+plugin:DeadMon +country:"Thailand" -ip:"124.109.24.0/21" +net:"True Online" +plugin:"DeadMon"
Host has been infected by DEADBOLT
Found by DeadMon