# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: redtail

# Reference: https://x.com/banthisguy9349/status/1837039110889832699
# Reference: https://www.akamai.com/blog/security-research/2024-redtail-cryptominer-pan-os-cve-exploit
# Reference: https://www.virustotal.com/gui/file/de96a56c5508bb69c20f171a141263ebed92823eb3249dccb9db1ff350b37b31/detection

http://154.216.18.19
http://94.156.177.109
185.216.70.138:2137
193.222.96.163:2137
78.153.140.51:2137

# Reference: https://twitter.com/sicehice/status/1782173520006365560
# Reference: https://www.virustotal.com/gui/file/015a5025ba2d3a419165d506f399cef408fb611427debe725a76b44a482c7f24/detection

94.156.79.60:2137
94.156.79.60:43782
identitynetwork.top
proxies.identitynetwork.top
srv.identitynetwork.top

# Reference: https://twitter.com/sicehice/status/1763739244541919656
# Reference: https://www.virustotal.com/gui/file/298edc45b70b1548df2c1293ba3938376778e34cd7b91dbd8ad939c5ef10c111/detection
# Reference: https://www.virustotal.com/gui/file/f61b55a58f227a057c71d5b0d76d6288f8861278d10be8a4bee7d7ddf81b82da/detection

http://185.216.70.138

# Reference: https://x.com/banthisguy9349/status/1837039751548792886
# Reference: https://urlhaus.abuse.ch/browse/tag/redtail (# 2024-09-20)

http://194.59.31.163
http://45.14.226.13
http://93.123.39.157

# Reference: https://x.com/banthisguy9349/status/1853879859732181019

http://103.69.238.48
http://104.108.92.93
http://104.121.31.190
http://104.209.135.153
http://104.252.74.31
http://104.95.246.49
http://106.14.215.97
http://106.153.81.106
http://107.158.235.122
http://107.163.108.34
http://107.174.43.241
http://109.106.241.28
http://109.123.64.40
http://111.254.141.39
http://112.175.249.92
http://112.74.100.65
http://115.111.76.2
http://118.214.69.19
http://120.50.141.91
http://121.83.217.246
http://124.218.220.241
http://128.199.219.27
http://128.199.6.236
http://13.113.144.176
http://13.127.162.169
http://13.224.211.198
http://13.69.182.231
http://13.73.103.128
http://130.211.219.39
http://130.61.98.129
http://134.68.53.15
http://137.184.213.83
http://145.239.81.47
http://147.135.166.192
http://15.235.9.239
http://150.136.220.99
http://152.199.34.150
http://154.195.201.106
http://154.216.16.40
http://154.216.17.30
http://154.216.18.136
http://154.216.18.19
http://154.216.19.227
http://154.216.19.57
http://154.216.19.60
http://154.216.20.102
http://154.216.20.216
http://154.216.20.97
http://154.56.54.229
http://154.92.92.252
http://156.232.163.170
http://156.234.115.156
http://156.241.108.185
http://157.167.105.162
http://157.7.132.160
http://158.69.67.88
http://159.69.248.193
http://160.121.77.119
http://162.240.42.10
http://162.241.149.254
http://162.241.229.166
http://164.215.103.47
http://164.92.178.113
http://167.154.10.174
http://167.235.246.190
http://167.99.244.88
http://169.61.172.49
http://171.13.92.162
http://173.184.68.232
http://174.138.181.249
http://175.247.187.89
http://176.9.202.53
http://18.136.151.187
http://18.136.38.29
http://18.155.189.235
http://18.160.216.176
http://18.164.79.143
http://18.176.244.244
http://18.179.50.104
http://18.190.88.82
http://183.107.154.211
http://184.56.105.58
http://185.172.128.93
http://185.196.10.231
http://185.66.250.13
http://186.5.203.27
http://186.6.206.22
http://187.212.211.9
http://192.141.168.10
http://192.158.27.67
http://194.59.30.110
http://195.133.247.202
http://195.49.128.73
http://198.143.134.42
http://199.247.3.182
http://2.22.168.15
http://2.22.38.17
http://20.105.104.36
http://20.19.98.204
http://20.22.158.52
http://206.1.69.46
http://206.233.190.121
http://209.163.194.112
http://209.181.103.208
http://209.205.113.58
http://210.129.8.131
http://211.86.60.99
http://213.135.180.61
http://217.160.108.116
http://217.92.66.151
http://221.158.56.96
http://23.197.154.93
http://23.198.184.29
http://23.198.35.45
http://23.203.77.222
http://23.211.156.47
http://23.211.171.105
http://23.219.96.176
http://23.23.56.1
http://23.248.220.106
http://23.38.81.61
http://23.40.227.242
http://23.44.78.123
http://23.47.89.200
http://23.51.85.66
http://23.61.39.211
http://23.67.66.12
http://23.75.16.136
http://23.94.238.95
http://3.110.91.52
http://3.164.170.133
http://3.222.230.132
http://3.223.149.187
http://3.6.10.178
http://3.67.164.100
http://34.124.246.195
http://34.160.220.63
http://34.243.61.47
http://34.36.128.81
http://35.182.224.137
http://37.17.229.195
http://38.148.234.97
http://38.55.215.131
http://4.156.237.61
http://43.200.140.234
http://43.249.92.166
http://44.203.173.205
http://44.227.7.18
http://45.14.226.13
http://45.141.100.59
http://45.55.124.172
http://45.93.139.147
http://47.102.225.20
http://49.248.175.170
http://5.182.211.150
http://5.78.98.21
http://50.77.86.157
http://51.161.108.165
http://51.210.242.152
http://52.20.54.1
http://52.216.216.172
http://52.84.155.54
http://54.161.24.225
http://54.215.170.96
http://54.95.188.80
http://62.129.231.110
http://62.154.241.230
http://64.6.247.230
http://65.1.154.155
http://71.43.179.26
http://77.87.193.136
http://77.90.55.84
http://79.255.252.227
http://8.149.143.101
http://84.199.237.184
http://85.31.236.108
http://85.31.240.146
http://85.91.44.143
http://86.48.21.91
http://86.61.130.100
http://87.100.9.22
http://87.120.117.92
http://89.234.156.56
http://89.28.98.228
http://89.40.0.43
http://91.194.55.94
http://91.207.137.222
http://93.114.234.100
http://94.156.177.109
http://94.228.133.166
http://95.58.241.30
http://98.98.154.51
http://99.84.163.69

# Reference: https://threatfox.abuse.ch/browse/malware/elf.redtail/ (# 2026-07-02)

http://115.248.8.65
http://118.26.111.107
http://118.70.231.249
http://120.48.32.130
http://13.140.137.178
http://138.197.39.208
http://14.103.10.167
http://140.99.32.48
http://150.40.117.224
http://152.32.130.136
http://152.42.252.134
http://164.68.108.70
http://167.126.6.183
http://167.172.152.94
http://167.233.68.137
http://168.144.81.184
http://175.200.104.40
http://178.105.144.231
http://180.93.43.226
http://181.104.43.225
http://189.51.43.54
http://192.3.16.60
http://195.54.179.244
http://209.141.58.166
http://212.127.90.201
http://212.127.91.32
http://217.154.61.249
http://31.132.90.3
http://31.76.27.231
http://31.77.156.62
http://37.27.197.191
http://47.253.245.52
http://75.119.132.109
http://80.241.209.14
http://84.247.129.208
http://85.215.192.100
http://95.59.142.69
101.36.104.242:2375
101.47.8.187:2375
104.207.47.232:2375
104.207.59.109:2375
104.207.59.23:2375
104.234.155.104:2375
104.236.83.40:2375
107.172.252.155:2375
109.236.50.3:2375
109.24.152.219:2375
109.9.42.77:2375
109.91.201.209:2375
112.18.182.202:2375
112.52.34.18:2375
115.84.114.228:2375
118.145.245.82:2375
120.79.220.198:2375
121.176.14.102:443
128.199.225.7:2375
128.79.9.232:2375
13.140.155.136:2375
130.12.180.51:22
134.209.202.49:2375
135.181.34.178:2375
138.124.242.51:2375
14.46.136.77:443
140.238.153.39:2375
143.110.165.73:2375
144.31.158.144:2375
147.139.136.75:2375
152.42.247.85:2375
154.16.112.232:5432
156.67.105.185:2375
157.245.123.148:2375
157.245.241.172:2375
159.148.58.10:2375
159.195.76.136:2375
159.65.143.47:2375
159.65.91.36:2375
161.35.169.21:2375
162.227.109.103:2375
163.7.1.156:2375
167.86.72.220:2375
167.94.146.49:2375
167.99.72.161:2375
168.144.45.211:2375
169.150.201.135:2375
172.185.40.47:2375
172.202.118.46:2375
172.236.228.227:2375
172.86.90.30:2375
173.177.131.92:2375
173.255.225.25:2375
174.170.194.116:2375
174.18.49.143:2375
175.43.149.142:2375
176.144.233.36:2375
176.146.33.242:2375
176.65.139.43:2375
178.128.215.119:2375
178.26.11.44:2375
18.97.26.66:2375
18.97.5.108:2375
180.232.31.158:2375
183.56.243.176:2375
183.81.169.76:2375
184.105.247.195:2375
185.182.186.243:443
185.203.237.43:2375
185.211.94.76:2375
185.214.96.148:2375
185.214.96.150:2375
185.214.96.151:2375
185.214.96.157:2375
185.231.252.243:2375
185.247.137.143:2375
185.247.137.193:2375
185.247.137.210:2375
185.38.148.2:2375
185.9.251.81:2375
189.51.43.54:2375
191.44.125.4:2375
191.44.71.181:2375
191.44.71.39:2375
191.44.91.71:2375
193.32.162.60:2375
195.184.76.170:2375
195.96.139.54:2375
199.45.155.108:2375
2.15.88.196:2375
2.57.122.202:2375
20.102.108.84:2375
20.150.193.32:2375
20.163.61.13:2375
20.169.105.51:2375
20.64.105.155:2375
20.65.195.35:2375
209.50.166.85:2375
209.50.168.38:2375
209.50.169.46:2375
209.50.170.112:2375
209.50.179.215:2375
209.50.185.18:2375
209.99.185.239:2375
209.99.188.240:2375
212.127.90.201:2375
213.209.159.158:22
213.244.62.236:2375
216.26.241.217:2375
216.26.242.169:2375
217.253.14.112:2375
217.253.208.240:2375
217.60.195.113:22
217.60.195.113:443
217.79.226.23:2375
220.162.198.142:2375
221.2.109.198:2375
27.153.157.138:2375
31.16.230.158:2375
31.35.250.56:2375
31.76.46.226:2375
37.24.77.70:2375
37.27.199.35:2375
37.65.13.51:2375
37.65.162.60:2375
37.65.58.154:2375
37.66.147.5:2375
37.67.104.221:2375
37.67.75.82:2375
45.148.10.112:21370
45.148.10.113:21370
45.148.10.119:2375
45.148.10.144:21370
45.148.10.145:21370
45.148.10.208:21370
45.148.10.68:21370
45.156.129.127:2375
45.225.135.21:2375
45.238.101.91:2375
45.3.39.26:2375
45.3.54.189:2375
45.79.192.108:2375
45.79.5.11:2375
45.94.209.196:2375
46.193.64.99:2375
47.238.121.28:2375
47.238.136.107:2375
47.251.34.92:2375
47.253.5.130:2375
47.253.94.140:2375
47.77.182.54:2375
47.79.37.117:2375
47.84.194.39:2375
47.85.8.171:2375
47.88.104.101:2375
47.95.234.23:2375
5.161.195.145:2375
5.49.168.239:2375
52.165.81.253:2375
60.191.137.103:2375
64.227.0.95:2375
64.62.156.10:2375
65.49.1.182:2375
65.49.20.67:2375
66.132.172.136:2375
66.132.195.118:2375
68.183.234.194:2375
68.183.99.254:2375
70.95.146.19:2375
71.226.150.30:2375
73.146.198.16:2375
73.198.29.237:2375
74.15.98.76:2375
75.184.86.154:2375
77.83.246.97:2375
79.143.178.79:2375
79.197.154.178:2375
79.76.58.113:2375
80.134.27.93:2375
80.94.92.135:2137
80.94.92.136:2137
80.94.92.140:2137
80.94.92.146:2137
80.94.92.147:2137
80.94.92.149:2137
82.226.177.82:2375
83.229.8.197:2375
85.217.140.1:2375
85.217.140.38:2375
85.217.140.51:2375
85.217.140.9:2375
87.120.113.231:43782
87.120.166.130:2375
87.121.89.116:2375
87.160.124.215:2375
87.251.66.118:2375
88.151.33.203:2375
88.162.196.213:2375
88.168.217.152:2375
88.170.161.23:2375
89.92.248.142:2375
90.114.76.109:2375
90.21.61.108:2375
90.62.187.41:2375
90.9.80.38:2375
91.166.6.193:2375
91.55.174.82:2375
91.96.255.15:2375
92.208.25.142:2375
92.209.188.108:2375
93.128.162.24:2375
95.182.96.193:2375
95.59.142.69:2375
proxies.internetshadow.link
proxies.internetshadow.org
