# Copyright (c) 2014-2022 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.netlab.360.com/warning-ewdoor-botnet-is-attacking-att-customers/
# Reference: https://otx.alienvault.com/pulse/61a65236f6ac8afd687892c6

http://212.193.30.209
185.10.68.20:1234
185.10.68.20:13433
185.10.68.20:443
185.10.68.20:53
212.192.241.158:50940
45.141.155.217:50940
45.141.157.217:13433
45.141.157.217:443
45.141.157.217:53
62.77.156.103:50940
hatbowlrtx.su
hatbowlu3hf.ru
iunno.se
rtmxvdio.net
a.hatbowlrtx.su
a.hatbowlu3hf.ru
a.rtmxvdio.net
b.hatbowlrtx.su
b.hatbowlu3hf.ru
b.rtmxvdio.net
besthatsite.mooo.com
boatreviews.xpresit.net
ekgmua.zapto.org
hhqnyy.zapto.org
rtmxvd.iunno.se