# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: sdbot, agobot, gaobot, mybot and many other ircbot-families.

# Reference: https://www.virustotal.com/#/domain/*.afraid.org

1liil11liil1.afraid.org
1llsklll.afraid.org
b0ts.afraid.org
bent.afraid.org
blardy.afraid.org
demrt.afraid.org
eleven.afraid.org
exaturbo.afraid.org
fjpjllj1lx.afraid.org
four.afraid.org
franck78.afraid.org
fuckthebac0n.afraid.org
imiill11lnot.afraid.org
hlph0pfIipf10p.afraid.org
jkfdlklj2adf2.afraid.org
keki.afraid.org
knix.afraid.org
kqjckleaayzt.afraid.org
l.1ove.you.oil1y.afraid.org
ltfmwujrxcq.afraid.org
mlqpayvtnau.afraid.org
mpfd.afraid.org
msup.afraid.org
nanak.afraid.org
nightwish.afraid.org
nmgpoqqiwmh.afraid.org
passoire.afraid.org
pwned.afraid.org
serveme.afraid.org
sjljjjjj.jjjjjjj.jjlj.afraid.org
someothergoodhost.afraid.org
till1liil1.afraid.org
wyqggvow.afraid.org
xanga.afraid.org
xdcc.afraid.org
xjtolamiy.afraid.org
yang.afraid.org

# Reference: https://twitter.com/James_inthe_box/status/1096802363749232640

http://185.35.137.80

# Reference: https://twitter.com/K_N1kolenko/status/1144188126677651457

mortalkombat.thruhere.net

# Reference: https://twitter.com/P3pperP0tts/status/1145971091866828801
# Reference: https://app.any.run/tasks/387df345-6007-4c56-aa48-6aa44d4f095a/
# Reference: https://www.virustotal.com/gui/file/b81ca6f100c2fd597c39948208131568da790dde8a12dea0f3de580888c633a8/detection

58.218.66.92:2553
winlinux.xyz

# Reference: https://www.virustotal.com/gui/file/65e388df2853955500c1c2ae514f952152cbbcc038911e5fe71dec3532485685/detection

yousifmubder1177.ddns.net

# Reference: https://www.virustotal.com/gui/file/ed4cc8042d4286912c1ffebd74b0fea0f30bf8953e3afec10b5c2fbdb206d683/detection

141.255.144.240:1976

# Reference: https://www.virustotal.com/gui/file/04042bd5a351225fd6ccc9d5015a3fd184c63b9599c3580f76b1c653e1ffd5c5/detection

boohoo.sytes.net

# Reference: https://www.virustotal.com/gui/file/9daa81ca81375304d7f5293685f610d0a3e8c49c5272cff870d145d0f19685a4/detection

204.95.99.183:6667
xxl.myftp.org

# Reference: https://www.virustotal.com/gui/file/2dc987a71327e847e7070a137170e09628a5d12f78694dad1d69978d8af2aa5c/detection
# Reference: https://www.virustotal.com/gui/file/d3dea0fe858994a4387714b035d8e76f37c39f148888396249d299eefc0639c9/detection
# Note: Tawsebot/Tawsibot

204.95.99.183:7000
[fe80::2c33:349f:8bec:ffa9]:49172
[fe80::2c33:349f:8bec:ffa9]:49173

# Reference: https://www.virustotal.com/gui/file/29ec4267f11581ca0fd67ce7df8c360d4803e54f58a2ab299e026ec0df73771f/detection

dzdos.000webhostapp.com

# Reference: https://www.virustotal.com/gui/file/82b3bc83ebd39cc76dfb9923920e3fc408de4700defb8f8639eda236ca825735/detection

151.80.60.224:5858
a.fefefu.net

# Reference: https://www.virustotal.com/gui/file/7765889f8f7a2eb01e2c36f54e43917184d7a09a8a6552341f27ed126f060f6a/detection

wifi-update.biz

# Reference: https://www.virustotal.com/gui/file/6b8fec2e1b15c014d410908a92288fef017987298e2864d53029c6d33ce06ed9/detection

osetgojnd.ddns.net

# Reference: https://s3.amazonaws.com/snort-org/www/rules/community/community-rules.tar.gz
# Reference: https://snort-org-site.s3.amazonaws.com/production/release_files/files/000/012/156/original/snort3-community-rules.tar.gz

joydagaspy.biz

# Reference: https://www.virustotal.com/gui/file/ad944301b5563064a76078bb93087bf222245d23e16427d0cc029171b838d99a/detection

58.158.177.102:6667
style.servebeer.com
style.servebeer.com.ovh.net

# Reference: https://blog.talosintelligence.com/2021/05/threat-roundup-0521-0528.html (# Win.Ircbot.Ircbot-9863290-0)

acc7hr33.webhop.biz
done.noteam.net
f56.no-ip.info
hol.mamadody.mobi
irc.amcool.net
irc.bejiyan.com
irc.h4cky0u.org
irc.indoirc.net
irc.superbits.net
ircftw.no-ip.info
king.noteam.net
lnx.ekolik.net
mircbot.no-ip.biz
n2.myip.org
neo12.cjb.net
neo12.xjb.net
scan.kizlarevi.net
sikwon.myvnc.com
sikwon.myvnc.com.fraud.noiptos.com
unk555.opendns.be
unun.endofinternet.org
urx.opendns.be
v0ldem0rt.co.cc
xrtw.no-ip.info

# Reference: https://www.virustotal.com/gui/file/3dffd4999cc05844ca89e5cb44a0541efeb866588294908ae45e7b0fcf0ab957/detection

setoxs.no-ip.info

# Reference: https://www.virustotal.com/gui/file/758e52a09641d7c7dcff5758274bf9171115e2ae7da478c4bd1181c363621b8f/detection

awalhupwz.no-ip.info

# Reference: https://www.virustotal.com/gui/file/83b55971a05b05ce873c83f55ca4ebe7316d58f48846286b056b60c6be035350/detection

witchdaboss.no-ip.info

# Reference: https://www.virustotal.com/gui/file/cde288bf70a8c927aca5d347db655cc2f19ab82f8df4550120d3ac6e8b0799ad/detection
# Reference: https://www.virustotal.com/gui/file/b1d787b4977b4f0a8672b477d7ef5047e4639c7a4faced063e07a2a3927a30fb/detection

136.144.41.6:33632
91.198.123.37:33632
cjtelcom.p-e.kr

# Reference: https://www.virustotal.com/gui/file/940230e40b3e54c2d080f813ac1e07816d350a5bcc8f32760293a3b172ce4096/detection

thisisa.kicks-ass.net

# Reference: https://www.virustotal.com/gui/file/ee5cbd6f0e98f889e8ce3d974f4beaccf1c3917165ef482cebf96c0d0ac5cabd/detection

turko55.no-ip.biz
turko55.no-ip.biz.ovh.net

# Reference: https://www.virustotal.com/gui/file/3ee4b1c1550461e94faca840f690d010147d41c04147cf34ec327a4f775940a9/detection

t3r.no-ip.info
