diff --git a/yara/ip.md b/yara/ip.md
new file mode 100644
index 0000000..82aa07c
--- /dev/null
+++ b/yara/ip.md
@@ -0,0 +1,29 @@
+46.10.197[.]206
+• 176.102.35[.]175
+• 93.62.0[.]77
+• 194.50.159[.]3
+• 80.64.80[.]169
+• 24.212.225[.]54
+• 208.97.106[.]10
+• 70.60.30[.]222
+• 184.67.141[.]110
+202.22.227[.]179
+49.204.75[.]92
+• 61.2.141[.]161
+• 49.204.75[.]90
+• 114.143.222[.]242
+• 117.211.166[.]22
+• 49.204.65[.]90
+• 49.204.73[.]250 
+192.149.47[.]110
+• 212.11.106[.]139
+• 89.203.140[.]246
+• 94.125.218[.]19
+• 183.82.110[.]178
+• 117.239.157[.]74
+• 210.212.224[.]124
+
+
+109.166.39.139
+23.227.198.247	IP address	BRONZE SILHOUETTE C2 server
+104.161.54.203
\ No newline at end of file