# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://twitter.com/fumik0_/status/1407981244474970115
# Reference: https://fumik0.com/2021/06/24/lu0bot-an-unknown-nodejs-malware-using-udp/
# Reference: https://www.virustotal.com/gui/file/3a8ffe53dce3cc92dd54f8ee34c3f9a8db950c80b53ffb44f36b43123297bea0/detection
# Reference: https://www.virustotal.com/gui/file/61983e52070f7b422a9a674042e70bbedf492f5961881ebf49e87f5955439f76/detection

5.188.206.211:19584
hri0.asia
hri0.xyz
hri1.asia
hri1.xyz
hri10.xyz
hri2.xyz
hri3.xyz
hri4.xyz
hri5.xyz
hri6.xyz
hri7.xyz
hri8.xyz
hri9.xyz
lu0.asia
lu00.xyz
lu01.xyz
lu02.xyz
lu03.xyz
lu1.asia
tes01.xyz
tes02.xyz
tes03.xyz
tes04.xyz
tes05.xyz
tes06.xyz
lu0.sytes.net
lu0.viewdns.net
