# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# curl https://amtrckr.info/json/name/androrat | jq '.[]' | jq '.url' | tr -d '"' | cut -d ':' -f 1 | sort | uniq | grep -vE '^[0-9.]*$' | grep -vE '^[^.]*\.[^.]*$'

1756mostacc.ddns.net
1987omid.ddns.net
5551520.no-ip.biz
726627.duckdns.org
aagaro.ddns.net
abinova.ddns.net
abs3nt.ddns.net
adelxxbx.no-ip.biz
adesja1337.no-ip.biz
aerror.no-ip.biz
ahag3ld1.ddns.net
alihoseini.no-ip.biz
alldebrid.duckdns.org
alpheron.duckdns.org
aminecity.ddns.net
amirhosein0074.ddns.net
anagliz.ddns.net
andqip.ddns.net
andro0161.no-ip.info
andro123.duckdns.org
android1385.ddns.net
androidbra.duckdns.org
android.no-ip.org
androidupdate.ddns.net
androjan.ddns.net
androkhan3100.ddns.net
androrat1226.ddns.net
androrat143.no-ip.biz
androrat1.no-ip.biz
androratbtas.no-ip.info
androrat.servegame.com
androratttt.no-ip.org
androratvirgin.duckdns.org
androrat.zapto.org
androtorma.ddns.net
anishmishra66.ddns.net
anonimousdre180.ddns.net
anonsa.ddns.net
anonvirus.ddns.net
anonymousip.ddns.net
apolo30.no-ip.org
arman.no-ip.biz
asadhashmi.ddns.net
asosha4ed.no-ip.biz
atin.ddns.net
atsizinoglu.duckdns.org
aymen1852.ddns.net
aymencossassi.ddns.net
bahoom.no-ip.biz
barish121.no-ip.org
behnamhack.ddns.net
bensphonetracker.ddns.net
berkani0774.no-ip.org
blackghostdc.duckdns.org
bmt96.noip.me
boinserver12.no-ip.info
c1.no-ip.biz
canaria.no-ip.info
charifo1310tok.no-ip.biz
comet.myftp.org
createmeon.zapto.org
cricbot.no-ip.info
crime.ddns.net
crisprueba.ddns.net
cyberandro.duckdns.org
dagohack.no-ip.me
dangerlove.no-ip.biz
danialdelta.ddns.net
danialmostafaei.no-ip.biz
daniele3814.ddns.net
darkshion.no-ip.org
dltelegram.ddns.net
dogecoinspeed.zapto.org
domeer-android.ddns.net
drdamar.hopto.org
droidjack228.ddns.net
drrazikhan.no-ip.info
duyguseliberkay.no-ip.biz
ehsanmaali3.ddns.net
ehsanmaali.ddns.net
elgen1.no-ip.biz
elvis2015.ddns.net
erikatersptra.ddns.net
esharj.ddns.net
fatiha29.ddns.net
fenon158.ddns.net
florian-pc.ksueyuj0mtxpt6gn.myfritz.net
forcehackinglove.ddns.net
fuck4you.ddns.net
gemini85.hopto.org
gentel901.no-ip.org
gert44.duckdns.org
ghanim2017.ddns.net
ghanou1603.no-ip.info
ghfx1.ddns.net
glaive24.no-ip.biz
gogaggg.ddns.net
goog2.no-ip.biz
goshasb.ddns.net
habbo.no-ip.org
habib1376.ddns.net
habib556.ddns.net
hachim07reg.no-ip.info
hackcam.zapto.org
hacker-321.no-ip.biz
hackme.no-ip.org
haiderhacer12.no-ip.biz
hamed1993.ddns.net
hamker.ddns.net
hash0r.no-ip.biz
hatam.no-ip.org
hazhar77.no-ip.biz
helloandroid.no-ip.org
hossam3030.ddns.net
ignoredhost.no-ip.biz
injectman.ddns.net
invisibleghost.no-ip.biz
iran0513.ddns.net
isamdonita.no-ip.org
jafarman.ddns.net
jNkey.ddns.net
johnharim004.ddns.net
juanblackhak.ddns.net
justarat.noip.me
kaliheh.no-ip.biz
kalinne.ddns.net
kalizinho.no-ip.org
kalljo.dvrdns.org
karasqlee9.no-ip.org
karenchik19.hopto.org
kaskw.zapto.org
kasofe123123aa.no-ip.biz
kontolanime.no-ip.biz
kuraist.zapto.org
kusleratnt.duckdns.org
lbossn.ddns.net
linonymousami.no-ip.org
liquidstone.ddns.net
locolocoloco.ddns.net
losever2.no-ip.biz
loveubaby.3utilities.com
makarand.no-ip.org
marcsil.ddns.net
martin123456.no-ip.org
masafat.ddns.net
matgio.duckdns.org
matin.ddns.net
mayyaha.no-ip.info
mazxor.zapto.org
mehtab123.ddns.net
mghorbani78.ddns.net
mikaniki.ddns.net
mikestar.no-ip.biz
miltin2.no-ip.org
misty255.no-ip.org
mjhooollltuuu.no-ip.biz
mmdjj212.myftp.biz
moein1369.no-ip.biz
moha55.no-ip.biz
mohamed11.ddns.net
mohammad2002.no-ip.biz
mohammadhk.ddns.net
mohammedwasib.ddns.net
mohsenfaz.ddns.net
moosio.no-ip.biz
mrblacklife.ddns.net
mrclone97.ddns.net
mrkriper3331.zapto.org
mrm2.ddns.net
msficecream.ddns.net
msn79.ddns.net
mster0102.no-ip.biz
msupdate.myvnc.com
murryapplicazione.no-ip.org
mwanika.no-ip.biz
myhost123.myftp.biz
myonline.no-ip.biz
nassahsliman.ddns.net
newxor2.no-ip.org
nexmopro830.ddns.net
nulldoesnotexist.duckdns.org
persir.no-ip.biz
photoeditor.ddns.net
pruebasernesto.ddns.net
qwerty1212.ddns.net
r00t.myftp.biz
r3cxw.ddns.net
rafkin85.ddns.net
rahimtrx.hopto.org
rarwindow.no-ip.biz
recycled.no-ip.org
redckard.ddns.net
redcode.ddns.net
replace.duckdns.org
rumpelztinzkin.sytes.net
rustyash.no-ip.biz
s3b4s.noip.me
s3rv3randr0id.no-ip.biz
sabbah.duckdns.org
saiber-far68.ddns.net
sajadianh.ddns.net
salarkalat.ddns.net
samersamerz.no-ip.biz
samy777.no-ip.biz
securepurpose.no-ip.info
securitytestt.ddns.net
servidor23.ddns.net
sesizkal32.no-ip.biz
setts.no-ip.org
shahabhacker.ddns.net
shakaky.ddns.net
sherlockholmes.duckdns.org
shosh.ddns.net
simbabweratte.hopto.org
skipy.ddns.net
slavikkalinovskiy.ddns.net
sonkar412.duckdns.org
sramic.ddns.net
suckmordecock.duckdns.org
svn-01.ddns.net
takpar67.no-ip.biz
telegram-stickers.noip.me
telegram-tools.no-ip.biz
testan.ddns.net
thekillers.ddns.net
thelostan.ddns.net
tom928.no-ip.biz
toyman6699.no-ip.info
updatexxx.hopto.org
usa20002015.ddns.net
uzzal619.viewdns.net
vikas.no-ip.biz
vipmustafa.no-ip.info
volnado.sytes.net
vpn0.ddns.net
war10ck.serveftp.com
webi7.ddns.info
whatsradar.no-ip.biz
xyz2145.ddns.net
zadehasan1.ddns.net
zaheerkhan786.ddns.net
zal75zk.ddns.net
zaqatala.dynu.com
zola123.no-ip.biz
zongkahani.no-ip.biz

# Reference: https://twitter.com/malwrhunterteam/status/1252907606043222016
# Reference: https://www.virustotal.com/gui/file/d723869a8f5ffdc9c60539b5358ba9d284e22ee0e5007410f5844946871744c9/detection

173.249.50.34:12182

# Reference: https://www.virustotal.com/gui/file/a067b671ceb08e293a535072100d165b1f25935905624c7ab3302736c09d2156/detection

37.43.70.221:1337
zxxaq1231123.ddns.net

# Reference: https://www.virustotal.com/gui/file/3b817c21371cb62aaea88e44402420d4bc0c5ac0a79b343184647e83380b2609/detection

41.79.77.92:900
ed4.zapto.org

# Reference: https://www.virustotal.com/gui/file/6b23c3c49caa14889e63c80548969a8c71610e26b9a70e64a1729e7581cef0bf/detection
# Reference: https://www.virustotal.com/gui/file/197f92dc3c660cc85e49aa5d3771d384396216b6a63dded014270163991c00fc/detection

180.93.67.177:4444
bactran.ddns.net
btran.ddns.net

# Reference: https://twitter.com/_kamifai_/status/1321348512135680001

147.32.83.253:1334

# Reference: https://www.virustotal.com/gui/file/69f49da76f2b6295ef18b9050cae385c638b38f8f19042880b346190bf41a0bb/detection

52.14.18.129:18700

# Reference: https://www.virustotal.com/gui/file/1f9d5e09e597be7a714e6ffcc40e5d418b79cbbc60ce22777f8b92273d9b1fa3/detection

52.14.18.129:18265

# Reference: https://www.virustotal.com/gui/file/8cb542f5793279b8a11af28e9352f41d400856a28e40ed1daa323b47f9ea3e3c/detection
# Reference: https://www.virustotal.com/gui/file/2259c89d2c5e1d8324f075135b03492f393860b9911855e84f50ed6b3699ac4d/detection

209.127.19.241:10284

# Reference: https://www.virustotal.com/gui/file/4b044d12a94c1f10c04cdf641eca835d478d1f25b75a2e5432ae21563a778a05/detection
# Reference: https://www.virustotal.com/gui/file/bd47bb2536276b1a0ad42a4a84609fafc4b48c8d2259067fed2f5305f42916c9/detection

109.12.230.205:1177
78.116.42.235:1177

# Reference: https://www.virustotal.com/gui/file/4a0f92ba8d45dd208c8bb06b2624d64dccb89e0c6a22e36409e1fd6d010ac3d9/detection

197.116.230.50:8080
5.175.214.108:8080

# Reference: https://www.virustotal.com/gui/file/8354a8369d17eaea87747ad5e3e879b1b324859a5ed6f1a2c3c6eb5667893664/detection

154.241.251.236:23

# Reference: https://www.virustotal.com/gui/file/ddcdcce1fc0d2b48010ef023987d82cdb8bc4cf153843fb7f97ea297a5d76a10/detection

154.241.37.125:2000

# Reference: https://www.virustotal.com/gui/file/d8c58af12a1d7d376714ed151c73dab18ecb02d8898492b94db4f27f86cedd9d/detection
# Reference: https://www.virustotal.com/gui/file/81ec120d9b515d03974fc14b5346b173547e3fb33c1ec122d49a7917393acbc5/detection

84.188.90.148:1334
84.188.90.148:4444
androrat123.hopto.org

# Reference: https://www.virustotal.com/gui/file/77f219b839462f5d70844ba1e44b6121f4daca669071cf8a9fcfe9530d471e5b/detection

173.225.115.218:1088
81.94.199.165:1088
tsklloops.myftp.org

# Reference: https://www.virustotal.com/gui/file/12850cc6429c12a958bd67609ff065f00be83c9c585ea14deb8d8b1cb82dc781/detection

66.235.175.91:4098

# Reference: https://www.virustotal.com/gui/file/1f1f1458ea5d7bc1997338b261aff80b3a201741022c47453038c4b89bb132b5/detection

0000666.no-ip.biz

# Reference: https://www.virustotal.com/gui/file/9c07a971b59250e25d990f4262bd3412e625f29550d28f5d1fbde047388df03c/detection

141.255.144.9:1688