# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/Unit42_Intel/status/1894164929059434566
# Reference: https://unit42.paloaltonetworks.com/new-linux-backdoor-auto-color/

146.70.41.178:443
146.70.87.67:443
206.189.149.191:443
216.245.184.214:443
65.38.121.64:443

# Reference: https://x.com/TuringAlex/status/1902389214978937322

47.243.233.38:443
47.243.233.38:9001
dateplugs.com
new.dateplugs.com
update.dateplugs.com

# Reference: https://x.com/malwrhunterteam/status/1925860316857979330
# Reference: https://www.virustotal.com/gui/file/00c76052f12901bd96ce05399daa4ae4100eab07f0c6e548dbedfb4313a9d475/detection

date.mscc.ws

# Reference: https://x.com/malwrhunterteam/status/1998089749668712478
# Reference: https://www.virustotal.com/gui/file/2eb1f0e79df57af300f05c95fd829742c3813217a630cce7d4e5dfc626abb416/detection

http://45.76.61.101
83.172.150.218:443
83.172.150.218:8443

# Reference: https://x.com/smica83/status/2025297712883638416
# Reference: https://www.virustotal.com/gui/file/3f7ac113c8dfd501b641e515d8cb23053fc699507f9360c7964e9b5960f60fcd/detection

tracksyscloud.com
