# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/RussianPanda9xx/status/2012289747507441998
# Reference: https://www.huntress.com/blog/malicious-browser-extention-crashfix-kongtuke

http://158.247.252.178
http://170.168.103.208

# Reference: https://www.trendmicro.com/en_us/research/26/c/kongtuke-clickfix-abuse-of-compromised-wordpress-sites.html

http://45.61.138.224

# Reference: https://www.rapid7.com/blog/post/tr-it-support-dissecting-modelorat-campaign-microsoft-teams-compromise/

http://140.82.6.45
http://144.172.99.68
http://149.248.78.202
http://45.76.241.51
http://46.225.231.170
http://64.94.85.158
http://87.120.186.229
104.194.152.246:50504
144.172.111.49:50504
144.172.88.18:50508
144.172.88.18:60503
45.59.122.231:50508
45.59.122.231:60503
64.190.113.187:50508
64.190.113.187:60503
96.9.125.29:50504
