# Copyright (c) 2014-2025 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://x.com/naumovax/status/1988262909437170108
# Reference: https://www.cyfirma.com/research/investigation-report-android-bankbot-ynrk-mobile-banking-trojan/
# Reference: https://tria.ge/251104-sjq89sct3a/behavioral3
# Reference: https://www.virustotal.com/gui/file/cb25b1664a856f0c3e71a318f3e35eef8b331e047acaf8c53320439c3c23ef7c/detection
# Reference: https://www.virustotal.com/gui/file/19456fbe07ae3d5dc4a493bac27921b02fc75eaa02009a27ab1c6f52d0627423/detection
# Reference: https://www.virustotal.com/gui/file/a4126a8863d4ff43f4178119336fa25c0c092d56c46c633dc73e7fc00b4d0a07/detection
# Reference: https://www.virustotal.com/gui/file/e9d3f6211d4ebbe0c5c564b234903fbf5a0dd3f531b518e13ef0dcc8bedc4a6d/detection
# Reference: https://www.virustotal.com/gui/file/50dcfba490a7e16d6761cacd98f8b87d93784999f652e34267119a3d0232790c/detection
# Reference: https://www.virustotal.com/gui/file/16f78d239c6a18ffdccabb32c09801847fda081f7c649bd1dec57f77385cc2a4/detection
# BANNER_0_HASH-HOST=74a90120a17dd2f1dfbaf359f065d06b
# CLASS_0_HASH-HOST=790f02d16c348fd7cc1ab6c72a72afd0

147.139.198.8:443
147.139.198.8:8080
147.139.198.8:8081
147.139.198.8:8088
147.139.198.8:8181
147.139.198.8:8888
147.139.213.148:443
147.139.213.148:8080
147.139.213.148:8088
147.139.213.148:8181
147.139.213.148:8888
147.139.241.73:443
147.139.241.73:8080
147.139.241.73:8088
147.139.241.73:8181
147.139.241.73:8888
154.205.143.113:443
154.205.143.113:8080
154.205.143.113:8088
154.205.143.113:8181
154.205.143.113:8888
154.205.143.140:443
154.205.143.140:8080
154.205.143.140:8088
154.205.143.140:8181
154.205.143.140:8888
154.205.143.23:443
154.205.143.23:8080
154.205.143.23:8088
154.205.143.23:8181
154.205.143.23:8888
154.205.143.42:443
154.205.143.42:8080
154.205.143.42:8088
154.205.143.42:8181
154.205.143.42:8888
154.205.143.46:443
154.205.143.46:8080
154.205.143.46:8088
154.205.143.46:8181
154.205.143.46:8888
154.205.158.26:443
154.205.158.26:8080
154.205.158.26:8088
154.205.158.26:8181
154.205.158.26:8888
154.205.158.37:443
154.205.158.37:8080
154.205.158.37:8088
154.205.158.37:8181
154.205.158.37:8888
154.205.159.193:443
154.205.159.193:8080
154.205.159.193:8088
154.205.159.193:8181
154.205.159.193:8888
154.205.159.232:443
154.205.159.232:8080
154.205.159.232:8088
154.205.159.232:8181
154.205.159.232:8888
154.90.49.143:443
154.90.49.143:8080
154.90.49.143:8088
154.90.49.143:8181
154.90.49.143:8888
156.244.14.8:443
156.244.14.8:8080
156.244.14.8:8088
156.244.14.8:8181
156.244.14.8:8888
156.244.25.118:443
156.244.25.118:8080
156.244.25.118:8088
156.244.25.118:8181
156.244.25.118:8888
185.125.50.202:443
185.125.50.202:8080
185.125.50.202:8088
185.125.50.202:8181
185.125.50.202:8888
38.54.115.29:443
38.54.115.29:8080
38.54.115.29:8088
38.54.115.29:8181
38.54.115.29:8888
38.54.14.129:443
38.54.14.129:8080
38.54.14.129:8088
38.54.14.129:8181
38.54.14.129:8888
38.54.14.173:443
38.54.14.173:8080
38.54.14.173:8088
38.54.14.173:8181
38.54.14.173:8888
38.54.14.47:443
38.54.14.47:8080
38.54.14.47:8088
38.54.14.47:8181
38.54.14.47:8888
38.54.15.10:443
38.54.15.10:8080
38.54.15.10:8088
38.54.15.10:8181
38.54.15.10:8888
38.54.15.204:443
38.54.15.204:8080
38.54.15.204:8088
38.54.15.204:8181
38.54.15.204:8888
38.54.15.75:443
38.54.15.75:8080
38.54.15.75:8088
38.54.15.75:8181
38.54.15.75:8888
38.54.15.80:443
38.54.15.80:8080
38.54.15.80:8088
38.54.15.80:8181
38.54.15.80:8888
38.54.15.88:443
38.54.15.88:8080
38.54.15.88:8088
38.54.15.88:8181
38.54.15.88:8888
38.54.30.252:443
38.54.30.252:8080
38.54.30.252:8088
38.54.30.252:8181
38.54.30.252:8888
38.54.31.241:443
38.54.31.241:8080
38.54.31.241:8088
38.54.31.241:8181
38.54.31.241:8888
38.54.31.56:443
38.54.31.56:8080
38.54.31.56:8088
38.54.31.56:8181
38.54.31.56:8888
38.54.31.79:443
38.54.31.79:8080
38.54.31.79:8088
38.54.31.79:8181
38.54.31.79:8888
38.60.171.239:443
38.60.171.239:8080
38.60.171.239:8088
38.60.171.239:8181
38.60.171.239:8888
38.60.179.212:443
38.60.179.212:8080
38.60.179.212:8088
38.60.179.212:8181
38.60.179.212:8888
38.60.179.33:443
38.60.179.33:8080
38.60.179.33:8088
38.60.179.33:8181
38.60.179.33:8888
38.60.191.163:443
38.60.191.163:8080
38.60.191.163:8088
38.60.191.163:8181
38.60.191.163:8888
38.60.191.195:443
38.60.191.195:8080
38.60.191.195:8088
38.60.191.195:8181
38.60.191.195:8888
38.60.191.9:443
38.60.191.9:8080
38.60.191.9:8088
38.60.191.9:8181
38.60.191.9:8888
38.60.192.251:443
38.60.192.251:8080
38.60.192.251:8088
38.60.192.251:8181
38.60.192.251:8888
38.60.226.131:443
38.60.226.131:8080
38.60.226.131:8088
38.60.226.131:8181
38.60.226.131:8888
38.60.230.140:443
38.60.230.140:8080
38.60.230.140:8088
38.60.230.140:8181
38.60.230.140:8888
38.60.230.184:443
38.60.230.184:8080
38.60.230.184:8088
38.60.230.184:8181
38.60.230.184:8888
38.60.252.204:443
38.60.252.204:8080
38.60.252.204:8088
38.60.252.204:8181
38.60.252.204:8888
38.60.252.226:443
38.60.252.226:8080
38.60.252.226:8088
38.60.252.226:8181
38.60.252.226:8888
38.60.253.103:443
38.60.253.103:8080
38.60.253.103:8088
38.60.253.103:8181
38.60.253.103:8888
38.60.253.15:443
38.60.253.15:8080
38.60.253.15:8088
38.60.253.15:8181
38.60.253.15:8888
38.60.253.34:443
38.60.253.34:8080
38.60.253.34:8088
38.60.253.34:8181
38.60.253.34:8888
38.60.255.185:443
38.60.255.185:8080
38.60.255.185:8088
38.60.255.185:8181
38.60.255.185:8888
47.252.16.211:443
47.252.16.211:8080
47.252.16.211:8088
47.252.16.211:8181
47.252.16.211:8888
65.75.210.26:443
65.75.210.26:8080
65.75.210.26:8088
65.75.210.26:8181
65.75.210.26:8888
65.75.210.28:443
65.75.210.28:8080
65.75.210.28:8088
65.75.210.28:8181
65.75.210.28:8888
65.75.210.29:443
65.75.210.29:8080
65.75.210.29:8088
65.75.210.29:8181
65.75.210.29:8888
65.75.210.30:443
65.75.210.30:8080
65.75.210.30:8088
65.75.210.30:8181
65.75.210.30:8888
742x9vsh.bsncdn.xyz
aaping.ynhqhu.com
aaping.ywsnk.top
admin.congdichvucongdancuquocgia.cc
admin.ncuquvgia.top
alleza.my.id
allmodernvip.vip
aping.qnignsw.com
bf1688vnws.top
bvxt.top
casyalia.my.id
congdichvucongdancuquocgia.cc
cy88ws.top
e1in2.top
en1inei2.top
fjm3s.top
fjmynwss.top
foundzd.vip
git.ykkws.top
henry4s.top
hgsxa8b3.bsncdn.xyz
hssdkvnws.top
japing.ynhqhu.com
jdk.ynadmwss.top
jping.allmodernvip.vip
jping.ywsnk.top
kqsaws.top
mailserver.ykkws.top
mlgy4s.top
ncuquvgia.top
ngnavnws.top
nisfira.my.id
nosekabron.shop
nrebh2gv.bsncdn.xyz
ojhfrk.cfd
pajakh5.foundzd.vip
pajakh5.yna1m.vip
ping.bf1688vnws.top
ping.cy88ws.top
ping.fjm3s.top
ping.fjmynwss.top
ping.henry4s.top
ping.hssdkvnws.top
ping.kqsaws.top
ping.mlgy4s.top
ping.ngnavnws.top
ping.shop4s.cc
ping.tuerqiws.top
ping.v2s1dvnws.top
ping.vnhongwss.top
ping.vnkindwss.top
ping.vnmsw.top
ping.vnssfwsss.top
ping.vntesttwss.icu
ping.vsdkws.top
ping.xmynk1wss.top
ping.ykkws.top
ping.ymvn4s.top
ping.yna1m4s.vip
ping.ynhqhu.com
ping.ynmvsw.top
ping.ynrkone.top
ping.ynsfw.top
ping.yntwwss.top
pipi4888.top
plp.e1in2.top
plp.en1inei2.top
plp.foundzd.vip
plp.ncuquvgia.top
pp288.pipi4888.top
qnignsw.com
saping.ynhqhu.com
saping.ywsnk.top
serenauv.my.id
shop4s.cc
shop4s.top
smuiai.com
sock.smuiai.com
sock.vnsame.vip
sock.ynadmwss.top
stun.ynadmwss.top
tatohaklima.shop
tiksky.top
tkq279sc.n.bsncdn.xyz
tuerqiws.top
turn.ynadmwss.top
universalmusicai.com
usw4s.top
v2s1dvnws.top
vnhongwss.top
vnkindwss.top
vnmsw.top
vnsame.vip
vnssf4si.top
vnssf4ss.top
vnssfwsss.top
vnte4ss.top
vntesttwss.icu
vsdkws.top
wayn05.yangaapp.top
ww17.ykkws.top
xdjjx.top
xlx.ncuquvgia.top
xlx.universalmusicai.com
xmynk1wss.top
yangaapp.top
yinni1.tiksky.top
ykkws.top
ymvn4s.top
yna1m.vip
yna1m4s.vip
yna2m4s.vip
yna344.top
ynadmwss.top
ynhqhu.com
ynmvsw.top
ynrkone.top
ynsfw.top
yntwwss.top
yuenanlf.top
ywsnk.top
zemlawi.shop
log-service-5531086119413148-ap-southeast-5.ap-southeast-5.log.aliyuncs.com
log-service-5531086119413148-cn-hongkong.cn-hongkong.log.aliyuncs.com

# Generic

/logstores/test/shards/lb
