ply.gg
september-sustainable.gl.at.ply.gg
series-pencil.gl.at.ply.gg
services-cia.gl.at.ply.gg
share-introduced.gl.at.ply.gg
should-with.gl.at.ply.gg
since-credit.gl.at.ply.gg
song-restriction.gl.at.ply.gg
sony-guardian.gl.at.ply.gg
sound-registration.gl.at.ply.gg
special-donor.gl.at.ply.gg
st-anyone.gl.at.ply.gg
start-die.gl.at.ply.gg
steel-surrounded.gl.at.ply.gg
step-fewer.gl.at.ply.gg
stores-bidder.gl.at.ply.gg
story-character.gl.at.ply.gg
story-pl.gl.at.ply.gg
street-chen.gl.at.ply.gg
string-balance.gl.at.ply.gg
studies-demo.gl.at.ply.gg
subscribe-noble.gl.at.ply.gg
success-cells.gl.at.ply.gg
success-highly.gl.at.ply.gg
such-doe.gl.at.ply.gg
sun-play.gl.at.ply.gg
system-bacterial.gl.at.ply.gg
target-identify.gl.at.ply.gg
telephone-pole.gl.at.ply.gg
television-common.gl.at.ply.gg
tell-locate.gl.at.ply.gg
that-tucson.gl.at.ply.gg
them-controlled.gl.at.ply.gg
therefore-appropriations.gl.at.ply.gg
they-adolescent.gl.at.ply.gg
third-idle.gl.at.ply.gg
thomas-expectations.gl.at.ply.gg
throughout-taxation.gl.at.ply.gg
title-afraid.gl.at.ply.gg
training-operate.gl.at.ply.gg
trial-discussed.gl.at.ply.gg
un-rapids.gl.at.ply.gg
union-menu.gl.at.ply.gg
unless-guides.gl.at.ply.gg
up-diego.gl.at.ply.gg
us-browser.gl.at.ply.gg
using-pi.gl.at.ply.gg
using-specific.gl.at.ply.gg
usr-contemporary.gl.at.ply.gg
valid-salem.gl.at.ply.gg
valley-rat.gl.at.ply.gg
van-invision.gl.at.ply.gg
van-present.gl.at.ply.gg
various-catalogue.gl.at.ply.gg
view-dropped.gl.at.ply.gg
visit-voted.gl.at.ply.gg
vote-easier.gl.at.ply.gg
want-gets.gl.at.ply.gg
warning-residents.gl.at.ply.gg
was-impressed.gl.at.ply.gg
ways-arizona.gl.at.ply.gg
weeks-reducing.gl.at.ply.gg
western-likely.gl.at.ply.gg
western-send.gl.at.ply.gg
when-adds.gl.at.ply.gg
when-dl.gl.at.ply.gg
whether-standards.gl.at.ply.gg
why-organ.gl.at.ply.gg
will-jumping.gl.at.ply.gg
william-helicopter.gl.at.ply.gg
win-britain.gl.at.ply.gg
wine-guild.gl.at.ply.gg
wish-gdp.gl.at.ply.gg
without-vsnet.gl.at.ply.gg
words-suzuki.gl.at.ply.gg
worldwide-lighter.gl.at.ply.gg
write-findings.gl.at.ply.gg
writing-gothic.gl.at.ply.gg
x-hearings.gl.at.ply.gg
xml-palestine.gl.at.ply.gg
yahoo-plan.gl.at.ply.gg
year-cursor.gl.at.ply.gg
yes-ppm.gl.at.ply.gg
york-bishop.gl.at.ply.gg
young-charter.gl.at.ply.gg
z-offer.gl.at.ply.gg
z-pics.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-03-31)

147.185.221.16:52522
147.185.221.18:64479
147.185.221.18:9626
147.185.221.19:5585
160.176.152.91:10000
18.192.31.165:15422
18.192.93.86:19282
18.197.239.109:14500
197.202.118.111:5552
24.42.98.153:195
3.125.102.39:15422
3.125.209.94:15422
3.125.223.134:11326
3.127.59.75:19387
3.66.38.117:14622
3.69.115.178:12377
3.69.115.178:14622
3.69.157.220:12377
35.158.159.254:18001
52.28.247.255:12377
52.28.247.255:14622
94.131.122.80:5009
billions.ooguy.com
limited-architect.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/f3e1a55369037d2de0243d1a4aee127b40a50a352b358a075c9b319da81ddfe8/detection

141.255.147.255:110

# Reference: https://www.virustotal.com/gui/file/84a905685d12e80ae93051113baf734ec6b73ac03f0f75e9faa9cfcc8ac3ecd5/detection

141.255.151.194:110
178.73.192.5:110
5.133.24.104:110

# Reference: https://www.virustotal.com/gui/file/6bac4da27dcf17a93c96dd9dc9adc0530e988b229fff4c56b08625564abe6ce6/detection

178.73.192.5:5552

# Reference: https://www.virustotal.com/gui/file/150c5deb5c3bc1b2946cd8b1199b5ba002c4128276352bd8353ae68cb1e06720/detection

46.246.84.68:1199
46.246.86.66:1195
46.246.86.66:1199

# Reference: https://www.virustotal.com/gui/ip-address/178.73.192.18/relations

0509new.duckdns.org
8001njnews.duckdns.org
eldiablillo3.duckdns.org
myhaker.ddns.net
oneclick.iownyour.org
sostener1211.duckdns.org
test0change.2waky.com

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-04-03)

105.155.169.10:10000
125.160.213.15:1177
147.50.253.190:1177
154.197.69.33:1177
154.236.129.160:5552
18.158.249.75:18511
3.124.142.205:10543
3.124.142.205:14390
3.125.209.94:18511
3.125.223.134:10543
3.125.223.134:18511
41.107.100.224:1177
41.232.216.196:1177

# Reference: https://twitter.com/ScumBots/status/1775890905754636323
# Reference: https://www.virustotal.com/gui/file/4e5ded274678eb23a00ebdd9c03de6d04467a6452275ce76f0224a067f241917/detection

179.13.0.175:5552
newnano-shel.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1775932428172788210
# Reference: https://www.virustotal.com/gui/file/b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134/detection

46.246.84.9:3030
njpantalla.4cloud.click

# Reference: https://www.virustotal.com/gui/file/f3ae654a1211db4ca5bf27969e2e3656d802fc909f3722e063a0e9c3af068046/detection

181.141.1.159:7410
dcentrusr.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e15e14d4f42c20dfaa15e29e65593c0b0362de0801551b4cbaed225d97ab147d/detection

181.141.1.159:7705

# Reference: https://www.virustotal.com/gui/file/a92834f5295b701f2aa271307cd3e8959d6027f441bb38d38b92ce553401d684/detection

186.169.62.115:7705

# Reference: https://www.virustotal.com/gui/file/6fc91da548467acc30b6ef4c9d876a13a4a759845f4ced7a352c4992d173f798/detection

186.169.32.154:1419

# Reference: https://www.virustotal.com/gui/file/172248113f7fe51f82404c0b863ef684b2e4aa3038028781ef9ca63f790c099b/detection

179.13.0.25:8090

# Reference: https://www.virustotal.com/gui/file/1586a7a1f3423c5f0fbb40c7bd7763a753208612b44860b4bbeeafd616307bae/detection

186.169.80.56:2222

# Reference: https://www.virustotal.com/gui/file/045ec4e550472bc53e0810a8eb4f9a0a5eebfa9ff82101f5ad9b72c6b3bd0a08/detection

186.169.77.94:8987
doblelaidentedi.duckdns.org

# Reference: https://www.virustotal.com/gui/file/12421f490eb61ead9a29682998bf194a0180e518d5ae81d50585626cc3269b1f/detection

181.141.1.159:7375
losbunixxter.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/186.169.71.212/relations
# Reference: https://www.virustotal.com/gui/file/da8e138a345244ffee047b9f0955b2709bc1a62c87a88fad86c9c6d2da9712a2/detection

186.169.71.212:1999
bitoriar1.duckdns.org
chincarrrx.duckdns.org
estrenos1a.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5119b71d0d8cf2fc3219235f32b3f1db18a767d6236e44759038bf2a3c99e31a/detection
# Reference: https://www.virustotal.com/gui/file/1ae6feab07166639d980e3fc47c0700a9f70929ae3aac235008d8478ae84f619/detection

186.169.40.89:2535
submarinoxx.duckdns.org

# Reference: https://www.virustotal.com/gui/file/111ce55640090e2da12e262f3cc9dcf093136b41eb9eadc25630bb9da29b7050/detection

192.169.69.26:8080

# Reference: https://www.virustotal.com/gui/file/10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a/detection

46.246.84.18:5050
asegurar1s.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-04-06)

105.154.98.75:10000
147.185.221.18:18746
160.178.39.123:10000
179.13.0.175:5553
179.13.0.175:5554
18.158.249.75:10468
18.158.249.75:14390
18.192.31.165:10468
18.192.31.165:14390
18.192.31.165:18511
18.197.239.109:11964
18.198.77.177:14620
3.124.142.205:10468
3.124.142.205:18511
3.125.102.39:10468
3.125.102.39:18511
3.125.209.94:10543
3.125.223.134:10468
3.66.38.117:11964
3.68.171.119:11964
3.69.115.178:11964
3.69.157.220:11964
35.158.159.254:11464
41.142.31.190:10000
52.28.112.211:12117
52.28.247.255:11964
wasted9sss1-57718.portmap.host

# Reference: https://www.fortinet.com/blog/threat-research/scrubcrypt-deploys-venomrat-with-arsenal-of-plugins
# Reference: https://www.virustotal.com/gui/file/808aefd5bfe73a0d9ed8f08561e9b36fd63ce6c75899f1e140e7a7dea4886b05/detection
# Reference: https://www.virustotal.com/gui/file/7bb171f167f8ad95d3816e173781d6ef9433f074d7db0cb0dbb31f6536d6c3a4/detection

128.140.73.191:8895
185.36.188.52:8895
93.123.39.28:8895
rachesxwdavid.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8cc02a93a6ec92e0bf059ee4e7dc879cff73a03419673078d774fbe3eaa19139/detection

179.13.0.175:5554
firmes777.duckdns.org

# Reference: https://twitter.com/ScumBots/status/1778129404897394915
# Reference: https://www.virustotal.com/gui/file/ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710/detection

104.238.137.229:6363
powerup.dynuddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-04-10)

105.154.228.255:10000
136.243.179.5:1414
147.185.221.17:58503
147.185.221.19:17455
147.185.221.19:26628
147.185.221.19:28329
147.185.221.19:28632
147.185.221.19:29058
147.185.221.19:29545
147.185.221.19:29750
147.185.221.19:32481
147.185.221.19:32934
179.13.0.175:5555
179.13.0.175:5556
179.13.0.175:5557
179.13.2.154:5050
18.156.13.209:14095
18.158.249.75:10869
18.158.249.75:15296
18.158.249.75:15422
18.158.249.75:17393
18.158.249.75:19177
18.192.31.165:10543
18.192.31.165:15640
18.192.31.165:17231
18.192.31.165:19177
18.192.93.86:14095
18.192.93.86:14391
18.197.239.5:14095
192.169.69.26:35888
196.74.150.120:10000
3.121.139.82:12138
3.124.142.205:10869
3.124.142.205:15296
3.124.67.191:13306
3.125.102.39:10543
3.125.102.39:10869
3.125.102.39:14390
3.125.102.39:15019
3.125.102.39:17393
3.125.188.168:13306
3.125.209.94:14390
3.125.209.94:17393
3.125.209.94:19177
3.125.223.134:10869
3.125.223.134:15296
3.125.223.134:15422
3.125.223.134:17231
3.125.223.134:19177
3.126.224.214:13306
3.126.37.18:14095
3.127.138.57:17170
3.13.191.225:16969
3.13.191.225:19044
3.134.125.175:19044
3.14.182.203:19044
3.67.15.169:13306
3.68.56.232:13306
34.88.143.155:1177
35.157.111.131:13306
41.142.212.85:10000
41.200.95.182:5552
41.248.119.194:10000
41.249.108.177:10000
41.249.48.248:10000
41.46.230.155:1177
45.77.154.40:1177
46.147.123.30:5552
46.246.12.3:2552
46.246.14.10:1994
46.246.14.17:1994
46.246.14.23:1994
46.246.14.8:1994
46.246.6.20:1994
46.246.6.20:5050
46.246.84.12:1994
46.246.84.16:1994
5.39.43.50:6136
5.39.43.50:8096
82.205.72.17:8080
83.196.78.85:8080
aboft7e.ddns.net
artist-composed.gl.at.ply.gg
basic-values.gl.at.ply.gg
cars-fraction.gl.at.ply.gg
green-morrison.gl.at.ply.gg
newintento777.duckdns.org
other-tours.gl.at.ply.gg
parahoyestsidio.duckdns.org
quotes-nl.gl.at.ply.gg
report-dust.gl.at.ply.gg
require-spa.gl.at.ply.gg
returns-vary.gl.at.ply.gg
tue-jake.gl.at.ply.gg
wscript.ddns.net

# Reference: https://twitter.com/ScumBots/status/1778423930312630454
# Reference: https://www.virustotal.com/gui/file/41cbd49ef7c4e1953eb61e5d4b01f59c01d86a40028360fe7e83cabace5323a8/detection

179.13.0.175:5557
liverpool777.duckdns.org

# Reference: https://www.virustotal.com/gui/file/3e627caf802513a17c4cfb2fe30d0799f8b4f3d7570283a2b0ee45719cb5b531/detection

estesidiosplat.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d5287df696839eaff465b707962ff9ca0b5235a4890dc19465e3e4afde84013e/detection

auyametemplanza.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/46.25.149.106/relations
# Reference: https://www.virustotal.com/gui/file/7e9b93f8da21d4df37c470a5204bb35f98e50412024d5c4a90789101b966a824/detection

abrildetodosdios.duckdns.org
imagecarlos.duckdns.org
nuevoserver.duckdns.org
otroservidorcarlos.duckdns.org
porserver.duckdns.org
potserver.duckdns.org
servidorcarlos.duckdns.org
umbserver.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b2befa16b0dd02f8e8607be33879057250a5368fd1af9c4ee07c03902407686b/detection

194.5.98.8:8127
46.173.211.171:8127
controllerfinallineballinglove33.webredirect.org

# Reference: https://twitter.com/banthisguy9349/status/1783182687248753039
# Reference: https://www.virustotal.com/gui/file/3f3d54953eb69926e3d42970223e0929120a1fb260c00e4e78bc8d37848fe8d5/detection

http://91.202.233.234
91.202.233.234:443

# Reference: https://www.virustotal.com/gui/file/09f7555d4a04ad5f3f17b8e62f538052d9970d9e483ac1b41f3a194aa83b8680/detection

13.95.27.229:900
217.237.88.194:900
79.219.59.24:900
93.218.16.55:900
snowu.ddns.net

# Reference: https://www.virustotal.com/gui/file/5ef1ff8185f56af614f482d00c32b2112483b0e7900b282fb28200dbe8b0cb87/detection

178.128.228.252:5552
asero23.ddns.net

# Reference: https://www.virustotal.com/gui/file/d65e2a63a3e7cd2675134d15ae271d3b4f4920cf166e9cdfff34b2cf7b07b449/detection

45.141.215.185:7777
berlyn777.con-ip.com

# Reference: https://www.virustotal.com/gui/file/29fdf08b1ea7405f7a6771b74f75cd30e6247e5ffb9095abb4208c4572b4f81f/detection

85.60.29.68:1998

# Reference:  https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-02)

102.47.134.6:1177
147.185.221.19:36969
147.185.221.19:39209
147.185.221.19:39289
147.185.221.19:39657
147.185.221.19:42294
156.222.129.192:1177
160.176.159.27:10000
18.192.31.165:10266
18.192.31.165:12194
3.124.142.205:12194
3.124.67.191:10250
3.125.102.39:12194
3.125.188.168:10250
3.125.188.168:14964
3.125.223.134:12194
3.67.15.169:10250
35.157.111.131:14964
46.246.80.19:1994
46.246.86.14:1994
62.16.66.34:1177
analysis-minolta.gl.at.ply.gg
phentermine-partial.gl.at.ply.gg
reviews-christians.gl.at.ply.gg
teaching-wireless.gl.at.ply.gg
these-accommodation.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/97062684032896b1fba2953746157bb3f7385c8ad5fe25a2b250b1595af56232/detection
# Reference: https://www.virustotal.com/gui/file/7d65cd503e02c6764cd9e2bb39c857a36620f4bdb441067c58a8b7701279d2cc/detection
# Reference: https://www.virustotal.com/gui/file/538472afeb7481d38558344b73f1026ab9b2d9afbddaa929fad402a29b079648/detection

46.119.220.241:7777
njconnect.duckdns.org

# Reference: https://www.virustotal.com/gui/file/864b8f72dd30eebfc468355ce7960928eaa9a40e5ed52fa228c184e573cf3521/detection

102.188.149.156:5555
102.46.149.233:5555
102.47.223.168:5555
105.196.137.169:5555
194.127.178.224:5555
196.157.103.228:5555
197.132.65.63:5555
197.37.104.46:5555
197.37.111.190:5555
197.37.140.174:5555
197.37.198.12:5555
197.37.229.172:5555
197.37.233.55:5555
197.37.33.248:5555
197.58.154.105:5555
197.58.43.133:5555
41.43.12.86:5555
41.43.55.99:5555
41.68.112.224:5555
41.68.56.78:5555
41.69.33.153:5555
41.69.35.144:5555
41.69.47.180:5555

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-11)

104.250.172.89:1177
105.154.96.186:10000
105.155.173.158:10000
147.185.221.18:46584
147.185.221.19:47021
18.158.58.205:14420
18.192.31.165:11168
18.192.93.86:14858
196.65.165.110:10000
3.125.223.134:11168
3.127.138.57:17751
3.67.161.133:14420
3.67.62.142:14420
41.249.40.69:10000
46.246.82.10:2054
5.39.43.50:1337
51.158.202.242:443
asra1.ddns.net
few-madrid.gl.at.ply.gg
levantain.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-12)

103.206.109.165:1177
106.75.218.92:1177
147.185.221.18:34625
147.185.221.19:10345
18.158.249.75:12222
18.192.31.165:12222
18.197.239.109:18014
3.121.139.82:10948
3.124.142.205:12222
3.67.161.133:11843
41.142.26.2:10000
study-window.gl.at.ply.gg
vacation-nails.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-15)

103.206.109.165:1177
106.75.218.92:1177
147.185.221.18:34625
147.185.221.19:10345
160.177.79.24:10000
18.158.249.75:12222
18.158.249.75:16602
18.158.249.75:19048
18.192.31.165:12222
18.192.31.165:12841
18.197.239.109:18014
3.121.139.82:10948
3.124.142.205:12222
3.124.142.205:12272
3.124.142.205:16602
3.125.102.39:16602
3.125.223.134:12841
3.125.223.134:16602
3.127.253.86:10948
3.127.59.75:10948
3.67.161.133:11843
41.142.26.2:10000
45.245.103.148:5555
52.28.112.211:10948
okilometros.duckdns.org
study-window.gl.at.ply.gg
vacation-nails.gl.at.ply.gg
venomm.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-18)

147.185.221.19:52445
147.185.221.19:54921
147.185.221.19:54934
147.185.221.19:55286
160.176.173.93:10000
18.197.239.5:14141
18.198.77.177:11598
3.125.209.94:12194
3.127.59.75:11598
35.158.159.254:11598
41.142.192.216:10000
41.249.51.52:10000
45.245.96.209:1177
allows-hindu.gl.at.ply.gg
an-take.gl.at.ply.gg
tool-seven.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/d422eaabc8ad234cbfe79ef20dbbd6386fa5a367c9da869a33cac7379830a6d7/detection

3.121.139.82:17748
3.127.253.86:17748
3.127.59.75:17748
35.158.159.254:17748
52.28.112.211:17748

# Reference: https://x.com/SarlackLab/status/1793040260663849349

147.185.221.19:47823
production-reservation.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-23)

105.104.48.230:5552
105.154.100.36:10000
147.124.205.158:40544
147.185.221.18:21679
147.185.221.19:26075
147.185.221.19:56071
147.185.221.19:60143
160.178.192.178:10000
160.179.60.231:10000
18.158.249.75:14088
18.158.249.75:18134
18.158.249.75:19473
18.158.58.205:15949
18.192.31.165:14088
18.192.31.165:14740
18.192.31.165:19473
18.192.93.86:10614
18.197.239.109:13006
18.197.239.5:10614
188.226.118.231:1527
196.64.243.43:10000
199.223.235.67:5050
209.25.141.2:42240
209.25.141.2:42759
3.124.142.205:14088
3.124.142.205:18134
3.124.142.205:19473
3.125.102.39:14088
3.125.102.39:14740
3.125.102.39:19473
3.125.209.94:14088
3.125.209.94:14740
3.125.223.134:14088
3.125.223.134:14740
3.125.223.134:18134
3.125.223.134:19473
3.126.37.18:10614
3.127.138.57:10614
3.13.191.225:15743
3.17.7.232:15743
3.68.171.119:13006
3.69.115.178:13006
3.69.157.220:13006
3.69.157.220:15748
41.249.104.99:10000
41.249.41.48:10000
45.76.129.156:5050
80.92.204.233:7765
nirate.duckdns.org
njrat.hopto.org
njrat.servequake.com
njrat.zapto.org
njrat2.ddns.net
njrat3.ddns.net
njrat59.ddns.net
njrat8.ddns.net
njrat8.onlycash.ddns.net
njrat88.ddns.net
njrath.ddns.net
njratk.ddns.net
njratk.myddns.me
njratvtope30.ddns.net
njratxd.ddns.net
njraty.ddns.net
onlycash.ddns.net
spygate.myftp.biz
subjects-handbook.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-26)

147.185.221.17:41021
147.185.221.19:36946
160.176.158.157:10000
160.177.77.232:10000
192.169.69.25:2054
192.169.69.25:3042
192.169.69.25:5060
3.121.139.82:14200
3.125.209.94:13265
3.125.223.134:13265
41.142.211.38:10000
njratnew.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e4090dea60b82a8f409fc16bd7ac7f48f9b49ea8bb2f8568b6a8f0e899a78e83/detection

proxymayo.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e41d211ec823670eb1c4531fdb90d1f89dc89c02e0c66d239db8e48deaf8ae68/detection

181.52.113.4:3042
186.85.86.19:3042
23.105.131.165:3042
23.105.131.200:3042
23.105.131.211:3042
93.87.38.27:3042
julio2018.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-05-27)

105.154.228.100:10000
147.185.221.19:32384
18.156.13.209:10092
18.157.68.73:10092
18.158.58.205:14522
18.192.31.165:15881
18.192.93.86:10092
18.197.239.5:10092
197.202.219.104:555
3.126.37.18:10092
3.127.138.57:10092
3.127.181.115:14522
3.64.4.198:14522
3.66.38.117:17680
3.67.161.133:14522
45.76.129.156:1177
control-road.gl.at.ply.gg
x555hd.ddns.net

# Reference: https://www.virustotal.com/gui/file/6851448bcd3deefba2fa24c36a3805b458907ae95558dbb0f0e2ccc15fa29900/detection
# Reference: https://www.virustotal.com/gui/file/29f9fb58270da9ed50541ff495dd0574fc391f67ecbc6aa5ffe7428626300abd/detection

195.10.205.162:2864
195.10.205.162:2865
anticoresa9923p.hopto.org
dwdtte4wjfk8ds5.hopto.org
fdute32sdajfsda.hopto.org
pristolmag32dds.hopto.org
webarhiv23dasda.hopto.org

# Reference: https://www.virustotal.com/gui/file/ea08018d240117fef9315b7573fb6b45c3215f91410767e5adc6c9991b9625eb/detection

181.141.0.113:9090

# Reference: https://www.virustotal.com/gui/file/12c7635a430c981ba031fb4b54a8e21026dd99068581f6852d89a052925ca235/detection

181.141.0.188:7171

# Reference: https://www.virustotal.com/gui/ip-address/181.141.0.30/relations
# Reference: https://www.virustotal.com/gui/file/6c3d60771d36ef61cdd28b5edbe1f12120abf4d23dc81082a793ccc07c78653f/detection
# Reference: https://www.virustotal.com/gui/file/b8bc620f9c74840fca808be7e4cada94e9d6d1f34a4bb573b06be2218220a677/detection

181.141.0.30:1986
2021cacha.duckdns.org
cachaenvio.ddns.net
cachanuevo.duckdns.org
santiagonasar.duckdns.org
santiagonasar2.duckdns.org
sostcacha.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/46.246.12.22/relations
# Reference: https://www.virustotal.com/gui/file/b533fd79294e744c1cb60880238229237dac060af184ec1b43b95fddabdf4f53/detection

46.246.12.22:1177
asq33.ddns.net
notificacionesonline.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e4f4b8b7eb8f16db8ae91e6b4751aa2221b8e965079813ce558b6cd9d40cb5f5/detection

46.246.4.5:5552
5552root.duckdns.org

# Reference: https://www.virustotal.com/gui/file/7fe4ccdc9044a4388ef639efc6d88bebad971d2d24f5c2dc9bf0afd8915edfcd/detection

178.73.192.6:2306
carl2306.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-01)

147.185.221.19:45758
147.185.221.19:49671
193.161.193.99:42772
209.25.140.211:23521
209.25.141.211:23521
3.124.142.205:443
3.127.138.57:17169
3.14.182.203:16424
3.17.7.232:16424
3.22.30.40:16424
34.125.100.30:5050
46.246.86.11:2054
gorodpro-42772.portmap.host
tips-prairie.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-07)

105.154.226.162:10000
105.155.167.141:10000
147.185.221.19:43028
147.185.221.20:9426
160.176.174.24:10000
179.14.9.101:8093
18.158.249.75:18801
18.158.58.205:15212
18.192.31.165:17739
18.192.31.165:18801
18.192.31.165:443
18.192.93.86:11520
181.137.128.103:8093
181.140.198.9:8093
181.236.15.113:8093
181.236.23.84:8093
181.71.30.104:8093
186.99.155.196:8093
190.9.208.237:8093
190.9.209.175:8093
190.9.221.79:8093
191.88.250.12:8093
191.89.220.62:8093
193.161.193.99:44070
3.124.142.205:18801
3.124.67.191:15023
3.125.102.39:16276
3.125.102.39:17739
3.125.209.94:443
3.125.223.134:12374
3.125.223.134:443
3.134.125.175:16424
3.6.122.107:10680
3.64.4.198:15212
4.203.104.98:1024
49.13.194.118:5552
80.253.239.170:31089
91.92.241.69:5555
95.179.228.20:1177
95.179.228.20:5050
an-taxi.gl.at.ply.gg
icpanel.hackcrack.io
njnegro8093.duckdns.org
so-taxi.gl.at.ply.gg
win32.duckdns.org

# Reference: https://www.virustotal.com/gui/file/75c625f8e38aadf012da9810c54cada596fa9048bb957ad5436b87a03d7f0927/detection

193.161.193.99:20116
moi005348-20116.portmap.host

# Reference: https://www.virustotal.com/gui/file/14144cb8b6090977de009843c20af95294999307cb376d24461fdc8087847b6d/detection

181.140.201.213:8093

# Reference: https://www.virustotal.com/gui/file/d2f5920bb40f1b8da9dd53ce249fa01c17b025dc43e509d59da60201797da213/detection

190.9.203.49:8093

# Reference: https://x.com/banthisguy9349/status/1798435046484762929
# Reference: https://www.virustotal.com/gui/file/4c525bdf4c3af0854111956c004b5a9a6a9e18b015b65fe043c4bfcbeccdf1c2/detection

http://91.92.250.123
91.92.250.123:5901
zebralee0.duckdns.org

# Reference: https://x.com/SarlackLab/status/1799427607605170228

105.105.234.158:555
bahidll.ddns.net

# Reference: https://www.virustotal.com/gui/file/46349a3d6ab10b8b947cdc3458ab9e7fcdf18a012b1f0575c8251c01c88fda07/detection

105.105.225.81:5552
105.105.226.183:5552
105.105.227.57:5552
105.105.234.158:5552
105.105.238.225:5552
105.105.239.131:5552
105.105.239.81:5552
105.105.240.137:5552
105.105.241.13:5552
105.105.242.181:5552
105.105.246.250:5552
105.105.249.92:5552
105.105.255.143:5552
105.106.41.25:5552
105.106.46.19:5552
105.106.47.74:5552
105.106.52.29:5552
105.106.54.133:5552
105.106.55.82:5552
105.106.61.241:5552
105.106.72.113:5552
105.106.74.208:5552
105.106.75.140:5552
105.106.77.210:5552
105.106.77.220:5552
105.106.78.132:5552
105.106.79.97:5552
105.106.92.152:5552
105.106.93.0:5552
105.106.94.149:5552
105.109.106.244:5552
105.109.112.232:5552
105.109.114.3:5552
105.109.115.230:5552
105.109.121.1:5552
105.111.103.14:5552
105.111.106.46:5552
105.111.111.196:5552
105.111.115.24:5552
105.111.115.54:5552
105.111.116.95:5552
105.111.117.167:5552
105.111.117.49:5552
105.111.121.83:5552
105.111.42.216:5552
105.111.44.250:5552
105.111.48.62:5552
105.111.50.5:5552
105.111.51.127:5552
105.111.52.140:5552
105.111.58.45:5552
105.111.60.160:5552
105.111.60.35:5552
105.111.62.128:5552
105.111.96.247:5552
105.111.98.37:5552
105.111.99.20:5552
187.104.96.106:5552
197.201.51.141:5552
197.201.59.144:5552
197.201.60.194:5552
197.201.61.237:5552
197.202.105.101:5552
197.202.107.90:5552
197.202.111.116:5552
197.202.114.145:5552
197.202.114.27:5552
197.202.119.178:5552
197.202.200.28:5552
197.202.200.52:5552
197.202.202.79:5552
197.202.204.167:5552
197.202.204.80:5552
197.202.209.126:5552
197.202.209.99:5552
197.202.213.144:5552
197.202.214.141:5552
197.202.214.159:5552
197.202.214.55:5552
197.202.215.210:5552
197.202.216.251:5552
197.202.219.104:5552
197.202.222.75:5552
197.202.96.40:5552
197.207.195.25:5552
197.207.201.87:5552
197.207.208.86:5552
197.207.208.93:5552
197.207.213.248:5552
197.207.214.104:5552
41.200.103.10:5552
41.200.105.145:5552
41.200.106.144:5552
41.200.108.191:5552
41.200.118.202:5552
41.200.121.180:5552
41.200.123.186:5552
41.200.125.225:5552
41.200.127.161:5552
41.200.127.221:5552
41.200.129.207:5552
41.200.136.104:5552
41.200.136.47:5552
41.200.139.145:5552
41.200.139.212:5552
41.200.140.147:5552
41.200.142.12:5552
41.200.150.74:5552
41.200.151.125:5552
41.200.151.225:5552
41.200.154.51:5552
41.200.157.188:5552
41.200.158.180:5552
41.200.159.120:5552
41.200.160.134:5552
41.200.161.130:5552
41.200.162.95:5552
41.200.168.25:5552
41.200.172.34:5552
41.200.177.74:5552
41.200.186.181:5552
41.200.189.253:5552
41.200.190.145:5552
41.201.115.217:5552
41.201.118.24:5552
41.201.119.131:5552
black007.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-09)

147.185.221.20:7974
18.156.13.209:17435
18.157.68.73:17435
196.217.71.182:10000
3.125.102.39:17046
3.64.4.198:13678
experience-apart.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-12)

105.155.171.91:10000
144.202.69.96:22868
147.185.221.18:27425
147.185.221.20:10324
147.185.221.20:15337
147.185.221.20:7974
18.156.13.209:17435
18.157.68.73:17435
18.158.249.75:11331
18.158.58.205:16307
18.192.31.165:19926
18.198.77.177:18227
196.217.71.182:10000
3.125.102.39:17046
3.125.102.39:19926
3.125.209.94:11331
3.125.209.94:19926
3.125.223.134:11331
3.125.223.134:19926
3.127.253.86:18227
3.127.59.75:18227
3.64.4.198:13678
41.142.208.122:10000
41.248.117.232:10000
41.44.209.185:5552
46.246.6.8:2054
born-administrative.gl.at.ply.gg
experience-apart.gl.at.ply.gg
jokarrrrr333322.ddns.net
listing-trackbacks.gl.at.ply.gg
nuevos2024.duckdns.org

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-19)

105.154.97.216:10000
107.175.31.172:5552
147.185.221.18:53098
147.185.221.20:21552
147.185.221.20:21854
147.185.221.20:21936
147.185.221.20:23193
147.185.221.20:25701
147.185.221.20:30481
154.247.143.197:5552
160.177.58.73:10000
179.13.6.213:2019
18.158.249.75:10651
18.158.249.75:10942
18.158.249.75:12143
18.158.249.75:12876
18.158.249.75:12984
18.158.249.75:13022
18.158.249.75:15683
18.158.249.75:19650
18.158.58.205:13687
18.192.31.165:12143
18.192.31.165:12876
18.192.31.165:19650
192.169.69.25:2089
192.227.228.34:1124
20.ip.gl.ply.gg
3.124.142.205:10651
3.124.142.205:12876
3.124.142.205:12984
3.124.142.205:15683
3.124.142.205:19650
3.125.102.39:10651
3.125.102.39:10942
3.125.102.39:12143
3.125.102.39:12876
3.125.102.39:12984
3.125.102.39:15683
3.125.102.39:19650
3.125.188.168:17799
3.125.209.94:10651
3.125.209.94:10942
3.125.209.94:12143
3.125.209.94:12876
3.125.209.94:12984
3.125.209.94:13022
3.125.209.94:15683
3.125.209.94:19650
3.125.223.134:10651
3.125.223.134:10942
3.125.223.134:12143
3.125.223.134:12876
3.125.223.134:12984
3.125.223.134:19650
3.64.4.198:13687
3.67.112.102:13687
3.67.62.142:13687
41.249.109.159:10000
41.249.109.69:10000
41.249.41.241:10000
45.32.168.59:6363
85.234.6.210:1337
america-dividend.gl.at.ply.gg
carlitosmoreno1794.duckdns.org
different-been.gl.at.ply.gg
duckduck2021.duckdns.org
license-reception.gl.at.ply.gg
month-luxembourg.gl.at.ply.gg
northern-suggested.gl.at.ply.gg
windows-app.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-22)

109.187.163.140:12550
147.185.221.19:14127
147.185.221.20:16906
147.185.221.20:33475
147.185.221.20:33694
147.185.221.20:33823
18.158.249.75:15809
18.192.31.165:10148
18.197.239.109:14452
18.197.239.109:18942
18.198.77.177:17778
193.161.193.99:34880
3.121.139.82:17778
3.124.142.205:10935
3.125.102.39:10935
3.125.102.39:15809
3.125.209.94:15809
3.125.223.134:10148
3.125.223.134:10935
3.127.253.86:17778
3.66.38.117:18942
3.68.171.119:18942
3.69.115.178:18942
3.69.157.220:18942
41.249.109.189:10000
41.249.49.248:10000
52.28.247.255:17524
deadsecc-34880.portmap.host
grade-excellence.gl.at.ply.gg
lake-french.gl.at.ply.gg
minutes-nirvana.gl.at.ply.gg
remember-sail.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-23)

147.185.221.20:21472
147.185.221.20:36706
147.185.221.20:38713
18.158.249.75:14500
18.192.31.165:14500
18.192.31.165:19145
193.161.193.99:25730
3.126.37.18:11166
3.127.138.57:11166
41.47.231.58:5552
bar-fri.gl.at.ply.gg
christian-printed.gl.at.ply.gg
deadsec69-52782.portmap.host
delivery-cookie.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-26)

105.156.33.223:10000
147.185.221.20:17341
147.185.221.20:29565
147.185.221.20:38826
147.185.221.20:42900
147.185.221.20:42975
160.179.71.4:10000
18.158.249.75:11457
18.192.31.165:11457
18.192.31.165:12493
196.217.71.18:10000
3.124.142.205:11457
3.124.142.205:12493
3.125.102.39:11457
3.125.223.134:11457
3.125.223.134:12493
41.249.244.52:10000
46.0.47.77:25565
88.168.211.65:6522
known-girls.gl.at.ply.gg
park-curve.gl.at.ply.gg
press-higher.gl.at.ply.gg
voper.onthewifi.com

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-07-01)

147.185.221.19:48615
147.185.221.20:22517
147.185.221.20:37993
147.185.221.20:50199
160.177.56.173:10000
160.177.73.220:10000
172.232.164.13:1177
18.158.249.75:16163
18.158.249.75:19060
18.192.31.165:16163
18.192.31.165:19060
192.169.69.25:1316
193.161.193.99:39182
194.26.192.92:5552
196.65.155.135:10000
196.65.173.92:10000
3.124.142.205:16163
3.124.142.205:19060
3.125.102.39:16163
3.125.102.39:19060
3.125.209.94:16163
3.125.209.94:19060
3.125.223.134:16163
3.125.223.134:19060
35.157.111.131:11619
41.249.242.121:10000
photos-money.gl.at.ply.gg
provided-existence.gl.at.ply.gg
them-recommended.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/19d10df70920e424f3fe70e8141487cb57d12fa60d8a8b2fd35fbb4094e97efa/detection

45.246.15.155:5552
asdaryder.duckdns.org

# Reference: https://www.virustotal.com/gui/file/5a910ff7b3124c5b99caa084ce3ed9879ec48a06a0548be5cb191e1ccedfb7ff/detection

209.25.142.223:35135
supply-deputy.at.ply.gg

# Reference: https://x.com/malwareforme/status/1809257799387361422
# Reference: https://www.virustotal.com/gui/file/45d3063b41fc1d6c8387600e49b6da5c8ec9909ef3636d539ca2a10aec7f3c59/detection

18.136.148.247:11509
18.139.9.214:11509
18.141.129.246:11509
52.220.121.212:11509

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-06-07)

105.154.107.145:10000
105.157.150.238:10000
147.185.221.20:26916
147.185.221.20:47561
160.177.68.83:10000
178.78.19.238:1337
43.255.241.232:5555
five-sequences.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-07-10)

105.155.167.249:10000
147.185.221.18:32415
147.185.221.19:32714
147.185.221.20:59813
147.185.221.21:3238
147.185.221.21:4041
147.185.221.21:5008
147.45.184.183:4158
18.157.68.73:16943
18.158.58.205:12761
18.177.76.42:18505
18.192.93.86:16943
18.197.239.109:15358
18.198.77.177:15003
3.121.139.82:15003
3.67.112.102:12761
3.67.62.142:12761
78.166.68.148:5552
88.226.188.159:5552
88.254.253.189:5552
jvjv2044duck33.duckdns.org
made-infant.gl.at.ply.gg
politics-installing.gl.at.ply.gg
unit-latinas.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/e57ba03f05fa28bcac47a9089fe8b41dbc730749b977e17e2d8df3d72fef07d9/detection

147.50.253.109:5552

# Reference: https://www.virustotal.com/gui/file/456e968929860d9df07ee4207265c560000aafedabbf9ef4dde534914fe6814d/detection

laimboitve.i234.me

# Reference: https://www.virustotal.com/gui/file/454e959a58fc333867d8c14038882b1a8553ebedb190a1c00aa64d46e9c13a00/detection

180.174.201.34:9998
xiezi.i234.me

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat (# 2024-07-29)

105.154.100.59:10000
122.89.105.29:10000
147.185.221.18:37615
147.185.221.19:30060
147.185.221.20:36100
147.185.221.20:55257
147.185.221.20:64407
147.185.221.20:7436
147.185.221.21:11656
147.185.221.21:12292
147.185.221.21:14200
147.185.221.21:14365
147.185.221.21:14640
147.185.221.21:15158
147.185.221.21:18082
147.185.221.21:19455
147.185.221.21:2094
147.185.221.21:30335
147.185.221.21:31388
147.185.221.21:32157
147.185.221.21:35584
147.185.221.21:35975
147.185.221.21:6240
147.185.221.21:6567
147.185.221.21:6643
147.185.221.21:6703
147.185.221.21:6732
147.185.221.21:9137
147.185.221.21:9212
147.185.221.21:9316
147.185.221.21:9755
160.176.168.17:10000
160.176.168.94:10000
160.177.77.33:10000
167.71.14.135:1118
176.97.210.241:5552
18.156.13.209:15240
18.158.249.75:16730
18.158.58.205:17742
18.192.93.86:15240
18.198.77.177:14294
18.229.140.246:1177
196.206.78.106:10000
196.206.79.116:10000
196.64.248.166:10000
3.125.209.94:16730
3.125.223.134:14213
3.126.37.18:17814
3.127.138.57:15240
3.127.181.115:17742
3.64.4.198:17742
3.67.112.102:17742
3.67.161.133:17742
3.67.62.142:17742
34.102.5.126:1177
34.102.5.126:5050
41.142.19.187:10000
41.142.37.55:10000
41.142.43.242:10000
41.249.105.66:10000
41.249.55.89:10000
45.83.207.67:4545
45.83.207.67:6522
45.83.207.67:6652
46.246.82.15:6060
89.117.23.25:35999
89.213.177.81:6969
94.213.226.126:3001
advanced-cognitive.gl.at.ply.gg
answers-crisis.gl.at.ply.gg
away-displays.gl.at.ply.gg
commission-machines.gl.at.ply.gg
components-resort.gl.at.ply.gg
credit-ecommerce.gl.at.ply.gg
data-dakota.gl.at.ply.gg
desquare27.duckdns.org
engine-cheers.gl.at.ply.gg
fyn001.ddns.net
id-diesel.gl.at.ply.gg
idea-bernard.gl.at.ply.gg
insurance-helmet.gl.at.ply.gg
le-pencil.gl.at.ply.gg
linternadc24.duckdns.org
mrat23009.dyndns.org
njas.duckdns.org
peter-tampa.gl.at.ply.gg
service-extract.gl.at.ply.gg
talk-saturn.gl.at.ply.gg
troia23.duckdns.org
within-gym.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-08-03)

105.154.227.238:10000
147.185.221.21:33869
147.185.221.21:40618
178.208.235.89:5552
18.157.68.73:14407
18.192.93.86:14407
18.197.239.5:14407
192.169.69.25:655
192.169.69.26:1990
213.152.187.220:9992
3.126.37.18:14407
3.126.37.18:15558
3.127.138.57:15558
41.140.55.35:10000
83.147.38.162:3333
health-wants.gl.at.ply.gg
pulgetirmene.duckdns.org
suecia12.duckdns.org

# Reference: https://www.virustotal.com/gui/file/d01e55d45de70907ad0b3d252c167ff5235ca293ed15db6fd2ca3d8ded6f986f/detection

113.125.119.153:5552

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-08-11)

103.174.190.140:1177
110.42.103.140:1177
147.185.221.17:3969
147.185.221.21:32949
147.185.221.21:33326
147.185.221.21:49359
147.185.221.21:55658
160.177.71.84:10000
193.161.193.99:39601
196.217.66.97:10000
197.206.154.56:1177
23.133.216.16:1406
3.121.139.82:15902
3.127.253.86:15902
34.154.67.14:5050
41.105.146.4:1177
41.105.153.92:1177
41.142.36.213:10000
5.166.166.2:5552
DeadSec69-52782.portmap.host
DeadSecc-34880.portmap.host
SIGMA125789-39601.portmap.host
angela-kindly.with.playit.plus
beeoann.hackcrack.io
latest-wrong.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/fd504350f93e4db3dfc1990c814bc73e5e6e3013b11d540984c1434ab6d1514a/detection
# Reference: https://www.virustotal.com/gui/file/89c87836319330b3a2609025cbace9620e4a73ca6cb75529a0de1908508a3f1c/detection

103.121.12.215:8080
103.121.12.242:8080
survice440.ddns.net

# Reference: https://www.virustotal.com/gui/ip-address/46.246.6.66/relations
# Reference: https://www.virustotal.com/gui/file/a7be17d48f2158c825c40ea46e1014924c2db2f707a528814757233d07e1eb1d/detection

109.88.60.249:1122
46.246.6.66:1122
catatumbo.duckdns.org
finanzaz.duckdns.org
leoleo.duckdns.org
octubre28.duckdns.org
poiuuytrfghjkl.hopto.org
profe6666.duckdns.org
serdfty.duckdns.org

# Reference: https://www.virustotal.com/gui/file/04358ed322a31ea1cbecede48d4aab3e0d418901560d7e324bdfe39fb648a174/detection

178.73.218.65:5552
178.73.218.67:5552

# Reference: https://www.virustotal.com/gui/ip-address/46.246.14.68/relations
# Reference: https://www.virustotal.com/gui/file/0ec86dcf6ae6dc1268b085fe6ef90a2eff59c290e583619b5167fc98e63d5dc8/detection

2.90.139.12:1177
46.246.14.68:1177
65.191.34.109:6000
b3rkber.ddns.net
capurgol.duckdns.org
news2091.duckdns.org
southwork.access.ly
subfrontier.duckdns.org
testedian.duckdns.org
wiznon.000webhostapp.com

# Reference: https://www.virustotal.com/gui/file/a4e7f1fc9fd66d0b735f507dc737aabb7c1c8db9358a8244fddcc5abd2c0bb3f/detection

192.169.69.25:9999
46.246.6.66:9999
46.246.86.66:9999

# Reference: https://www.virustotal.com/gui/file/af3cfac4b29cfc14fad4e399c2ec624e967faed24eeaf0c98be4b7ceae47c1e9/detection

46.246.6.65:5552
mohammed1.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/d115012bc971ff02102d8078edb9f0198c7a4f5397779684c6cd059c219e3a4f/detection
# Reference: https://www.virustotal.com/gui/file/b1cf16cb1110a4fe08c0445e0d2697cfb5c1fbbe6b75cbe9e6cc8ce0e0e6d11a/detection

141.255.146.178:5558
141.255.152.72:5558
141.255.157.100:5558
192.169.69.25:5558
microsoftcorporation32.duckdns.org

# Reference: https://www.virustotal.com/gui/file/eb1c3a6a52d2cdfa814ac076bcb347da76b5b67c0fa0bffc3741927599f6e93f/detection
# Reference: https://www.virustotal.com/gui/file/ceed137059b2438a27085c6341dd16098a16fd52d6fbdf133acfbcb94952802f/detection
# Reference: https://www.virustotal.com/gui/file/7ae82ca9df2451cd2dbb2694d3f1e13fc8d8c02e6e5bbeae4cf12d1892eb2001/detection

46.246.13.15:3030
besouro212.duckdns.org
martes22.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1043faf46b5a19cbe10410e01725b38caf0db7f36b73c68e103ebca8da2d18d2/detection

49.13.194.118:53848
checkforupdate.sytes.net

# Reference: https://www.virustotal.com/gui/file/78413951e8459a4a2c63f33c14cdbdb78fb52ef323d1fd2dc442310f82a6b60b/detection

91.107.150.184:5552

# Reference: https://www.virustotal.com/gui/file/782d29c6ed2084e98131b402c93e458fd7ffa8b2d203b193e80ba960084460e6/detection

91.107.150.184:8585

# Reference: https://www.virustotal.com/gui/file/4352e3deae2ae7b8a819e024e13044753ae2cd3d98f837271adfb4dc1a4e3c11/detection

91.107.150.184:8085

# Reference: https://x.com/SarlackLab/status/1824434018009378817

157.230.28.235:5552
dovelabobzgnan.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-08-25)

107.178.223.183:1118
144.202.69.96:22021
147.185.221.17:38386
147.185.221.20:16162
147.185.221.20:47570
147.185.221.21:41058
147.185.221.21:55020
147.185.221.21:64028
147.185.221.21:64197
147.185.221.22:10825
147.185.221.22:11149
147.185.221.22:11937
147.185.221.22:18022
154.215.14.34:5552
157.245.65.139:22354
160.177.67.14:10000
176.122.66.4:27025
193.235.207.126:5555
194.156.90.170:6522
3.126.224.214:18819
41.142.194.40:10000
41.249.60.29:10000
46.246.12.19:3100
84.32.231.176:1610
94.13.152.8:25565
born-brandon.gl.at.ply.gg
great-it.gl.at.ply.gg
members-flower.gl.at.ply.gg
nj3100.duckdns.org
pretty-dressed.gl.at.ply.gg
senior-feeding.gl.at.ply.gg
since-searching.gl.at.ply.gg
storage-assigned.gl.at.ply.gg
zealous-pine-98499.pktriot.net

# Reference: https://www.virustotal.com/gui/file/a13fe6506649e86d2192ddc191de7fc40499042766af9ba38afbf9e021798032/detection
# Reference: https://www.virustotal.com/gui/file/7c65f666c1a815672f8c824295f3a936739a1b9b79a2ae62241aae30517478c1/detection
# Reference: https://www.virustotal.com/gui/file/67bbcde13c5d867ba5f72b8481b96cb285808ef216b931684e32a049b2048df3/detection

109.200.23.151:1177
109.200.23.254:1177
cdhackcs.duckdns.org

# Reference: https://www.virustotal.com/gui/file/22ae9e0bf975d2592604264e25c0487b9ec2e75b2f2691525d7ca684f0a91a5d/detection

91.109.176.9:5552
ali77.ddns.net

# Reference: https://app.validin.com/detail?type=ip&find=91.109.190.5#tab=resolutions

ajeer-doc.ddns.net
cedars.ddns.net
flatland.ddns.net
hamza1.ddns.net
kazanski.ddns.net
q8.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-09-08)

147.185.221.17:43143
147.185.221.22:17987
147.185.221.22:19892
147.185.221.22:23392
147.185.221.22:28379
147.185.221.22:5050
179.13.4.37:8030
18.158.249.75:13886
18.158.249.75:13913
18.158.249.75:18863
18.176.183.3:12215
18.177.0.235:12215
18.177.53.48:12215
18.177.60.68:12215
18.177.76.42:12215
18.192.31.165:13886
18.192.31.165:13913
181.235.8.14:2828
197.206.97.68:999
3.124.142.205:13886
3.124.142.205:13913
3.124.142.205:18863
3.125.102.39:13886
3.125.102.39:18863
3.125.209.94:13886
3.125.209.94:13913
3.125.209.94:18863
3.125.223.134:13886
3.125.223.134:18863
34.139.67.10:5050
brands-colors.gl.at.ply.gg
carlos1983dc.duckdns.org
discount-coordinate.gl.at.ply.gg
done-declared.gl.at.ply.gg
fdfdsfdsag.duckdns.org
friend-tr.gl.at.ply.gg
industry-detective.gl.at.ply.gg
michael2009nj.duckdns.org
politics-mortgages.gl.at.ply.gg
seznam.hopto.org
someone-entering.gl.at.ply.gg
word-lang.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/04f1bc11ba152c93ee2e2e7b85ef87342b336a1dbe8cb9891252890be12dd953/detection

fantomazzz.ddns.net

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-09-22)

103.130.147.13:5552
147.185.221.18:61276
147.185.221.22:26471
147.185.221.22:28135
147.185.221.22:32480
147.185.221.22:42449
147.185.221.22:53273
147.50.253.94:5557
172.210.195.22:7777
18.158.249.75:10472
18.158.249.75:11348
18.158.58.205:14885
18.192.31.165:10472
18.192.31.165:11348
192.169.69.25:6565
192.169.69.26:1006
3.124.142.205:11348
3.125.102.39:10472
3.125.102.39:11348
3.125.209.94:10472
3.125.209.94:11348
3.125.223.134:10472
3.125.223.134:11348
3.67.161.133:14885
3.67.62.142:14885
34.145.18.233:1177
41.102.24.137:5552
levels-plane.gl.at.ply.gg
milandvb.no-ip.net
mohmoh002.ddns.net
sound-falls.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/439f0fe3f994fb8d5c051b26aab44bba7f6652540e350b6cad5661e3f12e8286/detection

209.105.248.135:2023

# Reference: https://www.virustotal.com/gui/file/76909f885c6b7247c7176b2cc08830c78b8b831bf7d3f0d9eec38da53e8ae93b/detection
# Reference: https://www.virustotal.com/gui/file/8de8600b0a88e3877b67f20873ae61bd6b3398a5f837ede359e58b06b31c7e4d/detection

167.0.201.5:9001
02oct.duckdns.org

# Reference: https://www.virustotal.com/gui/file/48bb80b78ab20e88487589c0d691bd65a8d40f785d2d18d54c06bbedd09ca559/detection
# Reference: https://www.virustotal.com/gui/file/adb4ab991e972507eb4325d4ac6863fcb02f295dce69cf567e276b21be89ca50/detection

186.169.63.46:3737
sundsvall00020.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0858bcdee705bac1d955b50275a457aa73952087d12604b6ba71b86dd0d91276/detection

45.76.178.207:1599
ztzmszkz01.ddns.net

# Reference: https://www.virustotal.com/gui/file/dd192792d3d131857253d8ddb84694afedcd393e6dd8eb95a0c7ec7ceda5c87b/detection

45.32.9.109:1599
zzzzz45329109.ddns.net

# Reference: https://x.com/banthisguy9349/status/1842534695604519287

103.174.191.145:88
prime-yulgang.com
yulgangweb.com
yulgangweb.top
yulgangweb1.com
yulgangweb1.top
yulgangweb2.com
/gkr6jWI0NuYwX1aprime.inf

# Reference: https://x.com/malwrhunterteam/status/1844062190556553349
# Reference: https://www.virustotal.com/gui/file/bc6b22395ea6a6d94612d4ec2b8e486aad1f5292c6fa1161c9fcf030239d10ad/detection
# Reference: https://www.virustotal.com/gui/file/b55585d011d4d6851cff7776b4506cb0865325236c2ec322ae0777c06243be55/detection

24.152.39.227:4449

# Reference: https://x.com/SarlackLab/status/1851640690754646129
# Reference: https://www.virustotal.com/gui/file/37324402eb142b18813669e35cb568e9a4420ea78c8d7e1473e3f7327e9e9d62/detection

147.185.221.18:36811
185.220.101.134:11134
mark-explain.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-11-03)

http://178.162.221.62
103.253.73.222:711
13.60.28.43:9600
134.0.160.221:1165
138.118.150.205:5020
147.185.221.19:17515
147.185.221.19:42443
147.185.221.21:59424
147.185.221.22:43768
147.185.221.22:57731
147.185.221.23:1213
147.185.221.23:19242
147.185.221.23:22815
147.185.221.23:32547
147.185.221.23:37212
147.185.221.23:5951
147.185.221.23:7999
154.236.142.94:5552
158.140.77.165:1177
176.109.107.2:5555
177.101.101.171:5020
18.153.198.123:10698
18.153.198.123:14005
18.153.198.123:14026
18.153.198.123:14390
18.153.198.123:14673
18.153.198.123:17846
18.153.198.123:18377
18.156.13.209:10394
18.158.58.205:14355
18.192.31.30:10698
18.192.31.30:14005
18.192.31.30:14026
18.192.31.30:14673
18.192.31.30:14987
18.192.31.30:17846
18.192.31.30:18377
180.64.110.203:6522
181.235.11.133:2019
185.141.35.22:1206
185.141.35.22:3198
185.141.35.22:3989
185.141.35.22:4683
185.141.35.22:7075
185.141.35.22:7608
186.169.49.72:2019
186.169.89.218:2828
188.34.178.0:5552
192.169.69.25:11767
192.169.69.25:4444
192.169.69.26:2828
193.161.193.99:41878
197.207.192.227:555
209.126.80.197:3906
3.125.188.168:14076
3.125.188.168:17304
3.126.224.214:14076
3.128.254.91:5050
3.67.15.169:14076
3.67.15.169:17304
3.67.161.133:13824
3.67.161.133:14355
3.67.62.142:14355
3.68.56.232:14076
3.68.56.232:17304
3.71.225.231:10698
3.71.225.231:14005
3.71.225.231:14987
3.71.225.231:17846
3.71.225.231:18924
3.74.27.83:10698
3.74.27.83:14005
3.74.27.83:14026
3.74.27.83:14673
3.74.27.83:14987
3.74.27.83:17846
3.74.27.83:18377
3.78.28.71:10698
3.78.28.71:14005
3.78.28.71:14026
3.78.28.71:14987
34.145.18.233:5050
45.152.161.204:6522
46.246.14.5:2054
52.57.120.10:10698
52.57.120.10:14026
52.57.120.10:14390
52.57.120.10:14673
52.57.120.10:14987
52.57.120.10:17846
52.57.120.10:18377
64.176.183.172:5050
80.76.51.209:5439
82.202.167.226:25563
85.113.101.120:1177
93.123.39.69:5439
buying-programs.gl.at.ply.gg
devilboydevilhere.strangled.net
drd8jxg.localto.net
eg-womens.gl.at.ply.gg
encrypted7745.hopto.org
fahad26smsm.duckdns.org
florida-institutions.gl.at.ply.gg
gbyvwcn.localto.net
ground-heavily.gl.at.ply.gg
language-sublime.gl.at.ply.gg
manuelmorenomanuel123.duckdns.org
manuelmorenomanuel1234.duckdns.org
notificadoresrma.duckdns.org
ole.cloudns.ph
peinadorafael777.duckdns.org
peinadorafael779.duckdns.org
pro-fundraising.gl.at.ply.gg
race-frequent.gl.at.ply.gg
randomized.sytes.net
steam.buy-nitro.ru
tlkkyhm.localto.net
txx8luo.localto.net
windowssistem.duckdns.org

# Reference: https://www.virustotal.com/gui/file/14ea19d181bbdc25d8e7e7b0c8a63924a817a327d82b6b42bae47593ea24cd2b/detection

saif711.zapto.org

# Reference: https://www.virustotal.com/gui/file/66b3309146e34ae971ff0b5933d2392c9016ea8c8fef2b41b66bb11f6dd84acf/detection

65.21.198.54:6060

# Reference: https://x.com/karol_paciorek/status/1859954097908256877

136.243.179.5:222

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2024-11-30)

http://185.50.25.45
103.171.1.196:56071
103.186.117.182:7788
147.185.221.16:36189
147.185.221.21:51045
147.185.221.23:52424
147.185.221.23:56448
147.185.221.23:61297
147.185.221.24:4164
147.185.221.24:4839
176.74.84.88:4444
179.13.4.37:8031
18.156.13.209:12824
18.157.68.73:12824
18.192.93.86:12824
18.197.239.109:13739
18.197.239.5:12824
185.141.35.22:6835
192.169.69.26:4444
196.119.18.157:10000
196.119.209.192:10000
3.126.37.18:12824
3.127.138.57:12824
3.68.171.119:13739
3.68.56.232:12891
3.69.115.178:13739
35.157.111.131:12891
41.102.212.62:999
41.249.228.123:55554
45.247.223.72:5555
45.88.88.7:6987
49.228.131.165:2422
49.228.131.165:2424
52.28.247.255:13739
86.1.93.186:25565
83aky1z.localto.net
audio-ham.gl.at.ply.gg
else-directors.gl.at.ply.gg
gfhgfjfrur.duckdns.org
hospital-selling.gl.at.ply.gg
masakiku.thddns.net
maximum-blame.gl.at.ply.gg
notificacionpdf.duckdns.org
okplus.thddns.net
oooptesg.duckdns.org
oslink.thddns.net
paper-cancelled.gl.at.ply.gg
saw-shirts.gl.at.ply.gg
sigma125789-39601.portmap.host
sll.casacam.net
sweethomejp.duckdns.org
testhub.thddns.net

# Reference: https://www.virustotal.com/gui/file/1e47adb7a557cb9e9a4e267caee04c74bd41365d354eeebbc9fe089ff1f82e84/detection

31.220.90.137:5552

# Reference: https://x.com/banthisguy9349/status/1864946456915816708
# Reference: https://www.virustotal.com/gui/file/1f910f23945caabb74482ffac9d61d7341349517e1fbc96e02221f5f126b4a22/detection

loader.oxy.st

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2025-01-02)

146.235.38.234:3435
147.185.221.17:48460
147.185.221.18:42876
147.185.221.18:47346
147.185.221.19:56149
147.185.221.23:53376
147.185.221.24:10206
147.185.221.24:16265
147.185.221.24:16828
147.185.221.24:27437
147.185.221.24:28408
147.185.221.24:31521
147.185.221.24:35059
147.185.221.24:35994
147.185.221.24:37290
147.185.221.24:37334
147.185.221.24:50300
147.185.221.24:51482
157.245.65.139:22281
167.71.56.116:22342
18.153.198.123:10095
18.156.13.209:11048
18.156.13.209:15986
18.156.13.209:19294
18.157.68.73:11048
18.157.68.73:16299
18.157.68.73:19294
18.192.31.30:10095
18.192.31.30:19331
18.192.93.86:11048
18.192.93.86:16299
18.192.93.86:19294
18.197.239.109:11237
18.197.239.5:11048
18.197.239.5:16299
18.197.239.5:19294
18.198.77.177:16948
18.198.77.177:17275
185.172.175.125:505
185.65.68.247:6522
186.169.47.164:2019
186.169.64.185:2019
192.169.69.26:2150
196.119.176.86:10000
196.119.35.10:10000
3.121.139.82:16948
3.121.139.82:17275
3.121.139.82:18952
3.126.37.18:16299
3.126.37.18:19294
3.127.138.57:11048
3.127.138.57:16299
3.127.181.115:14324
3.127.253.86:16948
3.64.4.198:10587
3.64.4.198:14324
3.66.38.117:11237
3.68.171.119:11145
3.68.171.119:11237
3.69.115.178:11237
3.69.157.220:11237
3.71.225.231:10095
3.71.225.231:19331
35.158.159.254:16948
35.159.113.6:1337
45.137.201.181:511
45.83.207.236:5552
46.246.80.6:5250
46.43.90.187:27005
5.39.43.50:5234
51.91.146.93:5552
52.201.248.168:5050
52.28.112.211:17275
52.28.112.211:18952
52.28.247.255:11237
83.31.171.13:2002
abolhb.com
audio-clouds.gl.at.ply.gg
carolina-oxide.gl.at.ply.gg
cities-constraints.gl.at.ply.gg
clear-negro2020j.duckdns.org
cnet-contracting.gl.at.ply.gg
company-telecom.gl.at.ply.gg
eu-west-36307.packetriot.net
fat-pads.gl.at.ply.gg
gfknoux.localto.net
hugolganador.duckdns.org
japanese-cross.gl.at.ply.gg
latest-springer.gl.at.ply.gg
lemon.geoiplookup.live
loans-hamburg.gl.at.ply.gg
mahmoudabu9pos.ddns.net
niewiemcodac.ddns.net
november-knife.gl.at.ply.gg
prapor03212.ddns.net
printer-nebraska.gl.at.ply.gg
problems-onion.gl.at.ply.gg
sayrich.ddns.net
two-besides.gl.at.ply.gg
ukrainian.zapto.org
until-delivering.gl.at.ply.gg
youth-latex.gl.at.ply.gg

# Reference: https://x.com/banthisguy9349/status/1875650869590683831

10cpanel.hackcrack.io
between-youth.gl.at.ply.gg
colyfigo777.hopto.org
confirmation.myvnc.com
customers-edmonton.gl.at.ply.gg
g574h9hd9.duckdns.org
hayderblack.no-ip.org
helpme.no-ip.org
kartoxamc.ga
legend7mood.no-ip.biz
medo-m919.no-ip.biz
rudghks.ddns.net
skandar001007.ddns.net
softtofu.uy.to
yoryounes.no-ip.biz

# Reference: https://x.com/SarlackLab/status/1876237597837512868

77.90.22.45:5552

# Reference: https://x.com/SarlackLab/status/1875633622536822986

192.169.69.25:1041

# Reference: https://x.com/SarlackLab/status/1876554793356767598

3.12.245.36:10196
3.135.250.11:10196
3.137.60.53:10196
3.146.103.81:10196

# Reference: https://www.virustotal.com/gui/file/5598c171fdc8d569f5b31a452a41f74db495c78ff69321493ea849f109a730d9/detection

193.233.49.149:1999

# Reference: https://www.virustotal.com/gui/file/00118ce3fd582b5f3bf91b9cf5c48b7ac3cc28619a791e24c978481ada060008/detection

3.124.142.205:18667
3.125.102.39:18667
3.125.209.94:18667
3.125.223.134:18667

# Reference: https://www.virustotal.com/gui/file/b4805d9fa4ac2354f8819c739ddf7095c397e916b29468f065c0907394909fe5/detection

147.185.221.20:7445
pool-tournaments.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2025-02-09)

http://103.97.179.27
http://157.230.118.70
http://178.164.141.185
102.156.4.62:1177
102.158.1.30:1177
102.43.247.109:2525
103.82.249.78:3158
104.248.130.195:81
104.248.130.195:82
104.248.130.195:88
104.248.130.195:963
118.89.89.200:443
130.51.20.126:6732
133.18.213.214:1177
134.209.99.214:1337
140.99.97.165:1177
144.217.253.149:443
147.124.216.223:7788
147.185.221.16:57749
147.185.221.19:28055
147.185.221.21:40091
147.185.221.22:1108
147.185.221.22:40639
147.185.221.23:3738
147.185.221.24:24206
147.185.221.24:47287
147.185.221.24:50768
147.185.221.24:58685
147.185.221.24:60732
147.185.221.25:12821
147.185.221.25:14413
147.185.221.25:15719
147.185.221.25:18976
147.185.221.25:25606
147.185.221.25:26933
147.185.221.25:36121
147.185.221.25:47140
147.50.253.115:1177
147.50.253.155:1177
147.50.253.19:1609
147.50.253.241:1177
147.50.253.6:9997
154.197.69.14:1433
154.197.69.21:1177
158.140.114.37:1177
176.110.208.212:25565
178.215.224.223:1985
178.215.236.227:4411
18.156.13.209:18768
18.157.68.73:13018
18.157.68.73:14206
18.157.68.73:18768
18.158.58.205:15938
18.192.93.86:18768
18.197.239.109:15553
18.197.239.5:14206
180.35.168.108:1920
185.223.31.253:5552
185.79.132.175:8000
192.169.69.26:1984
193.123.88.61:4444
196.119.193.123:10000
196.119.225.21:10000
196.119.98.31:10000
197.2.31.108:1177
197.58.200.175:1177
205.234.144.157:1177
3.121.113.182:1337
3.124.67.191:19931
3.125.188.168:19931
3.126.224.214:19931
3.126.37.18:18768
3.127.138.57:14206
3.127.181.115:15938
3.146.103.81:19843
3.64.4.198:15938
3.66.38.117:12482
3.67.112.102:15938
3.67.161.133:15938
3.67.62.142:15938
3.68.171.119:15553
3.68.56.232:19931
3.69.115.178:12482
3.69.115.178:15553
3.69.157.220:12482
3.71.225.231:16168
31.166.65.188:5552
35.157.111.131:19931
35.158.159.254:14149
35.158.210.132:1337
37.235.55.68:2566
37.27.220.239:6917
41.103.71.188:999
41.109.31.180:1177
45.141.12.199:1111
46.153.112.54:443
47.236.0.82:443
49.228.131.165:2425
5.75.234.8:2596
5.75.234.8:8370
52.28.247.255:12482
52.28.247.255:15553
69.16.230.165:80
77.90.22.45:3333
91.151.93.62:6522
98.67.175.93:1177
afwa2w3fafs.store
agdsagds.kro.kr
backupwindows.ddns.net
black-associates.gl.at.ply.gg
both-foundations.gl.at.ply.gg
burhanalassad.duckdns.org
burhanalassad.site
colyfigo55.hopto.org
components-stages.gl.at.ply.gg
financial-amanda.gl.at.ply.gg
finzydev.click
forward-holly.gl.at.ply.gg
gallery-deadly.gl.at.ply.gg
good-engaged.at.playit.gg
hextoriq99.ddns.net
hi-tin.gl.at.ply.gg
home789.no-ip.biz
homekoen.uswin.com.tr
ie-serving.gl.at.ply.gg
itsdrvgon1.ddns.net
j4n6foy.localto.net
jersey-prize.gl.at.ply.gg
jmryry.zapto.org
jokernjrat.ddns.net
kgbhostpro.duckdns.org
leading-fraser.gl.at.ply.gg
leechon.hackcrack.io
med0812929.ddns.net
meroelbob213.ddns.net
micho.ddns.info
microsoft-365-updater.duckdns.org
mj2025.ddns.net
nooneno.ddns.net
other-perry.gl.at.ply.gg
phh79b4.localto.net
pics-accessory.gl.at.ply.gg
postpix.shop
riad-imss.ddns.net
sat-triumph.gl.at.ply.gg
sosomyhestor.ddns.net
staff-tunisia.gl.at.ply.gg
station-gps.gl.at.ply.gg
suchbad-45151.portmap.host
supportinformtion.serveirc.com
trademarks-notify.gl.at.ply.gg
veronicafola.ddns.net
wanted-birth.gl.at.ply.gg
zksrdmff9.localto.net
/burhan-alassad

# Reference: https://www.virustotal.com/gui/file/b54a6cf92b02460f3127f19e56dfef6343e2a8efc0968f0e859f9375d6427b1f/detection

186.99.152.255:1994
nj1994.duckdns.org

# Reference: https://x.com/skocherhan/status/1899647822619660387
# Reference: https://www.virustotal.com/gui/file/7e6977f224dea609c2b3d75b1ef864eb9295312fa9ea1f24994cc41b901e009b/detection

146.158.116.151:7655

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2025-03-15)

104.210.41.108:1177
105.100.228.127:2
108.231.94.28:6522
131.0.150.232:9000
139.59.228.234:22728
141.11.62.152:12345
144.126.151.157:1194
147.185.221.24:16528
147.185.221.25:15635
147.185.221.25:44311
147.185.221.25:49564
147.185.221.25:51413
147.185.221.25:65218
147.185.221.26:10552
147.185.221.26:14454
147.185.221.26:20092
147.185.221.26:21909
147.185.221.26:26948
147.185.221.26:30723
147.185.221.26:32278
147.185.221.26:34375
147.185.221.26:38013
147.185.221.26:50619
147.45.219.252:5552
173.45.117.247:6522
18.158.58.205:13420
185.100.157.145:1515
185.82.217.154:48589
193.161.193.99:24753
193.161.193.99:43449
195.166.166.2:1080
196.119.118.76:10000
196.119.150.206:10000
198.46.177.152:1177
2.49.150.25:5552
24.152.38.77:481
25.14.26.97:5040
3.124.67.191:15408
3.125.188.168:15408
3.126.224.214:15408
3.127.181.115:13420
3.64.4.198:15691
3.67.112.102:13420
3.67.15.169:15408
3.67.161.133:13420
3.67.62.142:13420
3.68.56.232:15408
3.71.225.231:14673
35.157.111.131:15408
37.235.55.18:4567
41.109.190.205:1177
41.45.84.102:1177
5.182.226.142:35724
5.182.226.142:41127
64.65.123.187:8953
65.109.115.25:5552
88.208.246.143:5201
88.244.209.174:3333
88.99.61.194:5067
95.27.4.238:28015
23-43449.portmap.host
232222222223-43449.portmap.host
783264.zapto.org
accendent.shop
acer.tail843d69.ts.net
alahacker.no-ip.org
anonymoushacker.no-ip.org
bossik.ddns.net
btlryan.webredirect.org
chromasvaldo.ddns.net
data-center.gotdns.ch
day-snapshot.gl.at.ply.gg
designed-circuit.gl.at.ply.gg
environmental-seeds.gl.at.ply.gg
faresilyas1991.ddns.net
fevereiro2025.duckdns.org
filirat.ddns.net
gabh.gotdns.ch
hvip.freeddns.org
instruments-arrives.gl.at.ply.gg
islands-toy.gl.at.ply.gg
john-already.gl.at.ply.gg
kaher.no-ip.biz
mk.babyisis.com.br
msiserver.net
myhaani.ddns.net
nbw49tk2-25505.euw.devtunnels.ms
njratcrackbiden.zapto.org
pacific-sponsored.gl.at.ply.gg
percent-wing.gl.at.ply.gg
peterpanjack.no-ip.org
qmffk002.ddns.net
quiet-cloud-77052.pktriot.net
rundll32.hopto.org
sampop.linkpc.net
september-touch.gl.at.ply.gg
so-cells.gl.at.ply.gg
started-smtp.gl.at.ply.gg
test.accendent.shop
torbrowser.no-ip.biz
treatment-met.gl.at.ply.gg
updatservice3457.ddns.net
videos-flux.gl.at.ply.gg
virus00963.ddns.net
vpn1.hackcrack.io
watermellons.ddns.net
xtr.all4syrian.com

# Reference: https://x.com/SarlackLab/status/1901484028517056709

147.185.221.26:55648
thursday-bytes.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1901589901248012535

3.67.112.102:17337

# Reference: https://app.validin.com/detail?find=147.185.221.26&type=ip4#tab=resolutions (# 2025-03-17)

abstract-check.gl.at.ply.gg
abstract-respond.gl.at.ply.gg
activity-sao.gl.at.ply.gg
advertise-themselves.gl.at.ply.gg
advertising-interfaces.gl.at.ply.gg
advice-grant.gl.at.ply.gg
africa-wins.gl.at.ply.gg
again-stuff.gl.at.ply.gg
age-showcase.gl.at.ply.gg
agents-volunteers.gl.at.ply.gg
album-actively.gl.at.ply.gg
all-advocacy.gl.at.ply.gg
although-evans.gl.at.ply.gg
amazon-astrology.gl.at.ply.gg
amount-hq.gl.at.ply.gg
animal-adapters.gl.at.ply.gg
anti-dude.gl.at.ply.gg
any-attraction.gl.at.ply.gg
apply-suitable.gl.at.ply.gg
approved-shooting.gl.at.ply.gg
artists-schedule.gl.at.ply.gg
associates-reef.gl.at.ply.gg
association-lectures.gl.at.ply.gg
authority-market.gl.at.ply.gg
availability-billing.gl.at.ply.gg
back-unit.gl.at.ply.gg
based-grill.gl.at.ply.gg
behind-token.gl.at.ply.gg
bill-finite.gl.at.ply.gg
bill-heart.gl.at.ply.gg
born-questionnaire.gl.at.ply.gg
born-thriller.gl.at.ply.gg
boy-mastercard.gl.at.ply.gg
boys-gibson.gl.at.ply.gg
brand-caribbean.gl.at.ply.gg
brands-pi.gl.at.ply.gg
canadian-bookings.gl.at.ply.gg
cancer-legal.gl.at.ply.gg
casino-offline.gl.at.ply.gg
cause-indexes.gl.at.ply.gg
certain-usd.gl.at.ply.gg
chat-genes.gl.at.ply.gg
child-antibody.gl.at.ply.gg
client-presence.gl.at.ply.gg
comes-sticker.gl.at.ply.gg
communication-xl.gl.at.ply.gg
companies-like.gl.at.ply.gg
computer-sought.gl.at.ply.gg
considered-lol.gl.at.ply.gg
contains-player.gl.at.ply.gg
cool-autos.gl.at.ply.gg
county-ideal.gl.at.ply.gg
course-fossil.gl.at.ply.gg
customer-performances.gl.at.ply.gg
cut-plenty.gl.at.ply.gg
david-mine.gl.at.ply.gg
defined-literary.gl.at.ply.gg
design-ears.gl.at.ply.gg
develop-transition.gl.at.ply.gg
directory-sperm.gl.at.ply.gg
disease-laden.gl.at.ply.gg
display-equivalent.gl.at.ply.gg
distribution-halloween.gl.at.ply.gg
distribution-nicaragua.gl.at.ply.gg
document-wonderful.gl.at.ply.gg
door-predict.gl.at.ply.gg
driver-bc.gl.at.ply.gg
earth-northwest.gl.at.ply.gg
easy-turning.gl.at.ply.gg
edit-matches.gl.at.ply.gg
editor-monitoring.gl.at.ply.gg
el-norm.gl.at.ply.gg
engine-greg.gl.at.ply.gg
enjoy-ottawa.gl.at.ply.gg
entertainment-rentals.gl.at.ply.gg
equipment-rep.gl.at.ply.gg
european-facilitate.gl.at.ply.gg
except-blessed.gl.at.ply.gg
exchange-win.gl.at.ply.gg
expected-pty.gl.at.ply.gg
express-tomatoes.gl.at.ply.gg
external-scholars.gl.at.ply.gg
fall-daniel.gl.at.ply.gg
faq-boat.gl.at.ply.gg
fax-scenarios.gl.at.ply.gg
features-steam.gl.at.ply.gg
field-aye.gl.at.ply.gg
figure-bobby.gl.at.ply.gg
figure-cement.gl.at.ply.gg
figure-races.gl.at.ply.gg
fl-democrat.gl.at.ply.gg
follow-alexandria.gl.at.ply.gg
forum-sequences.gl.at.ply.gg
found-politicians.gl.at.ply.gg
french-add.gl.at.ply.gg
fri-potential.gl.at.ply.gg
funds-skating.gl.at.ply.gg
game-crops.gl.at.ply.gg
games-feeds.gl.at.ply.gg
general-affiliates.gl.at.ply.gg
global-bibliographic.gl.at.ply.gg
gold-patterns.gl.at.ply.gg
good-phi.gl.at.ply.gg
goods-palestine.gl.at.ply.gg
goods-retention.gl.at.ply.gg
google-rocks.gl.at.ply.gg
greater-said.gl.at.ply.gg
group-coupon.gl.at.ply.gg
groups-recently.gl.at.ply.gg
heart-metal.gl.at.ply.gg
here-ppc.gl.at.ply.gg
home-singles.gl.at.ply.gg
host-conviction.gl.at.ply.gg
human-resolved.gl.at.ply.gg
idea-forever.gl.at.ply.gg
ideas-equation.gl.at.ply.gg
ii-carefully.gl.at.ply.gg
increased-study.gl.at.ply.gg
index-sustained.gl.at.ply.gg
interface-signatures.gl.at.ply.gg
ip-definitely.gl.at.ply.gg
iraq-ny.gl.at.ply.gg
ireland-regardless.gl.at.ply.gg
ireland-tabs.gl.at.ply.gg
itself-represented.gl.at.ply.gg
jewelry-remedy.gl.at.ply.gg
john-pages.gl.at.ply.gg
june-vendors.gl.at.ply.gg
king-recruiting.gl.at.ply.gg
kingdom-commission.gl.at.ply.gg
known-savage.gl.at.ply.gg
language-leading.gl.at.ply.gg
large-aruba.gl.at.ply.gg
large-tackle.gl.at.ply.gg
last-forces.gl.at.ply.gg
leading-travels.gl.at.ply.gg
letter-lisa.gl.at.ply.gg
limited-instrumentation.gl.at.ply.gg
list-suggestion.gl.at.ply.gg
listings-examining.gl.at.ply.gg
living-sees.gl.at.ply.gg
login-lt.gl.at.ply.gg
logo-thousand.gl.at.ply.gg
loss-gross.gl.at.ply.gg
love-streets.gl.at.ply.gg
maintenance-embedded.gl.at.ply.gg
may-voltage.gl.at.ply.gg
maybe-your.gl.at.ply.gg
means-meta.gl.at.ply.gg
medical-fan.gl.at.ply.gg
mike-second.gl.at.ply.gg
minimum-ball.gl.at.ply.gg
mm-lucky.gl.at.ply.gg
move-past.gl.at.ply.gg
movie-centres.gl.at.ply.gg
movie-excluding.gl.at.ply.gg
navigation-salaries.gl.at.ply.gg
needed-below.gl.at.ply.gg
net-patricia.gl.at.ply.gg
newsletter-effects.gl.at.ply.gg
normal-playlist.gl.at.ply.gg
normal-streams.gl.at.ply.gg
north-widescreen.gl.at.ply.gg
not-warm.gl.at.ply.gg
number-dispatched.gl.at.ply.gg
october-casting.gl.at.ply.gg
off-ultimate.gl.at.ply.gg
on-allow.gl.at.ply.gg
orders-ic.gl.at.ply.gg
other-ya.gl.at.ply.gg
our-vehicles.gl.at.ply.gg
pa-force.gl.at.ply.gg
particular-elements.gl.at.ply.gg
parts-motor.gl.at.ply.gg
paypal-themselves.gl.at.ply.gg
pdf-switched.gl.at.ply.gg
places-y.gl.at.ply.gg
plant-queen.gl.at.ply.gg
poker-dude.gl.at.ply.gg
posted-channels.gl.at.ply.gg
posts-valentine.gl.at.ply.gg
pretty-beauty.gl.at.ply.gg
pretty-jade.gl.at.ply.gg
probably-secret.gl.at.ply.gg
programme-premium.gl.at.ply.gg
pst-dod.gl.at.ply.gg
public-wines.gl.at.ply.gg
purpose-perth.gl.at.ply.gg
question-salad.gl.at.ply.gg
rate-mouse.gl.at.ply.gg
read-enterprises.gl.at.ply.gg
regional-shock.gl.at.ply.gg
registered-marilyn.gl.at.ply.gg
registered-spectacular.gl.at.ply.gg
reply-noted.gl.at.ply.gg
report-euro.gl.at.ply.gg
request-plaza.gl.at.ply.gg
reserved-analysis.gl.at.ply.gg
restaurant-volunteer.gl.at.ply.gg
road-documented.gl.at.ply.gg
s-sudden.gl.at.ply.gg
science-sara.gl.at.ply.gg
search-adelaide.gl.at.ply.gg
sellers-given.gl.at.ply.gg
send-collectors.gl.at.ply.gg
server-madness.gl.at.ply.gg
ships-gorgeous.gl.at.ply.gg
shopping-groove.gl.at.ply.gg
shown-seasons.gl.at.ply.gg
similar-transit.gl.at.ply.gg
since-et.gl.at.ply.gg
site-accessing.gl.at.ply.gg
small-kill.gl.at.ply.gg
small-patricia.gl.at.ply.gg
some-event.gl.at.ply.gg
son-efforts.gl.at.ply.gg
sound-tuesday.gl.at.ply.gg
spain-anywhere.gl.at.ply.gg
staff-islands.gl.at.ply.gg
start-df.gl.at.ply.gg
started-deadline.gl.at.ply.gg
statement-milk.gl.at.ply.gg
statement-previews.gl.at.ply.gg
stay-type.gl.at.ply.gg
storage-password.gl.at.ply.gg
store-handy.gl.at.ply.gg
stores-passwords.gl.at.ply.gg
story-secondary.gl.at.ply.gg
study-conclusions.gl.at.ply.gg
summary-favorites.gl.at.ply.gg
support-effectiveness.gl.at.ply.gg
sure-monday.gl.at.ply.gg
survey-highlights.gl.at.ply.gg
technical-tract.gl.at.ply.gg
technologies-chester.gl.at.ply.gg
thank-inflation.gl.at.ply.gg
they-cumulative.gl.at.ply.gg
thought-administrative.gl.at.ply.gg
time-amount.gl.at.ply.gg
today-modules.gl.at.ply.gg
town-brand.gl.at.ply.gg
transfer-grip.gl.at.ply.gg
trying-fails.gl.at.ply.gg
tue-calendar.gl.at.ply.gg
under-gay.gl.at.ply.gg
updated-joke.gl.at.ply.gg
used-billion.gl.at.ply.gg
usr-tricks.gl.at.ply.gg
video-page.gl.at.ply.gg
visit-judges.gl.at.ply.gg
w-mba.gl.at.ply.gg
way-eyes.gl.at.ply.gg
white-yukon.gl.at.ply.gg
wide-tell.gl.at.ply.gg
will-gift.gl.at.ply.gg
winter-pennsylvania.gl.at.ply.gg
yes-farming.gl.at.ply.gg
z-openings.gl.at.ply.gg
z-rpg.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1901967197569757355

46.197.220.52:3389

# Reference: https://x.com/skocherhan/status/1902535962841735566
# Reference: https://www.virustotal.com/gui/file/8bcbcac35d22e37da746bc17c3e293d3a1221682fcc5ecc56ba07259fcff1fec/detection

147.185.221.26:47612
147.185.221.26:7771
amount-burn.gl.at.ply.gg
blank-ewfhd.in
blank-ktiwb.in
blank-sizz2.in
blank-vrjun.in
blank-wsqct.in
blank-xspov.in

# Reference: https://x.com/SarlackLab/status/1906970206087295434

102.156.21.111:5552
fuckfrance25.ddns.net

# Reference: https://x.com/SarlackLab/status/1907644596017836449

147.185.221.24:39308

# Reference: https://x.com/skocherhan/status/1913142488698691785
# Reference: https://www.virustotal.com/gui/file/a84eb71ce617134936f1c90602c38276656939eed8b82e4700a29be26eb14b22/detection

46.39.253.217:4040

# Reference: https://x.com/naumovax/status/1915381317501436075
# Reference: https://x.com/naumovax/status/1915381320139538818
# Reference: https://app.any.run/tasks/8b606a3d-3ac0-4d39-8f43-bf3b673f81dc
# Reference: https://www.virustotal.com/gui/file/ac3cb8886eeb85805e81307315c14e25aad933b0de116f42fe9e62d4c13ede14/detection
# Reference: https://www.virustotal.com/gui/file/c3729d4f2d33583b96857530bceca8d3edc6a94daf6e02f133690276ea323516/detection

193.161.193.99:59733
fello-59733.portmap.io
uiohjsdfhjifgd-22027.portmap.io
uiohjsdfhjifgd-49026.portmap.io

# Reference: https://www.virustotal.com/gui/file/3cfd0ef03bb7c1d58244e2765cee871c62a8d0dd7fdf512da92eba4fc08c67a5/detection

45.67.229.40:6522

# Reference: https://x.com/SarlackLab/status/1916090306929287266

147.185.221.27:31185
team-evaluating.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2025-04-27)

http://37.46.211.91
102.189.244.243:1177
105.197.154.83:1177
105.197.218.132:1177
105.197.230.51:1177
130.193.62.139:5552
135.0.42.37:5552
138.68.79.95:6522
147.185.221.16:60127
147.185.221.16:61465
147.185.221.17:22555
147.185.221.18:16843
147.185.221.19:6863
147.185.221.23:2918
147.185.221.23:31296
147.185.221.25:22351
147.185.221.26:14531
147.185.221.26:27706
147.185.221.26:48377
147.185.221.26:55609
147.185.221.26:55946
147.185.221.26:56924
147.185.221.26:57385
147.185.221.27:10020
147.185.221.27:17182
147.185.221.27:19766
147.185.221.27:22415
147.185.221.27:30866
147.185.221.27:31185
147.185.221.27:33117
147.185.221.27:45031
147.185.221.27:47881
147.185.221.27:52684
147.185.221.27:5407
147.185.221.27:5606
147.185.221.27:57016
147.185.221.27:6772
147.185.221.27:6905
147.185.221.27:7336
147.185.221.27:7723
147.185.221.27:7940
147.50.253.154:1177
147.50.253.233:1177
147.50.253.62:1177
156.96.150.253:5552
167.71.56.116:22364
179.223.145.184:1177
18.156.13.209:12629
18.156.13.209:17350
18.156.13.209:19281
18.157.68.73:12629
18.157.68.73:16744
18.157.68.73:17350
18.190.63.84:11421
18.192.31.30:18053
18.192.93.86:12629
18.192.93.86:19281
18.197.239.109:11862
18.198.77.177:14131
18.198.77.177:14219
181.235.4.114:8095
188.92.191.202:1177
192.169.69.26:1605
193.161.193.99:25009
193.161.193.99:56152
193.186.4.64:5552
195.88.218.126:1177
196.119.147.45:10000
197.244.168.87:4444
211.178.25.134:1493
212.102.63.147:5552
216.218.135.117:8501
26.215.185.49:5552
3.1.16.19:15725
3.12.245.36:11421
3.121.139.82:14131
3.124.67.191:10780
3.125.188.168:10780
3.126.224.214:10780
3.126.37.18:18848
3.127.138.57:17350
3.127.253.86:12981
3.135.250.11:11421
3.137.60.53:11421
3.146.103.81:11421
3.64.4.198:17337
3.67.15.169:10780
3.67.15.169:13573
3.67.62.142:18188
3.68.56.232:10780
3.71.225.231:18053
31.9.48.183:5555
34.136.111.81:1122
35.157.111.131:10780
35.157.111.131:13573
35.158.159.254:12981
35.158.159.254:14219
38.54.81.249:443
41.109.246.219:1177
45.83.207.17:3158
45.83.207.17:6522
45.83.207.229:1177
46.121.250.34:7777
46.197.220.52:1604
52.28.112.211:12981
52.57.120.10:18053
52.77.3.235:15725
54.169.93.143:15725
63.133.222.220:65122
77.222.105.54:6346
81.109.5.62:8848
90.113.172.156:7777
94.103.183.164:443
94.231.176.50:5552
94.26.90.81:6666
01kevinj.duckdns.org
3bada.ddns.net
abilaudo.ddns.net
alfaz-24806.portmap.host
animal-premium.gl.at.ply.gg
anyone-center.gl.at.ply.gg
approach-trembl.gl.at.ply.gg
arquivehacks.ddns.net
associates-studio.gl.at.ply.gg
astrovito7.duckdns.org
azrail.myftp.biz
can-features.gl.at.ply.gg
cloni.ddns.net
coolman192-62705.portmap.io
dawid10666-47477.portmap.host
de15cd3a47d37c4c6619e2b1bd2c864f.serveo.net
dedekond33.zapto.org
disease-expenditures.gl.at.ply.gg
disha2024.ddns.net
error86eg.ddns.net
ezzat.adultdns.net
forbots.ddns.net
gdgdfgs.ddns.net
get-met.gl.at.ply.gg
hacking01.ddns.net
here123.ddns.net
holyfuckingshit.zapto.org
hydrat48.duckdns.org
if-contest.gl.at.ply.gg
introduction-satisfy.gl.at.ply.gg
kamel-hacker.no-ip.biz
lake-observation.gl.at.ply.gg
lesbian-stereo.gl.at.ply.gg
lol2018.ddns.net
ma-babes.gl.at.ply.gg
many-atlantic.gl.at.ply.gg
marseille64.jumpingcrab.com
match-monte.gl.at.ply.gg
mhzlh3dev.hopto.org
microsoft-help.myvnc.com
morning-ultimately.gl.at.ply.gg
moumenmehdi.ddns.net
mrtorrent32.ddns.net
nickiwhicki-39201.portmap.host
overall-whom.gl.at.ply.gg
pack-amber.gl.at.ply.gg
panel-thrown.gl.at.ply.gg
paodequeijo.ddns.net
pdf-cape.gl.at.ply.gg
photo-bucks.gl.at.ply.gg
rayishim-25009.portmap.io
rayz511.ddns.net
recommended-collins.gl.at.ply.gg
result-disco.gl.at.ply.gg
saint8951.ddns.net
score-fears.gl.at.ply.gg
september-idol.gl.at.ply.gg
size-ingredients.gl.at.ply.gg
sniper30.ddns.net
student-wifi.gl.at.ply.gg
such-captain.gl.at.ply.gg
sun-jpeg.gl.at.ply.gg
teaching-integrate.gl.at.ply.gg
team-evaluating.gl.at.ply.gg
tibeve7951.ddns.net
times-msg.gl.at.ply.gg
ufd1.no-ip.biz
vncdz213.ddns.net
vpn2.hackcrack.io
wso22.ddns.net
xpalhack.ddns.net
yet-continental.gl.at.ply.gg
your-thumb.gl.at.ply.gg
z5ao.ddns.net
z88.ddns.net

# Reference: https://www.virustotal.com/gui/file/ffa6f93bfcc59a51e0dff6fe603859fc827c39f503cb97e9964b1f5f71847604/detection

winexplorer.duckdns.org

# Reference: https://www.fortinet.com/blog/threat-research/multilayered-email-attack-how-a-pdf-invoice-and-geofencing-led-to-rat-malware
# Reference: https://www.virustotal.com/gui/file/d20d14792c91107f53318ff7df83b9cd98acd3c394959a74e72278682822b600/detection

158.178.201.63:6732

# Reference: https://x.com/Jane_0sint/status/1924772301737779688
# Reference: https://app.any.run/tasks/a29a369d-81a5-477f-af99-f38295b8c74b

52.26.80.133:1212

# Reference: https://x.com/SarlackLab/status/1925088975380725914

192.169.69.26:1000

# Reference: https://x.com/SarlackLab/status/1925088712020389960

39.46.104.231:6903

# Reference: https://x.com/SarlackLab/status/1925090767489409264

213.209.150.210:7773

# Reference: https://x.com/SarlackLab/status/1925089081052053577

147.185.221.28:29832
iraq-domains.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1925088846112264261

196.119.86.83:10000

# Reference: https://x.com/SarlackLab/status/1925854742120415300

3.74.27.83:12230

# Reference: https://x.com/SarlackLab/status/1927032682715709781

147.185.221.22:53751
year-developers.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1927108129814106252
# Reference: https://www.virustotal.com/gui/file/e976ed6a82de3420678ad2c4d7dda7bb9e36a4d8cf180c7a7f8a775b8894c355/detection

103.253.73.180:9080

# Reference: https://x.com/SarlackLab/status/1927409926457983208

147.185.221.28:57330
industry-decreased.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/37e6fee1fa41b699469162f61230184725f4a3fb7e892c769f676e06efffeb8a/detection

185.142.93.188:1475
melina8080.ddns.net

# Reference: https://x.com/SarlackLab/status/1927772346124755062

147.185.221.24:40108
risk-extraordinary.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1930263898235539481

3.66.38.117:14226
3.69.115.178:14226
52.28.247.255:14226

# Reference: https://x.com/skocherhan/status/1930470463651606790
# Reference: https://www.virustotal.com/gui/file/c20176bc85c03550b91201937fa5c8cc116784a9700990c1cb55c265b9f592cd/detection

191.101.131.227:100

# Reference: https://x.com/SarlackLab/status/1930460002495394047

191.101.131.227:1177

# Reference: https://x.com/SarlackLab/status/1930552760446939581

85.203.4.56:3434

# Reference: https://x.com/SarlackLab/status/1931853713670361343

209.25.140.16:5588
photographers-ecological.with.playit.plus

# Reference: https://x.com/SarlackLab/status/1934461442364723489

66.63.187.164:8595

# Reference: https://x.com/SarlackLab/status/1935578757156184443

138.199.50.129:4444
sleach.zapto.org

# Reference: https://x.com/SarlackLab/status/1935825314946466299

45.144.50.37:221
45.144.50.37:5552

# Reference: https://www.virustotal.com/gui/file/e2fbdfb98377688635b10598d9f54582d73400272e928aca37c7a5056467b51b/detection
# Reference: https://www.virustotal.com/gui/file/8985148b632c4f28fe5a848a83900f3f1dd27ed6b9ec1729badd2264f4a84eba/detection
# Reference: https://www.virustotal.com/gui/file/343a2824d983b9bceb2d42d98a7209aa7bff35d2e65dd069dfbcec08bc227b7f/detection

156.219.156.97:1177
41.68.227.121:1177
1177.freedynamicdns.net

# Reference: https://www.virustotal.com/gui/file/2fa288f6e19d2930e9a5891038e8873793dac7096cfa205fc19bb3dba06e7492/detection

aira.freedynamicdns.net

# Reference: https://x.com/SarlackLab/status/1937290063676690474
# Reference: https://app.validin.com/detail?type=raw&find=%2FCN%3DWIN-3C9M67M1JEG#tab=host_pairs (# 2025-07-04)

188.212.158.67:5557
188.212.158.70:5557
188.212.158.75:5557
188.212.158.77:5557
188.212.158.90:5557

# Reference: https://x.com/SarlackLab/status/1939534787141603792
# Reference: https://www.virustotal.com/gui/file/c709ce82f5fe82c0d87a505d4c67bd1b1d05838633a286d93471ddfd0f7d77f9/detection

158.178.201.63:6368
178.156.131.128:6368
b0dnyoxrn.localto.net

# Reference: https://www.virustotal.com/gui/file/0f61ffdbab0efe9272f1b0acf8f99fcda6461e4f6f978fbaf7f7f637778959e4/detection

log.hackcrack.io

# Reference: https://x.com/SarlackLab/status/1939655566550307151

147.185.221.26:20738
java-romance.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1940455529437896796

154.22.5.243:25252

# Reference: https://x.com/SarlackLab/status/1940938748339868032

104.207.138.98:1177

# Reference: https://www.virustotal.com/gui/file/cda2a5b57e9b78fa4e70cec57ab58efd03a85f9695f114eab548cf142492bb0b/detection
# Reference: https://www.virustotal.com/gui/file/623686ca044c6b32dfccc31a975b99561f755ef6c9f65a851fc3d696731deb6f/detection
# Reference: https://www.virustotal.com/gui/file/01fb6619dd837c3a21023a56a44347c3c1e107d1ca2982f2e15bac3cd92dcf24/detection

77.105.161.10:7000

# Reference: https://www.virustotal.com/gui/file/0cd76f0b68a3ffc68de2b14383e06da14283bf31a005782bc549822da1bd3143/detection
# Reference: https://www.virustotal.com/gui/file/413e3d9566553579d9b0b11e28a553e566ec1537c910290831533575e538d0a4/detection

kizzfly.duckdns.org

# Reference: https://x.com/SarlackLab/status/1941225662380990716

3.68.56.232:11722
35.157.111.131:11722

# Reference: https://x.com/SarlackLab/status/1941225745478496702

3.126.224.214:11722

# Reference: https://x.com/SarlackLab/status/1941467267671154859

3.125.188.168:11722
3.67.15.169:11722

# Reference: https://x.com/SarlackLab/status/1941467339683160271

3.124.67.191:11722

# Reference: https://x.com/SarlackLab/status/1942237324680532222

3.127.138.57:15761

# Reference: https://x.com/SarlackLab/status/1942720442600395054

51.89.166.173:6522

# Reference: https://x.com/SarlackLab/status/1942796118565253627

147.185.221.30:4322
natural-hide.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/75a469cd67db24ecb51fb6760a8c78ca00e782f61d89daf7fc2b7b20f1f71eab/detection

196.251.71.173:7788

# Reference: https://x.com/SarlackLab/status/1944200209417773078
# Reference: https://www.virustotal.com/gui/ip-address/49.228.131.157/relations
# Reference: https://www.virustotal.com/gui/file/fc4ec627794ebf4776775aecb699ed72050b79df0c0f128d9513d40d3389874e/detection

49.228.131.157:6760
boonthumvet.thddns.net
crpr37953.thddns.net
nickyman.thddns.net
touchserver.thddns.net
wtc-home.thddns.net
xntryz.thddns.net

# Reference: https://x.com/SarlackLab/status/1944200430172385693

193.161.193.99:29575
12r123df-29575.portmap.host

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# @025-07-13)

http://26.93.137.160
http://39.100.87.179
103.245.167.123:25565
103.245.167.88:2439
104.12.206.171:5552
105.103.255.169:1177
105.106.35.186:1177
13.38.45.224:1337
13.58.219.64:1177
133.201.65.30:8901
145.82.100.2:4444
147.185.221.20:57386
147.185.221.24:59935
147.185.221.26:4207
147.185.221.27:13753
147.185.221.27:25565
147.185.221.27:28466
147.185.221.27:39536
147.185.221.28:2014
147.185.221.28:35553
147.185.221.28:39881
147.185.221.28:43316
147.185.221.28:48457
147.185.221.28:49405
147.185.221.28:58623
147.185.221.28:60000
147.185.221.28:6997
147.185.221.29:17532
147.185.221.29:34904
147.185.221.29:45904
147.185.221.29:48921
147.185.221.30:5583
149.228.131.165:2427
154.197.69.11:1177
154.248.78.10:5552
156.223.210.247:1177
159.223.193.191:1177
165.227.90.33:443
176.122.105.140:7777
176.38.153.189:2640
178.27.168.179:4112
18.141.106.224:11729
18.156.13.209:15761
18.157.68.73:15761
18.192.31.30:15638
18.192.31.30:18858
18.192.93.86:15761
181.214.48.110:1177
185.177.239.241:2222
185.84.161.194:1177
188.123.65.32:5552
188.126.90.3:5552
188.212.158.75:5556
191.96.224.126:5552
192.169.69.25:5557
192.169.69.26:28387
193.161.193.99:34671
193.161.193.99:37068
196.119.161.157:10000
196.119.199.129:10000
196.119.210.163:10000
196.119.226.59:10000
196.119.245.85:10000
196.119.246.17:10000
198.204.234.114:5553
2.4.130.229:5552
209.209.42.202:5552
23.160.168.166:6522
24.152.37.111:1177
3.1.16.19:11729
3.121.139.82:15660
3.126.37.18:15761
3.127.59.75:15660
3.133.207.110:19869
3.136.65.236:19869
3.138.180.119:19869
3.69.157.220:17831
3.74.27.83:15638
3.78.28.71:12230
3.78.28.71:15638
3.78.28.71:18858
3.8.141.103:1177
3.8.141.103:5050
35.158.159.254:16951
37.1.222.243:6427
37.120.141.139:1605
37.167.219.185:5552
37.167.219.185:6522
41.111.99.164:1177
41.142.139.73:19811
43.226.229.132:4030
44.201.126.95:5552
45.134.140.162:55960
45.146.81.147:5552
45.219.109.132:8899
46.158.253.80:6522
46.246.12.3:5552
46.250.74.88:5353
46.250.75.254:5353
51.89.166.173:12321
52.28.112.211:15660
52.57.120.10:15638
52.74.74.86:11729
52.77.3.235:11729
54.169.93.143:11729
59.26.227.111:6522
77.172.131.127:19132
77.91.66.24:7777
80.71.232.29:23066
81.135.32.64:1177
82.147.84.124:1987
86.1.93.186:25665
91.238.123.133:5552
94.110.99.162:1177
94.26.90.81:5552
94.26.90.81:7773
028.portmap.host
090005.ddns.net
1221.sytes.net
15800442.ddns.net
1re0-51099.portmap.io
1re0-61442.portmap.io
2e2hfbsdjhfbnjewf-42157.portmap.io
3058.cloudvonline.contact
444444444440-29763.portmap.io
7sesh-58077.portmap.io
mhzlh11223344-34671.portmap.io
abdelghani12.ddns.net
abel2024-29427.portmap.host
about-source.gl.at.ply.gg
adamha.duckdns.org
advertising-mary.gl.at.ply.gg
ahmadkurda.ddns.net
ali-ali88.no-ip.biz
alidax.ddns.net
aliendemon.no-ip.org
ammarsy.no-ip.biz
and-britain.gl.at.ply.gg
apple-useful.gl.at.ply.gg
are-learners.gl.at.ply.gg
autistabot-64075.portmap.io
ayham-hacked.sytes.net
azontop.linkpc.net
both-burlington.gl.at.ply.gg
bouziani.linkpc.net
brolyx94.duckdns.org
bytenjs-32028.portmap.host
cause-harrison.gl.at.ply.gg
cempresarial.duckdns.org
change-kentucky.gl.at.ply.gg
channel-hitting.gl.at.ply.gg
ckimo.ddns.net
cyberthreats.ddns.net
dadijinn05.ddns.net
debt-sydney.gl.at.ply.gg
diegoluis.no-ip.org
direct-conventional.gl.at.ply.gg
disease-convertible.gl.at.ply.gg
dneesyschool.ddns.net
dooom.ddns.net
dzhacker055.no-ip.biz
elmodeer.no-ip.biz
entire-boards.gl.at.ply.gg
entirecfw.ddns.net
exchange-reasonably.gl.at.ply.gg
fadbook.ddns.net
fdsa-sasdgf.hopto.org
gallery-article.gl.at.ply.gg
googl32.myddns.me
hacker9393.ddns.net
hackerhussien00000.no-ip.biz
hasanyuksel.duckdns.org
hassanaltimeme9.no-ip.biz
hnoo17.no-ip.biz
hostps1177.no-ip.org
house-allowed.gl.at.ply.gg
hussain880.no-ip.biz
iart76.wintelupdate.pw
infra.hitius.bar
islamicstates.no-ip.biz
kardan35.zapto.org
ksa-h4ck.ddns.net
ksmkmimback.ddns.net
kurakirkuki.hopto.org
labza-hack.no-ip.biz
le2der-57777.portmap.io
lethaldose.nodns.ca
linadz07.ddns.net
look-miss.gl.at.ply.gg
looking-mortgage.gl.at.ply.gg
lordegypt.no-ip.org
manufacturer-covering.gl.at.ply.gg
market-needed.gl.at.ply.gg
med99.no-ip.org
meet-influenced.gl.at.ply.gg
method-analog.gl.at.ply.gg
mhzlhhhhhh4444-53583.portmap.io
mike-ie.at.ply.gg
mikeyloveyousef-47779.portmap.io
moneymoneymoney.ddns.net
moradoff1.zapto.org
mosabedz.ddns.net
mrmokafhafuck.no-ip.biz
mrtamdas-37068.portmap.io
mygokerman.casacam.net
myhost844.ddns.net
myroney.ddns.net
netking.duckdns.org
nglocalhost.com
nj9590.duckdns.org
nokta147.no-ip.biz
north-dad.gl.at.ply.gg
pc-principles.gl.at.ply.gg
power2015.noip.me
privateone.no-ip.biz
pxzycheat-61468.portmap.io
radio-boating.gl.at.ply.gg
randarishere.ddns.net
razpa2.ddns.net
semlegit.duckdns.org
set-proc.gl.at.ply.gg
sidalibelkercha.ddns.net
sleach.dns.army
smith-kw.gl.at.ply.gg
some-nascar.gl.at.ply.gg
sp1d3rn3t1.ddns.net
stock-correction.gl.at.ply.gg
students-hiring.gl.at.ply.gg
suchdevil-25933.portmap.io
suchwoni13.duckdns.org
swats.no-ip.biz
tibiaserver.ddns.net
toolkidi.iptime.org
v-cancel.gl.at.ply.gg
valeasy.ddns.net
valeasy.zapto.org
voc.no-ip.org
w-fraction.gl.at.ply.gg
waleed20.zapto.org
wall-bottle.gl.at.ply.gg
water-keyword.gl.at.ply.gg
wendigagah212.ddns.net
williamou.no-ip.biz
windns.ddns.net
wwwtas.no-ip.org
xcobber1.ddns.net
xxxploit.ddns.net
yes-dominican.gl.at.ply.gg
zaman.myvnc.com
zaraman.ddns.net
zizo.myftp.org

# Reference: https://www.virustotal.com/gui/file/d853684121906fea2a0e78d72c38158f1c347ea338e0fd231f5bc9bb9f31d84a/detection
# Reference: https://www.virustotal.com/gui/file/7dc13d3c8ae92e77ed47c4b3607247ad3993708a4a45106b6fb1115643de2b78/detection

134.255.234.40:8000

# Reference: https://x.com/SarlackLab/status/1944472024924950832
# Reference: https://www.virustotal.com/gui/file/7d6f7c8c3919e9f91c11146d727ccf20409bd7f2e6bee27edd9651e80ef2716a/detection

81.109.131.3:928

# Reference: https://x.com/SarlackLab/status/1944970543674884415
# Reference: https://www.virustotal.com/gui/file/38f2229de0967dcd5f8f0e7057e11cbaa63e43351fffbd6782c8a3005b3feecfdetection

167.160.161.247:8595

# Reference: https://x.com/SarlackLab/status/1945121244740792799
# Reference: https://www.virustotal.com/gui/file/489d3b358343bff8c086f7be99e06de926cc7ddd3915c41e9a6212687f8c7d45/detection
# Reference: https://www.virustotal.com/gui/file/c48e1d76f8e3dcbfa247f2bc6478f31ed9684015aa22abcea762be6504983833/detection

141.8.198.169:8080

# Reference: https://x.com/SarlackLab/status/1945453435563679958

147.185.221.29:63503
engineering-affair.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1948352531291050130

147.185.221.30:31760
style-vitamin.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1948912280038469761

147.185.221.30:26212
art-infinite.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1951025147034353744

147.185.221.30:44132
lower-sam.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1952293508099825901

147.185.221.30:51522

# Reference: https://x.com/SarlackLab/status/1952520002541637801

147.185.221.26:26089
album-dee.gl.at.ply.gg
am-mileage.gl.at.ply.gg
american-designed.gl.at.ply.gg
below-threads.gl.at.ply.gg
came-ac.gl.at.ply.gg
cases-justin.gl.at.ply.gg
comment-call.gl.at.ply.gg
dark-dressing.gl.at.ply.gg
distribution-henry.gl.at.ply.gg
ed-antonio.gl.at.ply.gg
ed-differ.gl.at.ply.gg
est-unfortunately.gl.at.ply.gg
featured-edition.gl.at.ply.gg
hi-tokyo.gl.at.ply.gg
hotel-year.gl.at.ply.gg
html-lodging.gl.at.ply.gg
inn-deutschland.gl.at.ply.gg
l-broadcast.gl.at.ply.gg
ma-toddler.gl.at.ply.gg
make-ballet.gl.at.ply.gg
master-drawings.gl.at.ply.gg
nice-july.gl.at.ply.gg
offered-lover.gl.at.ply.gg
or-australian.gl.at.ply.gg
paper-shot.gl.at.ply.gg
power-consecutive.gl.at.ply.gg
request-suffer.gl.at.ply.gg
say-washer.gl.at.ply.gg
select-as.gl.at.ply.gg
speed-entertainment.gl.at.ply.gg
spring-plasma.gl.at.ply.gg
student-types.gl.at.ply.gg
taking-age.gl.at.ply.gg
tech-gambling.gl.at.ply.gg
terms-pieces.gl.at.ply.gg
that-lloyd.gl.at.ply.gg
things-judge.gl.at.ply.gg
uses-bradford.gl.at.ply.gg
version-affected.gl.at.ply.gg
version-coffee.gl.at.ply.gg
w-entered.gl.at.ply.gg
wedding-acer.gl.at.ply.gg
what-ups.gl.at.ply.gg
whole-intention.gl.at.ply.gg
worldwide-contributor.gl.at.ply.gg
wrong-well.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/b9fca097c6b4bbb164d354dfb4a69ccb4108b97d131c49e8e3c9a68863e5988e/detection

173.225.115.227:8000
tbtt.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1cb2359d3dfea6d7bc057e24e6b944fda10c49127fe4a4493d94a13ec7ddbe4f/detection

18.159.129.36:1337

# Reference: https://www.virustotal.com/gui/file/9861d8828259e579724fc67bc8d79b8182ef637b8ad2e7a3f87a66a5b3704493/detection

18.159.129.36:1338

# Reference: https://www.virustotal.com/gui/file/01be9946ad5c3068e5b92256ae14f6cdd3790cfb538bb93435ecaef93975b586/detection

176.57.5.110:8000
37.139.129.194:8000
95.141.211.5:8000
qays.mine.nu

# Reference: https://www.virustotal.com/gui/file/30612a9fa37fa906c7cf84898e06b3ba3071052354f52ebd7b274a932cfe37fc/detection

45.138.172.48:8000

# Reference: https://x.com/FalconFeedsio/status/1962494410471739490
# Reference: https://www.virustotal.com/gui/file/b7a57bd24034fcdd3289567c2643af5f1da742f6bc4742bae367b569fb2a9eb5/detection

197.39.206.127:1177
197.39.206.127:1739
microman2015.ddns.net

# Reference: https://x.com/SarlackLab/status/1964675157345079709

3.127.181.115:14415

# Reference: https://www.virustotal.com/gui/file/11f0f6bf58715958ed8bf999ef6d9b982a8e37b074ce18728566a991264f9950/detection

193.161.193.99:21749
anonam39-21749.portmap.io

# Reference: https://x.com/SarlackLab/status/1974897466332844071

147.185.221.211:28026
survey-treasurer.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1974882348790411431

147.185.221.211:58682
brand-phil.gl.at.ply.gg

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2025-10-05)

http://104.238.191.68
102.186.142.61:1177
102.43.119.128:5552
103.190.107.26:1122
103.245.164.128:5552
104.21.54.114:443
104.248.130.195:1180
105.111.225.70:1177
115.92.155.19:81
125.26.15.209:1177
126.65.224.254:1217
136.243.250.35:7771
145.82.83.245:4444
146.235.38.234:4180
147.185.221.17:50048
147.185.221.20:47151
147.185.221.211:22872
147.185.221.223:37218
147.185.221.23:26149
147.185.221.28:59570
147.185.221.30:14523
147.185.221.30:32744
147.185.221.30:42419
147.185.221.30:45022
147.185.221.30:56013
147.185.221.30:60000
147.185.221.30:6048
147.185.221.30:7304
147.185.221.31:2232
147.185.221.31:25234
147.185.221.31:27003
147.185.221.31:30983
147.45.219.9:5552
147.50.253.22:1177
154.194.35.243:6258
154.194.35.243:6677
154.194.35.243:7826
154.194.35.243:8122
154.39.150.23:443
156.223.49.162:1177
158.247.197.189:443
159.69.241.217:8080
162.243.204.23:1177
162.243.204.23:5050
172.111.169.163:5552
172.111.216.194:5552
172.111.244.137:4030
172.94.19.69:6400
172.94.96.153:7788
178.16.55.70:5552
18.153.198.123:18890
18.158.58.205:12027
18.192.31.30:18890
18.197.239.109:14147
18.197.239.109:15537
185.244.29.224:7000
185.94.29.239:3555
185.94.29.239:5645
192.121.16.196:443
193.118.38.85:1987
193.161.193.99:30380
193.161.193.99:33942
193.161.193.99:41820
193.161.193.99:43006
193.23.3.29:8590
194.5.65.9:8080
196.119.0.113:10000
196.119.116.221:10000
196.119.117.99:10000
196.119.21.70:10000
196.119.69.99:10000
196.251.114.106:5085
196.251.117.251:50084
196.251.118.105:5085
196.251.73.249:6522
196.251.83.209:5085
196.251.88.252:5085
198.135.49.199:8784
26.175.189.135:7000
3.121.139.82:16995
3.124.67.191:17645
3.127.181.115:12027
3.127.253.86:16995
3.127.59.75:13615
3.142.81.166:10984
3.66.38.117:14147
3.67.62.142:12027
3.68.171.119:14147
3.68.171.119:15537
3.69.115.178:14147
3.69.115.178:15537
3.69.157.220:14147
3.69.157.220:15537
31.128.158.49:4564
34.23.44.248:1177
35.156.141.157:1337
35.157.111.131:17449
41.103.158.248:999
41.103.185.6:999
45.129.199.234:1111
45.146.81.254:1212
46.246.14.3:5552
52.28.247.255:14147
52.28.247.255:15537
52.57.120.10:18890
76.72.162.60:1177
87.242.106.13:23234
87.242.106.13:44333
95.165.131.19:5552
1453.mywire.org
70zv5n4wj.localto.net
8scom.link
adssdasdaasd875654-30380.portmap.host
al-touring.gl.at.ply.gg
amiroxs.duckdns.org
batata123.ddns.net
best-displayed.gl.at.ply.gg
center-kate.gl.at.ply.gg
conditions-lake.gl.at.ply.gg
dbcoo.ddns.net
el2rhabybh-61907.portmap.host
four-railway.gl.at.ply.gg
given-offense.gl.at.ply.gg
googly2020.ddns.net
heo.ddns.net
hoksha-41399.portmap.host
hope-deutschland.gl.at.ply.gg
htht1-21140.portmap.host
j4gn7dcux.localto.net
jne7ovfut.localto.net
just-rss.gl.at.ply.gg
kardan35.3utilities.com
killer89345.ddns.net
l5ewog1zc.localto.net
levels-dangerous.gl.at.ply.gg
lwtgiajga.localto.net
marocgwassem.ddns.net
materials-plant.gl.at.ply.gg
membership-satisfied.gl.at.ply.gg
mhzlhhhh378-43006.portmap.host
microsoft-graphics.ddns.net
mortaza1-33942.portmap.host
names-accident.gl.at.ply.gg
narrowfemboy.ddns.net
nature-neutral.gl.at.ply.gg
need-strengthening.gl.at.ply.gg
njcolombia8590.duckdns.org
paid-location.gl.at.ply.gg
power-comments.gl.at.ply.gg
quite-cs.at.ply.gg
robloxvithor.duckdns.org
rock-indiana.gl.at.ply.gg
round-failing.gl.at.ply.gg
send-deferred.gl.at.ply.gg
snitch2025.pagekite.me
swgood.kro.kr
technology-rome.gl.at.ply.gg
test.accendente.tn
thomas-compromise.gl.at.ply.gg
thomas-drops.gl.at.ply.gg
tpc.cloudpub.ru
transfer-hero.gl.at.ply.gg
trust-mpg.gl.at.ply.gg
volume-defendant.gl.at.ply.gg
waleedf.no-ip.org
winres-43090.portmap.io
wrong-psychological.gl.at.ply.gg
yohlkdt3m.localto.net

# Reference: https://x.com/SarlackLab/status/1975108868951691662
# Reference: https://www.virustotal.com/gui/file/a73f7e943e0e64e0b56d76c49f37af92fcade426b17523d326ee34b2b084148b/detection

193.161.193.99:51746
lsoj0-51746.portmap.host

# Reference: https://x.com/SarlackLab/status/1979170630277763185

147.185.221.211:17276
basis-appropriations.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1980257792997883941
# Reference: https://www.virustotal.com/gui/file/3caf865573bb81e640fe127e1a161dfe0bc43751cecf34bf2d67fcc8ef8d6bbc/detection
# Reference: https://www.virustotal.com/gui/file/d34e5303fc26aa9717e1cf74af1be51b527eea796e066a7c049866e9126b4172/detection

104.236.12.182:1177
162.243.204.23:1177

# Reference: https://x.com/SarlackLab/status/1980423912010727647

196.119.146.16:10000

# Reference: https://x.com/SarlackLab/status/1981435670267580471

193.161.193.99:42172
asdfasfasdf3-42172.portmap.host

# Reference: https://x.com/SarlackLab/status/1982250959121096854

147.185.221.212:31323
blood-por.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1982417007891915169

147.185.221.212:46540
thread-faq.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/a3a0f25a101083707081a71618442396d3ffeb63749d54b3bab5b73bcb3af1a9/detection
# Reference: https://www.virustotal.com/gui/file/19a07c15e06d3b58ff04214a773822eca7043dfb8f3be1df4c69a450284f5c0e/detection
# Reference: https://www.virustotal.com/gui/file/b5d5f6646fc657db12f60bd146588383b1bb2f302772471cb35ecf87edf4d528/detection

181.58.132.31:1992
villataxi.duckdns.org

# Reference: https://www.virustotal.com/gui/file/59cf8092c4041feb9527edb9786a5a77dc261b448ee25bcc9d1dc2f3bbe7a88f/detection

196.251.88.235:1818
indigo2forjoy.com

# Reference: https://x.com/smica83/status/1983615744282620354
# Reference: https://www.virustotal.com/gui/file/b008a16949d794d8e89ad06277d783df6fb0d49721a04b3dc57e083230457609/detection

196.251.116.124:5765
lepritz29.bumbleshrimp.com

# Reference: https://x.com/SarlackLab/status/1984002470058602958
# Reference: https://www.virustotal.com/gui/file/8846a1f636f501944c54d6b5cf62aa25f86693ace84762d264585a1557cd3e67/detection
# Reference: https://www.virustotal.com/gui/file/4b3a86afc707d19c684aeb09a09d32a7e86dd15d14da609c55adc323969fc322/detection

193.161.193.99:30205
dot9-30205.portmap.host

# Reference: https://x.com/SarlackLab/status/1985044320496349370

147.185.221.212:4770
below-artificial.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1985436907044548840

147.185.221.212:8534
academic-suits.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1985436907044548840

147.185.221.212:8534
academic-suits.gl.at.ply.gg

# Reference: https://x.com/SarlackLab/status/1985391603909808466

147.185.221.212:1416
ideas-anniversary.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/852611952812d1fc12f01168f0f64e5dadc04dd6339e5d06cc6cc44266b4a6f0/detection

185.208.159.182:1111
padregreateness.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8152e9c0be20a8634946b5ed6d3ea085df66238f72d129d1b6b855c4e1c85802/detection
# Reference: https://www.virustotal.com/gui/file/93db740b1e3d3229777e256595aea6e50b2dbc21f6785e3da4fdf3ffb8d2a5a8/detection
# Reference: https://www.virustotal.com/gui/file/b198c56d47cbfa5126a1e13015e26a7bcaa2552179b5ecf948d42b7b96161020/detection

147.185.221.212:45772
british-sword.gl.at.ply.gg

# Reference: https://www.virustotal.com/gui/file/8c412e19eee49eef99dd812a59a0a11c6c4470bc78dc76f282de2991fd5da551/detection
# Reference: https://www.virustotal.com/gui/file/6bbf6b0856670664a1b7cf030b5c6e6c5ebee63b634a9fb20f66812b2e0199eb/detection
# Reference: https://www.virustotal.com/gui/file/05acaa9b90bfd00fd97ec52b3420d668ce9ad11270e3274d375ca28f750ff4ac/detection

212.64.215.198:3223
212.64.215.198:678
dscrba7gv.localto.net

# Reference: https://x.com/SarlackLab/status/1988683287397581282

147.185.221.31:22231

# Reference: https://www.virustotal.com/gui/file/2c6d4d2ba228880b3752b7b1e3f9c546576ca2435ff83a74d8e1f5cf27398471/detection

64.225.11.206:1177

# Reference: https://www.virustotal.com/gui/file/4017a03c820772d9a71e23dad25a91188b1f886674817238d3b6a2c1b51188e2/detection

46.246.82.4:5552
eltinoasprilla.duckdns.org

# Reference: https://x.com/SarlackLab/status/2008946916478820501

193.161.193.99:59529
bielzingl-59529.portmap.host

# Reference: https://www.virustotal.com/gui/file/e987298796ba6f43621430775536a346473dd2fdfaf5a99116132df7f8f96f13/detection

103.204.193.139:6522

# Reference: https://x.com/SarlackLab/status/2010003785607721220
# Reference: https://www.virustotal.com/gui/file/b4abd1c57d5deab070c3d3dd4a8210ce666799a9fd8d72a4cdd62a7fe4a6c6e5/detection

104.250.167.52:5056
nj5056ja.duckdns.org

# Reference: https://x.com/SarlackLab/status/2016828792531022187

193.161.193.99:42479
boosterman22q1-42479.portmap.host

# Reference: https://www.netresec.com/?page=Blog&month=2026-02&post=njRAT-runs-MassLogger
# Reference: https://www.virustotal.com/gui/file/48ebc6b856740cd58bcc7ef0f6215a1def18ed37230af28711e080ef24e77404/detection

104.248.130.195:7492

# Reference: https://x.com/SarlackLab/status/2018776591048819079

41.40.113.25:3737

# Reference: https://x.com/SarlackLab/status/2019833547255652444

45.55.159.168:5050

# Reference: https://www.virustotal.com/gui/file/4ef01abca9b02fa70ecf1a800e77619eeceee9a1a6fa19db5464b7fa6be2d226/detection

191.89.220.50:2601
marianajose07v2601.duckdns.org

# Reference: https://www.virustotal.com/gui/file/1f4f4890a02c8a3a27aeb83f8721a3a58dd4824bc93055c4b562d007e0276450/detection

41.254.70.44:2020
dex1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/fe0b8dab976449cc8cfcf46324c62883566ca55533576f88ebbdd50fd6acf761/detection

146.70.226.138:51431
forwebsite.ddns.net
kocrap.airdns.org
skibidi111.airdns.org

# Reference: https://x.com/skocherhan/status/2023293527283679705
# Reference: https://www.virustotal.com/gui/file/e2686fd78bccd72114187eb97900ec488ab03efdad77796ef5b194decdd40515/detection
# Reference: https://www.virustotal.com/gui/file/e5360cc6aaa1b32e1721b31057977de27dd40918e23b19008fa30b4b713bdbdc/detection

193.161.193.99:55977
lordmantion-55977.portmap.host

# Reference: https://x.com/SarlackLab/status/2023004447048143171
# Reference: https://www.virustotal.com/gui/file/010d3b92eeaccc18bbea50ffe2a5d11ad57211a255eae20a166ac7958d9b9e66/detection

77.223.83.36:1111

# Reference: https://x.com/SarlackLab/status/2023336812668653957

193.161.193.99:31011
njratsucker-31011.portmap.host

# Reference: https://www.virustotal.com/gui/domain/noip.biz/relations

njrat2012.noip.biz
njrat2k.noip.biz
njrat712345.noip.biz
njrat999.noip.biz
njratakramkader.noip.biz
njrathakcer.noip.biz
njrathaloul.noip.biz
njrathost.noip.biz
njratv07d.noip.biz

# Reference: https://www.virustotal.com/gui/file/cd55b397d8ec5f6d1c816ecec3c3d5806a696048cd36024e6a78f7e33d5375e3/detection

156.206.159.218:1177
njrat.ze.am
njrat07.ddns.net
njrat10853v.ddns.net
njrat1112245.ddns.net
njrat1578.ddns.net
njrat2022s.ddns.net
njrat2querido.ddns.net
njrat55love.ddns.net
njrat666.ddns.net
njrat75552.ddns.net
njrat777.ddns.net
njratdaputaria.ddns.net
njratgetfuckedww.ddns.net
njrathackers.ddns.net
njrathome1409.ddns.net
njrathuss.ddns.net
njratkabos.ddns.net
njratlawl.ddns.net
njratlazer.duckdns.org
njratmatr1x.ddns.net
njratmena.ddns.net
njratneratka.ddns.net
njratnik.ddns.net
njratqweqwe.ddns.net
njratrapolas.ddns.net
njratrat999.ddns.net
njratsdssa3ds.ddns.net
njratt.mooo.com
njratxrd.duckdns.org
softo.ddns.net

# Reference: https://x.com/SarlackLab/status/2023185638015512683

193.161.193.99:42278
moloc79286-42278.portmap.host

# Reference: https://x.com/SarlackLab/status/2024167195186524193

91.92.243.47:5552

# Reference: https://www.virustotal.com/gui/file/007bd1d98b228500ccd421917f67a7d29cdb282252d05faa70e1e329b1a05108/detection

165.227.177.122:1177

# Reference: https://www.virustotal.com/gui/file/0039c88eaf273be59cc3148cd987cb08eaddda4aa07b1d5bc983466f7fe943dc/detection

18.198.77.177:19306
3.121.139.82:19306
3.127.59.75:19306
35.158.159.254:19306
52.28.112.211:19306

# Reference: https://x.com/SarlackLab/status/2024665452530594203

18.198.77.177:11637
3.121.139.82:11637
3.127.59.75:11637
35.158.159.254:11637
52.28.112.211:11637

# Reference: https://www.virustotal.com/gui/file/da299acbe6901f6ee3dae2bba9771c7cde51f661a613162c11f7175b086546ed/detection

65.21.85.133:741
expressanti.linkpc.net

# Reference: https://www.virustotal.com/gui/file/7392c9791bc82b51e6c0cf90a3294788f6d67669fdf067d8b0d5c9f1a23d17a8/detection

5.181.159.9:54321

# Reference: https://threatfox.abuse.ch/browse/malware/win.njrat/ (# 2026-03-01)

104.248.130.195:7491
121.165.121.162:6060
138.68.155.86:1177
138.68.155.86:5050
139.180.158.177:1177
147.185.221.212:1177
147.185.221.212:24663
147.185.221.212:54644
147.185.221.212:58261
147.185.221.223:44804
147.185.221.229:42061
147.185.221.229:50473
147.185.221.29:49279
147.185.221.31:59660
147.50.253.97:1177
155.117.44.26:741
156.223.82.207:1177
161.248.179.38:6666
167.71.255.8:5050
167.71.56.116:22764
169.224.4.4:37625
170.245.122.76:1177
172.111.244.134:4030
176.65.132.12:5588
177.89.234.43:1177
178.162.203.202:1124
178.17.59.117:5552
18.153.198.123:13447
18.184.107.63:16549
18.192.31.30:13447
18.197.239.109:10859
185.26.236.215:5553
187.55.64.202:1177
188.147.103.182:12345
188.212.158.72:1177
188.212.158.97:1177
188.215.31.4:5552
189.5.64.234:7777
192.71.211.249:4252
193.161.193.99:31554
193.161.193.99:32265
193.161.193.99:35578
193.161.193.99:39469
193.161.193.99:50079
193.161.193.99:57231
193.163.203.61:1337
196.119.160.163:10000
196.119.182.167:10000
196.119.240.164:10000
196.119.246.134:10000
196.119.7.42:10000
196.202.81.115:1177
196.251.88.235:50084
196.251.88.245:7805
212.64.215.198:2920
217.180.213.17:5554
26.169.62.1:5552
26.190.196.227:5552
3.234.97.76:8080
3.66.38.117:10859
3.68.171.119:10859
3.69.115.178:10859
3.69.157.220:10859
3.69.82.126:16549
3.71.225.231:13447
3.72.225.3:16549
37.120.198.172:37625
41.103.8.159:999
41.141.16.187:85
41.99.101.50:1177
45.130.164.228:1177
45.153.34.118:9878
45.55.159.168:1177
5.2.73.157:1609
5.79.71.205:1124
5.79.71.225:1124
51.210.6.247:1717
52.28.247.255:10859
63.176.154.20:16549
63.176.170.12:1337
65.185.19.181:25565
67.176.102.21:6522
78.29.43.89:40299
78.29.43.89:40978
82.202.167.229:4445
88.83.203.254:7777
90.143.182.93:5552
91.238.104.82:1604
92.60.78.221:443
94.110.100.214:1177
1554.portmap.host
addpanel.duckdns.org
agn121-64753.portmap.host
ailail22.no-ip.biz
almost-circular.gl.at.ply.gg
bouboubobo1.no-ip.biz
classic-dave.gl.at.ply.gg
cloudflaredns.duckdns.org
comobucetas.duckdns.org
computer-table.gl.at.ply.gg
dadsadss-30374.portmap.host
dariusbazukii2025-38390.portmap.host
dark-kok01.duckdns.org
debil.ddns.net
dededesc-52459.portmap.host
defender.ydns.eu
dmdrat.adultdns.net
ed-rn.gl.at.ply.gg
fig3456-50079.portmap.host
firas2003.ddns.net
for1se-43493.portmap.host
getting-judicial.gl.at.ply.gg
growth-turtle.gl.at.ply.gg
hours-morrison.gl.at.ply.gg
investment-entirely.gl.at.ply.gg
italy-jeff.gl.joinmc.link
jyyjtjyt-63390.portmap.host
k0lan.ddns.net
karim44.no-ip.biz
know-studied.gl.at.ply.gg
kycb.ddns.net
late-lil.at.ply.gg
lordppl.no-ip.org
messikoko2014.no-ip.biz
nice-chairman.gl.at.ply.gg
norot15.ddns.net
offer-relationships.gl.at.ply.gg
p-zinc.gl.at.ply.gg
programming-variation.gl.at.ply.gg
ready-scan.duckdns.org
recently-dsc.gl.at.ply.gg
rss-august.at.playit.gg
s47hacker.ddns.net
sadxssaw-41989.portmap.host
science-tight.gl.at.ply.gg
select-laura.gl.at.ply.gg
spam.onthewifi.com
starnhgggf-58632.portmap.host
starnt80-46282.portmap.host
takken1997.hopto.org
tickets-somewhat.gl.at.ply.gg
times-initially.gl.at.ply.gg
to-appreciation.gl.at.ply.gg
useful-divine.gl.at.ply.gg
userbot.uswin.com.tr
utils.myvnc.com
xmdmrz.no-ip.org
yoenacevedo7-52605.portmap.host
yosef2001.ddns.net
yourfearcig.no-ip.biz
zapoluchit-52686.portmap.host
zebuceta.ddns.net
zertsqaure-39469.portmap.host
zxccvinorez738-44567.portmap.host

# Reference: https://www.virustotal.com/gui/file/557ec21110e662942395e8ab6fef3a8d568a96e9b22f892705ddc6ed8a6a1ff8/detection

185.19.85.138:26471
186.169.45.139:26471
alfredolozano87.duckdns.org
