# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/blackorbird/status/2025586527993274498
# Reference: https://x.com/blackorbird/status/2025588291073171714
# Reference: https://cyberandramen.net/2026/02/21/llms-in-the-kill-chain-inside-a-custom-mcp-targeting-fortigate-devices-across-continents/
# Reference: https://aws.amazon.com/ru/blogs/security/ai-augmented-threat-actor-accesses-fortigate-devices-at-scale/

101.43.106.66:8080
103.164.81.110:8080
106.52.47.65:8080
115.120.233.95:8080
118.25.186.119:8080
142.171.160.137:8080
144.31.224.253:8080
146.190.195.154:8080
146.190.82.132:8080
154.219.114.92:8080
156.238.244.173:8080
185.196.11.225:1245
185.196.11.225:22
185.196.11.225:5552
185.196.11.225:8082
185.196.11.225:4782
185.196.11.225:8088
185.196.11.225:13000
212.11.64.250:8080
212.11.64.250:8090
212.11.64.250:8443
212.11.64.250:8888
212.11.64.250:9999
43.167.237.212:8080
47.101.186.156:8080
47.95.33.207:8080
60.204.227.64:8080
62.234.61.215:8080
62.234.61.215:8088
81.70.144.252:8080
drb420.ru
cyberstrike.drb420.ru
