# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/MonThreat/status/2068391787366957546
# Reference: https://www.cloudsek.com/blog/inside-the-fortibleed-open-directory-a-technical-analysis-of-what-the-attacker-left-behind

http://175.155.64.221
http://185.229.26.83
http://193.8.187.2
http://198.53.64.194
http://211.72.37.226
http://213.169.49.142
http://38.117.87.37
http://85.11.187.28
http://85.11.187.8
http://85.229.26.83
175.155.64.221:22
211.72.37.226:30000
193.8.187.2:22
85.11.187.28:7777
85.11.187.28:8080
85.11.187.28:8088
85.11.187.8:7777
85.11.187.8:8080
85.11.187.8:8443
85.11.187.8:8888
85.229.26.83:8443

# Reference: https://x.com/stop_spammerz/status/2068034872866710001
# TITLE-HOST/IP=FortiGate Sniffer

188.127.250.104:8080
188.127.246.183:8080
193.169.228.137:8080
213.171.17.74:8080
213.21.239.65:8080
188.127.250.104:8099
188.127.246.183:8099
193.169.228.137:8099
213.171.17.74:8099
213.21.239.65:8099
