# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: slrat, spymax, datzbro

# Reference: https://twitter.com/LukasStefanko/status/1239494265618694147

assdsiwi.ddns.net

# Reference: https://www.virustotal.com/gui/file/eb5db64f88a09cf8b5c72d2b3a0a45439c678bb513fb7adb59b335f0354cd095/detection

41.253.52.89:1515
41.253.23.12:1515
41.253.23.12:28028
216.38.7.245:6666
41.252.167.210:1515
41.252.167.210:28028
82.205.176.250:1515
41.252.139.115:1515
41.252.139.115:28028
165.16.67.82:1515
165.16.67.82:28028
41.253.168.216:1515
41.253.168.216:28028
assdsiwi.duckdns.org

# Reference: https://www.virustotal.com/gui/file/988ba9665b44a2791f4ea3d6b95b885287212e0fecac8bb517784a6a69c0c6ff/detection

shakermohammd19999.ddns.net

# Reference: https://www.virustotal.com/gui/file/07ae6fa0f804e16f24ed052ef25349780195bfa95b557e9be52f29f9abbf39db/detection

187.122.224.72:5214

# Reference: https://www.virustotal.com/gui/file/4d5e47d30b62dcb134f3c2964f70e18efd73df1e6c8da5cc1e6582ec62fe366d/detection

177.64.155.133:5214

# Reference: https://twitter.com/malwrhunterteam/status/1248661416791465984

anti-corona.app

# Reference: https://www.virustotal.com/gui/ip-address/144.76.30.213/relations

144.76.30.213:443

# Reference: https://twitter.com/LukasStefanko/status/1250451829877587968
# Reference: https://www.virustotal.com/gui/domain/pataraha.com/relations

pataraha.com/apps/downloads/

# Reference: https://twitter.com/malwrhunterteam/status/1251514856114737154
# Reference: https://www.virustotal.com/gui/file/234fab850c14c91c9e0cd0b2a003c5ce9d17aeba5e88b24abd29c7cab89181ba/detection

frewasss.myq-see.com

# Reference: https://www.virustotal.com/gui/file/74cea86b03f5a3f31a8b5f262f3ff8349eb406f3ea0221d34ea85cde46717f4c/detection
# Reference: https://www.virustotal.com/gui/file/9a436bf2e60a9682d5cd5c4c74fa87c56e094ebaec03b8818d84298af1fd8b05/detection
# Reference: https://www.virustotal.com/gui/file/043c30441bde4a1f839bbbb06aa0651fb80f043510848c7a22cea33ddc966136/detection
# Reference: https://www.virustotal.com/gui/file/3aff643f9121af2881b7995c7cfc7fe456e87bf189765576c96a0a6e4273dead/detection

141.255.147.237:2492
91.192.6.212:2392
91.192.6.212:2492
q1q1q1.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1252909522605277184
# Reference: https://www.virustotal.com/gui/file/ccb7c588115211956598f8af7ac66c0feabf6ba7b6b6832a7f66ad2edf2492d3/detection

39.53.94.143:4444
tandertx.ddns.net

# Reference: https://twitter.com/ReBensk/status/1254691066298511360
# Reference: https://www.virustotal.com/gui/file/253262aa1b7eb99796acbcccdedb3cf627e32042ab35a75544c23af9e25a76b3/detection
# Reference: https://www.virustotal.com/gui/file/bdffec168572196309fd356c26e0db5180d083297f76264945f463635fc5ed98/detection

197.206.139.184:71
41.105.255.65:71
steemit.hopto.org

# Reference: https://www.virustotal.com/gui/file/f733ded73d4f498327480d232e415465c0f5654a69b431da081f83998b49ead2/detection

193.161.193.99:45467
gwennie.duckdns.org

# Reference: https://twitter.com/malwrhunterteam/status/1256471836457684992
# Reference: https://www.virustotal.com/gui/file/c140c29382aae632858fdb39f0fd9fe0737b7d758c818b582cea89354524937a/detection

185.166.27.9:5555
whoami769.hopto.org

# Reference: https://twitter.com/malwrhunterteam/status/1258671300777783297
# Reference: https://www.virustotal.com/gui/file/638f7ae0adb26c5f57243c098a5f47781a981318c2461f9a3a2759ba9ef33cae/detection

111.94.75.182:2219
202.162.210.172:2219
mikymouse.ddns.net

# Reference: https://www.virustotal.com/gui/file/15ad81a58df7a8fdf5f1f0d4fe6917989ae51d0fa0b3584b3ab7aebbe19af8f9/detection

105.105.215.75:3210
141.255.159.128:3210

# Reference: https://www.virustotal.com/gui/domain/hammoud777.ddns.net/relations
# Reference: https://www.virustotal.com/gui/file/e701dfabda46e950db66fca6823198765f7226c9cda0f9bdb301d0af4045243b/detection

141.255.147.63:1177
141.255.155.10:1177

# Reference: https://twitter.com/malwrhunterteam/status/1260890636737273858
# Reference: https://www.virustotal.com/gui/file/3f69bc4b7fc50db582b13835206d2480acc66919db9123b37cf97f7f3da3b443/detection

193.161.193.99:37916
johnnj2-37916.portmap.io

# Reference: https://www.virustotal.com/gui/file/97a286e006d2233f0a2b9d2d0b680dcf9a163b3d2646d0b9fd5f12aec5a61cbf/detection

193.161.193.99:48572
wajikhan.duckdns.org

# Reference: https://twitter.com/malwrhunterteam/status/1260892816307367937
# Reference: https://www.virustotal.com/gui/file/885d07d1532dcce08ae8e0751793ec30ed0152eee3c1321e2d051b2f0e3fa3d7/detection

204.48.26.131:29491
prettysavantwholesale.com

# Reference: https://twitter.com/ReBensk/status/1261155044059222016

contactsocialmedia.tk

# Reference: https://twitter.com/Sh1ttyKids/status/1261022463002947584
# Reference: https://x.com/banthisguy9349/status/1812472151682760859

spynote.us
a.spynote.us
panel.spynote.us
z.spynote.us

# Reference: https://twitter.com/ReBensk/status/1261647350579097601

microsoftupdating.online

# Reference: https://www.virustotal.com/gui/file/af50e1ae653109062254c5fadc030cc7d61db21272e56d5754572f21faf903c6/detection

thecreator2020.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1262430537714728960

aragerot.com

# Reference: https://twitter.com/malwrhunterteam/status/1262454926074093569

156.220.5.128:1337
spynotesooker17.ddns.net

# Reference: https://www.virustotal.com/gui/file/efb8414f3d653685de5c0cc421d64fb36f757f462d51ac41f8fd6b5a76f1772a/detection

193.161.193.99:39546
farhad5010-39546.portmap.io

# Reference: https://twitter.com/ReBensk/status/1268742575537549316

m8dmkw.dynu.net

# Reference: https://twitter.com/malwrhunterteam/status/1269300424693239809
# Reference: https://www.virustotal.com/gui/file/ab079c5e6189c241000ce4da51f9e18b9f68d408d524bc88ea695f3280c42349/detection

105.155.228.6:3210
imsgms.myvnc.com

# Reference: https://www.virustotal.com/gui/file/36ff6698d50a85504bc876f4878de1b911082effa6d3c445ebf9924184fd17a2/detection

193.161.193.99:62364
antorkhan-62364.portmap.io

# Reference: https://www.virustotal.com/gui/file/9aa01a909ccd2300d0c196fa2b408fe63c9b2aae0abe5acd1e2c2d03ec1ebdc4/detection

217.54.133.82:4444

# Reference: https://www.virustotal.com/gui/file/0cb7e42bd7f9bfbd6e048f59cce4a0e3f1e963981b7f0c5970a86a70583d2b68/detection

62.114.186.254:9999

# Reference: https://www.virustotal.com/gui/file/d710bd370bac3ea7cfd737ad243d107ba870e03886ca7fa945b838e66fe867c4/detection

217.54.88.221:9999

# Reference: https://www.virustotal.com/gui/file/6f129c7805b6997974bf1a1939f0e473708711cfb896460ea02a52ae6818259f/detection

62.114.215.21:4000

# Reference: https://www.virustotal.com/gui/file/cc5b7eb74dd0f51ed76a061350fec6b1b61b8262ddb6288ee981ac080c31a5c4/detection

62.114.207.156:9999

# Reference: https://twitter.com/malwrhunterteam/status/1271855227411587072
# Reference: https://www.virustotal.com/gui/file/ccf588a728abb3f9a1f1b1d0d8f02b1a3a0ff4198589b25575969d0428a8a66b/detection

82.137.218.185:215

# Reference: https://www.virustotal.com/gui/file/aa9133d68ebbb8f777b685ec15a358e0fb2d572bd30ce962d3d1b0c53b785523/detection

185.255.46.114:5551

# Reference: https://www.virustotal.com/gui/file/40836373cb307d6472e20f2c65916ee2ab291fdb27864d456fc5fbe2ec927d21/detection

192.169.69.25:24306

# Reference: https://www.virustotal.com/gui/file/5fc0d6fe1d249ed433dba8f9ad03307748434ca08a6ae729858c2382861c4d04/detection

190.74.113.35:8000
enrike653.ddns.net

# Reference: https://www.virustotal.com/gui/file/45ef21cca5c70be1f607252c89ebf4873795fe53fa214ed627b24f9000d1852f/detection

190.73.153.239:8000

# Reference: https://www.virustotal.com/gui/file/592bdfea96900f38525b6afe0b353cca422923052360c771b3fd1d3729824494/detection

141.255.146.170:3210
mlh123.ddns.net

# Reference: https://www.virustotal.com/gui/file/6f046db5bbd119d9d383a46ead8c1369ac597c37ea567144c341ea5e9ebed3e9/detection

141.255.145.115:3210

# Reference: https://www.virustotal.com/gui/file/c6954678b39e121c60fd691275238267f97f5ce4264255458c06e155a232423c/detection

141.255.153.22:5214

# Reference: https://www.virustotal.com/gui/file/ce4db4c837defde7461daa1a8a77a0232629b881a21a5741cdb072cf4d897552/detection

141.255.157.158:5214

# Reference: https://www.virustotal.com/gui/file/90d5a6b010901ed67c861d0c3bfdd21f894c13c094a06b78cccc16625c6147de/detection

37.8.24.221:5214

# Reference: https://twitter.com/SecuriTears/status/1276907531231727616
# Reference: https://www.virustotal.com/gui/file/41b2e5473836a59bbba209b9a0d346b22f7e9bb9d1b4c90ca9b5f1626112ee31/detection

http://49.233.182.150
49.233.182.150:3210

# Reference: https://twitter.com/bl4ckh0l3z/status/1281591279122550784

193.161.193.99:53976
reddesk-53976.portmap.io

# Reference: https://www.virustotal.com/gui/file/d716ba34cad70fb14dfe490252a655630e14ffb6aeb221e4d839e9cc63589df9/detection

193.161.193.99:59671
Eathenjacobe-59671.portmap.host

# Reference: https://www.virustotal.com/gui/file/23f3b76890b7a41efca6288e00689425ffabe8113b8f0ec71b6ab113dd434029/detection

njfdu84hc83nb8-46899.portmap.io

# Reference: https://twitter.com/ReBensk/status/1283666334295838721

monprofil.online

# Reference: https://twitter.com/ReBensk/status/1290158109395050497
# Reference: https://www.virustotal.com/gui/file/f6ec2dbd9d6bff73d626321a6e889e64db3a7c2a3dbdc6f7eae6bcf3be09167f/detection

arduinofreaks.ml

# Reference: https://www.virustotal.com/gui/file/e5c415b3d79694a5e89d5d813a88200b3516648a6808911dbb365c61a4efd578/detection

41.108.251.174:3210

# Reference: https://www.virustotal.com/gui/file/d9d82adc58d5950c7c91a9c484ba1d1142132acd23b6a42a56b3d807a05e0918/detection

86.4.221.98:4040
apexspoofer.duckdns.org

# Reference: https://www.virustotal.com/gui/file/0e7e14a743c7d5d589d7c617bc2ac1094b9bcf5f0c8d99657f1c392568ce477f/detection

154.236.146.219:4444
154.236.90.116:4444
41.199.197.93:4444
217.55.49.9:4444
body.bounceme.net

# Reference: https://www.virustotal.com/gui/file/32cdfdb08716efc720deb34fed85cff65523d66e26022571ba96c65c6fddaf4d/detection

bnbn.ddns.net

# Reference: https://www.virustotal.com/gui/file/7b0984af6b49c12cb0e8322aad0611fd497f3ee9d801515b5eaf9591b327726f/detection

deepnest.duckdns.org

# Reference: https://www.virustotal.com/gui/file/47d0fd4eca95d85e9d00fb3e14b295f5023f7ad6bf34fde63393f373baf545bb/detection

187.40.132.99:3473

# Reference: https://www.virustotal.com/gui/file/79c51704b4565ee42ad05e482db9f471d847858fdebb5793df49f8a9867eb591/detection

197.59.102.90:1177
mr32123.ddns.net

# Reference: https://www.virustotal.com/gui/file/c5153499bfabb6ddcefba591b6fba081ff8851ca1910793e66cf9e810857eb9b/detection

194.176.99.68:4444
idkjustgo.ddns.net

# Reference: https://www.virustotal.com/gui/file/3446f499aa768e5afc5cc19b02d430ceaffefd17872d1bccf2467b2b54f848c0/detection

193.161.193.99:62207
hm1234-62207.portmap.host

# Reference: https://www.virustotal.com/gui/file/37f8afdc1117de292a29f9449824ad40d76b67d96ff0b5feef773bb1c7ae1b29/detection

193.161.193.99:42421
kr1pt0n-46860.portmap.host

# Reference: https://www.virustotal.com/gui/file/9e5aa550fa4bcf3d2d48269d19efca3e708ed6a9572e61d4613ee2f754e7b7c4/detection

193.161.193.99:38300
yozoraxph-38300.portmap.host

# Reference: https://www.virustotal.com/gui/file/11714a034d9bc0b9c617b898963342727ac140e8106fc1d3cd92a30fd3edfccb/detection

193.161.193.99:23892
mascarpone-35171.portmap.host

# Reference: https://www.virustotal.com/gui/file/a18c9ce516b4494c65475b85c283e32b4f5777ea3fb055a4a0f702b640a8a7b4/detection

193.161.193.99:58574
dhruwr9-58574.portmap.host

# Reference: https://www.virustotal.com/gui/file/13a7415335abc943cb5dfe17d994b1f81f4b21703e9a7695a9522bbfb355c720/detection

193.161.193.99:36201
hackimti-36201.portmap.host

# Reference: https://www.virustotal.com/gui/file/7784822e37f4d3f5ca7b1d65bf1104e9ab28495a629a4105af90ddeb47258bbf/detection

193.161.193.99:28869
assa-28869.portmap.host

# Reference: https://www.virustotal.com/gui/file/88123fd9567f112872ab373685ff30267f291a18d6f892c22d5d59d26af29d49/detection

193.161.193.99:44144
kichae-42764.portmap.host

# Reference: https://www.virustotal.com/gui/file/1163c5e75d8a149dd342220f04aeb5b4924c59dd6b3a854bc5d0ebfe58fc8cfb/detection

193.161.193.99:35767
wolfx-35767.portmap.host

# Reference: https://www.virustotal.com/gui/file/640d7352ade1e47a264a868363c528f926fd41e30b151b42623b748bd1085a4c/detection

193.161.193.99:29042
toth-27008.portmap.host

# Reference: https://www.virustotal.com/gui/file/c9ad77b616fb56b34da6da9a15232b1f421003c728c127b95e87a8e527adb8f3/detection

193.161.193.99:22354
anon6863-48284.portmap.host

# Reference: https://www.virustotal.com/gui/file/d935ccd35e3979204f2c8f48173121f88bc82ef4fa96abc64348bc8992cc9092/detection

193.161.193.99:4242
193.161.193.99:64775
vishal99099-64775.portmap.host

# Reference: https://www.virustotal.com/gui/file/01ea9c2c06882c5555cbba14ee84153167cd46db0ea4ecb9c19dacb5123f24e9/detection

193.161.193.99:38353
hunterhmd-38353.portmap.host

# Reference: https://www.virustotal.com/gui/file/7d544e33d95b33935ab3f288ceb1ad15bc44be72936ae8bea66a2a65391577fe/detection

193.161.193.99:38508
black9654-38508.portmap.host

# Reference: https://www.virustotal.com/gui/file/a8cefcfcce3d79812f11e614102acce8bdf4253df405604ac01ca7c2e746c300/detection

193.161.193.99:31722
siraxeb658-62133.portmap.host

# Reference: https://www.virustotal.com/gui/file/4edeaa23afece052dccd3d2ca9cdeb32b4962058abf6e297c5e6f020256fe37f/detection

193.161.193.99:27460
ddindia-33351.portmap.host

# Reference: https://www.virustotal.com/gui/file/b04d6535e696e8378d36f93e575fd37dc9cffd2cb1ce36b5276df80e4eb7729e/detection

178.32.12.103:2222
94.47.17.91:2222

# Reference: https://www.virustotal.com/gui/file/e907b35f7afd7b96c8e08cd1043622926a205411606a807210a9eb2ab260b562/detection

193.161.193.99:25263
apaya-25263.portmap.io

# Reference: https://www.virustotal.com/gui/file/de779ec44f5c458621b104c44d88f7e268d8798b67597b7861ca94f9595bd43a/detection

199.66.93.68:5552

# Reference: https://www.virustotal.com/gui/file/2f0fc0f90e3abbf3017dfbe562a5341610206788e0f1671d110acecb149cc6d4/detection

41.105.44.177:3210

# Reference: https://www.virustotal.com/gui/file/9b50d732354e7aa8bcef6603b575584871797c6e2171364f6a144d3804483293/detection
# Reference: https://www.virustotal.com/gui/file/9b50d732354e7aa8bcef6603b575584871797c6e2171364f6a144d3804483293/detection

102.69.5.159:2222
192.169.69.25:2222

# Reference: https://www.virustotal.com/gui/file/3aca04e3a574bccad8086323516abaf90f05cbb36a37053b88fe562131612cbf/detection

45.74.46.195:8181

# Reference: https://www.virustotal.com/gui/file/0d69ea9679b293299234b44004670fa3eb667734709af83edf0914fcb6508a90/detection

45.74.46.199:5214

# Reference: https://www.virustotal.com/gui/file/6140caeb42927993ee127c1976dc8bafc6f6456c60f120d94c7ef919d3dea14d/detection

196.75.140.215:2020
snowypix.hopto.org

# Reference: https://www.virustotal.com/gui/file/f5cd7798179e2d713e31812b15ca0189dfe97f7e25ac796e6f36d181a96efcd0/detection

41.142.85.225:3333
simoxsimox.ddns.net

# Reference: https://www.virustotal.com/gui/file/403e620134abfde92d5611b7949cde966b0fedaea58213d635a9105b48fe0c85/detection

105.156.80.242:3333
191.101.124.175:3333
mrxtnt.ddns.net

# Reference: https://www.virustotal.com/gui/file/ffaa313fb3aba56b439c8e6c40bd03d6627158a2a4c6a23a74ec8cad318af452/detection

41.142.230.203:3333

# Reference: https://www.virustotal.com/gui/file/df88a0c05a3a53d2ea33703d4ecd3705d30940bc79c09e9b8e86ced707514b28/detection

41.140.184.191:3333
41.142.224.183:3333

# Reference: https://www.virustotal.com/gui/file/a024ef4ecc1a497e97f34a0ab6c117205621754f4bee5cb7855c6af775ba369e/detection

105.156.90.254:3333

# Reference: https://www.virustotal.com/gui/file/8abd566ed52e4ed9c76d49afd85a20d6988be321118dbea5151435cda98cefbf/detection

182.180.49.15:7777
needforrat.hopto.org

# Reference: https://www.virustotal.com/gui/file/361a6c8d74b59a5669ca425bed423bf45b23adab8f07625bcdb37a98e8696807/detection

67.227.226.240:1337
ahmadremawi.system-ns.net

# Reference: https://www.virustotal.com/gui/file/3a4510584d53ff1233fca61fafb0f86ec1b62f0a04e82970d7d917e5f09293fd/detection

197.59.115.31:5214

# Reference: https://www.virustotal.com/gui/file/5f499b804d3d37060ee3f0ee0f329bccdf59e3ee4f9f7ff610c253389a275bb5/detection

89.39.107.197:2222
1234noba.ddns.net

# Reference: https://www.virustotal.com/gui/file/e35bad73e6bdf7afff5e967399daa0e16cbf4cb4413148460596d0ea79b47e1d/detection

62.201.255.38:5214
79.134.225.124:5214
adam9.ddns.net

# Reference: https://www.virustotal.com/gui/file/bda8637d0bbeec23ba68f328fbd3a84db20b9d734b7a0c20d04bd7dbbd2a2c2a/detection

79.134.225.124:3210

# Reference: https://www.virustotal.com/gui/file/c657c331a6e73443bb89f0d98925771e92489e699e0c185667902c20e293e63c/detection

62.201.254.218:4000

# Reference: https://www.virustotal.com/gui/file/22b035d4c497bd9bb520e49e3a1355bfb248369a49391824af7d54157619ce5a/detection

79.134.225.124:8181

# Reference: https://www.virustotal.com/gui/file/4bbfef5f36feb663e564721352ff3cdea466a6372306c9c7aa66524e97f01bb6/detection

62.201.255.6:5214

# Reference: https://www.virustotal.com/gui/file/bc0c55efffe32ba0d2bdc23d5aa9d60200b50c5a373bce9822af6316cdd4f2fb/detection

79.134.225.124:4000

# Reference: https://www.virustotal.com/gui/file/f64e25a5aac68cc011e6578f4f3832767f81c26a9652b43afd8d9d156d774912/detection

62.201.242.88:4000

# Reference: https://www.virustotal.com/gui/file/698b68cfaceb3b7b63646cbcca394838057ba84944b248beaf1ae145a180e719/detection

62.201.240.193:5214

# Reference: https://www.virustotal.com/gui/file/ac3fa09ffee643790e1e208a758c20b6cecf8f1737dd9f47cef1407471256a79/detection

888rat.hopto.org

# Reference: https://twitter.com/malwrhunterteam/status/1315743478593343489
# Reference: https://www.virustotal.com/gui/file/43eb81706caed170357244a8d4ff16316368b239c2a132f18f3a1b8e634cd7f2/detection

toutapc.myftp.biz

# Reference: https://www.virustotal.com/gui/file/c70d4b3c056d8dfa69eda66180b817d028acd979b16de519fcf30525bdd1487c/detection

41.230.96.3:3210

# Reference: https://www.virustotal.com/gui/file/a2451b0dcaec6eea3566abd8b19bb36ea2c41d321301e1c9a0f077c21fa90c6a/detection

46.43.82.146:2255

# Reference: https://twitter.com/malwrhunterteam/status/1317469278132703235

hediyekarti.22web.org

# Reference: https://www.virustotal.com/gui/file/0ee6f6a2626f92d0fc2a738825de8e087bfc1b5c9455517ee73dfb68aa68ea71/detection

41.239.87.219:5552
mesho13568.ddns.net

# Reference: https://www.virustotal.com/gui/file/eef6a9f76e671d56eb7f55284d8686ecc014f29decb713c6d6716c30bb3e2393/detection

141.255.147.20:5010
rofixman.myq-see.com

# Reference: https://www.virustotal.com/gui/file/cec9b39be8831de276e364cfe75f9967f94602fac924917babcd903781f47181/detection

6ix10en.ddns.net

# Reference: https://www.virustotal.com/gui/file/086caa69a22c90ec4884410cea99eec579bc872c9354a66a8822ceb59aab4d71/detection

89.189.84.169:8080
8ddjdgugs99.ddns.net

# Reference: https://www.virustotal.com/gui/file/c77a066c9774e12d6a49589196463c1c96244225dde6b3a6f5af1b7dac34f46c/detection

41.104.49.27:1988

# Reference: https://www.virustotal.com/gui/file/4f5e43c27f8e38d37983771e3b9dc61a9bb253cea8412238bc4feef17f7568ef/detection

197.207.184.71:1988

# Reference: https://www.virustotal.com/gui/file/6a05848f403d2f60ab798488f5176a79be7ca51e56dd551aa0fac8bbc8a5a46e/detection

197.207.173.110:1916
41.104.53.81:1916
41.105.45.5:1916

# Reference: https://www.virustotal.com/gui/file/c7243be00dc84c2ff83bd9fd4581e6b8ecab9ad8056076ae84c88556de0a761b/detection

181.51.127.244:3210
201.232.179.81:3210

# Reference: https://www.virustotal.com/gui/file/d4b6c1ecad98bc4c694afe943e1f3e7d559105ebeaf337311bf2ebaff26ae332/detection
# Reference: https://www.virustotal.com/gui/file/201d4a3b2d550d5cc8e0fc213abc5565f3b771919ad3a7087886440fe9e96d0e/detection

197.38.31.75:1337
197.38.50.73:1337
197.39.98.118:1337
41.43.23.72:1337
41.43.239.241:1337
abcabc2002692.ddns.net

# Reference: https://www.virustotal.com/gui/file/7bd4c48af2085cc085d53f503b727945a93db709307085120ab887e6dd588637/detection

189.6.120.28:1000
dlrodvox.ddns.net

# Reference: https://www.virustotal.com/gui/file/44aa8ee46dda6d043704c34046d404e020fd57c2e546a0ef476914ad9ab16e71/detection

118.24.85.85:3210

# Reference: https://www.virustotal.com/gui/file/7574f21911d0dc9c7240da975e2c00ab26cdbc632b1e226c534a5c8a13bd2cc8/detection

3.129.187.220:18202

# Reference: https://www.virustotal.com/gui/file/120146134587fe32a320303e440ac2c3c5cb5ae2b650021a3b2653b3c6c2a396/detection

141.255.153.144:1177
191.184.244.32:1177
eaegurizada.duckdns.org

# Reference: https://twitter.com/ReBensk/status/1337233675377930242
# Reference: https://www.virustotal.com/gui/file/ec661366a3767e20f839ebfe8c9baef3e65aaef90407d6cb61468d440716f76e/detection

34.92.173.92:7771
covid19.servehttp.com
tello122j.onthewifi.com

# Reference: https://www.virustotal.com/gui/file/5f4df9d6bda84ef496301a0388da6c34e7467ba628b78078a76a059a0da08e17/detection
# Reference: https://www.virustotal.com/gui/file/fde3ef90993481e9a413164fae13c6e2140639749a0ab4964a5241cc63563a49/detection

134.35.81.176:1177
5.255.27.5:1177
fackyouman123456789.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1308439809594191872
# Reference: https://twitter.com/bl4ckh0l3z/status/1308450629027860481
# Reference: https://www.virustotal.com/gui/file/caaed52688bac628268ff3482d0e5f60e47d8f317bef3fecacf93b434c7692d7/detection

13.59.15.185:11721
3.128.107.74:11721
3.130.209.29:11721
3.131.123.134:11721
3.131.147.49:11721
3.131.207.170:11721
3.138.45.170:11721
3.17.202.129:11721
3.18.75.105:11721
3.19.6.32:11721
3.20.96.224:11721
3.21.60.148:11721
3.22.15.135:11721
3.22.53.161:11721
3.23.201.37:11721
52.14.18.129:11721

# Reference: https://twitter.com/malwrhunterteam/status/1283484998432182273
# Reference: https://twitter.com/bl4ckh0l3z/status/1283513238336999425
# Reference: https://www.virustotal.com/gui/file/6dae1d095fe28cf717ab250580b77daeae27c59a93a8a6ee899829083203eab0/detection

41.254.43.46:4444
karama216.ddns.net

# Reference: https://www.virustotal.com/gui/file/7d381ae3d4554e799807b42fffa4e1207c28377d0a66fb77f14965619488f991/detection

85.86.181.192:1337
anunankis.dynu.net

# Reference: https://www.virustotal.com/gui/file/3c011c904270c96377ffe02a28d84c3b709d16da44c594a2bb5920f94f71e7e8/detection
# Reference: https://www.virustotal.com/gui/file/e97886f69fe3f06c67c5ac7e7686e2544192cd00eb53e3e73cb2f797aaace601/detection

120.78.194.220:7000
cxaqhq.xyz

# Reference: https://www.virustotal.com/gui/file/c7f8f2c7002a7c0dffb7a24dcde6918b05ae14d182158ed33ae00ceb5ad231df/detection

47.112.127.168:3210
47.112.127.168:8000
61.142.176.23:32749
84.39.185.173:3210
3t254q3120.wicp.vip

# Reference: https://www.virustotal.com/gui/file/faa5b4d29090d513d635c18032e622b670c97d8fb8d292bc9ab4ad50074745c7/detection

44.241.184.194:5888
91.228.122.30:1337
marinka777.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1352193225994481664
# Reference: https://www.virustotal.com/gui/file/31cc5441271acc3435d8e15f53256e4f9be6e868422d0d3b63e40b9ada360279/detection

52.33.135.89:5578
f16thander.duckdns.org

# Reference: https://twitter.com/malwrhunterteam/status/1352716574147436550
# Reference: https://twitter.com/malwrhunterteam/status/1356678502574133253
# Reference: https://www.virustotal.com/gui/file/875bba3050789344eba7698f251c37be2f27cc25050f8c13b98e0aeaac52dc5a/detection
# Reference: https://www.virustotal.com/gui/file/30d9bbc5d8765e7312cd2d3b6b2747acb598cb6cd47d8024bd547317a61fcf74/detection

51.178.229.162:4339
shutter.myq-see.com

# Reference: https://www.virustotal.com/gui/file/4e068020a628221cee702b56e610394a3b9023e483ef1145f3112489237eb687/detection

105.103.124.103:1985

# Reference: https://www.virustotal.com/gui/file/2ec275c14b38767124204fdd22de0afe9ea82302242bb7f1daabbe4ada373586/detection

3.22.53.161:15393
52.14.18.129:15393

# Reference: https://www.virustotal.com/gui/file/e86dd72ebe363080b69e11532f07e4d7c442f9ca41326936cb187d36ccc6763d/detection

52.14.18.129:15448

# Reference: https://www.virustotal.com/gui/file/638045e6d585c58c4677bd670a7c7be2f4b019526660323a84a13679566d927f/detection

52.14.18.129:10932

# Reference: https://www.virustotal.com/gui/file/b3976595585136db3a0371718cf83000569f1ed8be37a05b20f9592793574bfc/detection

3.131.123.134:17233
52.14.18.129:17233

# Reference: https://www.virustotal.com/gui/file/d6432d4f733951f174c7619334742df2d61ed2f04be928737dc4200b27882df6/detection

52.14.18.129:14843

# Reference: https://www.virustotal.com/gui/file/c7f1026abc05b5eed1afcb71ae16b5d4bf32934b2d8225cadbb75db2f92d635e/detection

52.14.18.129:16049

# Reference: https://www.virustotal.com/gui/file/0759a3a1089c4ee88ec79c1994a9646982c4446b58cfa97adb0a6c0a2465a2b2/detection

52.14.18.129:17536

# Reference: https://www.virustotal.com/gui/file/4b5f86a7b4b5b173ac9934c8b1cbdd17edf757b0a3ed5ba117816ca5edd30dfb/detection

52.14.18.129:45778

# Reference: https://www.virustotal.com/gui/file/a61c16bf6d1f014d1a8c3217de5016d1433c90c644f321c8e71385fe0965aa16/detection

52.14.18.129:16333

# Reference: https://www.virustotal.com/gui/file/0051246b714ad80ed0ba41b59e9dc1b67a5c790a52bd43fe1616bed5c36beba9/detection

52.14.18.129:17678

# Reference: https://twitter.com/malwrhunterteam/status/1356341294864457731
# Reference: https://www.virustotal.com/gui/file/6cb10f0799614560df57544043958064b6916e375736159c25d002aeda9d1901/detection

82.9.173.249:4444
encroapp.co.uk

# Reference: https://www.virustotal.com/gui/file/17aa8c580c201567a98a721e3b21d0ac45a15dd513e7c58638b7ca7862fd7b7a/detection

168.235.111.253:4339
majomodelagency.duckdns.org

# Reference: https://www.virustotal.com/gui/file/765c1d08934ae96adaa5dac95899f65e3475e44623006a2fbfa417efdfdbb9da/detection

85.25.159.253:3131

# Reference: https://www.virustotal.com/gui/file/ed1aa33fc154745f2700cde86f8b6e56edd33aa5f8632f77a3db53f234a3b75a/detection

41.107.26.72:4442
x2x2dz33.ddns.net

# Reference: https://www.virustotal.com/gui/file/a969606ab7ddc15cad6856cca21d8273e360b4ae98684230c27c7de2f8fb8442/detection

199.66.93.218:5425
malokmmc.ddns.net

# Reference: https://www.virustotal.com/gui/file/2b2d03a643250b7ed6c2deca3b96e19de0311d2fffb5510f3ff49ba84ae5e463/detection

209.99.40.220:7500
ttfu.system-ns.net

# Reference: https://www.virustotal.com/gui/file/7280decadf394bb54e2cd965a9b4094892f31342bc134ab9de91ee8dedb84d7e/detection

209.99.40.220:3210
try.system-ns.net

# Reference: https://www.virustotal.com/gui/file/393fb2124abfe31e276fa2559b3a734c880d51f6ebd88d72922040e590fca1cd/detection

91.109.178.3:6061

# Reference: https://www.virustotal.com/gui/file/68c531f03f803710c14a2aeb9fa8d1bfdb3743c2db98c2cef3b72f730b509316/detection

43.248.201.209:20712
scn66223.e2.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/f82e3fd31dcd4bca2169f746c854b70f3e40f55107f6e3b12ae30d0a39656cf3/detection

87.76.59.53:5555

# Reference: https://www.virustotal.com/gui/file/e25ff46b2f9c3f15b6fe8adbd41fabec76b1b419a703e35b3294601eb10d368f/detection

222.186.170.37:27125
mengmo2016.e2.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/c22b54adbccca59f439e144a848bba055ce705a947acbf7a30189f0e5535f3c5/detection

43.248.201.209:21864
bhl0826.e2.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/246ff00d10aec498d9106176f5123cadee421d44752c26121bafa85b5d1d9c4c/detection

43.248.201.133:25418
baixiuxiu.e1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/b09674fe1f615bd641a719d8f96d93931f2ae3cfe8b59ea4a0a9b0124256a24c/detection

43.248.201.133:23672
manbu3.e1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/d8d9560303d1d2b0c6ba337d86efd4e2d12d0716a41a7c60664084376b755847/detection

43.248.201.133:30149
a2628988.e1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/92dc586117f1ccd4321193e85b728d04294b8bb52a162faab84c6b1e5c53c514/detection

43.248.201.133:24671
yangzhen.e1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/f7ad5869f04ad03003fbcb0d82209edccaa9920f524d1c6828b9a34a650dac8a/detection

43.248.201.133:21202
qq2552992935.e1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/a61b923e153bf8cebfd8ea5801eac45ba8c5e159d628b5deb8d399d6e9ba14c9/detection
# Reference: https://www.virustotal.com/gui/file/4267e5e2c6400a68284893f67b28e827f226a00db579b9087144899005364dcb/detection

43.248.201.133:20664
43.248.201.133:27784
y1541083499y.e1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/246ff00d10aec498d9106176f5123cadee421d44752c26121bafa85b5d1d9c4c/detection

43.248.201.133:25418
baixiuxiu.e1.luyouxia.net

# Reference: https://twitter.com/malwrhunterteam/status/1363250839293480969
# Reference: https://www.virustotal.com/gui/file/013fef37e26b5c9615f3ce7a22d8ed6add750f033a82f09c99eb70c36970484c/detection

193.161.193.99:54531
hiiiejrntjr-54531.portmap.io

# Reference: https://www.virustotal.com/gui/file/013d0235731b978ad3788651057b37791f56b9824a4ac564dc41306dfd57b2bf/detection

222.186.170.0:40272
43.248.201.133:29035
43.248.201.133:2222
orange1233.e1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/ab69c71ce63e050797fc57cbaf7611d511983ee784e6330b50fea96a34d4d550/detection

222.186.170.0:54741
123sdx.u1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/04f71ca202b10ad7210a9b3276a006701d0aa4f51972c4edf4583b750c894a7f/detection

222.186.170.0:53044
huangzhiwei.u1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/e59b7da9362d6047427fa36a6e040624769a36fd75904af9d9b09acfefcf581e/detection

222.186.170.0:54007
shallsoul.u1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/51d28320e36a35a9b24d3f659031555049a6e4801893e030f0f293e569fae8a4/detection

222.186.170.0:55180
swwssw.u1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/9a7bda762369ab9ba938d1edabb83db2a481a2a4917196e18f7ef9a5aa2c32f7/detection

222.186.170.0:40470
m4hx.b1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/98bb37c5908e67968f915b388ab458cf4a8fba4c5d89f83ea883b7b4d631f927/detection

222.186.170.0:50033
chengke.u1.luyouxia.net

# Reference: https://www.virustotal.com/gui/file/384489996e461f490c33e36af486544d3ec704d4fbdf4a8cd98156f35c7d5c98/detection

185.81.157.11:5555
enigmas.hopto.org

# Reference: https://www.virustotal.com/gui/file/1291927aed6043010fd838b9788c02db88c7e4910090a791782d1d86c51f7afa/detection

89.94.254.116:1772
aazzeeoo.ddns.net

# Reference: https://www.stratosphereips.org/blog/2021/2/26/dissecting-a-rat-analysis-of-the-spymax

147.32.83.181:8000

# Reference: https://www.virustotal.com/gui/file/8feb8ab7e9d59883cf4865ec4c5efff4b56da728e49f722d3b87436765982b24/detection

156.219.203.122:5555
34.199.8.144:5555
testo.ddns.net

# Reference: https://www.virustotal.com/gui/file/7fa6d33ecccaa47737dc773c22be37315dc3ac68721cbbb4a9ad5bf59deed995/detection

34.199.8.144:1080
dexterwave1.ddns.net

# Reference: https://www.virustotal.com/gui/file/e59acd55fff757b1c989d32d208f5c655fa71aae40f50cf7189caefb4427ada7/detection

176.234.193.34:1121
176.234.199.112:1121
91.109.188.4:1121
mustafa2121212121.ddns.net

# Reference: https://www.virustotal.com/gui/file/b9c8b0e940d30c6fd0e5ead01ec3923c1a3ccde7d0bd034be06098a48e69a208/detection

201.150.158.86:5214
hoope.duckdns.org

# Reference: https://www.virustotal.com/gui/file/19c057c86155a1b9249420170ebcb6cb978eafe7c010ce151a745d7a7671af85/detection

91.109.180.2:1331
91.109.182.8:1331
theshadow.publicvm.com

# Reference: https://www.virustotal.com/gui/file/3f63c963503513847e0deddc0cd222183bc475567fd7b85e16101581d1652eb3/detection

197.38.213.141:5888
zzus.linkpc.net

# Reference: https://www.virustotal.com/gui/file/6be8c1e5c9e5263881e8fd75be3ac2c0d8b5e37956f60c64a46497e4ec9ee82f/detection

197.38.135.65:5888
197.38.201.26:5888
andr.casacam.net

# Reference: https://www.virustotal.com/gui/file/9e91d6622bc3a28554189f8d3ddf465c29ba894a42b317ebd302ec5811bf513b/detection

185.13.106.125:1990

# Reference: https://www.virustotal.com/gui/file/6113aa3b2a468d50e5ea9c8057fc9d42a298a6c66d0914391aa5446a1f4600d0/detection

91.109.182.4:5214
atameemy.ddns.net

# Reference: https://www.virustotal.com/gui/file/0ad36cf04aa253d71c7fc9f5c500894b15581801b612267304cfe5d8643fd7b4/detection

91.109.188.4:2222
zzaazz.ddns.net

# Reference: https://www.virustotal.com/gui/file/970f5de827f0364122876364655c823e1f16e6bcfbf2ea989aa0d1c21863c3fb/detection

91.109.176.4:1177
googlegroup.myftp.biz

# Reference: https://www.virustotal.com/gui/file/5062a7617cbaf594b9a510392bf8a94b8579c583c8308e5c53fa43833493678d/detection
# Reference: https://www.virustotal.com/gui/file/e88910e63c395fda0ffaa98d6cdc06e70cc89b56e2f84cd60003d7c0f1ac500d/detection
# Reference: https://www.virustotal.com/gui/file/503da291adead3a33ab63b7c30b8613673d2ecfb62163171e1812fc2cddbd3bd/detection

105.104.188.216:8806
91.109.182.3:5214
91.109.182.4:5556
91.109.186.2:5556
12345xxx12345.ddns.net
262626.ddns.net

# Reference: https://www.virustotal.com/gui/file/eee525344b99d8db1c7727d67c4144ac8d3878035416c2d38159d492a808a719/detection
# Reference: https://www.virustotal.com/gui/file/e088ed0cee11331771d44e2ddbbf320ce1735783d73a7647be769fc94ce076dd/detection
# Reference: https://www.virustotal.com/gui/file/94c4532d9817ba0d2753ab475f57cb92d4df2169220aa6c3599a177d34d2d454/detection
# Reference: https://www.virustotal.com/gui/file/108c8a109c96fbf93c41c581875035b88ed59e7158725049415db7176904c88d/detection
# Reference: https://www.virustotal.com/gui/file/afe714fbccc1ebd0480286f3537b1a9a0988e5d62c2b335381f56aadbdabed67/detection

105.154.207.253:4142
196.89.158.214:7771
41.141.245.186:5214
41.248.67.41:4000
41.248.67.41:4444
peteramix1.duckdns.org

# Reference: https://www.virustotal.com/gui/file/747c4545a23b80082ab37d0e040ee0f7bf8a374f95616db63dcb8e38c86a1b63/detection

hideapk.ddns.net

# Reference: https://www.virustotal.com/gui/file/cf880b7ea217f0cceb8473c279a95d0c026b980e027a695d1f6cec3ade0d1f13/detection

185.244.25.201:4000
adam9.ddns.net

# Reference: https://www.virustotal.com/gui/file/160353d08c48c138554772210c729a32fff3f8492cbb7076e5140fb80e5532c7/detection

102.47.47.89:4444
anonymousegyptsh8.ddns.net

# Reference: https://www.virustotal.com/gui/file/fc2646fcd3a1970a2e00007239291c2a50106c2c9f6b4611e209c6f4e36f792d/detection

31.180.195.71:1334
31.180.212.143:1334

# Reference: https://www.virustotal.com/gui/file/a5ece222f16baa72cbaef51fe8f27475b99ffea08269fc7aa7f4708df2ed2459/detection

141.255.154.193:2222
cobraacar1986.hopto.org

# Reference: https://www.virustotal.com/gui/file/132736294fbb51d15a246f6b6d45af22f6c2810de2ac4deb9326514828af593b/detection
# Reference: https://www.virustotal.com/gui/file/57b50f095f14b1f03a3e2697dc94c1bc10973b73b008749744070c99327d1fa1/detection

200.0.43.162:3210
45.235.205.148:3221
nemesis2018.ddns.net

# Reference: https://twitter.com/bl4ckh0l3z/status/1382081535608823810
# Reference: https://www.virustotal.com/gui/file/c567df0469bd0e2989b11ba4c0715cea0958c71504c4e8718c9afd041510d4e1/detection

45.77.9.151:4444

# Reference: https://twitter.com/malwrhunterteam/status/1384924059046137857
# Reference: https://www.virustotal.com/gui/file/7b422948561f2131b488828a7848b49d99c149b71534376595e069ee503ef88a/detection

82.137.236.130:1177
goodnet28.ddns.net

# Reference: https://www.virustotal.com/gui/file/5f20ff6a832886ee5320ce62109c8f7b8bca66ba9c2181a65b9bfccbbcbea11b/detection
# Reference: https://www.virustotal.com/gui/file/cc02cca9fa329cc9e0e93772b37ff5499c96bb1e03754152db5026296329d4a1/detection

141.255.157.111:4444
185.200.36.228:4444
alknsole3133.ddns.net

# Reference: https://www.virustotal.com/gui/file/02021fd92f2920c4251fb4e8a6f36ed99b8ecc9cb400570a6ce79083b4d635d9/detection
# Reference: https://www.virustotal.com/gui/file/1630b39ccd1abd67f5e97448a65d758324e8cb72bbb88bcb8e4092dc5959eef3/detection

199.249.230.42:36111
67.214.175.69:36111
note0000328947234sdvfsv23424dfsgvsdf234.publicvm.com

# Reference: https://www.virustotal.com/gui/domain/teme.casa/relations
# Reference: https://www.virustotal.com/gui/file/44ccafb69e61139d9107a87f58133c43b8586931faf620c38c1824057d66d614/detection
# Reference: https://www.virustotal.com/gui/file/310b619c2e2b637fa6a9e8f128e9858cc2b15518fca199871adbc4cf2364255f/detection
# Reference: https://www.virustotal.com/gui/file/bda7d4fb79b3b3df69e66890b280e698454a698d61d7442bfb435cbab799a6a4/detection
# Reference: https://www.virustotal.com/gui/file/27bbbab5fb141fde4d43e99db282382c7c42b34d6af908b9a881bfa1c23dd0a2/detection
# Reference: https://www.virustotal.com/gui/file/d5dfde157d1ee271caec58f427af66bf66b4c090e78b1be7e3bca317fe616143/detection
# Reference: https://www.virustotal.com/gui/file/9f86312843990900d3f22f7dd1fc57e1fe627a068a731a613247fb547b7e7920/detection
# Reference: https://www.virustotal.com/gui/file/45f8fa87f54756da1d03255bb4e0418b0aa9168e884a496d46db454d92ec3b6b/detection

141.255.145.146:5214
141.255.150.247:5214
141.255.154.16:5214
141.255.159.191:5214
213.6.10.227:5214
80.76.42.148:5533
lion20810397.ddns.net
spy.upbitc.co.kr
teme.casa

# Reference: https://www.virustotal.com/gui/file/cc09b33d95f457586debde42059d12e2aa96dc732ac1eb8d9e07c5953420dc9b/detection

41.199.25.35:2222
tarekmohamed2222.ddns.net

# Reference: https://www.virustotal.com/gui/file/c2abf2e0de7c311701f722be08af9bf49ee8a08d5f93fe82c260f297b442fdd0/detection

110.93.239.9:2762
2762.ddns.net

# Reference: https://www.virustotal.com/gui/file/097221664e04b33cd57d9ed88f5b02368a2fccc9d11b1998c777312fc35a477b/detection

105.106.23.197:1177
hohodando.ddns.net

# Reference: https://www.virustotal.com/gui/file/3edf623d8b4ef72e59627856bde246a1faa93d687204e4dd6ceaf7f98bdd2ff8/detection
# Reference: https://www.virustotal.com/gui/file/f4c7400486c21fb4eaa6bb1aab6c929f17909e97b6de089f94f6855520067ce3/detection
# Reference: https://www.virustotal.com/gui/file/4863b9ca79e1b2c6ad94ddf3d359f79c705bb07531bf334684990ddaaa4e0c94/detection

141.255.145.147:5552
141.255.147.136:5552
141.255.152.161:5552
ahmed000.ddns.net

# Reference: https://www.virustotal.com/gui/file/6fe62ec7f36f12f3172962bd3a65c8ed6ca74b3b8ee4b977491901e5543d9685/detection

41.36.49.170:7772
checkra1n.hopto.org

# Reference: https://www.virustotal.com/gui/file/4279a8002d7871959e71d80a32991e9780de7c479cbef6e4af7a389d678e47c2/detection

141.255.146.176:5214

# Reference: https://www.virustotal.com/gui/file/186e988ff05f586d720566b11a383127cfbc18a4a378f34501022fa6612ec708/detection
# Reference: https://www.virustotal.com/gui/file/be39c490f976ee814b0c4e1beb39108104ca939b3d003d9888b82e2d69f4e59d/detection
# Reference: https://www.virustotal.com/gui/file/98b8dd942cc4b9a697a9bc0822f981c5fdd4ede32ed61450e881729dc2706742/detection

45.247.135.52:5555
45.247.141.13:9999
bakkkfdg.servepics.com

# Reference: https://www.virustotal.com/gui/file/2a6df444cf74052cc5b1bbb6853e0f7f6bdb13fc269d640aa3682cb0a043221d/detection
# Reference: https://www.virustotal.com/gui/file/8bdb2f2327c4c832f1d51f80101cb33ed5bdc9c3aad22cfb50d4671af062ab07/detection

anasmr.ddns.net

# Reference: https://www.virustotal.com/gui/file/8eb95cbc168e3ed75a9c179509d18c9d00093568ef74bb702d1df1613455c1fc/detection

37.239.14.28:5214
alinono2021.hopto.org

# Reference: https://www.virustotal.com/gui/file/9ca3172b69dc54da7999d95aa5e140ad4563d89ef26e7f0b7eec74c58d6c3a5c/detection

41.100.249.22:2020
system3211.ddns.net

# Reference: https://www.virustotal.com/gui/file/ec4e6a66ddd797783d74ffa0757ab28b9c28994a027d4e7fb53416940e571d44/detection

141.255.144.58:5214
arshad991.ddns.net

# Reference: https://twitter.com/illegalFawn/status/1404816060445085696
# Reference: https://twitter.com/bl4ckh0l3z/status/1407260723244322816

certificato-ssl-isp.cam
identificazione-spid-europa.cam

# Reference: https://www.virustotal.com/gui/file/14d4d57cb16137a87a3f52f8f83738b78379daad22d30bad7de76e27b4c467c4/detection

197.54.221.171:1337
usamaelshazly.ddns.net

# Reference: https://twitter.com/pmmkowalczyk/status/1409813009023766528
# Reference: https://www.virustotal.com/gui/file/acb02089d29a38ce9a40b19d43895e66356eef5d85e2835ab09ebbe66bba640b/detection

91.109.184.2:5214

# Reference: https://www.virustotal.com/gui/file/846a5e00f2e22f1628ccb8921a1622f5a3390f660995864e10545bbdf65aca17/detection
# Reference: https://www.virustotal.com/gui/file/7a8ed37d7569e95c18a72ffbd6c2ce0ee4aa5414c7db85fd90cb05cd0d8a8c89/detection

194.29.101.219:2882
pchat.duckdns.org
portmone.duckdns.org

# Reference: https://www.virustotal.com/gui/file/da3a80317ddca9ea9062e62f47b9f95a5429d52051e6a1a96adc3c62721b6464/detection

212.114.52.129:4444

# Reference: https://www.virustotal.com/gui/file/ed50f40fdd285803f86771f89f80c368e53b0b63e7d60d8ff47a451796d458db/detection

212.114.52.129:5214

# Reference: https://www.virustotal.com/gui/file/e66e0fc3249f802826880e70aaa87d1c7b020ac32c3916c4dced12c2a647abee/detection

194.29.101.219:1617
import.systems

# Reference: https://www.virustotal.com/gui/file/7fbdda83fd1e9955b3c3f7c5bb4011e82b025ca7205a536cc4c2854e81f63e2b/detection

35.185.177.54:4125

# Reference: https://www.virustotal.com/gui/file/ce5cb5daa3d55b93d6912c30140d0a2539ff8540e4c575114bab4fc295ef8ae3/detection
# Reference: https://www.virustotal.com/gui/file/96cacf8f16f8f152040ec67628398db4ad64e2f9e8489a8c01bd2245cddcea0c/detection

137.101.113.149:9091
46.8.220.81:5533
5.224.97.199:9091
87.125.7.132:9091
nolose12345.hopto.org

# Reference: https://www.virustotal.com/gui/file/8439ddcc9e49ecea568695c85db4ac07aa4bbdeb7c098ff707a07fc19f0e6272/detection

188.86.111.141:9091
nolose1234.hopto.org

# Reference: https://www.virustotal.com/gui/file/c326eff05daf7c73cb3ffb1a6bb08ad346ea97584904d245996f686815d15c32/detection

185.127.25.40:7744

# Reference: https://www.virustotal.com/gui/file/c13879deb6f9d8ccb81f9df63dc1458248e643ec691b4d8bf7f4608f05d7ce51/detection

shabaroj11.ddns.net

# Reference: https://www.virustotal.com/gui/file/cf5f708134eb3b3374c3ad1806f840a9ddc130bfd96e92d9c61bbdfcc3d6b237/detection

23.237.25.231:1604

# Reference: https://www.virustotal.com/gui/file/f952fdfa9d8b77caa227e3fc1862c0640ae3bbe2b3793a7fbfe970ea54046888/detection
# Reference: https://www.virustotal.com/gui/file/a6d3a65d35b68c0053ee196b1d8ca635711d28f5d17e71d10701c7d3ea9b3d38/detection

188.218.6.79:5214
revnetphone.ddns.net

# Reference: https://www.virustotal.com/gui/file/fefab3eed6c3203b28c1e54317d724f422f6ac6e08e1dfb49a4a985661ba1a91/detection

47.52.141.116:8756
80.76.42.148:5533
hack.xiaot.top

# Reference: https://www.virustotal.com/gui/file/7c1ede7edd8b74b87a7915b8e33da1011ca37c67f3faa6bfe9fe7d9127b50b85/detection

xiaot.top

# Reference: https://www.virustotal.com/gui/file/73371591c38a87b7bc6a1f7fd6075525217c59f81fc35434c68ae59fdb8c6f44/detection

unk9own420.duckdns.org

# Reference: https://www.virustotal.com/gui/file/bff1f4d8144e8154839024940cf14483511129b71004a9bbebb0b5ffea455182/detection

futuerhacker.ddns.net

# Reference: https://www.virustotal.com/gui/file/f245a27bf9e0f8e70b5e166cda43fcc514514318c196a7792447974782836abf/detection

172.245.162.145:1085

# Reference: https://www.virustotal.com/gui/file/64f4c612542807016c702dbc6a09fae4e3f610811460e4627da49decce1c329f/detection

94.103.83.182:5050
94.103.83.182:7744

# Reference: https://www.virustotal.com/gui/file/fe847b64b112ab46fef90fb01e47583c7f83a41de9bf9a571ba2a445cae066fe/detection

159.89.214.31:9815
94.103.91.138:5533

# Reference: https://www.virustotal.com/gui/file/bda7d4fb79b3b3df69e66890b280e698454a698d61d7442bfb435cbab799a6a4/detection

spy.upbitc.co.kr

# Reference: https://www.virustotal.com/gui/file/d99757662fdd1450c2b1a759df17f164d47f4c4c7eaab7e42ff466ab836a3429/detection

bithvmb.hopto.org

# Reference: https://www.virustotal.com/gui/file/5114846c45f2a845e1dd413d73048966ae308ffc153ab56af0f8ddf50f02eb9e/detection

fedeca.duckdns.org

# Reference: https://www.virustotal.com/gui/file/6c58d884d3b3fab1124c4d9b6f5d0c62608a19297a08d060c49f05cb656bc534/detection

94.103.83.182:5533

# Reference: https://www.virustotal.com/gui/file/8ed45196b52b75ccfdf59a2d045a263170eee33ad8489a8d226a9e3468759f08/detection

frotan0014.hopto.org

# Reference: https://www.virustotal.com/gui/file/5ce902d4a4e8a17138444f466c6dd7600a6077cf30d679e05ae347e3e877c371/detection

198.72.111.139:1177

# Reference: https://www.virustotal.com/gui/file/de49802617353140795eaa80e98ba246b5acbcf5c341dbe65466bd1ac99d4d66/detection

lucasnord.hopto.org

# Reference: https://www.virustotal.com/gui/file/a6020081a3116cc187241fcb7ecdbba1630a5fed66ca69b454099940b7c36e56/detection

45.139.186.249:5214
45.139.186.249:7744

# Reference: https://www.virustotal.com/gui/file/75e7268c062c166119c423191de9a146400756135f1d7e5c7427d4f3b17e0b78/detection

91.109.176.3:5214
alexshdu.ddns.net

# Reference: https://www.virustotal.com/gui/file/9498cda7546fc8f7cbc0fbba814e52a9a833c51120844ed9be11301c0461e9c0/detection

20.195.186.249:7777
imagem.laplatabrasil.com

# Reference: https://www.virustotal.com/gui/file/e880e71645211f96a0ffab0cdb1529823ccf8b47d84a8834f24ae45d358c7873/detection

185.238.126.176:9091
185.238.126.184:9091

# Reference: https://www.virustotal.com/gui/file/aaf8eaf73704ad42729eb42b69d8049b70c2ff8761a681377f65772c1d24edd1/detection

46.246.12.15:2798
46.246.12.24:2798
94.131.98.167:5533
mrzues.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ad5de6e1a7f393ef127a65e7b5f52da1d8708a03f5f6fbb1e7076eb8ff223a82/detection

66.42.43.177:3210

# Reference: https://twitter.com/FewAtoms/status/1417886430467170305
# Reference: https://twitter.com/ReBensk/status/1417718897793404928
# Reference: https://www.virustotal.com/gui/file/d6cf06cd34f50317131591268d23ef266c01bf3f758893568f10204825cc3369/detection

androidmedallo.duckdns.org

# Reference: https://twitter.com/malwrhunterteam/status/1417579802291314690
# Reference: https://www.virustotal.com/gui/file/cf209e403e5041386a7f66a051f77fad33ac045c701c977f80cde1ba6b2d99c6/detection

194.5.98.239:6318
services-nsw.com

# Reference: https://www.virustotal.com/gui/file/118e0c77e2c7c70bc362e63c6901c6b46ec0fea2c292738d8cad14370ddb60e5/detection

needforat.hopto.org

# Reference: https://www.virustotal.com/gui/file/f0f788a319c3442631662f420db4ef991cea9d47a0a599e0a0f166b2727d476f/detection

102.187.117.127:666

# Reference: https://www.virustotal.com/gui/file/f2746683b0b13f75242878b60ce93ccbee82d9f7ce8d299283a2527e709c6504/detection

156.207.30.2:2020
w404.ddns.net
we404.ddns.net

# Reference: https://www.virustotal.com/gui/file/ee5b7dab2148b921890468d7f09bc2f4c48be3fd5d9bb2a6f05e5367a2eed3ed/detection

37.221.115.62:4457

# Reference: https://www.virustotal.com/gui/file/3a3d77de19aa0280cbb3a082b6d24bb548dd400aa97759d4754eaf7f1ded81ff/detection

37.221.115.62:4545

# Reference: https://www.virustotal.com/gui/file/cb657f124dfd8960485b689f4fe9de94d68407b8b7f3324597b674cace35fe5a/detection

37.221.115.62:7744

# Reference: https://www.virustotal.com/gui/file/2f4868b2690b06c27a52c7242612176642fb41493c8492c37755d8f8cec5db90/detection

91.109.176.3:7771

# Reference: https://www.virustotal.com/gui/file/db83a432f7c78e67e30b7fb2ce2960d0056c8389ff8dc82f396ab897585db37f/detection

91.109.190.2:1994
khalil31.ddns.net

# Reference: https://www.virustotal.com/gui/file/9db2fab6f9481fd32d42056a7afda444f826a24165a614f4021999f34803ddef/detection

91.109.182.4:1177

# Reference: https://www.virustotal.com/gui/file/148f243a4efc2d4cbedd51e5bbc9f6d654e2f2fbd18caa387f42ce10b1e500d0/detection

91.109.176.3:1988
aliialiii1988.zapto.org

# Reference: https://www.virustotal.com/gui/file/8e8a9385a5d424830647c628bc7855e748500481a2d93d479644cfceea94c5d8/detection

91.109.176.3:4444

# Reference: https://www.virustotal.com/gui/file/e7bcde984fa2691aa75ef1ef5be382bfd805ed6ba3ef054bcd393039d97f54a3/detection
# Reference: https://www.virustotal.com/gui/file/4a05f175c586d55226725bf6ee70c5ea1410f3538dc74136286e597f5bd63949/detection

91.109.188.9:4444
shahed1211.ddns.net

# Reference: https://www.virustotal.com/gui/file/7fceeb4d1fa1865e1e260763170796068b32e1a45c07e485415e25270c361a25/detection

91.109.186.4:5552

# Reference: https://www.virustotal.com/gui/file/65ca0bf34fcfc9fa86dc17a18960f01e072284eaf3aa4edf0a82cc9545a32ae5/detection

91.109.184.3:3210
91.109.190.5:3210
46.213.204.48:3210
geoib.myftp.org

# Reference: https://www.virustotal.com/gui/file/206a0b638aac509a97db9739ce748ef03b1ca018d7af1a391fd5e5f885c5b094/detection

91.109.186.7:5214
samyuo2.publicvm.com

# Reference: https://www.virustotal.com/gui/file/3285bd0dbc2d4c6269040fba91a76e0fcd5fb774be339ee8396c3107316a62ed/detection

3.141.142.211:15993

# Reference: https://twitter.com/ReBensk/status/1465940949649944579
# Reference: https://www.virustotal.com/gui/file/8cce54b541f8b47f56d3e799a7281b7c285904fe4dcee8ca9212722cc59ee3ac/detection

stackapk.com

# Reference: https://twitter.com/malwrhunterteam/status/1467940308927266823
# Reference: https://twitter.com/midnight_comms/status/1467961901489528836
# Reference: https://www.virustotal.com/gui/file/12bec1cf1e825eee6cb44de7b48b66f9f4481230ab53d32b08eb2d5af3245fee/detection

pof.one
ssop.one

# Reference: https://www.virustotal.com/gui/file/e1b0237a11241f21171bb1d06506aea53e07d02da21f6a76d3b8423d0f43d974/detection

45.247.100.199:3333

# Reference: https://www.virustotal.com/gui/file/d146b3cb76147faea034e943d9ce68ba655e16f3252c8219747fdbadcef5ced6/detection

37.239.13.12:5555

# Reference: https://www.virustotal.com/gui/file/3ca453289111b655744c203f40368705481efa10ae10ac7aff8ee55450733004/detection

193.161.193.99:37422
orineorine7-37422.portmap.io

# Reference: https://www.virustotal.com/gui/file/5ce2bf5e34fe0fcdea5d026363fdc828bfd847455381d707de210206bed58a1f/detection

213.244.123.150:1302
kh.njrat.info

# Reference: https://www.virustotal.com/gui/file/d949c115700bede0119ce35a5fdaa74860dc4cf01fd35f046b64e888dabf924d/detection

213.244.123.150:4444
take123.hopto.org

# Reference: https://www.virustotal.com/gui/file/f8991a2d5d523aeaf5f193dc4c89bc0cfa9622b7375b6d8b32e5d2f0e4c1d581/detection
# Reference: https://www.virustotal.com/gui/file/cd1b1ed66e254b7fa02201719e0cb470c8fbc560632121ba4c06f03ede0d9c61/detection

213.244.123.150:2222
82.163.110.91:2222
hacked-2018.ddns.net
hacker-anaaa.ddns.net

# Reference: https://www.virustotal.com/gui/file/1440e1be9901b49145211e3dd978dca7c77fb4261b81340556169d914621a84e/detection

http://198.54.116.33
46.18.23.234:1196
firas2019.ddns.net

# Reference: https://www.virustotal.com/gui/file/74c9dd80f002a8043094525983b96345ed37e301ede81fa98438f980740fdd23/detection
# Reference: https://www.virustotal.com/gui/file/03da8c03fd291b79f52982e42b3c9b04ef29db6b63c0ec8ea91b329106445a86/detection
# Reference: https://www.virustotal.com/gui/file/264acf88117f2cb31c64f61679e1f3d7ee625ab6f6b70c9decb035cced488a30/detection

213.244.123.150:1337
213.6.103.122:1337
mobihok.ddns.net
netbot.no-ip.info

# Reference: https://www.virustotal.com/gui/file/93a9819dc990c3cf127ff2d3eede65da3336b37f67a77264023cc06f0f84063f/detection
# Reference: https://www.virustotal.com/gui/file/b27146c8740dd548286cd9b30809e0374cdeec42979963346336442e07b6d227/detection
# Reference: https://www.virustotal.com/gui/file/705b2c35bdff3946f8fb1ee728943a47cf2547c921bd0a56d4f62a9a4ec3cc4a/detection
# Reference: https://www.virustotal.com/gui/file/d0798cd7078a56209c5678323f6f37b6ad2e8ed238cdd014d398d6925fc2af5a/detection
# Reference: https://www.virustotal.com/gui/file/e858f470dfc188587fb23717950906694d623430b432288adb3e7b0001e96bf8/detection

141.255.151.2:1196
213.244.123.150:1196
213.6.103.122:1196
5.43.196.185:1196
82.163.111.175:1196
82.163.231.17:1196
agent47.dvrcam.info
firas2020.ddns.net
states.mysecuritycamera.com

# Reference: https://www.virustotal.com/gui/file/0efb4c8d958b80ad6d96a3629b8de6dd47feecf70a492d9247760c88f9ab705d/detection
# Reference: https://www.virustotal.com/gui/file/991967f410b2300ac364aa54b25e78c22d8c97cd166ff9bda07152a390d4f8b5/detection

213.244.123.150:1188
ffaabb.ddns.net
is54sa.ddns.net

# Reference: https://www.virustotal.com/gui/file/41eacbed7d469e1df722a1a3b2aad15a178284a3e7a7dde173612b2daeba4332/detection

213.244.123.150:1338
213.6.103.122:1338
spynote6.ddns.net

# Reference: https://www.virustotal.com/gui/file/62ee13c80860b4cfbf9fe356cf49f457e0881decb51ec4e5e2b99f31a28c12ff/detection
# Reference: https://www.virustotal.com/gui/file/d14ce18cb5bd17c1dd2e07c440a5390b96af2df9cd45ed29e38e5861ccac6dd3/detection
# Reference: https://www.virustotal.com/gui/file/73b5c06544e4b3b5ebdac80ae41fd5be6fa26f548d731e97136452f12a6d5d93/detection

213.244.123.150:1150
31.186.182.55:1150
aldaet.ddns.net
cy.alhaneny.com

# Reference: https://www.virustotal.com/gui/file/6e8ff4896de89695a4e88551d33020d8723cd34d04961ef0d61326989ddb1551/detection

213.244.123.150:1177
alaahamayil96.ddns.net

# Reference: https://www.virustotal.com/gui/file/bcb249f40bbac14786fa9e7baf38aa72696e5a1277f6fcccc6381069543ac2d6/detection

aldaet.myq-see.com

# Reference: https://www.virustotal.com/gui/file/fd35b4848c4fe803709672e555479c13e45eb9963c91973d8282ab894e32ffde/detection

213.244.123.150:1197
firas20199.ddns.net

# Reference: https://www.virustotal.com/gui/file/0b0c597cdda4f468cfc8afc8a70578cb1cb4104037b0960baa9f22d4a5aeded3/detection

141.255.151.2:1199
213.244.123.150:1199
213.6.103.122:1199
5.43.196.185:1199
82.163.111.175:1199
82.163.231.17:1199
aqw4.no-ip.info
quds20212020pal.ddns.net

# Reference: https://www.virustotal.com/gui/file/15c7b21a24478b63987a23f376d4d0ea98e36bc293d3993b340ebdd56cb78ff3/detection

141.255.151.2:1192
213.244.123.150:1192
213.6.103.122:1192
5.43.196.185:1192
82.163.111.175:1192
82.163.231.17:1192
agent47.dvrcam.info

# Reference: https://www.virustotal.com/gui/file/755f827ec84f1a0ee5b3542625c463098dfa10e750454a27311233ffe674b4a4/detection

141.255.151.2:1145
213.244.123.150:1145
213.6.103.122:1145
5.43.196.185:1145
82.163.111.175:1145
82.163.231.17:1145
abood123.ddns.net

# Reference: https://www.virustotal.com/gui/file/6e162c2878dd978aa190ce718c7161eeffc7113c9771a241c982cffc20caa994/detection

141.255.151.2:1123
213.244.123.150:1123
213.6.103.122:1123
5.43.196.185:1123
82.163.111.175:1123
82.163.231.17:1123
hadra5.ddns.net

# Reference: https://www.virustotal.com/gui/file/499834feed196e6704034ad224bddd418e78653f0b565cf496c7d00fc03a9cbc/detection
# Reference: https://www.virustotal.com/gui/file/b32aa32365f3eb1a328ca15a8018cda9645b58e99c31c21570582d54b6b2191e/detection

141.255.151.2:1142
213.244.123.150:1142
213.6.103.122:1142
5.43.196.185:1142
82.163.111.175:1142
82.163.231.17:1142
4536.ddns.net
maftrk362.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1476267248981532674
# Reference: https://twitter.com/bl4ckh0l3z/status/1476296123161657347
# Reference: https://www.virustotal.com/gui/file/f2f9a84273bbd5ca1663d90260ce672badf5e0ae8d592bcbae37a8d17b9bcbc3/detection

216.250.97.121:2882
anyax.duckdns.org

# Reference: https://www.virustotal.com/gui/file/9f9bd59d324c3e93190509d0bd65daa979986555ccc04650c2e32d28d47cb656/detection
# Reference: https://www.virustotal.com/gui/file/8befe2b46d467be031764ab2f0791c24fab1b4cde714cf4006f622aae0ddea25/detection

http://216.58.214.4
216.250.97.121:2001

# Reference: https://www.virustotal.com/gui/file/653c7f0092f98728fb6c2ece503ada141b8b54e905bc09920e07ba7b267a7820/detection
# Reference: https://www.virustotal.com/gui/file/4ce9d6b567d7612aeaf3d04a46d438a08028cfea8969f6ef5c2cecf998153e7a/detection

79.69.56.209:6622
79.66.73.81:6622
92.22.220.243:6622
nipodipo.duckdns.org

# Reference: https://www.virustotal.com/gui/file/f61bfd89c93d7ed7d146b79559ff62bdfb2f23238fa7c0ed79578a2870c12064/detection

141.255.159.138:5214
pskdhall.hopto.org

# Reference: https://bulldogjob.pl/articles/1200-an-in-depth-analysis-of-spynote-remote-access-trojan
# Reference: https://www.virustotal.com/gui/file/d96f9eafdc3c44611004ac151ae51cdff7a7fa41555389fd36479de442b400a0/detection
# Reference: https://www.virustotal.com/gui/file/ad8fb56daf02c5885d5a4c46b07bf9c68ce6d7e838b41aee62736465567c173e/detection
# Reference: https://www.virustotal.com/gui/file/ad0531ce4f0556f806e8cabc7be15f618e8fae94472da3413c5968ea78195e09/detection
# Reference: https://www.virustotal.com/gui/file/0f0f86e025dd5ad4426d7324e589a0fa6bcb5eace56c17f7c54c0cfdecff276a/detection
# Reference: https://www.virustotal.com/gui/file/584c7cef403cec10c4d1dd5da028463dec07dbd52786a7077498145d69b60a4a/detection
# Reference: https://www.virustotal.com/gui/file/e1d053588e752b0ca26a49ca2521e0fa99b9b8b1cd6e558888b7c57ae390ee6a/detection

82.137.218.185:1920
82.137.218.185:1940
82.137.218.185:215
82.137.218.185:2610
82.137.218.185:3128
82.137.218.185:666

# Reference: https://twitter.com/malwrhunterteam/status/1483183239829377027

deepchat.org

# Reference: https://twitter.com/malwrhunterteam/status/1485693190695002113
# Reference: https://www.virustotal.com/gui/file/aca091bbd49d2072c0d35b8875309e002163603f912bd48cbe21f3daf76d51d8/detection

213.6.103.122:1192
trojan3.securitytactics.com

# Reference: https://www.virustotal.com/gui/file/1a5c725f3fc3e5546edce94b7edcae71faa3c2b9b9041674b1199bcf2fe31992/detection

86.206.234.57:2020
malrat.ddns.net

# Reference: https://www.virustotal.com/gui/file/d6f83c4d63f7048170373be51ab58f0ca404d3900990ddcda1fc450c8fbfb75d/detection

41.200.62.169:5214
naarr.hopto.org

# Reference: https://www.virustotal.com/gui/file/41e924e4803d820d82240c0c6627de4ccc75e5f7df333db1e033feab2ab73411/detection

141.255.156.217:2222
sflamarz.ddns.net

# Reference: https://www.virustotal.com/gui/file/29d47e26e981436249bb6229423a9a9f34221941c2f29111bda885c1ee92eca1/detection

193.161.193.99:46309
tuihacker-46309.portmap.host

# Reference: https://www.virustotal.com/gui/file/99bdc8fb76a4ce6bdf22390874b890ef19e13a3c92466adfb2061fe987e36c69/detection

41.232.60.81:2222
srtanhacker.ddns.net

# Reference: https://twitter.com/malwrhunterteam/status/1501521045957881862
# Reference: https://www.virustotal.com/gui/file/dedf5649874c8a732b661ef15544cd83e372d5d9ef65eaba1ae32ac2dce4448c/detection

193.176.87.152:1177

# Reference: https://www.virustotal.com/gui/file/06f5a4b7be9bbb6189c293225df298f60840aeb9756b681903fdc6881fd9fc45/detection

45.91.92.112:3090
faisbok.ddns.net

# Reference: https://twitter.com/fr0s7_/status/1502227050500874240
# Reference: https://www.virustotal.com/gui/file/f8970efd067754d302ebc7647426d20b45d7d3e5b5aea40132c7e3e88c7ca8b7/detection

176.108.108.71:8701

# Reference: https://www.virustotal.com/gui/file/bae0a4f8eaab8b6d3cb3bfeac4420484fb3d1237d92529cfa7834e249df6cd69/detection

servol.ddns.net

# Reference: https://www.virustotal.com/gui/file/99a9bef6877d43c3a5d76b36a54eb556cece33518082415d6a0a78f438074ad4/detection
# Reference: https://www.virustotal.com/gui/file/97beed5fcd9939e0e47fa02cd59c263b6e56dd41570146db4727ec435a96acef/detection

141.255.145.168:8181
141.255.152.174:8181
mobileandroid.bounceme.net

# Reference: https://www.virustotal.com/gui/file/31df8be9ce0257f16a3ad4ddd3ff8b3caad5fcd0f5a99d441411e01ceeeb4a75/detection
# Reference: https://www.virustotal.com/gui/file/237d1afcb80ad14d2efa04aabf94354760c68fa3767c8b3113ac51032baaa830/detection

173.225.115.138:9177

# Reference: https://www.virustotal.com/gui/file/08706065249c55ff2aa358dcc607834b2574d0dd69b66a853606e3d20e0fe72b/detection

119.152.245.224:4444
lion994321.ddns.net

# Reference: https://www.virustotal.com/gui/file/4082d51c123eba4706bb2413e75417e2a5fd642626b1ae5be53b2a74e42d8332/detection
# Reference: https://www.virustotal.com/gui/file/d40b8ea69b76b57636b89eca78ae77cc971cf18097b8550d0ecbac0bb9ee2b0c/detection
# Reference: https://www.virustotal.com/gui/file/bc78dd2e8c33a66477fa8da3173e8175340292a963d713495d1522a0ab935905/detection

178.73.192.10:7771
46.246.12.17:7771
46.246.82.11:7771
ghtytrfgfj.ddns.net

# Reference: https://www.virustotal.com/gui/file/08422ae2a486b618c5d0a05ac44d43fa2a193e0afc3dbc3d26e3fab162cc3cb0/detection

92.99.132.144:7771
zayan.ddns.net

# Reference: https://www.virustotal.com/gui/file/2b1192bf551cdfb91da8fb789076333b569474453faeee469cd1ffb1e56ccdd6/detection

91.109.178.5:2009
ali20202021.ddns.net

# Reference: https://www.virustotal.com/gui/file/10e7cc34dc938a0f554eb689cf3467550d4fc941d071289ab48b4423037aace3/detection

3.140.223.7:17777
3.141.177.1:17777
3.141.210.37:17777

# Reference: https://www.virustotal.com/gui/file/168b209dc5dd4dc3e4b4226a040493ea363f8bc0f17e427edde872a3ac3997aa/detection

3.132.159.158:13891
3.140.223.7:13891
3.141.142.211:13891

# Reference: https://www.virustotal.com/gui/file/1b51b427067e5492fada2fbd783564bb32fe1075f1fb51397001f7235a6e8788/detection

3.140.223.7:11469
3.141.142.211:11469

# Reference: https://www.virustotal.com/gui/file/1b5c54d81a3f8626b13c44dffbbdc79aa589fa5ea58f43348bdd2728d7101674/detection

3.141.142.211:12443

# Reference: https://www.virustotal.com/gui/file/1ef906299c3ed85cf29312f055dc79f51da2b40cdf7d71d97a1f493d14604881/detection

3.141.142.211:12316

# Reference: https://www.virustotal.com/gui/file/1f0cd5c2267d20a222e77218deb9bcce33fdf9c48f0ef392557813f1bf64d6bb/detection

3.141.210.37:14130

# Reference: https://www.virustotal.com/gui/file/2544459825a6f12083e6b4868526917514953db5b22ac45a32c44be9a878f4f2/detection

3.140.223.7:14270

# Reference: https://www.virustotal.com/gui/file/26c83aa6473bbae8c5a487b44328b94496f4804ff080b01aeb1313ce8b7bcc96/detection

3.141.177.1:16986

# Reference: https://www.virustotal.com/gui/file/2c8dcf743765ee2fbe077a7b1cc520d6d7c3ca1160e330d6e48ddbe0bf9bb984/detection

18.189.106.45:18020
3.141.142.211:18020

# Reference: https://www.virustotal.com/gui/file/3285bd0dbc2d4c6269040fba91a76e0fcd5fb774be339ee8396c3107316a62ed/detection

3.141.210.37:15993
3.140.223.7:15993

# Reference: https://www.virustotal.com/gui/file/33342bc0f97c9acd45da9409807220dc0b8fe065ee19e2e15a632be01bb27e3c/detection

3.141.142.211:13593

# Reference: https://www.virustotal.com/gui/file/344ea1bba25da132d1a06585bdf607ba1546360f37b686f520678ee824ae5a6c/detection

3.141.142.211:12728

# Reference: https://www.virustotal.com/gui/file/39adae7bd893c400281ef44afb230510ac2f9a1f56feebf735f0b70538c5635e/detection

3.141.142.211:15451

# Reference: https://www.virustotal.com/gui/file/4152847676afaf6743598b80d6da487a72194ddb42e70651300c91f3bbcea304/detection

13.58.157.220:18448
3.141.142.211:10557
3.141.210.37:10557
3.142.167.54:18448
3.19.130.43:18448

# Reference: https://www.virustotal.com/gui/file/485b3ae1a413bc03258e93263d068214bce665df9312912d22f8e3d1ede28b92/detection

3.141.142.211:13541

# Reference: https://www.virustotal.com/gui/file/540194fd4b9fb3e7014dcb04916f3f5ca5059aaa7f45939d1a478a7744f5c9b3/detection

3.141.142.211:11549

# Reference: https://www.virustotal.com/gui/file/578680f70e905c5a085f9d64a6598796a7931f2de2383417972815e5c469edb9/detection

3.141.142.211:14001

# Reference: https://www.virustotal.com/gui/file/5ef2d902c259bec41c5f966ddaf14df69c259fbc98ba73f41f49f25c883f0527/detection

3.141.142.211:14317

# Reference: https://www.virustotal.com/gui/file/63cad72325504748926becfcda73004dbd8c5f8a5ebed544a7f9aea6f6925db4/detection

3.140.223.7:16787

# Reference: https://www.virustotal.com/gui/file/651074ed4cdb30b5a4a1dea9725c366a6f1906f09dc0570a979e3dd30beb8dff/detection

3.141.142.211:17799

# Reference: https://www.virustotal.com/gui/file/6f70af7220f4431dfc9d931613c367538d30311d9a2e10cd63c10f26306a35a4/detection

3.141.142.211:15626

# Reference: https://www.virustotal.com/gui/file/d92fec0211df7d5ba1d103593c595a6763da068ea3ae5908001d2f3a2e712432/detection

41.227.84.3:7772
softhelper.linkpc.net

# Reference: https://www.virustotal.com/gui/file/4bd22b22b2d13fd3cffeeef2e09ab415f2a1bdd4c1b75adc46b4a781383051b4/detection

212.237.123.135:5888
riwiy1.linkpc.net

# Reference: https://twitter.com/malwrhunterteam/status/1512133721440370693
# Reference: https://www.virustotal.com/gui/file/c3ee6bc6f4e23981757b452c7b0236048a48b9c875f4d5e25266f8262fe208c5/detection

13.58.157.220:10030
3.19.130.43:10030

# Reference: https://www.virustotal.com/gui/file/2332d4b14dce4b7a10ef2877d30e0228c68499b6ee41079f691c77fe8ea242dd/detection

185.140.53.131:8080
46.185.230.229:8080

# Reference: https://www.virustotal.com/gui/file/2390ff5b18284529b4af90d2ac0ddb27fdd53f4bac67aa0af2933e920de499d4/detection

185.140.53.131:2080

# Reference: https://www.virustotal.com/gui/file/5395e14d62922952b0ce1c61402d896ffc847857303b1cce484c21950eced52b/detection

92.253.118.77:1177

# Reference: https://www.virustotal.com/gui/file/c77bf16229d283db4b4f20a1e369ea63b5c6e53dc423c09906fcc77e3a1e2102/detection

185.140.53.131:1177

# Reference: https://www.virustotal.com/gui/file/23321400ae9a3720f37f26ee9af29f4c7f62279a990ceabd1e126944e83ba24a/detection

rew222333.ddns.net

# Reference: https://www.virustotal.com/gui/file/b864c4ff90e7dc91cf736b6cd1ac0e759474425caf65a76f44a85eb5d9ba6bf8/detection

141.255.158.166:4444
acessproject.ddns.net

# Reference: https://www.virustotal.com/gui/file/b52cadc3f51bfecbb6948b59c425652785314372408865c046765c0289bf69ac/detection

185.82.202.148:6710
mxydhhhh.casacam.net

# Reference: https://twitter.com/malwrhunterteam/status/1530293006040981507
# Reference: https://twitter.com/midnight_comms/status/1530546905993711621
# Reference: https://urlscan.io/result/e95bbd3c-27ce-4609-ba7c-2b70c65816f7/
# Reference: https://www.virustotal.com/gui/file/89eab357e0d42e65d98db25479f809e09f8eadc0d59e3df557789e160e3b9791/detection

138.197.66.62:22209
185.200.116.211:43819
bagmaess.cf
cypherahmyth.duckdns.org
yelaka.servemp3.com

# Reference: https://twitter.com/malwrhunterteam/status/1535358168712224770
# Reference: https://www.virustotal.com/gui/file/be0ea1218b0ec13db010a16dd0f320938e6fadc8120b90a9c49933cc37067f37/detection

213.6.103.122:1169
trojan.securitytactics.com

# Reference: https://www.virustotal.com/gui/file/67158cd9e98ae45c7e3f8ff24ba33461fb03327178acfc6d09d133a751969422/detection
# Reference: https://www.virustotal.com/gui/file/1a40f31d1859b0035c46fed78758f8c508f801a0e86c9cc9d3b220005e861f63/detection

91.109.188.5:7771
91.109.186.7:7777
securityservice.myftp.org

# Reference: https://www.virustotal.com/gui/file/b3aa5d7267dfcac12c6c977138200dd85cc436556be489acc2823107002575a7/detection

88.231.62.111:7878
androidservis.duckdns.org

# Reference: https://www.virustotal.com/gui/file/a69e26eeaa3af7a69e8627d780e0fa9f91c4fdc470d2c8372fe2017b5c777dc0/detection

186.30.101.40:8000

# Reference: https://twitter.com/malwrhunterteam/status/1539534771524616192
# Reference: https://www.virustotal.com/gui/file/88671e7760f5e6925f22a4a373ddc2bf58545e81cac6b969001c68c95ef2664a/detection

91.109.182.7:2001
ddnshelp.ddns.net

# Reference: https://www.virustotal.com/gui/file/a09f72a3193bc73c5af029ef71f64b5329a880e996954bb6280c9bd00fa1b283/detection

212.192.241.125:7771

# Reference: https://twitter.com/malwrhunterteam/status/1552023867761336320
# Reference: https://www.virustotal.com/gui/ip-address/154.82.84.94/relations
# Reference: https://www.virustotal.com/gui/file/6e0ded922cb1e622719d0cf560095f96dad9916f0ae93081149516dadb81638d/detection

154.91.84.168:9876
owirjdfk-we.com
passionate-kr.com
passionate-tr.com
passiond-us.com
perwijdfv-eoi.com
touhen-us.us
uirwodji-ui.com
usjhau-us.us
wiourwoi-ou.com
yuops-us.us

# Reference: https://www.virustotal.com/gui/file/94215758eafc48687001482a705561f76cad8de0eb0098976fb93211562155e6/detection
# Reference: https://www.virustotal.com/gui/file/7d8558c1263718d69d093ca50f38bf28326bd5dceb3efb705c9f8129c7e3511c/detection
# Reference: https://www.virustotal.com/gui/file/615b6c7dd910e97bcc68c05b11cbb5e85ccf607d43699454b6afc32342f4c7ae/detection

20.79.205.240:4071
20.79.205.240:8245
j3qrehet-d345ra3pi.webredirect.org

# Reference: https://www.virustotal.com/gui/file/46704fdaab5bb433a3e229a7e0fe55bff2ed3427c9b038686e24217b2abcb0f4/detection

160.177.178.241:2222
41.251.147.118:2222
ery.hopto.org

# Reference: https://twitter.com/ReBensk/status/1557315090780528640
# Reference: https://labs.k7computing.com/index.php/spynote-an-android-snooper/
# Reference: https://www.virustotal.com/gui/file/0f4774fb39cab248e081734e36b311de7a0cecb238f0694e8f2261f03b29dd27/detection

213.136.80.208:7860
vmi876244.contaboserver.net

# Reference: https://www.virustotal.com/gui/file/eebfc68f0fb29b5224d3f8df735201cf6640d54f4256197c208b9c2bb0b061f9/detection

3.67.15.169:13042
3.68.56.232:13042

# Reference: https://www.virustotal.com/gui/file/43e045855a071b384e179ac2e3a47477f63b3396e13a9e3236e383886fe67667/detection

194.40.243.26:4524

# Reference: https://www.virustotal.com/gui/file/b6b7e7e287ffc06aa246ea7e5302c72bda111565e48126bafd6c9ab40de805c5/detection

134.35.5.3:1177
mylab123321hm.ddns.net

# Reference: https://www.virustotal.com/gui/file/acd0e6d01bf4b5dcf101b5fc64229cf519c51d0eff12d302a311895446c4e324/detection

109.74.36.87:22222

# Reference: https://www.virustotal.com/gui/file/8846b72ed2ecde60b805cfaf5d1f71e34742a18177ff3c4d8d5b9c3f250e153d/detection

134.35.130.126:5551

# Reference: https://twitter.com/ReBensk/status/1560135728964591617
# Reference: https://www.virustotal.com/gui/file/8d07dc0745e57aeb40905a7426fb6515930a1fc7898db0ee93fda55ba085461b/detection

unicexyemen.herokuapp.com

# Reference: https://www.virustotal.com/gui/file/36c5af5aa41d5933789a1d9bddf0868ee962a7c574dcabb5083d0bcfab673eb9/detection

7687ytuyt78gfg.ddns.net

# Reference: https://www.virustotal.com/gui/file/c585e17bddd707a7fbc777cf539b6fa748f3c0eaf6a765879a22744d876b9fc4/detection

134.35.14.151:7771

# Reference: https://www.virustotal.com/gui/file/e1b091df277a5dfb43bb114c1a4de2bc63586a9dd329405ba1663e63233dc0d1/detection
# Reference: https://www.virustotal.com/gui/file/6f485a403729c532229ba2bd1ef16604a4433a0535dacd16bc95f9319757b04b/detection

206.62.26.133:1177
206.62.3.193:1177
hmoo528mmmmm.hopto.org

# Reference: https://www.virustotal.com/gui/file/ae325b9af05e201a0a2da3404f48731803e4b578d40daa47b6b7d4ddff2c2c38/detection

141.255.144.185:1177
naem819.hopto.org

# Reference: https://www.virustotal.com/gui/file/75ea574a850a7be39178aee9c0a4bb62251a0c8d155602b7716b923d0d50d26d/detection

77.44.159.39:4433
3lia.3utilities.com

# Reference: https://www.virustotal.com/gui/file/5c9edeb7590d9cc95b2467d331ab8ee0d830b440b7ddfe26c12e7b1e1a0bd7eb/detection
# Reference: https://www.virustotal.com/gui/file/626664965d20c3f89bb8a9b7e0b6d6dc19ac9889cc360dc618a003ee13e6b6c1/detection
# Reference: https://www.virustotal.com/gui/file/cd9b07e56caace7686a985da81cf3ffe1d6e7dc3751fe29e91b7f4921aff5cf8/detection
# Reference: https://www.virustotal.com/gui/file/f595fda04f465bfdcf4571eea6003f3545c270b1aba1a485d2c26fe71b5a733c/detection

197.33.184.226:5214
197.33.215.19:5214
197.33.57.164:5214
197.33.90.61:5214
41.236.52.9:5214
01064559141.ddns.net

# Reference: https://www.virustotal.com/gui/file/03594a35725314dcfb7501c15254388489880bac0a2e8990f06f987fe4c81f4c/detection

147.185.221.180:14456
209.25.141.180:14456

# Reference: https://www.virustotal.com/gui/file/0ff3a9c4db58e45fd70c54f150513a7b954a65ab55bdfb541127c221290b9673/detection

147.185.221.180:38712
193.161.193.99:22229
application-carriers.at.playit.gg
jhang-45067.portmap.io

# Reference: https://www.virustotal.com/gui/file/31bc52e3881f2c54f413901416cd94a863ba098d2bfa6e6cee456c53381f5b38/detection

147.185.221.180:32464
catalog-wines.at.playit.gg

# Reference: https://www.virustotal.com/gui/file/8f8a255cce1d13bdafbab97cf58e1099d558363033aead73c62cdab813bc5023/detection

147.185.221.180:45140
programme-structured.at.playit.gg

# Reference: https://www.virustotal.com/gui/file/bf63170c72e8edab2c5232263799bcc024f3084e8fb98c4018caeba03b737706/detection

147.185.221.180:28704
209.25.141.180:28704
better-enlarge.at.playit.gg

# Reference: https://www.virustotal.com/gui/file/c59a23747caf6e409c8d28a9c52de5e2e1bfeb21cc38bb2a6b91d989b8e4b0c1/detection

147.185.221.180:13485
accessories-techno.at.playit.gg

# Reference: https://www.virustotal.com/gui/file/f41e0330306127f1010c2cb115dca615f74c3457f7a9b5a1f65d086a6e401994/detection

147.185.221.180:44264

# Reference: https://www.virustotal.com/gui/file/f5802021a9d203ed5d953bf80fbb50004997df8a3bb6cb3bb88ae358e3ec9db5/detection

147.185.221.180:31021
several-trinity.at.playit.gg

# Reference: https://www.virustotal.com/gui/file/6efe3f7ed7ac9b9842b86ff715d93e16012475b6bbee50c0b06f7fae2243e556/detection

0101010011.duckdns.org

# Reference: https://www.virustotal.com/gui/file/e0fbdcd3d50a1eba6f6b1e216b4eeb7ff4a9eba11ed8e45c544e6fac9d86f536/detection

41.111.113.113:1177
kokoka.ddns.net

# Reference: https://twitter.com/ReBensk/status/1608046973894135809

108.175.6.195:8888

# Reference: https://www.virustotal.com/gui/file/ecf8bb74b70caf6d1aeb2e700a4336c6881fbab49ac655d59186056ce109f9e7/detection

46.32.120.4:1177
154755.hopto.org

# Reference: https://www.virustotal.com/gui/file/ebff48dd3dadb00514b936844c8ecb764f1cd229fef472f70686ad136c0257ac/detection

1765rat.hopto.org

# Reference: https://www.virustotal.com/gui/file/2a68090e67afbdeba15827dafdd0396b24f00dbb3fd79170bce6734d8de67d9d/detection

91.109.178.6:5214

# Reference: https://www.virustotal.com/gui/file/91543c6c427833e7c30eb5f59a21163c348cc9ed7c051d329824e01ce31edd42/detection

258852a.hopto.org

# Reference: https://www.threatfabric.com/blogs/spynote-rat-targeting-financial-institutions.html
# Reference: https://www.virustotal.com/gui/file/6f606bc5004af2b90b66d6e6e4f29f35a3b4a31dc6974b55434b3c53d70584a4/detection
# Reference: https://www.virustotal.com/gui/file/114fa822d7a96169c9cd48303f7fbd1af94f57cb46fec576d91ccea11bc5d974/detection
# Reference: https://www.virustotal.com/gui/file/de021d205150c533c5e674fdfaa16038c72cb62152edc434f765eaa56d0595e8/detection
# Reference: https://www.virustotal.com/gui/file/d64f8d9eb7f93bf17e3417e81bad559df8b6e6a0740142e462489a728f645f12/detection
# Reference: https://www.virustotal.com/gui/file/35abe4fa736128707b05961a8d1f67c3ef921440e9d63a6314653df843e30ac2/detection
# Reference: https://www.virustotal.com/gui/file/08463529d7d681246a0dd1d24a59fa50d354568f04673642bb44cc613a824be9/detection
# Reference: https://www.virustotal.com/gui/file/bd172dbb47a95e7abc3ce76118bf6cd3f742d7c932ec8801cd553509f31eca8e/detection
# Reference: https://www.virustotal.com/gui/file/2e1c68c3e785679c04d915eb2f960ef5e7ef3294a423e1835aa06e0254812c7a/detection
# Reference: https://www.virustotal.com/gui/file/a2a95cfccb8fbe557f605b8a47dad901d3a25f8cdae7f0beee133f60b924c45a/detection
# Reference: https://www.virustotal.com/gui/file/bf4e003360cb2024dfaa46a79bf05f667d300f2bcd0765b9a12500201b9519a7/detection
# Reference: https://www.virustotal.com/gui/file/d54a68cf00e99d37ee719beff273144bfef84e9a2e1bc5da8c6c1ec60ff0e75f/detection
# Reference: https://www.virustotal.com/gui/file/8b99cc9ecfac5d5a406603d5d92d18637327d2ca412f4a60824067a4a0f06c8d/detection
# Reference: https://www.virustotal.com/gui/file/97884c2b74ccffebdc91a439c4316c3215d0eb571a17820ce7da77355f21878c/detection
# Reference: https://www.virustotal.com/gui/file/71ec22035d5499a89dad13911cc84d17c9021ba40f241702c31dce443ee3d8c4/detection
# Reference: https://www.virustotal.com/gui/file/df96d647b48d81dea7ba7f9f5ecb6ac3db5a56d2a0fc0f64de7a34b720250ee2/detection
# Reference: https://www.virustotal.com/gui/file/de0049b0f74edae14aecb49e0bd911d211aaf25319de609951e82f347ac28502/detection
# Reference: https://www.virustotal.com/gui/file/d39c336ec346d6bbb99b5406cc92ef4e6fe06e1d8ba3f274b5e17f6487856cc5/detection
# Reference: https://www.virustotal.com/gui/file/d2988c8ed2823f12544e30dea3e10271d325344523ea0fb9db112a98dd2024df/detection
# Reference: https://www.virustotal.com/gui/file/9d4e43a5e96b5590eb7e6a98550be4ff89bbaddd4292c3fe621a0ce585992bdf/detection
# Reference: https://www.virustotal.com/gui/file/6e7fb5fb8785deb5e895e5813d4dd311269ee8acd1b82d57a6d4bcb0dbfb894b/detection
# Reference: https://www.virustotal.com/gui/file/6ce0d8d1af47ab92acf429d9ea3b8c83e3a5398a9c24b80adef897876c85d069/detection
# Reference: https://www.virustotal.com/gui/file/55946389c4778485bbf16f88f95ba1132b1e4d9222c3e9bf93231b61cd537dab/detection
# Reference: https://www.virustotal.com/gui/file/53a93f8041a57f4f845796c15c9c03c4cf96a8325d4fc43bb003e8c0dc5f8dbc/detection
# Reference: https://www.virustotal.com/gui/file/2014e554a86b3d737fdffd91debe3f7eb3bea566a1645fdab229c88addddf64d/detection
# Reference: https://www.virustotal.com/gui/file/1c039a23c3ad3b6d23c68696b092ca82d7d12b89c74f06a3f4fd9255ba51cdec/detection

104.223.35.225:7771
154.211.96.78:8088
156.146.52.149:7771
159.203.126.35:22026
159.203.126.35:22116
159.203.126.35:22157
159.203.126.35:22204
159.203.126.35:22235
159.203.126.35:22329
159.203.126.35:22384
159.203.126.35:22417
159.203.126.35:22526
159.203.126.35:22791
159.203.126.35:22817
159.203.126.35:22937
185.118.166.126:2001
185.204.171.172:7771
193.161.193.99:44688
77.67.177.105:7771
91.109.182.9:7771
91.109.184.3:6378
91.109.188.19:7771
91.109.188.6:6378
adnankara1.ddns.net
bizebiz.myftp.org
silent911-44688.portmap.io

# Reference: https://www.virustotal.com/gui/file/249ff1bcf08cc54cc087848a389a65eb76a5a858e76213ac0c2e753e4e5a8cad/detection

175.121.132.252:3210
175.121.132.64:3210
rbstmd.kro.kr

# Reference: https://www.virustotal.com/gui/file/9f393d19ca1f809ca73ca7bd44ef09a69143db8afc647397d9801009c6777aa7/detection

3.138.45.170:27019

# Reference: https://www.virustotal.com/gui/file/b95c446fca3e935724dbff00216c13e95d012034fa06a07f352df6b12a72d13a/detection

141.95.84.40:7722

# Reference: https://www.virustotal.com/gui/file/7af1f675a8b6e2951e6cbdf929c0d8ac9523a77ab15c07320377a40dca4aa190/detection

147.185.221.223:62734
republic-sydney.at.playit.gg

# Reference: https://www.virustotal.com/gui/file/34670ce03b0be43bfbc34adfca9f5ad5e921a230e9d9fe7260ae0b07275ad0d7/detection

147.185.221.223:17171

# Reference: https://www.virustotal.com/gui/file/2d8bce7526fe2727110cf56c5e458ec86b5f200f45ae219765e342b844f2b028/detection

4.227.151.86:7771

# Reference: https://www.virustotal.com/gui/file/896048ee2703b67a62189c8db7555c04842727f3f7499369e02f62e5e49ee75c/detection

13.127.184.178:1876

# Reference: https://www.virustotal.com/gui/file/a7dee3754dc5deae46c78cd7dd025c1ad8c49171c102a45a4b92799ab4aa8cc7/detection

172.96.191.221:3210
198.252.103.24:3210

# Reference: https://www.virustotal.com/gui/file/7cc884008b3e372dc522e7b601af0f456cca3dd519e38fcb83761fccb3f6cb23/detection
# Reference: https://www.virustotal.com/gui/file/058f0883c8a21bf1b89107a347ef9dfd3468b5cc4828129534865761280db991/detection

103.231.91.115:10401
178.175.142.195:10717
google-com.linkpc.net

# Reference: https://www.virustotal.com/gui/file/b68ebba2ac0b4536b50fbf220998d1f8e825e8021f1fb9bb64f6b478e36452a7/detection

102.41.232.23:5214

# Reference: https://www.virustotal.com/gui/file/af65e25c3f78bddf6b2c533c8db164f6c9b783799920e09955542eadd6ff1110/detection

41.42.227.38:5214

# Reference: https://www.virustotal.com/gui/file/a2f8513e28152e273aace9d59c40ed5bc50595d70df4cef2f43518b7d7d12d29/detection

41.232.110.30:5214

# Reference: https://www.virustotal.com/gui/file/4964fb80c28aa413d9833e8402491eecf3b349e0e4fa773195b93314d6f4cd02/detection

199.66.93.203:5214

# Reference: https://www.virustotal.com/gui/file/3dd4960c7651c1d1ff74e872e1e98d0ae636106aa5823164193e3d030c2ba7e7/detection

102.41.224.26:5214

# Reference: https://www.virustotal.com/gui/file/e36150ef13f8e370b8a20e63ff58d4d3ea12aae3f5696fcf24b6a8f5b12f6d0c/detection

91.109.178.9:8085
anujkumar25368.hopto.org

# Reference: https://www.virustotal.com/gui/file/4582b0a6be02c30559f7cdce8e75c560171fd6a5e018e40fdce0723bea95c257/detection
# Reference: https://www.virustotal.com/gui/file/aa1297eb7e5fbf6822722f3b0a15bb3a4ee97fd0af529f26fb7a03158cf75d2c/detection
# Reference: https://www.virustotal.com/gui/file/a8ca599bc3e61046523bb7f55f2aa9feffcd3cc05f2537b0389416ef93441de9/detection
# Reference: https://www.virustotal.com/gui/file/9d1ef452dcf98ed7f21d74a5089e93f2a5e899561d4dae2b47a8051b12f06fad/detection
# Reference: https://www.virustotal.com/gui/file/8dec2344a9ca0718866930a45fe18b584f93095cec7429207598c8b8e4139ed7/detection
# Reference: https://www.virustotal.com/gui/file/71ad3490a0fbd1c0d85cca72bd45e1e2398976a2753e83f0cd5a393a1003de3d/detection
# Reference: https://www.virustotal.com/gui/file/48f7e73395aa39010f8c689894c33e9fb43650ffd24153ab6800d51e87e242cf/detection
# Reference: https://www.virustotal.com/gui/file/334db1a888289dcee12b4879d1a35813e3d384e84566100c8c790abee1f08344/detection
# Reference: https://www.virustotal.com/gui/file/22cc09034e7f6e8bf9b8682142073e3062d31fce1d3097cb14b6b0d73b650321/detection

178.74.204.15:7771
178.74.255.230:7771
185.39.73.98:7771
185.43.236.106:7771
194.33.40.115:7771
91.109.180.10:7771
91.109.184.19:7771
91.109.188.11:7771
91.109.188.5:7771
arcaneuser1.zapto.org

# Reference: https://www.virustotal.com/gui/file/f84ef056ccc299f35ba883bbc78a6858e647f2be43e607a257984e0c7952e16e/detection

91.109.180.8:1212
91.109.188.5:1212

# Reference: https://www.virustotal.com/gui/file/e9b6226efb4dbdd245304ed7d6253270dac49b215b1931f79e013e1e6f0b638a/detection

177.158.81.249:1212

# Reference: https://twitter.com/bofheaded/status/1634587089927798787
# Reference: https://www.virustotal.com/gui/file/093a97a03e75ff0f99b20aff74ae8bd5782023be6be468def1386dd52a7b7f13/detection

37.239.8.22:1177
hacked2022.ddns.net

# Reference: https://www.virustotal.com/gui/file/5a9f3ef3447183335fe36363f2a5b2dbd09bfab71949cb961066f758e4eda7f1/detection

65.0.50.125:22324

# Reference: https://twitter.com/sicehice/status/1638330650733207555
# Reference: https://www.virustotal.com/gui/file/2fbb21b92d1480ce92980292f8f4de12370ae15467970e6e053407078c8f6108/detection

178.186.181.247:26000

# Reference: https://www.virustotal.com/gui/file/06cbab6656626000cd1520163afdf9fbd2a1adb1088e9d78c45159faf8be11d9/detection

206.189.80.59:22305

# Reference: https://www.virustotal.com/gui/file/17a4393489b5506e89276c3334e92a2f082b5f3f09a15359956c3e30d9080754/detection

91.109.182.6:4478
b8oo.linkpc.net

# Reference: https://www.virustotal.com/gui/file/f9a91b12602f70183d9cf3cc3e8745402103bcec5771601de2e7cbeb50f3937b/detection
# Reference: https://www.virustotal.com/gui/file/46c5e9ae147e556cb03cd24adfb66b18702af920c308105396844f9171a2f6cd/detection
# Reference: https://www.virustotal.com/gui/file/3901cae9a3151f33fa4d0e3b092a6ac1bb82c802bf574bbe0a725c6e161f19ac/detection

156.209.180.169:4455
197.36.84.45:4444
91.109.184.9:4455
eslbeh99.ddns.net

# Reference: https://www.virustotal.com/gui/file/628da508c9da5966cb0f84166821f8a6d9656674a8cbc8939278978f2e48b6bf/detection

91.109.188.2:8885
ghostfrp6.ddns.net

# Reference: https://www.virustotal.com/gui/file/05df6c55dbab750792a0ab98f5f861b33cfbc419f1f0abb00a21ff23b56df4fb/detection

165.227.31.192:22562

# Reference: https://twitter.com/0x6rsk/status/1649423985313038338
# Reference: https://www.virustotal.com/gui/ip-address/20.206.70.41/relations

http://20.206.70.41

# Reference: https://www.virustotal.com/gui/file/1a012cacc3611634a90fc735b7d40cf9b57d81b02965be728031ebb0d160988d/detection

 godrat-9573.tk
 
# Reference: https://twitter.com/KesaGataMe0/status/1651250134938951680

elevenio.info
sej.elevenio.info

# Reference: https://twitter.com/ULTRAFRAUD/status/1653137382722379796

190.79.86.65:5000

# Reference: https://labs.k7computing.com/index.php/spynote-targets-irctc-users/
# Reference: https://www.virustotal.com/gui/ip-address/154.61.76.99/relations
# Reference: https://www.virustotal.com/gui/file/30bc0d322f6a8f3e198baf0e8f550c4b9d011da4b121819472c0e33b1aade1b6/detection

creditmobile.site
spaxdriod.studio
online.spaxdriod.studio
irctc.creditmobile.site

# Reference: https://www.virustotal.com/gui/file/0032e6868f20960743e5f4f6e529dfc3520903460d6142baab87a886ad1fb6f1/detection

3.67.112.102:17896

# Reference: https://twitter.com/malwrhunterteam/status/1665130545796317188
# Reference: https://www.virustotal.com/gui/file/6838a3f7f3aaedc4896bdbe5d59e982eae2552993b0388e5ea8c311a03f31d7f/detection

209.25.141.224:17041
224.ip.ply.gg

# Reference: https://twitter.com/r3dbU7z/status/1667656893844664321
# Reference: https://www.virustotal.com/gui/file/9263a05f6ca2a1c9b52aa5a52cac5b5881745ff09ddd769f921ed306b32c5f6c/detection

18.229.248.167:21163
18.231.93.153:21163
54.94.248.37:21163

# Reference: https://www.virustotal.com/gui/file/e4412f247b04572cab89f5494cc7d1ab8f1e96179232a870dfd01c54bda81f30/detection

43.156.23.174:7772

# Reference: https://twitter.com/ReBensk/status/1678041939843612680
# Reference: https://www.virustotal.com/gui/file/e3d26e6bde5a17bb23921d0ff74bb667acbf4131e21300b3dab0acaab554545e/detection

103.167.199.111:7771
divedealmy.shop

# Reference: https://twitter.com/malwrhunterteam/status/1682115574275485696
# Reference: https://twitter.com/malwrhunterteam/status/1690104579277438978
# Reference: https://twitter.com/karol_paciorek/status/1703697327058268188
# Reference: https://twitter.com/g0njxa/status/1710354825785880893
# Reference: https://www.virustotal.com/gui/ip-address/216.83.59.95/relations
# Reference: https://www.virustotal.com/gui/ip-address/27.124.3.171/relations
# Reference: https://www.virustotal.com/gui/file/cee52c4b470a1cf50c1d97f5e0847f89c388a865eef1cc196ddf56cb0e3aef4f/detection
# Reference: https://www.virustotal.com/gui/file/8caf8d3b86540b6760d068072f1f36662d50c29f0554232f8cfa4727383da8bb/detection
# Reference: https://www.virustotal.com/gui/file/7851b40b0e80079b7dfd03ba11410f1fe8425a5b76d743d052bc311eab098da1/detection
# Reference: https://www.virustotal.com/gui/file/557a307df6632694647dc7c4679e9a496a5230b1dc9ca30963e0eab6ea8d435b/detection
# Reference: https://www.virustotal.com/gui/file/ca855e36ca61234d0b87e11952b770a4daf954fa95fb13d7be670cf61c3cdf8f/detection

202.79.173.136:443
27.124.3.171:443
27.124.3.183:443
27.124.3.186:443
0280678.com
1105181.com
1213454.com
1213455.com
1213457.com
1213458.com
1215466.com
1239988.com
1280678.com
1319510.com
1319551.cc
1319553.com
1319554.com
1319556.com
1319557.com
1319558.com
1319559.cc
1416233.com
1518644.com
221.cc
2280678.com
2024shivatalisman.com
3280678.com
4280678.com
558.cc
736626.com
736627.com
736628.com
736631.com
736632.com
99yipin.com
babyeona.cc
babyeonb.cc
babyeona.icu
babyeonb.icu
buy-n-go.info
c6ih1t.com
cai313.com
caipiao5050.com
charge-web.info
citrusliveshow.com
cp8868.com
deluxe-mall.info
douyinmall.org
dyshope.com
eco-mall.info
ecomall.info
estafetagoappa.cyou
estafetagoappb.cyou
estafetagoappc.cyou
estafetagoappd.cyou
estafetagoappa.vip
estafetagoappb.vip
europapokal2024.com
flamefork3.com
fooddrinks.cc
imoneymy.com
m10688.com
m158663.com
m18888.com
megamalll.info
mining8.cc
msmartb.com
msmartc.com
msmartd.com
msmartf.com
msmartg.com
msmarti.com
msmartj.com
msmartk.com
msmartl.com
msmartm.com
mtymall.info
peninsula3.com
petrus4.com
phonetictgapk.com
posngoappg.com
posngoappk.com
posngoappm.com
posngoappp.com
posngoapps.com
posngoappu.com
posngoappx.com
posngovipappa.com
recruitment59.com
recruitment60.com
recruitment61.com
recruitment62.com
shangri3.com
stripchat15.com
stripchat70.com
the-maids.info
tpowe2.com
yop918kiss.com
zer0-dust.com

# Reference: https://www.joesandbox.com/analysis/1293792#iocs

8709687.com
h5.8709687.com

# Reference: https://twitter.com/ReBensk/status/1682405078345367553

http://104.233.210.35

# Reference: https://www.virustotal.com/gui/file/00443e03069a5bc2e0b8c1c77f597733785b1504267624a288a440feaf015da4/detection

209.25.140.181:31979
181.ip.ply.gg

# Reference: https://twitter.com/ReBensk/status/1683178463966949377

116.202.198.246:3031

# Reference: https://www.cleafy.com/cleafy-labs/spynote-continues-to-attack-financial-institutions
# Reference: https://www.virustotal.com/gui/file/bad77dca600dc7569db4de97806a66fa969b55b77c24e3a7eb2c49e009c1f216/detection
# Reference: https://www.virustotal.com/gui/file/7a16952bea9714cad6330960898edf6262c0e5e19d0b47716e31b6cc24463e07/detection

37.120.141.140:7775
37.120.141.144:7771

# Reference: https://twitter.com/FalconFeedsio/status/1688881480112459776

http://104.225.158.203
http://104.225.158.203.16clouds.com
beautyforyou.top
csx22.top
dorila.top
freedomly.top
heishitanfan.online
lapassover.site
malai01.dorila.top
video01.dorila.top
warwickyouth.com

# Reference: https://twitter.com/karol_paciorek/status/16889031494433

http://1.32.228.54
http://101.32.187.36
http://101.32.208.56
http://101.32.34.223
http://101.32.34.242
http://101.32.42.19
http://101.32.42.61
http://101.33.34.178
http://102.223.75.217
http://103.100.159.88
http://103.101.204.210
http://103.103.245.169
http://103.103.245.35
http://103.103.245.46
http://103.105.48.206
http://103.114.161.131
http://103.114.161.185
http://103.117.100.107
http://103.117.103.108
http://103.117.103.140
http://103.118.244.122
http://103.118.244.233
http://103.118.41.135
http://103.12.76.191
http://103.12.76.232
http://103.124.104.102
http://103.133.178.199
http://103.135.103.69
http://103.136.146.11
http://103.136.146.25
http://103.137.184.244
http://103.137.184.65
http://103.138.80.100
http://103.138.80.22
http://103.138.80.56
http://103.140.238.170
http://103.142.8.203
http://103.142.8.219
http://103.143.209.189
http://103.143.230.47
http://103.145.106.33
http://103.145.62.190
http://103.146.158.154
http://103.151.12.100
http://103.151.40.42
http://103.152.221.105
http://103.153.100.41
http://103.167.150.79
http://103.170.154.118
http://103.170.72.221
http://103.179.142.115
http://103.179.143.120
http://103.19.190.44
http://103.197.184.196
http://103.200.29.52
http://103.200.29.53
http://103.201.131.137
http://103.205.209.126
http://103.205.211.121
http://103.205.211.8
http://103.215.80.72
http://103.225.199.120
http://103.230.120.129
http://103.230.120.57
http://103.232.213.147
http://103.232.213.166
http://103.239.30.69
http://103.243.212.74
http://103.243.212.84
http://103.251.89.211
http://103.253.72.107
http://103.27.186.184
http://103.30.17.92
http://103.50.255.232
http://103.66.218.194
http://103.69.129.27
http://103.74.192.11
http://103.74.192.200
http://103.74.192.243
http://103.74.192.67
http://103.74.192.92
http://103.75.116.111
http://103.75.116.126
http://103.75.116.169
http://103.75.116.177
http://103.75.116.198
http://103.75.116.212
http://103.75.116.77
http://103.75.116.80
http://103.75.188.251
http://103.79.79.141
http://103.81.86.166
http://103.85.25.126
http://103.97.176.71
http://103.99.115.138
http://103.99.178.222
http://103.99.179.186
http://104.128.89.117
http://104.128.91.111
http://104.128.94.147
http://104.149.94.152
http://104.153.100.208
http://104.156.239.20
http://104.160.19.97
http://104.166.126.199
http://104.168.102.98
http://104.168.11.14
http://104.168.12.152
http://104.168.132.120
http://104.168.134.187
http://104.168.134.220
http://104.168.134.33
http://104.168.136.121
http://104.168.136.5
http://104.168.136.92
http://104.168.138.243
http://104.168.141.226
http://104.168.142.134
http://104.168.142.238
http://104.168.143.52
http://104.168.143.78
http://104.168.144.37
http://104.168.145.130
http://104.168.147.164
http://104.168.147.44
http://104.168.149.21
http://104.168.151.166
http://104.168.151.216
http://104.168.151.4
http://104.168.153.28
http://104.168.160.43
http://104.168.164.26
http://104.168.165.129
http://104.168.165.135
http://104.168.166.244
http://104.168.170.173
http://104.168.171.170
http://104.168.171.59
http://104.168.171.64
http://104.168.172.117
http://104.168.172.236
http://104.168.173.3
http://104.168.174.220
http://104.168.190.154
http://104.168.190.173
http://104.168.190.178
http://104.168.190.7
http://104.168.190.88
http://104.168.194.178
http://104.168.198.96
http://104.168.203.199
http://104.168.211.203
http://104.168.211.66
http://104.168.214.174
http://104.168.214.96
http://104.168.219.207
http://104.168.237.69
http://104.168.253.172
http://104.168.58.64
http://104.168.82.161
http://104.168.96.176
http://104.168.96.227
http://104.194.225.188
http://104.194.233.68
http://104.194.239.215
http://104.194.240.76
http://104.194.240.81
http://104.194.74.156
http://104.199.175.164
http://104.199.187.151
http://104.207.148.85
http://104.207.152.36
http://104.207.153.2
http://104.207.153.202
http://104.208.104.240
http://104.208.65.172
http://104.219.209.185
http://104.219.214.122
http://104.219.214.176
http://104.219.214.207
http://104.219.215.149
http://104.224.176.247
http://104.224.177.41
http://104.224.178.134
http://104.225.146.116
http://104.225.149.36
http://104.225.157.86
http://104.225.236.53
http://104.233.140.212
http://104.233.150.188
http://104.237.152.96
http://104.238.138.61
http://104.238.140.245
http://104.238.156.62
http://104.238.157.186
http://104.238.180.73
http://104.243.22.237
http://104.243.22.36
http://104.243.23.249
http://104.243.27.134
http://104.243.27.30
http://104.244.91.120
http://104.244.92.10
http://104.245.33.227
http://104.249.156.205
http://104.255.66.153
http://107.148.151.155
http://107.148.19.179
http://107.148.19.222
http://107.148.19.229
http://107.148.19.239
http://107.148.19.243
http://107.148.19.244
http://107.148.19.3
http://107.148.20.148
http://107.148.20.165
http://107.148.20.171
http://107.148.20.177
http://107.148.20.178
http://107.148.20.55
http://107.148.20.61
http://107.148.20.75
http://107.148.20.79
http://107.148.20.80
http://107.148.20.82
http://107.148.21.226
http://107.148.21.39
http://107.148.241.50
http://107.148.246.141
http://107.148.250.106
http://107.148.250.157
http://107.148.30.196
http://107.148.31.101
http://107.148.41.105
http://107.148.41.31
http://107.148.42.110
http://107.148.42.147
http://107.148.42.239
http://107.148.42.99
http://107.148.43.73
http://107.148.93.7
http://107.148.94.124
http://107.148.94.125
http://107.148.94.168
http://107.148.94.175
http://107.148.95.192
http://107.148.95.206
http://107.148.95.239
http://107.148.95.242
http://107.150.11.236
http://107.151.250.173
http://107.172.100.90
http://107.172.140.240
http://107.172.141.177
http://107.172.142.248
http://107.172.155.51
http://107.172.157.155
http://107.172.180.111
http://107.172.180.201
http://107.172.214.65
http://107.172.216.218
http://107.172.218.117
http://107.172.218.146
http://107.172.3.176
http://107.172.3.60
http://107.172.30.28
http://107.172.5.160
http://107.172.8.18
http://107.172.82.251
http://107.173.147.241
http://107.173.155.236
http://107.173.155.72
http://107.173.156.52
http://107.173.159.63
http://107.173.165.53
http://107.173.34.46
http://107.173.35.36
http://107.173.35.54
http://107.173.82.202
http://107.173.86.116
http://107.173.86.87
http://107.173.87.113
http://107.174.11.53
http://107.174.14.239
http://107.174.172.155
http://107.174.172.239
http://107.174.176.47
http://107.174.176.48
http://107.174.192.155
http://107.174.241.200
http://107.174.243.80
http://107.174.250.146
http://107.174.250.92
http://107.174.254.214
http://107.174.66.120
http://107.174.95.153
http://107.175.111.184
http://107.175.124.242
http://107.175.142.111
http://107.175.142.184
http://107.175.142.227
http://107.175.35.97
http://107.175.36.50
http://107.182.16.115
http://107.182.17.252
http://107.182.17.253
http://107.182.17.36
http://107.182.17.46
http://107.182.186.178
http://107.182.187.210
http://107.182.190.162
http://107.182.22.77
http://107.182.23.142
http://107.182.25.180
http://107.182.26.215
http://107.182.27.123
http://107.182.27.238
http://107.182.30.157
http://107.186.200.77
http://107.191.49.80
http://107.191.55.147
http://108.160.131.115
http://108.165.145.33
http://108.165.254.210
http://108.165.254.45
http://108.166.195.155
http://108.166.206.124
http://108.166.219.184
http://108.181.105.153
http://108.181.118.45
http://108.61.144.244
http://108.61.157.76
http://108.61.172.89
http://108.61.194.144
http://108.61.194.82
http://108.61.203.24
http://108.61.206.111
http://108.61.206.251
http://108.61.219.254
http://108.61.81.97
http://108.62.222.30
http://109.248.231.203
http://111.253.231.192
http://115.126.113.162
http://115.126.98.55
http://115.71.239.99
http://116.203.138.166
http://116.204.181.103
http://116.206.94.9
http://117.18.13.84
http://118.193.34.214
http://118.193.36.81
http://118.27.7.59
http://119.28.137.139
http://119.28.21.110
http://119.28.43.66
http://119.82.24.95
http://122.100.147.3
http://122.254.97.146
http://123.108.77.173
http://123.108.77.174
http://123.108.77.175
http://123.253.32.161
http://124.108.22.125
http://124.156.150.122
http://124.156.222.128
http://125.132.9.131
http://125.229.2.62
http://128.22.143.55
http://128.22.150.210
http://129.146.111.80
http://129.146.132.50
http://129.146.245.22
http://129.150.32.205
http://129.150.32.74
http://129.150.54.55
http://129.151.228.229
http://129.153.152.233
http://129.154.203.202
http://129.154.216.125
http://129.154.232.229
http://129.154.52.36
http://129.154.54.189
http://129.154.56.87
http://129.159.32.25
http://129.226.10.157
http://129.80.206.202
http://13.112.50.19
http://13.113.137.5
http://13.113.82.249
http://13.114.141.190
http://13.115.0.18
http://13.124.107.116
http://13.124.113.76
http://13.124.240.224
http://13.124.241.199
http://13.124.253.52
http://13.124.55.140
http://13.124.76.70
http://13.125.116.229
http://13.125.138.57
http://13.125.155.11
http://13.125.199.195
http://13.125.2.131
http://13.125.228.171
http://13.125.75.252
http://13.125.90.207
http://13.127.213.197
http://13.208.208.204
http://13.208.211.212
http://13.209.16.104
http://13.209.16.253
http://13.209.20.160
http://13.209.229.225
http://13.209.82.76
http://13.209.9.38
http://13.210.79.196
http://13.212.195.116
http://13.212.62.129
http://13.213.77.79
http://13.229.101.209
http://13.231.222.185
http://13.236.107.100
http://13.250.117.204
http://13.250.15.214
http://13.52.50.55
http://13.57.236.216
http://13.57.239.180
http://130.162.129.241
http://130.162.134.69
http://130.162.154.188
http://131.186.20.222
http://131.186.32.155
http://131.186.35.164
http://132.145.120.43
http://132.145.61.241
http://132.226.1.19
http://132.226.131.144
http://132.226.17.158
http://132.226.173.165
http://132.226.225.107
http://132.226.235.63
http://132.226.5.41
http://134.195.96.205
http://134.195.96.92
http://134.195.97.195
http://134.195.97.50
http://136.175.176.2
http://136.175.177.150
http://136.175.177.7
http://136.175.177.99
http://136.175.179.105
http://136.244.66.15
http://137.175.19.33
http://137.175.36.84
http://137.175.53.128
http://137.184.170.187
http://137.184.39.238
http://137.220.131.104
http://137.220.133.104
http://137.220.133.85
http://137.220.190.104
http://137.220.228.116
http://137.220.228.22
http://137.220.228.97
http://137.220.233.51
http://137.220.233.66
http://137.220.244.3
http://137.220.244.46
http://137.220.244.74
http://137.220.244.77
http://137.220.244.90
http://137.220.244.92
http://137.220.40.87
http://137.220.43.33
http://137.220.63.127
http://138.128.220.151
http://138.2.111.239
http://138.2.120.178
http://138.2.172.18
http://138.2.226.138
http://138.2.26.207
http://138.2.39.213
http://138.2.42.231
http://138.2.48.100
http://138.2.49.156
http://138.2.49.245
http://138.2.49.73
http://138.2.5.30
http://138.2.52.40
http://138.2.52.86
http://138.2.57.29
http://138.2.57.38
http://138.2.60.6
http://138.2.76.176
http://138.2.84.209
http://138.2.92.53
http://139.144.63.84
http://139.159.243.98
http://139.162.231.202
http://139.162.241.145
http://139.162.75.133
http://139.180.132.192
http://139.180.132.99
http://139.180.134.13
http://139.180.141.109
http://139.180.155.50
http://139.180.198.30
http://139.180.208.178
http://139.180.211.172
http://139.180.221.9
http://139.28.235.167
http://139.59.64.78
http://139.84.131.196
http://139.84.169.70
http://139.99.66.122
http://140.174.170.59
http://140.238.0.52
http://140.238.11.12
http://140.238.11.197
http://140.238.19.231
http://140.238.43.140
http://140.238.49.174
http://140.238.58.83
http://140.82.23.25
http://140.82.8.138
http://140.83.37.141
http://140.83.57.160
http://140.83.62.176
http://140.83.63.174
http://140.83.63.95
http://140.83.83.41
http://140.99.221.107
http://140.99.4.41
http://141.11.1.188
http://141.147.150.232
http://141.147.155.53
http://141.147.161.78
http://141.147.170.201
http://141.147.171.147
http://141.147.186.42
http://141.147.21.46
http://141.147.81.67
http://141.164.56.106
http://141.164.60.32
http://141.94.86.65
http://141.98.215.41
http://142.11.209.43
http://142.11.234.222
http://142.11.246.164
http://143.110.170.137
http://143.198.156.234
http://143.198.214.20
http://143.47.238.227
http://144.126.193.37
http://144.126.223.31
http://144.126.223.94
http://144.168.56.166
http://144.168.62.126
http://144.168.62.146
http://144.168.63.162
http://144.202.101.1
http://144.202.109.230
http://144.202.111.159
http://144.202.117.8
http://144.202.121.95
http://144.202.125.139
http://144.202.47.71
http://144.202.5.216
http://144.202.57.110
http://144.202.59.182
http://144.202.7.4
http://144.202.70.14
http://144.202.80.193
http://144.202.80.211
http://144.202.92.224
http://144.202.93.176
http://144.24.71.58
http://144.24.75.40
http://144.34.160.240
http://144.34.162.29
http://144.34.166.141
http://144.34.168.62
http://144.34.169.201
http://144.34.171.187
http://144.34.174.13
http://144.34.175.152
http://144.34.186.68
http://144.34.199.92
http://144.34.227.6
http://144.34.240.102
http://144.34.241.132
http://144.34.245.77
http://144.34.246.167
http://144.34.246.179
http://144.34.246.240
http://144.34.253.229
http://144.48.63.159
http://144.48.63.160
http://144.48.63.165
http://144.48.63.172
http://146.19.116.26
http://146.19.167.107
http://146.190.126.141
http://146.235.230.174
http://146.56.103.106
http://146.56.139.78
http://146.56.149.248
http://146.56.164.165
http://146.56.179.189
http://146.56.36.228
http://146.56.45.17
http://146.56.47.206
http://147.139.188.36
http://147.161.34.231
http://147.182.160.62
http://147.182.196.146
http://147.185.242.50
http://147.189.128.10
http://147.189.128.11
http://147.189.128.111
http://147.189.128.117
http://147.189.128.12
http://147.189.128.13
http://147.189.128.132
http://147.189.128.143
http://147.189.128.149
http://147.189.128.157
http://147.189.128.16
http://147.189.128.186
http://147.189.128.31
http://147.189.128.32
http://147.189.128.33
http://147.189.128.34
http://147.189.128.4
http://147.189.128.59
http://147.189.128.6
http://147.189.128.62
http://147.189.128.63
http://147.189.128.7
http://147.189.128.8
http://147.189.128.87
http://147.189.128.88
http://147.189.128.9
http://147.189.128.95
http://147.189.161.13
http://147.189.161.215
http://147.189.161.39
http://147.189.161.51
http://147.78.0.234
http://147.78.245.250
http://147.78.246.34
http://148.66.57.147
http://149.102.231.134
http://149.129.248.136
http://149.129.60.123
http://149.248.0.218
http://149.248.13.181
http://149.248.16.64
http://149.248.18.184
http://149.248.2.153
http://149.248.33.210
http://149.248.33.71
http://149.248.36.251
http://149.248.6.239
http://149.248.7.134
http://149.28.144.220
http://149.28.15.27
http://149.28.198.201
http://149.28.21.220
http://149.28.214.118
http://149.28.220.31
http://149.28.221.111
http://149.28.224.151
http://149.28.226.250
http://149.28.227.25
http://149.28.228.149
http://149.28.249.25
http://149.28.50.180
http://149.28.58.179
http://149.28.58.43
http://149.28.63.185
http://149.28.71.14
http://149.28.74.122
http://149.28.8.219
http://149.28.82.171
http://149.28.83.199
http://149.28.83.202
http://149.28.93.245
http://149.28.94.151
http://149.62.44.46
http://15.152.186.200
http://15.152.243.234
http://15.168.103.100
http://150.107.201.203
http://150.107.201.204
http://150.107.201.205
http://150.107.201.35
http://150.107.201.36
http://150.107.201.55
http://150.107.201.6
http://150.107.201.70
http://150.107.201.71
http://150.107.201.72
http://150.107.201.73
http://150.107.201.74
http://150.107.201.78
http://150.107.75.203
http://150.109.145.175
http://150.109.243.91
http://150.109.245.163
http://150.109.94.247
http://150.230.100.234
http://150.230.196.67
http://150.230.202.50
http://150.230.205.237
http://150.230.217.178
http://150.230.217.211
http://152.32.207.105
http://152.32.237.4
http://152.67.203.251
http://152.67.232.27
http://152.69.193.194
http://152.69.200.244
http://152.69.230.188
http://152.70.113.165
http://152.70.232.67
http://152.70.238.5
http://152.70.239.94
http://152.70.37.186
http://152.70.82.182
http://152.70.83.175
http://152.70.90.212
http://154.12.20.161
http://154.12.33.175
http://154.12.37.3
http://154.12.37.46
http://154.12.37.56
http://154.12.37.6
http://154.12.39.121
http://154.12.39.146
http://154.12.39.184
http://154.12.39.246
http://154.12.39.61
http://154.12.39.62
http://154.12.39.76
http://154.12.39.92
http://154.12.41.39
http://154.12.43.226
http://154.12.59.123
http://154.12.59.127
http://154.12.59.66
http://154.12.79.14
http://154.17.1.29
http://154.17.1.65
http://154.17.14.27
http://154.17.15.186
http://154.17.16.49
http://154.17.19.90
http://154.17.2.34
http://154.17.20.108
http://154.17.22.113
http://154.17.23.182
http://154.17.25.116
http://154.17.25.129
http://154.17.25.57
http://154.17.25.60
http://154.17.28.111
http://154.17.29.6
http://154.17.30.155
http://154.17.31.95
http://154.17.4.16
http://154.17.5.29
http://154.17.7.198
http://154.17.8.8
http://154.19.184.124
http://154.193.1.73
http://154.193.1.77
http://154.196.128.66
http://154.196.128.70
http://154.198.193.139
http://154.198.193.143
http://154.198.193.148
http://154.198.193.152
http://154.198.193.183
http://154.198.193.185
http://154.198.194.198
http://154.198.194.214
http://154.198.194.220
http://154.198.194.222
http://154.198.194.227
http://154.198.194.231
http://154.198.194.239
http://154.198.194.250
http://154.198.209.17
http://154.198.209.22
http://154.198.209.51
http://154.198.209.58
http://154.198.210.100
http://154.198.210.108
http://154.198.210.110
http://154.198.210.113
http://154.198.210.114
http://154.198.210.115
http://154.198.210.117
http://154.198.210.119
http://154.198.210.122
http://154.198.210.124
http://154.198.210.92
http://154.198.210.95
http://154.198.210.98
http://154.198.211.131
http://154.198.211.145
http://154.198.211.151
http://154.198.211.164
http://154.198.211.170
http://154.198.211.177
http://154.198.212.210
http://154.198.212.221
http://154.198.212.246
http://154.198.213.13
http://154.198.213.16
http://154.198.213.27
http://154.198.213.47
http://154.198.213.58
http://154.198.213.7
http://154.198.227.83
http://154.202.59.142
http://154.202.59.226
http://154.202.59.247
http://154.204.55.219
http://154.204.56.42
http://154.204.60.165
http://154.212.148.158
http://154.212.148.167
http://154.216.191.191
http://154.22.235.144
http://154.22.235.61
http://154.23.240.5
http://154.23.241.230
http://154.23.244.193
http://154.23.248.219
http://154.29.132.66
http://154.3.33.136
http://154.3.36.2
http://154.3.5.155
http://154.31.26.191
http://154.40.35.109
http://154.40.35.162
http://154.40.35.169
http://154.40.35.179
http://154.40.35.184
http://154.40.35.213
http://154.40.35.23
http://154.40.35.28
http://154.40.35.29
http://154.40.35.34
http://154.40.35.37
http://154.40.35.62
http://154.40.40.138
http://154.40.40.27
http://154.40.40.77
http://154.40.49.100
http://154.40.49.230
http://154.40.52.111
http://154.40.52.156
http://154.40.56.152
http://154.55.172.145
http://154.55.172.218
http://154.55.172.81
http://154.64.228.28
http://154.64.231.215
http://154.7.179.163
http://154.7.179.34
http://154.7.180.133
http://154.7.180.76
http://154.81.220.241
http://154.88.24.121
http://154.88.25.145
http://154.88.25.179
http://154.88.25.186
http://154.88.26.196
http://154.88.26.204
http://154.88.26.222
http://154.88.26.235
http://154.88.26.242
http://154.88.26.245
http://154.88.30.13
http://154.88.30.14
http://154.88.30.17
http://154.88.30.21
http://154.88.30.26
http://154.88.30.27
http://154.88.30.3
http://154.88.30.32
http://154.88.30.33
http://154.88.30.35
http://154.88.30.38
http://154.88.30.39
http://154.88.30.41
http://154.88.30.45
http://154.88.30.47
http://154.88.30.52
http://154.88.30.6
http://154.88.6.213
http://154.88.6.221
http://154.88.6.248
http://154.9.206.130
http://154.9.207.231
http://154.9.224.16
http://154.9.224.168
http://154.9.224.181
http://154.9.224.194
http://154.9.224.233
http://154.9.224.250
http://154.9.225.239
http://154.9.225.6
http://154.9.225.81
http://154.9.234.29
http://154.9.239.113
http://154.9.246.249
http://154.93.3.15
http://154.93.3.162
http://154.93.3.37
http://155.138.192.190
http://155.138.220.47
http://155.248.171.61
http://155.248.181.18
http://155.248.187.135
http://155.248.193.223
http://155.248.214.183
http://155.254.192.228
http://155.254.193.152
http://155.254.193.171
http://156.224.63.224
http://156.225.64.128
http://156.231.0.30
http://156.231.0.31
http://156.234.193.103
http://156.234.193.140
http://156.234.193.141
http://156.234.193.149
http://156.234.193.150
http://156.234.193.16
http://156.234.193.4
http://156.234.193.9
http://156.236.76.85
http://156.245.136.14
http://156.245.136.41
http://156.245.25.112
http://156.251.144.162
http://156.251.144.173
http://156.251.144.191
http://156.251.144.195
http://156.251.144.196
http://156.251.144.197
http://156.251.144.201
http://156.251.144.206
http://156.251.144.207
http://156.251.144.208
http://156.251.144.213
http://156.251.144.223
http://156.251.172.128
http://156.251.172.129
http://156.251.172.133
http://156.251.172.148
http://156.251.172.150
http://156.251.172.152
http://156.251.172.161
http://156.251.172.177
http://156.251.172.188
http://156.251.172.195
http://156.251.172.197
http://156.251.172.198
http://156.251.172.204
http://156.251.172.206
http://156.251.172.214
http://156.251.172.215
http://156.251.172.216
http://156.251.172.217
http://156.251.172.218
http://156.251.172.233
http://156.251.172.240
http://156.251.172.254
http://156.251.172.31
http://156.251.172.33
http://156.251.172.36
http://156.251.172.39
http://156.251.172.4
http://156.251.172.40
http://156.251.172.42
http://156.251.172.44
http://156.251.172.47
http://156.251.172.49
http://156.251.172.5
http://156.251.172.51
http://156.251.172.57
http://156.251.172.59
http://156.251.172.6
http://156.251.172.60
http://156.251.172.61
http://156.251.172.68
http://156.251.172.73
http://156.251.179.220
http://156.251.189.123
http://156.253.128.40
http://156.253.128.41
http://156.59.28.131
http://157.120.32.81
http://157.230.62.96
http://157.245.62.188
http://157.254.231.168
http://157.7.207.194
http://158.101.11.71
http://158.101.134.168
http://158.101.142.179
http://158.101.150.195
http://158.101.154.201
http://158.101.158.102
http://158.101.158.45
http://158.101.21.105
http://158.101.21.6
http://158.101.28.194
http://158.101.73.208
http://158.180.79.220
http://158.247.193.232
http://158.247.201.111
http://158.247.209.141
http://158.247.216.36
http://158.247.225.209
http://158.247.247.14
http://158.247.253.179
http://158.247.254.79
http://158.247.255.181
http://158.51.124.133
http://159.223.177.220
http://159.89.117.175
http://16.162.167.213
http://16.163.214.7
http://161.117.83.190
http://162.219.121.65
http://162.55.214.124
http://162.62.233.191
http://163.123.245.182
http://163.123.245.249
http://163.123.245.56
http://163.5.79.146
http://164.152.29.228
http://165.154.113.192
http://165.154.113.203
http://165.154.113.225
http://165.154.113.79
http://165.154.119.133
http://165.154.133.28
http://165.154.148.58
http://165.154.161.97
http://165.154.17.223
http://165.154.174.131
http://165.154.183.79
http://165.154.98.101
http://165.3.1.172
http://165.3.127.37
http://166.88.132.23
http://166.88.198.136
http://166.88.198.175
http://166.88.209.111
http://166.88.209.148
http://166.88.35.170
http://166.88.35.188
http://167.179.100.74
http://167.179.110.119
http://167.179.112.61
http://167.179.68.141
http://167.179.73.60
http://167.179.84.68
http://167.179.89.95
http://167.179.91.114
http://167.179.98.133
http://167.235.51.10
http://167.88.177.176
http://167.88.177.203
http://167.88.184.235
http://167.88.185.106
http://167.88.185.86
http://167.88.185.99
http://167.88.186.6
http://168.119.53.115
http://168.119.97.71
http://168.138.182.9
http://168.138.210.134
http://168.138.221.112
http://170.106.150.19
http://170.106.153.97
http://170.106.192.132
http://170.64.136.252
http://170.64.162.23
http://170.64.187.126
http://170.64.191.125
http://171.22.127.175
http://172.104.117.90
http://172.104.166.178
http://172.106.37.177
http://172.232.1.243
http://172.232.13.86
http://172.232.56.122
http://172.245.134.176
http://172.245.154.39
http://172.245.180.232
http://172.245.226.137
http://172.245.228.100
http://172.245.254.110
http://172.245.60.45
http://172.245.94.99
http://172.247.109.102
http://172.82.87.113
http://172.82.87.134
http://172.86.69.9
http://172.93.221.145
http://172.93.32.155
http://172.93.45.218
http://172.96.16.250
http://172.96.195.196
http://172.96.220.48
http://172.96.250.202
http://172.99.174.195
http://173.199.115.170
http://173.199.118.30
http://173.242.113.206
http://173.242.115.103
http://173.242.116.68
http://173.242.120.136
http://173.242.121.207
http://173.249.201.7
http://173.82.108.217
http://173.82.110.101
http://173.82.110.53
http://173.82.131.44
http://173.82.136.228
http://173.82.182.22
http://173.82.182.235
http://173.82.201.202
http://173.82.205.170
http://173.82.206.220
http://173.82.235.249
http://173.82.240.94
http://173.82.241.41
http://173.82.245.172
http://173.82.48.213
http://173.82.50.94
http://173.82.58.214
http://173.82.64.33
http://173.82.95.99
http://174.136.206.117
http://174.136.206.19
http://174.136.206.68
http://174.137.50.59
http://174.137.55.12
http://174.137.55.31
http://174.137.58.28
http://176.122.167.205
http://176.122.188.237
http://176.31.25.193
http://176.31.25.194
http://176.31.25.195
http://176.32.32.106
http://176.58.110.70
http://178.128.18.229
http://178.128.50.152
http://178.157.63.19
http://178.239.197.110
http://178.79.147.65
http://178.79.158.61
http://18.141.228.219
http://18.142.175.203
http://18.142.185.225
http://18.142.68.218
http://18.143.167.184
http://18.143.173.25
http://18.143.63.5
http://18.143.66.183
http://18.162.120.153
http://18.162.130.9
http://18.162.45.35
http://18.163.125.76
http://18.163.16.64
http://18.167.59.45
http://18.169.72.159
http://18.176.185.10
http://18.177.139.220
http://18.182.4.22
http://18.223.241.52
http://180.94.151.7
http://185.106.98.231
http://185.106.98.84
http://185.123.53.45
http://185.143.220.139
http://185.148.15.100
http://185.148.15.210
http://185.148.15.222
http://185.148.15.224
http://185.149.23.143
http://185.166.154.74
http://185.17.3.64
http://185.171.122.107
http://185.179.216.62
http://185.186.146.148
http://185.194.148.205
http://185.207.154.168
http://185.212.63.253
http://185.213.20.54
http://185.213.20.68
http://185.217.109.86
http://185.217.111.107
http://185.217.111.214
http://185.218.4.129
http://185.218.4.134
http://185.221.237.186
http://185.229.222.62
http://185.237.15.118
http://185.238.248.36
http://185.238.249.145
http://185.238.250.235
http://185.239.71.198
http://185.245.41.29
http://185.49.33.21
http://185.72.8.59
http://185.75.240.201
http://185.75.240.205
http://185.75.240.206
http://185.75.240.207
http://185.75.240.208
http://185.78.166.172
http://185.87.49.192
http://185.88.175.30
http://188.130.229.156
http://188.130.229.158
http://188.166.253.10
http://191.96.240.137
http://192.119.106.33
http://192.119.68.104
http://192.119.93.213
http://192.18.135.251
http://192.18.139.215
http://192.18.143.211
http://192.210.137.60
http://192.210.196.30
http://192.210.196.44
http://192.210.197.203
http://192.210.207.215
http://192.227.174.88
http://192.227.231.246
http://192.227.248.221
http://192.236.146.250
http://192.236.146.85
http://192.243.124.200
http://192.243.125.224
http://192.243.125.80
http://192.243.126.142
http://192.248.152.219
http://192.248.159.76
http://192.248.169.82
http://192.248.188.123
http://192.3.11.107
http://192.3.155.168
http://192.3.229.245
http://192.3.248.173
http://192.3.248.251
http://192.3.86.229
http://192.69.89.234
http://192.69.90.26
http://192.69.91.176
http://192.9.130.61
http://192.9.131.121
http://192.9.136.38
http://192.9.250.248
http://193.106.248.34
http://193.110.203.231
http://193.122.102.59
http://193.122.112.8
http://193.122.113.54
http://193.122.114.127
http://193.122.121.220
http://193.122.96.199
http://193.122.99.220
http://193.123.224.152
http://193.123.230.249
http://193.123.251.167
http://193.123.67.31
http://193.124.24.158
http://193.124.24.18
http://193.134.209.130
http://193.134.209.228
http://193.176.153.253
http://193.200.130.242
http://193.200.130.8
http://193.200.17.188
http://193.221.194.143
http://193.247.144.168
http://193.247.144.227
http://193.26.158.247
http://193.32.149.186
http://193.32.150.2
http://193.36.85.211
http://193.37.59.229
http://193.57.57.11
http://193.8.173.153
http://193.9.46.86
http://194.104.146.240
http://194.135.104.200
http://194.146.49.212
http://194.147.86.252
http://194.15.52.83
http://194.29.101.116
http://194.29.101.123
http://194.29.101.130
http://194.36.170.30
http://194.53.136.20
http://194.87.106.39
http://194.87.196.11
http://194.87.68.36
http://194.87.70.152
http://194.9.172.188
http://195.123.225.43
http://195.123.225.46
http://195.242.242.157
http://195.245.241.110
http://195.245.241.41
http://198.105.127.40
http://198.12.116.67
http://198.13.46.246
http://198.13.60.98
http://198.144.183.186
http://198.148.111.112
http://198.148.112.36
http://198.148.124.74
http://198.199.82.62
http://198.211.103.54
http://198.211.36.117
http://198.211.45.49
http://198.23.167.225
http://198.23.196.37
http://198.244.237.128
http://198.244.237.205
http://198.44.168.199
http://198.46.131.18
http://198.46.152.201
http://198.46.172.133
http://198.46.190.138
http://198.46.193.183
http://198.46.215.250
http://198.74.102.152
http://198.74.107.105
http://198.74.107.23
http://198.74.110.92
http://198.74.122.153
http://198.98.56.81
http://199.115.228.91
http://199.15.77.168
http://199.180.114.171
http://199.180.114.216
http://199.180.119.212
http://199.19.105.3
http://199.19.106.197
http://199.19.106.204
http://199.19.108.146
http://199.19.108.172
http://199.193.126.181
http://199.193.127.93
http://199.195.251.42
http://199.195.254.168
http://199.247.11.253
http://199.247.28.95
http://199.247.9.91
http://199.253.28.84
http://199.43.207.144
http://199.43.207.161
http://199.43.207.181
http://199.43.207.193
http://199.43.207.70
http://2.56.119.190
http://2.58.87.220
http://2.59.151.221
http://2.59.182.148
http://20.125.101.152
http://20.125.129.22
http://20.125.136.247
http://20.14.94.179
http://20.168.238.37
http://20.168.51.33
http://20.171.71.68
http://20.189.115.203
http://20.189.120.153
http://20.196.203.183
http://20.196.220.11
http://20.198.223.204
http://20.200.222.108
http://20.210.108.102
http://20.212.155.10
http://20.212.206.228
http://20.212.207.224
http://20.214.184.149
http://20.222.161.144
http://20.222.64.120
http://20.222.84.236
http://20.231.20.230
http://20.232.209.185
http://20.239.87.252
http://20.24.10.131
http://20.243.213.113
http://20.249.1.172
http://20.25.31.22
http://20.38.11.169
http://20.39.192.68
http://20.5.69.69
http://20.59.124.199
http://20.65.101.235
http://20.78.254.125
http://20.89.166.69
http://20.89.99.223
http://202.182.114.155
http://202.5.16.137
http://202.5.28.251
http://202.59.9.244
http://202.59.9.73
http://202.81.229.9
http://202.81.231.66
http://202.81.237.184
http://202.87.223.250
http://203.160.55.121
http://203.20.113.103
http://204.15.73.67
http://204.15.75.16
http://204.44.108.10
http://204.44.108.107
http://204.44.108.108
http://204.44.108.109
http://204.44.108.128
http://204.44.108.131
http://204.44.108.134
http://204.44.108.14
http://204.44.108.147
http://204.44.108.149
http://204.44.108.15
http://204.44.108.151
http://204.44.108.199
http://204.44.108.202
http://204.44.108.205
http://204.44.108.21
http://204.44.108.210
http://204.44.108.237
http://204.44.108.24
http://204.44.108.242
http://204.44.108.248
http://204.44.108.251
http://204.44.108.253
http://204.44.108.27
http://204.44.108.3
http://204.44.108.43
http://204.44.108.70
http://204.44.109.108
http://204.44.68.79
http://204.44.92.228
http://205.185.115.43
http://205.185.123.84
http://206.119.166.105
http://206.119.166.151
http://206.190.233.175
http://206.190.234.107
http://206.190.234.123
http://206.190.238.158
http://206.237.17.163
http://206.237.17.245
http://206.237.18.249
http://206.237.19.243
http://206.237.21.78
http://206.237.24.211
http://207.148.70.71
http://207.148.72.143
http://207.148.96.172
http://207.174.31.195
http://207.174.31.243
http://207.246.103.21
http://207.246.106.113
http://207.246.109.133
http://207.246.110.154
http://207.246.85.133
http://207.246.96.40
http://207.246.97.117
http://207.246.97.66
http://207.246.99.68
http://208.115.225.53
http://208.64.230.199
http://208.72.154.9
http://208.73.43.189
http://208.83.234.103
http://208.83.234.171
http://208.83.234.199
http://208.83.234.23
http://208.83.235.143
http://208.83.235.187
http://208.83.236.129
http://208.83.236.137
http://208.83.236.21
http://208.83.236.223
http://208.83.236.235
http://208.83.236.57
http://208.83.236.75
http://208.83.238.8
http://208.83.239.143
http://208.85.16.81
http://208.87.135.197
http://208.87.201.188
http://209.141.56.5
http://209.146.113.221
http://209.146.113.222
http://209.209.114.124
http://209.209.115.128
http://209.222.30.165
http://209.250.224.141
http://209.250.224.15
http://209.73.129.201
http://212.111.40.167
http://212.111.40.34
http://212.192.12.119
http://212.193.2.186
http://212.237.218.12
http://212.50.247.42
http://212.50.255.80
http://212.71.248.129
http://212.71.254.78
http://212.80.212.188
http://212.80.215.158
http://213.59.120.139
http://216.127.185.33
http://216.127.185.46
http://216.127.186.84
http://216.127.188.193
http://216.128.140.64
http://216.128.150.43
http://216.238.78.187
http://216.24.176.247
http://216.24.179.30
http://216.24.180.236
http://216.24.186.49
http://216.24.187.82
http://216.24.249.226
http://216.240.140.216
http://217.112.80.45
http://217.20.241.100
http://217.20.241.166
http://217.20.241.28
http://217.20.241.46
http://217.69.10.42
http://218.161.40.22
http://218.253.209.43
http://223.165.4.34
http://223.165.6.120
http://223.165.6.123
http://23.105.192.63
http://23.105.198.157
http://23.105.203.159
http://23.105.205.65
http://23.105.208.96
http://23.105.212.144
http://23.105.213.121
http://23.105.213.133
http://23.105.213.213
http://23.105.218.228
http://23.105.219.18
http://23.105.219.32
http://23.106.128.242
http://23.106.143.160
http://23.106.153.167
http://23.106.155.13
http://23.159.160.100
http://23.224.176.82
http://23.224.181.103
http://23.224.22.100
http://23.224.22.149
http://23.224.22.151
http://23.224.22.180
http://23.224.22.193
http://23.224.22.202
http://23.224.22.203
http://23.224.22.38
http://23.224.22.47
http://23.224.22.78
http://23.224.22.91
http://23.224.22.94
http://23.224.22.95
http://23.224.33.248
http://23.224.33.41
http://23.224.33.80
http://23.224.36.143
http://23.224.36.185
http://23.224.36.246
http://23.224.36.28
http://23.224.76.144
http://23.224.95.227
http://23.224.97.126
http://23.224.97.145
http://23.224.97.226
http://23.224.97.230
http://23.224.97.242
http://23.224.97.248
http://23.224.97.31
http://23.224.97.33
http://23.224.97.95
http://23.225.116.215
http://23.225.177.147
http://23.225.177.148
http://23.225.177.179
http://23.225.64.209
http://23.230.181.123
http://23.230.181.182
http://23.230.181.198
http://23.230.181.21
http://23.234.193.203
http://23.234.233.72
http://23.234.240.95
http://23.236.66.120
http://23.236.66.39
http://23.236.67.103
http://23.236.67.139
http://23.236.68.105
http://23.236.68.242
http://23.236.68.62
http://23.236.69.150
http://23.236.69.170
http://23.236.69.176
http://23.236.69.200
http://23.236.69.221
http://23.236.69.232
http://23.236.69.248
http://23.236.69.254
http://23.236.69.27
http://23.239.5.175
http://23.247.130.253
http://23.251.50.218
http://23.251.50.224
http://23.254.161.100
http://23.254.164.219
http://23.254.204.59
http://23.26.34.243
http://23.27.163.115
http://23.27.163.138
http://23.27.163.19
http://23.27.163.200
http://23.27.168.154
http://23.27.168.157
http://23.27.168.85
http://23.27.186.111
http://23.27.186.119
http://23.27.186.187
http://23.27.186.199
http://23.27.186.69
http://23.94.0.19
http://23.94.100.167
http://23.94.105.247
http://23.94.123.242
http://23.94.123.95
http://23.94.198.228
http://23.94.201.162
http://23.94.211.141
http://23.94.211.75
http://23.94.218.112
http://23.94.240.74
http://23.94.48.220
http://23.94.51.70
http://23.94.56.29
http://23.94.57.87
http://23.94.59.224
http://23.94.73.53
http://23.94.73.64
http://23.95.107.113
http://23.95.140.149
http://23.95.164.166
http://23.95.170.153
http://23.95.189.167
http://23.95.192.244
http://23.95.200.94
http://23.95.214.54
http://23.95.242.107
http://23.95.242.112
http://23.95.254.238
http://23.95.254.245
http://23.95.39.18
http://23.95.92.45
http://24.199.117.85
http://24.199.86.251
http://27.109.128.185
http://3.101.80.50
http://3.113.4.160
http://3.115.22.129
http://3.14.69.159
http://3.25.253.251
http://3.34.123.184
http://3.34.123.41
http://3.34.127.43
http://3.34.141.24
http://3.34.196.38
http://3.34.255.128
http://3.34.5.175
http://3.35.135.61
http://3.35.156.225
http://3.35.17.240
http://3.35.207.182
http://3.35.214.108
http://3.35.238.231
http://3.35.55.145
http://3.36.100.5
http://3.36.116.189
http://3.36.121.226
http://3.36.122.23
http://3.36.126.155
http://3.36.57.54
http://3.36.78.93
http://3.38.139.218
http://3.38.181.143
http://3.38.182.123
http://3.38.193.200
http://3.38.24.245
http://3.38.246.121
http://3.38.255.235
http://3.39.234.133
http://3.39.6.29
http://3.68.24.211
http://3.75.214.199
http://3.82.236.94
http://3.85.175.53
http://31.22.108.103
http://31.22.108.164
http://31.22.109.30
http://31.222.200.198
http://34.101.137.141
http://34.102.101.95
http://34.102.110.142
http://34.102.40.233
http://34.106.131.34
http://34.116.85.145
http://34.118.46.184
http://34.124.222.48
http://34.124.223.88
http://34.125.1.123
http://34.125.110.169
http://34.125.138.214
http://34.125.254.158
http://34.125.30.160
http://34.125.55.29
http://34.125.95.109
http://34.126.115.131
http://34.126.180.70
http://34.126.66.71
http://34.128.76.1
http://34.128.76.60
http://34.130.21.207
http://34.133.62.48
http://34.142.172.111
http://34.142.228.59
http://34.142.246.243
http://34.142.64.78
http://34.143.215.204
http://34.146.200.33
http://34.146.8.109
http://34.147.157.7
http://34.150.109.88
http://34.150.124.85
http://34.150.2.75
http://34.150.22.233
http://34.150.26.238
http://34.150.33.135
http://34.150.35.195
http://34.150.46.112
http://34.150.61.4
http://34.150.7.158
http://34.150.84.99
http://34.150.94.4
http://34.150.96.87
http://34.16.141.105
http://34.16.141.62
http://34.16.150.80
http://34.168.47.209
http://34.174.159.59
http://34.18.57.38
http://34.213.145.61
http://34.219.190.139
http://34.22.250.31
http://34.28.41.196
http://34.29.206.156
http://34.64.164.16
http://34.80.108.125
http://34.80.157.100
http://34.80.20.232
http://34.80.39.23
http://34.80.45.181
http://34.81.136.193
http://34.81.228.31
http://34.81.246.41
http://34.81.48.208
http://34.81.57.183
http://34.84.178.96
http://34.84.211.207
http://34.84.27.224
http://34.85.112.92
http://34.87.142.209
http://34.87.145.142
http://34.87.171.141
http://34.87.189.103
http://34.87.35.153
http://34.87.88.21
http://34.89.208.153
http://34.90.33.202
http://34.91.231.143
http://34.92.0.198
http://34.92.119.244
http://34.92.121.123
http://34.92.125.198
http://34.92.13.39
http://34.92.131.127
http://34.92.140.11
http://34.92.16.249
http://34.92.175.168
http://34.92.177.179
http://34.92.180.13
http://34.92.182.43
http://34.92.195.168
http://34.92.197.68
http://34.92.225.97
http://34.92.226.195
http://34.92.230.103
http://34.92.233.209
http://34.92.249.125
http://34.92.38.87
http://34.92.43.132
http://34.92.56.37
http://34.92.74.71
http://34.92.94.17
http://34.94.164.137
http://34.94.95.249
http://34.96.134.8
http://34.96.151.50
http://34.96.154.167
http://34.96.169.125
http://34.96.204.98
http://34.96.207.20
http://34.96.209.20
http://34.96.224.243
http://34.96.233.134
http://34.96.247.39
http://34.97.102.133
http://34.97.15.96
http://34.97.164.231
http://34.97.165.80
http://34.97.17.183
http://34.97.192.31
http://34.97.27.204
http://34.97.54.177
http://34.97.56.181
http://34.97.62.214
http://35.185.170.234
http://35.186.157.171
http://35.187.198.10
http://35.189.174.17
http://35.190.230.84
http://35.194.147.147
http://35.194.176.152
http://35.194.211.155
http://35.194.254.100
http://35.200.89.146
http://35.201.189.252
http://35.206.206.178
http://35.215.137.131
http://35.215.147.76
http://35.215.161.61
http://35.215.69.212
http://35.215.74.134
http://35.220.145.113
http://35.220.160.234
http://35.220.162.141
http://35.220.163.188
http://35.220.170.56
http://35.220.182.116
http://35.220.189.233
http://35.220.210.172
http://35.220.220.246
http://35.220.221.172
http://35.220.228.243
http://35.220.229.181
http://35.221.135.61
http://35.221.168.176
http://35.221.171.78
http://35.221.191.127
http://35.221.88.96
http://35.229.185.179
http://35.229.196.234
http://35.229.211.125
http://35.234.16.164
http://35.234.40.134
http://35.235.69.212
http://35.235.70.173
http://35.235.71.17
http://35.236.143.247
http://35.236.174.242
http://35.236.95.97
http://35.239.164.138
http://35.240.148.153
http://35.240.198.155
http://35.240.199.157
http://35.241.107.206
http://35.241.118.226
http://35.241.70.187
http://35.241.73.129
http://35.241.81.141
http://35.241.82.42
http://35.241.85.52
http://35.247.136.210
http://35.247.153.94
http://35.78.249.86
http://35.79.140.233
http://35.79.71.2
http://35.91.131.209
http://37.123.192.238
http://37.123.194.104
http://37.123.194.181
http://38.102.232.17
http://38.102.232.233
http://38.102.233.68
http://38.102.234.196
http://38.102.234.75
http://38.102.235.151
http://38.102.235.95
http://38.105.24.186
http://38.147.163.158
http://38.147.170.139
http://38.147.170.173
http://38.147.170.208
http://38.147.170.218
http://38.147.170.253
http://38.147.171.17
http://38.147.171.251
http://38.147.172.144
http://38.147.172.208
http://38.147.172.227
http://38.147.173.218
http://38.147.173.63
http://38.147.173.80
http://38.147.173.85
http://38.147.173.87
http://38.147.173.91
http://38.147.173.94
http://38.148.254.100
http://38.150.4.100
http://38.150.4.137
http://38.150.5.215
http://38.150.5.49
http://38.150.5.51
http://38.181.73.158
http://38.207.176.49
http://38.47.101.150
http://38.47.102.246
http://38.47.111.36
http://38.47.112.111
http://38.47.112.85
http://38.47.114.177
http://38.47.117.27
http://38.47.118.79
http://38.47.122.199
http://38.47.125.141
http://38.47.125.184
http://38.47.126.224
http://38.47.227.42
http://38.47.239.103
http://38.47.97.183
http://38.47.98.71
http://38.54.1.36
http://38.54.101.47
http://38.54.104.6
http://38.54.108.114
http://38.54.110.119
http://38.54.112.185
http://38.54.112.234
http://38.54.114.115
http://38.54.114.83
http://38.54.117.44
http://38.54.118.234
http://38.54.125.160
http://38.54.125.25
http://38.54.125.51
http://38.54.125.59
http://38.54.125.71
http://38.54.14.184
http://38.54.14.95
http://38.54.16.76
http://38.54.17.240
http://38.54.32.12
http://38.54.32.124
http://38.54.32.241
http://38.54.32.25
http://38.54.32.71
http://38.54.37.170
http://38.54.37.228
http://38.54.37.59
http://38.54.38.184
http://38.54.45.228
http://38.54.80.115
http://38.54.80.133
http://38.54.81.244
http://38.54.81.41
http://38.54.82.3
http://38.54.82.71
http://38.54.86.122
http://38.54.86.169
http://38.54.95.10
http://38.54.97.114
http://38.55.104.43
http://38.55.106.24
http://38.55.96.244
http://38.59.224.102
http://38.59.224.43
http://38.59.224.53
http://38.59.225.105
http://38.59.226.220
http://38.59.228.176
http://38.59.228.191
http://38.59.240.108
http://38.59.240.131
http://38.59.240.133
http://38.59.240.156
http://38.59.240.157
http://38.59.240.164
http://38.59.240.17
http://38.59.240.225
http://38.59.240.230
http://38.59.240.231
http://38.59.240.234
http://38.59.240.235
http://38.59.240.242
http://38.59.240.245
http://38.59.240.252
http://38.59.240.253
http://38.59.240.34
http://38.59.240.41
http://38.59.240.79
http://38.59.240.99
http://38.59.241.116
http://38.59.241.139
http://38.59.241.219
http://38.59.241.252
http://38.59.241.54
http://38.59.242.112
http://38.59.242.155
http://38.59.242.19
http://38.59.242.2
http://38.59.242.90
http://38.59.242.95
http://38.59.243.10
http://38.59.243.119
http://38.59.243.131
http://38.59.243.189
http://38.59.243.205
http://38.59.243.23
http://38.59.243.239
http://38.59.243.32
http://38.59.243.34
http://38.59.243.42
http://38.59.243.45
http://38.59.243.49
http://38.59.243.71
http://38.59.244.4
http://38.59.245.101
http://38.59.245.104
http://38.59.245.105
http://38.59.245.106
http://38.59.245.114
http://38.59.245.167
http://38.59.245.185
http://38.59.246.53
http://38.59.249.108
http://38.59.249.110
http://38.59.249.113
http://38.59.249.114
http://38.59.249.16
http://38.59.249.190
http://38.59.249.191
http://38.59.249.193
http://38.59.249.22
http://38.59.249.222
http://38.59.249.23
http://38.59.249.24
http://38.59.249.251
http://38.59.249.27
http://38.59.249.28
http://38.59.249.29
http://38.59.249.30
http://38.59.249.31
http://38.59.249.32
http://38.59.249.33
http://38.59.249.37
http://38.59.249.39
http://38.59.249.41
http://38.59.249.42
http://38.59.249.44
http://38.59.249.48
http://38.59.249.49
http://38.59.249.50
http://38.59.249.52
http://38.59.249.85
http://38.59.249.95
http://38.60.171.244
http://38.60.171.246
http://38.60.191.161
http://38.60.191.73
http://38.60.192.25
http://38.60.193.173
http://38.60.194.159
http://38.60.194.30
http://38.60.195.226
http://38.60.195.231
http://38.60.195.44
http://38.60.195.45
http://38.60.199.12
http://38.60.199.61
http://38.60.200.155
http://38.60.200.199
http://38.60.203.128
http://38.60.210.165
http://38.60.218.125
http://38.60.245.100
http://38.60.246.188
http://38.60.251.186
http://38.60.254.225
http://38.95.232.132
http://38.95.232.220
http://38.95.232.244
http://4.155.83.33
http://4.216.43.181
http://4.216.72.195
http://4.230.32.8
http://40.115.210.18
http://40.115.211.226
http://40.74.116.233
http://41.216.177.18
http://43.128.108.94
http://43.128.15.43
http://43.128.211.94
http://43.128.59.95
http://43.128.87.70
http://43.129.17.199
http://43.129.243.14
http://43.129.90.41
http://43.130.250.168
http://43.131.240.250
http://43.131.247.34
http://43.132.167.77
http://43.132.229.99
http://43.132.246.252
http://43.133.32.183
http://43.133.42.156
http://43.133.60.124
http://43.133.72.76
http://43.133.76.34
http://43.133.81.207
http://43.134.103.4
http://43.134.103.99
http://43.134.169.251
http://43.134.174.75
http://43.134.190.100
http://43.134.209.34
http://43.134.228.13
http://43.134.236.214
http://43.134.238.14
http://43.134.238.47
http://43.134.42.139
http://43.134.59.25
http://43.135.148.149
http://43.135.156.82
http://43.135.160.90
http://43.153.14.209
http://43.153.179.45
http://43.153.181.197
http://43.153.182.190
http://43.153.186.125
http://43.153.211.87
http://43.153.226.139
http://43.153.25.171
http://43.153.4.168
http://43.153.47.103
http://43.153.50.211
http://43.153.58.208
http://43.153.74.131
http://43.154.104.90
http://43.154.109.22
http://43.154.132.248
http://43.154.139.228
http://43.154.149.90
http://43.154.160.114
http://43.154.188.98
http://43.154.192.200
http://43.154.198.81
http://43.154.202.225
http://43.154.205.50
http://43.154.207.112
http://43.154.207.220
http://43.154.207.234
http://43.154.209.121
http://43.154.209.35
http://43.154.214.195
http://43.154.249.117
http://43.154.36.232
http://43.154.47.251
http://43.154.53.166
http://43.154.57.180
http://43.154.63.174
http://43.154.64.217
http://43.154.67.187
http://43.154.69.135
http://43.154.71.2
http://43.154.71.203
http://43.154.72.168
http://43.154.77.214
http://43.154.78.179
http://43.154.92.185
http://43.154.95.80
http://43.154.96.229
http://43.155.11.180
http://43.155.117.226
http://43.155.137.160
http://43.155.138.254
http://43.155.165.58
http://43.155.171.173
http://43.155.185.136
http://43.155.185.225
http://43.155.64.28
http://43.155.74.24
http://43.155.77.228
http://43.155.80.11
http://43.155.83.150
http://43.155.85.202
http://43.155.93.129
http://43.156.0.108
http://43.156.105.113
http://43.156.13.138
http://43.156.227.114
http://43.156.227.19
http://43.156.228.32
http://43.156.26.31
http://43.156.29.14
http://43.156.30.41
http://43.156.31.149
http://43.156.32.87
http://43.156.36.122
http://43.156.38.182
http://43.156.41.26
http://43.156.54.54
http://43.156.6.199
http://43.156.64.110
http://43.156.7.8
http://43.158.220.127
http://43.159.40.211
http://43.159.50.2
http://43.163.198.51
http://43.163.201.243
http://43.163.205.62
http://43.163.213.7
http://43.163.218.112
http://43.163.223.199
http://43.163.229.176
http://43.163.239.212
http://43.198.151.94
http://43.198.182.90
http://43.200.170.62
http://43.200.6.99
http://43.201.100.197
http://43.201.149.154
http://43.201.19.161
http://43.201.247.9
http://43.201.50.250
http://43.201.54.237
http://43.201.58.228
http://43.201.58.72
http://43.201.59.225
http://43.201.6.200
http://43.201.64.14
http://43.201.64.244
http://43.201.88.150
http://43.202.33.11
http://43.202.33.57
http://43.202.4.242
http://43.202.46.50
http://43.202.54.210
http://43.202.59.99
http://43.206.200.109
http://43.229.148.26
http://43.254.216.224
http://44.241.89.132
http://45.11.0.30
http://45.11.3.159
http://45.11.46.10
http://45.11.46.122
http://45.11.46.226
http://45.11.46.28
http://45.11.46.78
http://45.11.46.85
http://45.121.50.54
http://45.121.50.72
http://45.124.64.49
http://45.125.35.36
http://45.129.10.250
http://45.129.11.76
http://45.130.146.30
http://45.130.22.59
http://45.134.82.52
http://45.135.117.165
http://45.135.117.246
http://45.136.14.154
http://45.136.14.228
http://45.136.15.115
http://45.136.15.159
http://45.136.15.239
http://45.136.15.243
http://45.136.15.94
http://45.136.186.46
http://45.136.245.93
http://45.137.97.4
http://45.138.71.5
http://45.14.105.3
http://45.14.106.67
http://45.14.107.7
http://45.14.64.51
http://45.14.65.228
http://45.140.88.115
http://45.140.88.147
http://45.141.139.177
http://45.142.202.64
http://45.144.136.179
http://45.144.136.24
http://45.144.136.84
http://45.144.176.7
http://45.144.178.192
http://45.144.179.42
http://45.144.28.250
http://45.144.3.200
http://45.145.229.169
http://45.145.229.170
http://45.145.229.177
http://45.145.229.181
http://45.145.229.195
http://45.145.229.242
http://45.145.229.86
http://45.145.240.104
http://45.145.75.203
http://45.146.123.215
http://45.146.223.60
http://45.146.6.242
http://45.146.82.135
http://45.147.200.22
http://45.148.134.147
http://45.149.187.252
http://45.15.124.110
http://45.15.170.142
http://45.152.64.217
http://45.152.64.36
http://45.152.65.137
http://45.152.65.210
http://45.152.65.217
http://45.152.66.68
http://45.152.66.80
http://45.152.66.81
http://45.152.66.83
http://45.152.66.99
http://45.153.201.44
http://45.154.13.135
http://45.156.146.15
http://45.159.49.57
http://45.159.51.114
http://45.159.51.146
http://45.194.17.85
http://45.195.246.51
http://45.195.69.153
http://45.195.69.211
http://45.195.76.198
http://45.195.76.40
http://45.205.3.101
http://45.205.3.102
http://45.205.3.103
http://45.205.3.108
http://45.205.3.109
http://45.205.3.110
http://45.205.3.111
http://45.205.3.112
http://45.205.3.113
http://45.205.3.114
http://45.205.3.115
http://45.205.3.121
http://45.205.3.70
http://45.205.3.72
http://45.205.3.73
http://45.205.3.79
http://45.205.3.81
http://45.205.64.45
http://45.206.0.16
http://45.207.11.26
http://45.207.245.11
http://45.207.245.123
http://45.207.245.154
http://45.207.245.250
http://45.207.245.52
http://45.207.38.190
http://45.249.90.51
http://45.251.240.21
http://45.251.240.87
http://45.32.119.104
http://45.32.121.38
http://45.32.124.177
http://45.32.129.63
http://45.32.14.249
http://45.32.150.67
http://45.32.180.221
http://45.32.226.189
http://45.32.228.9
http://45.32.229.130
http://45.32.23.129
http://45.32.230.241
http://45.32.251.207
http://45.32.45.65
http://45.32.50.160
http://45.32.63.215
http://45.32.67.152
http://45.32.68.194
http://45.32.71.29
http://45.32.71.40
http://45.32.73.96
http://45.32.80.194
http://45.32.82.87
http://45.32.83.67
http://45.32.88.134
http://45.32.89.20
http://45.32.89.64
http://45.32.89.95
http://45.32.90.77
http://45.32.95.228
http://45.38.70.79
http://45.42.200.101
http://45.42.200.145
http://45.42.200.149
http://45.42.200.172
http://45.42.200.204
http://45.42.200.206
http://45.42.200.225
http://45.42.200.231
http://45.42.200.235
http://45.42.200.248
http://45.42.200.25
http://45.42.200.32
http://45.42.200.51
http://45.42.200.65
http://45.42.200.66
http://45.42.200.8
http://45.42.200.81
http://45.45.177.180
http://45.59.184.17
http://45.59.184.4
http://45.59.186.139
http://45.59.186.174
http://45.59.186.9
http://45.61.185.34
http://45.63.100.118
http://45.63.115.155
http://45.63.23.178
http://45.63.37.3
http://45.63.50.192
http://45.63.57.30
http://45.63.59.245
http://45.63.6.237
http://45.63.86.44
http://45.63.90.178
http://45.76.106.7
http://45.76.12.137
http://45.76.139.26
http://45.76.15.41
http://45.76.166.91
http://45.76.169.207
http://45.76.170.226
http://45.76.174.198
http://45.76.176.195
http://45.76.181.99
http://45.76.189.175
http://45.76.197.17
http://45.76.2.84
http://45.76.208.101
http://45.76.218.225
http://45.76.245.65
http://45.76.249.70
http://45.76.64.228
http://45.76.66.64
http://45.76.70.169
http://45.76.70.37
http://45.76.75.109
http://45.76.79.192
http://45.76.79.85
http://45.77.103.58
http://45.77.123.64
http://45.77.124.17
http://45.77.127.119
http://45.77.129.162
http://45.77.149.63
http://45.77.190.211
http://45.77.190.214
http://45.77.197.62
http://45.77.208.35
http://45.77.220.249
http://45.77.227.243
http://45.77.254.66
http://45.77.255.243
http://45.77.32.80
http://45.77.58.105
http://45.77.69.213
http://45.77.71.201
http://45.77.91.185
http://45.77.93.40
http://45.77.98.43
http://45.78.13.69
http://45.78.19.5
http://45.78.22.66
http://45.78.28.108
http://45.78.30.90
http://45.78.52.242
http://45.78.54.219
http://45.78.56.74
http://45.79.79.81
http://45.79.97.174
http://45.8.158.165
http://45.8.205.127
http://45.82.79.195
http://45.89.106.132
http://45.89.106.217
http://45.89.229.171
http://45.90.140.170
http://45.91.133.107
http://45.91.249.101
http://45.91.249.104
http://45.91.82.52
http://45.92.124.168
http://45.92.127.33
http://45.93.28.43
http://45.93.30.117
http://45.95.185.126
http://45.95.185.252
http://45.95.187.107
http://45.95.187.148
http://45.95.187.202
http://45.95.187.21
http://45.95.187.210
http://45.95.187.211
http://45.95.187.212
http://45.95.187.214
http://45.95.187.228
http://45.95.232.84
http://46.29.166.70
http://47.236.23.49
http://47.236.29.127
http://47.240.46.165
http://47.240.72.26
http://47.240.93.32
http://47.241.1.50
http://47.241.117.135
http://47.241.118.36
http://47.241.123.15
http://47.241.167.114
http://47.241.185.159
http://47.241.217.137
http://47.241.252.7
http://47.241.3.172
http://47.241.38.140
http://47.241.40.32
http://47.241.45.135
http://47.241.6.157
http://47.241.90.6
http://47.242.1.107
http://47.242.124.92
http://47.242.125.200
http://47.242.144.162
http://47.242.19.103
http://47.242.19.178
http://47.242.202.250
http://47.242.22.237
http://47.242.224.170
http://47.242.235.95
http://47.242.63.239
http://47.242.74.113
http://47.242.84.227
http://47.243.126.193
http://47.243.135.42
http://47.243.163.5
http://47.243.171.69
http://47.243.171.90
http://47.243.187.62
http://47.243.204.77
http://47.243.34.216
http://47.243.86.251
http://47.243.9.115
http://47.244.254.100
http://47.245.115.245
http://47.245.116.110
http://47.245.15.73
http://47.252.40.156
http://47.253.35.167
http://47.254.201.14
http://47.254.33.47
http://47.57.143.49
http://47.74.10.186
http://47.87.133.156
http://47.87.133.173
http://47.87.141.181
http://47.87.145.254
http://47.87.147.19
http://47.87.200.181
http://47.87.200.43
http://47.88.102.116
http://47.88.238.238
http://47.90.189.105
http://47.91.105.13
http://47.91.25.203
http://49.51.102.9
http://49.51.205.50
http://5.161.132.152
http://5.180.32.246
http://5.188.183.104
http://5.188.238.130
http://5.253.36.207
http://5.255.107.102
http://5.44.251.207
http://5.44.251.26
http://5.44.251.34
http://5.75.192.158
http://5.75.194.134
http://5.75.200.155
http://50.114.56.182
http://50.118.138.147
http://50.118.138.236
http://50.118.138.70
http://51.68.53.67
http://51.77.91.144
http://51.77.91.153
http://52.185.188.1
http://52.192.20.100
http://52.195.160.2
http://52.195.194.36
http://52.221.219.141
http://52.221.230.9
http://52.221.236.229
http://52.221.240.157
http://52.37.138.207
http://52.40.37.150
http://52.76.152.36
http://52.78.135.232
http://52.78.135.247
http://52.78.157.138
http://52.78.190.249
http://52.78.236.235
http://52.78.24.150
http://52.78.38.156
http://52.78.85.196
http://52.79.215.95
http://52.79.241.13
http://52.79.247.57
http://54.151.219.117
http://54.169.113.115
http://54.169.7.127
http://54.175.241.142
http://54.176.164.234
http://54.178.124.109
http://54.180.127.241
http://54.180.131.161
http://54.180.136.109
http://54.180.136.20
http://54.180.138.98
http://54.183.123.116
http://54.183.228.35
http://54.189.150.219
http://54.215.92.63
http://54.238.163.232
http://54.248.184.181
http://54.250.145.206
http://54.250.169.208
http://54.254.206.98
http://54.255.209.72
http://54.64.162.251
http://54.95.45.214
http://60.246.67.150
http://60.249.20.182
http://61.238.103.155
http://61.4.102.228
http://62.204.58.72
http://62.210.114.183
http://62.216.73.171
http://62.3.15.189
http://62.76.224.72
http://63.135.162.102
http://63.135.162.123
http://64.110.106.112
http://64.112.42.166
http://64.112.42.54
http://64.176.164.203
http://64.176.165.8
http://64.176.166.199
http://64.176.169.210
http://64.176.189.252
http://64.176.190.130
http://64.176.192.232
http://64.176.35.250
http://64.176.36.124
http://64.176.36.242
http://64.176.43.193
http://64.176.49.155
http://64.176.49.182
http://64.176.49.221
http://64.227.110.177
http://64.27.20.209
http://64.27.30.206
http://64.27.30.68
http://64.31.53.15
http://64.31.53.25
http://64.31.53.9
http://64.44.167.36
http://64.44.185.244
http://64.64.226.138
http://64.64.230.194
http://64.64.232.154
http://64.64.232.186
http://64.64.232.200
http://64.64.233.120
http://64.64.233.133
http://64.64.239.167
http://64.64.252.60
http://64.64.254.188
http://64.64.255.163
http://64.64.255.78
http://65.109.190.2
http://65.109.197.243
http://65.109.219.152
http://65.20.84.63
http://65.49.196.178
http://65.49.196.84
http://65.49.197.140
http://65.49.199.58
http://65.49.200.143
http://65.49.200.72
http://65.49.202.15
http://65.49.203.236
http://65.49.204.122
http://65.49.208.86
http://65.49.209.25
http://65.49.212.67
http://65.49.212.88
http://65.49.213.43
http://65.49.215.229
http://65.49.219.66
http://65.49.221.196
http://65.49.222.128
http://65.49.223.41
http://65.49.236.62
http://65.75.220.234
http://66.112.216.192
http://66.112.218.154
http://66.112.219.11
http://66.112.219.111
http://66.112.221.236
http://66.112.223.150
http://66.135.0.66
http://66.135.10.53
http://66.135.19.112
http://66.135.26.86
http://66.135.27.130
http://66.135.28.123
http://66.135.31.102
http://66.135.4.221
http://66.135.9.230
http://66.152.169.17
http://66.152.181.51
http://66.154.106.153
http://66.154.106.203
http://66.154.106.216
http://66.154.106.60
http://66.154.106.75
http://66.42.100.161
http://66.42.101.30
http://66.42.104.140
http://66.42.107.38
http://66.42.110.52
http://66.42.126.104
http://66.42.64.140
http://66.42.67.71
http://66.42.71.93
http://66.42.75.74
http://66.42.99.78
http://66.55.159.68
http://66.70.133.240
http://66.98.123.79
http://67.21.84.10
http://67.216.195.208
http://67.216.208.195
http://67.218.138.199
http://67.218.149.57
http://67.230.162.146
http://67.230.163.102
http://67.230.163.185
http://67.230.171.121
http://67.230.173.233
http://67.230.174.103
http://67.230.174.165
http://68.168.136.164
http://68.170.2.253
http://68.183.120.54
http://68.183.29.167
http://69.165.74.86
http://69.165.78.172
http://69.30.237.100
http://69.55.49.172
http://70.34.200.152
http://72.18.83.122
http://72.18.83.28
http://72.44.69.104
http://72.44.69.78
http://72.44.69.96
http://72.44.77.154
http://74.120.170.23
http://74.120.171.154
http://74.120.171.73
http://74.120.171.81
http://74.120.173.138
http://74.121.150.71
http://74.201.30.4
http://74.201.31.7
http://74.208.107.26
http://74.208.54.93
http://74.211.100.215
http://74.211.107.129
http://74.211.96.171
http://74.211.96.84
http://74.235.203.197
http://74.50.80.152
http://74.63.194.158
http://74.82.209.35
http://75.127.13.123
http://78.141.193.132
http://78.141.196.44
http://78.141.203.241
http://78.141.205.185
http://78.141.207.132
http://78.141.232.70
http://78.141.234.94
http://78.141.237.115
http://8.208.33.45
http://8.208.8.171
http://8.209.244.89
http://8.210.108.6
http://8.210.110.61
http://8.210.111.10
http://8.210.145.111
http://8.210.164.208
http://8.210.193.241
http://8.210.196.169
http://8.210.245.107
http://8.210.43.55
http://8.210.48.86
http://8.210.57.140
http://8.210.81.231
http://8.210.96.5
http://8.212.168.42
http://8.213.132.108
http://8.214.10.84
http://8.214.124.96
http://8.214.158.10
http://8.214.176.191
http://8.214.176.194
http://8.214.177.240
http://8.214.177.254
http://8.214.178.192
http://8.214.183.140
http://8.214.19.130
http://8.214.22.219
http://8.214.55.148
http://8.214.56.184
http://8.214.61.117
http://8.214.69.121
http://8.214.70.4
http://8.214.72.13
http://8.214.95.47
http://8.217.122.16
http://8.217.31.196
http://8.217.4.227
http://8.217.91.105
http://8.218.119.63
http://8.218.124.11
http://8.218.136.176
http://8.218.177.6
http://8.218.230.34
http://8.218.237.189
http://8.218.239.217
http://8.218.39.42
http://8.218.53.136
http://8.219.121.90
http://8.219.126.25
http://8.219.134.231
http://8.219.143.19
http://8.219.184.59
http://8.219.190.113
http://8.219.191.119
http://8.219.191.214
http://8.219.217.1
http://8.219.217.11
http://8.219.222.10
http://8.219.234.28
http://8.219.244.86
http://8.219.251.116
http://8.219.55.188
http://8.219.58.44
http://8.219.6.158
http://8.219.88.119
http://8.219.94.139
http://8.222.132.145
http://8.222.134.92
http://8.222.137.65
http://8.222.139.190
http://8.222.141.218
http://8.222.142.78
http://8.222.143.120
http://8.222.144.235
http://8.222.164.135
http://8.222.170.210
http://8.222.176.156
http://8.222.179.96
http://8.222.182.104
http://8.222.185.116
http://8.222.186.12
http://8.222.188.102
http://8.222.189.212
http://8.222.214.132
http://8.222.255.46
http://80.240.22.239
http://80.251.211.152
http://80.251.212.113
http://80.251.212.188
http://80.251.215.194
http://80.251.216.186
http://80.251.217.137
http://80.251.222.241
http://80.77.23.87
http://80.85.86.158
http://81.168.123.11
http://81.168.123.121
http://81.168.123.125
http://81.168.123.126
http://81.168.123.47
http://81.168.123.51
http://81.168.123.55
http://81.168.123.69
http://82.115.18.18
http://83.143.118.15
http://83.143.118.16
http://83.143.118.191
http://83.143.118.204
http://83.143.118.242
http://83.229.3.106
http://84.252.94.90
http://85.113.70.111
http://85.113.70.213
http://85.117.235.165
http://85.208.117.88
http://85.234.130.195
http://85.234.131.74
http://85.239.55.194
http://86.104.39.164
http://86.38.4.61
http://87.254.31.110
http://87.254.31.118
http://87.254.31.149
http://87.254.31.156
http://87.254.31.16
http://87.254.31.191
http://87.254.31.193
http://87.254.31.199
http://87.254.31.215
http://87.254.31.223
http://87.254.31.226
http://87.254.31.234
http://87.254.31.248
http://87.254.31.41
http://87.254.31.67
http://87.254.31.78
http://87.254.31.96
http://87.254.31.97
http://88.198.120.148
http://88.80.185.100
http://88.99.177.163
http://89.117.67.149
http://89.117.89.29
http://89.163.131.126
http://89.208.244.33
http://89.208.246.28
http://89.208.247.156
http://89.208.250.123
http://89.208.251.246
http://89.208.252.233
http://89.208.255.114
http://89.208.255.236
http://89.208.255.88
http://89.233.104.143
http://91.107.132.46
http://91.107.139.132
http://91.107.147.76
http://91.107.177.32
http://91.107.183.18
http://91.107.249.187
http://91.149.239.201
http://91.149.239.45
http://91.199.82.82
http://91.205.228.11
http://91.205.228.113
http://91.205.228.117
http://91.205.228.127
http://91.205.228.33
http://91.205.228.34
http://91.205.228.43
http://91.205.228.52
http://91.205.228.53
http://91.205.228.6
http://91.205.228.62
http://91.205.228.74
http://91.205.228.75
http://91.205.228.79
http://91.205.228.8
http://91.205.228.9
http://91.205.228.97
http://91.205.228.98
http://91.216.169.140
http://91.217.139.23
http://91.217.139.67
http://91.229.132.221
http://92.118.230.131
http://92.118.238.108
http://92.38.178.65
http://94.131.114.79
http://94.74.64.124
http://95.154.223.15
http://95.169.25.66
http://95.169.29.75
http://95.179.143.31
http://95.179.209.5
http://95.179.219.34
http://95.179.229.198
http://95.179.232.228
http://95.217.222.33
http://96.43.86.70
http://96.43.88.12
http://96.43.92.12
http://96.43.94.85
http://96.8.120.44
http://97.74.84.175
http://98.142.138.252
http://98.142.141.112
http://98.159.100.176
http://98.98.199.34

# Reference: https://www.virustotal.com/gui/file/59b81664fbf818564891b3712c3863a154748c06c00aaa78f60405df5dcac3ff/detection
# Reference: https://www.virustotal.com/gui/file/709a93331d857c1b4ada66f69cdc1a202c919b6ac5ac45f17324734e46cd1e3c/detection

105.99.70.93:1221
197.204.88.194:1221
islem456.ddns.net

# Reference: https://www.virustotal.com/gui/file/480ba0918d48b089de48eecf62df81f95cc0a6dd558b5daaa4f3f8507245d247/detection

91.207.183.244:2134
o2134.sells-it.net

# Reference: https://www.virustotal.com/gui/file/ddecbe277c85a2433ae9eac31b34957507fbf706135eaf354f9bf8c39fb6ca1f/detection
# Reference: https://www.virustotal.com/gui/file/836925d4155549d3b269cc193d38f829a37924affcdc9b6ccaa1285e7015895e/detection

170.245.236.174:2222
170.245.236.212:2222
rio-ap.ddns.net

# Reference: https://www.virustotal.com/gui/file/78c9c20aba788db16987d76d0d0f3449811798181c53fa329320b7ebe540e03f/detection

88.229.76.29:1177
crax31.ddns.net

# Reference: https://twitter.com/ReBensk/status/1696207430030393749
# Reference: https://www.virustotal.com/gui/ip-address/137.220.135.71/relations

http://137.220.135.71
amazonapp.space
mitaoapp.space

# Reference: https://www.virustotal.com/gui/file/67782a21729ecec1cfc83e966abe3a3be9cb300afaea7995d2176d17e61f9208/detection

194.147.140.157:7788
churchgateway.club
fredrchmn.duckdns.org
kingship.duia.us

# Reference: https://twitter.com/ReBensk/status/1699838655970603371
# Reference: https://www.virustotal.com/gui/ip-address/203.161.60.169/relations
# Reference: https://www.virustotal.com/gui/file/bc9d27bd0b860ef003412a908200624ef8e95d7ce353e7fb5e956b5ec56923c4/detection
# Reference: https://www.virustotal.com/gui/file/cf3f8aaa49129b1b2df6f40a842921245d9754b02b423ed89e0a8aebc127fc3e/detection
# Reference: https://www.virustotal.com/gui/file/cf3f8aaa49129b1b2df6f40a842921245d9754b02b423ed89e0a8aebc127fc3e/detection

45.63.119.52:7771
signalscrypto.online
flxnet0.ddns.net

# Reference: https://www.virustotal.com/gui/file/179eaaba880bb5b8371e2826aef9975f8f94df75f3d384fe581b0a296b943094/detection

185.247.137.28:7771
server.aztecvds.com

# Reference: https://threatfox.abuse.ch/browse/malware/apk.spynote/ (# 2023-09-18)

107.148.37.120:7772
107.148.37.15:7772
107.148.37.180:7772
107.148.37.181:7772
107.148.37.182:7772
107.148.37.21:7772
107.148.37.234:7771
107.148.37.236:7771
107.148.37.237:7771
3.68.56.232:13042
8.219.143.100:7771
92.99.132.144:7771

# Reference: https://twitter.com/ReBensk/status/1704156709378195679
# Reference: https://www.virustotal.com/gui/file/00d02a099cf575ba1024e1518a32dfd5453f5e0453328d06ef154faf17a59287/detection
# Reference: https://www.virustotal.com/gui/file/02efbb1c7a643e7ea8869dc8bb7e7cbda24b4c53488b8e02020ec4ab64a4203e/detection
# Reference: https://www.virustotal.com/gui/file/0421a0345fe060891d073583b2c9dcf31ffc4f1ff84bf0bf2530a977ab7bbb34/detection
# Reference: https://www.virustotal.com/gui/file/059b5f74e053c2966775157cd521580fcfaa3b1a7613560b8f499dbd9c11d4b4/detection
# Reference: https://www.virustotal.com/gui/file/059b5f74e053c2966775157cd521580fcfaa3b1a7613560b8f499dbd9c11d4b4/detection
# Reference: https://www.virustotal.com/gui/file/0779943273e6e915777c64f5125e22b815506464a4c0b89ad4f159e670ccd31e/detection
# Reference: https://www.virustotal.com/gui/file/0779943273e6e915777c64f5125e22b815506464a4c0b89ad4f159e670ccd31e/detection
# Reference: https://www.virustotal.com/gui/file/09269080943a07630000c46176ab4c48a83878c6242e4fb53002ae0a58ef95a0/detection

18.228.115.60:26109
18.229.146.63:26109
18.229.248.167:21127
18.231.93.153:13152
18.231.93.153:15297
18.231.93.153:17040
18.231.93.153:20397
18.231.93.153:20878
18.231.93.153:26109
18.231.93.153:21127
playstoreapp.com.br

# Reference: https://www.virustotal.com/gui/file/04666ac4558f06ab9e8c82007d327807b11b827eb2bf17f57121539b11863658/detection

46.246.12.24:8002
macarenaglobalteg.duckdns.org

# Reference: https://www.virustotal.com/gui/file/bc783616b4ecdd4d976cd1f3a4176cd1ce65bc9a1d0255b305dbc6726ad784b4/detection

141.255.150.4:1177
scorpion2020.hopto.org

# Reference: https://www.virustotal.com/gui/file/7ff0deb829139251047fd63c9e558c4876485fe262c69fc344588d67c6a0e612/detection

18.142.164.195:3015
zhuhryh.xyz

# Reference: https://www.virustotal.com/gui/file/5f4be8e9a1c62db7acd9b0c8dd339ac47d6c57b36693596dd395237ac662e692/detection

194.5.237.240:1000

# Reference: https://www.virustotal.com/gui/file/0fb1e4edd3b9779a977d1987ead7978a44008deef70b0d92f3dc875ee5230371/detection

95.214.27.15:7771

# Reference: https://cert-agid.gov.it/news/in-crescita-la-diffusione-di-spyware-per-android-il-caso-di-spynote/
# Reference: https://www.virustotal.com/gui/file/004c574b2c5a0ca63a2d1b8e50245245c33e914424bf8cd8830a3d648a4644bf/detection
# Reference: https://www.virustotal.com/gui/file/257c6415ac8c3b974e04477856c711c35b43e4bfe7495a57416c1550212de64e/detection
# Reference: https://www.virustotal.com/gui/file/d54d589d682a034d568dd176990dd6c7a68d1d980e94a5c2f667d4dfd667a037/detection

81.161.229.3:7771

# Reference: https://www.virustotal.com/gui/file/c0172eb90aae0c8bfacc3fcf7fc70cc29dafb1da785742563d499cda713f1a82/detection

000000.hopto.org

# Reference: https://www.virustotal.com/gui/file/8a738181c9b511efa1ab7d22fc2c27ba0d7857b470250ea745023217f0ee4d78/detection

49.36.222.191:7771

# Reference: https://www.virustotal.com/gui/file/ec098b8416991240c5934ab9c4f2356480abfc0d403833d63eef7e58c4b6630c/detection

187.85.244.226:6001

# Reference: https://www.virustotal.com/gui/file/b324731b65c1ef18db0daf75f4da9f0bdf32e3b7441ebc1b5dda87f868425208/detection

141.255.144.140:6001
141.255.146.40:6001

# Reference: https://www.virustotal.com/gui/file/2a2dcfe8ff190824b04c4a54aa88625213313e7cdb6688d37ff49d48b95e6ca6/detection

141.255.153.245:1177

# Reference: https://www.virustotal.com/gui/file/4c676170a78d51a50ca1747bd7eb4d4ea2fb0530c9d8a64585ca1d99dbda5510/detection

141.255.150.228:1177

# Reference: https://www.virustotal.com/gui/file/567ac54a526b005c230ee66b25a3df3cb336b5a3d43f69511c0013a57a8d067b/detection

185.244.155.86:7771

# Reference: https://www.virustotal.com/gui/file/61866eace350fe63acb291c39a22ff306668e7313ec5a1e6ac7d7df2c1f41093/detection

141.255.145.75:1177

# Reference: https://www.virustotal.com/gui/file/6dcc80d7c2af5fcc12438c7f83a9affa7f3bb0276f4ee228117310df72f167a8/detection
# Reference: https://www.virustotal.com/gui/file/33780d7789918fa44e5200b98eee994aa3d520fca4483660125fdf87022e5936/detection

141.255.146.129:5555
141.255.146.175:5555
141.255.153.181:5555
anna7.duckdns.org

# Reference: https://www.virustotal.com/gui/file/c43a164630732dee7b1b9f9be98918f277d9b5ea379f6a325fc2db05331d0484/detection
# Reference: https://www.virustotal.com/gui/file/84c29fe1aec6ce55a6544a65a7df7c967fc8b270cafff3722740f0ca1f836fa0/detection

91.109.178.6:2222
91.106.38.231:6
youtubee.ddns.net

# Reference: https://www.virustotal.com/gui/file/0b768c7ed29ab0aed03fe435f7b8432861e0e428a097c2b1c7a1712bf67319dc/detection

91.109.176.3:1178
kausers.duckdns.org
jusuer.ddns.net

# Reference: https://www.virustotal.com/gui/file/36c04c9e8390953ccd59a1645b4423a572da6c35cb4ffe026ee57dc36040e8a2/detection

141.255.147.121:7771

# Reference: https://www.virustotal.com/gui/file/424912994335a2d362162133fe29ffd654a15f414324cb33c1a6861dd4340689/detection

91.109.180.5:1178

# Reference: https://www.virustotal.com/gui/file/625077aa9ca689dc01dad225551d17a4e6d2d483269eddb0af6302cd7a475c4c/detection

168.121.151.120:1177

# Reference: https://www.virustotal.com/gui/file/75ca86a6cb6855a62afb444bcc1dca3955a42e1c5a8efee3f451a890b1558d1f/detection

138.255.218.243:1178

# Reference: https://www.virustotal.com/gui/file/e0b16118f588abe1d5c59201540d23fd0cff84e951436decc008e399ded8704c/detection

91.109.188.2:1178

# Reference: https://www.virustotal.com/gui/file/c8466690154d9a602c1c74d917556e17a669dece2a4eb77a6228926f93d6cdfb/detection

41.100.189.192:1177
chaher.giize.com

# Reference: https://www.virustotal.com/gui/file/933423faed89ce1b7185a7b194d90beddd606016fac6ba740a79fd47164bb48d/detection

141.255.151.7:1177

# Reference: https://www.virustotal.com/gui/file/6082cd276ea670ad24bbd28e067918d22c3c6875468a3e396c24b7350ab1144f/detection

41.103.207.238:1177

# Reference: https://www.virustotal.com/gui/file/05fbcc2ac09cc11560a5b4cb417e133cf49d8332f9704f8d03d9ecbb86cbc306/detection

141.255.145.24:1177

# Reference: https://www.virustotal.com/gui/file/0000e6d90efb9d7afd744b3a651f8660ce5391029685f8ed4cd0ab90630de8f6/detection

193.161.193.99:60998

# Reference: https://twitter.com/ReBensk/status/1721573170946224482
# Reference: https://www.virustotal.com/gui/file/a9208e440ddc6fff045bcc90704a1a80971df4e701e4c325bad9e3794bc1a11d/detection

43.133.46.128:7771
lovefox.me
api.lovefox.me

# Reference: https://twitter.com/guelfoweb/status/1722896079199314071

128.14.103.126:7771

# Reference: https://twitter.com/guelfoweb/status/1722952885338624233

47.245.89.46:7771

# Reference: https://www.virustotal.com/gui/file/86c5292a969df36b67bbd1731f5f21af847e671a687d1fd495de64ab753a8570/detection

209.58.173.138:7771
plancast.sytes.net

# Reference: https://twitter.com/guelfoweb/status/1725079953421537787

47.245.89.46:7771

# Reference: https://www.virustotal.com/gui/file/ed2bfb28dfa3dda5854c99d1d1b4437fcfcbeabd31eaaf2a0c71c856004d130e/detection

41.250.84.31:5214
para123.ddns.net

# Reference: https://twitter.com/nahamike01/status/1728165457352651246
# Reference: https://www.virustotal.com/gui/file/c278bcd873e33576cb35a10cb1a41b9880c5d6d3d3da5cb68ad1cf9864fc694b/detection

chromeupdatetools.online

# Reference: https://www.virustotal.com/gui/file/aab0c65a58646c258cda3d69861491e34ed82266af2fcebd61036fd63bea2129/detection
# Reference: https://www.virustotal.com/gui/file/8c5ac4cf1491404bc59d57cd495a9b41f5653d314b47db53efb75eca50fea8ef/detection
# Reference: https://www.virustotal.com/gui/file/4888883843fbb17e98c22c71a06142bd8499f30af36304adb194dd4d7e522834/detection

46.246.12.19:4035
46.246.80.20:4035
46.246.84.3:4035
wereflow.duckdns.org

# Reference: https://www.virustotal.com/gui/file/8b52e917fd57008f210024405b028ad4ddfd59715340f6851e0f5260f0404fb3/detection
# Reference: https://www.virustotal.com/gui/file/7455928e67f85fc789f50fd42029c01b9ad2608c5cc14be3533c9d505bf15a7e/detection
# Reference: https://www.virustotal.com/gui/file/720ecfde513292e9a6d7f794f51e17debf72bdfad45943a1ff1fd6fac5138e06/detection

188.126.90.7:2020
46.246.26.21:2020
46.246.80.18:2020
buendiagt.duckdns.org

# Reference: https://twitter.com/karol_paciorek/status/1730544154113913108

193.161.193.99:20590

# Reference: https://www.virustotal.com/gui/file/3ace4c5b66dee391c6bae2a380c393f46688004ec70aaccd08d452738f10c426/detection

24.152.37.226:3131

# Reference: https://twitter.com/malwrhunterteam/status/1733588155092156840
# Reference: https://www.virustotal.com/gui/ip-address/20.216.181.67/relations
# Reference: https://www.virustotal.com/gui/file/139407b5e19415a1eea29848f7edf5771afbcadb7837bf62ed8d23a865722fd3/detection

banco-do-brasil.org
sitebbmoduloseguro.com

# Reference: https://www.virustotal.com/gui/file/98950f38d0258cdb20a18946c42bc1cfaa23b0c34e92cac9f7da712853a36753/detection
# Reference: https://www.virustotal.com/gui/file/43f657c177b40ecec735a617d29f0d9d34fcdef2889e5da87cfde19b74c9f4a8/detection
# Reference: https://www.virustotal.com/gui/file/343637ce3fc27c83b35fe4b5e28b057a5e9708dc52c4919807e66f13a73f1579/detection

141.255.156.40:7771
141.255.157.142:7771
zxx.ddns.net

# Reference: https://www.virustotal.com/gui/file/05945feab569c2c956f9910998910393cc32621adb4a7ec7a3ec66b7e15abc94/detection

141.255.145.242:2222
141.255.147.45:2222
141.255.154.166:2222
wskwsk.ddns.net

# Reference: https://www.virustotal.com/gui/file/06dd1121f4944522be2cf49f751bbd7b7f3dfbfaf3723325aa4f10cc10cbad1c/detection

141.255.145.244:2222
condor-dz.ddns.net

# Reference: https://twitter.com/1ZRR4H/status/1733154023979553026
# Reference: https://twitter.com/guelfoweb/status/1734155572725862906
# Reference: https://www.virustotal.com/gui/domain/dragon3.freedynamicdns.org/relations

http://69.197.134.103
69.197.134.103:4030
69.197.134.103:8080
dragon3.freedynamicdns.org

# Reference: https://twitter.com/ReBensk/status/1735273627547738269
# Reference: https://www.virustotal.com/gui/ip-address/178.16.128.87/relations

185.242.161.247:7771
accesinvestment.com
amlboff.space
amlboff.xyz
betine129.com
betine130.com
cepilloelectricotop.com
dodofficiallsnewss.space
dodofficiallsnewss.xyz
eplay-storeofficial.com
eplay-storeofficial.online
mysttalkeoff.xyz
neupostapp.com
nsvvpnews.space
officiallok.space
officiallok.xyz
okoffcial.space
okoffcial.xyz
opensoffical.space
opensoffical.xyz
s-takeoffweb.space
s-takeoffweb.xyz
stakjhfee.space
stakjhfee.xyz
unisvvappnews.space
unisvvappnews.xyz
unsvvappnews.space
unsvvappnews.xyz
unsvvpnews.space
unsvvpnews.xyz
vertexofficiall.space
vertexofficiall.xyz
vertexprottocoll.space
vertexxoff.space
vertexxoff.xyz
voss.plus
zksufofinews.space
zksyofficialls.space
zksyofficialls.xyz

# Reference: https://www.virustotal.com/gui/domain/montealtoinnovan.duckdns.org/relations
# Reference: https://www.virustotal.com/gui/file/367fde2092afedd2e6315cd200bc238c1fb3b6e4b8476ee06d5b5fb2c0f8a734/detection

46.246.14.11:8891
46.246.26.8:8891
46.246.6.7:8891
montealtoinnovan.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/46.246.4.16/relations
# Reference: https://www.virustotal.com/gui/file/8ea5147441c37493301cb3e77186c4da96ba7506f758eb52545a50ea72af8f5a/detection

46.246.4.16:1919
gpc.softether.net
mastertourchine.duckdns.org

# Reference: https://www.virustotal.com/gui/domain/androidmedallo.duckdns.org/relations
# Reference: https://www.virustotal.com/gui/file/6157c3368937ae5f10f863aff9ce3a47ca8f0c9effc96a389d5bbbdd0b7ed937/detection

188.126.90.17:7771
192.169.69.26:7771
193.161.193.99:7771
194.5.98.207:7771
46.246.12.11:7771
46.246.12.14:7771
46.246.12.15:7771
46.246.12.16:7771
46.246.12.17:7771
46.246.12.18:7771
46.246.12.19:7771
46.246.12.2:7771
46.246.12.20:7771
46.246.12.21:7771
46.246.12.211:7771
46.246.12.22:7771
46.246.12.27:7771
46.246.12.29:7771
46.246.12.4:7771
46.246.12.6:7771
46.246.12.7:7771
46.246.12.8:7771
46.246.14.11:7771
46.246.14.12:7771
46.246.14.13:7771
46.246.14.14:7771
46.246.14.15:7771
46.246.14.17:7771
46.246.14.19:7771
46.246.14.2:7771
46.246.14.21:7771
46.246.14.22:7771
46.246.14.23:7771
46.246.14.4:7771
46.246.14.5:7771
46.246.14.6:7771
46.246.14.7:7771
46.246.14.8:7771
46.246.14.9:7771
46.246.26.10:7771
46.246.26.11:7771
46.246.26.12:7771
46.246.26.15:7771
46.246.26.16:7771
46.246.26.17:7771
46.246.26.18:7771
46.246.26.20:7771
46.246.26.21:7771
46.246.26.210:7771
46.246.26.211:7771
46.246.26.22:7771
46.246.26.27:7771
46.246.26.3:7771
46.246.26.4:7771
46.246.26.5:7771
46.246.26.7:7771
46.246.26.8:7771
46.246.26.9:7771
46.246.4.12:7771
46.246.4.18:7771
46.246.4.2:7771
46.246.4.20:7771
46.246.4.21:7771
46.246.4.210:7771
46.246.4.212:7771
46.246.4.22:7771
46.246.4.3:7771
46.246.4.4:7771
46.246.4.6:7771
46.246.4.7:7771
46.246.4.8:7771
46.246.6.10:7771
46.246.6.11:7771
46.246.6.13:7771
46.246.6.14:7771
46.246.6.15:7771
46.246.6.16:7771
46.246.6.19:7771
46.246.6.2:7771
46.246.6.20:7771
46.246.6.21:7771
46.246.6.211:7771
46.246.6.213:7771
46.246.6.3:7771
46.246.6.6:7771
46.246.6.7:7771
46.246.6.8:7771
46.246.80.11:7771
46.246.80.12:7771
46.246.80.14:7771
46.246.80.15:7771
46.246.80.16:7771
46.246.80.19:7771
46.246.80.20:7771
46.246.80.21:7771
46.246.80.212:7771
46.246.80.23:7771
46.246.80.24:7771
46.246.80.26:7771
46.246.80.28:7771
46.246.80.3:7771
46.246.80.4:7771
46.246.80.5:7771
46.246.80.6:7771
46.246.80.7:7771
46.246.80.9:7771
46.246.82.12:7771
46.246.82.13:7771
46.246.82.15:7771
46.246.82.19:7771
46.246.82.2:7771
46.246.82.20:7771
46.246.82.21:7771
46.246.82.210:7771
46.246.82.213:7771
46.246.82.23:7771
46.246.82.3:7771
46.246.82.4:7771
46.246.82.5:7771
46.246.82.9:7771
46.246.84.12:7771
46.246.84.13:7771
46.246.84.14:7771
46.246.84.15:7771
46.246.84.17:7771
46.246.84.18:7771
46.246.84.19:7771
46.246.84.2:7771
46.246.84.20:7771
46.246.84.210:7771
46.246.84.212:7771
46.246.84.23:7771
46.246.84.3:7771
46.246.84.4:7771
46.246.84.5:7771
46.246.84.6:7771
46.246.84.7:7771
46.246.84.8:7771
46.246.84.9:7771
46.246.86.10:7771
46.246.86.11:7771
46.246.86.12:7771
46.246.86.13:7771
46.246.86.14:7771
46.246.86.16:7771
46.246.86.17:7771
46.246.86.20:7771
46.246.86.210:7771
46.246.86.22:7771
46.246.86.3:7771
46.246.86.5:7771
46.246.86.6:7771
46.246.86.7:7771
46.246.86.8:7771

# Reference: https://www.virustotal.com/gui/file/775597eb196a1a1d991ee1adaddb940b859a03509c0a243b5a246a826824b934/detection

46.246.4.11:5214
nbabna1.ddns.net

# Reference: https://twitter.com/banthisguy9349/status/1742118866111611026

http://91.92.244.19

# Reference: https://www.virustotal.com/gui/file/022b5baf9dda41cca19e5e226c2e51db8e2272711185390831eef7636bc2d370/detection

20.115.132.88:5214
celikbas.duckdns.org

# Reference: https://twitter.com/0x6rss/status/1744260907994079251
# Reference: https://www.virustotal.com/gui/file/865cdcce7276e21fff6fc514f70265586c22ab43ad2f74a4c1346b98410c0aa6/detection

http://101.32.192.76
http://154.30.255.62
101.32.192.76:7771
154.30.255.62:7771

# Reference: https://twitter.com/malwrhunterteam/status/1747035997085237638
# Reference: https://twitter.com/noexceptcpp/status/1747315677285752892
# Reference: https://www.virustotal.com/gui/file/c25f978301587136fe6e7af5587e5ce38c48ddd4321264533281151156cbefe6/detection
# Reference: https://www.virustotal.com/gui/file/fd6518a9419073fc6c718302e41b33ae8f9964410addb2d8dfb6db1d359fa6ee/detection
# Reference: https://www.virustotal.com/gui/file/8c24aa5841c4aa4d544033270dac3332b1aa5f6f3c392575d19e7b08a257a525/detection
# Reference: https://www.virustotal.com/gui/file/c818b518f5410595bfd92d4186069cde6e5df074e85383b06814db0148ef98cb/detection

mahadevcarrentals.com
mahadev.loclx.io
shriramcarrentals.com
shriram.loclx.io

# Reference: https://www.virustotal.com/gui/file/3b95c5c4692fc10be53102e432d2490f525bb8cb619898b78052dde5feacb432/detection

46.246.4.65:1010
rade1010.ddns.net

# Reference: https://www.virustotal.com/gui/file/d7e8b1a9dc2dc09c0f4bd88b3d4a547ec5f9ca5f4a4506ca2d9770d9ee15c991/detection

5.175.74.247:5260
nunu.hopto.me

# Reference: https://www.virustotal.com/gui/file/2551a8791cbd814ceca48787db5f63d2aef83cc199a72f1ccc82fe763c36c352/detection

46.246.6.69:5420
nubaz.ddns.me

# Reference: https://www.virustotal.com/gui/file/45e41ebdd5de72f955df314ed634c15a96f6a8d09ddb55f39c53ae4e7efe3e3e/detection
# Reference: https://www.virustotal.com/gui/file/7f5be1e36878e40d9b283a525f916ef9a9ffae6477cb588122a25d6aa877a3a9/detection

149.36.44.58:5390
95.210.188.80:5390
ceta300.ddns.me

# Reference: https://www.virustotal.com/gui/file/b2a5cbfc4b0b9534fcedd6b9b408dc8364e980a045306e50e9761682ef718915/detection
# Reference: https://www.virustotal.com/gui/file/1b23239aad495e17ede1181bbf1f21d956b47f4994897c503369f75905352f05/detection

5.175.74.247:5380
irfade.ddns.me

# Reference: https://www.virustotal.com/gui/file/ae16d1d9174c06771ca7cb05d823699e58f2cfc9d3796e6070ba77131d1b14a6/detection
# Reference: https://www.virustotal.com/gui/file/dc21ea4937fd062fbce647fe3e5e731feb957a9c45ccb491ff4b6f7f1a46e3ea/detection

46.246.82.65:5303
95.210.188.80:5303
fadee5303.ddns.net

# Reference: https://www.virustotal.com/gui/file/0bbc505c44b0320907bd556e3d16596aa87c524951a0871692785251b3ee6a86/detection
# Reference: https://www.virustotal.com/gui/file/21d80e1ea82efb3a5aaa4ea614b668aad723620623f7c13c7103e0bd9f23af4c/detection

67.205.154.243:3399
80.85.143.7:5533
jaitrikuta.portmap.host

# Reference: https://www.virustotal.com/gui/file/48f32fc6c959a209a2dbbb11ede0292869dd13ef5095b8c3ed00e594708afea2/detection

67.205.154.243:56785
nyc1.portmap.io

# Reference: https://threatfox.abuse.ch/ioc/1234183/

85.192.41.74:7771

# Reference: https://www.virustotal.com/gui/file/112c7c983f9ea74372dc888621e96d6c73b64a09e8ce4b1d57d6e41086d0c774/detection

141.255.147.55:7771
dwenewarawa.ddns.net

# Reference: https://www.virustotal.com/gui/file/105d0533e48a7cdda29111f20818958f2d07e7ea0d7d323e59739703e61186c2/detection

134.35.13.35:9067
134.35.5.34:9067
141.255.144.133:9067
141.255.144.230:9067
141.255.144.249:9067

# Reference: https://www.virustotal.com/gui/file/39323ad5973d1bb86a1f69cade10fdf43bc1c63958712b0e06df9da9bf8e5987/detection

141.255.144.131:7772
raimundobmbmmk.ddns.net

# Reference: https://www.virustotal.com/gui/file/024546e72670e1cdc44bcec5221ae462384b39c6fd0d499b482d2d2c0845e79d/detection

141.255.144.128:7771

# Reference: https://www.virustotal.com/gui/file/7840572de6faf73f10ff45c71d5051be11b4b8bc0a1573d74741477cbfb69f8b/detection

141.255.144.32:1155
asamar982.ddns.net

# Reference: https://www.virustotal.com/gui/file/9b91749e0f4b17796b6f225ed31e9e9f1148f75012fa33211a52d1d50e1f6e5c/detection

141.255.144.36:1177
hamzahamed669.hopto.org

# Reference: https://www.virustotal.com/gui/file/7601b9e0adf37da5f57e5cc520d63aee362528aff9b703fecfac8aacbfdc9a5b/detection

51.68.152.226:1337

# Reference: https://www.virustotal.com/gui/file/79e8905e1a2285f40a943153e04b280fb30d6a317507e091a4d00f5aedd56b7c/detection

51.68.152.226:2222
daryandara.ddns.net

# Reference: https://www.virustotal.com/gui/file/4b82de128d67f475b1a8a9080ade2ae5167087b7a32978d6b91db933899900d8/detection

94.120.183.12:22222
uareme98.hopto.org

# Reference: https://www.virustotal.com/gui/file/f5a00f2fd7932d1a8e76fc3bbfe3d63e15306616dcc467947e79243964859931/detection

46.246.12.9:3280
46.246.14.16:3280
46.246.26.30:3280
numbuscloudex.duckdns.org

# Reference: https://www.virustotal.com/gui/file/212b02685c98236a8b46803ce737ae5e9b9133bdc076a8211b1cd928bd5933de/detection
# Reference: https://www.virustotal.com/gui/file/666cbeb1d1a8f8ade498ecb9b0a9ea5b64a28bf48b63c4f4b7786c524ed89333/detection

46.246.86.2:7711
aliittr.ddns.net

# Reference: https://www.virustotal.com/gui/file/01c77dd059c083f07644af9e2c617c81dae93b16573b573afcb73a96f0b8dfac/detection

65.0.50.125:22120

# Reference: https://twitter.com/r3dbU7z/status/1755844517138235845
# Reference: https://twitter.com/r3dbU7z/status/1755851327727411642

http://3.122.194.86
3.122.194.86:443
suportevalidar.online

# Reference: https://twitter.com/noexceptcpp/status/1758471122541269363
# Reference: https://www.virustotal.com/gui/ip-address/103.94.235.131/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.150.55.15/relations
# Reference: https://www.fortinet.com/blog/threat-research/android-spynote-moves-to-crypto-currencies

143.92.61.146:7771
004bet.vip
005bet.vip
007bet.vip
008bet.vip
31878.vip
85808.cc
877105.com
95534.vip
aapl1.vip
aapl10.vip
aapl2.vip
aapl3.vip
aapl4.vip
aapl5.vip
aapl6.vip
aapl7.vip
aapl8.vip
aapl9.vip
aaplbet.com
af54sda.com
applbet.com
aqmm99.com
bentua.one
bet888.bet
bet888a.vip
bet888b.vip
bet888d.vip
bet888e.vip
bet888f.vip
bet888g.vip
bet888i.vip
bet888k.vip
bet888m.vip
bet888n.vip
bet888o.vip
bet888p.vip
bet888q.vip
bet888t.vip
bet888u.vip
bet888v.vip
bet888w.vip
bet888x.vip
bet888y.vip
bet888z.vip
blgj8888.vip
blgj9999.com
bttdt.com
caipaydiy.com
dyj23.vip
playgoogle.vip
playgoogle1.vip
playgoogle2.vip
playgoogle3.vip
playgoogle5.vip
rabbit-bet888.bet
tiger-bet888.bet

# Reference: https://twitter.com/karol_paciorek/status/1759943296493723990
# Reference: https://www.virustotal.com/gui/file/1513a5aac5596f5fca1505128ac78f77f2648ac392a6584d54dbd3760ae85f5d/detection

http://62.217.183.163
159.100.9.47:8080

# Reference: https://cryptax.medium.com/android-spynote-bypasses-restricted-settings-breaks-many-re-tools-8791b3e6bf38
# Reference: https://www.virustotal.com/gui/file/46553a5db767a8b570e9d11bfe39e4817839daa534f2b5cedf54b72b2e735478/detection
# Reference: https://www.virustotal.com/gui/file/ba69178e065c3bc762e3c0066edcb6fcf48cad558e78eb2da4913a03d8244e87/detection

95.174.67.245:7744

# Reference: https://www.virustotal.com/gui/file/88effc9686a6dd3e3495fdcd28f4d3f5d8793295f7d1a21afdaf5ba132031ce1/detection

nulltx.vip

# Reference: https://www.virustotal.com/gui/file/2d4d3b47a339aa24ab2d94ac549ce05f1a59eacf51697221517ed2d0364b87e9/detection

193.178.170.30:7771

# Reference: https://twitter.com/0x6rss/status/1765368714516435317

http://45.130.151.211
45.130.151.211:443

# Reference: https://www.virustotal.com/gui/file/2d08fda595ba18b51ea080ae71d69b37f9ba22996cc3608386d802d1d113eddf/detection

185.216.70.193:7771
ipdns36852.zapto.org

# Reference: https://www.virustotal.com/gui/file/a3aca344c3c10cd3be8c1f95c19f8a3cbad1a5e55cce2ef3c3c1bf2daf7a2940/detection

89.23.99.86:8080

# Reference: https://www.virustotal.com/gui/file/f0c2ff18f34994c303096d33d04180c0636ed1e2f5416894605b8a83d2e92673/detection

195.242.111.216:7771
nordcons.sitesblog.com

# Reference: https://twitter.com/ReBensk/status/1778324865419825499
# Reference: https://www.virustotal.com/gui/file/263b02918ca429a722622b86458348b67a2a6dd3560d2e616b15fd8632db111c/detection

inps-verification.com

# Reference: https://www.virustotal.com/gui/file/ac4f909963eee2fe091dfc0ecdc37b8313e3e8c488ad9f7410093a53db3dd5c4/detection

78.137.81.190:7771

# Reference: https://twitter.com/banthisguy9349/status/1782453782124626219
# Reference: https://www.virustotal.com/gui/file/b614fc0d1d0259c0cfd38ba1ac3d0c5b500a2cbf36f9064b77cfd2e8b24bb730/detection

91.92.243.86:8000

# Reference: https://twitter.com/banthisguy9349/status/1782461848601661456
# Reference: https://www.virustotal.com/gui/ip-address/91.92.246.165/relations
# Reference: https://www.virustotal.com/gui/ip-address/91.92.249.93/relations

http://91.92.246.165
91.92.246.165:443
acikgiris-basvuru.com
acikgiris-basvuru.online
acikgiris-basvuru.xyz
ceptemarket101.com
ceptemarket101.online
ceptemarket101.xyz
ceptemarketsanal101.com
ceptemarketsanal101.xyz
ilv-coin.com
sanal-basvuru-giris.com
sanal-basvuru-giris.xyz
sanal-market-101-aktif.com
sanal-market-101-aktif.online
sanal-market-101-aktif.xyz
silveradspartner.com
sr7.xyz
vvwv-sanalmarket-a101.com
vvwv-sanalmarket-a101.xyz
vwwvv-sanalmarket.com
vwwvv-sanalmarket.online
vwwvv-sanalmarket.xyz
vwwvv-sanalmarketa-1-101.online
vwwvv-sanalmarketa-1-101.xyz
wvvvw-kapinda-market-101.online
wvvvw-kapinda-market-101.xyz
wvvvw-sanal-cepte-market.com
wvvvw-sanal-cepte-market.xyz
wvvvw-sanalmarket-101.com
wvvvw-sanalmarket-101.xyz
wvvw-a101.com
wvvw-a101.online
wvvw-a101.xyz
wvvw-sanalmarket-a101.com
wvvw-sanalmarket-a101.online
wvvw-sanalmarket-a101.xyz
wvvww-a-101.com
wvvww-a-101.xyz
wvvww-market-kapinda10.com
wvvww-market-kapinda10.xyz
wvvww-sanalmarket101kapinda.com
wvvww-sanalmarket101kapinda.xyz
wvw-basvurugirismobil.com
wvw-basvurugirismobil.xyz
wvwvv-sanal-marketa101.com
wvwvv-sanal-marketa101.online
wvwvv-sanal-marketa101.xyz
wvwvv-sanalmarket-kapinda.com
wvwvv-sanalmarket-kapinda.xyz
wvwvv-sanalmarket101.com
wvwvv-sanalmarket101.xyz
wvww-sanal-market-101.com
wvww-sanal-market-101.xyz
wwwvv-sanalmarket101kapinda.com
wwwvv-sanalmarket101kapinda.xyz

# Reference: https://twitter.com/g0njxa/status/1782849488618401806
# Reference: https://tria.ge/240423-w7garaag3x/behavioral1

45.138.16.85:7544
avast-securedownload.com

# Reference: https://twitter.com/ReBensk/status/1785592844700270887
# Reference: https://www.virustotal.com/gui/file/73bd3f7f1641b990e3ec6d6a5cd56e5772f5ffa3a70033ddff574e86fb9b1889/detection

103.142.244.19:7771
cms-organizations-apnic-coaching.trycloudflare.com
safetheworld.duckdns.org

# Reference: https://www.virustotal.com/gui/file/4697fef9c176eff8391a9ff81da33ecb57c1a235dba7c4b98812bd3baaa369e4/detection
# Reference: https://www.virustotal.com/gui/file/08cb0e9a20f3ddcfe09d78897695f7802dddab4a53ad176001194881f7ce157e/detection

http://149.88.85.61

# Reference: https://twitter.com/banthisguy9349/status/1785986101208813917

http://103.142.244.19
http://103.145.22.201
http://103.145.22.213
http://103.145.22.228
http://103.148.125.26
http://103.148.125.8
http://103.99.62.12
http://103.99.62.45
http://103.99.62.6
http://185.93.68.111
http://202.95.1.245
http://43.159.133.236
http://47.57.184.164
http://47.57.7.44
http://8.210.106.29
http://95.214.177.122
154.9.255.107:8080
193.222.96.128:7287
16corp.com
51baili.com
51cgpro.app
51ct.net
51dm.net
68tiyu.cc
68tiyu.net
68tiyu.tv
68tiyu.vip
789-jsq.com
91dy.pro
91paofu.com
91pf.cc
aimei002.com
aiss.one
antvpn-proxy.iceberg-studio.com
arkting.workers.dev
auscpa.com
awjm.cc
awjm.fun
awjm.me
awloly.org
bayfrontmusic.com
bcshopfe.com
chigua51.app
cjchtrhd.club
clsq.fun
cvmgtn.com
cwjgfy.com
d26r44l4vrn00m.cloudfront.net
d2kdqj6gjm17ok.cloudfront.net
d2mlls8dsnofna.cloudfront.net
d36e0jkwnyz61b.cloudfront.net
d8z.xyz
db4djqkh4h9v0.cloudfront.net
dd91.fun
dmn.txzbapp.com
down.sosoo.xyz
down.sosoz.xyz
dvoqmi.com
dwkbil.com
eku365.vip
eparsfvtm.com
feichijsq.xyz
feifanjsq.xyz
flm1.vip
flm2.vip
gawx.florenda.com
gectab.com
get.5uf88.com
gqmevhuiu.com
green-yun.com
hafeiv.bedtdsq.com
haiouvpn.xyz
hammerjsq.xyz
help.tg74.com
hgryun.com
hiztpa.com
hjgj.one
hjgj.pro
hls0.com
hls6.com
hongxingjsq.xyz
i51.co
iceberg-studio.com
jbedgkyqq.cc
jigoujsq.com
jigouvpn.xyz
jiguangjiasu.com
juanlee.com
karivass.com
kqdxxdrln.com
kuaiyajsq.xyz
kutongjsq.xyz
liebaojsq.com
login.rubioguzman.com
lpkdkni.com
m.68tiyu.cc
m.68tiyu.net
m.68tiyu.tv
m.68tiyu.vip
mail.xiaolans.com
mayijsq.xyz
mbjd.cc
mrdjirzjk.com
mrds.app
msswmnxpf.com
ndqvyg.com
olsxajxpy.com
ompmhm.com
phsp.cc
psyccess.com
puemrdxqn.com
pvvqpauyk.com
qianrehvw.com
qiyujsq.com
qwlidqkak.cc
rgscnqnx.com
rjbiauhh.com
rnpvofalp.com
rpcwwuxh.cc
rtlzhe.com
rzgtiv.com
sdfggdddssdd22.icu
sgp1.cc
sgpjsaudc.cc
shandianjsq.xyz
shell.5uf88.com
sosoo.xyz
sosoz.xyz
speedcet.com
t78.sdfggdddssdd22.icu
tbcugbjva.com
tianjivpn.xyz
tiktok.coachesinspain.com
tiktok.florenda.com
tk.coachesinspain.com
tksex.xyz
tt.coachesinspain.com
ttav.life
tx-yun.com
ubesbnehg.com
umgfgq.com
v7home.com
webtyron.com
wwtt.one
wwtt.pro
xfcjat.com
xgpnscpmx.org
xhnjsq.xyz
xhyrnrtix.com
xiaolans.com
xiyojsq.com
xtt2025.com
xuanfengjsq.xyz
yangcongvpn.xyz
yuanlianjsq.xyz

# Reference: https://twitter.com/banthisguy9349/status/1786424027747164461
# Reference: https://www.virustotal.com/gui/file/a4e85928fb9df2bcdc9b372471aa3b3ac30d210d7ba8868846c03ebd495a3a5f/detection

8.210.106.29:7772
biancfdaslkljdsfkw.shop
speedcenter.info

# Reference: https://twitter.com/JustWantToQ1/status/1786651917965271410
# Reference: https://www.virustotal.com/gui/file/5b0a90abfb7a8d597087f2cee1e38cab6818baf3bcf82b90b5c8eb9c1766230c/detection
# Reference: https://www.virustotal.com/gui/file/ec1eb46d8ff3d981668094e9a92482fabc61e5fb236ea7f458051e9840f4d9b5/detection

http://66.235.168.242
66.235.168.242:7771

# Reference: https://twitter.com/banthisguy9349/status/1787082943980077523

http://38.54.14.201
http://54.36.128.153
bcshopfe.com
tiktok.coachesinspain.comstatic
vn.dadanpro.com

# Reference: https://pastebin.com/iurFySEp

http://164.155.241.15
http://38.55.251.253
164.155.241.15:443

# Reference: https://twitter.com/malwrhunterteam/status/1787585546325299321
# Reference: https://www.virustotal.com/gui/file/17fd0adccf0cfb7c5332337906ef1727696608594e72a30f0032d6ef465bd468/detection

download-play.online

# Reference: https://twitter.com/banthisguy9349/status/1789744800243061135
# Reference: https://www.virustotal.com/gui/file/3276943dafdd603863aaf4b33a6ea3569dba91b1fac81b6bb4b454ffbe99e936/detection
# Reference: https://www.virustotal.com/gui/file/078cebddba654c215c01f04900987a34233bddbcc26696e1417b5d3cc6e90e35/detection
# Reference: https://www.virustotal.com/gui/file/6008975dfd2aaa07fcb307b12d0c8a273aa6f4882749e29bac1f29e26a035c8f/detection
# Reference: https://www.virustotal.com/gui/file/8a91bf9ba1250e5f0977384101f5ff3c1d7dc121e7ed304e2580bac1082b7d61/detection
# Reference: https://www.virustotal.com/gui/file/d7d7472ae765c96d33ec8e6251cddd59d3f93bd8d9be96f7311726e842337e61/detection

4.194.25.153:5214
4.194.25.153:8080

# Reference: https://twitter.com/LemonHaze420_/status/1790314315427336505
# Reference: https://urlhaus.abuse.ch/browse.php?search=bfc71fa8f865d6c05c02f4b94c8df31368abfa099f640bccafaba7c802ac3c78

http://23.226.57.18
http://23.226.57.2
http://23.226.57.43
23.226.57.18:7771
23.226.57.2:7771
23.226.57.43:7771

# Reference: https://www.virustotal.com/gui/file/0000e4b25ec8a2e0170eac37576cfe8ab7f2183285469a2af0fc385ff6da2548/detection

147.185.221.18:28399

# Reference: https://x.com/NDA0E/status/1794400766360256593
# Reference: https://x.com/NDA0E/status/1794406340175028421
# Reference: https://www.virustotal.com/gui/file/d8fa3466ff6f11a060ad6dff7e0c9c2e13935236eeafe265be650c7139b0b490/detection
# Reference: https://www.virustotal.com/gui/file/61ef15e9eccee437915a643c86e7f5049bcee9c439360a0a9cd4818adb98fb26/detection

http://52.66.238.252
http://65.2.129.159
209.25.143.181:17370
65.0.92.162:1337
botuser0.duckdns.org
botusesr472.duckdns.org

# Reference: https://x.com/RacWatchin8872/status/1795120033040924913
# Reference: https://www.virustotal.com/gui/file/d2410e7ca548da6824dc85b394382735952041f7c3059aada3a3e59cb7f33463/detection
# Reference: https://www.virustotal.com/gui/file/658829505787969b87b9b4e0801b98f7bb702273f08f29ddfdf3e9112eab4413/detection

http://143.92.49.58

# Reference: https://x.com/ReBensk/status/1795514803739414988
# Reference: https://www.virustotal.com/gui/ip-address/198.12.221.104/relations
# Reference: https://www.virustotal.com/gui/file/5447c6444e42dd67cefa04a1812dcdcf15db789b28942c60091e3084c3922af1/detection

188.132.184.163:7771
analizelektronikultrasonic.online
analizelektronikultrasonic.xyz
analizelektronikultrasonik.online
analizelektronikultrasonik.xyz

# Reference: https://x.com/banthisguy9349/status/1798430331705725050

http://103.142.244.32
54.253.82.23:8080

# Reference: https://www.virustotal.com/gui/file/38420bb2954f4ebfd2bb23539dbcb6fa5df8ebbf61bb89c65e48c9c929812495/detection

193.161.193.99:61275
system32activate.duckdns.org

# Reference: https://www.virustotal.com/gui/file/fa2aa4ce455ef3296c76719aac0df5a06f158a28a4ab54bd3e506a67713fa86f/detection
# Reference: https://www.virustotal.com/gui/file/246ab164d3dcfbf6830daa8b1c3f169f6092424a636698218bf32e857cc95604/detection

193.161.193.99:31260
angel9087.duckdns.org

# Reference: https://x.com/RacWatchin8872/status/1800886223197831564
# Reference: https://x.com/9823f_/status/1800942706245370202
# Reference: https://www.virustotal.com/gui/file/94a3b1fc830323234f5ac6e69cf0840507c23e15bee5c8c3aa86fddaf61ef8b1/detection

alert-bov.com
atenciona-clientes.org
avastantivirusscan.com
avastsf.com
bov-mobile-bank.com
googlechrome-update.com
update-googlechrome.com
your-myappleid.com

# Reference: https://x.com/RacWatchin8872/status/1805636453679919499
# Reference: https://x.com/RacWatchin8872/status/1825561955765305564
# Reference: https://x.com/banthisguy9349/status/1806781325351039115
# Reference: https://x.com/ReBensk/status/1825769311425704416
# Reference: https://app.validin.com/detail?find=avastavv.apk&type=dom&ref_id=b729ebf0d3a#tab=host_pairs_v2
# Reference: https://www.virustotal.com/gui/file/94a3b1fc830323234f5ac6e69cf0840507c23e15bee5c8c3aa86fddaf61ef8b1/detection

http://193.143.1.14
http://193.143.1.86
http://193.143.1.99
http://91.215.85.16
45.94.31.96:7544
avast-antivirus.com
avast-antivirusdownload.com
avastamx.com
avastapi.com
avastax.com
avastbk.com
avastbx.com
avastcmb.com
avastcoinbase.com
avastcr.com
avastcsm.com
avastcv.com
avastcxp.com
avastcxt.com
avastcyber.com
avastexodus.com
avastga.com
avasths.com
avasting.com
avastkb.com
avastkx.com
avastledger.com
avastme.com
avastmetamask.com
avastng.com
avastnw.com
avastop.com
avastpdq.com
avastpdr.com
avastpm.com
avastpn.com
avastpr.com
avastpst.com
avastpx.com
avastpy.com
avastsgp.com
avastsp.com
avastswyftx.com
avastuo.com
avastvx.com
avastwp.com
avastxo.com
avastxp.com
avastxv.com
avastzx.com
commavast.com
diagnostic-avast.com
ledgeravast.com
nationavast.com
nationwideavast.com
swyftxavast.com
trezoravast.com
/Avastavv.apk

# Reference: https://x.com/raghav127001/status/1802590153564676534
# Reference: https://x.com/ReBensk/status/1802604980404129945
# Reference: https://www.virustotal.com/gui/file/ed336c571b7ad3e020c213e062c060eeb5797de088fe7a0d2bcff4ea9284dfa1/detection

154.213.65.28:7771
telegroms.icu

# Reference: https://x.com/johnk3r/status/1806679331906756783
# Reference: https://www.virustotal.com/gui/file/9e0b0a86a20d9a549f8f968618599023fcbd3f71089f9cfdd2dd3b5fded68dd8/detection

134.195.208.80:7771
teenpattii.site

# Reference: https://www.virustotal.com/gui/file/3e22919133c521df4c3117cc31a798bb33571362f909afe946df87b3365b9267/detection

45.246.12.223:7771

# Reference: https://www.virustotal.com/gui/file/4b9fc485e8dc3efb98d006f07c9e46bd932ee3c7a99c8e902c8a652b24123518/detection

163.172.30.41:7771
seasidebeautyco.com

# Reference: https://x.com/banthisguy9349/status/1817991097584599283

http://168.76.20.203

# Reference: https://x.com/banthisguy9349/status/1817991097584599283
# Reference: https://app.validin.com/detail?find=ready.apk&type=dom&ref_id=2b3baed454e#tab=host_pairs_v2

http://1.32.216.121
http://103.108.67.139
http://103.177.76.20
http://103.234.75.139
http://103.234.75.209
http://103.42.31.254
http://103.99.62.100
http://103.99.62.102
http://103.99.62.141
http://103.99.62.22
http://103.99.62.31
http://103.99.62.51
http://103.99.62.57
http://103.99.62.69
http://103.99.62.77
http://103.99.62.98
http://13.201.121.143
http://13.51.159.83
http://134.122.148.40
http://134.255.217.241
http://143.92.57.227
http://146.196.80.101
http://146.196.80.103
http://146.196.80.105
http://149.88.80.207
http://154.204.178.184
http://154.9.255.107
http://154.9.255.89
http://156.236.73.47
http://156.248.77.205
http://156.248.77.206
http://156.248.77.207
http://156.248.77.212
http://156.248.77.218
http://158.69.110.218
http://158.69.31.225
http://164.155.241.223
http://164.92.157.241
http://168.76.20.186
http://168.76.20.187
http://168.76.20.188
http://168.76.20.189
http://168.76.20.190
http://168.76.20.194
http://168.76.20.195
http://168.76.20.196
http://168.76.20.197
http://168.76.20.198
http://168.76.20.202
http://168.76.20.203
http://168.76.20.204
http://168.76.20.205
http://168.76.20.206
http://168.76.20.210
http://168.76.20.211
http://168.76.20.212
http://168.76.20.213
http://168.76.20.214
http://172.93.188.233
http://18.221.24.26
http://185.106.176.145
http://20.199.86.212
http://202.79.172.89
http://3.138.100.77
http://38.45.122.234
http://38.46.31.55
http://38.54.122.99
http://38.55.185.232
http://38.60.253.56
http://43.135.1.116
http://45.154.98.93
http://45.40.96.114
http://45.94.31.205
http://78.47.123.201
http://8.217.1.32
http://8.217.190.96
http://91.107.128.74
http://91.92.252.105
gerenciar-cadastro.online
subtitlez0.duckdns.org

# Reference: https://www.virustotal.com/gui/file/ebdc1cd4be98866b7735568094b287a0122bc6b276f77bc6dea8b476435c0cd1/detection

5.189.136.230:7860
vmi627098.contaboserver.net

# Reference: https://x.com/ValidinLLC/status/1819139103666897306

02-bill-services.com
101auth-au.com
188209-203726-882739.com
28491949.com
2degrees-billing.com
2degrees-info.com
67768899.com
87789912.com
89987655.com
actualiseren-bltvavo.com
ad-uaeweblogin.com
adcweblogin-uae.com
aitinnbeskytte.com
anpost-service-fee.com
app-blastl2.com
auamp-online.com
ausenergyrebate.com
auservices-recordscenter24.com
auspost-rebook.com
ausposthelpau.com
binge-aus.com
bltvavo-portaal.com
boc-helpline.com
bov-attention-needed.com
bov-instructions.com
bov-visa.com
bunq-wep-update.com
ca-url.com
cb-security.com
chop4gwop.com
cloudmanageservice.com
cloudsinfoservices.com
co-reset.com
co-upgradeaccount.com
coimnerce-herstelportaal.com
coinbase-securityhelp.com
coinmerce-io.com
comm-au-verification.com
connect-cb.com
custom-luxpost.com
dhl-sorting.com
digitallog-security.com
digitalsecurity-log.com
dindigitalupdate.com
divert-trackuk.com
economie-kbo-update.com
endre-vlpps.com
energy-relief-fund.com
energy-saving-redirect-encrypted.com
energy-smtp-services-encrypted-redir.com
energylifesaverlife.com
energyofcertainttypicalcodes.com
energyprovider-encryption.com
ethena-fy.com
evri-returns.com
fastddelivert.com
fca-diagnostic-secure.com
fdn-omni.com
fehlgeschlagen-paketzustellung.com
finanz-id.com
find-ordersupport.com
garagelinchamps.com
gov-elec-bills.com
haliconfig-app.com
hellenicbk.com
helpservice-my02.com
ibnab-verify.com
ics-verificatie.com
id-three.com
idauth01.com
info-popso.com
item-trackpro.com
kplus-secure.com
kyc-upd.com
lcs-formulier-7832384.com
ledgersupport-live.com
login-31.com
logincitadele.com
mart-orders02e.com
mettle-accountswitch.com
mfacoinbase.com
mobile-login.com
my-comm-info.com
my-comminfo.com
my-idportal.com
my-portal-au.com
my02-bill-renewal.com
my02-pendingservices.com
my02-renewal-info.com
my02service-login.com
myanpost-update.com
myappaccessanz.com
mybill-details-nz.com
mygov-link.com
myid-trackingportal.com
mynetflixsupport.com
myvault-pp.com
nedbank-sa.com
netaccess-support.com
netflixdomain.com
netflixsupportuk.com
netsupdate.com
new-services-my02.com
nowtrackevr.com
nzta-onlinetolling.com
nzta-tolling.com
online-1bank.com
onlinetolling-nzta.com
op-helpdesk.com
orderitem-status.com
parcel-postal-transition.com
particulares-netbanco.com
payment-nztoll.com
personal-websupport.com
poftrace-order.com
popso-10.com
popso-bps.com
popso-info.com
postnet-operate.com
postoffice-refer.com
potvrdit-tatrabanka.com
raiff-page-meinelba.com
raiff-page-redirect.com
rcicustomerportal.com
redirpage.com
request-cancellation.com
revolutbusiness-register.com
safedigitalsecurity.com
scotiaonline-loginscotia.com
securecode-auth.com
servicehelp-my02.com
services-info-my02.com
sf-uk.com
sfe-verification.com
shipitaus.com
sikkergest.com
sikkertilgangld.com
sikkerutsjekk.com
skinny-updateinfo.com
spaka-psd2.com
spotify-sa.com
storniere.com
streetlab-live.com
streetlablive.com
streetlabnft.com
successful-update.com
successful-updated.com
supporthelpdesk-blockchain.com
supporthelpdesk-kraken.com
supporto-scrigno.com
tan-aktuellierung.com
terms-services.com
testingdomain23100222.com
toll-fees.com
tolling-fees.com
tollsbymailus.com
track-tx33gb.com
trafikbetalinger.com
trstwalsecu.com
tymebank-sa.com
updatemyacc.com
updateoplysninger.com
user-review24.com
validate-comm-au.com
ver-05.com
verifizierungs-plattform-de.com
verify-22.com
verify-wise.com
voda-plan-secure.com
vodafonemobile-services.com
vub-idp.com
westpac-secure-device.com
westpac-security-verify.com
wormholereview.com
x2emx.com
x2gives.com
your-shipstatus-gb203.com

# Reference: https://x.com/frdfzi/status/1823168565593145448
# Reference: https://www.virustotal.com/gui/file/75255458591983b4dd1ddce7f1a62924601c11cb79b4b71fdcd27196fcbe2be2/detection

154.82.110.213:5551
lcleaning.online

# Reference: https://x.com/1ZRR4H/status/1823784098147787038
# Reference: https://www.virustotal.com/gui/file/c71ef3dd95d32d8c35e601b9c702a6e0e16de452f6d0ce8d2014cb89c537e125/detection

scotiapass.cl
vmi2056013.contaboserver.net

# Reference: https://x.com/r3dbU7z/status/1825602040778862747

http://45.149.205.11
ec2-18-221-24-26.us-east-2.compute.amazonaws.com
realizesolucoefinanceiras.com
subtitle42.duckdns.org
xn--6dbahb0bc0ax0b.xyz

# Reference: https://www.virustotal.com/gui/file/185e374dd2fd6a4af02868ca5b31e4e0f0599991d0c89e03836c843d71ca9460/detection
# Reference: https://www.virustotal.com/gui/file/05706cfe8307e43608ab26e361c439d50a4d09d0755fc85f6b25777e4d644472/detection
# Reference: https://www.virustotal.com/gui/file/c209f65c12ece2f21d2627094124df02d36379ee574ff0c4e6cca35c45362909/detection
# Reference: https://www.virustotal.com/gui/file/e03060bd0e83dc8b899ec24d04c4efb8554a8fcb41334f80a90d7a0ef50e75c8/detection
# Reference: https://www.virustotal.com/gui/file/eaad0486e25159a7f6a8bfd702434b5d62da592651e6bfe178f21862d1924286/detection

41.102.141.142:8080
41.103.31.40:8080
91.109.180.10:8080
91.109.180.6:8080
91.109.184.4:8080
91.109.190.7:8080
91.109.190.9:8080
mas000.gotdns.ch

# Reference: https://x.com/Huntio/status/1824864774506901770
# Reference: https://www.virustotal.com/gui/file/bba90d9662dd98d1ad65a6011256f337fe4d36c9d05a42f0c6bfb4c20a367ac3/detection

162.213.249.224:443

# Reference: https://x.com/raghav127001/status/1838053437336109278
# Reference: https://www.virustotal.com/gui/file/3081b25c529d241f95d9216c0224fc43671b28102fd96ffb44ac52316f663815/detection

http://178.157.91.12
178.157.91.12:443

# Reference: https://hunt.io/blog/inside-a-cybercriminal-s-server-ddos-tools-spyware-apks-and-phishing-pages
# Reference: https://www.virustotal.com/gui/file/66b768574ebcd23b30ced030faf19c0d40e78ef8f6f1aeec1b7c4c445652746b/detection
# Reference: https://www.virustotal.com/gui/file/ef5ee8cefc7f68680824fff6f8435bd857a0befca8b8dd534a23116bc5c340ed/detection

137.184.53.152:7771

# Reference: https://www.virustotal.com/gui/file/9da3724f94f1a87e9d1e326b94b787e77b182017cc70f883c820c7e718182c04/detection
# Reference: https://www.virustotal.com/gui/file/98d8e7539a94c278b1ba4a537953e74d03483f88ecb06f5c78038933d8e4b1d3/detection

142.93.113.245:7771

# Reference: https://x.com/500mk500/status/1844027765500375466
# Reference: https://www.virustotal.com/gui/file/3081b25c529d241f95d9216c0224fc43671b28102fd96ffb44ac52316f663815/detection

http://103.6.4.7
http://103.6.5.3
http://107.148.8.227
http://107.148.8.228
http://109.173.130.217
http://109.173.176.184
http://109.173.178.2
http://109.173.179.132
http://109.173.179.139
http://109.173.188.14
http://109.173.188.39
http://109.173.188.95
http://109.173.236.128
http://109.173.238.118
http://109.173.239.91
http://36.156.102.123
http://37.186.141.80
http://45.138.50.149
http://81.68.64.136
103.6.4.7:443
103.6.5.3:443
107.148.8.227:443
107.148.8.228:443
109.173.130.217:443
109.173.176.184:443
109.173.178.2:443
109.173.179.132:443
109.173.179.139:443
109.173.188.14:443
109.173.188.39:443
109.173.188.95:443
109.173.236.128:443
109.173.238.118:443
109.173.239.91:443
36.156.102.123:443
37.186.141.80:443
45.138.50.149:443
81.68.64.136:443
agmos011.com
agmos022.com
agmos033.com
agmos055.com
agmos066.com
agmos077.com
agmos088.com
agmos099.com
nos088.com
nos099.com
wwwmos011.com
wwwmos033.com
wwwmos066.com
wwwmos088.com
wwwmos099.com
xlevod.com
777.aghga039.com
888.nos011.com
888.nos022.com
888.ov9999.com
999.nos011.com
m.xlevod.com
p.xlevod.com

# Reference: https://x.com/malwrhunterteam/status/1850130384370991466
# Reference: https://app.validin.com/detail?find=Tap%202%20Earn&type=raw&ref_id=76472b2764b#tab=host_pairs
# Reference: https://www.virustotal.com/gui/file/9bdd2831b86933442f4f3d004b2c286b3ec182e24fbcd3350d643dc68fe39847/detection

tap2earn.network
atcbot.app
business-cannibalise.quarantine-pnap.web-hosting.com
game.bluebonk.com
game.tapcoin.cash
game.taptoearnusd.com
game.taptoearnusd.online
play.atcbot.app
play.ttajcoin.io
tapcoin.cash
taptoearnusd.com
taptoearnusd.online
ttajcoin.io

# Reference: https://www.virustotal.com/gui/file/2913960e725ea4eb894f08701a6ad1184ec337e526ecf83ccd3deb4cddd7bc02/detection

154.216.17.170:4444

# Reference: https://x.com/0xDanielLopez/status/1855932745135899098
# Reference: https://x.com/g0njxa/status/1855947819648975306
# Reference: https://www.virustotal.com/gui/file/d9e7c484d439cfa181ff9a14aabcc4117b48bb0232e39d5abf93d114210d0130/detection

aemet.blog
aemet.fun
aemet.site
aemet.store
myapp.wtf
app.myapp.wtf
rosybrown-louse-890740.hostingersite.com
/AEMET/Descarga.php

# Reference: https://x.com/g0njxa/status/1858870817125191686

87.120.117.136:7771
us03web.com

# Reference: https://x.com/malwrhunterteam/status/1862622846809166136
# Reference: https://tria.ge/241130-cc7pnswqdt
# Reference: https://www.virustotal.com/gui/file/ed98c0f937f561ae1dcc213b7e9d6c788a5f6b90dc26980a44dd3d81b100c66a/detection

178.255.218.228:7009

# Reference: https://x.com/midnight_comms/status/1863056636379529475
# Reference: https://search.censys.io/search?q=services.tls.certificates.leaf_data.subject_dn%3D%22CN%3DDESKTOP-J5KHCJB%22&resource=hosts

178.255.218.201:3389
178.255.218.203:3389
178.255.218.204:3389
178.255.218.205:3389
178.255.218.206:3389
178.255.218.207:3389
178.255.218.208:3389
178.255.218.211:3389
178.255.218.212:3389
178.255.218.213:3389
178.255.218.216:3389
178.255.218.217:3389
178.255.218.219:3389
178.255.218.220:3389
178.255.218.221:3389
178.255.218.222:3389
178.255.218.223:3389
178.255.218.224:3389
178.255.218.225:3389
178.255.218.226:3389
178.255.218.228:3389
178.255.218.229:3389

# Reference: https://www.virustotal.com/gui/file/cbcfab0abf1f853417daf1709b643e5a53bb29afc5b36b388c8ca6f36392db1d/detection

220.197.226.88:7771
adnroid.ddns.net

# Reference: https://x.com/9823f_/status/1866159322016940111

http://200.9.154.61
200.9.154.61:443
chap-busy.corridorplug.com
chap-busy.hatchmix.com
chap-busy.knidewent.com
chap-busy.prestoutile.com
chap-busy.protooption.net
chap-busy.roselintel.com
chap-busy.setupship.com

# Reference: https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/
# Reference: https://www.virustotal.com/gui/file/ef5b77c003be850406ff8a18a35eb094632dcdc8f6112efcde036e3c454dde0c/detection
# Reference: https://www.virustotal.com/gui/file/8bb90de7e397872fb721f7836982b6308d90536c63736e16b604e7830c5f3003/detection
# Reference: https://www.virustotal.com/gui/file/843745687713d99638a27c3e3caa2777df5ec169227ec51b8e778402528f47a6/detection

183.83.172.232:7771
183.83.172.232:7772
198.27.120.241:7772
54.236.51.225:7771
infinityhackscharan.ddns.net

# Reference: https://x.com/JAMESWT_MHT/status/1884595635594129537
# Reference: https://www.virustotal.com/gui/file/e056ffe82465d52687b5b27d28897890c6292a4b784099d718b5abe7f3db56ff/detection

it-mediolanumbanca.com

# Reference: https://x.com/JAMESWT_MHT/status/1884600123054809348
# Reference: https://www.virustotal.com/gui/file/25226992e7111d7229706ce802d9716459d9e04097118ef1193c8c769bfe76c8/detection

app-antiriciclaggio-mps.com

# Reference: https://x.com/malwrhunterteam/status/1885367133757964362
# Reference: https://www.virustotal.com/gui/file/176ca2ba03f06e4a99b38a2f52e9dd18a0e821bf8e2089c280b305df10d22c08/detection

miningtrumpmemes.com
trumpmining.pro

# Reference: https://x.com/illegalFawn/status/1886321917939880096

bnl.nstallapp-up.com
credem.nstallapp-up.com
creditagricol.nstallapp-up.com
nexi.nstallapp-up.com

# Reference: https://x.com/illegalFawn/status/1887436046633189431
# Reference: https://www.virustotal.com/gui/ip-address/91.212.166.16/detection

0nlineteamsau.sbs
acc-member.sbs
accesshubsantander-portal.sbs
alert-td-safety.sbs
applestore.sbs
apps-appstores.sbs
authorizedverify.sbs
autoloader.sbs
bnkdisputes.sbs
bofa-secure.sbs
boldcleaningservice.sbs
case-authentications.sbs
chas3-secureauth.sbs
citzenbank.sbs
customertransactionteam.sbs
dctech.sbs
disputesmydebit.sbs
eliteqa.sbs
flagstar.sbs
freetrialpanel.sbs
gatecitionline.sbs
gatecityonline.sbs
greenstatesolution.sbs
grownfc9lm.sbs
gruffer.sbs
gvcscs.sbs
hmmmnaze.sbs
hsjdi.sbs
hudsonvall.sbs
hugfhuj.sbs
judithnormann.sbs
metilameg.sbs
mrrelay.sbs
mtb-alert.sbs
navy-fedsecure.sbs
navy1fed.sbs
navyfederal-secures.sbs
navyfederall.sbs
niggers.sbs
noreplysecurity.sbs
officedesk.sbs
online-pnc.sbs
p3t-c4t.sbs
retail-santander-login.sbs
roadcityband.sbs
rockersfellas.sbs
rstportal.sbs
russian-server.sbs
santander-accesshub.sbs
secur1auth.sbs
secure-laketrust.sbs
securewireless.sbs
security-alert-td.sbs
securnet1-autlog.sbs
spokanu.sbs
testbypakito.sbs
testingtrialpro.sbs
truoffice.sbs
virusscanner.sbs
websterphotography.sbs
wel1.sbs
wells-secure-verify.sbs
wellsbg.sbs
welsiefargo.sbs
x5c1.sbs
yahuovdy-santanderaccess.sbs

# Reference: https://x.com/johnk3r/status/1888638079012880484
# Reference: https://tria.ge/250209-vqak7sxlhl/behavioral5

146.235.38.234:3711
sdbvkwo.localto.net

# Reference: https://x.com/malwrhunterteam/status/1895039170147484030
# Reference: https://www.virustotal.com/gui/ip-address/185.10.19.101/relations
# Reference: https://www.virustotal.com/gui/file/83bbbbfd9e2b34c08b6e2d38ec029ccd63b459006e528bb39d196f9681ff310b/detection

ag0dadescargar.com
agodadescargar.com

# Reference: https://www.virustotal.com/gui/file/474bc68cb08b5d9425ba13f737def89babf1252aedb660bf9063bbd39deb7c8a/detection

128.90.144.93:7771
myhousecam.ddns.net

# Reference: https://x.com/illegalFawn/status/1899031814276084174
# Reference: https://x.com/guelfoweb/status/1899055407135334573

185.118.79.231:7771

# Reference: https://x.com/naumovax/status/1901659639684440256
# Reference: https://www.virustotal.com/gui/file/bf134495142d704f9009a7d325fb9546db407971ade224e3718a84254e9ff03e/detection
# Reference: https://www.virustotal.com/gui/file/18e92e57568ad5aad4635c932782ee1c44add6c0718e5c794f6e66a70f78a984/detection

204.12.253.10:6834

# Reference: https://x.com/malwrhunterteam/status/1912850663257649592
# Reference: https://app.validin.com/detail?find=65.20.108.199&type=ip4&ref_id=792c8cb35e0#tab=resolutions (# 2025-04-17)
# Reference: https://www.virustotal.com/gui/file/758f35d9eb186e78c7ec936eaa51d72ea91bec09dd724ddf76269f259e547d35/detection

androideivce.site
checkloading.site
chromeupate.online
failedload.online
loadingvideo.online
systemupate.store
videoshow.website
vpn.vipsoft.site
android.systemupate.store
update.systemupate.store

# Reference: https://x.com/malwrhunterteam/status/1917525236196462819
# Reference: https://www.virustotal.com/gui/file/7e5691af95ef9ec44a18f4590f47792f5dc56a71ffc9ca78e93f03950f7e6063/detection

veepn.vip
download.veepn.vip

# Referecne: https://x.com/malwrhunterteam/status/1926231098394116138
# Reference: https://app.validin.com/detail?find=b5e0bba2be69f33c5ab6c9a186ff9dde&type=hash&ref_id=7fccba7d4ef#tab=host_pairs (# 2025-05-24)
# Reference: https://www.virustotal.com/gui/file/58635b1aa9c6c0924786c6f46d1bbb13bf56cb5178680581ff573f652a66a52f/detection

plamarkt.shop
playgooqle.click
plmarkt.click
plmarktq.click
plmarqt.click
plmartq.click
videocalllstart.click

# Reference: https://x.com/malwrhunterteam/status/1928053195009294347
# Reference: https://www.virustotal.com/gui/file/2f0133030a3125f76c09c80c28124684d31e9becbb491ac061c1c9502e730778/detection

193.161.193.99:31501
aviraantivirus101-31501.portmap.io

# Reference: https://x.com/androidmalware2/status/1930537022210388018
# Reference: https://www.mobile-hacker.com/2025/06/05/analysis-of-spyware-that-helped-to-compromise-a-syrian-army-from-within/
# Reference: https://www.virustotal.com/gui/file/d83204a01d3c6f14096f6fe1b59e3f11e8f2c6fb2736792febffb1701fe9a5bc/detection
# Reference: https://www.virustotal.com/gui/file/c82aa80d45022ae7f009e82586e34f990288625c1c876c85e07df74ab3136450/detection
# Reference: https://www.virustotal.com/gui/file/28fef58c7817926cf7dc0f44e92c1e6716d125b2675e753d415dafe8e7094b37/detection
# Reference: https://www.virustotal.com/gui/file/60ca970a774c5ff1ada52170857989721158064b932e999714bff7f4bd8b570c/detection
# Reference: https://www.virustotal.com/gui/file/db041da97c1f30a6fc7765994b556839f8550774af1662ae0ab105e2fc324487/detection

161.35.69.58:4444
193.161.193.99:40441
syr1.online
syr1.store
west2.shop
khalefaa-40441.portmap.host
nurth-36527.portmap.host

# Reference: https://labs.k7computing.com/index.php/spymax-a-fake-wedding-invitation-app-targeting-indian-mobile-users/
# Reference: https://www.virustotal.com/gui/file/389c4405425dd1efa13be32ccf17604a341c0948bcbfa0941aa94240ee962395/detection
# Reference: https://www.virustotal.com/gui/file/16e6ab435fa75bc6ebc3da83dc292eb5605e3d15dd83cf4e001a9e7077ed97e2/detection

104.234.167.145:7860

# Reference: https://www.virustotal.com/gui/file/1a18da0f5ecdba6c9dcb41f74af7a25702130f096ec205230d21addfa8ac73aa/detection

154.61.75.99:8881

# Reference: https://www.virustotal.com/gui/file/bb9c4ab8284aabc40ebdb3278cbcd2c8f9aef9d8e7e7ff4b3e6a193ffccf96d0/detection

95.213.195.71:3210
95.213.195.71:3211
95.213.195.71:3212
pwndroid.bounceme.net

# Reference: https://www.virustotal.com/gui/file/29a9b057433c746229c10846133742fc3f0e3881488fbd0c422eb73bdf89c494/detection

45.137.22.99:8443

# Reference: https://x.com/KesaGataMe0/status/1971389627438440575
# Reference: https://www.virustotal.com/gui/file/b3f0dd543647b423d71371051ac9236b550a6bdc0a58e9cb84bc867d8e4dc464/detection

jsda-check.com
jsdajp.click

# Reference: https://www.threatfabric.com/blogs/datzbro-rat-hiding-behind-senior-travel-scams
# Reference: https://www.virustotal.com/gui/ip-address/154.89.152.94/relations
# Reference: https://www.virustotal.com/gui/ip-address/38.14.248.254/relations
# Reference: https://www.virustotal.com/gui/ip-address/43.153.199.11/relations
# Reference: https://www.virustotal.com/gui/file/ed2313bfebe03ff29a7c802ddd471583cc8da76bf5cb9f418ae7d999d6a0b9fb/detection

http://38.14.248.254
ausgoldenyears.com
aussieseniorlife.com
butlerpros.com
butlerservicesapp.com
clean-sg.com
cleanmateau.com
cleanmatesau.com
cleanprosg.com
cleansgs.com
cleansmalaysia.com
cleanssg.com
goldenagemy.com
goldenelderly.com
goldenjoy.my
goldenlifetimes.com
goldensenior.my
goseniorcanada.com
greencleansg.com
joysenior.my
maidinsg.com
malaysiaelderly.com
malaysiagettingaway.com
malaysiagod.com
malaysiaseniorapp.com
malaysiaseniorgroup.cfd
malaysiaseniorgroup.com
myseniorapps.my
quick-cleaning.com
rxdodvhh.xyz
seniorapphelp.com
seniorgoclub.com
seniorgroupapp.com
seniorgroupapps.com
seniorlifes.com
seniorsunitedmalaysia.com
sgcleanpro.com
silverjourney8.com
silversurges.com
singaporeholidayhub.com
sparklecleancleaning.com
sparklesgcleaning.com
ukseniorcitizensgroup.com
urbancleansg.com
audownload.butlerpros.com
audownload.butlerservicesapp.com
audownload.cleanmatesau.com
audownload.silversurges.com
dance.seniorgroupapp.com
download.butlerpros.com
download.butlerservicesapp.com
download.cleanmatesau.com
download.goldenelderly.com
download.seniorgroupapp.com
download.seniorgroupapps.com
download.silversurges.com
idndownload.goldenelderly.com
idndownload.seniorgroupapps.com
idnlogin.seniorgroupapps.com
login.seniorapphelp.com
login.seniorgroupapp.com
login.seniorgroupapps.com
ukdownload.goldenelderly.com
zadownload.goldenelderly.com

# APK

/aastore.2.1.apk
/DiagnosticoBB.apk
/e-adalet.apk
/Encro_Chat.apk
/flipkart.apk
/FUCK__U_.apk
/HediyeKart%C4%B1n%C4%B1Kullan.apk
/HediyeKartınıKullan.apk
/karma.apk
/KUPRJQ.apk
/modelwork.apk
/myATT_sign_en.apk
/Signalscrypto.apk
/spymbutlerax.apk
/Synhron.apk
/Tap2Earn.apk
/Tetefruit.apk
/Threemaa%20Messenger.apk
/UcretsizIzle.apk
/up4net-pubg-mobile.apk
/Youtube22.apk
/YouTubeStats.apk
