# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/TLP_R3D/status/1890089895089086877
# Reference: https://hunt.io/blog/tracking-pyramid-c2-identifying-post-exploitation-servers

104.238.61.144:8000
108.181.115.171:8000
108.181.182.143:8000
13.237.111.156:8000
173.44.141.226:8000
185.174.101.240:8000
185.174.101.69:8000
185.177.74.207:8000
185.219.220.175:8000
185.33.86.15:8000
188.23.170.151:8000
193.203.49.90:8000
193.58.121.231:8000
198.134.107.41:8000
212.227.57.123:8000
23.29.118.81:8000
37.1.212.18:8000
38.180.195.187:8000
38.180.81.153:8000
45.86.231.115:8000
54.38.94.225:8000
62.76.251.43:8000
77.239.96.169:8000
88.119.175.65:8000
88.119.175.70:8000
92.118.112.143:8000
92.118.112.208:8000
93.82.24.249:8000
emdr-traumatherapie.info
thiscode.info

# Reference: https://github.com/eSentire/iocs/blob/main/RansomHub/RansomHub-iocs-2025-03-28.txt

172.210.82.245:8000
38.146.28.93:8000
