# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/malwrhunterteam/status/1240215543480750082
# Reference: https://www.virustotal.com/gui/file/f3b0aa7d9664258c9e1783289c4fc56e05b23e3eb9a3557f55733806564deb73/detection

45.142.212.126:6677

# Reference: https://www.virustotal.com/gui/file/d920f89a4d8ae2f2cc597779c57e515c0f9451a66ecdaeef35169f6d0a43a35d/detection

176.57.69.250:6677
goldfrommadagaskar.pw

# Reference: https://www.virustotal.com/gui/file/1bd9e1a6c02737ffdfca1d3c32985361a5c5bdc5da7cc2593291650eb32dd15d/detection

204.95.99.26:6677
zyzoom007.no-ip.org

# Reference: https://unit42.paloaltonetworks.com/how-cybercriminals-prey-on-the-covid-19-pandemic/ (# RedLine Stealer)

covid-19-gov.com

# Reference: https://twitter.com/jorgemieres/status/1255243161099735046

192.154.229.100:6677

# Reference: https://www.virustotal.com/gui/file/56f4a42801fab4c065a0cf4d34ee6d476419d7ab5570268d811cbfbdfa6f7e5e/detection

45.142.214.84:6677

# Reference: https://twitter.com/yusaerguven/status/1263470947706773504

xalonndoth.xyz

# Reference: https://app.any.run/tasks/2e6b708f-3add-4428-9f4c-f087874050a5/
# Reference: https://www.virustotal.com/gui/file/f6c756d3b2667ac43f733489fffd65d440ea62da586eb792877dcaab2074873d/detection

http://45.66.9.166

# Reference: https://twitter.com/iamwinstonm/status/1275548216470233092

http://45.76.21.56
yy31t.chokun.ru

# Reference: https://twitter.com/James_inthe_box/status/1283383567028908032
# Reference: https://www.virustotal.com/gui/ip-address/198.23.172.50/relations

http://198.23.172.50

# Reference: https://www.virustotal.com/gui/file/ba8d3d5d0d4b0d2178ea3ed1ff72e49ac8f6b608aac2718c6cf9904390dbeb80/detection

http://45.142.214.206

# Reference: https://www.virustotal.com/gui/file/aa30299c8266809acb727ef5ec89a80f0cdbcc848550607743f256438f00e398/detection

http://178.159.43.68

# Reference: https://www.virustotal.com/gui/file/96f235bfbc90b71caa6e4da9a3d73d33a035d944f80f9c53afc4da0ee1a10fce/detection
# Reference: https://www.virustotal.com/gui/ip-address/80.89.238.64/relations

http://80.89.238.64

# Reference: https://www.virustotal.com/gui/file/2d52cbd88d34e2928831164fba18a62dd72ed96927059feca90941c38f45e0d4/detection

80.89.238.64:8080

# Reference: https://www.virustotal.com/gui/file/a14148130d16c614e137f9aa0d4a24c09136db6b21974a594df6770b9b1d922d/detection

80.89.238.64:8087

# Reference: https://www.virustotal.com/gui/file/74110b6941ce18add7a009279ce36b06917c66025734daf729bc8bae7ec49cb1/detection

80.89.238.64:8990

# Reference: https://www.virustotal.com/gui/file/070967deea1294d9f3ae5993cc6d9c8bf5d800640b1477944838c02a5613e23d/detection

fragly.top

# Reference: https://www.virustotal.com/gui/file/54567d476e085f5aa1ba45e0b80e7eec75337d93de996f118da592b93b144c8e/detection

3.127.146.248:6677
a0438890.xsph.ru

# Reference: https://app.any.run/tasks/101376ff-5daa-4b49-a1b9-fb391c852079/

http://95.181.172.34

# Reference: https://www.virustotal.com/gui/file/4f0c8558a81e024b9248403a05a3aa50163da44d9e966822acc77926aeb17abc/detection

http://45.142.213.244
45.142.213.244:88

# Reference: https://www.virustotal.com/gui/file/409d53cfaf4e43f9257c281b2026fe075b5459d1bb19e5eb30d8ff75e882689c/detection

45.142.213.244:27016

# Reference: https://www.virustotal.com/gui/file/9a234c43b87d16370414c22b3b2f37f2f92f86da711fab87e392eb1fbc9c0cde/detection

45.67.228.55:27016

# Reference: https://www.virustotal.com/gui/file/4759a80ce3801139ad2972a42e524a728c2b19d9c6a9d82d7a52ad2742bf9d0f/detection

omilonian.club

# Reference: https://www.virustotal.com/gui/file/cbbffd737dab38f3f637a532e210273f295243fd83a130003d36eb0689df2282/detection

dirtate.club

# Reference: https://www.virustotal.com/gui/file/4b6956cc243efb50c75fb740540bf1ec648ee56433e9868d85751f3677e50bca/detection
# Reference: https://www.virustotal.com/gui/file/3b942a9b290020ae3ff94d7af18dbe23669cbfb1d9e16272048ebcc88117cf8d/detection

http://159.69.40.187
j1093145.myjino.ru

# Reference: https://www.virustotal.com/gui/file/89773ed5a0fd438d9c7d86da129b19d945be5696b736314739a2364839a3a2b4/detection

74.208.166.46:22

# Reference: https://www.virustotal.com/gui/file/9da816bddae582a08537dd5804549c0b2cf594f4ac2f9065d242d61e41d78259/detection

rrkimal.xyz

# Reference: https://www.virustotal.com/gui/file/029ae517a07624221886a5f2e15bbbecff3d2afed842e4b52eafaec1409f87d7/detection

haroldreadlife.info

# Reference: https://www.virustotal.com/gui/file/0687165c7a9b105319ada7d1ea051a4852a5b2f32c81a322e6af98d0db9d9257/detection

http://195.161.41.183
185.153.198.216:35253

# Reference: https://www.virustotal.com/gui/file/276a4b8565a2cf1eb94e998cd025cd1cc961e034464206f15f0bb1d9a6da27bd/detection

4hzp4c.mydepp.ru

# Reference: https://www.virustotal.com/gui/file/e7b4146f9277fee3e790d8d2d83f9f1fd2d1e263b3eaee3dce79f03f1dcf20af/detection

http://81.177.165.192
8hjbhuh.regfrodom.ru

# Reference: https://www.virustotal.com/gui/file/c07df4766d20cd66406250d96e6b4c3e632688c784caec6f780387686117ddf5/detection

recipeskitchen.info

# Reference: https://www.virustotal.com/gui/file/206f7d63fc4fedf05a3880eda3671b2338ba2cebeaf1a58f65d7a7bcdb68a2b8/detection

http://217.107.219.68
217.107.219.68:35253

# Reference: https://www.virustotal.com/gui/file/d86500e2e0bfb50d01b7836ded1cc2e4573152a66819b487e1a188694f7098eb/detection

elerinomi.xyz

# Reference: https://www.virustotal.com/gui/file/93e56b013a5c3b7125ed9dfbce83683cd10c9507fe7c7039bdf498926b7f6776/detection

http://195.123.241.230

# Reference: https://www.virustotal.com/gui/file/487b0a4a808b62ec9c1ea73ff12e5307ba02c0d07339feb8f8aad79f429eb9f8/detection

http://185.153.198.216
http://193.38.54.91
185.153.198.216:35254
193.38.54.91:8080

# Reference: https://www.virustotal.com/gui/file/974b11810776fd4496f5ca9a8b5d0b67e7f713c289477f2b09973a26f2ab82af/detection

http://49.12.11.188
j1093144.myjino.ru

# Reference: https://www.virustotal.com/gui/file/cbec9612f5b1c5379fdc3d746caff4a4b5695b3292c6099700ab63c6bd45bdb0/detection

195.2.70.204:35253

# Reference: https://www.virustotal.com/gui/file/e99ed0cb6113a0b1713147da8ba391315cd7eeecc69e95dfd651bd5966d97eef/detection

http://179.43.170.130

# Reference: https://www.virustotal.com/gui/file/fc62c32a79b9d84ad82c08d5197df46e0699c94282c24f9f4df6887b9b6c62e6/detection

http://195.2.71.122
5v78i24.mydepp.ru

# Reference: https://www.virustotal.com/gui/file/75731505d87f120fc84cd1453a5249de96f6633613b3dcbdc1ad2fdbe9d0a673/detection

http://80.208.231.136

# Reference: https://www.virustotal.com/gui/file/a28cab7a918a6d7b70304aa304f18ab4bee134bd4c1558e7ecf85533158671da/detection

43lox5.mydepp.ru

# Reference: https://www.virustotal.com/gui/file/f13d0d8fba18fe459fb352640410b4e259d78afd37d053e97fcc3bc366be629e/detection

http://195.2.92.164

# Reference: https://www.virustotal.com/gui/file/42e142781db3adc5da9a6072c51c9a2258e42ad2ec9e362503e172443b72062c/detection

http://212.162.148.15
3f6mm0.regfrodom.ru

# Reference: https://www.virustotal.com/gui/file/6afc908999cba554d911d760c5d4dc065fb72d06dcecd7e599035833332d910e/detection

http://93.115.22.96

# Reference: https://www.virustotal.com/gui/file/d5200ca81e04d0d3e23fe9f35cde3f7ceef75e0ac5f5e5df710c30761de46a82/detection

http://45.67.228.55

# Reference: https://www.virustotal.com/gui/file/803829f97e020d3d5f35bd9fc11568f54ca7ab01394053e8ade7e5e299f3263e/detection

http://159.69.249.205
xuriq.makeiralone.ru

# Reference: https://www.virustotal.com/gui/file/9c3d3d932f2cfd6b1278e544ec50fba691fb3372c808ad4ce83c182ac596eb61/detection

j1093151.myjino.ru

# Reference: https://www.virustotal.com/gui/file/bc6cf1a2f555a8c40590edebdf5f62a36ec96c637d192ce3777797c22103a336/detection

http://195.161.41.119

# Reference: https://www.virustotal.com/gui/file/77b6705f4dbf707dc4c28ee59f58c5d7ae3a452c6a05a920cd07034dce05bc78/detection

4xnnbwh.aletitself.ru

# Reference: https://www.virustotal.com/gui/file/4ad6224ad13d804a0e51b000f1d3d8467bf3fd92adae42181505dad425fc3c16/detection

wcmj3.regfrodom.ru

# Reference: https://www.virustotal.com/gui/file/86582d84d6e4b1321431c74645528727169c1af9b23d396abaeeccc9adbbe7ce/detection

http://45.139.236.84
45.139.236.84:35253

# Reference: https://www.virustotal.com/gui/file/6d3d3f597ccdc42b0944f4fcbdc679a7aa431b726717d8ddea75433e0feb0480/detection

26geyw.makeiralone.ru

# Reference: https://www.virustotal.com/gui/file/d1a5e0e77ac5fcc92e382632e7aba769ddc8c579079e9b87752844b9f47afb66/detection

zphy9.mydepp.ru

# Reference: https://www.virustotal.com/gui/file/67582fe3899bf3660787599bfca689a22fb68401ec59e35b147fdaba61f23063/detection

http://49.12.104.203

# Reference: https://www.virustotal.com/gui/file/6225c71091ec37b9e09972c04738a81212a51adeab87ff7a1a3bb7b150268026/detection

tq5d.regfrodom.ru

# Reference: https://www.virustotal.com/gui/file/09d5ddcab205a8a1a7dc89eb59388fc5ac860d8bd907e8652244ff2bcf00929e/detection

643yrw6.regfrodom.ru

# Reference: https://www.virustotal.com/gui/file/5d19f63183cbe6d2fa0c5f583d7eea04d4b772c00856beba98085ccb1cc513c4/detection

k12.regfrodom.ru

# Reference: https://twitter.com/JAMESWT_MHT/status/1297878628450152448

95.181.172.34:35253

# Generic

/IRemotePanel
