; ip, asn, country, lastseen, botname, domain, remote_ip, remote_port, local_port, protocol
109.126.64.2,AS12635,AT,1441008970,asprox,,,25,,tcp
109.90.233.19,AS6830,AT,1441008351,patcher,dxxt.sinkhole.dk,212.227.20.19,80,1036,tcp
109.91.0.227,AS6830,AT,1441011657,conficker,216.66.15.109,216.66.15.109,80,1430,tcp
111.111.111.183,AS11178,LV,1471111139,iotmirai,-,?,?,?,?
198.51.100.54,AS8559,AT,1520084496,iotrdp,192.168.0.6,,3389,,tcp
198.51.100.54,AS8559,AT,1520084496,openrelay,192.168.0.6,,25,,tcp
245.16.92.48,AS64496,AT,1521552552,sshauth,,249.145.142.15,22,,tcp
245.16.92.48,AS64496,AT,1521552552,telnetauth,,249.145.142.15,23,,tcp
172.20.148.81,AS64496,AT,1521291632,wpscanner,,,80,,tcp
172.20.148.81,AS64496,AT,1521291632,w_wplogin,,,80,,tcp
109.91.0.227,AS64496,AT,1441011657,auto,216.66.15.109,216.66.15.109,80,1430,tcp
192.168.46.8,AS64496,AT,1523192708,l_spamlink,http://example.com/,http://example.com/,,192.168.46.8:1660:darkmailer2,tcp
198.51.100.54,AS64496,AT,1527759654,smtpauth,,,25,,tcp
10.56.59.94,AS65551,AT,1528658562,imap,-,-,993,64954,tcp
10.56.59.94,AS65551,AT,1527314351,proxyget,192.168.255.154:8080,192.168.255.154,8080,40625,tcp
10.56.59.94,AS65551,AT,1506696497,iotscan,-,198.18.159.123,23,57090,tcp
203.0.113.81,AS65551,AT,1530789932,authspoofbadehlo,,,25,,tcp
172.20.148.82,AS65551,AT,1556001482,extortion,,,25,,tcp
172.20.148.82,AS65551,AT,1570955975,misc,,,25,,tcp
; EOF
