# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://blog.netlab.360.com/ssh_stealer_facefish_en/
# Reference: https://otx.alienvault.com/pulse/60b0b9c71621a0149fd3bc07
# Reference: https://www.virustotal.com/gui/file/c787e57a8077f0df838ae416cbf6dd38ecc670e532c3369bff2ef571cd94d36e/detection
# Reference: https://www.virustotal.com/gui/file/ab9cc4ee82aa6f57ba2a113aab905c33e278c969399db4188d0ea5942ad3bb7d/detection

http://176.111.174.26
176.111.174.26:443

# Reference: https://x.com/malwrhunterteam/status/1819483285330055491
# Reference: https://www.virustotal.com/gui/file/38720d0fd54cdb0e1224b5df4ea052f1303a1b0f17d971e1737f8acd8f6a2ae5/detection

91.92.250.69:443
humsters-db-dc001.ru

# Generic

/76523y4gjhasd6/
/sshins