# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.guardicore.com/2020/04/vollgar-ms-sql-servers-under-attack/
# Reference: https://github.com/guardicore/labs_campaigns/blob/master/Vollgar/connect_back_domains.md
# Reference: https://github.com/guardicore/labs_campaigns/blob/master/Vollgar/connect_back_ips.md

103.53.211.94:10020
103.53.211.94:22251
103.53.211.94:3213
103.53.211.94:9383
145.239.23.7:10020
145.239.23.7:22251
145.239.23.7:3213
145.239.23.7:9383
154.211.14.66:10020
154.211.14.66:22251
154.211.14.66:3213
154.211.14.66:9383
154.221.19.221:10020
154.221.19.221:22251
154.221.19.221:3213
154.221.19.221:9383
154.221.26.108:10020
154.221.26.108:22251
154.221.26.108:3213
154.221.26.108:9383
180.97.220.5:10020
180.97.220.5:22251
180.97.220.5:3213
180.97.220.5:9383
183.131.3.196:10020
183.131.3.196:22251
183.131.3.196:3213
183.131.3.196:9383
185.172.66.203:10020
185.172.66.203:22251
185.172.66.203:3213
185.172.66.203:9383
192.37.90.118:10020
192.37.90.118:22251
192.37.90.118:3213
192.37.90.118:9383
207.180.202.208:10020
207.180.202.208:22251
207.180.202.208:3213
207.180.202.208:9383
39.109.116.162:10020
39.109.116.162:22251
39.109.116.162:3213
39.109.116.162:9383
51.105.249.223:10020
51.105.249.223:22251
51.105.249.223:3213
51.105.249.223:9383
vollar.ga
