# Copyright (c) 2014-2023 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.virustotal.com/gui/ip-address/54.38.108.51/relations
# Reference: https://www.virustotal.com/gui/file/51ea0a6b09181a6b2eae051de3e9ae4da15d7792d7706ef55bde724d1e9db73e/detection

54.38.108.51:4500
00000000.me

# Reference: https://www.virustotal.com/gui/file/033b67c7ba3c53dd576296de7e4d83162db1b8c4471c9ef11f6a4889e52695ec/detection

146.59.132.183:5556

# Reference: https://www.virustotal.com/gui/file/ff79a9e8222e14d0c7d22e9a08eddf7b28c44f0c9c5f74f46a80089bdbe3ff63/detection

146.59.132.183:4500
hocamnsuas.me

# Reference: https://www.virustotal.com/gui/file/511e3ab80a09b1d0f90e6de79db6ffaacc26014392e2ac1b4deb5c209a54240e/detection

176.31.95.228:5353

# Reference: https://www.virustotal.com/gui/file/6f1da854ccf2063a2128a220e9b9c22bace607a4004d80d48d10bb8b866b60e7/detection

176.31.95.228:5354

# Reference: https://www.virustotal.com/gui/file/80f93e9a5c8b08d8041a122ddb066da33a1975a876cd94a6af4b20679ded2ec6/detection

176.31.95.228:4500

# Reference: https://www.virustotal.com/gui/file/7fbfe744aa1138ddbe58c8e9d2683c022c3cceb0fde2b23d6c1ec7db8594d1c9/detection

31.185.113.201:5353

# Reference: https://www.virustotal.com/gui/file/5838620aaa3c1731412716dbaaf1e3998869742e0705ef30f483b68118692eca/detection

31.185.114.246:5353

# Reference: https://www.virustotal.com/gui/file/3af86dccf76dc10541d9d87b81f9b93f9145a95ce2175f49e195111a0d979859/detection

31.185.114.246:5354

# Reference: https://www.virustotal.com/gui/file/a4d4332bfa88880a57d2aabf980ffa67ba399ca922c6d13a59e2577dbd80fc53/detection

31.185.114.246:4500

# Reference: https://www.virustotal.com/gui/file/3d9ab88f39f7c03bb5cc52a09cc30685e526a0bbb47cac7e952ed88945536f55/detection

5.39.56.221:6363
hotwebcams.site

# Reference: https://www.virustotal.com/gui/file/e41627bfe65d138022379059f0e14cb84f695cc3f0a3022f37b2ffadce60253b/detection

5.39.56.221:4500

# Reference: https://www.virustotal.com/gui/file/b8abc1f60c834e45e531c89f934dc9ad69abc45aae53a7e9d93211017f06605c/detection

5.39.56.221:5353

# Reference: https://www.virustotal.com/gui/file/1474f28c035a02bbb1004f996782bdc708ce6595ec5ac32f63fc539fd5859041/detection

205.144.171.252:21
win5252.site4now.net

# Reference: https://www.virustotal.com/gui/ip-address/31.41.244.236/relations
# Reference: https://www.virustotal.com/gui/file/da36c1aa33e720e18122c4e523b4e6a19ea49bd12f438c47e323418fc6519036/detection
# Reference: https://www.virustotal.com/gui/file/ced40a3ea6e86b1dd2144c77e36fec20d8d8ad61c3a0f5f6d724bf21d72390eb/detection

orders8842.xyz

# Reference: https://twitter.com/malwrhunterteam/status/1542228970577477634
# Reference: https://twitter.com/bsforvt727/status/1542387308443250688
# Reference: https://www.virustotal.com/gui/file/5aaddf4adff09987bf17797be2a4fbe3333cfeb5232cd3e060728e5b34b2ab38/detection

wearenotbbystealer.nl

# Reference: https://www.virustotal.com/gui/file/007a1fd7af8a03bcb8fc9bbf62bc4ffe8561d0d00933a9f926d8b56be05b114b/detection

hwidspoof.me
auth.hwidspoof.me

# Reference: https://twitter.com/malwrhunterteam/status/1563647987531665408
# Reference: https://www.virustotal.com/gui/file/170cfb5966de3ba41d6c46ed2ae0c876a11e20273ef223456ef2cf3eea3d9e40/detection

sussyhvroeu3ah5jnozbegxneuorxxgkloxph3lvpcj5fyxz5ebsblyd.onion

# Reference: https://www.virustotal.com/gui/file/04c645dd067386b47e5dc1f175e000251fa3f8c592bb0fea5d52e148f7271397/detection

f0514474.xsph.ru

# Reference: https://twitter.com/JAMESWT_MHT/status/1599795248720678913
# Reference: https://www.virustotal.com/gui/file/16c290847ae18d10bb75af77d8ff3b7b3f7829fbdb3bc5956e121a984f241854/detection
# Reference: https://www.virustotal.com/gui/file/012276c935e55468e98d7a07fe1b6cf17bb12ac40ba6561591448f7c14fb0caf/detection

status-refund-taxes.web.app
mdvksublbpczqluqvvbytfprxdwakuke.nl
chemistry.mdvksublbpczqluqvvbytfprxdwakuke.nl
dasdadw.mdvksublbpczqluqvvbytfprxdwakuke.nl
socket.bby.gg

# Reference: https://twitter.com/James_inthe_box/status/1615797529760911360
# Reference: https://app.any.run/tasks/c9e594d6-db48-4a03-83fb-519c7731d6a0/

http://194.226.121.108

# Reference: https://twitter.com/r3dbU7z/status/1652363116108300288
# Reference: https://www.virustotal.com/gui/file/6227340282692b6d2787579afad74ac6cd11dad74d6068469f7c132f85cbc2cc/detection

incometaxesreturn.co.in

# Reference: https://twitter.com/TLP_R3D/status/1652700514511978501
# Reference: https://www.virustotal.com/gui/ip-address/77.68.98.128/relations

free.rich
ransomware.tk