# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://censys.com/unpacking-the-badbox-botnet/
# Reference: https://app.validin.com/detail?type=hash&find=61609d67762922a390bf4c5ccc2b5ed43c1980a6777a0152e9a49c5b96d0d623#tab=host_pairs (# 2025-02-15)

139-162-36-224.ip.linodeusercontent.com
143-42-75-145.ip.linodeusercontent.com
172-104-178-158.ip.linodeusercontent.com
172-104-186-191.ip.linodeusercontent.com
192-46-227-25.ip.linodeusercontent.com
1ztop.work
bluefish.work
cast.jutux.work
cool.hbmc.net
echojoy.xyz
giddy.cc
go.sushi9.work
go.xys8t.work
home.1ztop.work
jolted.vip
joyfulxx.com
jutux.work
logcer.com
msohu.shop
mtcpuouo.com
old.1ztop.work
pasiont.com
pixelscast.com
pixlo.cc
retrofitxer.com
sg100.idcloudhost.com
sparkjoy.cc
swiftcode.work
szypfc.cn
tvsnapp.com
veezy.site
yydsmb.com
yydsmd.com
yydsmr.com
ztword.com

# Reference: https://www.humansecurity.com/learn/blog/satori-threat-intelligence-disruption-badbox-2-0/

99soya.shop
admoyu.com
ads-goal.com
ai-goal.com
astrolink.cn
bltproxy.com
bullet-proxy.com
clocksyn.com
coslogdydy.in
cxlcyy.com
cxzyr.com
dazzl.vip
dqmop.com
easyjoy.me
firehub.link
firehub.work
fuhidd.com
goologer.com
heygames.club
huulog.com
huuww.com
ipforyou.top
ipmoyu.com
jasmine.land
meisvip.com
moonhub.work
motiyu.net
moyix.com
msohu.online
mtcpmpm.com
mtcprogram.com
net-goal.com
pccyy.com
pcxrl.com
pcxrlback.com
petrel-ip.com
pm2za.cc
qulogger.com
rzless.work
shanhulan.cn
simplekds.me
soyatea.online
supportdatainput.top
sustat.com
syloger.com
sysbinder.com
sysbinder.xyz
ttyunos.com
tuding.xyz
vividweb.work
vmud.net
wildpettykiwi.com
wildpettykiwi.xyz
wotads.com
ycxad.com
ycxrldow.com
yeyeyeye.xyz
yxcrl.com
yydsma.com
zxcvbnmasdfghjkl.xyz
