# Copyright (c) 2014-2019 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://ask.wireshark.org/questions/10839/filters-for-torpig-sinowal-etc

kolipso.info
ret9unj.com
alzan.info
tsforme.com
useforme.com

# Reference: http://who.is/nameserver/ns1.torpig-sinkhole.org/
# Reference: http://who.is/nameserver/ns2.torpig-sinkhole.org/

torpig-sinkhole.org
212.227.55.84
87.106.240.162
87.106.18.112
87.106.190.163
217.160.165.201
212.227.20.93

# Reference: https://www.virustotal.com/en/ip-address/87.106.190.153/information/

87.106.190.153

# Reference: http://www.urlvoid.com/ip/212.227.55.84/

spyeye-sinkhole.org