# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://censys.com/unpacking-the-badbox-botnet/
# Reference: https://app.validin.com/detail?type=hash&find=61609d67762922a390bf4c5ccc2b5ed43c1980a6777a0152e9a49c5b96d0d623#tab=host_pairs (# 2025-02-15)

139-162-36-224.ip.linodeusercontent.com
143-42-75-145.ip.linodeusercontent.com
172-104-178-158.ip.linodeusercontent.com
172-104-186-191.ip.linodeusercontent.com
192-46-227-25.ip.linodeusercontent.com
1ztop.work
bluefish.work
cast.jutux.work
cool.hbmc.net
echojoy.xyz
giddy.cc
go.sushi9.work
go.xys8t.work
home.1ztop.work
jolted.vip
joyfulxx.com
jutux.work
logcer.com
msohu.shop
mtcpuouo.com
old.1ztop.work
pasiont.com
pixelscast.com
pixlo.cc
retrofitxer.com
sg100.idcloudhost.com
sparkjoy.cc
swiftcode.work
szypfc.cn
tvsnapp.com
veezy.site
yydsmb.com
yydsmd.com
yydsmr.com
ztword.com