# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.netlab.360.com/ssh_stealer_facefish_en/
# Reference: https://otx.alienvault.com/pulse/60b0b9c71621a0149fd3bc07
# Reference: https://www.virustotal.com/gui/file/c787e57a8077f0df838ae416cbf6dd38ecc670e532c3369bff2ef571cd94d36e/detection
# Reference: https://www.virustotal.com/gui/file/ab9cc4ee82aa6f57ba2a113aab905c33e278c969399db4188d0ea5942ad3bb7d/detection

http://176.111.174.26
176.111.174.26:443

# Generic

/76523y4gjhasd6/
/sshins