# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://raw.githubusercontent.com/drb-ra/C2IntelFeeds/master/feeds/unverified/IPPortC2s-30day.csv (# 2024-09-08)

http://3.121.42.179
http://45.9.148.219
103.127.136.239:4444
103.131.149.2:11601
104.36.229.112:443
117.72.68.194:11601
122.114.11.231:11601
13.53.125.54:443
13.60.226.185:443
152.42.160.65:443
163.172.51.82:443
172.86.79.202:443
178.20.42.17:53
179.60.147.149:8081
184.107.5.46:11601
185.205.210.220:443
188.127.249.150:443
20.19.38.35:8080
20.19.88.240:443
20.234.58.105:443
20.70.141.228:443
209.151.144.94:444
217.155.41.50:443
3.9.177.224:443
34.147.39.137:443
38.54.117.71:443
43.201.14.128:443
43.206.219.14:443
45.61.134.19:4444
54.232.65.189:8443
62.0.84.172:4444
66.85.92.8:443
80.76.49.143:11601
88.119.175.234:11601
89.1.88.251:443
94.237.40.93:9999
94.237.57.199:443
94.237.58.45:9999
94.237.59.59:443
98.66.138.81:443

# Reference: https://www.activecountermeasures.com/malware-of-the-day-tunneled-c2-beaconing/

45.9.149.215:11601
91.92.240.71:11601

# Reference: https://raw.githubusercontent.com/drb-ra/C2IntelFeeds/master/feeds/unverified/IPPortC2s-30day.csv (# 2024-09-14)

13.49.65.37:443
139.162.231.59:443
139.177.196.67:11601
159.75.97.81:8888
20.82.190.146:8443
212.227.235.167:443
34.34.87.71:443
4.211.173.11:443
94.237.59.50:443
94.237.62.165:443

# Reference: https://raw.githubusercontent.com/drb-ra/C2IntelFeeds/master/feeds/unverified/IPPortC2s-30day.csv (# 2024-09-22)

216.245.184.61:443
27.96.43.135:443
3.22.206.184:443
34.32.223.236:443
38.54.125.192:443
80.76.49.143:443
88.212.254.55:443
