# Copyright (c) 2014-2026 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: 54bb47h, sabbath

# Reference: https://www.mandiant.com/resources/sabbath-ransomware-affiliate
# Reference: https://www.virustotal.com/gui/file/79b47780382f54ca039ad248d8241e42a7ed6b1e4b75af836890e4e46c0f8737/detection

45.141.84.182:443
45.146.166.24:443
45.147.230.137:3001
45.147.230.221:2002
45.79.55.129:443
http://45.79.55.129
4bb47h5qu4k7l4d7v5ix3i6ak6elysn3net4by4ihmvrhu7cvbskoqd.onion
cofeeloveers.com
datatransferdc.com
doratir.com
farhadl.com
frankir.com
gordonzon.com
greentuks.com
helpgoldr.com
markettc.biz
probes.site
probes.space
probes.website
tinysidney.com
aequuira1aedeezais5i.probes.space
aimee0febai5phoht2ti.probes.website
jeithe7eijeefohch3qu.probes.site

# Reference: https://github.com/thetanz/ransomwatch/blob/main/docs/INDEX.md

54bb47h.blog
54bb47h5qu4k7l4d7v5ix3i6ak6elysn3net4by4ihmvrhu7cvbskoqd.onion

# Reference: https://twitter.com/th3_protoCOL/status/1490847701012869120

securingyourpc.com
security4themasses.com
