# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: billgates, gates, setag, ganiw

# Reference: https://otx.alienvault.com/pulse/560c150e67db8c47d4ce2b14/

mou521.f3322.org
say.f322.net

# Reference: https://otx.alienvault.com/pulse/55cb66f24637f20b6e54ab88/

liunx.200jh.com

# Reference: https://otx.alienvault.com/pulse/557b7ca6b45ff5450f63f4f5/

wuzu520.com

# Reference: https://twitter.com/michalmalik/status/1143879771878830080

auth.to0ls.com
111.90.140.35:80

# Reference: https://twitter.com/michalmalik/status/1143887109599748097

vpn.to0ls.com
115.231.218.64:8226

# Reference: https://www.virustotal.com/gui/file/4b5f1e8d5e804ca7d52a9d58e5bfc0626e912a3a0c89545cf057a65fdb31b119/behavior

oa.to0ls.com

# Reference: https://www.virustotal.com/gui/domain/to0ls.com/detection

to0ls.com

# Reference: https://otx.alienvault.com/pulse/5d37185951ea5a026c813388

aduidc.xyz

# Reference: https://twitter.com/m00zh33/status/855714481757855744
# Reference: https://www.virustotal.com/gui/file/f2ea3350868cc02969c73777faf7ada5d988528ed4fbd9f72c8a8aa7bd56b705/detection

115.231.218.64:13864

# Reference: https://www.virustotal.com/gui/file/87f56f8ef4379adeff48e059d6ee9dce0891457f6fb21c6baadd426ce617ce32/detection

119.10.151.120:36000

# Reference: https://www.virustotal.com/gui/file/79f58ac03859146971c7299b0b52db54b92428d4303b206433ab3c853b1e27b1/detection

216.58.203.46:2221
216.58.203.46:6001
wysps.cn

# Generic trails

/ddos2.4
/ddos32-64
/syn25000
/udp25000
