+plugin:DeadMon +country:"Thailand" -net:"TRUE INTERNET Co.,Ltd." -net:"Ministry of Finance" +ip:"158.108.0.0/16"
Host has been infected by DEADBOLT
Found by DeadMon