# Copyright (c) 2014-2024 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: Bashlite

# Reference: http://www.liceonaval.mil.ec/imagenes/zak.c

/busybotnet
/busyboxterrorist
/dvrHelper
/gaybot
/archackmy
/armhackmy
/arm4hackmy
/arm4lhackmy
/arm4thackmy
/arm4tlhackmy
/arm4tllhackmy
/armv4hackmy
/armv4lhackmy
/armv4tlhackmy
/arm5hackmy
/arm5lhackmy
/arm5nhackmy
/armv5hackmy
/armv5lhackmy
/arm6hackmy
/arm6lhackmy
/armv6hackmy
/armv6lhackmy
/armv61hackmy
/arm64hackmy
/arm7hackmy
/arm7lhackmy
/armv7lhackmy
/arm8hackmy
/dbghackmy
/exploithackmy
/i4hackmy
/i6hackmy
/i486hackmy
/i586hackmy
/i686hackmy
/killhackmy
/m68hackmy
/m68khackmy
/mipshackmy
/mips64hackmy
/mpslhackmy
/mipselhackmy
/pcchackmy
/ppchackmy
/ppc2hackmy
/ppc440hackmy
/ppc440fphackmy
/powerpchackmy
/powerppchackmy
/powerpc440fphackmy
/powerpc-440fphackmy
/roothackmy
/root32hackmy
/shhackmy
/sh4hackmy
/ssh4hackmy
/spchackmy
/sparchackmy
/x32hackmy
/x64hackmy
/x86hackmy
/x86_32hackmy
/x86_64hackmy
/hackmyarc
/hackmyarm
/hackmyarm4
/hackmyarm4l
/hackmyarm4t
/hackmyarm4tl
/hackmyarm4tll
/hackmyarmv4
/hackmyarmv4l
/hackmyarmv4tl
/hackmyarm5
/hackmyarm5l
/hackmyarm5n
/hackmyarmv5
/hackmyarmv5l
/hackmyarm6
/hackmyarm6l
/hackmyarm64
/hackmyarmv6
/hackmyarmv6l
/hackmyarmv61
/hackmyarm7
/hackmyarm7l
/hackmyarmv7l
/hackmyarm8
/hackmydbg
/hackmyexploit
/hackmyi4
/hackmyi6
/hackmyi486
/hackmyi586
/hackmyi686
/hackmykill
/hackmym68
/hackmym68k
/hackmymips
/hackmymips64
/hackmympsl
/hackmymipsel
/hackmypcc
/hackmyppc
/hackmyppc2
/hackmyppc440
/hackmyppc440fp
/hackmypowerpc
/hackmypowerppc
/hackmypowerpc-440fp
/hackmypowerpc440fp
/hackmyroot
/hackmyroot32
/hackmysh
/hackmysh4
/hackmyssh4
/hackmyspc
/hackmysparc
/hackmyx32
/hackmyx64
/hackmyx86
/hackmyx86_32
/hackmyx86_64
/hackmysh2eb
/hackmysh2elf
/arcjackmy
/armjackmy
/arm4jackmy
/arm4ljackmy
/arm4tjackmy
/arm4tljackmy
/arm4tlljackmy
/armv4jackmy
/armv4ljackmy
/armv4tljackmy
/arm5jackmy
/arm5ljackmy
/arm5njackmy
/armv5jackmy
/armv5ljackmy
/arm6jackmy
/arm6ljackmy
/armv6jackmy
/armv6ljackmy
/armv61jackmy
/arm64jackmy
/arm7jackmy
/arm7ljackmy
/armv7ljackmy
/arm8jackmy
/dbgjackmy
/exploitjackmy
/i4jackmy
/i6jackmy
/i486jackmy
/i586jackmy
/i686jackmy
/killjackmy
/m68jackmy
/m68kjackmy
/mipsjackmy
/mips64jackmy
/mpsljackmy
/mipseljackmy
/pccjackmy
/ppcjackmy
/ppc2jackmy
/ppc440jackmy
/ppc440fpjackmy
/powerpcjackmy
/powerppcjackmy
/powerpc440fpjackmy
/powerpc-440fpjackmy
/rootjackmy
/root32jackmy
/shjackmy
/sh4jackmy
/ssh4jackmy
/spcjackmy
/sparcjackmy
/x32jackmy
/x64jackmy
/x86jackmy
/x86_32jackmy
/x86_64jackmy
/jackmyarc
/jackmyarm
/jackmyarm4
/jackmyarm4l
/jackmyarm4t
/jackmyarm4tl
/jackmyarm4tll
/jackmyarmv4
/jackmyarmv4l
/jackmyarmv4tl
/jackmyarm5
/jackmyarm5l
/jackmyarm5n
/jackmyarmv5
/jackmyarmv5l
/jackmyarm6
/jackmyarm6l
/jackmyarm64
/jackmyarmv6
/jackmyarmv6l
/jackmyarmv61
/jackmyarm7
/jackmyarm7l
/jackmyarmv7l
/jackmyarm8
/jackmydbg
/jackmyexploit
/jackmyi4
/jackmyi6
/jackmyi486
/jackmyi586
/jackmyi686
/jackmykill
/jackmym68
/jackmym68k
/jackmymips
/jackmymips64
/jackmympsl
/jackmymipsel
/jackmypcc
/jackmyppc
/jackmyppc2
/jackmyppc440
/jackmyppc440fp
/jackmypowerpc
/jackmypowerppc
/jackmypowerpc440fp
/jackmypowerpc-440fp
/jackmyroot
/jackmyroot32
/jackmysh
/jackmysh4
/jackmyssh4
/jackmyspc
/jackmysparc
/jackmyx32
/jackmyx64
/jackmyx86
/jackmyx86_32
/jackmyx86_64
/jackmysh2eb
/jackmysh2elf
/arckmy
/armkmy
/arm4kmy
/arm4lkmy
/arm4tkmy
/arm4tlkmy
/arm4tllkmy
/armv4kmy
/armv4lkmy
/armv4tlkmy
/arm5kmy
/arm5lkmy
/arm5nkmy
/armv5kmy
/armv5lkmy
/arm6kmy
/arm6lkmy
/armv6kmy
/armv6lkmy
/armv61kmy
/arm64kmy
/arm7kmy
/arm7lkmy
/armv7lkmy
/arm8kmy
/dbgkmy
/exploitkmy
/i4kmy
/i6kmy
/i486kmy
/i586kmy
/i686kmy
/killkmy
/m68kmy
/m68kkmy
/mipskmy
/mips64kmy
/mpslkmy
/mipselkmy
/pcckmy
/ppckmy
/ppc2kmy
/ppc440kmy
/ppc440fpkmy
/powerpckmy
/powerppckmy
/powerpc440fpkmy
/powerpc-440fpkmy
/rootkmy
/root32kmy
/shkmy
/sh4kmy
/ssh4kmy
/spckmy
/sparckmy
/x32kmy
/x64kmy
/x86kmy
/x86_32kmy
/x86_64kmy
/kmyarc
/kmyarm
/kmyarm4
/kmyarm4l
/kmyarm4t
/kmyarm4tl
/kmyarm4tll
/kmyarmv4
/kmyarmv4l
/kmyarmv4tl
/kmyarm5
/kmyarm5l
/kmyarm5n
/kmyarmv5
/kmyarmv5l
/kmyarm6
/kmyarm6l
/kmyarm64
/kmyarmv6
/kmyarmv6l
/kmyarmv61
/kmyarm7
/kmyarm7l
/kmyarmv7l
/kmyarm8
/kmydbg
/kmyexploit
/kmyi4
/kmyi6
/kmyi486
/kmyi586
/kmyi686
/kmykill
/kmym68
/kmym68k
/kmymips
/kmymips64
/kmympsl
/kmymipsel
/kmypcc
/kmyppc
/kmyppc2
/kmyppc440
/kmyppc440fp
/kmypowerpc
/kmypowerppc
/kmypowerpc440fp
/kmypowerpc-440fp
/kmyroot
/kmyroot32
/kmysh
/kmysh4
/kmyssh4
/kmyspc
/kmysparc
/kmyx32
/kmyx64
/kmyx86
/kmyx86_32
/kmyx86_64
/kmysh2eb
/kmysh2elf
/arclol
/armlol
/arm4lol
/arm4llol
/arm4tlol
/arm4tllol
/arm4tlllol
/armv4lol
/armv4llol
/armv4tllol
/arm5lol
/arm5llol
/arm5nlol
/armv5lol
/armv5llol
/arm6lol
/arm6llol
/armv6lol
/armv6llol
/armv61lol
/arm64lol
/arm7lol
/arm7llol
/armv7llol
/arm8lol
/dbglol
/exploitlol
/i4lol
/i6lol
/i486lol
/i586lol
/i686lol
/killlol
/m68lol
/m68klol
/mipslol
/mips64lol
/mpsllol
/mipsellol
/pcclol
/ppclol
/ppc2lol
/ppc440lol
/ppc440fplol
/powerpclol
/powerppclol
/powerpc440fplol
/powerpc-440fplol
/rootlol
/root32lol
/shlol
/sh4lol
/ssh4lol
/spclol
/sparclol
/x32lol
/x64lol
/x86lol
/x86_32lol
/x86_64lol
/lolarc
/lolarm
/lolarm4
/lolarm4l
/lolarm4t
/lolarm4tl
/lolarm4tll
/lolarmv4
/lolarmv4l
/lolarmv4tl
/lolarm5
/lolarm5l
/lolarm5n
/lolarmv5
/lolarmv5l
/lolarm6
/lolarm6l
/lolarm64
/lolarmv6
/lolarmv6l
/lolarmv61
/lolarm7
/lolarm7l
/lolarmv7l
/lolarm8
/loldbg
/lolexploit
/loli4
/loli6
/loli486
/loli586
/loli686
/lolkill
/lolm68
/lolm68k
/lolmips
/lolmips64
/lolmpsl
/lolmipsel
/lolpcc
/lolppc
/lolppc2
/lolppc440
/lolppc440fp
/lolpowerpc
/lolpowerppc
/lolpowerpc440fp
/lolpowerpc-440fp
/lolroot
/lolroot32
/lolsh
/lolsh4
/lolssh4
/lolspc
/lolsparc
/lolx32
/lolx64
/lolx86
/lolx86_32
/lolx86_64
/lolsh2eb
/lolsh2elf
/arctel
/armtel
/arm4tel
/arm4ltel
/arm4ttel
/arm4tltel
/arm4tlltel
/armv4tel
/armv4ltel
/armv4tltel
/arm5tel
/arm5ltel
/arm5ntel
/armv5tel
/armv5ltel
/arm6tel
/arm6ltel
/armv6tel
/armv6ltel
/armv61tel
/arm64tel
/arm7tel
/arm7ltel
/armv7ltel
/arm8tel
/dbgtel
/exploittel
/i4tel
/i6tel
/i486tel
/i586tel
/i686tel
/killtel
/m68tel
/m68ktel
/mipstel
/mips64tel
/mpsltel
/mipseltel
/pcctel
/ppctel
/ppc2tel
/ppc440tel
/ppc440fptel
/powerpctel
/powerppctel
/powerpc440fptel
/powerpc-440fptel
/roottel
/root32tel
/shtel
/sh4tel
/ssh4tel
/spctel
/sparctel
/x32tel
/x64tel
/x86tel
/x86_32tel
/x86_64tel
/telarc
/telarm
/telarm4
/telarm4l
/telarm4t
/telarm4tl
/telarm4tll
/telarmv4
/telarmv4l
/telarmv4tl
/telarm5
/telarm5l
/telarm5n
/telarmv5
/telarmv5l
/telarm6
/telarm6l
/telarm64
/telarmv6
/telarmv6l
/telarmv61
/telarm7
/telarm7l
/telarmv7l
/telarm8
/teldbg
/telexploit
/teli4
/teli6
/teli486
/teli586
/teli686
/telkill
/telm68
/telm68k
/telmips
/telmips64
/telmpsl
/telmipsel
/telpcc
/telppc
/telppc2
/telppc440
/telppc440fp
/telpowerpc
/telpowerppc
/telpowerpc440fp
/telpowerpc-440fp
/telroot
/telroot32
/telsh
/telsh4
/telssh4
/telspc
/telsparc
/telx32
/telx64
/telx86
/telx86_32
/telx86_64
/telsh2eb
/telsh2elf
/arcTwoFace
/armTwoFace
/arm4TwoFace
/arm4lTwoFace
/arm4tTwoFace
/arm4tlTwoFace
/arm4tllTwoFace
/armv4TwoFace
/armv4lTwoFace
/armv4tlTwoFace
/arm5TwoFace
/arm5lTwoFace
/arm5nTwoFace
/armv5TwoFace
/armv5lTwoFace
/arm6TwoFace
/arm6lTwoFace
/armv6lTwoFace
/armv61TwoFace
/arm64TwoFace
/armv6TwoFace
/arm7TwoFace
/arm7lTwoFace
/armv7lTwoFace
/arm8TwoFace
/dbgTwoFace
/exploitTwoFace
/i4TwoFace
/i6TwoFace
/i486TwoFace
/i586TwoFace
/i686TwoFace
/killTwoFace
/m68TwoFace
/m68kTwoFace
/mipsTwoFace
/mips64TwoFace
/mpslTwoFace
/mipselTwoFace
/pccTwoFace
/ppcTwoFace
/ppc2TwoFace
/ppc440TwoFace
/ppc440fpTwoFace
/powerpcTwoFace
/powerppcTwoFace
/powerpc440fpTwoFace
/powerpc-440fpTwoFace
/rootTwoFace
/root32TwoFace
/shTwoFace
/sh4TwoFace
/ssh4TwoFace
/spcTwoFace
/sparcTwoFace
/x32TwoFace
/x64TwoFace
/x86TwoFace
/x86_32TwoFace
/x86_64TwoFace
/TwoFacearc
/TwoFacearm
/TwoFacearm4
/TwoFacearm4l
/TwoFacearm4t
/TwoFacearm4tl
/TwoFacearm4tll
/TwoFacearmv4
/TwoFacearmv4l
/TwoFacearmv4tl
/TwoFacearm5
/TwoFacearm5l
/TwoFacearm5n
/TwoFacearmv5
/TwoFacearmv5l
/TwoFacearm6
/TwoFacearm6l
/TwoFacearm64
/TwoFacearmv6
/TwoFacearmv6l
/TwoFacearmv61
/TwoFacearm7
/TwoFacearm7l
/TwoFacearmv7l
/TwoFacearm8
/TwoFacedbg
/TwoFaceexploit
/TwoFacei4
/TwoFacei6
/TwoFacei486
/TwoFacei586
/TwoFacei686
/TwoFacekill
/TwoFacem68
/TwoFacem68k
/TwoFacemips
/TwoFacemips64
/TwoFacempsl
/TwoFacemipsel
/TwoFacepcc
/TwoFaceppc
/TwoFaceppc2
/TwoFaceppc440
/TwoFaceppc440fp
/TwoFacepowerpc
/TwoFacepowerppc
/TwoFacepowerpc440fp
/TwoFacepowerpc-440fp
/TwoFaceroot
/TwoFaceroot32
/TwoFacesh
/TwoFacesh4
/TwoFacessh4
/TwoFacespc
/TwoFacesparc
/TwoFacex32
/TwoFacex64
/TwoFacex86
/TwoFacex86_32
/TwoFacex86_64
/TwoFacesh2eb

/TwoFacesh2elf

# Reference: https://www.virustotal.com/en/file/e0120fc5544f9bc73f88ce4fbc8ba2c80cda73ab09a6092f84e5a77b07abb1d3/analysis/

/cuntybash

# Reference: https://www.virustotal.com/en/ip-address/217.28.218.227/information/

/dingarm
/dingcurl.sh
/dingdong.sh
/arcding
/armding
/arm4ding
/arm4lding
/arm4tding
/arm4tlding
/arm4tllding
/armv4ding
/armv4lding
/armv4tlding
/arm5ding
/arm5lding
/arm5nding
/armv5ding
/armv5lding
/arm6ding
/arm6lding
/armv6ding
/armv6lding
/armv61ding
/arm64ding
/armv6ding
/arm7ding
/arm7lding
/armv7lding
/arm8ding
/dbgding
/exploitding
/i4ding
/i6ding
/i486ding
/i586ding
/i686ding
/killding
/m68ding
/m68kding
/mipsding
/mips64ding
/mpslding
/mipselding
/pccding
/ppcding
/ppc2ding
/ppc440ding
/ppc440fpding
/powerpcding
/powerppcding
/powerpc440fpding
/powerpc-440fpding
/rootding
/root32ding
/shding
/sh4ding
/ssh4ding
/spcding
/sparcding
/x32ding
/x64ding
/x86ding
/x86_32ding
/x86_64ding
/dingarc
/dingarm
/dingarm4
/dingarm4l
/dingarm4t
/dingarm4tl
/dingarm4tll
/dingarmv4
/dingarmv4l
/dingarmv4tl
/dingarm5
/dingarm5l
/dingarm5n
/dingarmv5
/dingarmv5l
/dingarm6
/dingarmv6
/dingarm6l
/dingarm64
/dingarmv6l
/dingarmv61
/dingarm7
/dingarm7l
/dingarmv7l
/dingarm8
/dingdbg
/dingexploit
/dingi4
/dingi6
/dingi486
/dingi586
/dingi686
/dingkill
/dingm68
/dingm68k
/dingmips
/dingmips64
/dingmpsl
/dingmipsel
/dingpcc
/dingppc
/dingppc2
/dingppc440
/dingppc440fp
/dingpowerpc
/dingpowerppc
/dingpowerpc440fp
/dingpowerpc-440fp
/dingroot
/dingroot32
/dingsh
/dingsh4
/dingssh4
/dingspc
/dingsparc
/dingx32
/dingx64
/dingx86
/dingx86_32
/dingx86_64
/dingsh2eb
/dingsh2elf

# Reference: https://www.virustotal.com/en/file/1d3737937d900aab31f2e1acabfb861ffa2a7d11040e67f408d608150cfa6d8c/analysis/

/xlegal1
/xlegal2
/xlegal3
/xlegal4
/xlegal5
/xlegal6
/xlegal7
/xlegal8

# Reference: https://www.virustotal.com/en/file/f25f507d7ad9e388a41f55a22a9a5f8b5782d9af3f1ca0a34aa117be2ac37e4f/analysis/

/arcIoT
/armIoT
/arm4IoT
/arm4lIoT
/arm4tIoT
/arm4tlIoT
/arm4tllIoT
/armv4IoT
/armv4lIoT
/arm5IoT
/arm5lIoT
/arm5nIoT
/armv5IoT
/armv5lIoT
/arm6IoT
/arm6lIoT
/armv6IoT
/armv6lIoT
/armv61IoT
/arm64IoT
/arm7IoT
/arm7lIoT
/armv7lIoT
/arm8IoT
/dbgIoT
/exploitIoT
/i4IoT
/i6IoT
/i486IoT
/i586IoT
/i686IoT
/killIoT
/m68IoT
/m68kIoT
/mipsIoT
/mips64IoT
/mpslIoT
/mipselIoT
/pccIoT
/ppcIoT
/ppc2IoT
/ppc440IoT
/ppc440fpIoT
/powerpcIoT
/powerppcIoT
/powerpc440fpIoT
/powerpc-440fpIoT
/rootIoT
/root32IoT
/shIoT
/sh4IoT
/ssh4IoT
/spcIoT
/sparcIoT
/x32IoT
/x64IoT
/x86IoT
/x86_32IoT
/x86_64IoT
/IoTarc
/IoTarm
/IoTarm4
/IoTarm4l
/IoTarm4t
/IoTarm4tl
/IoTarm4tll
/IoTarmv4
/IoTarmv4l
/IoTarm5
/IoTarm5l
/IoTarm5n
/IoTarmv5
/IoTarmv5l
/IoTarm6
/IoTarm6l
/IoTarm64
/IoTarmv6
/IoTarmv6l
/IoTarmv61
/IoTarm7
/IoTarm7l
/IoTarmv7l
/IoTarm8
/IoTdbg
/IoTexploit
/IoTi4
/IoTi6
/IoTi486
/IoTi586
/IoTi686
/IoTkill
/IoTm68
/IoTm68k
/IoTmips
/IoTmips64
/IoTmpsl
/IoTmipsel
/IoTpcc
/IoTppc
/IoTppc2
/IoTppc440
/IoTppc440fp
/IoTpowerpc
/IoTpowerppc
/IoTpowerpc440fp
/IoTpowerpc-440fp
/IoTroot
/IoTroot32
/IoTsh
/IoTsh4
/IoTssh4
/IoTspc
/IoTsparc
/IoTx32
/IoTx64
/IoTx86
/IoTx86_32
/IoTx86_64

# Reference: https://twitter.com/bad_packets/status/1049413363447394304
# Reference: https://twitter.com/bad_packets/status/1116745238507167744

/EREBUS
/EREBUS.sh
/EREBUS1
/EREBUS2
/EREBUS3
/EREBUS4
/EREBUS5
/EREBUS6
/EREBUS7
/EREBUS8
/EREBUS9
/EREBUS10

# Reference: https://twitter.com/bad_packets/status/1105236847280611328
# Reference: https://twitter.com/bad_packets/status/1104858504219639808

/arc.Alma
/arm.Alma
/arm4.Alma
/arm4l.Alma
/arm4t.Alma
/arm4tl.Alma
/arm4tll.Alma
/armv4.Alma
/armv4l.Alma
/arm5.Alma
/arm5l.Alma
/arm5n.Alma
/armv5l.Alma
/arm6.Alma
/arm6l.Alma
/armv6.Alma
/armv6l.Alma
/armv61.Alma
/arm64.Alma
/arm7.Alma
/arm7l.Alma
/armv7l.Alma
/arm8.Alma
/dbg.Alma
/exploit.Alma
/i4.Alma
/i6.Alma
/i486.Alma
/i586.Alma
/i686.Alma
/kill.Alma
/m68.Alma
/m68k.Alma
/mips.Alma
/mips64.Alma
/mpsl.Alma
/mipsel.Alma
/pcc.Alma
/ppc.Alma
/ppc2.Alma
/ppc440.Alma
/ppc440fp.Alma
/powerpc.Alma
/powerppc.Alma
/powerpc-440fp.Alma
/root.Alma
/root32.Alma
/sh.Alma
/sh4.Alma
/ssh4.Alma
/spc.Alma
/sparc.Alma
/x32.Alma
/x64.Alma
/x86.Alma
/x86_32.Alma
/x86_64.Alma
/Alma.arc
/Alma.arm
/Alma.arm4
/Alma.arm4l
/Alma.arm4t
/Alma.arm4tl
/Alma.arm4tll
/Alma.armv4
/Alma.armv4l
/Alma.arm5
/Alma.arm5l
/Alma.arm5n
/Alma.armv5l
/Alma.arm6
/Alma.arm6l
/Alma.arm64
/Alma.armv6
/Alma.armv6l
/Alma.armv61
/Alma.arm7
/Alma.arm7l
/Alma.armv7l
/Alma.arm8
/Alma.dbg
/Alma.exploit
/Alma.i4
/Alma.i6
/Alma.i486
/Alma.i586
/Alma.i686
/Alma.kill
/Alma.m68
/Alma.m68k
/Alma.mips
/Alma.mips64
/Alma.mpsl
/Alma.mipsel
/Alma.pcc
/Alma.ppc
/Alma.ppc2
/Alma.ppc440
/Alma.ppc440fp
/Alma.powerpc
/Alma.powerppc
/Alma.powerpc-440fp
/Alma.root
/Alma.root32
/Alma.sh
/Alma.sh4
/Alma.ssh4
/Alma.spc
/Alma.sparc
/Alma.x32
/Alma.x64
/Alma.x86
/Alma.x86_32
/Alma.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1097260292109549568

/ajoomk
/atxhua
/cemtop
/earyzq
/fwdfvf
/lnkfmx
/nvitpj
/qtmzbn
/qvmxvl
/razdzn
/vtyhat
/vvglma

# Reference: https://twitter.com/bad_packets/status/1138586772806414336
# Reference: https://www.virustotal.com/gui/ip-address/185.244.25.228/relations

/ajoomk
/atxhua
/cemtop
/earyzq
/fwdfvf
/lnkfmx
/noir_x.86
/nvitpj
/qtmzbn
/qvmxvl
/razdzn
/vtyhat
/vvglma
/arc.soul
/arm.soul
/arm4.soul
/arm4l.soul
/arm4t.soul
/arm4tl.soul
/arm4tll.soul
/armv4.soul
/armv4l.soul
/arm5.soul
/arm5l.soul
/arm5n.soul
/armv5l.soul
/arm6.soul
/arm6l.soul
/armv6.soul
/armv6l.soul
/armv61.soul
/arm64.soul
/arm7.soul
/arm7l.soul
/armv7l.soul
/arm8.soul
/dbg.soul
/exploit.soul
/i4.soul
/i6.soul
/i486.soul
/i586.soul
/i686.soul
/kill.soul
/m68.soul
/m68k.soul
/mips.soul
/mips64.soul
/mpsl.soul
/mipsel.soul
/pcc.soul
/ppc.soul
/ppc2.soul
/ppc440.soul
/ppc440fp.soul
/powerpc.soul
/powerppc.soul
/powerpc-440fp.soul
/root.soul
/root32.soul
/sh.soul
/sh4.soul
/ssh4.soul
/spc.soul
/sparc.soul
/x32.soul
/x64.soul
/x86.soul
/x86_32.soul
/x86_64.soul
/soul.arc
/soul.arm
/soul.arm4
/soul.arm4l
/soul.arm4t
/soul.arm4tl
/soul.arm4tll
/soul.armv4
/soul.armv4l
/soul.arm5
/soul.arm5l
/soul.arm5n
/soul.armv5l
/soul.arm6
/soul.arm6l
/soul.arm64
/soul.armv6
/soul.armv6l
/soul.armv61
/soul.arm7
/soul.arm7l
/soul.armv7l
/soul.arm8
/soul.dbg
/soul.exploit
/soul.i4
/soul.i6
/soul.i486
/soul.i586
/soul.i686
/soul.kill
/soul.m68
/soul.m68k
/soul.mips
/soul.mips64
/soul.mpsl
/soul.mipsel
/soul.pcc
/soul.ppc
/soul.ppc2
/soul.ppc440
/soul.ppc440fp
/soul.powerpc
/soul.powerppc
/soul.powerpc-440fp
/soul.root
/soul.root32
/soul.sh
/soul.sh4
/soul.ssh4
/soul.spc
/soul.sparc
/soul.x32
/soul.x64
/soul.x86
/soul.x86_32
/soul.x86_64

# Reference: https://twitter.com/MalwarePatrol/status/1114572992879656960
# Reference: https://www.virustotal.com/gui/file/eec1f090ea0f9eb42233792ddefa8a6f57a17a13cd08cf40ff69a17303adb43e/community

/arc.assailant
/arm.assailant
/arm4.assailant
/arm4l.assailant
/arm4t.assailant
/arm4tl.assailant
/arm4tll.assailant
/armv4.assailant
/armv4l.assailant
/arm5.assailant
/arm5l.assailant
/arm5n.assailant
/armv5l.assailant
/arm6.assailant
/arm6l.assailant
/armv6.assailant
/armv6l.assailant
/armv61.assailant
/arm64.assailant
/arm7.assailant
/arm7l.assailant
/armv7l.assailant
/arm8.assailant
/dbg.assailant
/exploit.assailant
/i4.assailant
/i6.assailant
/i486.assailant
/i586.assailant
/i686.assailant
/kill.assailant
/m68.assailant
/m68k.assailant
/mips.assailant
/mips64.assailant
/mpsl.assailant
/mipsel.assailant
/pcc.assailant
/ppc.assailant
/ppc2.assailant
/ppc440.assailant
/ppc440fp.assailant
/powerpc.assailant
/powerppc.assailant
/powerpc-440fp.assailant
/root.assailant
/root32.assailant
/sh.assailant
/sh4.assailant
/ssh4.assailant
/spc.assailant
/sparc.assailant
/x32.assailant
/x64.assailant
/x86.assailant
/x86_32.assailant
/x86_64.assailant
/assailant.arc
/assailant.arm
/assailant.arm4
/assailant.arm4l
/assailant.arm4t
/assailant.arm4tl
/assailant.arm4tll
/assailant.armv4
/assailant.armv4l
/assailant.arm5
/assailant.arm5l
/assailant.arm5n
/assailant.armv5l
/assailant.arm6
/assailant.arm6l
/assailant.arm64
/assailant.armv6
/assailant.armv6l
/assailant.armv61
/assailant.arm7
/assailant.arm7l
/assailant.armv7l
/assailant.arm8
/assailant.dbg
/assailant.exploit
/assailant.i4
/assailant.i6
/assailant.i486
/assailant.i586
/assailant.i686
/assailant.kill
/assailant.m68
/assailant.m68k
/assailant.mips
/assailant.mips64
/assailant.mpsl
/assailant.mipsel
/assailant.pcc
/assailant.ppc
/assailant.ppc2
/assailant.ppc440
/assailant.ppc440fp
/assailant.powerpc
/assailant.powerppc
/assailant.powerpc-440fp
/assailant.root
/assailant.root32
/assailant.sh
/assailant.sh4
/assailant.ssh4
/assailant.spc
/assailant.sparc
/assailant.x32
/assailant.x64
/assailant.x86
/assailant.x86_32
/assailant.x86_64

# Reference: https://twitter.com/0xrb/status/1106501118220070912

/arcxyt4
/armxyt4
/arm4xyt4
/arm4lxyt4
/arm4txyt4
/arm4tlxyt4
/arm4tllxyt4
/armv4xyt4
/armv4lxyt4
/arm5xyt4
/arm5lxyt4
/arm5nxyt4
/armv5lxyt4
/arm6xyt4
/arm6lxyt4
/arm64xyt4
/armv6xyt4
/armv6lxyt4
/armv61xyt4
/arm7xyt4
/arm7lxyt4
/armv7lxyt4
/arm8xyt4
/dbgxyt4
/exploitxyt4
/i4xyt4
/i6xyt4
/i486xyt4
/i586xyt4
/i686xyt4
/killxyt4
/m68xyt4
/m68kxyt4
/mipsxyt4
/mips64xyt4
/mpslxyt4
/mipselxyt4
/pccxyt4
/ppcxyt4
/ppc2xyt4
/ppc440xyt4
/ppc440fpxyt4
/powerpcxyt4
/powerppcxyt4
/powerpc-440fpxyt4
/rootxyt4
/root32xyt4
/shxyt4
/sh4xyt4
/ssh4xyt4
/spcxyt4
/sparcxyt4
/x32xyt4
/x64xyt4
/x86xyt4
/x86_32xyt4
/x86_64xyt4
/xyt4arc
/xyt4arm
/xyt4arm4
/xyt4arm4l
/xyt4arm4t
/xyt4arm4tl
/xyt4arm4tll
/xyt4armv4
/xyt4armv4l
/xyt4arm5
/xyt4arm5l
/xyt4arm5n
/xyt4armv5l
/xyt4arm6
/xyt4arm6l
/xyt4arm64
/xyt4armv6
/xyt4armv6l
/xyt4armv61
/xyt4arm7
/xyt4arm7l
/xyt4armv7l
/xyt4arm8
/xyt4dbg
/xyt4exploit
/xyt4i4
/xyt4i6
/xyt4i486
/xyt4i586
/xyt4i686
/xyt4kill
/xyt4m68
/xyt4m68k
/xyt4mips
/xyt4mips64
/xyt4mpsl
/xyt4mipsel
/xyt4pcc
/xyt4ppc
/xyt4ppc2
/xyt4ppc440
/xyt4ppc440fp
/xyt4powerpc-440fp
/xyt4powerpc
/xyt4powerppc
/xyt4root
/xyt4root32
/xyt4sh
/xyt4sh4
/xyt4ssh4
/xyt4spc
/xyt4sparc
/xyt4x32
/xyt4x64
/xyt4x86
/xyt4x86_32
/xyt4x86_64

# Reference: https://twitter.com/0xrb/status/1102405214001397760

/arc.JapaneseSpace
/arm.JapaneseSpace
/arm4.JapaneseSpace
/arm4l.JapaneseSpace
/arm4t.JapaneseSpace
/arm4tl.JapaneseSpace
/arm4tll.JapaneseSpace
/armv4.JapaneseSpace
/armv4l.JapaneseSpace
/arm5.JapaneseSpace
/arm5l.JapaneseSpace
/arm5n.JapaneseSpace
/armv5l.JapaneseSpace
/arm6.JapaneseSpace
/arm6l.JapaneseSpace
/armv6.JapaneseSpace
/armv6l.JapaneseSpace
/armv61.JapaneseSpace
/arm64.JapaneseSpace
/arm7.JapaneseSpace
/arm7l.JapaneseSpace
/armv7l.JapaneseSpace
/arm8.JapaneseSpace
/dbg.JapaneseSpace
/exploit.JapaneseSpace
/i4.JapaneseSpace
/i6.JapaneseSpace
/i486.JapaneseSpace
/i586.JapaneseSpace
/i686.JapaneseSpace
/kill.JapaneseSpace
/m68.JapaneseSpace
/m68k.JapaneseSpace
/mips.JapaneseSpace
/mips64.JapaneseSpace
/mpsl.JapaneseSpace
/mipsel.JapaneseSpace
/pcc.JapaneseSpace
/ppc.JapaneseSpace
/ppc2.JapaneseSpace
/ppc440.JapaneseSpace
/ppc440fp.JapaneseSpace
/powerpc.JapaneseSpace
/powerppc.JapaneseSpace
/powerpc-440fp.JapaneseSpace
/root.JapaneseSpace
/root32.JapaneseSpace
/sh.JapaneseSpace
/sh4.JapaneseSpace
/ssh4.JapaneseSpace
/spc.JapaneseSpace
/sparc.JapaneseSpace
/x32.JapaneseSpace
/x64.JapaneseSpace
/x86.JapaneseSpace
/x86_32.JapaneseSpace
/x86_64.JapaneseSpace
/JapaneseSpace.arc
/JapaneseSpace.arm
/JapaneseSpace.arm4
/JapaneseSpace.arm4l
/JapaneseSpace.arm4t
/JapaneseSpace.arm4tl
/JapaneseSpace.arm4tll
/JapaneseSpace.armv4
/JapaneseSpace.armv4l
/JapaneseSpace.arm5
/JapaneseSpace.arm5l
/JapaneseSpace.arm5n
/JapaneseSpace.armv5l
/JapaneseSpace.arm6
/JapaneseSpace.arm6l
/JapaneseSpace.arm64
/JapaneseSpace.armv6
/JapaneseSpace.armv6l
/JapaneseSpace.armv61
/JapaneseSpace.arm7
/JapaneseSpace.arm7l
/JapaneseSpace.armv7l
/JapaneseSpace.arm8
/JapaneseSpace.dbg
/JapaneseSpace.exploit
/JapaneseSpace.i4
/JapaneseSpace.i6
/JapaneseSpace.i486
/JapaneseSpace.i586
/JapaneseSpace.i686
/JapaneseSpace.kill
/JapaneseSpace.m68
/JapaneseSpace.m68k
/JapaneseSpace.mips
/JapaneseSpace.mips64
/JapaneseSpace.mpsl
/JapaneseSpace.mipsel
/JapaneseSpace.pcc
/JapaneseSpace.ppc
/JapaneseSpace.ppc2
/JapaneseSpace.ppc440
/JapaneseSpace.ppc440fp
/JapaneseSpace.powerpc
/JapaneseSpace.powerppc
/JapaneseSpace.powerpc-440fp
/JapaneseSpace.root
/JapaneseSpace.root32
/JapaneseSpace.sh
/JapaneseSpace.sh4
/JapaneseSpace.ssh4
/JapaneseSpace.spc
/JapaneseSpace.sparc
/JapaneseSpace.x32
/JapaneseSpace.x64
/JapaneseSpace.x86
/JapaneseSpace.x86_32
/JapaneseSpace.x86_64

# Reference: https://twitter.com/0xrb/status/1099899224332763136

/arctenshi
/armtenshi
/arm4tenshi
/arm4ltenshi
/arm4ttenshi
/arm4tltenshi
/arm4tlltenshi
/armv4tenshi
/armv4ltenshi
/arm5tenshi
/arm5ltenshi
/arm5ntenshi
/armv5ltenshi
/arm6tenshi
/arm6ltenshi
/arm64tenshi
/armv6tenshi
/armv6ltenshi
/armv61tenshi
/arm7tenshi
/arm7ltenshi
/armv7ltenshi
/arm8tenshi
/dbgtenshi
/exploittenshi
/i4tenshi
/i486tenshi
/i586tenshi
/i686tenshi
/killtenshi
/m68tenshi
/m68ktenshi
/mipstenshi
/mips64tenshi
/mpsltenshi
/mipseltenshi
/pcctenshi
/ppctenshi
/ppc2tenshi
/ppc440tenshi
/ppc440fptenshi
/powerpc-440fptenshi
/powerpctenshi
/powerppctenshi
/roottenshi
/root32tenshi
/shtenshi
/sh4tenshi
/ssh4tenshi
/spctenshi
/sparctenshi
/x32tenshi
/x64tenshi
/x86tenshi
/x86_32tenshi
/x86_64tenshi
/tenshiarc
/tenshiarm
/tenshiarm4
/tenshiarm4l
/tenshiarm4t
/tenshiarm4tl
/tenshiarm4tll
/tenshiarmv4
/tenshiarmv4l
/tenshiarm5
/tenshiarm5l
/tenshiarm5n
/tenshiarmv5l
/tenshiarm6
/tenshiarm6l
/tenshiarm64
/tenshiarmv6
/tenshiarmv6l
/tenshiarmv61
/tenshiarm7
/tenshiarm7l
/tenshiarmv7l
/tenshiarm8
/tenshidbg
/tenshiexploit
/tenshii4
/tenshii486
/tenshii586
/tenshii686
/tenshikill
/tenshim68
/tenshim68k
/tenshimips
/tenshimips64
/tenshimpsl
/tenshimipsel
/tenshipcc
/tenshippc
/tenshippc2
/tenshippc440
/tenshippc440fp
/tenshipowerpc
/tenshipowerppc
/tenshipowerpc-440fp
/tenshiroot
/tenshiroot32
/tenshish
/tenshish4
/tenshissh4
/tenshispc
/tenshisparc
/tenshix32
/tenshix64
/tenshix86
/tenshix86_32
/tenshix86_64

# Reference: https://twitter.com/0xrb/status/1098874627617579008

/arc.dead
/arm.dead
/arm4.dead
/arm4l.dead
/arm4t.dead
/arm4tl.dead
/arm4tll.dead
/armv4.dead
/armv4l.dead
/arm5.dead
/arm5l.dead
/arm5n.dead
/armv5l.dead
/arm6.dead
/arm6l.dead
/armv6.dead
/armv6l.dead
/armv61.dead
/arm64.dead
/arm7.dead
/arm7l.dead
/armv7l.dead
/arm8.dead
/dbg.dead
/exploit.dead
/i4.dead
/i6.dead
/i486.dead
/i586.dead
/i686.dead
/kill.dead
/m68.dead
/m68k.dead
/mips.dead
/mips64.dead
/mpsl.dead
/mipsel.dead
/pcc.dead
/ppc.dead
/ppc2.dead
/ppc440.dead
/ppc440fp.dead
/powerpc.dead
/powerppc.dead
/powerpc-440fp.dead
/root.dead
/root32.dead
/sh.dead
/sh4.dead
/ssh4.dead
/spc.dead
/sparc.dead
/x32.dead
/x64.dead
/x86.dead
/x86_32.dead
/x86_64.dead
/dead.arc
/dead.arm
/dead.arm4
/dead.arm4l
/dead.arm4t
/dead.arm4tl
/dead.arm4tll
/dead.armv4
/dead.armv4l
/dead.arm5
/dead.arm5l
/dead.arm5n
/dead.armv5l
/dead.arm6
/dead.arm6l
/dead.arm64
/dead.armv6
/dead.armv6l
/dead.armv61
/dead.arm7
/dead.arm7l
/dead.armv7l
/dead.arm8
/dead.dbg
/dead.exploit
/dead.i4
/dead.i6
/dead.i486
/dead.i586
/dead.i686
/dead.kill
/dead.m68
/dead.m68k
/dead.mips
/dead.mips64
/dead.mpsl
/dead.mipsel
/dead.pcc
/dead.ppc
/dead.ppc2
/dead.ppc440
/dead.ppc440fp
/dead.powerpc
/dead.powerppc
/dead.powerpc-440fp
/dead.root
/dead.root32
/dead.sh
/dead.sh4
/dead.ssh4
/dead.spc
/dead.sparc
/dead.x32
/dead.x64
/dead.x86
/dead.x86_32
/dead.x86_64

# Reference: https://twitter.com/0xrb/status/1098514933774352389

/arcpl0x
/armpl0x
/arm4pl0x
/arm4lpl0x
/arm4tpl0x
/arm4tlpl0x
/arm4tllpl0x
/armv4pl0x
/armv4lpl0x
/arm5pl0x
/arm5lpl0x
/arm5npl0x
/armv5lpl0x
/arm6pl0x
/arm6lpl0x
/arm64pl0x
/armv6p10x
/armv6lpl0x
/armv61pl0x
/arm7pl0x
/arm7lpl0x
/armv7lpl0x
/arm8pl0x
/dbgpl0x
/exploitpl0x
/i4pl0x
/i486pl0x
/i586pl0x
/i686pl0x
/killpl0x
/m68pl0x
/m68kpl0x
/mipspl0x
/mips64pl0x
/mpslpl0x
/mipselpl0x
/pccpl0x
/ppcpl0x
/ppc2pl0x
/ppc440pl0x
/ppc440fppl0x
/powerpc-440fpcpl0x
/powerpcpl0x
/powerppcpl0x
/rootpl0x
/root32pl0x
/shpl0x
/sh4pl0x
/ssh4pl0x
/spcpl0x
/sparcpl0x
/x32pl0x
/x64pl0x
/x86pl0x
/x86_32pl0x
/x86_64pl0x
/pl0xarc
/pl0xarm
/pl0xarm4
/pl0xarm4l
/pl0xarm4t
/pl0xarm4tl
/pl0xarm4tll
/pl0xarmv4
/pl0xarmv4l
/pl0xarm5
/pl0xarm5l
/pl0xarm5n
/pl0xarmv5l
/pl0xarm6
/pl0xarm6l
/p10xarmv6
/pl0xarmv6l
/pl0xarmv61
/pl0xarm64
/pl0xarm7
/pl0xarm7l
/pl0xarmv7l
/pl0xarm8
/pl0xdbg
/pl0xexploit
/pl0xi4
/pl0xi486
/pl0xi586
/pl0xi686
/pl0xkill
/pl0xm68
/pl0xm68k
/pl0xmips
/pl0xmips64
/pl0xmpsl
/pl0xmipsel
/pl0xpcc
/pl0xppc
/pl0xppc2
/pl0xppc440
/pl0xppc440fp
/pl0xpowerpc-440fp
/pl0xpowerpc
/pl0xpowerppc
/pl0xroot
/pl0xroot32
/pl0xsh
/pl0xsh4
/pl0xssh4
/pl0xspc
/pl0xsparc
/pl0xx32
/pl0xx64
/pl0xx86
/pl0xx86_32
/pl0xx86_64
/kittyphones

# Reference: https://twitter.com/0xrb/status/1098513464480264192

/arc.hikari
/arm.hikari
/arm4.hikari
/arm4l.hikari
/arm4t.hikari
/arm4tl.hikari
/arm4tll.hikari
/armv4.hikari
/armv4l.hikari
/arm5.hikari
/arm5l.hikari
/arm5n.hikari
/armv5l.hikari
/arm6.hikari
/arm6l.hikari
/armv6.hikari
/armv6l.hikari
/armv61.hikari
/arm64.hikari
/arm7.hikari
/arm7l.hikari
/armv7l.hikari
/arm8.hikari
/dbg.hikari
/exploit.hikari
/i4.hikari
/i6.hikari
/i486.hikari
/i586.hikari
/i686.hikari
/kill.hikari
/m68.hikari
/m68k.hikari
/mips.hikari
/mips64.hikari
/mpsl.hikari
/mipsel.hikari
/pcc.hikari
/ppc.hikari
/ppc2.hikari
/ppc440.hikari
/ppc440fp.hikari
/powerpc.hikari
/powerppc.hikari
/powerpc-440fp.hikari
/root.hikari
/root32.hikari
/sh.hikari
/sh4.hikari
/ssh4.hikari
/spc.hikari
/sparc.hikari
/x32.hikari
/x64.hikari
/x86.hikari
/x86_32.hikari
/x86_64.hikari
/hikari.arc
/hikari.arm
/hikari.arm4
/hikari.arm4l
/hikari.arm4t
/hikari.arm4tl
/hikari.arm4tll
/hikari.armv4
/hikari.armv4l
/hikari.arm5
/hikari.arm5l
/hikari.arm5n
/hikari.armv5l
/hikari.arm6
/hikari.arm6l
/hikari.arm64
/hikari.armv6
/hikari.armv6l
/hikari.armv61
/hikari.arm7
/hikari.arm7l
/hikari.armv7l
/hikari.arm8
/hikari.dbg
/hikari.exploit
/hikari.i4
/hikari.i6
/hikari.i486
/hikari.i586
/hikari.i686
/hikari.kill
/hikari.m68
/hikari.m68k
/hikari.mips
/hikari.mips64
/hikari.mpsl
/hikari.mipsel
/hikari.pcc
/hikari.ppc
/hikari.ppc2
/hikari.ppc440
/hikari.ppc440fp
/hikari.powerpc
/hikari.powerppc
/hikari.powerpc-440fp
/hikari.root
/hikari.root32
/hikari.sh
/hikari.sh4
/hikari.ssh4
/hikari.spc
/hikari.sparc
/hikari.x32
/hikari.x64
/hikari.x86
/hikari.x86_32
/hikari.x86_64

# Reference: https://twitter.com/0xrb/status/1098456930127831050

/arc.op
/arm.op
/arm4.op
/arm4l.op
/arm4t.op
/arm4tl.op
/arm4tll.op
/armv4.op
/armv4l.op
/arm5.op
/arm5l.op
/arm5n.op
/armv5l.op
/arm6.op
/arm6l.op
/armv6.op
/armv6l.op
/armv61.op
/arm64.op
/arm7.op
/arm7l.op
/armv7l.op
/arm8.op
/dbg.op
/exploit.op
/i4.op
/i6.op
/i486.op
/i586.op
/i686.op
/kill.op
/m68.op
/m68k.op
/mips.op
/mips64.op
/mpsl.op
/mipsel.op
/pcc.op
/ppc.op
/ppc2.op
/ppc440.op
/ppc440fp.op
/powerpc.op
/powerppc.op
/powerpc-440fp.op
/root.op
/root32.op
/sh.op
/sh4.op
/ssh4.op
/spc.op
/sparc.op
/x32.op
/x64.op
/x86.op
/x86_32.op
/x86_64.op
/op.arc
/op.arm
/op.arm4
/op.arm4l
/op.arm4t
/op.arm4tl
/op.arm4tll
/op.armv4
/op.armv4l
/op.arm5
/op.arm5l
/op.arm5n
/op.armv5l
/op.arm6
/op.arm6l
/op.arm64
/op.armv6
/op.armv6l
/op.armv61
/op.arm7
/op.arm7l
/op.armv7l
/op.arm8
/op.dbg
/op.exploit
/op.i4
/op.i6
/op.i486
/op.i586
/op.i686
/op.kill
/op.m68
/op.m68k
/op.mips
/op.mips64
/op.mpsl
/op.mipsel
/op.pcc
/op.ppc
/op.ppc2
/op.ppc440
/op.ppc440fp
/op.powerpc
/op.powerppc
/op.powerpc-440fp
/op.root
/op.root32
/op.sh
/op.sh4
/op.ssh4
/op.spc
/op.sparc
/op.x32
/op.x64
/op.x86
/op.x86_32
/op.x86_64

# Reference: https://twitter.com/0xrb/status/1097865113716117508
# Reference: https://twitter.com/0xrb/status/1095736854593368065

/fgd

# Reference: https://twitter.com/0xrb/status/1097810508537888769

/arc.hakka
/arm.hakka
/arm4.hakka
/arm4l.hakka
/arm4t.hakka
/arm4tl.hakka
/arm4tll.hakka
/armv4.hakka
/armv4l.hakka
/arm5.hakka
/arm5l.hakka
/arm5n.hakka
/armv5l.hakka
/arm6.hakka
/arm6l.hakka
/armv6.hakka
/armv6l.hakka
/armv61.hakka
/arm64.hakka
/arm7.hakka
/arm7l.hakka
/armv7l.hakka
/arm8.hakka
/dbg.hakka
/exploit.hakka
/i4.hakka
/i6.hakka
/i486.hakka
/i586.hakka
/i686.hakka
/kill.hakka
/m68.hakka
/m68k.hakka
/mips.hakka
/mips64.hakka
/mpsl.hakka
/mipsel.hakka
/pcc.hakka
/ppc.hakka
/ppc2.hakka
/ppc440.hakka
/ppc440fp.hakka
/powerpc.hakka
/powerppc.hakka
/powerpc-440fp.hakka
/root.hakka
/root32.hakka
/sh.hakka
/sh4.hakka
/ssh4.hakka
/spc.hakka
/sparc.hakka
/x32.hakka
/x64.hakka
/x86.hakka
/x86_32.hakka
/x86_64.hakka
/hakka.arc
/hakka.arm
/hakka.arm4
/hakka.arm4l
/hakka.arm4t
/hakka.arm4tl
/hakka.arm4tll
/hakka.armv4
/hakka.armv4l
/hakka.arm5
/hakka.arm5l
/hakka.arm5n
/hakka.armv5l
/hakka.arm6
/hakka.arm6l
/hakka.arm64
/hakka.armv6
/hakka.armv6l
/hakka.armv61
/hakka.arm7
/hakka.arm7l
/hakka.armv7l
/hakka.arm8
/hakka.dbg
/hakka.exploit
/hakka.i4
/hakka.i6
/hakka.i486
/hakka.i586
/hakka.i686
/hakka.kill
/hakka.m68
/hakka.m68k
/hakka.mips
/hakka.mips64
/hakka.mpsl
/hakka.mipsel
/hakka.pcc
/hakka.ppc
/hakka.ppc2
/hakka.ppc440
/hakka.ppc440fp
/hakka.powerpc
/hakka.powerppc
/hakka.powerpc-440fp
/hakka.root
/hakka.root32
/hakka.sh
/hakka.sh4
/hakka.ssh4
/hakka.spc
/hakka.sparc
/hakka.x32
/hakka.x64
/hakka.x86
/hakka.x86_32
/hakka.x86_64

# Reference: https://twitter.com/0xrb/status/1097798750976856064

/arc.Arbiter
/arm.Arbiter
/arm4.Arbiter
/arm4l.Arbiter
/arm4t.Arbiter
/arm4tl.Arbiter
/arm4tll.Arbiter
/armv4.Arbiter
/armv4l.Arbiter
/arm5.Arbiter
/arm5l.Arbiter
/arm5n.Arbiter
/armv5l.Arbiter
/arm6.Arbiter
/arm6l.Arbiter
/armv6.Arbiter
/armv6l.Arbiter
/armv61.Arbiter
/arm64.Arbiter
/arm7.Arbiter
/arm7l.Arbiter
/armv7l.Arbiter
/arm8.Arbiter
/dbg.Arbiter
/exploit.Arbiter
/i4.Arbiter
/i6.Arbiter
/i486.Arbiter
/i586.Arbiter
/i686.Arbiter
/kill.Arbiter
/m68.Arbiter
/m68k.Arbiter
/mips.Arbiter
/mips64.Arbiter
/mpsl.Arbiter
/mipsel.Arbiter
/pcc.Arbiter
/ppc.Arbiter
/ppc2.Arbiter
/ppc440.Arbiter
/ppc440fp.Arbiter
/powerpc.Arbiter
/powerppc.Arbiter
/powerpc-440fp.Arbiter
/root.Arbiter
/root32.Arbiter
/sh.Arbiter
/sh4.Arbiter
/ssh4.Arbiter
/spc.Arbiter
/sparc.Arbiter
/x32.Arbiter
/x64.Arbiter
/x86.Arbiter
/x86_32.Arbiter
/x86_64.Arbiter
/Arbiter.arc
/Arbiter.arm
/Arbiter.arm4
/Arbiter.arm4l
/Arbiter.arm4t
/Arbiter.arm4tl
/Arbiter.arm4tll
/Arbiter.armv4
/Arbiter.armv4l
/Arbiter.arm5
/Arbiter.arm5l
/Arbiter.arm5n
/Arbiter.armv5l
/Arbiter.arm6
/Arbiter.arm6l
/Arbiter.arm64
/Arbiter.armv6
/Arbiter.armv6l
/Arbiter.armv61
/Arbiter.arm7
/Arbiter.arm7l
/Arbiter.armv7l
/Arbiter.arm8
/Arbiter.dbg
/Arbiter.exploit
/Arbiter.i4
/Arbiter.i6
/Arbiter.i486
/Arbiter.i586
/Arbiter.i686
/Arbiter.kill
/Arbiter.m68
/Arbiter.m68k
/Arbiter.mips
/Arbiter.mips64
/Arbiter.mpsl
/Arbiter.mipsel
/Arbiter.pcc
/Arbiter.ppc
/Arbiter.ppc2
/Arbiter.ppc440
/Arbiter.ppc440fp
/Arbiter.powerpc
/Arbiter.powerppc
/Arbiter.powerpc-440fp
/Arbiter.root
/Arbiter.root32
/Arbiter.sh
/Arbiter.sh4
/Arbiter.ssh4
/Arbiter.spc
/Arbiter.sparc
/Arbiter.x32
/Arbiter.x64
/Arbiter.x86
/Arbiter.x86_32
/Arbiter.x86_64

# Reference: https://twitter.com/0xrb/status/1097071201065816064

/arc.cnc
/arm.cnc
/arm4.cnc
/arm4l.cnc
/arm4t.cnc
/arm4tl.cnc
/arm4tll.cnc
/armv4.cnc
/armv4l.cnc
/arm5.cnc
/arm5l.cnc
/arm5n.cnc
/armv5l.cnc
/arm6.cnc
/arm6l.cnc
/armv6.cnc
/armv6l.cnc
/armv61.cnc
/arm64.cnc
/arm7.cnc
/arm7l.cnc
/armv7l.cnc
/arm8.cnc
/dbg.cnc
/exploit.cnc
/i4.cnc
/i6.cnc
/i486.cnc
/i586.cnc
/i686.cnc
/kill.cnc
/m68.cnc
/m68k.cnc
/mips.cnc
/mips64.cnc
/mpsl.cnc
/mipsel.cnc
/pcc.cnc
/ppc.cnc
/ppc2.cnc
/ppc440.cnc
/ppc440fp.cnc
/powerpc.cnc
/powerppc.cnc
/powerpc-440fp.cnc
/root.cnc
/root32.cnc
/sh.cnc
/sh4.cnc
/ssh4.cnc
/spc.cnc
/sparc.cnc
/x32.cnc
/x64.cnc
/x86.cnc
/x86_32.cnc
/x86_64.cnc
/cnc.arc
/cnc.arm
/cnc.arm4
/cnc.arm4l
/cnc.arm4t
/cnc.arm4tl
/cnc.arm4tll
/cnc.armv4
/cnc.armv4l
/cnc.arm5
/cnc.arm5l
/cnc.arm5n
/cnc.armv5l
/cnc.arm6
/cnc.arm6l
/cnc.arm64
/cnc.armv6
/cnc.armv6l
/cnc.armv61
/cnc.arm7
/cnc.arm7l
/cnc.armv7l
/cnc.arm8
/cnc.dbg
/cnc.exploit
/cnc.i4
/cnc.i6
/cnc.i486
/cnc.i586
/cnc.i686
/cnc.kill
/cnc.m68
/cnc.m68k
/cnc.mips
/cnc.mips64
/cnc.mpsl
/cnc.mipsel
/cnc.pcc
/cnc.ppc
/cnc.ppc2
/cnc.ppc440
/cnc.ppc440fp
/cnc.powerpc
/cnc.powerppc
/cnc.powerpc-440fp
/cnc.root
/cnc.root32
/cnc.sh
/cnc.sh4
/cnc.ssh4
/cnc.spc
/cnc.sparc
/cnc.x32
/cnc.x64
/cnc.x86
/cnc.x86_32
/cnc.x86_64

# Reference: https://twitter.com/0xrb/status/1095339881427922945

/arc.MG
/arm.MG
/arm4.MG
/arm4l.MG
/arm4t.MG
/arm4tl.MG
/arm4tll.MG
/armv4.MG
/armv4l.MG
/arm5.MG
/arm5l.MG
/arm5n.MG
/armv5l.MG
/arm6.MG
/arm6l.MG
/armv6.MG
/armv6l.MG
/armv61.MG
/arm64.MG
/arm7.MG
/arm7l.MG
/armv7l.MG
/arm8.MG
/dbg.MG
/exploit.MG
/i4.MG
/i6.MG
/i486.MG
/i586.MG
/i686.MG
/kill.MG
/m68.MG
/m68k.MG
/mips.MG
/mips64.MG
/mpsl.MG
/mipsel.MG
/pcc.MG
/ppc.MG
/ppc2.MG
/ppc440.MG
/ppc440fp.MG
/powerpc.MG
/powerppc.MG
/powerpc-440fp.MG
/root.MG
/root32.MG
/sh.MG
/sh4.MG
/ssh4.MG
/spc.MG
/sparc.MG
/x32.MG
/x64.MG
/x86.MG
/x86_32.MG
/x86_64.MG
/MG.arc
/MG.arm
/MG.arm4
/MG.arm4l
/MG.arm4t
/MG.arm4tl
/MG.arm4tll
/MG.armv4
/MG.armv4l
/MG.arm5
/MG.arm5l
/MG.arm5n
/MG.armv5l
/MG.arm6
/MG.arm6l
/MG.arm64
/MG.armv6
/MG.armv6l
/MG.armv61
/MG.arm7
/MG.arm7l
/MG.armv7l
/MG.arm8
/MG.dbg
/MG.exploit
/MG.i4
/MG.i6
/MG.i486
/MG.i586
/MG.i686
/MG.kill
/MG.m68
/MG.m68k
/MG.mips
/MG.mips64
/MG.mpsl
/MG.mipsel
/MG.pcc
/MG.ppc
/MG.ppc2
/MG.ppc440
/MG.ppc440fp
/MG.powerpc
/MG.powerppc
/MG.powerpc-440fp
/MG.root
/MG.root32
/MG.sh
/MG.sh4
/MG.ssh4
/MG.spc
/MG.sparc
/MG.x32
/MG.x64
/MG.x86
/MG.x86_32
/MG.x86_64

# Reference: https://twitter.com/0xrb/status/1094893674268262400

/arc.hehe
/arm.hehe
/arm4.hehe
/arm4l.hehe
/arm4t.hehe
/arm4tl.hehe
/arm4tll.hehe
/armv4.hehe
/armv4l.hehe
/arm5.hehe
/arm5l.hehe
/arm5n.hehe
/armv5l.hehe
/arm6.hehe
/arm6l.hehe
/armv6.hehe
/armv6l.hehe
/armv61.hehe
/arm64.hehe
/arm7.hehe
/arm7l.hehe
/armv7l.hehe
/arm8.hehe
/dbg.hehe
/exploit.hehe
/i4.hehe
/i6.hehe
/i486.hehe
/i586.hehe
/i686.hehe
/kill.hehe
/m68.hehe
/m68k.hehe
/mips.hehe
/mips64.hehe
/mpsl.hehe
/mipsel.hehe
/pcc.hehe
/ppc.hehe
/ppc2.hehe
/ppc440.hehe
/ppc440fp.hehe
/powerpc.hehe
/powerppc.hehe
/powerpc-440fp.hehe
/root.hehe
/root32.hehe
/sh.hehe
/sh4.hehe
/ssh4.hehe
/spc.hehe
/sparc.hehe
/x32.hehe
/x64.hehe
/x86.hehe
/x86_32.hehe
/x86_64.hehe
/hehe.arc
/hehe.arm
/hehe.arm4
/hehe.arm4l
/hehe.arm4t
/hehe.arm4tl
/hehe.arm4tll
/hehe.armv4
/hehe.armv4l
/hehe.arm5
/hehe.arm5l
/hehe.arm5n
/hehe.armv5l
/hehe.arm6
/hehe.arm6l
/hehe.arm64
/hehe.armv6
/hehe.armv6l
/hehe.armv61
/hehe.arm7
/hehe.arm7l
/hehe.armv7l
/hehe.arm8
/hehe.dbg
/hehe.exploit
/hehe.i4
/hehe.i6
/hehe.i486
/hehe.i586
/hehe.i686
/hehe.kill
/hehe.m68
/hehe.m68k
/hehe.mips
/hehe.mips64
/hehe.mpsl
/hehe.mipsel
/hehe.pcc
/hehe.ppc
/hehe.ppc2
/hehe.ppc440
/hehe.ppc440fp
/hehe.powerpc
/hehe.powerppc
/hehe.powerpc-440fp
/hehe.root
/hehe.root32
/hehe.sh
/hehe.sh4
/hehe.ssh4
/hehe.spc
/hehe.sparc
/hehe.x32
/hehe.x64
/hehe.x86
/hehe.x86_32
/hehe.x86_64

# Reference: https://twitter.com/0xrb/status/1094629583473786882

/arc.lol
/arm.lol
/arm4.lol
/arm4l.lol
/arm4t.lol
/arm4tl.lol
/arm4tll.lol
/armv4.lol
/armv4l.lol
/arm5.lol
/arm5l.lol
/arm5n.lol
/armv5l.lol
/arm6.lol
/arm6l.lol
/armv6.lol
/armv6l.lol
/armv61.lol
/arm64.lol
/arm7.lol
/arm7l.lol
/armv7l.lol
/arm8.lol
/dbg.lol
/exploit.lol
/i4.lol
/i6.lol
/i486.lol
/i586.lol
/i686.lol
/kill.lol
/m68.lol
/m68k.lol
/mips.lol
/mips64.lol
/mpsl.lol
/mipsel.lol
/pcc.lol
/ppc.lol
/ppc2.lol
/ppc440.lol
/ppc440fp.lol
/powerpc.lol
/powerppc.lol
/powerpc-440fp.lol
/root.lol
/root32.lol
/sh.lol
/sh4.lol
/ssh4.lol
/spc.lol
/sparc.lol
/x32.lol
/x64.lol
/x86.lol
/x86_32.lol
/x86_64.lol
/lol.arc
/lol.arm
/lol.arm4
/lol.arm4l
/lol.arm4t
/lol.arm4tl
/lol.arm4tll
/lol.armv4
/lol.armv4l
/lol.arm5
/lol.arm5l
/lol.arm5n
/lol.armv5l
/lol.arm6
/lol.arm6l
/lol.arm64
/lol.armv6
/lol.armv6l
/lol.armv61
/lol.arm7
/lol.arm7l
/lol.armv7l
/lol.arm8
/lol.dbg
/lol.exploit
/lol.i4
/lol.i6
/lol.i486
/lol.i586
/lol.i686
/lol.kill
/lol.m68
/lol.m68k
/lol.mips
/lol.mips64
/lol.mpsl
/lol.mipsel
/lol.pcc
/lol.ppc
/lol.ppc2
/lol.ppc440
/lol.ppc440fp
/lol.powerpc
/lol.powerppc
/lol.powerpc-440fp
/lol.root
/lol.root32
/lol.sh
/lol.sh4
/lol.ssh4
/lol.spc
/lol.sparc
/lol.x32
/lol.x64
/lol.x86
/lol.x86_32
/lol.x86_64

# Reference: https://twitter.com/0xrb/status/1094078897128382465

/arc.fuck
/arm.fuck
/arm4.fuck
/arm4l.fuck
/arm4t.fuck
/arm4tl.fuck
/arm4tll.fuck
/armv4.fuck
/armv4l.fuck
/arm5.fuck
/arm5l.fuck
/arm5n.fuck
/armv5l.fuck
/arm6.fuck
/arm6l.fuck
/armv6.fuck
/armv6l.fuck
/armv61.fuck
/arm64.fuck
/arm7.fuck
/arm7l.fuck
/armv7l.fuck
/arm8.fuck
/dbg.fuck
/exploit.fuck
/i4.fuck
/i6.fuck
/i486.fuck
/i586.fuck
/i686.fuck
/kill.fuck
/m68.fuck
/m68k.fuck
/mips.fuck
/mips64.fuck
/mpsl.fuck
/mipsel.fuck
/pcc.fuck
/ppc.fuck
/ppc2.fuck
/ppc440.fuck
/ppc440fp.fuck
/powerpc.fuck
/powerppc.fuck
/powerpc-440fp.fuck
/root.fuck
/root32.fuck
/sh.fuck
/sh4.fuck
/ssh4.fuck
/spc.fuck
/sparc.fuck
/x32.fuck
/x64.fuck
/x86.fuck
/x86_32.fuck
/x86_64.fuck
/fuck.arc
/fuck.arm
/fuck.arm4
/fuck.arm4l
/fuck.arm4t
/fuck.arm4tl
/fuck.arm4tll
/fuck.armv4
/fuck.armv4l
/fuck.arm5
/fuck.arm5l
/fuck.arm5n
/fuck.armv5l
/fuck.arm6
/fuck.arm6l
/fuck.arm64
/fuck.armv6
/fuck.armv6l
/fuck.armv61
/fuck.arm7
/fuck.arm7l
/fuck.armv7l
/fuck.arm8
/fuck.dbg
/fuck.exploit
/fuck.i4
/fuck.i6
/fuck.i486
/fuck.i586
/fuck.i686
/fuck.kill
/fuck.m68
/fuck.m68k
/fuck.mips
/fuck.mips64
/fuck.mpsl
/fuck.mipsel
/fuck.pcc
/fuck.ppc
/fuck.ppc2
/fuck.ppc440
/fuck.ppc440fp
/fuck.powerpc
/fuck.powerppc
/fuck.powerpc-440fp
/fuck.root
/fuck.root32
/fuck.sh
/fuck.sh4
/fuck.ssh4
/fuck.spc
/fuck.sparc
/fuck.x32
/fuck.x64
/fuck.x86
/fuck.x86_32
/fuck.x86_64

# Reference: https://twitter.com/0xrb/status/1094073635755773953

/arc.Execution
/arm.Execution
/arm4.Execution
/arm4l.Execution
/arm4t.Execution
/arm4tl.Execution
/arm4tll.Execution
/armv4.Execution
/armv4l.Execution
/arm5.Execution
/arm5l.Execution
/arm5n.Execution
/armv5l.Execution
/arm6.Execution
/arm6l.Execution
/armv6.Execution
/armv6l.Execution
/armv61.Execution
/arm64.Execution
/arm7.Execution
/arm7l.Execution
/armv7l.Execution
/arm8.Execution
/dbg.Execution
/exploit.Execution
/i4.Execution
/i6.Execution
/i486.Execution
/i586.Execution
/i686.Execution
/kill.Execution
/m68.Execution
/m68k.Execution
/mips.Execution
/mips64.Execution
/mpsl.Execution
/mipsel.Execution
/pcc.Execution
/ppc.Execution
/ppc2.Execution
/ppc440.Execution
/ppc440fp.Execution
/powerpc.Execution
/powerppc.Execution
/powerpc-440fp.Execution
/root.Execution
/root32.Execution
/sh.Execution
/sh4.Execution
/ssh4.Execution
/spc.Execution
/sparc.Execution
/x32.Execution
/x64.Execution
/x86.Execution
/x86_32.Execution
/x86_64.Execution
/Execution.arc
/Execution.arm
/Execution.arm4
/Execution.arm4l
/Execution.arm4t
/Execution.arm4tl
/Execution.arm4tll
/Execution.armv4
/Execution.armv4l
/Execution.arm5
/Execution.arm5l
/Execution.arm5n
/Execution.armv5l
/Execution.arm6
/Execution.arm6l
/Execution.arm64
/Execution.armv6
/Execution.armv6l
/Execution.armv61
/Execution.arm7
/Execution.arm7l
/Execution.armv7l
/Execution.arm8
/Execution.dbg
/Execution.exploit
/Execution.i4
/Execution.i6
/Execution.i486
/Execution.i586
/Execution.i686
/Execution.kill
/Execution.m68
/Execution.m68k
/Execution.mips
/Execution.mips64
/Execution.mpsl
/Execution.mipsel
/Execution.pcc
/Execution.ppc
/Execution.ppc2
/Execution.ppc440
/Execution.ppc440fp
/Execution.powerpc
/Execution.powerppc
/Execution.powerpc-440fp
/Execution.root
/Execution.root32
/Execution.sh
/Execution.sh4
/Execution.ssh4
/Execution.spc
/Execution.sparc
/Execution.x32
/Execution.x64
/Execution.x86
/Execution.x86_32
/Execution.x86_64

# Reference: https://twitter.com/0xrb/status/1093212457873608705

/unk
/unk1
/unk10
/unk2
/unk3
/unk4
/unk5
/unk6
/unk7
/unk8
/unk9

# Reference: https://twitter.com/0xrb/status/1091541952607207425

/arc_k
/arm_k
/arm4_k
/arm4l_k
/arm4t_k
/arm4tl_k
/arm4tll_k
/armv4_k
/armv4l_k
/arm5_k
/arm5l_k
/arm5n_k
/armv5l_k
/arm6_k
/arm6l_k
/arm64_k
/armv6_k
/armv6l_k
/armv61_k
/arm7_k
/arm7l_k
/armv7l_k
/arm8_k
/dbg_k
/exploit_k
/i4_k
/i6_k
/i486_k
/i586_k
/i686_k
/kill_k
/m68_k
/m68k_k
/mips_k
/mips64_k
/mpsl_k
/mipsel_k
/pcc_k
/ppc_k
/ppc2_k
/ppc440_k
/ppc440fp_k
/powerpc-440fp_k
/powerpc_k
/powerppc_k
/root_k
/root32_k
/sh_k
/sh4_k
/ssh4_k
/spc_k
/sparc_k
/x32_k
/x64_k
/x86_k
/x86_32_k
/x86_64_k
/k_arc
/k_arm
/k_arm4
/k_arm4l
/k_arm4t
/k_arm4tl
/k_arm4tll
/k_armv4
/k_armv4l
/k_arm5
/k_arm5l
/k_arm5n
/k_armv5l
/k_arm6
/k_arm6l
/k_arm64
/k_armv6
/k_armv6l
/k_armv61
/k_arm7
/k_arm7l
/k_armv7l
/k_arm8
/k_dbg
/k_exploit
/k_i4
/k_i6
/k_i486
/k_i586
/k_i686
/k_kill
/k_m68
/k_m68k
/k_mips
/k_mips64
/k_mpsl
/k_mipsel
/k_pcc
/k_ppc
/k_ppc2
/k_ppc440
/k_ppc440fp
/k_powerpc-440fp
/k_powerpc
/k_powerppc
/k_root
/k_root32
/k_sh
/k_sh4
/k_ssh4
/k_spc
/k_sparc
/k_x32
/k_x64
/k_x86
/k_x86_32
/k_x86_64

# Reference: https://twitter.com/0xrb/status/1090548183267139590

/mipss
/mipsell
/sshm8
/x86wtf
/arm66
/arm62
/ppcp
/ar58
/mk2
/sparcc
/arm44
/arm55
/ppc2

# Reference: https://twitter.com/0xrb/status/1090122108615544832

/arc.DankyDanky
/arm.DankyDanky
/arm4.DankyDanky
/arm4l.DankyDanky
/arm4t.DankyDanky
/arm4tl.DankyDanky
/arm4tll.DankyDanky
/armv4.DankyDanky
/armv4l.DankyDanky
/arm5.DankyDanky
/arm5l.DankyDanky
/arm5n.DankyDanky
/armv5l.DankyDanky
/arm6.DankyDanky
/arm6l.DankyDanky
/armv6.DankyDanky
/armv6l.DankyDanky
/armv61.DankyDanky
/arm64.DankyDanky
/arm7.DankyDanky
/arm7l.DankyDanky
/armv7l.DankyDanky
/arm8.DankyDanky
/dbg.DankyDanky
/exploit.DankyDanky
/i4.DankyDanky
/i6.DankyDanky
/i486.DankyDanky
/i586.DankyDanky
/i686.DankyDanky
/kill.DankyDanky
/m68.DankyDanky
/m68k.DankyDanky
/mips.DankyDanky
/mips64.DankyDanky
/mpsl.DankyDanky
/mipsel.DankyDanky
/pcc.DankyDanky
/ppc.DankyDanky
/ppc2.DankyDanky
/ppc440.DankyDanky
/ppc440fp.DankyDanky
/powerpc.DankyDanky
/powerppc.DankyDanky
/powerpc-440fp.DankyDanky
/root.DankyDanky
/root32.DankyDanky
/sh.DankyDanky
/sh4.DankyDanky
/ssh4.DankyDanky
/spc.DankyDanky
/sparc.DankyDanky
/x32.DankyDanky
/x64.DankyDanky
/x86.DankyDanky
/x86_32.DankyDanky
/x86_64.DankyDanky
/DankyDanky.arc
/DankyDanky.arm
/DankyDanky.arm4
/DankyDanky.arm4l
/DankyDanky.arm4t
/DankyDanky.arm4tl
/DankyDanky.arm4tll
/DankyDanky.armv4
/DankyDanky.armv4l
/DankyDanky.arm5
/DankyDanky.arm5l
/DankyDanky.arm5n
/DankyDanky.armv5l
/DankyDanky.arm6
/DankyDanky.arm6l
/DankyDanky.arm64
/DankyDanky.armv6
/DankyDanky.armv6l
/DankyDanky.armv61
/DankyDanky.arm7
/DankyDanky.arm7l
/DankyDanky.armv7l
/DankyDanky.arm8
/DankyDanky.dbg
/DankyDanky.exploit
/DankyDanky.i4
/DankyDanky.i6
/DankyDanky.i486
/DankyDanky.i586
/DankyDanky.i686
/DankyDanky.kill
/DankyDanky.m68
/DankyDanky.m68k
/DankyDanky.mips
/DankyDanky.mips64
/DankyDanky.mpsl
/DankyDanky.mipsel
/DankyDanky.pcc
/DankyDanky.ppc
/DankyDanky.ppc2
/DankyDanky.ppc440
/DankyDanky.ppc440fp
/DankyDanky.powerpc
/DankyDanky.powerppc
/DankyDanky.powerpc-440fp
/DankyDanky.root
/DankyDanky.root32
/DankyDanky.sh
/DankyDanky.sh4
/DankyDanky.ssh4
/DankyDanky.spc
/DankyDanky.sparc
/DankyDanky.x32
/DankyDanky.x64
/DankyDanky.x86
/DankyDanky.x86_32
/DankyDanky.x86_64

# Reference: https://twitter.com/0xrb/status/1090115672095354880

/arc.Voltage
/arm.Voltage
/arm4.Voltage
/arm4l.Voltage
/arm4t.Voltage
/arm4tl.Voltage
/arm4tll.Voltage
/armv4.Voltage
/armv4l.Voltage
/arm5.Voltage
/arm5l.Voltage
/arm5n.Voltage
/armv5l.Voltage
/arm6.Voltage
/arm6l.Voltage
/armv6.Voltage
/armv6l.Voltage
/armv61.Voltage
/arm64.Voltage
/arm7.Voltage
/arm7l.Voltage
/armv7l.Voltage
/arm8.Voltage
/dbg.Voltage
/exploit.Voltage
/i4.Voltage
/i6.Voltage
/i486.Voltage
/i586.Voltage
/i686.Voltage
/kill.Voltage
/m68.Voltage
/m68k.Voltage
/mips.Voltage
/mips64.Voltage
/mpsl.Voltage
/mipsel.Voltage
/pcc.Voltage
/ppc.Voltage
/ppc2.Voltage
/ppc440.Voltage
/ppc440fp.Voltage
/powerpc.Voltage
/powerppc.Voltage
/powerpc-440fp.Voltage
/root.Voltage
/root32.Voltage
/sh.Voltage
/sh4.Voltage
/ssh4.Voltage
/spc.Voltage
/sparc.Voltage
/x32.Voltage
/x64.Voltage
/x86.Voltage
/x86_32.Voltage
/x86_64.Voltage
/Voltage.arc
/Voltage.arm
/Voltage.arm4
/Voltage.arm4l
/Voltage.arm4t
/Voltage.arm4tl
/Voltage.arm4tll
/Voltage.armv4
/Voltage.armv4l
/Voltage.arm5
/Voltage.arm5l
/Voltage.arm5n
/Voltage.armv5l
/Voltage.arm6
/Voltage.arm6l
/Voltage.arm64
/Voltage.armv6
/Voltage.armv6l
/Voltage.armv61
/Voltage.arm7
/Voltage.arm7l
/Voltage.armv7l
/Voltage.arm8
/Voltage.dbg
/Voltage.exploit
/Voltage.i4
/Voltage.i6
/Voltage.i486
/Voltage.i586
/Voltage.i686
/Voltage.kill
/Voltage.m68
/Voltage.m68k
/Voltage.mips
/Voltage.mips64
/Voltage.mpsl
/Voltage.mipsel
/Voltage.pcc
/Voltage.ppc
/Voltage.ppc2
/Voltage.ppc440
/Voltage.ppc440fp
/Voltage.powerpc
/Voltage.powerppc
/Voltage.powerpc-440fp
/Voltage.root
/Voltage.root32
/Voltage.sh
/Voltage.sh4
/Voltage.ssh4
/Voltage.spc
/Voltage.sparc
/Voltage.x32
/Voltage.x64
/Voltage.x86
/Voltage.x86_32
/Voltage.x86_64

# Reference: https://twitter.com/0xrb/status/1089767658566803456

/arc.seize
/arm.seize
/arm4.seize
/arm4l.seize
/arm4t.seize
/arm4tl.seize
/arm4tll.seize
/armv4.seize
/armv4l.seize
/arm5.seize
/arm5l.seize
/arm5n.seize
/armv5l.seize
/arm6.seize
/arm6l.seize
/armv6.seize
/armv6l.seize
/armv61.seize
/arm64.seize
/arm7.seize
/arm7l.seize
/armv7l.seize
/arm8.seize
/dbg.seize
/exploit.seize
/i4.seize
/i6.seize
/i486.seize
/i586.seize
/i686.seize
/kill.seize
/m68.seize
/m68k.seize
/mips.seize
/mips64.seize
/mpsl.seize
/mipsel.seize
/pcc.seize
/ppc.seize
/ppc2.seize
/ppc440.seize
/ppc440fp.seize
/powerpc.seize
/powerppc.seize
/powerpc-440fp.seize
/root.seize
/root32.seize
/sh.seize
/sh4.seize
/ssh4.seize
/spc.seize
/sparc.seize
/x32.seize
/x64.seize
/x86.seize
/x86_32.seize
/x86_64.seize
/seize.arc
/seize.arm
/seize.arm4
/seize.arm4l
/seize.arm4t
/seize.arm4tl
/seize.arm4tll
/seize.armv4
/seize.armv4l
/seize.arm5
/seize.arm5l
/seize.arm5n
/seize.armv5l
/seize.arm6
/seize.arm6l
/seize.arm64
/seize.armv6
/seize.armv6l
/seize.armv61
/seize.arm7
/seize.arm7l
/seize.armv7l
/seize.arm8
/seize.dbg
/seize.exploit
/seize.i4
/seize.i6
/seize.i486
/seize.i586
/seize.i686
/seize.kill
/seize.m68
/seize.m68k
/seize.mips
/seize.mips64
/seize.mpsl
/seize.mipsel
/seize.pcc
/seize.ppc
/seize.ppc2
/seize.ppc440
/seize.ppc440fp
/seize.powerpc
/seize.powerppc
/seize.powerpc-440fp
/seize.root
/seize.root32
/seize.sh
/seize.sh4
/seize.ssh4
/seize.spc
/seize.sparc
/seize.x32
/seize.x64
/seize.x86
/seize.x86_32
/seize.x86_64

# Reference: https://twitter.com/malwaremustd1e/status/1089384555859996672

kaiten.do-dear.com

# Reference: https://twitter.com/0xrb/status/1089192080814026752

/arc.rozxw
/arm.rozxw
/arm4.rozxw
/arm4l.rozxw
/arm4t.rozxw
/arm4tl.rozxw
/arm4tll.rozxw
/armv4.rozxw
/armv4l.rozxw
/arm5.rozxw
/arm5l.rozxw
/arm5n.rozxw
/armv5l.rozxw
/arm6.rozxw
/arm6l.rozxw
/armv6.rozxw
/armv6l.rozxw
/armv61.rozxw
/arm64.rozxw
/arm7.rozxw
/arm7l.rozxw
/armv7l.rozxw
/arm8.rozxw
/dbg.rozxw
/exploit.rozxw
/i4.rozxw
/i6.rozxw
/i486.rozxw
/i586.rozxw
/i686.rozxw
/kill.rozxw
/m68.rozxw
/m68k.rozxw
/mips.rozxw
/mips64.rozxw
/mpsl.rozxw
/mipsel.rozxw
/pcc.rozxw
/ppc.rozxw
/ppc2.rozxw
/ppc440.rozxw
/ppc440fp.rozxw
/powerpc.rozxw
/powerppc.rozxw
/powerpc-440fp.rozxw
/root.rozxw
/root32.rozxw
/sh.rozxw
/sh4.rozxw
/ssh4.rozxw
/spc.rozxw
/sparc.rozxw
/x32.rozxw
/x64.rozxw
/x86.rozxw
/x86_32.rozxw
/x86_64.rozxw
/rozxw.arc
/rozxw.arm
/rozxw.arm4
/rozxw.arm4l
/rozxw.arm4t
/rozxw.arm4tl
/rozxw.arm4tll
/rozxw.armv4
/rozxw.armv4l
/rozxw.arm5
/rozxw.arm5l
/rozxw.arm5n
/rozxw.armv5l
/rozxw.arm6
/rozxw.arm6l
/rozxw.arm64
/rozxw.armv6
/rozxw.armv6l
/rozxw.armv61
/rozxw.arm7
/rozxw.arm7l
/rozxw.armv7l
/rozxw.arm8
/rozxw.dbg
/rozxw.exploit
/rozxw.i4
/rozxw.i6
/rozxw.i486
/rozxw.i586
/rozxw.i686
/rozxw.kill
/rozxw.m68
/rozxw.m68k
/rozxw.mips
/rozxw.mips64
/rozxw.mpsl
/rozxw.mipsel
/rozxw.pcc
/rozxw.ppc
/rozxw.ppc2
/rozxw.ppc440
/rozxw.ppc440fp
/rozxw.powerpc
/rozxw.powerppc
/rozxw.powerpc-440fp
/rozxw.root
/rozxw.root32
/rozxw.sh
/rozxw.sh4
/rozxw.ssh4
/rozxw.spc
/rozxw.sparc
/rozxw.x32
/rozxw.x64
/rozxw.x86
/rozxw.x86_32
/rozxw.x86_64
/apache2.rozxw
/fuck.rozxw
/telnetd.rozxw
/rozxw.apache2
/rozxw.fuck
/rozxw.telnetd

# Reference: https://twitter.com/0xrb/status/1088508079526817792

/arc.etherial
/arm.etherial
/arm4.etherial
/arm4l.etherial
/arm4t.etherial
/arm4tl.etherial
/arm4tll.etherial
/armv4.etherial
/armv4l.etherial
/arm5.etherial
/arm5l.etherial
/arm5n.etherial
/armv5l.etherial
/arm6.etherial
/arm6l.etherial
/armv6.etherial
/armv6l.etherial
/armv61.etherial
/arm64.etherial
/arm7.etherial
/arm7l.etherial
/armv7l.etherial
/arm8.etherial
/dbg.etherial
/exploit.etherial
/i4.etherial
/i6.etherial
/i486.etherial
/i586.etherial
/i686.etherial
/kill.etherial
/m68.etherial
/m68k.etherial
/mips.etherial
/mips64.etherial
/mpsl.etherial
/mipsel.etherial
/pcc.etherial
/ppc.etherial
/ppc2.etherial
/ppc440.etherial
/ppc440fp.etherial
/powerpc.etherial
/powerppc.etherial
/powerpc-440fp.etherial
/root.etherial
/root32.etherial
/sh.etherial
/sh4.etherial
/ssh4.etherial
/spc.etherial
/sparc.etherial
/x32.etherial
/x64.etherial
/x86.etherial
/x86_32.etherial
/x86_64.etherial
/etherial.arc
/etherial.arm
/etherial.arm4
/etherial.arm4l
/etherial.arm4t
/etherial.arm4tl
/etherial.arm4tll
/etherial.armv4
/etherial.armv4l
/etherial.arm5
/etherial.arm5l
/etherial.arm5n
/etherial.armv5l
/etherial.arm6
/etherial.arm6l
/etherial.arm64
/etherial.armv6
/etherial.armv6l
/etherial.armv61
/etherial.arm7
/etherial.arm7l
/etherial.armv7l
/etherial.arm8
/etherial.dbg
/etherial.exploit
/etherial.i4
/etherial.i6
/etherial.i486
/etherial.i586
/etherial.i686
/etherial.kill
/etherial.m68
/etherial.m68k
/etherial.mips
/etherial.mips64
/etherial.mpsl
/etherial.mipsel
/etherial.pcc
/etherial.ppc
/etherial.ppc2
/etherial.ppc440
/etherial.ppc440fp
/etherial.powerpc
/etherial.powerppc
/etherial.powerpc-440fp
/etherial.root
/etherial.root32
/etherial.sh
/etherial.sh4
/etherial.ssh4
/etherial.spc
/etherial.sparc
/etherial.x32
/etherial.x64
/etherial.x86
/etherial.x86_32
/etherial.x86_64

# Reference: https://twitter.com/0xrb/status/1097775066077642753

/adb1
/adb10
/adb2
/adb3
/adb4
/adb5
/adb6
/adb7
/adb8
/adb9
/dlink2
/tr064
/tr0642
/gpon801
/gpon802
/gpon803
/gpon804
/gpon805
/gpon806
/gpon807
/gpon808
/gpon809
/gpon4431
/gpon4432
/gpon4433
/gpon4434
/gpon4435
/gpon4436
/gpon4437
/gpon4438
/gpon4439
/gpon44310
/gpon8010
/gpon80801
/gpon80802
/gpon80803
/gpon80804
/gpon80805
/gpon80806
/gpon80807
/gpon80808
/gpon80809
/gpon808010

# Reference: https://twitter.com/0xrb/status/1114204138936647680

80.211.232.121:35883

# Reference: https://twitter.com/0xrb/status/1107530673319903235

/lelznet.sh

# Reference: https://twitter.com/0xrb/status/1119301515766915072

/arc.tru
/arm.tru
/arm4.tru
/arm4l.tru
/arm4t.tru
/arm4tl.tru
/arm4tll.tru
/armv4.tru
/armv4l.tru
/arm5.tru
/arm5l.tru
/arm5n.tru
/armv5l.tru
/arm6.tru
/arm6l.tru
/armv6.tru
/armv6l.tru
/armv61.tru
/arm64.tru
/arm7.tru
/arm7l.tru
/armv7l.tru
/arm8.tru
/dbg.tru
/exploit.tru
/i4.tru
/i6.tru
/i486.tru
/i586.tru
/i686.tru
/kill.tru
/m68.tru
/m68k.tru
/mips.tru
/mips64.tru
/mpsl.tru
/mipsel.tru
/pcc.tru
/ppc.tru
/ppc2.tru
/ppc440.tru
/ppc440fp.tru
/powerpc.tru
/powerppc.tru
/powerpc-440fp.tru
/root.tru
/root32.tru
/sh.tru
/sh4.tru
/ssh4.tru
/spc.tru
/sparc.tru
/x32.tru
/x64.tru
/x86.tru
/x86_32.tru
/x86_64.tru
/tru.arc
/tru.arm
/tru.arm4
/tru.arm4l
/tru.arm4t
/tru.arm4tl
/tru.arm4tll
/tru.armv4
/tru.armv4l
/tru.arm5
/tru.arm5l
/tru.arm5n
/tru.armv5l
/tru.arm6
/tru.arm6l
/tru.arm64
/tru.armv6
/tru.armv6l
/tru.armv61
/tru.arm7
/tru.arm7l
/tru.armv7l
/tru.arm8
/tru.dbg
/tru.exploit
/tru.i4
/tru.i6
/tru.i486
/tru.i586
/tru.i686
/tru.kill
/tru.m68
/tru.m68k
/tru.mips
/tru.mips64
/tru.mpsl
/tru.mipsel
/tru.pcc
/tru.ppc
/tru.ppc2
/tru.ppc440
/tru.ppc440fp
/tru.powerpc
/tru.powerppc
/tru.powerpc-440fp
/tru.root
/tru.root32
/tru.sh
/tru.sh4
/tru.ssh4
/tru.spc
/tru.sparc
/tru.x32
/tru.x64
/tru.x86
/tru.x86_32
/tru.x86_64

# Reference: https://twitter.com/0xrb/status/1119476880032391173

/arc.samoura
/arm.samoura
/arm4.samoura
/arm4l.samoura
/arm4t.samoura
/arm4tl.samoura
/arm4tll.samoura
/armv4.samoura
/armv4l.samoura
/arm5.samoura
/arm5l.samoura
/arm5n.samoura
/armv5l.samoura
/arm6.samoura
/arm6l.samoura
/armv6.samoura
/armv6l.samoura
/armv61.samoura
/arm64.samoura
/arm7.samoura
/arm7l.samoura
/armv7l.samoura
/arm8.samoura
/dbg.samoura
/exploit.samoura
/i4.samoura
/i6.samoura
/i486.samoura
/i586.samoura
/i686.samoura
/kill.samoura
/m68.samoura
/m68k.samoura
/mips.samoura
/mips64.samoura
/mpsl.samoura
/mipsel.samoura
/pcc.samoura
/ppc.samoura
/ppc2.samoura
/ppc440.samoura
/ppc440fp.samoura
/powerpc.samoura
/powerppc.samoura
/powerpc-440fp.samoura
/root.samoura
/root32.samoura
/sh.samoura
/sh4.samoura
/ssh4.samoura
/spc.samoura
/sparc.samoura
/x32.samoura
/x64.samoura
/x86.samoura
/x86_32.samoura
/x86_64.samoura
/samoura.arc
/samoura.arm
/samoura.arm4
/samoura.arm4l
/samoura.arm4t
/samoura.arm4tl
/samoura.arm4tll
/samoura.armv4
/samoura.armv4l
/samoura.arm5
/samoura.arm5l
/samoura.arm5n
/samoura.armv5l
/samoura.arm6
/samoura.arm6l
/samoura.arm64
/samoura.armv6
/samoura.armv6l
/samoura.armv61
/samoura.arm7
/samoura.arm7l
/samoura.armv7l
/samoura.arm8
/samoura.dbg
/samoura.exploit
/samoura.i4
/samoura.i6
/samoura.i486
/samoura.i586
/samoura.i686
/samoura.kill
/samoura.m68
/samoura.m68k
/samoura.mips
/samoura.mips64
/samoura.mpsl
/samoura.mipsel
/samoura.pcc
/samoura.ppc
/samoura.ppc2
/samoura.ppc440
/samoura.ppc440fp
/samoura.powerpc
/samoura.powerppc
/samoura.powerpc-440fp
/samoura.root
/samoura.root32
/samoura.sh
/samoura.sh4
/samoura.ssh4
/samoura.spc
/samoura.sparc
/samoura.x32
/samoura.x64
/samoura.x86
/samoura.x86_32
/samoura.x86_64

# Reference: https://twitter.com/bad_packets/status/1119746530309595136

/arc.doink
/arm.doink
/arm4.doink
/arm4l.doink
/arm4t.doink
/arm4tl.doink
/arm4tll.doink
/armv4.doink
/armv4l.doink
/arm5.doink
/arm5l.doink
/arm5n.doink
/armv5l.doink
/arm6.doink
/arm6l.doink
/armv6.doink
/armv6l.doink
/armv61.doink
/arm64.doink
/arm7.doink
/arm7l.doink
/armv7l.doink
/arm8.doink
/dbg.doink
/exploit.doink
/i4.doink
/i6.doink
/i486.doink
/i586.doink
/i686.doink
/kill.doink
/m68.doink
/m68k.doink
/mips.doink
/mips64.doink
/mpsl.doink
/mipsel.doink
/pcc.doink
/ppc.doink
/ppc2.doink
/ppc440.doink
/ppc440fp.doink
/powerpc.doink
/powerppc.doink
/powerpc-440fp.doink
/root.doink
/root32.doink
/sh.doink
/sh4.doink
/ssh4.doink
/spc.doink
/sparc.doink
/x32.doink
/x64.doink
/x86.doink
/x86_32.doink
/x86_64.doink
/doink.arc
/doink.arm
/doink.arm4
/doink.arm4l
/doink.arm4t
/doink.arm4tl
/doink.arm4tll
/doink.armv4
/doink.armv4l
/doink.arm5
/doink.arm5l
/doink.arm5n
/doink.armv5l
/doink.arm6
/doink.arm6l
/doink.arm64
/doink.armv6
/doink.armv6l
/doink.armv61
/doink.arm7
/doink.arm7l
/doink.armv7l
/doink.arm8
/doink.dbg
/doink.exploit
/doink.i4
/doink.i6
/doink.i486
/doink.i586
/doink.i686
/doink.kill
/doink.m68
/doink.m68k
/doink.mips
/doink.mips64
/doink.mpsl
/doink.mipsel
/doink.pcc
/doink.ppc
/doink.ppc2
/doink.ppc440
/doink.ppc440fp
/doink.powerpc
/doink.powerppc
/doink.powerpc-440fp
/doink.root
/doink.root32
/doink.sh
/doink.sh4
/doink.ssh4
/doink.spc
/doink.sparc
/doink.x32
/doink.x64
/doink.x86
/doink.x86_32
/doink.x86_64

# Reference: https://twitter.com/0xrb/status/1122062589251309568

1.188.10.122:23
1.188.112.132:23
1.188.12.1:23
1.188.135.22:23
1.188.14.207:23
1.188.152.16:23
1.188.157.106:23
1.188.169.105:23
1.188.169.225:23
1.188.17.88:23
/arc.Sinix
/arm.Sinix
/arm4.Sinix
/arm4l.Sinix
/arm4t.Sinix
/arm4tl.Sinix
/arm4tll.Sinix
/armv4.Sinix
/armv4l.Sinix
/arm5.Sinix
/arm5l.Sinix
/arm5n.Sinix
/armv5l.Sinix
/arm6.Sinix
/arm6l.Sinix
/armv6.Sinix
/armv6l.Sinix
/armv61.Sinix
/arm64.Sinix
/arm7.Sinix
/arm7l.Sinix
/armv7l.Sinix
/arm8.Sinix
/dbg.Sinix
/exploit.Sinix
/i4.Sinix
/i6.Sinix
/i486.Sinix
/i586.Sinix
/i686.Sinix
/kill.Sinix
/m68.Sinix
/m68k.Sinix
/mips.Sinix
/mips64.Sinix
/mpsl.Sinix
/mipsel.Sinix
/pcc.Sinix
/ppc.Sinix
/ppc2.Sinix
/ppc440.Sinix
/ppc440fp.Sinix
/powerpc.Sinix
/powerppc.Sinix
/powerpc-440fp.Sinix
/root.Sinix
/root32.Sinix
/sh.Sinix
/sh4.Sinix
/ssh4.Sinix
/spc.Sinix
/sparc.Sinix
/x32.Sinix
/x64.Sinix
/x86.Sinix
/x86_32.Sinix
/x86_64.Sinix
/Sinix.arc
/Sinix.arm
/Sinix.arm4
/Sinix.arm4l
/Sinix.arm4t
/Sinix.arm4tl
/Sinix.arm4tll
/Sinix.armv4
/Sinix.armv4l
/Sinix.arm5
/Sinix.arm5l
/Sinix.arm5n
/Sinix.armv5l
/Sinix.arm6
/Sinix.arm6l
/Sinix.arm64
/Sinix.armv6
/Sinix.armv6l
/Sinix.armv61
/Sinix.arm7
/Sinix.arm7l
/Sinix.armv7l
/Sinix.arm8
/Sinix.dbg
/Sinix.exploit
/Sinix.i4
/Sinix.i6
/Sinix.i486
/Sinix.i586
/Sinix.i686
/Sinix.kill
/Sinix.m68
/Sinix.m68k
/Sinix.mips
/Sinix.mips64
/Sinix.mpsl
/Sinix.mipsel
/Sinix.pcc
/Sinix.ppc
/Sinix.ppc2
/Sinix.ppc440
/Sinix.ppc440fp
/Sinix.powerpc
/Sinix.powerppc
/Sinix.powerpc-440fp
/Sinix.root
/Sinix.root32
/Sinix.sh
/Sinix.sh4
/Sinix.ssh4
/Sinix.spc
/Sinix.sparc
/Sinix.x32
/Sinix.x64
/Sinix.x86
/Sinix.x86_32
/Sinix.x86_64

# Reference: https://twitter.com/0xrb/status/1122072569853571073

103.60.13.195:1337
/arc.leet
/arm.leet
/arm4.leet
/arm4l.leet
/arm4t.leet
/arm4tl.leet
/arm4tll.leet
/armv4.leet
/armv4l.leet
/arm5.leet
/arm5l.leet
/arm5n.leet
/armv5l.leet
/arm6.leet
/arm6l.leet
/armv6.leet
/armv6l.leet
/armv61.leet
/arm64.leet
/arm7.leet
/arm7l.leet
/armv7l.leet
/arm8.leet
/dbg.leet
/exploit.leet
/i4.leet
/i6.leet
/i486.leet
/i586.leet
/i686.leet
/kill.leet
/m68.leet
/m68k.leet
/mips.leet
/mips64.leet
/mpsl.leet
/mipsel.leet
/pcc.leet
/ppc.leet
/ppc2.leet
/ppc440.leet
/ppc440fp.leet
/powerpc.leet
/powerppc.leet
/powerpc-440fp.leet
/root.leet
/root32.leet
/sh.leet
/sh4.leet
/ssh4.leet
/spc.leet
/sparc.leet
/x32.leet
/x64.leet
/x86.leet
/x86_32.leet
/x86_64.leet
/leet.arc
/leet.arm
/leet.arm4
/leet.arm4l
/leet.arm4t
/leet.arm4tl
/leet.arm4tll
/leet.armv4
/leet.armv4l
/leet.arm5
/leet.arm5l
/leet.arm5n
/leet.armv5l
/leet.arm6
/leet.arm6l
/leet.arm64
/leet.armv6
/leet.armv6l
/leet.armv61
/leet.arm7
/leet.arm7l
/leet.armv7l
/leet.arm8
/leet.dbg
/leet.exploit
/leet.i4
/leet.i6
/leet.i486
/leet.i586
/leet.i686
/leet.kill
/leet.m68
/leet.m68k
/leet.mips
/leet.mips64
/leet.mpsl
/leet.mipsel
/leet.pcc
/leet.ppc
/leet.ppc2
/leet.ppc440
/leet.ppc440fp
/leet.powerpc
/leet.powerppc
/leet.powerpc-440fp
/leet.root
/leet.root32
/leet.sh
/leet.sh4
/leet.ssh4
/leet.spc
/leet.sparc
/leet.x32
/leet.x64
/leet.x86
/leet.x86_32
/leet.x86_64

# Reference: https://twitter.com/gorimpthon/status/1073832584709357568

/weed.sh
/weedntpd
/weedsshd
/weedopenssh
/weedbash
/weedtftp
/weedwget
/weedcron
/weedftp
/weedpftp
/weedsh
/weedshit
/weedapache2
/weedtelnetd

# Reference: https://twitter.com/bad_packets/status/1123813319356428291

/arc.cow
/arm.cow
/arm4.cow
/arm4l.cow
/arm4t.cow
/arm4tl.cow
/arm4tll.cow
/armv4.cow
/armv4l.cow
/arm5.cow
/arm5l.cow
/arm5n.cow
/armv5l.cow
/arm6.cow
/arm6l.cow
/armv6.cow
/armv6l.cow
/armv61.cow
/arm64.cow
/arm7.cow
/arm7l.cow
/armv7l.cow
/arm8.cow
/dbg.cow
/exploit.cow
/i4.cow
/i6.cow
/i486.cow
/i586.cow
/i686.cow
/kill.cow
/m68.cow
/m68k.cow
/mips.cow
/mips64.cow
/mpsl.cow
/mipsel.cow
/pcc.cow
/ppc.cow
/ppc2.cow
/ppc440.cow
/ppc440fp.cow
/powerpc.cow
/powerppc.cow
/powerpc-440fp.cow
/root.cow
/root32.cow
/sh.cow
/sh4.cow
/ssh4.cow
/spc.cow
/sparc.cow
/x32.cow
/x64.cow
/x86.cow
/x86_32.cow
/x86_64.cow
/cow.arc
/cow.arm
/cow.arm4
/cow.arm4l
/cow.arm4t
/cow.arm4tl
/cow.arm4tll
/cow.armv4
/cow.armv4l
/cow.arm5
/cow.arm5l
/cow.arm5n
/cow.armv5l
/cow.arm6
/cow.arm6l
/cow.arm64
/cow.armv6
/cow.armv6l
/cow.armv61
/cow.arm7
/cow.arm7l
/cow.armv7l
/cow.arm8
/cow.dbg
/cow.exploit
/cow.i4
/cow.i6
/cow.i486
/cow.i586
/cow.i686
/cow.kill
/cow.m68
/cow.m68k
/cow.mips
/cow.mips64
/cow.mpsl
/cow.mipsel
/cow.pcc
/cow.ppc
/cow.ppc2
/cow.ppc440
/cow.ppc440fp
/cow.powerpc
/cow.powerppc
/cow.powerpc-440fp
/cow.root
/cow.root32
/cow.sh
/cow.sh4
/cow.ssh4
/cow.spc
/cow.sparc
/cow.x32
/cow.x64
/cow.x86
/cow.x86_32
/cow.x86_64

# Reference: https://twitter.com/zom3y3/status/1124971992916979712

54.36.212.123:8067

# Reference: https://twitter.com/MasafumiNegishi/status/1125357068989296641

205.185.113.25:36921

# Reference: https://twitter.com/0xrb/status/1129614872256212993

/arc.uogpmegagay
/arm.uogpmegagay
/arm4.uogpmegagay
/arm4l.uogpmegagay
/arm4t.uogpmegagay
/arm4tl.uogpmegagay
/arm4tll.uogpmegagay
/armv4.uogpmegagay
/armv4l.uogpmegagay
/arm5.uogpmegagay
/arm5l.uogpmegagay
/arm5n.uogpmegagay
/armv5l.uogpmegagay
/arm6.uogpmegagay
/arm6l.uogpmegagay
/armv6.uogpmegagay
/armv6l.uogpmegagay
/armv61.uogpmegagay
/arm64.uogpmegagay
/arm7.uogpmegagay
/arm7l.uogpmegagay
/armv7l.uogpmegagay
/arm8.uogpmegagay
/dbg.uogpmegagay
/exploit.uogpmegagay
/i4.uogpmegagay
/i6.uogpmegagay
/i486.uogpmegagay
/i586.uogpmegagay
/i686.uogpmegagay
/kill.uogpmegagay
/m68.uogpmegagay
/m68k.uogpmegagay
/mips.uogpmegagay
/mips64.uogpmegagay
/mpsl.uogpmegagay
/mipsel.uogpmegagay
/pcc.uogpmegagay
/ppc.uogpmegagay
/ppc2.uogpmegagay
/ppc440.uogpmegagay
/ppc440fp.uogpmegagay
/powerpc.uogpmegagay
/powerppc.uogpmegagay
/powerpc-440fp.uogpmegagay
/root.uogpmegagay
/root32.uogpmegagay
/sh.uogpmegagay
/sh4.uogpmegagay
/ssh4.uogpmegagay
/spc.uogpmegagay
/sparc.uogpmegagay
/x32.uogpmegagay
/x64.uogpmegagay
/x86.uogpmegagay
/x86_32.uogpmegagay
/x86_64.uogpmegagay
/uogpmegagay.arc
/uogpmegagay.arm
/uogpmegagay.arm4
/uogpmegagay.arm4l
/uogpmegagay.arm4t
/uogpmegagay.arm4tl
/uogpmegagay.arm4tll
/uogpmegagay.armv4
/uogpmegagay.armv4l
/uogpmegagay.arm5
/uogpmegagay.arm5l
/uogpmegagay.arm5n
/uogpmegagay.armv5l
/uogpmegagay.arm6
/uogpmegagay.arm6l
/uogpmegagay.arm64
/uogpmegagay.armv6
/uogpmegagay.armv6l
/uogpmegagay.armv61
/uogpmegagay.arm7
/uogpmegagay.arm7l
/uogpmegagay.armv7l
/uogpmegagay.arm8
/uogpmegagay.dbg
/uogpmegagay.exploit
/uogpmegagay.i4
/uogpmegagay.i6
/uogpmegagay.i486
/uogpmegagay.i586
/uogpmegagay.i686
/uogpmegagay.kill
/uogpmegagay.m68
/uogpmegagay.m68k
/uogpmegagay.mips
/uogpmegagay.mips64
/uogpmegagay.mpsl
/uogpmegagay.mipsel
/uogpmegagay.pcc
/uogpmegagay.ppc
/uogpmegagay.ppc2
/uogpmegagay.ppc440
/uogpmegagay.ppc440fp
/uogpmegagay.powerpc
/uogpmegagay.powerppc
/uogpmegagay.powerpc-440fp
/uogpmegagay.root
/uogpmegagay.root32
/uogpmegagay.sh
/uogpmegagay.sh4
/uogpmegagay.ssh4
/uogpmegagay.spc
/uogpmegagay.sparc
/uogpmegagay.x32
/uogpmegagay.x64
/uogpmegagay.x86
/uogpmegagay.x86_32
/uogpmegagay.x86_64

# Reference: https://twitter.com/0xrb/status/1129795121547948032

/arc.Nakuma
/arm.Nakuma
/arm4.Nakuma
/arm4l.Nakuma
/arm4t.Nakuma
/arm4tl.Nakuma
/arm4tll.Nakuma
/armv4.Nakuma
/armv4l.Nakuma
/arm5.Nakuma
/arm5l.Nakuma
/arm5n.Nakuma
/armv5l.Nakuma
/arm6.Nakuma
/arm6l.Nakuma
/armv6.Nakuma
/armv6l.Nakuma
/armv61.Nakuma
/arm64.Nakuma
/arm7.Nakuma
/arm7l.Nakuma
/armv7l.Nakuma
/arm8.Nakuma
/dbg.Nakuma
/exploit.Nakuma
/i4.Nakuma
/i6.Nakuma
/i486.Nakuma
/i586.Nakuma
/i686.Nakuma
/kill.Nakuma
/m68.Nakuma
/m68k.Nakuma
/mips.Nakuma
/mips64.Nakuma
/mpsl.Nakuma
/mipsel.Nakuma
/pcc.Nakuma
/ppc.Nakuma
/ppc2.Nakuma
/ppc440.Nakuma
/ppc440fp.Nakuma
/powerpc.Nakuma
/powerppc.Nakuma
/powerpc-440fp.Nakuma
/root.Nakuma
/root32.Nakuma
/sh.Nakuma
/sh4.Nakuma
/ssh4.Nakuma
/spc.Nakuma
/sparc.Nakuma
/x32.Nakuma
/x64.Nakuma
/x86.Nakuma
/x86_32.Nakuma
/x86_64.Nakuma
/Nakuma.arc
/Nakuma.arm
/Nakuma.arm4
/Nakuma.arm4l
/Nakuma.arm4t
/Nakuma.arm4tl
/Nakuma.arm4tll
/Nakuma.armv4
/Nakuma.armv4l
/Nakuma.arm5
/Nakuma.arm5l
/Nakuma.arm5n
/Nakuma.armv5l
/Nakuma.arm6
/Nakuma.arm6l
/Nakuma.arm64
/Nakuma.armv6
/Nakuma.armv6l
/Nakuma.armv61
/Nakuma.arm7
/Nakuma.arm7l
/Nakuma.armv7l
/Nakuma.arm8
/Nakuma.dbg
/Nakuma.exploit
/Nakuma.i4
/Nakuma.i6
/Nakuma.i486
/Nakuma.i586
/Nakuma.i686
/Nakuma.kill
/Nakuma.m68
/Nakuma.m68k
/Nakuma.mips
/Nakuma.mips64
/Nakuma.mpsl
/Nakuma.mipsel
/Nakuma.pcc
/Nakuma.ppc
/Nakuma.ppc2
/Nakuma.ppc440
/Nakuma.ppc440fp
/Nakuma.powerpc
/Nakuma.powerppc
/Nakuma.powerpc-440fp
/Nakuma.root
/Nakuma.root32
/Nakuma.sh
/Nakuma.sh4
/Nakuma.ssh4
/Nakuma.spc
/Nakuma.sparc
/Nakuma.x32
/Nakuma.x64
/Nakuma.x86
/Nakuma.x86_32
/Nakuma.x86_64

# Reference: https://twitter.com/bad_packets/status/1132413877168173056

/ajoomk
/atxhua
/cemtop
/earyzq
/fwdfvf
/lnkfmx
/nvitpj
/qtmzbn
/qvmxvl
/razdzn
/vtyhat
/vvglma

# Reference: https://twitter.com/bad_packets/status/1133608293690093569

/arc.orbitclient
/arm.orbitclient
/arm4.orbitclient
/arm4l.orbitclient
/arm4t.orbitclient
/arm4tl.orbitclient
/arm4tll.orbitclient
/armv4.orbitclient
/armv4l.orbitclient
/arm5.orbitclient
/arm5l.orbitclient
/arm5n.orbitclient
/armv5l.orbitclient
/arm6.orbitclient
/arm6l.orbitclient
/armv6.orbitclient
/armv6l.orbitclient
/armv61.orbitclient
/arm64.orbitclient
/arm7.orbitclient
/arm7l.orbitclient
/armv7l.orbitclient
/arm8.orbitclient
/dbg.orbitclient
/exploit.orbitclient
/i4.orbitclient
/i6.orbitclient
/i486.orbitclient
/i586.orbitclient
/i686.orbitclient
/kill.orbitclient
/m68.orbitclient
/m68k.orbitclient
/mips.orbitclient
/mips64.orbitclient
/mpsl.orbitclient
/mipsel.orbitclient
/pcc.orbitclient
/ppc.orbitclient
/ppc2.orbitclient
/ppc440.orbitclient
/ppc440fp.orbitclient
/powerpc.orbitclient
/powerppc.orbitclient
/powerpc-440fp.orbitclient
/root.orbitclient
/root32.orbitclient
/sh.orbitclient
/sh4.orbitclient
/ssh4.orbitclient
/spc.orbitclient
/sparc.orbitclient
/x32.orbitclient
/x64.orbitclient
/x86.orbitclient
/x86_32.orbitclient
/x86_64.orbitclient
/orbitclient.arc
/orbitclient.arm
/orbitclient.arm4
/orbitclient.arm4l
/orbitclient.arm4t
/orbitclient.arm4tl
/orbitclient.arm4tll
/orbitclient.armv4
/orbitclient.armv4l
/orbitclient.arm5
/orbitclient.arm5l
/orbitclient.arm5n
/orbitclient.armv5l
/orbitclient.arm6
/orbitclient.arm6l
/orbitclient.arm64
/orbitclient.armv6
/orbitclient.armv6l
/orbitclient.armv61
/orbitclient.arm7
/orbitclient.arm7l
/orbitclient.armv7l
/orbitclient.arm8
/orbitclient.dbg
/orbitclient.exploit
/orbitclient.i4
/orbitclient.i6
/orbitclient.i486
/orbitclient.i586
/orbitclient.i686
/orbitclient.kill
/orbitclient.m68
/orbitclient.m68k
/orbitclient.mips
/orbitclient.mips64
/orbitclient.mpsl
/orbitclient.mipsel
/orbitclient.pcc
/orbitclient.ppc
/orbitclient.ppc2
/orbitclient.ppc440
/orbitclient.ppc440fp
/orbitclient.powerpc
/orbitclient.powerppc
/orbitclient.powerpc-440fp
/orbitclient.root
/orbitclient.root32
/orbitclient.sh
/orbitclient.sh4
/orbitclient.ssh4
/orbitclient.spc
/orbitclient.sparc
/orbitclient.x32
/orbitclient.x64
/orbitclient.x86
/orbitclient.x86_32
/orbitclient.x86_64

# Reference: https://twitter.com/bad_packets/status/1140170480181059584

/arc.orbitclien
/arm.orbitclien
/arm4.orbitclien
/arm4l.orbitclien
/arm4t.orbitclien
/arm4tl.orbitclien
/arm4tll.orbitclien
/armv4.orbitclien
/armv4l.orbitclien
/arm5.orbitclien
/arm5l.orbitclien
/arm5n.orbitclien
/armv5l.orbitclien
/arm6.orbitclien
/arm6l.orbitclien
/armv6.orbitclien
/armv6l.orbitclien
/armv61.orbitclien
/arm64.orbitclien
/arm7.orbitclien
/arm7l.orbitclien
/armv7l.orbitclien
/arm8.orbitclien
/dbg.orbitclien
/exploit.orbitclien
/i4.orbitclien
/i6.orbitclien
/i486.orbitclien
/i586.orbitclien
/i686.orbitclien
/kill.orbitclien
/m68.orbitclien
/m68k.orbitclien
/mips.orbitclien
/mips64.orbitclien
/mpsl.orbitclien
/mipsel.orbitclien
/pcc.orbitclien
/ppc.orbitclien
/ppc2.orbitclien
/ppc440.orbitclien
/ppc440fp.orbitclien
/powerpc.orbitclien
/powerppc.orbitclien
/powerpc-440fp.orbitclien
/root.orbitclien
/root32.orbitclien
/sh.orbitclien
/sh4.orbitclien
/ssh4.orbitclien
/spc.orbitclien
/sparc.orbitclien
/x32.orbitclien
/x64.orbitclien
/x86.orbitclien
/x86_32.orbitclien
/x86_64.orbitclien
/orbitclien.arc
/orbitclien.arm
/orbitclien.arm4
/orbitclien.arm4l
/orbitclien.arm4t
/orbitclien.arm4tl
/orbitclien.arm4tll
/orbitclien.armv4
/orbitclien.armv4l
/orbitclien.arm5
/orbitclien.arm5l
/orbitclien.arm5n
/orbitclien.armv5l
/orbitclien.arm6
/orbitclien.arm6l
/orbitclien.arm64
/orbitclien.armv6
/orbitclien.armv6l
/orbitclien.armv61
/orbitclien.arm7
/orbitclien.arm7l
/orbitclien.armv7l
/orbitclien.arm8
/orbitclien.dbg
/orbitclien.exploit
/orbitclien.i4
/orbitclien.i6
/orbitclien.i486
/orbitclien.i586
/orbitclien.i686
/orbitclien.kill
/orbitclien.m68
/orbitclien.m68k
/orbitclien.mips
/orbitclien.mips64
/orbitclien.mpsl
/orbitclien.mipsel
/orbitclien.pcc
/orbitclien.ppc
/orbitclien.ppc2
/orbitclien.ppc440
/orbitclien.ppc440fp
/orbitclien.powerpc
/orbitclien.powerppc
/orbitclien.powerpc-440fp
/orbitclien.root
/orbitclien.root32
/orbitclien.sh
/orbitclien.sh4
/orbitclien.ssh4
/orbitclien.spc
/orbitclien.sparc
/orbitclien.x32
/orbitclien.x64
/orbitclien.x86
/orbitclien.x86_32
/orbitclien.x86_64

# Reference: https://twitter.com/0xrb/status/1141215443861921792

/arm7vte
198.98.51.104:743
45.67.14.153:4975

# Reference: https://twitter.com/0xrb/status/1145016387212939265

/gang1.sh
/arc.0nezz
/arm.0nezz
/arm4.0nezz
/arm4l.0nezz
/arm4t.0nezz
/arm4tl.0nezz
/arm4tll.0nezz
/armv4.0nezz
/armv4l.0nezz
/arm5.0nezz
/arm5l.0nezz
/arm5n.0nezz
/armv5l.0nezz
/arm6.0nezz
/arm6l.0nezz
/armv6.0nezz
/armv6l.0nezz
/armv61.0nezz
/arm64.0nezz
/arm7.0nezz
/arm7l.0nezz
/armv7l.0nezz
/arm8.0nezz
/dbg.0nezz
/exploit.0nezz
/i4.0nezz
/i6.0nezz
/i486.0nezz
/i586.0nezz
/i686.0nezz
/kill.0nezz
/m68.0nezz
/m68k.0nezz
/mips.0nezz
/mips64.0nezz
/mpsl.0nezz
/mipsel.0nezz
/pcc.0nezz
/ppc.0nezz
/ppc2.0nezz
/ppc440.0nezz
/ppc440fp.0nezz
/powerpc.0nezz
/powerppc.0nezz
/powerpc-440fp.0nezz
/root.0nezz
/root32.0nezz
/sh.0nezz
/sh4.0nezz
/ssh4.0nezz
/spc.0nezz
/sparc.0nezz
/x32.0nezz
/x64.0nezz
/x86.0nezz
/x86_32.0nezz
/x86_64.0nezz
/0nezz.arc
/0nezz.arm
/0nezz.arm4
/0nezz.arm4l
/0nezz.arm4t
/0nezz.arm4tl
/0nezz.arm4tll
/0nezz.armv4
/0nezz.armv4l
/0nezz.arm5
/0nezz.arm5l
/0nezz.arm5n
/0nezz.armv5l
/0nezz.arm6
/0nezz.arm6l
/0nezz.arm64
/0nezz.armv6
/0nezz.armv6l
/0nezz.armv61
/0nezz.arm7
/0nezz.arm7l
/0nezz.armv7l
/0nezz.arm8
/0nezz.dbg
/0nezz.exploit
/0nezz.i4
/0nezz.i6
/0nezz.i486
/0nezz.i586
/0nezz.i686
/0nezz.kill
/0nezz.m68
/0nezz.m68k
/0nezz.mips
/0nezz.mips64
/0nezz.mpsl
/0nezz.mipsel
/0nezz.pcc
/0nezz.ppc
/0nezz.ppc2
/0nezz.ppc440
/0nezz.ppc440fp
/0nezz.powerpc
/0nezz.powerppc
/0nezz.powerpc-440fp
/0nezz.root
/0nezz.root32
/0nezz.sh
/0nezz.sh4
/0nezz.ssh4
/0nezz.spc
/0nezz.sparc
/0nezz.x32
/0nezz.x64
/0nezz.x86
/0nezz.x86_32
/0nezz.x86_64

# Reference: https://twitter.com/bad_packets/status/1147629200183980032

198.98.59.176:52869

# Reference: https://twitter.com/bad_packets/status/1147631377329692672

198.98.59.176:90

# Reference: https://twitter.com/0xrb/status/1147447320595685376

/arc-stole
/arm-stole
/arm4-stole
/arm4l-stole
/arm4t-stole
/arm4tl-stole
/arm4tll-stole
/armv4-stole
/armv4l-stole
/arm5-stole
/arm5l-stole
/arm5n-stole
/armv5l-stole
/arm6-stole
/arm6l-stole
/arm64-stole
/armv6-stole
/armv6l-stole
/armv61-stole
/arm7-stole
/arm7l-stole
/armv7l-stole
/arm8-stole
/dbg-stole
/exploit-stole
/i4-stole
/i6-stole
/i486-stole
/i586-stole
/i686-stole
/kill-stole
/m68-stole
/m68k-stole
/mips-stole
/mips64-stole
/mpsl-stole
/mipsel-stole
/pcc-stole
/ppc-stole
/ppc2-stole
/ppc440-stole
/ppc440fp-stole
/powerpc-440fp-stole
/powerpc-stole
/powerppc-stole
/root-stole
/root32-stole
/sh-stole
/sh4-stole
/ssh4-stole
/spc-stole
/sparc-stole
/x32-stole
/x64-stole
/x86-stole
/x86_32-stole
/x86_64-stole
/stole-arc
/stole-arm
/stole-arm4
/stole-arm4l
/stole-arm4t
/stole-arm4tl
/stole-arm4tll
/stole-armv4
/stole-armv4l
/stole-arm5
/stole-arm5n
/stole-armv5l
/stole-arm6
/stole-arm64
/stole-armv6
/stole-armv6l
/stole-armv61
/stole-arm7
/stole-armv7l
/stole-arm8
/stole-dbg
/stole-exploit
/stole-i4
/stole-i6
/stole-i486
/stole-i586
/stole-i686
/stole-kill
/stole-m68
/stole-m68k
/stole-mips
/stole-mips64
/stole-mpsl
/stole-mipsel
/stole-pcc
/stole-ppc
/stole-ppc2
/stole-ppc440
/stole-ppc440fp
/stole-powerpc-440fp
/stole-powerpc
/stole-powerppc
/stole-root
/stole-root32
/stole-sh
/stole-sh4
/stole-ssh4
/stole-spc
/stole-sparc
/stole-x32
/stole-x64
/stole-x86
/stole-x86_32
/stole-x86_64
/stole-blank
/stole-apache
/stole-tele

# Reference: https://twitter.com/bad_packets/status/1148671996231708672

/60001arm6
/9200arm6
/9200mips

# Reference: https://twitter.com/bad_packets/status/1150315980758761473
# Reference: https://twitter.com/MasafumiNegishi/status/1160646787901751296

91.209.70.174:40
91.209.70.22:20
91.209.70.22:40

# Reference: https://twitter.com/0xrb/status/1151064530908139521

/arc.eagle
/arm.eagle
/arm4.eagle
/arm4l.eagle
/arm4t.eagle
/arm4tl.eagle
/arm4tll.eagle
/armv4.eagle
/armv4l.eagle
/arm5.eagle
/arm5l.eagle
/arm5n.eagle
/armv5l.eagle
/arm6.eagle
/arm6l.eagle
/armv6.eagle
/armv6l.eagle
/armv61.eagle
/arm64.eagle
/arm7.eagle
/arm7l.eagle
/armv7l.eagle
/arm8.eagle
/dbg.eagle
/exploit.eagle
/i4.eagle
/i6.eagle
/i486.eagle
/i586.eagle
/i686.eagle
/kill.eagle
/m68.eagle
/m68k.eagle
/mips.eagle
/mips64.eagle
/mpsl.eagle
/mipsel.eagle
/pcc.eagle
/ppc.eagle
/ppc2.eagle
/ppc440.eagle
/ppc440fp.eagle
/powerpc.eagle
/powerppc.eagle
/powerpc-440fp.eagle
/root.eagle
/root32.eagle
/sh.eagle
/sh4.eagle
/ssh4.eagle
/spc.eagle
/sparc.eagle
/x32.eagle
/x64.eagle
/x86.eagle
/x86_32.eagle
/x86_64.eagle
/eagle.arc
/eagle.arm
/eagle.arm4
/eagle.arm4l
/eagle.arm4t
/eagle.arm4tl
/eagle.arm4tll
/eagle.armv4
/eagle.armv4l
/eagle.arm5
/eagle.arm5l
/eagle.arm5n
/eagle.armv5l
/eagle.arm6
/eagle.arm6l
/eagle.arm64
/eagle.armv6
/eagle.armv6l
/eagle.armv61
/eagle.arm7
/eagle.arm7l
/eagle.armv7l
/eagle.arm8
/eagle.dbg
/eagle.exploit
/eagle.i4
/eagle.i6
/eagle.i486
/eagle.i586
/eagle.i686
/eagle.kill
/eagle.m68
/eagle.m68k
/eagle.mips
/eagle.mips64
/eagle.mpsl
/eagle.mipsel
/eagle.pcc
/eagle.ppc
/eagle.ppc2
/eagle.ppc440
/eagle.ppc440fp
/eagle.powerpc
/eagle.powerppc
/eagle.powerpc-440fp
/eagle.root
/eagle.root32
/eagle.sh
/eagle.sh4
/eagle.ssh4
/eagle.spc
/eagle.sparc
/eagle.x32
/eagle.x64
/eagle.x86
/eagle.x86_32
/eagle.x86_64

# Reference: https://twitter.com/bad_packets/status/1151219038887895041

209.141.55.8:6666
/arc.puss
/arm.puss
/arm4.puss
/arm4l.puss
/arm4t.puss
/arm4tl.puss
/arm4tll.puss
/armv4.puss
/armv4l.puss
/arm5.puss
/arm5l.puss
/arm5n.puss
/armv5l.puss
/arm6.puss
/arm6l.puss
/armv6.puss
/armv6l.puss
/armv61.puss
/arm64.puss
/arm7.puss
/arm7l.puss
/armv7l.puss
/arm8.puss
/dbg.puss
/exploit.puss
/i4.puss
/i6.puss
/i486.puss
/i586.puss
/i686.puss
/kill.puss
/m68.puss
/m68k.puss
/mips.puss
/mips64.puss
/mpsl.puss
/mipsel.puss
/pcc.puss
/ppc.puss
/ppc2.puss
/ppc440.puss
/ppc440fp.puss
/powerpc.puss
/powerppc.puss
/powerpc-440fp.puss
/root.puss
/root32.puss
/sh.puss
/sh4.puss
/ssh4.puss
/spc.puss
/sparc.puss
/x32.puss
/x64.puss
/x86.puss
/x86_32.puss
/x86_64.puss
/puss.arc
/puss.arm
/puss.arm4
/puss.arm4l
/puss.arm4t
/puss.arm4tl
/puss.arm4tll
/puss.armv4
/puss.armv4l
/puss.arm5
/puss.arm5l
/puss.arm5n
/puss.armv5l
/puss.arm6
/puss.arm6l
/puss.arm64
/puss.armv6
/puss.armv6l
/puss.armv61
/puss.arm7
/puss.arm7l
/puss.armv7l
/puss.arm8
/puss.dbg
/puss.exploit
/puss.i4
/puss.i6
/puss.i486
/puss.i586
/puss.i686
/puss.kill
/puss.m68
/puss.m68k
/puss.mips
/puss.mips64
/puss.mpsl
/puss.mipsel
/puss.pcc
/puss.ppc
/puss.ppc2
/puss.ppc440
/puss.ppc440fp
/puss.powerpc
/puss.powerppc
/puss.powerpc-440fp
/puss.root
/puss.root32
/puss.sh
/puss.sh4
/puss.ssh4
/puss.spc
/puss.sparc
/puss.x32
/puss.x64
/puss.x86
/puss.x86_32
/puss.x86_64

# Reference: https://twitter.com/bad_packets/status/1153394792937611265

80.211.90.245:6666
/arc.k1337
/arm.k1337
/arm4.k1337
/arm4l.k1337
/arm4t.k1337
/arm4tl.k1337
/arm4tll.k1337
/armv4.k1337
/armv4l.k1337
/arm5.k1337
/arm5l.k1337
/arm5n.k1337
/armv5l.k1337
/arm6.k1337
/arm6l.k1337
/armv6.k1337
/armv6l.k1337
/armv61.k1337
/arm64.k1337
/arm7.k1337
/arm7l.k1337
/armv7l.k1337
/arm8.k1337
/dbg.k1337
/exploit.k1337
/i4.k1337
/i6.k1337
/i486.k1337
/i586.k1337
/i686.k1337
/kill.k1337
/m68.k1337
/m68k.k1337
/mips.k1337
/mips64.k1337
/mpsl.k1337
/mipsel.k1337
/pcc.k1337
/ppc.k1337
/ppc2.k1337
/ppc440.k1337
/ppc440fp.k1337
/powerpc.k1337
/powerppc.k1337
/powerpc-440fp.k1337
/root.k1337
/root32.k1337
/sh.k1337
/sh4.k1337
/ssh4.k1337
/spc.k1337
/sparc.k1337
/x32.k1337
/x64.k1337
/x86.k1337
/x86_32.k1337
/x86_64.k1337
/k1337.arc
/k1337.arm
/k1337.arm4
/k1337.arm4l
/k1337.arm4t
/k1337.arm4tl
/k1337.arm4tll
/k1337.armv4
/k1337.armv4l
/k1337.arm5
/k1337.arm5l
/k1337.arm5n
/k1337.armv5l
/k1337.arm6
/k1337.arm6l
/k1337.arm64
/k1337.armv6
/k1337.armv6l
/k1337.armv61
/k1337.arm7
/k1337.arm7l
/k1337.armv7l
/k1337.arm8
/k1337.dbg
/k1337.exploit
/k1337.i4
/k1337.i6
/k1337.i486
/k1337.i586
/k1337.i686
/k1337.kill
/k1337.m68
/k1337.m68k
/k1337.mips
/k1337.mips64
/k1337.mpsl
/k1337.mipsel
/k1337.pcc
/k1337.ppc
/k1337.ppc2
/k1337.ppc440
/k1337.ppc440fp
/k1337.powerpc
/k1337.powerppc
/k1337.powerpc-440fp
/k1337.root
/k1337.root32
/k1337.sh
/k1337.sh4
/k1337.ssh4
/k1337.spc
/k1337.sparc
/k1337.x32
/k1337.x64
/k1337.x86
/k1337.x86_32
/k1337.x86_64

# Reference: https://twitter.com/bad_packets/status/1158954145484701697

185.244.25.75:7318
185.244.25.75:43594

# Reference: https://twitter.com/bad_packets/status/1158958612028375040

185.244.25.77:1
185.244.25.77:88
/m-i.p-s.SNOOPY

# Reference: https://twitter.com/bad_packets/status/1159254154776215553

164.132.213.119:1098
164.132.213.119:54268
/arc.psysec
/arm.psysec
/arm4.psysec
/arm4l.psysec
/arm4t.psysec
/arm4tl.psysec
/arm4tll.psysec
/armv4.psysec
/armv4l.psysec
/arm5.psysec
/arm5l.psysec
/arm5n.psysec
/armv5l.psysec
/arm6.psysec
/arm6l.psysec
/armv6.psysec
/armv6l.psysec
/armv61.psysec
/arm64.psysec
/arm7.psysec
/arm7l.psysec
/armv7l.psysec
/arm8.psysec
/dbg.psysec
/exploit.psysec
/i4.psysec
/i6.psysec
/i486.psysec
/i586.psysec
/i686.psysec
/kill.psysec
/m68.psysec
/m68k.psysec
/mips.psysec
/mips64.psysec
/mpsl.psysec
/mipsel.psysec
/pcc.psysec
/ppc.psysec
/ppc2.psysec
/ppc440.psysec
/ppc440fp.psysec
/powerpc.psysec
/powerppc.psysec
/powerpc-440fp.psysec
/root.psysec
/root32.psysec
/sh.psysec
/sh4.psysec
/ssh4.psysec
/spc.psysec
/sparc.psysec
/x32.psysec
/x64.psysec
/x86.psysec
/x86_32.psysec
/x86_64.psysec
/psysec.arc
/psysec.arm
/psysec.arm4
/psysec.arm4l
/psysec.arm4t
/psysec.arm4tl
/psysec.arm4tll
/psysec.armv4
/psysec.armv4l
/psysec.arm5
/psysec.arm5l
/psysec.arm5n
/psysec.armv5l
/psysec.arm6
/psysec.arm6l
/psysec.arm64
/psysec.armv6
/psysec.armv6l
/psysec.armv61
/psysec.arm7
/psysec.arm7l
/psysec.armv7l
/psysec.arm8
/psysec.dbg
/psysec.exploit
/psysec.i4
/psysec.i6
/psysec.i486
/psysec.i586
/psysec.i686
/psysec.kill
/psysec.m68
/psysec.m68k
/psysec.mips
/psysec.mips64
/psysec.mpsl
/psysec.mipsel
/psysec.pcc
/psysec.ppc
/psysec.ppc2
/psysec.ppc440
/psysec.ppc440fp
/psysec.powerpc
/psysec.powerppc
/psysec.powerpc-440fp
/psysec.root
/psysec.root32
/psysec.sh
/psysec.sh4
/psysec.ssh4
/psysec.spc
/psysec.sparc
/psysec.x32
/psysec.x64
/psysec.x86
/psysec.x86_32
/psysec.x86_64

# Reference: https://twitter.com/0xrb/status/1149869739516157952

96.8.112.14:666

# Reference: https://twitter.com/0xrb/status/1162609630775693313

217.182.13.235:2

# Reference: https://twitter.com/0xrb/status/1163829188635140097

13.67.95.191:65535

# Reference: https://twitter.com/0xrb/status/1164819752931381255

188.209.52.19:7
/bJeztySR6V.sh

# Reference: https://twitter.com/bad_packets/status/1167895769505910785

185.244.25.122:6667
185.244.25.122:32957
/arc.Ahrix0
/arm.Ahrix0
/arm4.Ahrix0
/arm4l.Ahrix0
/arm4t.Ahrix0
/arm4tl.Ahrix0
/arm4tll.Ahrix0
/armv4.Ahrix0
/armv4l.Ahrix0
/arm5.Ahrix0
/arm5l.Ahrix0
/arm5n.Ahrix0
/armv5l.Ahrix0
/arm6.Ahrix0
/arm6l.Ahrix0
/armv6.Ahrix0
/armv6l.Ahrix0
/armv61.Ahrix0
/arm64.Ahrix0
/arm7.Ahrix0
/arm7l.Ahrix0
/armv7l.Ahrix0
/arm8.Ahrix0
/dbg.Ahrix0
/exploit.Ahrix0
/i4.Ahrix0
/i6.Ahrix0
/i486.Ahrix0
/i586.Ahrix0
/i686.Ahrix0
/kill.Ahrix0
/m68.Ahrix0
/m68k.Ahrix0
/mips.Ahrix0
/mips64.Ahrix0
/mpsl.Ahrix0
/mipsel.Ahrix0
/pcc.Ahrix0
/ppc.Ahrix0
/ppc2.Ahrix0
/ppc440.Ahrix0
/ppc440fp.Ahrix0
/powerpc.Ahrix0
/powerppc.Ahrix0
/powerpc-440fp.Ahrix0
/root.Ahrix0
/root32.Ahrix0
/sh.Ahrix0
/sh4.Ahrix0
/ssh4.Ahrix0
/spc.Ahrix0
/sparc.Ahrix0
/x32.Ahrix0
/x64.Ahrix0
/x86.Ahrix0
/x86_32.Ahrix0
/x86_64.Ahrix0
/Ahrix0.arc
/Ahrix0.arm
/Ahrix0.arm4
/Ahrix0.arm4l
/Ahrix0.arm4t
/Ahrix0.arm4tl
/Ahrix0.arm4tll
/Ahrix0.armv4
/Ahrix0.armv4l
/Ahrix0.arm5
/Ahrix0.arm5l
/Ahrix0.arm5n
/Ahrix0.armv5l
/Ahrix0.arm6
/Ahrix0.arm6l
/Ahrix0.arm64
/Ahrix0.armv6
/Ahrix0.armv6l
/Ahrix0.armv61
/Ahrix0.arm7
/Ahrix0.arm7l
/Ahrix0.armv7l
/Ahrix0.arm8
/Ahrix0.dbg
/Ahrix0.exploit
/Ahrix0.i4
/Ahrix0.i6
/Ahrix0.i486
/Ahrix0.i586
/Ahrix0.i686
/Ahrix0.kill
/Ahrix0.m68
/Ahrix0.m68k
/Ahrix0.mips
/Ahrix0.mips64
/Ahrix0.mpsl
/Ahrix0.mipsel
/Ahrix0.pcc
/Ahrix0.ppc
/Ahrix0.ppc2
/Ahrix0.ppc440
/Ahrix0.ppc440fp
/Ahrix0.powerpc
/Ahrix0.powerppc
/Ahrix0.powerpc-440fp
/Ahrix0.root
/Ahrix0.root32
/Ahrix0.sh
/Ahrix0.sh4
/Ahrix0.ssh4
/Ahrix0.spc
/Ahrix0.sparc
/Ahrix0.x32
/Ahrix0.x64
/Ahrix0.x86
/Ahrix0.x86_32
/Ahrix0.x86_64

# Reference: https://twitter.com/bad_packets/status/1169715618947325952

137.74.237.193:151
137.74.237.193:666
/arc.TacoBellGodYo
/arm.TacoBellGodYo
/arm4.TacoBellGodYo
/arm4l.TacoBellGodYo
/arm4t.TacoBellGodYo
/arm4tl.TacoBellGodYo
/arm4tll.TacoBellGodYo
/armv4.TacoBellGodYo
/armv4l.TacoBellGodYo
/arm5.TacoBellGodYo
/arm5l.TacoBellGodYo
/arm5n.TacoBellGodYo
/armv5l.TacoBellGodYo
/arm6.TacoBellGodYo
/arm6l.TacoBellGodYo
/armv6.TacoBellGodYo
/armv6l.TacoBellGodYo
/armv61.TacoBellGodYo
/arm64.TacoBellGodYo
/arm7.TacoBellGodYo
/arm7l.TacoBellGodYo
/armv7l.TacoBellGodYo
/arm8.TacoBellGodYo
/dbg.TacoBellGodYo
/exploit.TacoBellGodYo
/i4.TacoBellGodYo
/i6.TacoBellGodYo
/i486.TacoBellGodYo
/i586.TacoBellGodYo
/i686.TacoBellGodYo
/kill.TacoBellGodYo
/m68.TacoBellGodYo
/m68k.TacoBellGodYo
/mips.TacoBellGodYo
/mips64.TacoBellGodYo
/mpsl.TacoBellGodYo
/mipsel.TacoBellGodYo
/pcc.TacoBellGodYo
/ppc.TacoBellGodYo
/ppc2.TacoBellGodYo
/ppc440.TacoBellGodYo
/ppc440fp.TacoBellGodYo
/powerpc.TacoBellGodYo
/powerppc.TacoBellGodYo
/powerpc-440fp.TacoBellGodYo
/root.TacoBellGodYo
/root32.TacoBellGodYo
/sh.TacoBellGodYo
/sh4.TacoBellGodYo
/ssh4.TacoBellGodYo
/spc.TacoBellGodYo
/sparc.TacoBellGodYo
/x32.TacoBellGodYo
/x64.TacoBellGodYo
/x86.TacoBellGodYo
/x86_32.TacoBellGodYo
/x86_64.TacoBellGodYo
/TacoBellGodYo.arc
/TacoBellGodYo.arm
/TacoBellGodYo.arm4
/TacoBellGodYo.arm4l
/TacoBellGodYo.arm4t
/TacoBellGodYo.arm4tl
/TacoBellGodYo.arm4tll
/TacoBellGodYo.armv4
/TacoBellGodYo.armv4l
/TacoBellGodYo.arm5
/TacoBellGodYo.arm5l
/TacoBellGodYo.arm5n
/TacoBellGodYo.armv5l
/TacoBellGodYo.arm6
/TacoBellGodYo.arm6l
/TacoBellGodYo.arm64
/TacoBellGodYo.armv6
/TacoBellGodYo.armv6l
/TacoBellGodYo.armv61
/TacoBellGodYo.arm7
/TacoBellGodYo.arm7l
/TacoBellGodYo.armv7l
/TacoBellGodYo.arm8
/TacoBellGodYo.dbg
/TacoBellGodYo.exploit
/TacoBellGodYo.i4
/TacoBellGodYo.i6
/TacoBellGodYo.i486
/TacoBellGodYo.i586
/TacoBellGodYo.i686
/TacoBellGodYo.kill
/TacoBellGodYo.m68
/TacoBellGodYo.m68k
/TacoBellGodYo.mips
/TacoBellGodYo.mips64
/TacoBellGodYo.mpsl
/TacoBellGodYo.mipsel
/TacoBellGodYo.pcc
/TacoBellGodYo.ppc
/TacoBellGodYo.ppc2
/TacoBellGodYo.ppc440
/TacoBellGodYo.ppc440fp
/TacoBellGodYo.powerpc
/TacoBellGodYo.powerppc
/TacoBellGodYo.powerpc-440fp
/TacoBellGodYo.root
/TacoBellGodYo.root32
/TacoBellGodYo.sh
/TacoBellGodYo.sh4
/TacoBellGodYo.ssh4
/TacoBellGodYo.spc
/TacoBellGodYo.sparc
/TacoBellGodYo.x32
/TacoBellGodYo.x64
/TacoBellGodYo.x86
/TacoBellGodYo.x86_32
/TacoBellGodYo.x86_64

# Reference: https://twitter.com/bad_packets/status/1170408760746971141

/arc.switchware
/arm.switchware
/arm4.switchware
/arm4l.switchware
/arm4t.switchware
/arm4tl.switchware
/arm4tll.switchware
/armv4.switchware
/armv4l.switchware
/arm5.switchware
/arm5l.switchware
/arm5n.switchware
/armv5l.switchware
/arm6.switchware
/arm6l.switchware
/armv6.switchware
/armv6l.switchware
/armv61.switchware
/arm64.switchware
/arm7.switchware
/arm7l.switchware
/armv7l.switchware
/arm8.switchware
/dbg.switchware
/exploit.switchware
/i4.switchware
/i6.switchware
/i486.switchware
/i586.switchware
/i686.switchware
/kill.switchware
/m68.switchware
/m68k.switchware
/mips.switchware
/mips64.switchware
/mpsl.switchware
/mipsel.switchware
/pcc.switchware
/ppc.switchware
/ppc2.switchware
/ppc440.switchware
/ppc440fp.switchware
/powerpc.switchware
/powerppc.switchware
/powerpc-440fp.switchware
/root.switchware
/root32.switchware
/sh.switchware
/sh4.switchware
/ssh4.switchware
/spc.switchware
/sparc.switchware
/x32.switchware
/x64.switchware
/x86.switchware
/x86_32.switchware
/x86_64.switchware
/switchware.arc
/switchware.arm
/switchware.arm4
/switchware.arm4l
/switchware.arm4t
/switchware.arm4tl
/switchware.arm4tll
/switchware.armv4
/switchware.armv4l
/switchware.arm5
/switchware.arm5l
/switchware.arm5n
/switchware.armv5l
/switchware.arm6
/switchware.arm6l
/switchware.arm64
/switchware.armv6
/switchware.armv6l
/switchware.armv61
/switchware.arm7
/switchware.arm7l
/switchware.armv7l
/switchware.arm8
/switchware.dbg
/switchware.exploit
/switchware.i4
/switchware.i6
/switchware.i486
/switchware.i586
/switchware.i686
/switchware.kill
/switchware.m68
/switchware.m68k
/switchware.mips
/switchware.mips64
/switchware.mpsl
/switchware.mipsel
/switchware.pcc
/switchware.ppc
/switchware.ppc2
/switchware.ppc440
/switchware.ppc440fp
/switchware.powerpc
/switchware.powerppc
/switchware.powerpc-440fp
/switchware.root
/switchware.root32
/switchware.sh
/switchware.sh4
/switchware.ssh4
/switchware.spc
/switchware.sparc
/switchware.x32
/switchware.x64
/switchware.x86
/switchware.x86_32
/switchware.x86_64

# Reference: https://twitter.com/bad_packets/status/1172768295918784512

185.244.25.66:2315
185.244.25.66:20143
/arc.zuapleq
/arm.zuapleq
/arm4.zuapleq
/arm4l.zuapleq
/arm4t.zuapleq
/arm4tl.zuapleq
/arm4tll.zuapleq
/armv4.zuapleq
/armv4l.zuapleq
/arm5.zuapleq
/arm5l.zuapleq
/arm5n.zuapleq
/armv5l.zuapleq
/arm6.zuapleq
/arm6l.zuapleq
/armv6.zuapleq
/armv6l.zuapleq
/armv61.zuapleq
/arm64.zuapleq
/arm7.zuapleq
/arm7l.zuapleq
/armv7l.zuapleq
/arm8.zuapleq
/dbg.zuapleq
/exploit.zuapleq
/i4.zuapleq
/i6.zuapleq
/i486.zuapleq
/i586.zuapleq
/i686.zuapleq
/kill.zuapleq
/m68.zuapleq
/m68k.zuapleq
/mips.zuapleq
/mips64.zuapleq
/mpsl.zuapleq
/mipsel.zuapleq
/pcc.zuapleq
/ppc.zuapleq
/ppc2.zuapleq
/ppc440.zuapleq
/ppc440fp.zuapleq
/powerpc.zuapleq
/powerppc.zuapleq
/powerpc-440fp.zuapleq
/root.zuapleq
/root32.zuapleq
/sh.zuapleq
/sh4.zuapleq
/ssh4.zuapleq
/spc.zuapleq
/sparc.zuapleq
/x32.zuapleq
/x64.zuapleq
/x86.zuapleq
/x86_32.zuapleq
/x86_64.zuapleq
/zuapleq.arc
/zuapleq.arm
/zuapleq.arm4
/zuapleq.arm4l
/zuapleq.arm4t
/zuapleq.arm4tl
/zuapleq.arm4tll
/zuapleq.armv4
/zuapleq.armv4l
/zuapleq.arm5
/zuapleq.arm5l
/zuapleq.arm5n
/zuapleq.armv5l
/zuapleq.arm6
/zuapleq.arm6l
/zuapleq.arm64
/zuapleq.armv6
/zuapleq.armv6l
/zuapleq.armv61
/zuapleq.arm7
/zuapleq.arm7l
/zuapleq.armv7l
/zuapleq.arm8
/zuapleq.dbg
/zuapleq.exploit
/zuapleq.i4
/zuapleq.i6
/zuapleq.i486
/zuapleq.i586
/zuapleq.i686
/zuapleq.kill
/zuapleq.m68
/zuapleq.m68k
/zuapleq.mips
/zuapleq.mips64
/zuapleq.mpsl
/zuapleq.mipsel
/zuapleq.pcc
/zuapleq.ppc
/zuapleq.ppc2
/zuapleq.ppc440
/zuapleq.ppc440fp
/zuapleq.powerpc
/zuapleq.powerppc
/zuapleq.powerpc-440fp
/zuapleq.root
/zuapleq.root32
/zuapleq.sh
/zuapleq.sh4
/zuapleq.ssh4
/zuapleq.spc
/zuapleq.sparc
/zuapleq.x32
/zuapleq.x64
/zuapleq.x86
/zuapleq.x86_32
/zuapleq.x86_64

# Reference: https://twitter.com/bad_packets/status/1173373787640713216

165.227.93.168:23
165.227.93.168:666
/apache2fyfa
/fyfa
/arcfyfa
/armfyfa
/arm4fyfa
/arm4lfyfa
/arm4tfyfa
/arm4tlfyfa
/arm4tllfyfa
/armv4fyfa
/armv4lfyfa
/arm5fyfa
/arm5lfyfa
/arm5nfyfa
/armv5lfyfa
/arm6fyfa
/arm6lfyfa
/arm64fyfa
/armv6fyfa
/armv6lfyfa
/armv61fyfa
/arm7fyfa
/arm7lfyfa
/armv7lfyfa
/arm8fyfa
/dbgfyfa
/exploitfyfa
/i4fyfa
/i6fyfa
/i486fyfa
/i586fyfa
/i686fyfa
/killfyfa
/m68fyfa
/m68kfyfa
/mipsfyfa
/mips64fyfa
/mpslfyfa
/mipselfyfa
/pccfyfa
/ppcfyfa
/ppc2fyfa
/ppc440fyfa
/ppc440fpfyfa
/powerpcfyfa
/powerppcfyfa
/rootfyfa
/root32fyfa
/shfyfa
/sh4fyfa
/ssh4fyfa
/spcfyfa
/sparcfyfa
/x32fyfa
/x64fyfa
/x86fyfa
/x86_32fyfa
/x86_64fyfa
/fyfaarc
/fyfaarm
/fyfaarm4
/fyfaarm4l
/fyfaarm4t
/fyfaarm4tl
/fyfaarm4tll
/fyfaarmv4
/fyfaarmv4l
/fyfaarm5
/fyfaarm5l
/fyfaarm5n
/fyfaarmv5l
/fyfaarm6
/fyfaarm6l
/fyfaarm64
/fyfaarmv6
/fyfaarmv6l
/fyfaarmv61
/fyfaarm7
/fyfaarm7l
/fyfaarmv7l
/fyfaarm8
/fyfadbg
/fyfaexploit
/fyfai4
/fyfai6
/fyfai486
/fyfai586
/fyfai686
/fyfakill
/fyfam68
/fyfam68k
/fyfamips
/fyfamips64
/fyfampsl
/fyfamipsel
/fyfapcc
/fyfappc
/fyfappc2
/fyfappc440
/fyfappc440fp
/fyfapowerpc
/fyfapowerppc
/fyfaroot
/fyfaroot32
/fyfash
/fyfash4
/fyfassh4
/fyfaspc
/fyfasparc
/fyfax32
/fyfax64
/fyfax86
/fyfax86_32
/fyfax86_64
/ifyfa
/mfyfa

# Reference: https://twitter.com/0xrb/status/1176205885745426432

/a-r.m-4.kamiko
/a-r.m-5.kamiko
/a-r.m-6.kamiko
/a-r.m-7.kamiko
/i-4.8-6.kamiko
/i-5.8-6.kamiko
/i-6.8-6.kamiko
/m-6.8-k.kamiko
/m-i.p-s.kamiko
/m-p.s-l.kamiko
/p-p.c-.kamiko
/s-h.4-.kamiko
/x-3.2-.kamiko
/x-6.4-.kamiko
/x-8.6-.kamiko

# Reference: https://twitter.com/mjbv/status/1181353522861924353

/arc.gang
/arm.gang
/arm4.gang
/arm4l.gang
/arm4t.gang
/arm4tl.gang
/arm4tll.gang
/armv4.gang
/armv4l.gang
/arm5.gang
/arm5l.gang
/arm5n.gang
/armv5l.gang
/arm6.gang
/arm6l.gang
/armv6.gang
/armv6l.gang
/armv61.gang
/arm64.gang
/arm7.gang
/arm7l.gang
/armv7l.gang
/arm8.gang
/dbg.gang
/exploit.gang
/i4.gang
/i6.gang
/i486.gang
/i586.gang
/i686.gang
/kill.gang
/m68.gang
/m68k.gang
/mips.gang
/mips64.gang
/mpsl.gang
/mipsel.gang
/pcc.gang
/ppc.gang
/ppc2.gang
/ppc440.gang
/ppc440fp.gang
/powerpc.gang
/powerppc.gang
/powerpc-440fp.gang
/root.gang
/root32.gang
/sh.gang
/sh4.gang
/ssh4.gang
/spc.gang
/sparc.gang
/x32.gang
/x64.gang
/x86.gang
/x86_32.gang
/x86_64.gang
/gang.arc
/gang.arm
/gang.arm4
/gang.arm4l
/gang.arm4t
/gang.arm4tl
/gang.arm4tll
/gang.armv4
/gang.armv4l
/gang.arm5
/gang.arm5l
/gang.arm5n
/gang.armv5l
/gang.arm6
/gang.arm6l
/gang.arm64
/gang.armv6
/gang.armv6l
/gang.armv61
/gang.arm7
/gang.arm7l
/gang.armv7l
/gang.arm8
/gang.dbg
/gang.exploit
/gang.i4
/gang.i6
/gang.i486
/gang.i586
/gang.i686
/gang.kill
/gang.m68
/gang.m68k
/gang.mips
/gang.mips64
/gang.mpsl
/gang.mipsel
/gang.pcc
/gang.ppc
/gang.ppc2
/gang.ppc440
/gang.ppc440fp
/gang.powerpc
/gang.powerppc
/gang.powerpc-440fp
/gang.root
/gang.root32
/gang.sh
/gang.sh4
/gang.ssh4
/gang.spc
/gang.sparc
/gang.x32
/gang.x64
/gang.x86
/gang.x86_32
/gang.x86_64

# Reference: https://blacklist.cyberthreatcoalition.org/vetted/url.txt

/Mozi.a
/Mozi.b
/Mozi.c
/Mozi.d
/Mozi.e
/Mozi.f
/Mozi.g
/Mozi.h
/Mozi.i
/Mozi.j
/Mozi.k
/Mozi.l
/Mozi.m
/Mozi.n
/Mozi.o
/Mozi.p
/Mozi.q
/Mozi.r
/Mozi.s
/Mozi.t
/Mozi.u
/Mozi.v
/Mozi.w
/Mozi.x
/Mozi.y
/Mozi.z

# Reference: https://twitter.com/0xrb/status/1186529681639534593

157.245.139.2:65534
/arc-cutie
/arm-cutie
/arm4-cutie
/arm4l-cutie
/arm4t-cutie
/arm4tl-cutie
/arm4tll-cutie
/armv4-cutie
/armv4l-cutie
/arm5-cutie
/arm5l-cutie
/arm5n-cutie
/armv5l-cutie
/arm6-cutie
/arm6l-cutie
/arm64-cutie
/armv6-cutie
/armv6l-cutie
/armv61-cutie
/arm7-cutie
/arm7l-cutie
/armv7l-cutie
/arm8-cutie
/dbg-cutie
/exploit-cutie
/i4-cutie
/i6-cutie
/i486-cutie
/i586-cutie
/i686-cutie
/kill-cutie
/m68-cutie
/m68k-cutie
/mips-cutie
/mips64-cutie
/mpsl-cutie
/mipsel-cutie
/pcc-cutie
/ppc-cutie
/ppc2-cutie
/ppc440-cutie
/ppc440fp-cutie
/powerpc-cutie
/powerppc-cutie
/root-cutie
/root32-cutie
/sh-cutie
/sh4-cutie
/ssh4-cutie
/spc-cutie
/sparc-cutie
/x32-cutie
/x64-cutie
/x86-cutie
/x86_32-cutie
/x86_64-cutie
/cutie-arc
/cutie-arm
/cutie-arm4
/cutie-arm4l
/cutie-arm4t
/cutie-arm4tl
/cutie-arm4tll
/cutie-armv4
/cutie-armv4l
/cutie-arm5
/cutie-arm5l
/cutie-arm5n
/cutie-armv5l
/cutie-arm6
/cutie-arm6l
/cutie-armv6
/cutie-armv6l
/cutie-armv61
/cutie-arm64
/cutie-arm7
/cutie-arm7l
/cutie-armv7l
/cutie-arm8
/cutie-dbg
/cutie-exploit
/cutie-i4
/cutie-i6
/cutie-i486
/cutie-i586
/cutie-i686
/cutie-kill
/cutie-m68k
/cutie-mips
/cutie-mips64
/cutie-mpsl
/cutie-mipsel
/cutie-pcc
/cutie-ppc
/cutie-ppc2
/cutie-ppc440
/cutie-ppc440fp
/cutie-powerpc
/cutie-powerppc
/cutie-root
/cutie-root32
/cutie-sh
/cutie-sh4
/cutie-ssh4
/cutie-spc
/cutie-sparc
/cutie-x32
/cutie-x64
/cutie-x86
/cutie-x86_32
/cutie-x86_64

# Reference: https://twitter.com/MasafumiNegishi/status/1188359937753112576
# Reference: https://www.virustotal.com/gui/file/6c12e4b220d92d69552383d46159d26aa16fe4e6ea102910a3bdcf5d53ea2402/detection

eb77vpf6cotebxcw.onion

# Reference: https://twitter.com/bad_packets/status/1189630680088473600

142.11.205.42:2848
142.11.205.42:46216

# Reference: https://twitter.com/bad_packets/status/1190018144695275525

185.172.110.243:4554
185.172.110.243:56084

# Reference: https://twitter.com/0xrb/status/1189931804188217344

104.168.211.162:1994

# Reference: https://twitter.com/bad_packets/status/1191616574605512704

168.235.90.130:1738
168.235.90.130:6060

# Reference: https://twitter.com/bad_packets/status/1195986837409419271

2.56.8.188:55312
2.56.8.188:9874

# Reference: https://twitter.com/bad_packets/status/1197428890525810688

51.79.66.236:444
51.79.66.236:87

# Reference: https://twitter.com/bad_packets/status/1198122805092438016

165.227.35.105:55312

# Reference: https://twitter.com/bad_packets/status/1204468541673459712

5.79.70.165:158
5.79.70.165:9999
/arc.snype
/arm.snype
/arm4.snype
/arm4l.snype
/arm4t.snype
/arm4tl.snype
/arm4tll.snype
/armv4.snype
/armv4l.snype
/arm5.snype
/arm5l.snype
/arm5n.snype
/armv5l.snype
/arm6.snype
/arm6l.snype
/armv6.snype
/armv6l.snype
/armv61.snype
/arm64.snype
/arm7.snype
/arm7l.snype
/armv7l.snype
/arm8.snype
/dbg.snype
/exploit.snype
/i4.snype
/i6.snype
/i486.snype
/i586.snype
/i686.snype
/kill.snype
/m68.snype
/m68k.snype
/mips.snype
/mips64.snype
/mpsl.snype
/mipsel.snype
/pcc.snype
/ppc.snype
/ppc2.snype
/ppc440.snype
/ppc440fp.snype
/powerpc.snype
/powerppc.snype
/powerpc-440fp.snype
/root.snype
/root32.snype
/sh.snype
/sh4.snype
/ssh4.snype
/spc.snype
/sparc.snype
/x32.snype
/x64.snype
/x86.snype
/x86_32.snype
/x86_64.snype
/snype.arc
/snype.arm
/snype.arm4
/snype.arm4l
/snype.arm4t
/snype.arm4tl
/snype.arm4tll
/snype.armv4
/snype.armv4l
/snype.arm5
/snype.arm5l
/snype.arm5n
/snype.armv5l
/snype.arm6
/snype.arm6l
/snype.arm64
/snype.armv6
/snype.armv6l
/snype.armv61
/snype.arm7
/snype.arm7l
/snype.armv7l
/snype.arm8
/snype.dbg
/snype.exploit
/snype.i4
/snype.i6
/snype.i486
/snype.i586
/snype.i686
/snype.kill
/snype.m68
/snype.m68k
/snype.mips
/snype.mips64
/snype.mpsl
/snype.mipsel
/snype.pcc
/snype.ppc
/snype.ppc2
/snype.ppc440
/snype.ppc440fp
/snype.powerpc
/snype.powerppc
/snype.powerpc-440fp
/snype.root
/snype.root32
/snype.sh
/snype.sh4
/snype.ssh4
/snype.spc
/snype.sparc
/snype.x32
/snype.x64
/snype.x86
/snype.x86_32
/snype.x86_64

# Reference: https://twitter.com/0xrb/status/1205381871967731712
# Reference: https://www.virustotal.com/gui/domain/dynddns.cf/relations

dynddns.cf
/arc.leeteds
/arm.leeteds
/arm4.leeteds
/arm4l.leeteds
/arm4t.leeteds
/arm4tl.leeteds
/arm4tll.leeteds
/armv4.leeteds
/armv4l.leeteds
/arm5.leeteds
/arm5l.leeteds
/arm5n.leeteds
/armv5l.leeteds
/arm6.leeteds
/arm6l.leeteds
/armv6.leeteds
/armv6l.leeteds
/armv61.leeteds
/arm64.leeteds
/arm7.leeteds
/arm7l.leeteds
/armv7l.leeteds
/arm8.leeteds
/dbg.leeteds
/exploit.leeteds
/i4.leeteds
/i6.leeteds
/i486.leeteds
/i586.leeteds
/i686.leeteds
/kill.leeteds
/m68.leeteds
/m68k.leeteds
/mips.leeteds
/mips64.leeteds
/mpsl.leeteds
/mipsel.leeteds
/pcc.leeteds
/ppc.leeteds
/ppc2.leeteds
/ppc440.leeteds
/ppc440fp.leeteds
/powerpc.leeteds
/powerppc.leeteds
/powerpc-440fp.leeteds
/root.leeteds
/root32.leeteds
/sh.leeteds
/sh4.leeteds
/ssh4.leeteds
/spc.leeteds
/sparc.leeteds
/x32.leeteds
/x64.leeteds
/x86.leeteds
/x86_32.leeteds
/x86_64.leeteds
/leeteds.arc
/leeteds.arm
/leeteds.arm4
/leeteds.arm4l
/leeteds.arm4t
/leeteds.arm4tl
/leeteds.arm4tll
/leeteds.armv4
/leeteds.armv4l
/leeteds.arm5
/leeteds.arm5l
/leeteds.arm5n
/leeteds.armv5l
/leeteds.arm6
/leeteds.arm6l
/leeteds.arm64
/leeteds.armv6
/leeteds.armv6l
/leeteds.armv61
/leeteds.arm7
/leeteds.arm7l
/leeteds.armv7l
/leeteds.arm8
/leeteds.dbg
/leeteds.exploit
/leeteds.i4
/leeteds.i6
/leeteds.i486
/leeteds.i586
/leeteds.i686
/leeteds.kill
/leeteds.m68
/leeteds.m68k
/leeteds.mips
/leeteds.mips64
/leeteds.mpsl
/leeteds.mipsel
/leeteds.pcc
/leeteds.ppc
/leeteds.ppc2
/leeteds.ppc440
/leeteds.ppc440fp
/leeteds.powerpc
/leeteds.powerppc
/leeteds.powerpc-440fp
/leeteds.root
/leeteds.root32
/leeteds.sh
/leeteds.sh4
/leeteds.ssh4
/leeteds.spc
/leeteds.sparc
/leeteds.x32
/leeteds.x64
/leeteds.x86
/leeteds.x86_32
/leeteds.x86_64
/arc.servicecheck
/arm.servicecheck
/arm4.servicecheck
/arm4l.servicecheck
/arm4t.servicecheck
/arm4tl.servicecheck
/arm4tll.servicecheck
/armv4.servicecheck
/armv4l.servicecheck
/arm5.servicecheck
/arm5l.servicecheck
/arm5n.servicecheck
/armv5l.servicecheck
/arm6.servicecheck
/arm6l.servicecheck
/armv6.servicecheck
/armv6l.servicecheck
/armv61.servicecheck
/arm64.servicecheck
/arm7.servicecheck
/arm7l.servicecheck
/armv7l.servicecheck
/arm8.servicecheck
/dbg.servicecheck
/exploit.servicecheck
/i4.servicecheck
/i6.servicecheck
/i486.servicecheck
/i586.servicecheck
/i686.servicecheck
/kill.servicecheck
/m68.servicecheck
/m68k.servicecheck
/mips.servicecheck
/mips64.servicecheck
/mpsl.servicecheck
/mipsel.servicecheck
/pcc.servicecheck
/ppc.servicecheck
/ppc2.servicecheck
/ppc440.servicecheck
/ppc440fp.servicecheck
/powerpc.servicecheck
/powerppc.servicecheck
/powerpc-440fp.servicecheck
/root.servicecheck
/root32.servicecheck
/sh.servicecheck
/sh4.servicecheck
/ssh4.servicecheck
/spc.servicecheck
/sparc.servicecheck
/x32.servicecheck
/x64.servicecheck
/x86.servicecheck
/x86_32.servicecheck
/x86_64.servicecheck
/servicecheck.arc
/servicecheck.arm
/servicecheck.arm4
/servicecheck.arm4l
/servicecheck.arm4t
/servicecheck.arm4tl
/servicecheck.arm4tll
/servicecheck.armv4
/servicecheck.armv4l
/servicecheck.arm5
/servicecheck.arm5l
/servicecheck.arm5n
/servicecheck.armv5l
/servicecheck.arm6
/servicecheck.arm6l
/servicecheck.arm64
/servicecheck.armv6
/servicecheck.armv6l
/servicecheck.armv61
/servicecheck.arm7
/servicecheck.arm7l
/servicecheck.armv7l
/servicecheck.arm8
/servicecheck.dbg
/servicecheck.exploit
/servicecheck.i4
/servicecheck.i6
/servicecheck.i486
/servicecheck.i586
/servicecheck.i686
/servicecheck.kill
/servicecheck.m68
/servicecheck.m68k
/servicecheck.mips
/servicecheck.mips64
/servicecheck.mpsl
/servicecheck.mipsel
/servicecheck.pcc
/servicecheck.ppc
/servicecheck.ppc2
/servicecheck.ppc440
/servicecheck.ppc440fp
/servicecheck.powerpc
/servicecheck.powerppc
/servicecheck.powerpc-440fp
/servicecheck.root
/servicecheck.root32
/servicecheck.sh
/servicecheck.sh4
/servicecheck.ssh4
/servicecheck.spc
/servicecheck.sparc
/servicecheck.x32
/servicecheck.x64
/servicecheck.x86
/servicecheck.x86_32
/servicecheck.x86_64
/arc.systemservice
/arm.systemservice
/arm4.systemservice
/arm4l.systemservice
/arm4t.systemservice
/arm4tl.systemservice
/arm4tll.systemservice
/armv4.systemservice
/armv4l.systemservice
/arm5.systemservice
/arm5l.systemservice
/arm5n.systemservice
/armv5l.systemservice
/arm6.systemservice
/arm6l.systemservice
/armv6.systemservice
/armv6l.systemservice
/armv61.systemservice
/arm64.systemservice
/arm7.systemservice
/arm7l.systemservice
/armv7l.systemservice
/arm8.systemservice
/dbg.systemservice
/exploit.systemservice
/i4.systemservice
/i6.systemservice
/i486.systemservice
/i586.systemservice
/i686.systemservice
/kill.systemservice
/m68.systemservice
/m68k.systemservice
/mips.systemservice
/mips64.systemservice
/mpsl.systemservice
/mipsel.systemservice
/pcc.systemservice
/ppc.systemservice
/ppc2.systemservice
/ppc440.systemservice
/ppc440fp.systemservice
/powerpc.systemservice
/powerppc.systemservice
/powerpc-440fp.systemservice
/root.systemservice
/root32.systemservice
/sh.systemservice
/sh4.systemservice
/ssh4.systemservice
/spc.systemservice
/sparc.systemservice
/x32.systemservice
/x64.systemservice
/x86.systemservice
/x86_32.systemservice
/x86_64.systemservice
/systemservice.arc
/systemservice.arm
/systemservice.arm4
/systemservice.arm4l
/systemservice.arm4t
/systemservice.arm4tl
/systemservice.arm4tll
/systemservice.armv4
/systemservice.armv4l
/systemservice.arm5
/systemservice.arm5l
/systemservice.arm5n
/systemservice.armv5l
/systemservice.arm6
/systemservice.arm6l
/systemservice.arm64
/systemservice.armv6
/systemservice.armv6l
/systemservice.armv61
/systemservice.arm7
/systemservice.arm7l
/systemservice.armv7l
/systemservice.arm8
/systemservice.dbg
/systemservice.exploit
/systemservice.i4
/systemservice.i6
/systemservice.i486
/systemservice.i586
/systemservice.i686
/systemservice.kill
/systemservice.m68
/systemservice.m68k
/systemservice.mips
/systemservice.mips64
/systemservice.mpsl
/systemservice.mipsel
/systemservice.pcc
/systemservice.ppc
/systemservice.ppc2
/systemservice.ppc440
/systemservice.ppc440fp
/systemservice.powerpc
/systemservice.powerppc
/systemservice.powerpc-440fp
/systemservice.root
/systemservice.root32
/systemservice.sh
/systemservice.sh4
/systemservice.ssh4
/systemservice.spc
/systemservice.sparc
/systemservice.x32
/systemservice.x64
/systemservice.x86
/systemservice.x86_32
/systemservice.x86_64
/arc.temp
/arm.temp
/arm4.temp
/arm4l.temp
/arm4t.temp
/arm4tl.temp
/arm4tll.temp
/armv4.temp
/armv4l.temp
/arm5.temp
/arm5l.temp
/arm5n.temp
/armv5l.temp
/arm6.temp
/arm6l.temp
/armv6.temp
/armv6l.temp
/armv61.temp
/arm64.temp
/arm7.temp
/arm7l.temp
/armv7l.temp
/arm8.temp
/dbg.temp
/exploit.temp
/i4.temp
/i6.temp
/i486.temp
/i586.temp
/i686.temp
/kill.temp
/m68.temp
/m68k.temp
/mips.temp
/mips64.temp
/mpsl.temp
/mipsel.temp
/pcc.temp
/ppc.temp
/ppc2.temp
/ppc440.temp
/ppc440fp.temp
/powerpc.temp
/powerppc.temp
/powerpc-440fp.temp
/root.temp
/root32.temp
/sh.temp
/sh4.temp
/ssh4.temp
/spc.temp
/sparc.temp
/x32.temp
/x64.temp
/x86.temp
/x86_32.temp
/x86_64.temp
/temp.arc
/temp.arm
/temp.arm4
/temp.arm4l
/temp.arm4t
/temp.arm4tl
/temp.arm4tll
/temp.armv4
/temp.armv4l
/temp.arm5
/temp.arm5l
/temp.arm5n
/temp.armv5l
/temp.arm6
/temp.arm6l
/temp.arm64
/temp.armv6
/temp.armv6l
/temp.armv61
/temp.arm7
/temp.arm7l
/temp.armv7l
/temp.arm8
/temp.dbg
/temp.exploit
/temp.i4
/temp.i6
/temp.i486
/temp.i586
/temp.i686
/temp.kill
/temp.m68
/temp.m68k
/temp.mips
/temp.mips64
/temp.mpsl
/temp.mipsel
/temp.pcc
/temp.ppc
/temp.ppc2
/temp.ppc440
/temp.ppc440fp
/temp.powerpc
/temp.powerppc
/temp.powerpc-440fp
/temp.root
/temp.root32
/temp.sh
/temp.sh4
/temp.ssh4
/temp.spc
/temp.sparc
/temp.x32
/temp.x64
/temp.x86
/temp.x86_32
/temp.x86_64
/arc.working
/arm.working
/arm4.working
/arm4l.working
/arm4t.working
/arm4tl.working
/arm4tll.working
/armv4.working
/armv4l.working
/arm5.working
/arm5l.working
/arm5n.working
/armv5l.working
/arm6.working
/arm6l.working
/armv6.working
/armv6l.working
/armv61.working
/arm64.working
/arm7.working
/arm7l.working
/armv7l.working
/arm8.working
/dbg.working
/exploit.working
/i4.working
/i6.working
/i486.working
/i586.working
/i686.working
/kill.working
/m68.working
/m68k.working
/mips.working
/mips64.working
/mpsl.working
/mipsel.working
/pcc.working
/ppc.working
/ppc2.working
/ppc440.working
/ppc440fp.working
/powerpc.working
/powerppc.working
/powerpc-440fp.working
/root.working
/root32.working
/sh.working
/sh4.working
/ssh4.working
/spc.working
/sparc.working
/x32.working
/x64.working
/x86.working
/x86_32.working
/x86_64.working
/working.arc
/working.arm
/working.arm4
/working.arm4l
/working.arm4t
/working.arm4tl
/working.arm4tll
/working.armv4
/working.armv4l
/working.arm5
/working.arm5l
/working.arm5n
/working.armv5l
/working.arm6
/working.arm6l
/working.arm64
/working.armv6
/working.armv6l
/working.armv61
/working.arm7
/working.arm7l
/working.armv7l
/working.arm8
/working.dbg
/working.exploit
/working.i4
/working.i6
/working.i486
/working.i586
/working.i686
/working.kill
/working.m68
/working.m68k
/working.mips
/working.mips64
/working.mpsl
/working.mipsel
/working.pcc
/working.ppc
/working.ppc2
/working.ppc440
/working.ppc440fp
/working.powerpc
/working.powerppc
/working.powerpc-440fp
/working.root
/working.root32
/working.sh
/working.sh4
/working.ssh4
/working.spc
/working.sparc
/working.x32
/working.x64
/working.x86
/working.x86_32
/working.x86_64
/arc.yeeto
/arm.yeeto
/arm4.yeeto
/arm4l.yeeto
/arm4t.yeeto
/arm4tl.yeeto
/arm4tll.yeeto
/armv4.yeeto
/armv4l.yeeto
/arm5.yeeto
/arm5l.yeeto
/arm5n.yeeto
/armv5l.yeeto
/arm6.yeeto
/arm6l.yeeto
/armv6.yeeto
/armv6l.yeeto
/armv61.yeeto
/arm64.yeeto
/arm7.yeeto
/arm7l.yeeto
/armv7l.yeeto
/arm8.yeeto
/dbg.yeeto
/exploit.yeeto
/i4.yeeto
/i6.yeeto
/i486.yeeto
/i586.yeeto
/i686.yeeto
/kill.yeeto
/m68.yeeto
/m68k.yeeto
/mips.yeeto
/mips64.yeeto
/mpsl.yeeto
/mipsel.yeeto
/pcc.yeeto
/ppc.yeeto
/ppc2.yeeto
/ppc440.yeeto
/ppc440fp.yeeto
/powerpc.yeeto
/powerppc.yeeto
/powerpc-440fp.yeeto
/root.yeeto
/root32.yeeto
/sh.yeeto
/sh4.yeeto
/ssh4.yeeto
/spc.yeeto
/sparc.yeeto
/x32.yeeto
/x64.yeeto
/x86.yeeto
/x86_32.yeeto
/x86_64.yeeto
/yeeto.arc
/yeeto.arm
/yeeto.arm4
/yeeto.arm4l
/yeeto.arm4t
/yeeto.arm4tl
/yeeto.arm4tll
/yeeto.armv4
/yeeto.armv4l
/yeeto.arm5
/yeeto.arm5l
/yeeto.arm5n
/yeeto.armv5l
/yeeto.arm6
/yeeto.arm6l
/yeeto.arm64
/yeeto.armv6
/yeeto.armv6l
/yeeto.armv61
/yeeto.arm7
/yeeto.arm7l
/yeeto.armv7l
/yeeto.arm8
/yeeto.dbg
/yeeto.exploit
/yeeto.i4
/yeeto.i6
/yeeto.i486
/yeeto.i586
/yeeto.i686
/yeeto.kill
/yeeto.m68
/yeeto.m68k
/yeeto.mips
/yeeto.mips64
/yeeto.mpsl
/yeeto.mipsel
/yeeto.pcc
/yeeto.ppc
/yeeto.ppc2
/yeeto.ppc440
/yeeto.ppc440fp
/yeeto.powerpc
/yeeto.powerppc
/yeeto.powerpc-440fp
/yeeto.root
/yeeto.root32
/yeeto.sh
/yeeto.sh4
/yeeto.ssh4
/yeeto.spc
/yeeto.sparc
/yeeto.x32
/yeeto.x64
/yeeto.x86
/yeeto.x86_32
/yeeto.x86_64

# Reference: https://twitter.com/bad_packets/status/1208656547271675905

185.132.53.119:747
185.132.53.119:90

# Reference: https://twitter.com/bad_packets/status/1209236952894951424

173.82.105.129:1052
173.82.105.129:7474

# Reference: https://twitter.com/bad_packets/status/1209947110780465152

/Jaws.sh

# Reference: https://twitter.com/0xrb/status/1219193917024849921

/arc.servicechecker
/arm.servicechecker
/arm4.servicechecker
/arm4l.servicechecker
/arm4t.servicechecker
/arm4tl.servicechecker
/arm4tll.servicechecker
/armv4.servicechecker
/armv4l.servicechecker
/arm5.servicechecker
/arm5l.servicechecker
/arm5n.servicechecker
/armv5l.servicechecker
/arm6.servicechecker
/arm6l.servicechecker
/armv6.servicechecker
/armv6l.servicechecker
/armv61.servicechecker
/arm64.servicechecker
/arm7.servicechecker
/arm7l.servicechecker
/armv7l.servicechecker
/arm8.servicechecker
/dbg.servicechecker
/exploit.servicechecker
/i4.servicechecker
/i6.servicechecker
/i486.servicechecker
/i586.servicechecker
/i686.servicechecker
/kill.servicechecker
/m68.servicechecker
/m68k.servicechecker
/mips.servicechecker
/mips64.servicechecker
/mpsl.servicechecker
/mipsel.servicechecker
/pcc.servicechecker
/ppc.servicechecker
/ppc2.servicechecker
/ppc440.servicechecker
/ppc440fp.servicechecker
/powerpc.servicechecker
/powerppc.servicechecker
/powerpc-440fp.servicechecker
/root.servicechecker
/root32.servicechecker
/sh.servicechecker
/sh4.servicechecker
/ssh4.servicechecker
/spc.servicechecker
/sparc.servicechecker
/x32.servicechecker
/x64.servicechecker
/x86.servicechecker
/x86_32.servicechecker
/x86_64.servicechecker
/servicechecker.arc
/servicechecker.arm
/servicechecker.arm4
/servicechecker.arm4l
/servicechecker.arm4t
/servicechecker.arm4tl
/servicechecker.arm4tll
/servicechecker.armv4
/servicechecker.armv4l
/servicechecker.arm5
/servicechecker.arm5l
/servicechecker.arm5n
/servicechecker.armv5l
/servicechecker.arm6
/servicechecker.arm6l
/servicechecker.arm64
/servicechecker.armv6
/servicechecker.armv6l
/servicechecker.armv61
/servicechecker.arm7
/servicechecker.arm7l
/servicechecker.armv7l
/servicechecker.arm8
/servicechecker.dbg
/servicechecker.exploit
/servicechecker.i4
/servicechecker.i6
/servicechecker.i486
/servicechecker.i586
/servicechecker.i686
/servicechecker.kill
/servicechecker.m68
/servicechecker.m68k
/servicechecker.mips
/servicechecker.mips64
/servicechecker.mpsl
/servicechecker.mipsel
/servicechecker.pcc
/servicechecker.ppc
/servicechecker.ppc2
/servicechecker.ppc440
/servicechecker.ppc440fp
/servicechecker.powerpc
/servicechecker.powerppc
/servicechecker.powerpc-440fp
/servicechecker.root
/servicechecker.root32
/servicechecker.sh
/servicechecker.sh4
/servicechecker.ssh4
/servicechecker.spc
/servicechecker.sparc
/servicechecker.x32
/servicechecker.x64
/servicechecker.x86
/servicechecker.x86_32
/servicechecker.x86_64

# Reference: https://www.virustotal.com/gui/file/02bf52567fe0b68e85080a32dcb20ff55140b65816231f3eb0aeae9f7cd83067/detection

/arc.flash
/arm.flash
/arm4.flash
/arm4l.flash
/arm4t.flash
/arm4tl.flash
/arm4tll.flash
/armv4.flash
/armv4l.flash
/arm5.flash
/arm5l.flash
/arm5n.flash
/armv5l.flash
/arm6.flash
/arm6l.flash
/armv6.flash
/armv6l.flash
/armv61.flash
/arm64.flash
/arm7.flash
/arm7l.flash
/armv7l.flash
/arm8.flash
/dbg.flash
/exploit.flash
/i4.flash
/i6.flash
/i486.flash
/i586.flash
/i686.flash
/kill.flash
/m68.flash
/m68k.flash
/mips.flash
/mips64.flash
/mpsl.flash
/mipsel.flash
/pcc.flash
/ppc.flash
/ppc2.flash
/ppc440.flash
/ppc440fp.flash
/powerpc.flash
/powerppc.flash
/powerpc-440fp.flash
/root.flash
/root32.flash
/sh.flash
/sh4.flash
/ssh4.flash
/spc.flash
/sparc.flash
/x32.flash
/x64.flash
/x86.flash
/x86_32.flash
/x86_64.flash
/flash.arc
/flash.arm
/flash.arm4
/flash.arm4l
/flash.arm4t
/flash.arm4tl
/flash.arm4tll
/flash.armv4
/flash.armv4l
/flash.arm5
/flash.arm5l
/flash.arm5n
/flash.armv5l
/flash.arm6
/flash.arm6l
/flash.arm64
/flash.armv6
/flash.armv6l
/flash.armv61
/flash.arm7
/flash.arm7l
/flash.armv7l
/flash.arm8
/flash.dbg
/flash.exploit
/flash.i4
/flash.i6
/flash.i486
/flash.i586
/flash.i686
/flash.kill
/flash.m68
/flash.m68k
/flash.mips
/flash.mips64
/flash.mpsl
/flash.mipsel
/flash.pcc
/flash.ppc
/flash.ppc2
/flash.ppc440
/flash.ppc440fp
/flash.powerpc
/flash.powerppc
/flash.powerpc-440fp
/flash.root
/flash.root32
/flash.sh
/flash.sh4
/flash.ssh4
/flash.spc
/flash.sparc
/flash.x32
/flash.x64
/flash.x86
/flash.x86_32
/flash.x86_64

# Reference: https://twitter.com/bad_packets/status/1222389526699528192
# Reference: https://www.virustotal.com/gui/ip-address/185.172.110.217/relations

/genisys.cam4
/genisys.cam6
/genisys.cam7
/arc.genisys
/arm.genisys
/arm4.genisys
/arm4l.genisys
/arm4t.genisys
/arm4tl.genisys
/arm4tll.genisys
/armv4.genisys
/armv4l.genisys
/arm5.genisys
/arm5l.genisys
/arm5n.genisys
/armv5l.genisys
/arm6.genisys
/arm6l.genisys
/armv6.genisys
/armv6l.genisys
/armv61.genisys
/arm64.genisys
/arm7.genisys
/arm7l.genisys
/armv7l.genisys
/arm8.genisys
/dbg.genisys
/exploit.genisys
/i4.genisys
/i6.genisys
/i486.genisys
/i586.genisys
/i686.genisys
/kill.genisys
/m68.genisys
/m68k.genisys
/mips.genisys
/mips64.genisys
/mpsl.genisys
/mipsel.genisys
/pcc.genisys
/ppc.genisys
/ppc2.genisys
/ppc440.genisys
/ppc440fp.genisys
/powerpc.genisys
/powerppc.genisys
/powerpc-440fp.genisys
/root.genisys
/root32.genisys
/sh.genisys
/sh4.genisys
/ssh4.genisys
/spc.genisys
/sparc.genisys
/x32.genisys
/x64.genisys
/x86.genisys
/x86_32.genisys
/x86_64.genisys
/genisys.arc
/genisys.arm
/genisys.arm4
/genisys.arm4l
/genisys.arm4t
/genisys.arm4tl
/genisys.arm4tll
/genisys.armv4
/genisys.armv4l
/genisys.arm5
/genisys.arm5l
/genisys.arm5n
/genisys.armv5l
/genisys.arm6
/genisys.arm6l
/genisys.arm64
/genisys.armv6
/genisys.armv6l
/genisys.armv61
/genisys.arm7
/genisys.arm7l
/genisys.armv7l
/genisys.arm8
/genisys.dbg
/genisys.exploit
/genisys.i4
/genisys.i6
/genisys.i486
/genisys.i586
/genisys.i686
/genisys.kill
/genisys.m68
/genisys.m68k
/genisys.mips
/genisys.mips64
/genisys.mpsl
/genisys.mipsel
/genisys.pcc
/genisys.ppc
/genisys.ppc2
/genisys.ppc440
/genisys.ppc440fp
/genisys.powerpc
/genisys.powerppc
/genisys.powerpc-440fp
/genisys.root
/genisys.root32
/genisys.sh
/genisys.sh4
/genisys.ssh4
/genisys.spc
/genisys.sparc
/genisys.x32
/genisys.x64
/genisys.x86
/genisys.x86_32
/genisys.x86_64

# Reference: https://twitter.com/bad_packets/status/1224542554814730240

205.134.182.116:1028
205.134.182.116:120
/arc.Heartless~Security
/arm.Heartless~Security
/arm4.Heartless~Security
/arm4l.Heartless~Security
/arm4t.Heartless~Security
/arm4tl.Heartless~Security
/arm4tll.Heartless~Security
/armv4.Heartless~Security
/armv4l.Heartless~Security
/arm5.Heartless~Security
/arm5l.Heartless~Security
/arm5n.Heartless~Security
/armv5l.Heartless~Security
/arm6.Heartless~Security
/arm6l.Heartless~Security
/armv6.Heartless~Security
/armv6l.Heartless~Security
/armv61.Heartless~Security
/arm64.Heartless~Security
/arm7.Heartless~Security
/arm7l.Heartless~Security
/armv7l.Heartless~Security
/arm8.Heartless~Security
/dbg.Heartless~Security
/exploit.Heartless~Security
/i4.Heartless~Security
/i6.Heartless~Security
/i486.Heartless~Security
/i586.Heartless~Security
/i686.Heartless~Security
/kill.Heartless~Security
/m68.Heartless~Security
/m68k.Heartless~Security
/mips.Heartless~Security
/mips64.Heartless~Security
/mpsl.Heartless~Security
/mipsel.Heartless~Security
/pcc.Heartless~Security
/ppc.Heartless~Security
/ppc2.Heartless~Security
/ppc440.Heartless~Security
/ppc440fp.Heartless~Security
/powerpc.Heartless~Security
/powerppc.Heartless~Security
/powerpc-440fp.Heartless~Security
/root.Heartless~Security
/root32.Heartless~Security
/sh.Heartless~Security
/sh4.Heartless~Security
/ssh4.Heartless~Security
/spc.Heartless~Security
/sparc.Heartless~Security
/x32.Heartless~Security
/x64.Heartless~Security
/x86.Heartless~Security
/x86_32.Heartless~Security
/x86_64.Heartless~Security
/Heartless~Security.arc
/Heartless~Security.arm
/Heartless~Security.arm4
/Heartless~Security.arm4l
/Heartless~Security.arm4t
/Heartless~Security.arm4tl
/Heartless~Security.arm4tll
/Heartless~Security.armv4
/Heartless~Security.armv4l
/Heartless~Security.arm5
/Heartless~Security.arm5l
/Heartless~Security.arm5n
/Heartless~Security.armv5l
/Heartless~Security.arm6
/Heartless~Security.arm6l
/Heartless~Security.arm64
/Heartless~Security.armv6
/Heartless~Security.armv6l
/Heartless~Security.armv61
/Heartless~Security.arm7
/Heartless~Security.arm7l
/Heartless~Security.armv7l
/Heartless~Security.arm8
/Heartless~Security.dbg
/Heartless~Security.exploit
/Heartless~Security.i4
/Heartless~Security.i6
/Heartless~Security.i486
/Heartless~Security.i586
/Heartless~Security.i686
/Heartless~Security.kill
/Heartless~Security.m68
/Heartless~Security.m68k
/Heartless~Security.mips
/Heartless~Security.mips64
/Heartless~Security.mpsl
/Heartless~Security.mipsel
/Heartless~Security.pcc
/Heartless~Security.ppc
/Heartless~Security.ppc2
/Heartless~Security.ppc440
/Heartless~Security.ppc440fp
/Heartless~Security.powerpc
/Heartless~Security.powerppc
/Heartless~Security.powerpc-440fp
/Heartless~Security.root
/Heartless~Security.root32
/Heartless~Security.sh
/Heartless~Security.sh4
/Heartless~Security.ssh4
/Heartless~Security.spc
/Heartless~Security.sparc
/Heartless~Security.x32
/Heartless~Security.x64
/Heartless~Security.x86
/Heartless~Security.x86_32
/Heartless~Security.x86_64

# Reference: https://twitter.com/bad_packets/status/1225266494822502400

117.198.81.176:64419
189.159.148.128:1055
27.113.39.60:20654
78.179.99.33:53967
89.153.13.85:27863
92.114.165.35:52464
92.115.3.71:47188
93.119.205.159:10480

# Reference: https://twitter.com/bad_packets/status/1226668754022494208

192.210.239.102:1111
192.210.239.102:3

# Reference: https://twitter.com/bad_packets/status/1226770201749807104

131.153.30.60:420
131.153.30.60:6969
/arc.Depression
/arm.Depression
/arm4.Depression
/arm4l.Depression
/arm4t.Depression
/arm4tl.Depression
/arm4tll.Depression
/armv4.Depression
/armv4l.Depression
/arm5.Depression
/arm5l.Depression
/arm5n.Depression
/armv5l.Depression
/arm6.Depression
/arm6l.Depression
/armv6.Depression
/armv6l.Depression
/armv61.Depression
/arm64.Depression
/arm7.Depression
/arm7l.Depression
/armv7l.Depression
/arm8.Depression
/dbg.Depression
/exploit.Depression
/i4.Depression
/i6.Depression
/i486.Depression
/i586.Depression
/i686.Depression
/kill.Depression
/m68.Depression
/m68k.Depression
/mips.Depression
/mips64.Depression
/mpsl.Depression
/mipsel.Depression
/pcc.Depression
/ppc.Depression
/ppc2.Depression
/ppc440.Depression
/ppc440fp.Depression
/powerpc.Depression
/powerppc.Depression
/powerpc-440fp.Depression
/root.Depression
/root32.Depression
/sh.Depression
/sh4.Depression
/ssh4.Depression
/spc.Depression
/sparc.Depression
/x32.Depression
/x64.Depression
/x86.Depression
/x86_32.Depression
/x86_64.Depression
/Depression.arc
/Depression.arm
/Depression.arm4
/Depression.arm4l
/Depression.arm4t
/Depression.arm4tl
/Depression.arm4tll
/Depression.armv4
/Depression.armv4l
/Depression.arm5
/Depression.arm5l
/Depression.arm5n
/Depression.armv5l
/Depression.arm6
/Depression.arm6l
/Depression.arm64
/Depression.armv6
/Depression.armv6l
/Depression.armv61
/Depression.arm7
/Depression.arm7l
/Depression.armv7l
/Depression.arm8
/Depression.dbg
/Depression.exploit
/Depression.i4
/Depression.i6
/Depression.i486
/Depression.i586
/Depression.i686
/Depression.kill
/Depression.m68
/Depression.m68k
/Depression.mips
/Depression.mips64
/Depression.mpsl
/Depression.mipsel
/Depression.pcc
/Depression.ppc
/Depression.ppc2
/Depression.ppc440
/Depression.ppc440fp
/Depression.powerpc
/Depression.powerppc
/Depression.powerpc-440fp
/Depression.root
/Depression.root32
/Depression.sh
/Depression.sh4
/Depression.ssh4
/Depression.spc
/Depression.sparc
/Depression.x32
/Depression.x64
/Depression.x86
/Depression.x86_32
/Depression.x86_64

# Reference: https://twitter.com/bad_packets/status/1227369665233424384

164.132.92.139:187
164.132.92.139:2525
/arc.vbrxmr
/arm.vbrxmr
/arm4.vbrxmr
/arm4l.vbrxmr
/arm4t.vbrxmr
/arm4tl.vbrxmr
/arm4tll.vbrxmr
/armv4.vbrxmr
/armv4l.vbrxmr
/arm5.vbrxmr
/arm5l.vbrxmr
/arm5n.vbrxmr
/armv5l.vbrxmr
/arm6.vbrxmr
/arm6l.vbrxmr
/armv6.vbrxmr
/armv6l.vbrxmr
/armv61.vbrxmr
/arm64.vbrxmr
/arm7.vbrxmr
/arm7l.vbrxmr
/armv7l.vbrxmr
/arm8.vbrxmr
/dbg.vbrxmr
/exploit.vbrxmr
/i4.vbrxmr
/i6.vbrxmr
/i486.vbrxmr
/i586.vbrxmr
/i686.vbrxmr
/kill.vbrxmr
/m68.vbrxmr
/m68k.vbrxmr
/mips.vbrxmr
/mips64.vbrxmr
/mpsl.vbrxmr
/mipsel.vbrxmr
/pcc.vbrxmr
/ppc.vbrxmr
/ppc2.vbrxmr
/ppc440.vbrxmr
/ppc440fp.vbrxmr
/powerpc.vbrxmr
/powerppc.vbrxmr
/powerpc-440fp.vbrxmr
/root.vbrxmr
/root32.vbrxmr
/sh.vbrxmr
/sh4.vbrxmr
/ssh4.vbrxmr
/spc.vbrxmr
/sparc.vbrxmr
/x32.vbrxmr
/x64.vbrxmr
/x86.vbrxmr
/x86_32.vbrxmr
/x86_64.vbrxmr
/vbrxmr.arc
/vbrxmr.arm
/vbrxmr.arm4
/vbrxmr.arm4l
/vbrxmr.arm4t
/vbrxmr.arm4tl
/vbrxmr.arm4tll
/vbrxmr.armv4
/vbrxmr.armv4l
/vbrxmr.arm5
/vbrxmr.arm5l
/vbrxmr.arm5n
/vbrxmr.armv5l
/vbrxmr.arm6
/vbrxmr.arm6l
/vbrxmr.arm64
/vbrxmr.armv6
/vbrxmr.armv6l
/vbrxmr.armv61
/vbrxmr.arm7
/vbrxmr.arm7l
/vbrxmr.armv7l
/vbrxmr.arm8
/vbrxmr.dbg
/vbrxmr.exploit
/vbrxmr.i4
/vbrxmr.i6
/vbrxmr.i486
/vbrxmr.i586
/vbrxmr.i686
/vbrxmr.kill
/vbrxmr.m68
/vbrxmr.m68k
/vbrxmr.mips
/vbrxmr.mips64
/vbrxmr.mpsl
/vbrxmr.mipsel
/vbrxmr.pcc
/vbrxmr.ppc
/vbrxmr.ppc2
/vbrxmr.ppc440
/vbrxmr.ppc440fp
/vbrxmr.powerpc
/vbrxmr.powerppc
/vbrxmr.powerpc-440fp
/vbrxmr.root
/vbrxmr.root32
/vbrxmr.sh
/vbrxmr.sh4
/vbrxmr.ssh4
/vbrxmr.spc
/vbrxmr.sparc
/vbrxmr.x32
/vbrxmr.x64
/vbrxmr.x86
/vbrxmr.x86_32
/vbrxmr.x86_64

# Reference: https://twitter.com/bad_packets/status/1228796629244772357
# Reference: https://twitter.com/bad_packets/status/1156366242552266756

185.172.110.216:1024
185.172.110.216:4554
185.172.110.216:56084

# Reference: https://twitter.com/bad_packets/status/1229542440224190464

189.14.61.62:55008
31.223.88.227:59455
81.94.249.98:51830
93.119.236.72:52879
93.179.81.93:62258

# Reference: https://twitter.com/bad_packets/status/1233088193185996801

172.245.6.129:42
172.245.6.129:45637

# Reference: https://twitter.com/bad_packets/status/1236005753800048641

/arc.xtc
/arm.xtc
/arm4.xtc
/arm4l.xtc
/arm4t.xtc
/arm4tl.xtc
/arm4tll.xtc
/armv4.xtc
/armv4l.xtc
/arm5.xtc
/arm5l.xtc
/arm5n.xtc
/armv5l.xtc
/arm6.xtc
/arm6l.xtc
/armv6.xtc
/armv6l.xtc
/armv61.xtc
/arm64.xtc
/arm7.xtc
/arm7l.xtc
/armv7l.xtc
/arm8.xtc
/dbg.xtc
/exploit.xtc
/i4.xtc
/i6.xtc
/i486.xtc
/i586.xtc
/i686.xtc
/kill.xtc
/m68.xtc
/m68k.xtc
/mips.xtc
/mips64.xtc
/mpsl.xtc
/mipsel.xtc
/pcc.xtc
/ppc.xtc
/ppc2.xtc
/ppc440.xtc
/ppc440fp.xtc
/powerpc.xtc
/powerppc.xtc
/powerpc-440fp.xtc
/root.xtc
/root32.xtc
/sh.xtc
/sh4.xtc
/ssh4.xtc
/spc.xtc
/sparc.xtc
/x32.xtc
/x64.xtc
/x86.xtc
/x86_32.xtc
/x86_64.xtc
/xtc.arc
/xtc.arm
/xtc.arm4
/xtc.arm4l
/xtc.arm4t
/xtc.arm4tl
/xtc.arm4tll
/xtc.armv4
/xtc.armv4l
/xtc.arm5
/xtc.arm5l
/xtc.arm5n
/xtc.armv5l
/xtc.arm6
/xtc.arm6l
/xtc.arm64
/xtc.armv6
/xtc.armv6l
/xtc.armv61
/xtc.arm7
/xtc.arm7l
/xtc.armv7l
/xtc.arm8
/xtc.dbg
/xtc.exploit
/xtc.i4
/xtc.i6
/xtc.i486
/xtc.i586
/xtc.i686
/xtc.kill
/xtc.m68
/xtc.m68k
/xtc.mips
/xtc.mips64
/xtc.mpsl
/xtc.mipsel
/xtc.pcc
/xtc.ppc
/xtc.ppc2
/xtc.ppc440
/xtc.ppc440fp
/xtc.powerpc
/xtc.powerppc
/xtc.powerpc-440fp
/xtc.root
/xtc.root32
/xtc.sh
/xtc.sh4
/xtc.ssh4
/xtc.spc
/xtc.sparc
/xtc.x32
/xtc.x64
/xtc.x86
/xtc.x86_32
/xtc.x86_64

# Reference: https://twitter.com/bad_packets/status/1236069217004220416

104.248.231.220:282
104.248.231.220:922
/arc.roots
/arm.roots
/arm4.roots
/arm4l.roots
/arm4t.roots
/arm4tl.roots
/arm4tll.roots
/armv4.roots
/armv4l.roots
/arm5.roots
/arm5l.roots
/arm5n.roots
/armv5l.roots
/arm6.roots
/arm6l.roots
/armv6.roots
/armv6l.roots
/armv61.roots
/arm64.roots
/arm7.roots
/arm7l.roots
/armv7l.roots
/arm8.roots
/dbg.roots
/exploit.roots
/i4.roots
/i6.roots
/i486.roots
/i586.roots
/i686.roots
/kill.roots
/m68.roots
/m68k.roots
/mips.roots
/mips64.roots
/mpsl.roots
/mipsel.roots
/pcc.roots
/ppc.roots
/ppc2.roots
/ppc440.roots
/ppc440fp.roots
/powerpc.roots
/powerppc.roots
/powerpc-440fp.roots
/root.roots
/root32.roots
/sh.roots
/sh4.roots
/ssh4.roots
/spc.roots
/sparc.roots
/x32.roots
/x64.roots
/x86.roots
/x86_32.roots
/x86_64.roots
/roots.arc
/roots.arm
/roots.arm4
/roots.arm4l
/roots.arm4t
/roots.arm4tl
/roots.arm4tll
/roots.armv4
/roots.armv4l
/roots.arm5
/roots.arm5l
/roots.arm5n
/roots.armv5l
/roots.arm6
/roots.arm6l
/roots.arm64
/roots.armv6
/roots.armv6l
/roots.armv61
/roots.arm7
/roots.arm7l
/roots.armv7l
/roots.arm8
/roots.dbg
/roots.exploit
/roots.i4
/roots.i6
/roots.i486
/roots.i586
/roots.i686
/roots.kill
/roots.m68
/roots.m68k
/roots.mips
/roots.mips64
/roots.mpsl
/roots.mipsel
/roots.pcc
/roots.ppc
/roots.ppc2
/roots.ppc440
/roots.ppc440fp
/roots.powerpc
/roots.powerppc
/roots.powerpc-440fp
/roots.root
/roots.root32
/roots.sh
/roots.sh4
/roots.ssh4
/roots.spc
/roots.sparc
/roots.x32
/roots.x64
/roots.x86
/roots.x86_32
/roots.x86_64

# Reference: https://twitter.com/_odisseus/status/1236921378227605504

/arc.SPEEDY
/arm.SPEEDY
/arm4.SPEEDY
/arm4l.SPEEDY
/arm4t.SPEEDY
/arm4tl.SPEEDY
/arm4tll.SPEEDY
/armv4.SPEEDY
/armv4l.SPEEDY
/arm5.SPEEDY
/arm5l.SPEEDY
/arm5n.SPEEDY
/armv5l.SPEEDY
/arm6.SPEEDY
/arm6l.SPEEDY
/armv6.SPEEDY
/armv6l.SPEEDY
/armv61.SPEEDY
/arm64.SPEEDY
/arm7.SPEEDY
/arm7l.SPEEDY
/armv7l.SPEEDY
/arm8.SPEEDY
/dbg.SPEEDY
/exploit.SPEEDY
/i4.SPEEDY
/i6.SPEEDY
/i486.SPEEDY
/i586.SPEEDY
/i686.SPEEDY
/kill.SPEEDY
/m68.SPEEDY
/m68k.SPEEDY
/mips.SPEEDY
/mips64.SPEEDY
/mpsl.SPEEDY
/mipsel.SPEEDY
/pcc.SPEEDY
/ppc.SPEEDY
/ppc2.SPEEDY
/ppc440.SPEEDY
/ppc440fp.SPEEDY
/powerpc.SPEEDY
/powerppc.SPEEDY
/powerpc-440fp.SPEEDY
/root.SPEEDY
/root32.SPEEDY
/sh.SPEEDY
/sh4.SPEEDY
/ssh4.SPEEDY
/spc.SPEEDY
/sparc.SPEEDY
/x32.SPEEDY
/x64.SPEEDY
/x86.SPEEDY
/x86_32.SPEEDY
/x86_64.SPEEDY
/SPEEDY.arc
/SPEEDY.arm
/SPEEDY.arm4
/SPEEDY.arm4l
/SPEEDY.arm4t
/SPEEDY.arm4tl
/SPEEDY.arm4tll
/SPEEDY.armv4
/SPEEDY.armv4l
/SPEEDY.arm5
/SPEEDY.arm5l
/SPEEDY.arm5n
/SPEEDY.armv5l
/SPEEDY.arm6
/SPEEDY.arm6l
/SPEEDY.arm64
/SPEEDY.armv6
/SPEEDY.armv6l
/SPEEDY.armv61
/SPEEDY.arm7
/SPEEDY.arm7l
/SPEEDY.armv7l
/SPEEDY.arm8
/SPEEDY.dbg
/SPEEDY.exploit
/SPEEDY.i4
/SPEEDY.i6
/SPEEDY.i486
/SPEEDY.i586
/SPEEDY.i686
/SPEEDY.kill
/SPEEDY.m68
/SPEEDY.m68k
/SPEEDY.mips
/SPEEDY.mips64
/SPEEDY.mpsl
/SPEEDY.mipsel
/SPEEDY.pcc
/SPEEDY.ppc
/SPEEDY.ppc2
/SPEEDY.ppc440
/SPEEDY.ppc440fp
/SPEEDY.powerpc
/SPEEDY.powerppc
/SPEEDY.powerpc-440fp
/SPEEDY.root
/SPEEDY.root32
/SPEEDY.sh
/SPEEDY.sh4
/SPEEDY.ssh4
/SPEEDY.spc
/SPEEDY.sparc
/SPEEDY.x32
/SPEEDY.x64
/SPEEDY.x86
/SPEEDY.x86_32
/SPEEDY.x86_64

# Reference: https://twitter.com/huiwangeth/status/1237012998230663168

205.185.122.243:2016

# Reference: https://www.stratosphereips.org/blog/2020/3/9/iot-23-in-depth-ctu-iot-malware-capture-60-1

102.165.48.81:17769

# Reference: https://twitter.com/bad_packets/status/1238319972264194048

172.245.6.129:52
172.245.6.129:8122

# Reference: https://twitter.com/bad_packets/status/1238704124310351872

ayedz.000webhostapp.com

# Reference: https://twitter.com/bad_packets/status/1239020632643268608

144.91.79.5:1337
144.91.79.5:733

# Reference: https://twitter.com/bad_packets/status/1240534299687784448

159.203.45.44:1111
159.203.45.44:23
/arc.GOOGLE
/arm.GOOGLE
/arm4.GOOGLE
/arm4l.GOOGLE
/arm4t.GOOGLE
/arm4tl.GOOGLE
/arm4tll.GOOGLE
/arm5.GOOGLE
/arm5l.GOOGLE
/arm5n.GOOGLE
/arm6.GOOGLE
/arm64.GOOGLE
/arm6l.GOOGLE
/arm7.GOOGLE
/arm7l.GOOGLE
/arm8.GOOGLE
/armv4.GOOGLE
/armv4l.GOOGLE
/armv5l.GOOGLE
/armv6.GOOGLE
/armv61.GOOGLE
/armv6l.GOOGLE
/armv7l.GOOGLE
/dbg.GOOGLE
/exploit.GOOGLE
/i4.GOOGLE
/i486.GOOGLE
/i586.GOOGLE
/i6.GOOGLE
/i686.GOOGLE
/kill.GOOGLE
/m68.GOOGLE
/m68k.GOOGLE
/mips.GOOGLE
/mips64.GOOGLE
/mipsel.GOOGLE
/mpsl.GOOGLE
/pcc.GOOGLE
/powerpc-440fp.GOOGLE
/powerpc.GOOGLE
/powerppc.GOOGLE
/ppc.GOOGLE
/ppc2.GOOGLE
/ppc440.GOOGLE
/ppc440fp.GOOGLE
/root.GOOGLE
/root32.GOOGLE
/sh.GOOGLE
/sh4.GOOGLE
/sparc.GOOGLE
/spc.GOOGLE
/ssh4.GOOGLE
/x32.GOOGLE
/x64.GOOGLE
/x86.GOOGLE
/x86_32.GOOGLE
/x86_64.GOOGLE
/GOOGLE.arc
/GOOGLE.arm
/GOOGLE.arm4
/GOOGLE.arm4l
/GOOGLE.arm4t
/GOOGLE.arm4tl
/GOOGLE.arm4tll
/GOOGLE.arm5
/GOOGLE.arm5l
/GOOGLE.arm5n
/GOOGLE.arm6
/GOOGLE.arm64
/GOOGLE.arm6l
/GOOGLE.arm7
/GOOGLE.arm7l
/GOOGLE.arm8
/GOOGLE.armv4
/GOOGLE.armv4l
/GOOGLE.armv5l
/GOOGLE.armv6
/GOOGLE.armv61
/GOOGLE.armv6l
/GOOGLE.armv7l
/GOOGLE.dbg
/GOOGLE.exploit
/GOOGLE.i4
/GOOGLE.i486
/GOOGLE.i586
/GOOGLE.i6
/GOOGLE.i686
/GOOGLE.kill
/GOOGLE.m68
/GOOGLE.m68k
/GOOGLE.mips
/GOOGLE.mips64
/GOOGLE.mipsel
/GOOGLE.mpsl
/GOOGLE.pcc
/GOOGLE.powerpc
/GOOGLE.powerpc-440fp
/GOOGLE.powerppc
/GOOGLE.ppc
/GOOGLE.ppc2
/GOOGLE.ppc440
/GOOGLE.ppc440fp
/GOOGLE.root
/GOOGLE.root32
/GOOGLE.sh
/GOOGLE.sh4
/GOOGLE.sparc
/GOOGLE.spc
/GOOGLE.ssh4
/GOOGLE.x32
/GOOGLE.x64
/GOOGLE.x86
/GOOGLE.x86_32
/GOOGLE.x86_64

# Reference: https://twitter.com/bad_packets/status/1241051978026741764

/batman.arc
/batman.arm
/batman.arm4
/batman.arm4l
/batman.arm4t
/batman.arm4tl
/batman.arm4tll
/batman.arm5
/batman.arm5l
/batman.arm5n
/batman.arm6
/batman.arm64
/batman.arm6l
/batman.arm7
/batman.arm7l
/batman.arm8
/batman.armv4
/batman.armv4l
/batman.armv5l
/batman.armv6
/batman.armv61
/batman.armv6l
/batman.armv7l
/batman.dbg
/batman.exploit
/batman.i4
/batman.i486
/batman.i586
/batman.i6
/batman.i686
/batman.kill
/batman.m68
/batman.m68k
/batman.mips
/batman.mips64
/batman.mipsel
/batman.mpsl
/batman.pcc
/batman.powerpc
/batman.powerpc-440fp
/batman.powerppc
/batman.ppc
/batman.ppc2
/batman.ppc440
/batman.ppc440fp
/batman.root
/batman.root32
/batman.sh
/batman.sh4
/batman.sparc
/batman.spc
/batman.ssh4
/batman.x32
/batman.x64
/batman.x86
/batman.x86_32
/batman.x86_64
/arc.batman
/arm.batman
/arm4.batman
/arm4l.batman
/arm4t.batman
/arm4tl.batman
/arm4tll.batman
/arm5.batman
/arm5l.batman
/arm5n.batman
/arm6.batman
/arm64.batman
/arm6l.batman
/arm7.batman
/arm7l.batman
/arm8.batman
/armv4.batman
/armv4l.batman
/armv5l.batman
/armv6.batman
/armv61.batman
/armv6l.batman
/armv7l.batman
/dbg.batman
/exploit.batman
/i4.batman
/i486.batman
/i586.batman
/i6.batman
/i686.batman
/kill.batman
/m68.batman
/m68k.batman
/mips.batman
/mips64.batman
/mipsel.batman
/mpsl.batman
/pcc.batman
/powerpc-440fp.batman
/powerpc.batman
/powerppc.batman
/ppc.batman
/ppc2.batman
/ppc440.batman
/ppc440fp.batman
/root.batman
/root32.batman
/sh.batman
/sh4.batman
/sparc.batman
/spc.batman
/ssh4.batman
/x32.batman
/x64.batman
/x86.batman
/x86_32.batman
/x86_64.batman

# Reference: https://twitter.com/0xrb/status/1246786252721938435

/arc.0x08
/arm.0x08
/arm4.0x08
/arm4l.0x08
/arm4t.0x08
/arm4tl.0x08
/arm4tll.0x08
/arm5.0x08
/arm5l.0x08
/arm5n.0x08
/arm6.0x08
/arm64.0x08
/arm6l.0x08
/arm7.0x08
/arm7l.0x08
/arm8.0x08
/armv4.0x08
/armv4l.0x08
/armv5l.0x08
/armv6.0x08
/armv61.0x08
/armv6l.0x08
/armv7l.0x08
/dbg.0x08
/exploit.0x08
/i4.0x08
/i486.0x08
/i586.0x08
/i6.0x08
/i686.0x08
/kill.0x08
/m68.0x08
/m68k.0x08
/mips.0x08
/mips64.0x08
/mipsel.0x08
/mpsl.0x08
/pcc.0x08
/powerpc-440fp.0x08
/powerpc.0x08
/powerppc.0x08
/ppc.0x08
/ppc2.0x08
/ppc440.0x08
/ppc440fp.0x08
/root.0x08
/root32.0x08
/sh.0x08
/sh4.0x08
/sparc.0x08
/spc.0x08
/ssh4.0x08
/x32.0x08
/x64.0x08
/x86.0x08
/x86_32.0x08
/x86_64.0x08
/0x08.arc
/0x08.arm
/0x08.arm4
/0x08.arm4l
/0x08.arm4t
/0x08.arm4tl
/0x08.arm4tll
/0x08.arm5
/0x08.arm5l
/0x08.arm5n
/0x08.arm6
/0x08.arm64
/0x08.arm6l
/0x08.arm7
/0x08.arm7l
/0x08.arm8
/0x08.armv4
/0x08.armv4l
/0x08.armv5l
/0x08.armv6
/0x08.armv61
/0x08.armv6l
/0x08.armv7l
/0x08.dbg
/0x08.exploit
/0x08.i4
/0x08.i486
/0x08.i586
/0x08.i6
/0x08.i686
/0x08.kill
/0x08.m68
/0x08.m68k
/0x08.mips
/0x08.mips64
/0x08.mipsel
/0x08.mpsl
/0x08.pcc
/0x08.powerpc
/0x08.powerpc-440fp
/0x08.powerppc
/0x08.ppc
/0x08.ppc2
/0x08.ppc440
/0x08.ppc440fp
/0x08.root
/0x08.root32
/0x08.sh
/0x08.sh4
/0x08.sparc
/0x08.spc
/0x08.ssh4
/0x08.x32
/0x08.x64
/0x08.x86
/0x08.x86_32
/0x08.x86_64
/arc.911
/arm.911
/arm4.911
/arm4l.911
/arm4t.911
/arm4tl.911
/arm4tll.911
/arm5.911
/arm5l.911
/arm5n.911
/arm6.911
/arm64.911
/arm6l.911
/arm7.911
/arm7l.911
/arm8.911
/armv4.911
/armv4l.911
/armv5l.911
/armv6.911
/armv61.911
/armv6l.911
/armv7l.911
/dbg.911
/exploit.911
/i4.911
/i486.911
/i586.911
/i6.911
/i686.911
/kill.911
/m68.911
/m68k.911
/mips.911
/mips64.911
/mipsel.911
/mpsl.911
/pcc.911
/powerpc-440fp.911
/powerpc.911
/powerppc.911
/ppc.911
/ppc2.911
/ppc440.911
/ppc440fp.911
/root.911
/root32.911
/sh.911
/sh4.911
/sparc.911
/spc.911
/ssh4.911
/x32.911
/x64.911
/x86.911
/x86_32.911
/x86_64.911
/911.arc
/911.arm
/911.arm4
/911.arm4l
/911.arm4t
/911.arm4tl
/911.arm4tll
/911.arm5
/911.arm5l
/911.arm5n
/911.arm6
/911.arm64
/911.arm6l
/911.arm7
/911.arm7l
/911.arm8
/911.armv4
/911.armv4l
/911.armv5l
/911.armv6
/911.armv61
/911.armv6l
/911.armv7l
/911.dbg
/911.exploit
/911.i4
/911.i486
/911.i586
/911.i6
/911.i686
/911.kill
/911.m68
/911.m68k
/911.mips
/911.mips64
/911.mipsel
/911.mpsl
/911.pcc
/911.powerpc
/911.powerpc-440fp
/911.powerppc
/911.ppc
/911.ppc2
/911.ppc440
/911.ppc440fp
/911.root
/911.root32
/911.sh
/911.sh4
/911.sparc
/911.spc
/911.ssh4
/911.x32
/911.x64
/911.x86
/911.x86_32
/911.x86_64
/arc.randy
/arm.randy
/arm4.randy
/arm4l.randy
/arm4t.randy
/arm4tl.randy
/arm4tll.randy
/arm5.randy
/arm5l.randy
/arm5n.randy
/arm6.randy
/arm64.randy
/arm6l.randy
/arm7.randy
/arm7l.randy
/arm8.randy
/armv4.randy
/armv4l.randy
/armv5l.randy
/armv6.randy
/armv61.randy
/armv6l.randy
/armv7l.randy
/dbg.randy
/exploit.randy
/i4.randy
/i486.randy
/i586.randy
/i6.randy
/i686.randy
/kill.randy
/m68.randy
/m68k.randy
/mips.randy
/mips64.randy
/mipsel.randy
/mpsl.randy
/pcc.randy
/powerpc-440fp.randy
/powerpc.randy
/powerppc.randy
/ppc.randy
/ppc2.randy
/ppc440.randy
/ppc440fp.randy
/root.randy
/root32.randy
/sh.randy
/sh4.randy
/sparc.randy
/spc.randy
/ssh4.randy
/x32.randy
/x64.randy
/x86.randy
/x86_32.randy
/x86_64.randy
/randy.arc
/randy.arm
/randy.arm4
/randy.arm4l
/randy.arm4t
/randy.arm4tl
/randy.arm4tll
/randy.arm5
/randy.arm5l
/randy.arm5n
/randy.arm6
/randy.arm64
/randy.arm6l
/randy.arm7
/randy.arm7l
/randy.arm8
/randy.armv4
/randy.armv4l
/randy.armv5l
/randy.armv6
/randy.armv61
/randy.armv6l
/randy.armv7l
/randy.dbg
/randy.exploit
/randy.i4
/randy.i486
/randy.i586
/randy.i6
/randy.i686
/randy.kill
/randy.m68
/randy.m68k
/randy.mips
/randy.mips64
/randy.mipsel
/randy.mpsl
/randy.pcc
/randy.powerpc
/randy.powerpc-440fp
/randy.powerppc
/randy.ppc
/randy.ppc2
/randy.ppc440
/randy.ppc440fp
/randy.root
/randy.root32
/randy.sh
/randy.sh4
/randy.sparc
/randy.spc
/randy.ssh4
/randy.x32
/randy.x64
/randy.x86
/randy.x86_32
/randy.x86_64
/arc.reaper
/arm.reaper
/arm4.reaper
/arm4l.reaper
/arm4t.reaper
/arm4tl.reaper
/arm4tll.reaper
/arm5.reaper
/arm5l.reaper
/arm5n.reaper
/arm6.reaper
/arm64.reaper
/arm6l.reaper
/arm7.reaper
/arm7l.reaper
/arm8.reaper
/armv4.reaper
/armv4l.reaper
/armv5l.reaper
/armv6.reaper
/armv61.reaper
/armv6l.reaper
/armv7l.reaper
/dbg.reaper
/exploit.reaper
/i4.reaper
/i486.reaper
/i586.reaper
/i6.reaper
/i686.reaper
/kill.reaper
/m68.reaper
/m68k.reaper
/mips.reaper
/mips64.reaper
/mipsel.reaper
/mpsl.reaper
/pcc.reaper
/powerpc-440fp.reaper
/powerpc.reaper
/powerppc.reaper
/ppc.reaper
/ppc2.reaper
/ppc440.reaper
/ppc440fp.reaper
/root.reaper
/root32.reaper
/sh.reaper
/sh4.reaper
/sparc.reaper
/spc.reaper
/ssh4.reaper
/x32.reaper
/x64.reaper
/x86.reaper
/x86_32.reaper
/x86_64.reaper
/reaper.arc
/reaper.arm
/reaper.arm4
/reaper.arm4l
/reaper.arm4t
/reaper.arm4tl
/reaper.arm4tll
/reaper.arm5
/reaper.arm5l
/reaper.arm5n
/reaper.arm6
/reaper.arm64
/reaper.arm6l
/reaper.arm7
/reaper.arm7l
/reaper.arm8
/reaper.armv4
/reaper.armv4l
/reaper.armv5l
/reaper.armv6
/reaper.armv61
/reaper.armv6l
/reaper.armv7l
/reaper.dbg
/reaper.exploit
/reaper.i4
/reaper.i486
/reaper.i586
/reaper.i6
/reaper.i686
/reaper.kill
/reaper.m68
/reaper.m68k
/reaper.mips
/reaper.mips64
/reaper.mipsel
/reaper.mpsl
/reaper.pcc
/reaper.powerpc
/reaper.powerpc-440fp
/reaper.powerppc
/reaper.ppc
/reaper.ppc2
/reaper.ppc440
/reaper.ppc440fp
/reaper.root
/reaper.root32
/reaper.sh
/reaper.sh4
/reaper.sparc
/reaper.spc
/reaper.ssh4
/reaper.x32
/reaper.x64
/reaper.x86
/reaper.x86_32
/reaper.x86_64
/arc.uzavssssss
/arm.uzavssssss
/arm4.uzavssssss
/arm4l.uzavssssss
/arm4t.uzavssssss
/arm4tl.uzavssssss
/arm4tll.uzavssssss
/arm5.uzavssssss
/arm5l.uzavssssss
/arm5n.uzavssssss
/arm6.uzavssssss
/arm64.uzavssssss
/arm6l.uzavssssss
/arm7.uzavssssss
/arm7l.uzavssssss
/arm8.uzavssssss
/armv4.uzavssssss
/armv4l.uzavssssss
/armv5l.uzavssssss
/armv6.uzavssssss
/armv61.uzavssssss
/armv6l.uzavssssss
/armv7l.uzavssssss
/dbg.uzavssssss
/exploit.uzavssssss
/i4.uzavssssss
/i486.uzavssssss
/i586.uzavssssss
/i6.uzavssssss
/i686.uzavssssss
/kill.uzavssssss
/m68.uzavssssss
/m68k.uzavssssss
/mips.uzavssssss
/mips64.uzavssssss
/mipsel.uzavssssss
/mpsl.uzavssssss
/pcc.uzavssssss
/powerpc-440fp.uzavssssss
/powerpc.uzavssssss
/powerppc.uzavssssss
/ppc.uzavssssss
/ppc2.uzavssssss
/ppc440.uzavssssss
/ppc440fp.uzavssssss
/root.uzavssssss
/root32.uzavssssss
/sh.uzavssssss
/sh4.uzavssssss
/sparc.uzavssssss
/spc.uzavssssss
/ssh4.uzavssssss
/x32.uzavssssss
/x64.uzavssssss
/x86.uzavssssss
/x86_32.uzavssssss
/x86_64.uzavssssss
/uzavssssss.arc
/uzavssssss.arm
/uzavssssss.arm4
/uzavssssss.arm4l
/uzavssssss.arm4t
/uzavssssss.arm4tl
/uzavssssss.arm4tll
/uzavssssss.arm5
/uzavssssss.arm5l
/uzavssssss.arm5n
/uzavssssss.arm6
/uzavssssss.arm64
/uzavssssss.arm6l
/uzavssssss.arm7
/uzavssssss.arm7l
/uzavssssss.arm8
/uzavssssss.armv4
/uzavssssss.armv4l
/uzavssssss.armv5l
/uzavssssss.armv6
/uzavssssss.armv61
/uzavssssss.armv6l
/uzavssssss.armv7l
/uzavssssss.dbg
/uzavssssss.exploit
/uzavssssss.i4
/uzavssssss.i486
/uzavssssss.i586
/uzavssssss.i6
/uzavssssss.i686
/uzavssssss.kill
/uzavssssss.m68
/uzavssssss.m68k
/uzavssssss.mips
/uzavssssss.mips64
/uzavssssss.mipsel
/uzavssssss.mpsl
/uzavssssss.pcc
/uzavssssss.powerpc
/uzavssssss.powerpc-440fp
/uzavssssss.powerppc
/uzavssssss.ppc
/uzavssssss.ppc2
/uzavssssss.ppc440
/uzavssssss.ppc440fp
/uzavssssss.root
/uzavssssss.root32
/uzavssssss.sh
/uzavssssss.sh4
/uzavssssss.sparc
/uzavssssss.spc
/uzavssssss.ssh4
/uzavssssss.x32
/uzavssssss.x64
/uzavssssss.x86
/uzavssssss.x86_32
/uzavssssss.x86_64

# Reference: https://twitter.com/bad_packets/status/1247019635238526976

19ce033f.ngrok.io

# Reference: https://blog.netlab.360.com/multiple-fiber-routers-are-being-compromised-by-botnets-using-0-day-en/
# Reference: https://otx.alienvault.com/pulse/5e9756518d960bce31a3d029

58680dd9.ngrok.io
6735a55d.ngrok.io
attack.niggers.me
/bignigger

# Reference: https://twitter.com/JayTHL/status/1252971414921056257
# Reference: https://paste.ee/r/SbX3L/0

115.213.223.64:49412
/arc.qazwsxedc
/arm.qazwsxedc
/arm4.qazwsxedc
/arm4l.qazwsxedc
/arm4t.qazwsxedc
/arm4tl.qazwsxedc
/arm4tll.qazwsxedc
/arm5.qazwsxedc
/arm5l.qazwsxedc
/arm5n.qazwsxedc
/arm6.qazwsxedc
/arm64.qazwsxedc
/arm6l.qazwsxedc
/arm7.qazwsxedc
/arm7l.qazwsxedc
/arm8.qazwsxedc
/armv4.qazwsxedc
/armv4l.qazwsxedc
/armv5l.qazwsxedc
/armv6.qazwsxedc
/armv61.qazwsxedc
/armv6l.qazwsxedc
/armv7l.qazwsxedc
/dbg.qazwsxedc
/exploit.qazwsxedc
/i4.qazwsxedc
/i486.qazwsxedc
/i586.qazwsxedc
/i6.qazwsxedc
/i686.qazwsxedc
/kill.qazwsxedc
/m68.qazwsxedc
/m68k.qazwsxedc
/mips.qazwsxedc
/mips64.qazwsxedc
/mipsel.qazwsxedc
/mpsl.qazwsxedc
/pcc.qazwsxedc
/powerpc-440fp.qazwsxedc
/powerpc.qazwsxedc
/powerppc.qazwsxedc
/ppc.qazwsxedc
/ppc2.qazwsxedc
/ppc440.qazwsxedc
/ppc440fp.qazwsxedc
/root.qazwsxedc
/root32.qazwsxedc
/sh.qazwsxedc
/sh4.qazwsxedc
/sparc.qazwsxedc
/spc.qazwsxedc
/ssh4.qazwsxedc
/x32.qazwsxedc
/x64.qazwsxedc
/x86.qazwsxedc
/x86_32.qazwsxedc
/x86_64.qazwsxedc
/qazwsxedc.arc
/qazwsxedc.arm
/qazwsxedc.arm4
/qazwsxedc.arm4l
/qazwsxedc.arm4t
/qazwsxedc.arm4tl
/qazwsxedc.arm4tll
/qazwsxedc.arm5
/qazwsxedc.arm5l
/qazwsxedc.arm5n
/qazwsxedc.arm6
/qazwsxedc.arm64
/qazwsxedc.arm6l
/qazwsxedc.arm7
/qazwsxedc.arm7l
/qazwsxedc.arm8
/qazwsxedc.armv4
/qazwsxedc.armv4l
/qazwsxedc.armv5l
/qazwsxedc.armv6
/qazwsxedc.armv61
/qazwsxedc.armv6l
/qazwsxedc.armv7l
/qazwsxedc.dbg
/qazwsxedc.exploit
/qazwsxedc.i4
/qazwsxedc.i486
/qazwsxedc.i586
/qazwsxedc.i6
/qazwsxedc.i686
/qazwsxedc.kill
/qazwsxedc.m68
/qazwsxedc.m68k
/qazwsxedc.mips
/qazwsxedc.mips64
/qazwsxedc.mipsel
/qazwsxedc.mpsl
/qazwsxedc.pcc
/qazwsxedc.powerpc
/qazwsxedc.powerpc-440fp
/qazwsxedc.powerppc
/qazwsxedc.ppc
/qazwsxedc.ppc2
/qazwsxedc.ppc440
/qazwsxedc.ppc440fp
/qazwsxedc.root
/qazwsxedc.root32
/qazwsxedc.sh
/qazwsxedc.sh4
/qazwsxedc.sparc
/qazwsxedc.spc
/qazwsxedc.ssh4
/qazwsxedc.x32
/qazwsxedc.x64
/qazwsxedc.x86
/qazwsxedc.x86_32
/qazwsxedc.x86_64
/arc.potnet
/arm.potnet
/arm4.potnet
/arm4l.potnet
/arm4t.potnet
/arm4tl.potnet
/arm4tll.potnet
/arm5.potnet
/arm5l.potnet
/arm5n.potnet
/arm6.potnet
/arm64.potnet
/arm6l.potnet
/arm7.potnet
/arm7l.potnet
/arm8.potnet
/armv4.potnet
/armv4l.potnet
/armv5l.potnet
/armv6.potnet
/armv61.potnet
/armv6l.potnet
/armv7l.potnet
/dbg.potnet
/exploit.potnet
/i4.potnet
/i486.potnet
/i586.potnet
/i6.potnet
/i686.potnet
/kill.potnet
/m68.potnet
/m68k.potnet
/mips.potnet
/mips64.potnet
/mipsel.potnet
/mpsl.potnet
/pcc.potnet
/powerpc-440fp.potnet
/powerpc.potnet
/powerppc.potnet
/ppc.potnet
/ppc2.potnet
/ppc440.potnet
/ppc440fp.potnet
/root.potnet
/root32.potnet
/sh.potnet
/sh4.potnet
/sparc.potnet
/spc.potnet
/ssh4.potnet
/x32.potnet
/x64.potnet
/x86.potnet
/x86_32.potnet
/x86_64.potnet
/potnet.arc
/potnet.arm
/potnet.arm4
/potnet.arm4l
/potnet.arm4t
/potnet.arm4tl
/potnet.arm4tll
/potnet.arm5
/potnet.arm5l
/potnet.arm5n
/potnet.arm6
/potnet.arm64
/potnet.arm6l
/potnet.arm7
/potnet.arm7l
/potnet.arm8
/potnet.armv4
/potnet.armv4l
/potnet.armv5l
/potnet.armv6
/potnet.armv61
/potnet.armv6l
/potnet.armv7l
/potnet.dbg
/potnet.exploit
/potnet.i4
/potnet.i486
/potnet.i586
/potnet.i6
/potnet.i686
/potnet.kill
/potnet.m68
/potnet.m68k
/potnet.mips
/potnet.mips64
/potnet.mipsel
/potnet.mpsl
/potnet.pcc
/potnet.powerpc
/potnet.powerpc-440fp
/potnet.powerppc
/potnet.ppc
/potnet.ppc2
/potnet.ppc440
/potnet.ppc440fp
/potnet.root
/potnet.root32
/potnet.sh
/potnet.sh4
/potnet.sparc
/potnet.spc
/potnet.ssh4
/potnet.x32
/potnet.x64
/potnet.x86
/potnet.x86_32
/potnet.x86_64

# Reference: https://twitter.com/bad_packets/status/1253046638618177536

/arc.JSEBNAWKNDWANDAWD
/arm.JSEBNAWKNDWANDAWD
/arm4.JSEBNAWKNDWANDAWD
/arm4l.JSEBNAWKNDWANDAWD
/arm4t.JSEBNAWKNDWANDAWD
/arm4tl.JSEBNAWKNDWANDAWD
/arm4tll.JSEBNAWKNDWANDAWD
/arm5.JSEBNAWKNDWANDAWD
/arm5l.JSEBNAWKNDWANDAWD
/arm5n.JSEBNAWKNDWANDAWD
/arm6.JSEBNAWKNDWANDAWD
/arm64.JSEBNAWKNDWANDAWD
/arm6l.JSEBNAWKNDWANDAWD
/arm7.JSEBNAWKNDWANDAWD
/arm7l.JSEBNAWKNDWANDAWD
/arm8.JSEBNAWKNDWANDAWD
/armv4.JSEBNAWKNDWANDAWD
/armv4l.JSEBNAWKNDWANDAWD
/armv5l.JSEBNAWKNDWANDAWD
/armv6.JSEBNAWKNDWANDAWD
/armv61.JSEBNAWKNDWANDAWD
/armv6l.JSEBNAWKNDWANDAWD
/armv7l.JSEBNAWKNDWANDAWD
/dbg.JSEBNAWKNDWANDAWD
/exploit.JSEBNAWKNDWANDAWD
/i4.JSEBNAWKNDWANDAWD
/i486.JSEBNAWKNDWANDAWD
/i586.JSEBNAWKNDWANDAWD
/i6.JSEBNAWKNDWANDAWD
/i686.JSEBNAWKNDWANDAWD
/kill.JSEBNAWKNDWANDAWD
/m68.JSEBNAWKNDWANDAWD
/m68k.JSEBNAWKNDWANDAWD
/mips.JSEBNAWKNDWANDAWD
/mips64.JSEBNAWKNDWANDAWD
/mipsel.JSEBNAWKNDWANDAWD
/mpsl.JSEBNAWKNDWANDAWD
/pcc.JSEBNAWKNDWANDAWD
/powerpc-440fp.JSEBNAWKNDWANDAWD
/powerpc.JSEBNAWKNDWANDAWD
/powerppc.JSEBNAWKNDWANDAWD
/ppc.JSEBNAWKNDWANDAWD
/ppc2.JSEBNAWKNDWANDAWD
/ppc440.JSEBNAWKNDWANDAWD
/ppc440fp.JSEBNAWKNDWANDAWD
/root.JSEBNAWKNDWANDAWD
/root32.JSEBNAWKNDWANDAWD
/sh.JSEBNAWKNDWANDAWD
/sh4.JSEBNAWKNDWANDAWD
/sparc.JSEBNAWKNDWANDAWD
/spc.JSEBNAWKNDWANDAWD
/ssh4.JSEBNAWKNDWANDAWD
/x32.JSEBNAWKNDWANDAWD
/x64.JSEBNAWKNDWANDAWD
/x86.JSEBNAWKNDWANDAWD
/x86_32.JSEBNAWKNDWANDAWD
/x86_64.JSEBNAWKNDWANDAWD
/JSEBNAWKNDWANDAWD.arc
/JSEBNAWKNDWANDAWD.arm
/JSEBNAWKNDWANDAWD.arm4
/JSEBNAWKNDWANDAWD.arm4l
/JSEBNAWKNDWANDAWD.arm4t
/JSEBNAWKNDWANDAWD.arm4tl
/JSEBNAWKNDWANDAWD.arm4tll
/JSEBNAWKNDWANDAWD.arm5
/JSEBNAWKNDWANDAWD.arm5l
/JSEBNAWKNDWANDAWD.arm5n
/JSEBNAWKNDWANDAWD.arm6
/JSEBNAWKNDWANDAWD.arm64
/JSEBNAWKNDWANDAWD.arm6l
/JSEBNAWKNDWANDAWD.arm7
/JSEBNAWKNDWANDAWD.arm7l
/JSEBNAWKNDWANDAWD.arm8
/JSEBNAWKNDWANDAWD.armv4
/JSEBNAWKNDWANDAWD.armv4l
/JSEBNAWKNDWANDAWD.armv5l
/JSEBNAWKNDWANDAWD.armv6
/JSEBNAWKNDWANDAWD.armv61
/JSEBNAWKNDWANDAWD.armv6l
/JSEBNAWKNDWANDAWD.armv7l
/JSEBNAWKNDWANDAWD.dbg
/JSEBNAWKNDWANDAWD.exploit
/JSEBNAWKNDWANDAWD.i4
/JSEBNAWKNDWANDAWD.i486
/JSEBNAWKNDWANDAWD.i586
/JSEBNAWKNDWANDAWD.i6
/JSEBNAWKNDWANDAWD.i686
/JSEBNAWKNDWANDAWD.kill
/JSEBNAWKNDWANDAWD.m68
/JSEBNAWKNDWANDAWD.m68k
/JSEBNAWKNDWANDAWD.mips
/JSEBNAWKNDWANDAWD.mips64
/JSEBNAWKNDWANDAWD.mipsel
/JSEBNAWKNDWANDAWD.mpsl
/JSEBNAWKNDWANDAWD.pcc
/JSEBNAWKNDWANDAWD.powerpc
/JSEBNAWKNDWANDAWD.powerpc-440fp
/JSEBNAWKNDWANDAWD.powerppc
/JSEBNAWKNDWANDAWD.ppc
/JSEBNAWKNDWANDAWD.ppc2
/JSEBNAWKNDWANDAWD.ppc440
/JSEBNAWKNDWANDAWD.ppc440fp
/JSEBNAWKNDWANDAWD.root
/JSEBNAWKNDWANDAWD.root32
/JSEBNAWKNDWANDAWD.sh
/JSEBNAWKNDWANDAWD.sh4
/JSEBNAWKNDWANDAWD.sparc
/JSEBNAWKNDWANDAWD.spc
/JSEBNAWKNDWANDAWD.ssh4
/JSEBNAWKNDWANDAWD.x32
/JSEBNAWKNDWANDAWD.x64
/JSEBNAWKNDWANDAWD.x86
/JSEBNAWKNDWANDAWD.x86_32
/JSEBNAWKNDWANDAWD.x86_64

# Reference: https://twitter.com/JayTHL/status/1253322840390144000
# Reference: https://paste.ee/r/DqJwR/0

/arc.huntforx86bins
/arm.huntforx86bins
/arm4.huntforx86bins
/arm4l.huntforx86bins
/arm4t.huntforx86bins
/arm4tl.huntforx86bins
/arm4tll.huntforx86bins
/arm5.huntforx86bins
/arm5l.huntforx86bins
/arm5n.huntforx86bins
/arm6.huntforx86bins
/arm64.huntforx86bins
/arm6l.huntforx86bins
/arm7.huntforx86bins
/arm7l.huntforx86bins
/arm8.huntforx86bins
/armv4.huntforx86bins
/armv4l.huntforx86bins
/armv5l.huntforx86bins
/armv6.huntforx86bins
/armv61.huntforx86bins
/armv6l.huntforx86bins
/armv7l.huntforx86bins
/dbg.huntforx86bins
/exploit.huntforx86bins
/i4.huntforx86bins
/i486.huntforx86bins
/i586.huntforx86bins
/i6.huntforx86bins
/i686.huntforx86bins
/kill.huntforx86bins
/m68.huntforx86bins
/m68k.huntforx86bins
/mips.huntforx86bins
/mips64.huntforx86bins
/mipsel.huntforx86bins
/mpsl.huntforx86bins
/pcc.huntforx86bins
/powerpc-440fp.huntforx86bins
/powerpc.huntforx86bins
/powerppc.huntforx86bins
/ppc.huntforx86bins
/ppc2.huntforx86bins
/ppc440.huntforx86bins
/ppc440fp.huntforx86bins
/root.huntforx86bins
/root32.huntforx86bins
/sh.huntforx86bins
/sh4.huntforx86bins
/sparc.huntforx86bins
/spc.huntforx86bins
/ssh4.huntforx86bins
/x32.huntforx86bins
/x64.huntforx86bins
/x86.huntforx86bins
/x86_32.huntforx86bins
/x86_64.huntforx86bins
/huntforx86bins.arc
/huntforx86bins.arm
/huntforx86bins.arm4
/huntforx86bins.arm4l
/huntforx86bins.arm4t
/huntforx86bins.arm4tl
/huntforx86bins.arm4tll
/huntforx86bins.arm5
/huntforx86bins.arm5l
/huntforx86bins.arm5n
/huntforx86bins.arm6
/huntforx86bins.arm64
/huntforx86bins.arm6l
/huntforx86bins.arm7
/huntforx86bins.arm7l
/huntforx86bins.arm8
/huntforx86bins.armv4
/huntforx86bins.armv4l
/huntforx86bins.armv5l
/huntforx86bins.armv6
/huntforx86bins.armv61
/huntforx86bins.armv6l
/huntforx86bins.armv7l
/huntforx86bins.dbg
/huntforx86bins.exploit
/huntforx86bins.i4
/huntforx86bins.i486
/huntforx86bins.i586
/huntforx86bins.i6
/huntforx86bins.i686
/huntforx86bins.kill
/huntforx86bins.m68
/huntforx86bins.m68k
/huntforx86bins.mips
/huntforx86bins.mips64
/huntforx86bins.mipsel
/huntforx86bins.mpsl
/huntforx86bins.pcc
/huntforx86bins.powerpc
/huntforx86bins.powerpc-440fp
/huntforx86bins.powerppc
/huntforx86bins.ppc
/huntforx86bins.ppc2
/huntforx86bins.ppc440
/huntforx86bins.ppc440fp
/huntforx86bins.root
/huntforx86bins.root32
/huntforx86bins.sh
/huntforx86bins.sh4
/huntforx86bins.sparc
/huntforx86bins.spc
/huntforx86bins.ssh4
/huntforx86bins.x32
/huntforx86bins.x64
/huntforx86bins.x86
/huntforx86bins.x86_32
/huntforx86bins.x86_64
/arc.skid
/arm.skid
/arm4.skid
/arm4l.skid
/arm4t.skid
/arm4tl.skid
/arm4tll.skid
/arm5.skid
/arm5l.skid
/arm5n.skid
/arm6.skid
/arm64.skid
/arm6l.skid
/arm7.skid
/arm7l.skid
/arm8.skid
/armv4.skid
/armv4l.skid
/armv5l.skid
/armv6.skid
/armv61.skid
/armv6l.skid
/armv7l.skid
/dbg.skid
/exploit.skid
/i4.skid
/i486.skid
/i586.skid
/i6.skid
/i686.skid
/kill.skid
/m68.skid
/m68k.skid
/mips.skid
/mips64.skid
/mipsel.skid
/mpsl.skid
/pcc.skid
/powerpc-440fp.skid
/powerpc.skid
/powerppc.skid
/ppc.skid
/ppc2.skid
/ppc440.skid
/ppc440fp.skid
/root.skid
/root32.skid
/sh.skid
/sh4.skid
/sparc.skid
/spc.skid
/ssh4.skid
/x32.skid
/x64.skid
/x86.skid
/x86_32.skid
/x86_64.skid
/skid.arc
/skid.arm
/skid.arm4
/skid.arm4l
/skid.arm4t
/skid.arm4tl
/skid.arm4tll
/skid.arm5
/skid.arm5l
/skid.arm5n
/skid.arm6
/skid.arm64
/skid.arm6l
/skid.arm7
/skid.arm7l
/skid.arm8
/skid.armv4
/skid.armv4l
/skid.armv5l
/skid.armv6
/skid.armv61
/skid.armv6l
/skid.armv7l
/skid.dbg
/skid.exploit
/skid.i4
/skid.i486
/skid.i586
/skid.i6
/skid.i686
/skid.kill
/skid.m68
/skid.m68k
/skid.mips
/skid.mips64
/skid.mipsel
/skid.mpsl
/skid.pcc
/skid.powerpc
/skid.powerpc-440fp
/skid.powerppc
/skid.ppc
/skid.ppc2
/skid.ppc440
/skid.ppc440fp
/skid.root
/skid.root32
/skid.sh
/skid.sh4
/skid.sparc
/skid.spc
/skid.ssh4
/skid.x32
/skid.x64
/skid.x86
/skid.x86_32
/skid.x86_64

# Reference: https://twitter.com/bad_packets/status/1253419924980068352

/rxrg

# Reference: https://twitter.com/0xrb/status/1254081736935276544

81.17.16.122:42069
/arc.Antisocial
/arm.Antisocial
/arm4.Antisocial
/arm4l.Antisocial
/arm4t.Antisocial
/arm4tl.Antisocial
/arm4tll.Antisocial
/arm5.Antisocial
/arm5l.Antisocial
/arm5n.Antisocial
/arm6.Antisocial
/arm64.Antisocial
/arm6l.Antisocial
/arm7.Antisocial
/arm7l.Antisocial
/arm8.Antisocial
/armv4.Antisocial
/armv4l.Antisocial
/armv5l.Antisocial
/armv6.Antisocial
/armv61.Antisocial
/armv6l.Antisocial
/armv7l.Antisocial
/dbg.Antisocial
/exploit.Antisocial
/i4.Antisocial
/i486.Antisocial
/i586.Antisocial
/i6.Antisocial
/i686.Antisocial
/kill.Antisocial
/m68.Antisocial
/m68k.Antisocial
/mips.Antisocial
/mips64.Antisocial
/mipsel.Antisocial
/mpsl.Antisocial
/pcc.Antisocial
/powerpc-440fp.Antisocial
/powerpc.Antisocial
/powerppc.Antisocial
/ppc.Antisocial
/ppc2.Antisocial
/ppc440.Antisocial
/ppc440fp.Antisocial
/root.Antisocial
/root32.Antisocial
/sh.Antisocial
/sh4.Antisocial
/sparc.Antisocial
/spc.Antisocial
/ssh4.Antisocial
/x32.Antisocial
/x64.Antisocial
/x86.Antisocial
/x86_32.Antisocial
/x86_64.Antisocial
/Antisocial.arc
/Antisocial.arm
/Antisocial.arm4
/Antisocial.arm4l
/Antisocial.arm4t
/Antisocial.arm4tl
/Antisocial.arm4tll
/Antisocial.arm5
/Antisocial.arm5l
/Antisocial.arm5n
/Antisocial.arm6
/Antisocial.arm64
/Antisocial.arm6l
/Antisocial.arm7
/Antisocial.arm7l
/Antisocial.arm8
/Antisocial.armv4
/Antisocial.armv4l
/Antisocial.armv5l
/Antisocial.armv6
/Antisocial.armv61
/Antisocial.armv6l
/Antisocial.armv7l
/Antisocial.dbg
/Antisocial.exploit
/Antisocial.i4
/Antisocial.i486
/Antisocial.i586
/Antisocial.i6
/Antisocial.i686
/Antisocial.kill
/Antisocial.m68
/Antisocial.m68k
/Antisocial.mips
/Antisocial.mips64
/Antisocial.mipsel
/Antisocial.mpsl
/Antisocial.pcc
/Antisocial.powerpc
/Antisocial.powerpc-440fp
/Antisocial.powerppc
/Antisocial.ppc
/Antisocial.ppc2
/Antisocial.ppc440
/Antisocial.ppc440fp
/Antisocial.root
/Antisocial.root32
/Antisocial.sh
/Antisocial.sh4
/Antisocial.sparc
/Antisocial.spc
/Antisocial.ssh4
/Antisocial.x32
/Antisocial.x64
/Antisocial.x86
/Antisocial.x86_32
/Antisocial.x86_64
/arc.neiru
/arm.neiru
/arm4.neiru
/arm4l.neiru
/arm4t.neiru
/arm4tl.neiru
/arm4tll.neiru
/arm5.neiru
/arm5l.neiru
/arm5n.neiru
/arm6.neiru
/arm64.neiru
/arm6l.neiru
/arm7.neiru
/arm7l.neiru
/arm8.neiru
/armv4.neiru
/armv4l.neiru
/armv5l.neiru
/armv6.neiru
/armv61.neiru
/armv6l.neiru
/armv7l.neiru
/dbg.neiru
/exploit.neiru
/i4.neiru
/i486.neiru
/i586.neiru
/i6.neiru
/i686.neiru
/kill.neiru
/m68.neiru
/m68k.neiru
/mips.neiru
/mips64.neiru
/mipsel.neiru
/mpsl.neiru
/pcc.neiru
/powerpc-440fp.neiru
/powerpc.neiru
/powerppc.neiru
/ppc.neiru
/ppc2.neiru
/ppc440.neiru
/ppc440fp.neiru
/root.neiru
/root32.neiru
/sh.neiru
/sh4.neiru
/sparc.neiru
/spc.neiru
/ssh4.neiru
/x32.neiru
/x64.neiru
/x86.neiru
/x86_32.neiru
/x86_64.neiru
/neiru.arc
/neiru.arm
/neiru.arm4
/neiru.arm4l
/neiru.arm4t
/neiru.arm4tl
/neiru.arm4tll
/neiru.arm5
/neiru.arm5l
/neiru.arm5n
/neiru.arm6
/neiru.arm64
/neiru.arm6l
/neiru.arm7
/neiru.arm7l
/neiru.arm8
/neiru.armv4
/neiru.armv4l
/neiru.armv5l
/neiru.armv6
/neiru.armv61
/neiru.armv6l
/neiru.armv7l
/neiru.dbg
/neiru.exploit
/neiru.i4
/neiru.i486
/neiru.i586
/neiru.i6
/neiru.i686
/neiru.kill
/neiru.m68
/neiru.m68k
/neiru.mips
/neiru.mips64
/neiru.mipsel
/neiru.mpsl
/neiru.pcc
/neiru.powerpc
/neiru.powerpc-440fp
/neiru.powerppc
/neiru.ppc
/neiru.ppc2
/neiru.ppc440
/neiru.ppc440fp
/neiru.root
/neiru.root32
/neiru.sh
/neiru.sh4
/neiru.sparc
/neiru.spc
/neiru.ssh4
/neiru.x32
/neiru.x64
/neiru.x86
/neiru.x86_32
/neiru.x86_64
/arc.php64
/arm.php64
/arm4.php64
/arm4l.php64
/arm4t.php64
/arm4tl.php64
/arm4tll.php64
/arm5.php64
/arm5l.php64
/arm5n.php64
/arm6.php64
/arm64.php64
/arm6l.php64
/arm7.php64
/arm7l.php64
/arm8.php64
/armv4.php64
/armv4l.php64
/armv5l.php64
/armv6.php64
/armv61.php64
/armv6l.php64
/armv7l.php64
/dbg.php64
/exploit.php64
/i4.php64
/i486.php64
/i586.php64
/i6.php64
/i686.php64
/kill.php64
/m68.php64
/m68k.php64
/mips.php64
/mips64.php64
/mipsel.php64
/mpsl.php64
/pcc.php64
/powerpc-440fp.php64
/powerpc.php64
/powerppc.php64
/ppc.php64
/ppc2.php64
/ppc440.php64
/ppc440fp.php64
/root.php64
/root32.php64
/sh.php64
/sh4.php64
/sparc.php64
/spc.php64
/ssh4.php64
/x32.php64
/x64.php64
/x86.php64
/x86_32.php64
/x86_64.php64
/php64.arc
/php64.arm
/php64.arm4
/php64.arm4l
/php64.arm4t
/php64.arm4tl
/php64.arm4tll
/php64.arm5
/php64.arm5l
/php64.arm5n
/php64.arm6
/php64.arm64
/php64.arm6l
/php64.arm7
/php64.arm7l
/php64.arm8
/php64.armv4
/php64.armv4l
/php64.armv5l
/php64.armv6
/php64.armv61
/php64.armv6l
/php64.armv7l
/php64.dbg
/php64.exploit
/php64.i4
/php64.i486
/php64.i586
/php64.i6
/php64.i686
/php64.kill
/php64.m68
/php64.m68k
/php64.mips
/php64.mips64
/php64.mipsel
/php64.mpsl
/php64.pcc
/php64.powerpc
/php64.powerpc-440fp
/php64.powerppc
/php64.ppc
/php64.ppc2
/php64.ppc440
/php64.ppc440fp
/php64.root
/php64.root32
/php64.sh
/php64.sh4
/php64.sparc
/php64.spc
/php64.ssh4
/php64.x32
/php64.x64
/php64.x86
/php64.x86_32
/php64.x86_64
/Anti_Bins/
/luoqxbocmkxnexy/
/x0ox0ox0oDefault/

# Reference: https://www.virustotal.com/gui/ip-address/194.180.224.249/relations

/32nigger

# Reference: https://paste.ee/r/a9t73/0

/arc.LOTMOT
/arm.LOTMOT
/arm4.LOTMOT
/arm4l.LOTMOT
/arm4t.LOTMOT
/arm4tl.LOTMOT
/arm4tll.LOTMOT
/arm5.LOTMOT
/arm5l.LOTMOT
/arm5n.LOTMOT
/arm6.LOTMOT
/arm64.LOTMOT
/arm6l.LOTMOT
/arm7.LOTMOT
/arm7l.LOTMOT
/arm8.LOTMOT
/armv4.LOTMOT
/armv4l.LOTMOT
/armv5l.LOTMOT
/armv6.LOTMOT
/armv61.LOTMOT
/armv6l.LOTMOT
/armv7l.LOTMOT
/dbg.LOTMOT
/exploit.LOTMOT
/i4.LOTMOT
/i486.LOTMOT
/i586.LOTMOT
/i6.LOTMOT
/i686.LOTMOT
/kill.LOTMOT
/m68.LOTMOT
/m68k.LOTMOT
/mips.LOTMOT
/mips64.LOTMOT
/mipsel.LOTMOT
/mpsl.LOTMOT
/pcc.LOTMOT
/powerpc-440fp.LOTMOT
/powerpc.LOTMOT
/powerppc.LOTMOT
/ppc.LOTMOT
/ppc2.LOTMOT
/ppc440.LOTMOT
/ppc440fp.LOTMOT
/root.LOTMOT
/root32.LOTMOT
/sh.LOTMOT
/sh4.LOTMOT
/sparc.LOTMOT
/spc.LOTMOT
/ssh4.LOTMOT
/x32.LOTMOT
/x64.LOTMOT
/x86.LOTMOT
/x86_32.LOTMOT
/x86_64.LOTMOT
/LOTMOT.arc
/LOTMOT.arm
/LOTMOT.arm4
/LOTMOT.arm4l
/LOTMOT.arm4t
/LOTMOT.arm4tl
/LOTMOT.arm4tll
/LOTMOT.arm5
/LOTMOT.arm5l
/LOTMOT.arm5n
/LOTMOT.arm6
/LOTMOT.arm64
/LOTMOT.arm6l
/LOTMOT.arm7
/LOTMOT.arm7l
/LOTMOT.arm8
/LOTMOT.armv4
/LOTMOT.armv4l
/LOTMOT.armv5l
/LOTMOT.armv6
/LOTMOT.armv61
/LOTMOT.armv6l
/LOTMOT.armv7l
/LOTMOT.dbg
/LOTMOT.exploit
/LOTMOT.i4
/LOTMOT.i486
/LOTMOT.i586
/LOTMOT.i6
/LOTMOT.i686
/LOTMOT.kill
/LOTMOT.m68
/LOTMOT.m68k
/LOTMOT.mips
/LOTMOT.mips64
/LOTMOT.mipsel
/LOTMOT.mpsl
/LOTMOT.pcc
/LOTMOT.powerpc
/LOTMOT.powerpc-440fp
/LOTMOT.powerppc
/LOTMOT.ppc
/LOTMOT.ppc2
/LOTMOT.ppc440
/LOTMOT.ppc440fp
/LOTMOT.root
/LOTMOT.root32
/LOTMOT.sh
/LOTMOT.sh4
/LOTMOT.sparc
/LOTMOT.spc
/LOTMOT.ssh4
/LOTMOT.x32
/LOTMOT.x64
/LOTMOT.x86
/LOTMOT.x86_32
/LOTMOT.x86_64

# Reference: https://www.virustotal.com/gui/file/2897bd2e565b25b70040a521fad93aec5c71424b70d2789c2b98149f3fe80603/detection

185.172.110.224:777

# Reference: https://twitter.com/bad_packets/status/1255586292928147456

/arc.dvrbot
/arm.dvrbot
/arm4.dvrbot
/arm4l.dvrbot
/arm4t.dvrbot
/arm4tl.dvrbot
/arm4tll.dvrbot
/arm5.dvrbot
/arm5l.dvrbot
/arm5n.dvrbot
/arm6.dvrbot
/arm64.dvrbot
/arm6l.dvrbot
/arm7.dvrbot
/arm7l.dvrbot
/arm8.dvrbot
/armv4.dvrbot
/armv4l.dvrbot
/armv5l.dvrbot
/armv6.dvrbot
/armv61.dvrbot
/armv6l.dvrbot
/armv7l.dvrbot
/dbg.dvrbot
/exploit.dvrbot
/i4.dvrbot
/i486.dvrbot
/i586.dvrbot
/i6.dvrbot
/i686.dvrbot
/kill.dvrbot
/m68.dvrbot
/m68k.dvrbot
/mips.dvrbot
/mips64.dvrbot
/mipsel.dvrbot
/mpsl.dvrbot
/pcc.dvrbot
/powerpc-440fp.dvrbot
/powerpc.dvrbot
/powerppc.dvrbot
/ppc.dvrbot
/ppc2.dvrbot
/ppc440.dvrbot
/ppc440fp.dvrbot
/root.dvrbot
/root32.dvrbot
/sh.dvrbot
/sh4.dvrbot
/sparc.dvrbot
/spc.dvrbot
/ssh4.dvrbot
/x32.dvrbot
/x64.dvrbot
/x86.dvrbot
/x86_32.dvrbot
/x86_64.dvrbot
/dvrbot.arc
/dvrbot.arm
/dvrbot.arm4
/dvrbot.arm4l
/dvrbot.arm4t
/dvrbot.arm4tl
/dvrbot.arm4tll
/dvrbot.arm5
/dvrbot.arm5l
/dvrbot.arm5n
/dvrbot.arm6
/dvrbot.arm64
/dvrbot.arm6l
/dvrbot.arm7
/dvrbot.arm7l
/dvrbot.arm8
/dvrbot.armv4
/dvrbot.armv4l
/dvrbot.armv5l
/dvrbot.armv6
/dvrbot.armv61
/dvrbot.armv6l
/dvrbot.armv7l
/dvrbot.dbg
/dvrbot.exploit
/dvrbot.i4
/dvrbot.i486
/dvrbot.i586
/dvrbot.i6
/dvrbot.i686
/dvrbot.kill
/dvrbot.m68
/dvrbot.m68k
/dvrbot.mips
/dvrbot.mips64
/dvrbot.mipsel
/dvrbot.mpsl
/dvrbot.pcc
/dvrbot.powerpc
/dvrbot.powerpc-440fp
/dvrbot.powerppc
/dvrbot.ppc
/dvrbot.ppc2
/dvrbot.ppc440
/dvrbot.ppc440fp
/dvrbot.root
/dvrbot.root32
/dvrbot.sh
/dvrbot.sh4
/dvrbot.sparc
/dvrbot.spc
/dvrbot.ssh4
/dvrbot.x32
/dvrbot.x64
/dvrbot.x86
/dvrbot.x86_32
/dvrbot.x86_64

# Reference: https://twitter.com/0xrb/status/1255799824739217408

198.54.113.244:44783
/0xxx0xxxasdajshdajhkgdja/
/arc.Sa0as
/arm.Sa0as
/arm4.Sa0as
/arm4l.Sa0as
/arm4t.Sa0as
/arm4tl.Sa0as
/arm4tll.Sa0as
/arm5.Sa0as
/arm5l.Sa0as
/arm5n.Sa0as
/arm6.Sa0as
/arm64.Sa0as
/arm6l.Sa0as
/arm7.Sa0as
/arm7l.Sa0as
/arm8.Sa0as
/armv4.Sa0as
/armv4l.Sa0as
/armv5l.Sa0as
/armv6.Sa0as
/armv61.Sa0as
/armv6l.Sa0as
/armv7l.Sa0as
/dbg.Sa0as
/exploit.Sa0as
/i4.Sa0as
/i486.Sa0as
/i586.Sa0as
/i6.Sa0as
/i686.Sa0as
/kill.Sa0as
/m68.Sa0as
/m68k.Sa0as
/mips.Sa0as
/mips64.Sa0as
/mipsel.Sa0as
/mpsl.Sa0as
/pcc.Sa0as
/powerpc-440fp.Sa0as
/powerpc.Sa0as
/powerppc.Sa0as
/ppc.Sa0as
/ppc2.Sa0as
/ppc440.Sa0as
/ppc440fp.Sa0as
/root.Sa0as
/root32.Sa0as
/sh.Sa0as
/sh4.Sa0as
/sparc.Sa0as
/spc.Sa0as
/ssh4.Sa0as
/x32.Sa0as
/x64.Sa0as
/x86.Sa0as
/x86_32.Sa0as
/x86_64.Sa0as
/Sa0as.arc
/Sa0as.arm
/Sa0as.arm4
/Sa0as.arm4l
/Sa0as.arm4t
/Sa0as.arm4tl
/Sa0as.arm4tll
/Sa0as.arm5
/Sa0as.arm5l
/Sa0as.arm5n
/Sa0as.arm6
/Sa0as.arm64
/Sa0as.arm6l
/Sa0as.arm7
/Sa0as.arm7l
/Sa0as.arm8
/Sa0as.armv4
/Sa0as.armv4l
/Sa0as.armv5l
/Sa0as.armv6
/Sa0as.armv61
/Sa0as.armv6l
/Sa0as.armv7l
/Sa0as.dbg
/Sa0as.exploit
/Sa0as.i4
/Sa0as.i486
/Sa0as.i586
/Sa0as.i6
/Sa0as.i686
/Sa0as.kill
/Sa0as.m68
/Sa0as.m68k
/Sa0as.mips
/Sa0as.mips64
/Sa0as.mipsel
/Sa0as.mpsl
/Sa0as.pcc
/Sa0as.powerpc
/Sa0as.powerpc-440fp
/Sa0as.powerppc
/Sa0as.ppc
/Sa0as.ppc2
/Sa0as.ppc440
/Sa0as.ppc440fp
/Sa0as.root
/Sa0as.root32
/Sa0as.sh
/Sa0as.sh4
/Sa0as.sparc
/Sa0as.spc
/Sa0as.ssh4
/Sa0as.x32
/Sa0as.x64
/Sa0as.x86
/Sa0as.x86_32
/Sa0as.x86_64
/arc.shoppings
/arm.shoppings
/arm4.shoppings
/arm4l.shoppings
/arm4t.shoppings
/arm4tl.shoppings
/arm4tll.shoppings
/arm5.shoppings
/arm5l.shoppings
/arm5n.shoppings
/arm6.shoppings
/arm64.shoppings
/arm6l.shoppings
/arm7.shoppings
/arm7l.shoppings
/arm8.shoppings
/armv4.shoppings
/armv4l.shoppings
/armv5l.shoppings
/armv6.shoppings
/armv61.shoppings
/armv6l.shoppings
/armv7l.shoppings
/dbg.shoppings
/exploit.shoppings
/i4.shoppings
/i486.shoppings
/i586.shoppings
/i6.shoppings
/i686.shoppings
/kill.shoppings
/m68.shoppings
/m68k.shoppings
/mips.shoppings
/mips64.shoppings
/mipsel.shoppings
/mpsl.shoppings
/pcc.shoppings
/powerpc-440fp.shoppings
/powerpc.shoppings
/powerppc.shoppings
/ppc.shoppings
/ppc2.shoppings
/ppc440.shoppings
/ppc440fp.shoppings
/root.shoppings
/root32.shoppings
/sh.shoppings
/sh4.shoppings
/sparc.shoppings
/spc.shoppings
/ssh4.shoppings
/x32.shoppings
/x64.shoppings
/x86.shoppings
/x86_32.shoppings
/x86_64.shoppings
/shoppings.arc
/shoppings.arm
/shoppings.arm4
/shoppings.arm4l
/shoppings.arm4t
/shoppings.arm4tl
/shoppings.arm4tll
/shoppings.arm5
/shoppings.arm5l
/shoppings.arm5n
/shoppings.arm6
/shoppings.arm64
/shoppings.arm6l
/shoppings.arm7
/shoppings.arm7l
/shoppings.arm8
/shoppings.armv4
/shoppings.armv4l
/shoppings.armv5l
/shoppings.armv6
/shoppings.armv61
/shoppings.armv6l
/shoppings.armv7l
/shoppings.dbg
/shoppings.exploit
/shoppings.i4
/shoppings.i486
/shoppings.i586
/shoppings.i6
/shoppings.i686
/shoppings.kill
/shoppings.m68
/shoppings.m68k
/shoppings.mips
/shoppings.mips64
/shoppings.mipsel
/shoppings.mpsl
/shoppings.pcc
/shoppings.powerpc
/shoppings.powerpc-440fp
/shoppings.powerppc
/shoppings.ppc
/shoppings.ppc2
/shoppings.ppc440
/shoppings.ppc440fp
/shoppings.root
/shoppings.root32
/shoppings.sh
/shoppings.sh4
/shoppings.sparc
/shoppings.spc
/shoppings.ssh4
/shoppings.x32
/shoppings.x64
/shoppings.x86
/shoppings.x86_32
/shoppings.x86_64
/arc.SleGbins
/arm.SleGbins
/arm4.SleGbins
/arm4l.SleGbins
/arm4t.SleGbins
/arm4tl.SleGbins
/arm4tll.SleGbins
/arm5.SleGbins
/arm5l.SleGbins
/arm5n.SleGbins
/arm6.SleGbins
/arm64.SleGbins
/arm6l.SleGbins
/arm7.SleGbins
/arm7l.SleGbins
/arm8.SleGbins
/armv4.SleGbins
/armv4l.SleGbins
/armv5l.SleGbins
/armv6.SleGbins
/armv61.SleGbins
/armv6l.SleGbins
/armv7l.SleGbins
/dbg.SleGbins
/exploit.SleGbins
/i4.SleGbins
/i486.SleGbins
/i586.SleGbins
/i6.SleGbins
/i686.SleGbins
/kill.SleGbins
/m68.SleGbins
/m68k.SleGbins
/mips.SleGbins
/mips64.SleGbins
/mipsel.SleGbins
/mpsl.SleGbins
/pcc.SleGbins
/powerpc-440fp.SleGbins
/powerpc.SleGbins
/powerppc.SleGbins
/ppc.SleGbins
/ppc2.SleGbins
/ppc440.SleGbins
/ppc440fp.SleGbins
/root.SleGbins
/root32.SleGbins
/sh.SleGbins
/sh4.SleGbins
/sparc.SleGbins
/spc.SleGbins
/ssh4.SleGbins
/x32.SleGbins
/x64.SleGbins
/x86.SleGbins
/x86_32.SleGbins
/x86_64.SleGbins
/SleGbins.arc
/SleGbins.arm
/SleGbins.arm4
/SleGbins.arm4l
/SleGbins.arm4t
/SleGbins.arm4tl
/SleGbins.arm4tll
/SleGbins.arm5
/SleGbins.arm5l
/SleGbins.arm5n
/SleGbins.arm6
/SleGbins.arm64
/SleGbins.arm6l
/SleGbins.arm7
/SleGbins.arm7l
/SleGbins.arm8
/SleGbins.armv4
/SleGbins.armv4l
/SleGbins.armv5l
/SleGbins.armv6
/SleGbins.armv61
/SleGbins.armv6l
/SleGbins.armv7l
/SleGbins.dbg
/SleGbins.exploit
/SleGbins.i4
/SleGbins.i486
/SleGbins.i586
/SleGbins.i6
/SleGbins.i686
/SleGbins.kill
/SleGbins.m68
/SleGbins.m68k
/SleGbins.mips
/SleGbins.mips64
/SleGbins.mipsel
/SleGbins.mpsl
/SleGbins.pcc
/SleGbins.powerpc
/SleGbins.powerpc-440fp
/SleGbins.powerppc
/SleGbins.ppc
/SleGbins.ppc2
/SleGbins.ppc440
/SleGbins.ppc440fp
/SleGbins.root
/SleGbins.root32
/SleGbins.sh
/SleGbins.sh4
/SleGbins.sparc
/SleGbins.spc
/SleGbins.ssh4
/SleGbins.x32
/SleGbins.x64
/SleGbins.x86
/SleGbins.x86_32
/SleGbins.x86_64

# Reference: https://twitter.com/bad_packets/status/1244873453858983936

185.244.217.126:1253
185.244.217.126:449

# Reference: https://twitter.com/bad_packets/status/1239018103381446656

/MaskaiBins/

# Reference: https://twitter.com/bad_packets/status/1238233386839232512

45.84.196.178:666
45.84.196.178:747

# Reference: https://twitter.com/bad_packets/status/1213018764582608898

199.217.116.22:420
199.217.116.22:65134
/arc.PQKill
/arm.PQKill
/arm4.PQKill
/arm4l.PQKill
/arm4t.PQKill
/arm4tl.PQKill
/arm4tll.PQKill
/arm5.PQKill
/arm5l.PQKill
/arm5n.PQKill
/arm6.PQKill
/arm64.PQKill
/arm6l.PQKill
/arm7.PQKill
/arm7l.PQKill
/arm8.PQKill
/armv4.PQKill
/armv4l.PQKill
/armv5l.PQKill
/armv6.PQKill
/armv61.PQKill
/armv6l.PQKill
/armv7l.PQKill
/dbg.PQKill
/exploit.PQKill
/i4.PQKill
/i486.PQKill
/i586.PQKill
/i6.PQKill
/i686.PQKill
/kill.PQKill
/m68.PQKill
/m68k.PQKill
/mips.PQKill
/mips64.PQKill
/mipsel.PQKill
/mpsl.PQKill
/pcc.PQKill
/powerpc-440fp.PQKill
/powerpc.PQKill
/powerppc.PQKill
/ppc.PQKill
/ppc2.PQKill
/ppc440.PQKill
/ppc440fp.PQKill
/root.PQKill
/root32.PQKill
/sh.PQKill
/sh4.PQKill
/sparc.PQKill
/spc.PQKill
/ssh4.PQKill
/x32.PQKill
/x64.PQKill
/x86.PQKill
/x86_32.PQKill
/x86_64.PQKill
/PQKill.arc
/PQKill.arm
/PQKill.arm4
/PQKill.arm4l
/PQKill.arm4t
/PQKill.arm4tl
/PQKill.arm4tll
/PQKill.arm5
/PQKill.arm5l
/PQKill.arm5n
/PQKill.arm6
/PQKill.arm64
/PQKill.arm6l
/PQKill.arm7
/PQKill.arm7l
/PQKill.arm8
/PQKill.armv4
/PQKill.armv4l
/PQKill.armv5l
/PQKill.armv6
/PQKill.armv61
/PQKill.armv6l
/PQKill.armv7l
/PQKill.dbg
/PQKill.exploit
/PQKill.i4
/PQKill.i486
/PQKill.i586
/PQKill.i6
/PQKill.i686
/PQKill.kill
/PQKill.m68
/PQKill.m68k
/PQKill.mips
/PQKill.mips64
/PQKill.mipsel
/PQKill.mpsl
/PQKill.pcc
/PQKill.powerpc
/PQKill.powerpc-440fp
/PQKill.powerppc
/PQKill.ppc
/PQKill.ppc2
/PQKill.ppc440
/PQKill.ppc440fp
/PQKill.root
/PQKill.root32
/PQKill.sh
/PQKill.sh4
/PQKill.sparc
/PQKill.spc
/PQKill.ssh4
/PQKill.x32
/PQKill.x64
/PQKill.x86
/PQKill.x86_32
/PQKill.x86_64
/archesPQv1/

# Reference: https://twitter.com/bad_packets/status/1212876138575360000

158.69.236.40:420
158.69.236.40:65134
projectqishu.com
/arc.PQv1
/arm.PQv1
/arm4.PQv1
/arm4l.PQv1
/arm4t.PQv1
/arm4tl.PQv1
/arm4tll.PQv1
/arm5.PQv1
/arm5l.PQv1
/arm5n.PQv1
/arm6.PQv1
/arm64.PQv1
/arm6l.PQv1
/arm7.PQv1
/arm7l.PQv1
/arm8.PQv1
/armv4.PQv1
/armv4l.PQv1
/armv5l.PQv1
/armv6.PQv1
/armv61.PQv1
/armv6l.PQv1
/armv7l.PQv1
/dbg.PQv1
/exploit.PQv1
/i4.PQv1
/i486.PQv1
/i586.PQv1
/i6.PQv1
/i686.PQv1
/kill.PQv1
/m68.PQv1
/m68k.PQv1
/mips.PQv1
/mips64.PQv1
/mipsel.PQv1
/mpsl.PQv1
/pcc.PQv1
/powerpc-440fp.PQv1
/powerpc.PQv1
/powerppc.PQv1
/ppc.PQv1
/ppc2.PQv1
/ppc440.PQv1
/ppc440fp.PQv1
/root.PQv1
/root32.PQv1
/sh.PQv1
/sh4.PQv1
/sparc.PQv1
/spc.PQv1
/ssh4.PQv1
/x32.PQv1
/x64.PQv1
/x86.PQv1
/x86_32.PQv1
/x86_64.PQv1
/PQv1.arc
/PQv1.arm
/PQv1.arm4
/PQv1.arm4l
/PQv1.arm4t
/PQv1.arm4tl
/PQv1.arm4tll
/PQv1.arm5
/PQv1.arm5l
/PQv1.arm5n
/PQv1.arm6
/PQv1.arm64
/PQv1.arm6l
/PQv1.arm7
/PQv1.arm7l
/PQv1.arm8
/PQv1.armv4
/PQv1.armv4l
/PQv1.armv5l
/PQv1.armv6
/PQv1.armv61
/PQv1.armv6l
/PQv1.armv7l
/PQv1.dbg
/PQv1.exploit
/PQv1.i4
/PQv1.i486
/PQv1.i586
/PQv1.i6
/PQv1.i686
/PQv1.kill
/PQv1.m68
/PQv1.m68k
/PQv1.mips
/PQv1.mips64
/PQv1.mipsel
/PQv1.mpsl
/PQv1.pcc
/PQv1.powerpc
/PQv1.powerpc-440fp
/PQv1.powerppc
/PQv1.ppc
/PQv1.ppc2
/PQv1.ppc440
/PQv1.ppc440fp
/PQv1.root
/PQv1.root32
/PQv1.sh
/PQv1.sh4
/PQv1.sparc
/PQv1.spc
/PQv1.ssh4
/PQv1.x32
/PQv1.x64
/PQv1.x86
/PQv1.x86_32
/PQv1.x86_64

# Reference: https://twitter.com/bad_packets/status/1207212388342099968

50.115.166.137:2416
50.115.166.137:3456
/arc.Legacy
/arm.Legacy
/arm4.Legacy
/arm4l.Legacy
/arm4t.Legacy
/arm4tl.Legacy
/arm4tll.Legacy
/arm5.Legacy
/arm5l.Legacy
/arm5n.Legacy
/arm6.Legacy
/arm64.Legacy
/arm6l.Legacy
/arm7.Legacy
/arm7l.Legacy
/arm8.Legacy
/armv4.Legacy
/armv4l.Legacy
/armv5l.Legacy
/armv6.Legacy
/armv61.Legacy
/armv6l.Legacy
/armv7l.Legacy
/dbg.Legacy
/exploit.Legacy
/i4.Legacy
/i486.Legacy
/i586.Legacy
/i6.Legacy
/i686.Legacy
/kill.Legacy
/m68.Legacy
/m68k.Legacy
/mips.Legacy
/mips64.Legacy
/mipsel.Legacy
/mpsl.Legacy
/pcc.Legacy
/powerpc-440fp.Legacy
/powerpc.Legacy
/powerppc.Legacy
/ppc.Legacy
/ppc2.Legacy
/ppc440.Legacy
/ppc440fp.Legacy
/root.Legacy
/root32.Legacy
/sh.Legacy
/sh4.Legacy
/sparc.Legacy
/spc.Legacy
/ssh4.Legacy
/x32.Legacy
/x64.Legacy
/x86.Legacy
/x86_32.Legacy
/x86_64.Legacy
/Legacy.arc
/Legacy.arm
/Legacy.arm4
/Legacy.arm4l
/Legacy.arm4t
/Legacy.arm4tl
/Legacy.arm4tll
/Legacy.arm5
/Legacy.arm5l
/Legacy.arm5n
/Legacy.arm6
/Legacy.arm64
/Legacy.arm6l
/Legacy.arm7
/Legacy.arm7l
/Legacy.arm8
/Legacy.armv4
/Legacy.armv4l
/Legacy.armv5l
/Legacy.armv6
/Legacy.armv61
/Legacy.armv6l
/Legacy.armv7l
/Legacy.dbg
/Legacy.exploit
/Legacy.i4
/Legacy.i486
/Legacy.i586
/Legacy.i6
/Legacy.i686
/Legacy.kill
/Legacy.m68
/Legacy.m68k
/Legacy.mips
/Legacy.mips64
/Legacy.mipsel
/Legacy.mpsl
/Legacy.pcc
/Legacy.powerpc
/Legacy.powerpc-440fp
/Legacy.powerppc
/Legacy.ppc
/Legacy.ppc2
/Legacy.ppc440
/Legacy.ppc440fp
/Legacy.root
/Legacy.root32
/Legacy.sh
/Legacy.sh4
/Legacy.sparc
/Legacy.spc
/Legacy.ssh4
/Legacy.x32
/Legacy.x64
/Legacy.x86
/Legacy.x86_32
/Legacy.x86_64

# Reference: https://twitter.com/bad_packets/status/1202065006163980290

194.50.171.185:444
194.50.171.185:87
/arc.Venom
/arm.Venom
/arm4.Venom
/arm4l.Venom
/arm4t.Venom
/arm4tl.Venom
/arm4tll.Venom
/arm5.Venom
/arm5l.Venom
/arm5n.Venom
/arm6.Venom
/arm64.Venom
/arm6l.Venom
/arm7.Venom
/arm7l.Venom
/arm8.Venom
/armv4.Venom
/armv4l.Venom
/armv5l.Venom
/armv6.Venom
/armv61.Venom
/armv6l.Venom
/armv7l.Venom
/dbg.Venom
/exploit.Venom
/i4.Venom
/i486.Venom
/i586.Venom
/i6.Venom
/i686.Venom
/kill.Venom
/m68.Venom
/m68k.Venom
/mips.Venom
/mips64.Venom
/mipsel.Venom
/mpsl.Venom
/pcc.Venom
/powerpc-440fp.Venom
/powerpc.Venom
/powerppc.Venom
/ppc.Venom
/ppc2.Venom
/ppc440.Venom
/ppc440fp.Venom
/root.Venom
/root32.Venom
/sh.Venom
/sh4.Venom
/sparc.Venom
/spc.Venom
/ssh4.Venom
/x32.Venom
/x64.Venom
/x86.Venom
/x86_32.Venom
/x86_64.Venom
/Venom.arc
/Venom.arm
/Venom.arm4
/Venom.arm4l
/Venom.arm4t
/Venom.arm4tl
/Venom.arm4tll
/Venom.arm5
/Venom.arm5l
/Venom.arm5n
/Venom.arm6
/Venom.arm64
/Venom.arm6l
/Venom.arm7
/Venom.arm7l
/Venom.arm8
/Venom.armv4
/Venom.armv4l
/Venom.armv5l
/Venom.armv6
/Venom.armv61
/Venom.armv6l
/Venom.armv7l
/Venom.dbg
/Venom.exploit
/Venom.i4
/Venom.i486
/Venom.i586
/Venom.i6
/Venom.i686
/Venom.kill
/Venom.m68
/Venom.m68k
/Venom.mips
/Venom.mips64
/Venom.mipsel
/Venom.mpsl
/Venom.pcc
/Venom.powerpc
/Venom.powerpc-440fp
/Venom.powerppc
/Venom.ppc
/Venom.ppc2
/Venom.ppc440
/Venom.ppc440fp
/Venom.root
/Venom.root32
/Venom.sh
/Venom.sh4
/Venom.sparc
/Venom.spc
/Venom.ssh4
/Venom.x32
/Venom.x64
/Venom.x86
/Venom.x86_32
/Venom.x86_64

# Reference: https://twitter.com/bad_packets/status/1194471965433581568

167.71.175.87:420
167.71.175.87:666
/axisbins.sh
/axisftp1.sh

# Reference: https://twitter.com/bad_packets/status/1171713820613459968

164.132.4.31:36335
164.132.4.31:42689

# Reference: https://twitter.com/bad_packets/status/1161036398901678080

141.105.69.49:8915

# Reference: https://twitter.com/bad_packets/status/1160770440488337409

185.82.202.24:11751
185.82.202.24:65535

# Reference: https://twitter.com/bad_packets/status/1159720961739878400

91.134.120.7:666
91.134.120.7:850

# Reference: https://twitter.com/bad_packets/status/1132400889187061760

205.185.126.154:1024

# Reference: https://twitter.com/bad_packets/status/1256268047444144128

194.36.188.170:3002
194.36.188.170:60552

# Reference: https://pastebin.com/raw/5pL1sShf

182.113.220.114:42221
45.95.168.254:1691

# Reference: https://twitter.com/malwaremustd1e/status/1251546550657880064
# Reference: https://www.virustotal.com/gui/file/2bded0b351a98c400bd1ce588319c35d87645636ff8d4c1e96c8984a4dc433d3/detection
# Reference: https://www.virustotal.com/gui/file/96e3968dc9f8956bec9c20f18ff3924ee2d0c90b187cba402dfebfa561bab0d6/detection
# Reference: https://www.virustotal.com/gui/file/c200abf76bd32f07c06460fd285b0c9b48284fafd4897a0bdf485e55caebfb10/detection

94.102.57.241:1339
94.102.57.241:80
94.102.57.241:9095
rewt.xyz

# Reference: https://twitter.com/bad_packets/status/1256735521897734144

37.49.226.230:55451
37.49.226.230:9993

# Reference: https://twitter.com/bad_packets/status/1256740010948128769

159.203.2.6:34241
159.203.2.6:39284

# Reference: https://twitter.com/bad_packets/status/1257753944228425729

45.95.169.249:3074
45.95.169.249:65535

# Reference: https://twitter.com/JayTHL/status/1258125952720285702

/arc.regulardude
/arm.regulardude
/arm4.regulardude
/arm4l.regulardude
/arm4t.regulardude
/arm4tl.regulardude
/arm4tll.regulardude
/arm5.regulardude
/arm5l.regulardude
/arm5n.regulardude
/arm6.regulardude
/arm64.regulardude
/arm6l.regulardude
/arm7.regulardude
/arm7l.regulardude
/arm8.regulardude
/armv4.regulardude
/armv4l.regulardude
/armv5l.regulardude
/armv6.regulardude
/armv61.regulardude
/armv6l.regulardude
/armv7l.regulardude
/dbg.regulardude
/exploit.regulardude
/i4.regulardude
/i486.regulardude
/i586.regulardude
/i6.regulardude
/i686.regulardude
/kill.regulardude
/m68.regulardude
/m68k.regulardude
/mips.regulardude
/mips64.regulardude
/mipsel.regulardude
/mpsl.regulardude
/pcc.regulardude
/powerpc-440fp.regulardude
/powerpc.regulardude
/powerppc.regulardude
/ppc.regulardude
/ppc2.regulardude
/ppc440.regulardude
/ppc440fp.regulardude
/root.regulardude
/root32.regulardude
/sh.regulardude
/sh4.regulardude
/sparc.regulardude
/spc.regulardude
/ssh4.regulardude
/x32.regulardude
/x64.regulardude
/x86.regulardude
/x86_32.regulardude
/x86_64.regulardude
/regulardude.arc
/regulardude.arm
/regulardude.arm4
/regulardude.arm4l
/regulardude.arm4t
/regulardude.arm4tl
/regulardude.arm4tll
/regulardude.arm5
/regulardude.arm5l
/regulardude.arm5n
/regulardude.arm6
/regulardude.arm64
/regulardude.arm6l
/regulardude.arm7
/regulardude.arm7l
/regulardude.arm8
/regulardude.armv4
/regulardude.armv4l
/regulardude.armv5l
/regulardude.armv6
/regulardude.armv61
/regulardude.armv6l
/regulardude.armv7l
/regulardude.dbg
/regulardude.exploit
/regulardude.i4
/regulardude.i486
/regulardude.i586
/regulardude.i6
/regulardude.i686
/regulardude.kill
/regulardude.m68
/regulardude.m68k
/regulardude.mips
/regulardude.mips64
/regulardude.mipsel
/regulardude.mpsl
/regulardude.pcc
/regulardude.powerpc
/regulardude.powerpc-440fp
/regulardude.powerppc
/regulardude.ppc
/regulardude.ppc2
/regulardude.ppc440
/regulardude.ppc440fp
/regulardude.root
/regulardude.root32
/regulardude.sh
/regulardude.sh4
/regulardude.sparc
/regulardude.spc
/regulardude.ssh4
/regulardude.x32
/regulardude.x64
/regulardude.x86
/regulardude.x86_32
/regulardude.x86_64
/hiddenbins/

# Reference: https://twitter.com/0xrb/status/1258316877262024704

/arc.107n370n70p
/arm.107n370n70p
/arm4.107n370n70p
/arm4l.107n370n70p
/arm4t.107n370n70p
/arm4tl.107n370n70p
/arm4tll.107n370n70p
/arm5.107n370n70p
/arm5l.107n370n70p
/arm5n.107n370n70p
/arm6.107n370n70p
/arm64.107n370n70p
/arm6l.107n370n70p
/arm7.107n370n70p
/arm7l.107n370n70p
/arm8.107n370n70p
/armv4.107n370n70p
/armv4l.107n370n70p
/armv5l.107n370n70p
/armv6.107n370n70p
/armv61.107n370n70p
/armv6l.107n370n70p
/armv7l.107n370n70p
/dbg.107n370n70p
/exploit.107n370n70p
/i4.107n370n70p
/i486.107n370n70p
/i586.107n370n70p
/i6.107n370n70p
/i686.107n370n70p
/kill.107n370n70p
/m68.107n370n70p
/m68k.107n370n70p
/mips.107n370n70p
/mips64.107n370n70p
/mipsel.107n370n70p
/mpsl.107n370n70p
/pcc.107n370n70p
/powerpc-440fp.107n370n70p
/powerpc.107n370n70p
/powerppc.107n370n70p
/ppc.107n370n70p
/ppc2.107n370n70p
/ppc440.107n370n70p
/ppc440fp.107n370n70p
/root.107n370n70p
/root32.107n370n70p
/sh.107n370n70p
/sh4.107n370n70p
/sparc.107n370n70p
/spc.107n370n70p
/ssh4.107n370n70p
/x32.107n370n70p
/x64.107n370n70p
/x86.107n370n70p
/x86_32.107n370n70p
/x86_64.107n370n70p
/107n370n70p.arc
/107n370n70p.arm
/107n370n70p.arm4
/107n370n70p.arm4l
/107n370n70p.arm4t
/107n370n70p.arm4tl
/107n370n70p.arm4tll
/107n370n70p.arm5
/107n370n70p.arm5l
/107n370n70p.arm5n
/107n370n70p.arm6
/107n370n70p.arm64
/107n370n70p.arm6l
/107n370n70p.arm7
/107n370n70p.arm7l
/107n370n70p.arm8
/107n370n70p.armv4
/107n370n70p.armv4l
/107n370n70p.armv5l
/107n370n70p.armv6
/107n370n70p.armv61
/107n370n70p.armv6l
/107n370n70p.armv7l
/107n370n70p.dbg
/107n370n70p.exploit
/107n370n70p.i4
/107n370n70p.i486
/107n370n70p.i586
/107n370n70p.i6
/107n370n70p.i686
/107n370n70p.kill
/107n370n70p.m68
/107n370n70p.m68k
/107n370n70p.mips
/107n370n70p.mips64
/107n370n70p.mipsel
/107n370n70p.mpsl
/107n370n70p.pcc
/107n370n70p.powerpc
/107n370n70p.powerpc-440fp
/107n370n70p.powerppc
/107n370n70p.ppc
/107n370n70p.ppc2
/107n370n70p.ppc440
/107n370n70p.ppc440fp
/107n370n70p.root
/107n370n70p.root32
/107n370n70p.sh
/107n370n70p.sh4
/107n370n70p.sparc
/107n370n70p.spc
/107n370n70p.ssh4
/107n370n70p.x32
/107n370n70p.x64
/107n370n70p.x86
/107n370n70p.x86_32
/107n370n70p.x86_64
/arc.Antijit
/arm.Antijit
/arm4.Antijit
/arm4l.Antijit
/arm4t.Antijit
/arm4tl.Antijit
/arm4tll.Antijit
/arm5.Antijit
/arm5l.Antijit
/arm5n.Antijit
/arm6.Antijit
/arm64.Antijit
/arm6l.Antijit
/arm7.Antijit
/arm7l.Antijit
/arm8.Antijit
/armv4.Antijit
/armv4l.Antijit
/armv5l.Antijit
/armv6.Antijit
/armv61.Antijit
/armv6l.Antijit
/armv7l.Antijit
/dbg.Antijit
/exploit.Antijit
/i4.Antijit
/i486.Antijit
/i586.Antijit
/i6.Antijit
/i686.Antijit
/kill.Antijit
/m68.Antijit
/m68k.Antijit
/mips.Antijit
/mips64.Antijit
/mipsel.Antijit
/mpsl.Antijit
/pcc.Antijit
/powerpc-440fp.Antijit
/powerpc.Antijit
/powerppc.Antijit
/ppc.Antijit
/ppc2.Antijit
/ppc440.Antijit
/ppc440fp.Antijit
/root.Antijit
/root32.Antijit
/sh.Antijit
/sh4.Antijit
/sparc.Antijit
/spc.Antijit
/ssh4.Antijit
/x32.Antijit
/x64.Antijit
/x86.Antijit
/x86_32.Antijit
/x86_64.Antijit
/Antijit.arc
/Antijit.arm
/Antijit.arm4
/Antijit.arm4l
/Antijit.arm4t
/Antijit.arm4tl
/Antijit.arm4tll
/Antijit.arm5
/Antijit.arm5l
/Antijit.arm5n
/Antijit.arm6
/Antijit.arm64
/Antijit.arm6l
/Antijit.arm7
/Antijit.arm7l
/Antijit.arm8
/Antijit.armv4
/Antijit.armv4l
/Antijit.armv5l
/Antijit.armv6
/Antijit.armv61
/Antijit.armv6l
/Antijit.armv7l
/Antijit.dbg
/Antijit.exploit
/Antijit.i4
/Antijit.i486
/Antijit.i586
/Antijit.i6
/Antijit.i686
/Antijit.kill
/Antijit.m68
/Antijit.m68k
/Antijit.mips
/Antijit.mips64
/Antijit.mipsel
/Antijit.mpsl
/Antijit.pcc
/Antijit.powerpc
/Antijit.powerpc-440fp
/Antijit.powerppc
/Antijit.ppc
/Antijit.ppc2
/Antijit.ppc440
/Antijit.ppc440fp
/Antijit.root
/Antijit.root32
/Antijit.sh
/Antijit.sh4
/Antijit.sparc
/Antijit.spc
/Antijit.ssh4
/Antijit.x32
/Antijit.x64
/Antijit.x86
/Antijit.x86_32
/Antijit.x86_64
/arc.MtMdOLDhh
/arm.MtMdOLDhh
/arm4.MtMdOLDhh
/arm4l.MtMdOLDhh
/arm4t.MtMdOLDhh
/arm4tl.MtMdOLDhh
/arm4tll.MtMdOLDhh
/arm5.MtMdOLDhh
/arm5l.MtMdOLDhh
/arm5n.MtMdOLDhh
/arm6.MtMdOLDhh
/arm64.MtMdOLDhh
/arm6l.MtMdOLDhh
/arm7.MtMdOLDhh
/arm7l.MtMdOLDhh
/arm8.MtMdOLDhh
/armv4.MtMdOLDhh
/armv4l.MtMdOLDhh
/armv5l.MtMdOLDhh
/armv6.MtMdOLDhh
/armv61.MtMdOLDhh
/armv6l.MtMdOLDhh
/armv7l.MtMdOLDhh
/dbg.MtMdOLDhh
/exploit.MtMdOLDhh
/i4.MtMdOLDhh
/i486.MtMdOLDhh
/i586.MtMdOLDhh
/i6.MtMdOLDhh
/i686.MtMdOLDhh
/kill.MtMdOLDhh
/m68.MtMdOLDhh
/m68k.MtMdOLDhh
/mips.MtMdOLDhh
/mips64.MtMdOLDhh
/mipsel.MtMdOLDhh
/mpsl.MtMdOLDhh
/pcc.MtMdOLDhh
/powerpc-440fp.MtMdOLDhh
/powerpc.MtMdOLDhh
/powerppc.MtMdOLDhh
/ppc.MtMdOLDhh
/ppc2.MtMdOLDhh
/ppc440.MtMdOLDhh
/ppc440fp.MtMdOLDhh
/root.MtMdOLDhh
/root32.MtMdOLDhh
/sh.MtMdOLDhh
/sh4.MtMdOLDhh
/sparc.MtMdOLDhh
/spc.MtMdOLDhh
/ssh4.MtMdOLDhh
/x32.MtMdOLDhh
/x64.MtMdOLDhh
/x86.MtMdOLDhh
/x86_32.MtMdOLDhh
/x86_64.MtMdOLDhh
/MtMdOLDhh.arc
/MtMdOLDhh.arm
/MtMdOLDhh.arm4
/MtMdOLDhh.arm4l
/MtMdOLDhh.arm4t
/MtMdOLDhh.arm4tl
/MtMdOLDhh.arm4tll
/MtMdOLDhh.arm5
/MtMdOLDhh.arm5l
/MtMdOLDhh.arm5n
/MtMdOLDhh.arm6
/MtMdOLDhh.arm64
/MtMdOLDhh.arm6l
/MtMdOLDhh.arm7
/MtMdOLDhh.arm7l
/MtMdOLDhh.arm8
/MtMdOLDhh.armv4
/MtMdOLDhh.armv4l
/MtMdOLDhh.armv5l
/MtMdOLDhh.armv6
/MtMdOLDhh.armv61
/MtMdOLDhh.armv6l
/MtMdOLDhh.armv7l
/MtMdOLDhh.dbg
/MtMdOLDhh.exploit
/MtMdOLDhh.i4
/MtMdOLDhh.i486
/MtMdOLDhh.i586
/MtMdOLDhh.i6
/MtMdOLDhh.i686
/MtMdOLDhh.kill
/MtMdOLDhh.m68
/MtMdOLDhh.m68k
/MtMdOLDhh.mips
/MtMdOLDhh.mips64
/MtMdOLDhh.mipsel
/MtMdOLDhh.mpsl
/MtMdOLDhh.pcc
/MtMdOLDhh.powerpc
/MtMdOLDhh.powerpc-440fp
/MtMdOLDhh.powerppc
/MtMdOLDhh.ppc
/MtMdOLDhh.ppc2
/MtMdOLDhh.ppc440
/MtMdOLDhh.ppc440fp
/MtMdOLDhh.root
/MtMdOLDhh.root32
/MtMdOLDhh.sh
/MtMdOLDhh.sh4
/MtMdOLDhh.sparc
/MtMdOLDhh.spc
/MtMdOLDhh.ssh4
/MtMdOLDhh.x32
/MtMdOLDhh.x64
/MtMdOLDhh.x86
/MtMdOLDhh.x86_32
/MtMdOLDhh.x86_64
/LmZsdnbq/

# Reference: https://pastebin.com/raw/0ZBQF0Jd

180.116.224.91:39039

# Reference: https://twitter.com/bad_packets/status/1259613095518801920

193.228.91.105:1024
193.228.91.105:1982

# Reference: https://twitter.com/0xrb/status/1259830288625987585

222.87.206.90:2020
/arc.deus
/arm.deus
/arm4.deus
/arm4l.deus
/arm4t.deus
/arm4tl.deus
/arm4tll.deus
/arm5.deus
/arm5l.deus
/arm5n.deus
/arm6.deus
/arm64.deus
/arm6l.deus
/arm7.deus
/arm7l.deus
/arm8.deus
/armv4.deus
/armv4l.deus
/armv5l.deus
/armv6.deus
/armv61.deus
/armv6l.deus
/armv7l.deus
/dbg.deus
/exploit.deus
/i4.deus
/i486.deus
/i586.deus
/i6.deus
/i686.deus
/kill.deus
/m68.deus
/m68k.deus
/mips.deus
/mips64.deus
/mipsel.deus
/mpsl.deus
/pcc.deus
/powerpc-440fp.deus
/powerpc.deus
/powerppc.deus
/ppc.deus
/ppc2.deus
/ppc440.deus
/ppc440fp.deus
/root.deus
/root32.deus
/sh.deus
/sh4.deus
/sparc.deus
/spc.deus
/ssh4.deus
/x32.deus
/x64.deus
/x86.deus
/x86_32.deus
/x86_64.deus
/deus.arc
/deus.arm
/deus.arm4
/deus.arm4l
/deus.arm4t
/deus.arm4tl
/deus.arm4tll
/deus.arm5
/deus.arm5l
/deus.arm5n
/deus.arm6
/deus.arm64
/deus.arm6l
/deus.arm7
/deus.arm7l
/deus.arm8
/deus.armv4
/deus.armv4l
/deus.armv5l
/deus.armv6
/deus.armv61
/deus.armv6l
/deus.armv7l
/deus.dbg
/deus.exploit
/deus.i4
/deus.i486
/deus.i586
/deus.i6
/deus.i686
/deus.kill
/deus.m68
/deus.m68k
/deus.mips
/deus.mips64
/deus.mipsel
/deus.mpsl
/deus.pcc
/deus.powerpc
/deus.powerpc-440fp
/deus.powerppc
/deus.ppc
/deus.ppc2
/deus.ppc440
/deus.ppc440fp
/deus.root
/deus.root32
/deus.sh
/deus.sh4
/deus.sparc
/deus.spc
/deus.ssh4
/deus.x32
/deus.x64
/deus.x86
/deus.x86_32
/deus.x86_64
/arc.C0rret
/arm.C0rret
/arm4.C0rret
/arm4l.C0rret
/arm4t.C0rret
/arm4tl.C0rret
/arm4tll.C0rret
/arm5.C0rret
/arm5l.C0rret
/arm5n.C0rret
/arm6.C0rret
/arm64.C0rret
/arm6l.C0rret
/arm7.C0rret
/arm7l.C0rret
/arm8.C0rret
/armv4.C0rret
/armv4l.C0rret
/armv5l.C0rret
/armv6.C0rret
/armv61.C0rret
/armv6l.C0rret
/armv7l.C0rret
/dbg.C0rret
/exploit.C0rret
/i4.C0rret
/i486.C0rret
/i586.C0rret
/i6.C0rret
/i686.C0rret
/kill.C0rret
/m68.C0rret
/m68k.C0rret
/mips.C0rret
/mips64.C0rret
/mipsel.C0rret
/mpsl.C0rret
/pcc.C0rret
/powerpc-440fp.C0rret
/powerpc.C0rret
/powerppc.C0rret
/ppc.C0rret
/ppc2.C0rret
/ppc440.C0rret
/ppc440fp.C0rret
/root.C0rret
/root32.C0rret
/sh.C0rret
/sh4.C0rret
/sparc.C0rret
/spc.C0rret
/ssh4.C0rret
/x32.C0rret
/x64.C0rret
/x86.C0rret
/x86_32.C0rret
/x86_64.C0rret
/C0rret.arc
/C0rret.arm
/C0rret.arm4
/C0rret.arm4l
/C0rret.arm4t
/C0rret.arm4tl
/C0rret.arm4tll
/C0rret.arm5
/C0rret.arm5l
/C0rret.arm5n
/C0rret.arm6
/C0rret.arm64
/C0rret.arm6l
/C0rret.arm7
/C0rret.arm7l
/C0rret.arm8
/C0rret.armv4
/C0rret.armv4l
/C0rret.armv5l
/C0rret.armv6
/C0rret.armv61
/C0rret.armv6l
/C0rret.armv7l
/C0rret.dbg
/C0rret.exploit
/C0rret.i4
/C0rret.i486
/C0rret.i586
/C0rret.i6
/C0rret.i686
/C0rret.kill
/C0rret.m68
/C0rret.m68k
/C0rret.mips
/C0rret.mips64
/C0rret.mipsel
/C0rret.mpsl
/C0rret.pcc
/C0rret.powerpc
/C0rret.powerpc-440fp
/C0rret.powerppc
/C0rret.ppc
/C0rret.ppc2
/C0rret.ppc440
/C0rret.ppc440fp
/C0rret.root
/C0rret.root32
/C0rret.sh
/C0rret.sh4
/C0rret.sparc
/C0rret.spc
/C0rret.ssh4
/C0rret.x32
/C0rret.x64
/C0rret.x86
/C0rret.x86_32
/C0rret.x86_64
/arc.JSEB
/arm.JSEB
/arm4.JSEB
/arm4l.JSEB
/arm4t.JSEB
/arm4tl.JSEB
/arm4tll.JSEB
/arm5.JSEB
/arm5l.JSEB
/arm5n.JSEB
/arm6.JSEB
/arm64.JSEB
/arm6l.JSEB
/arm7.JSEB
/arm7l.JSEB
/arm8.JSEB
/armv4.JSEB
/armv4l.JSEB
/armv5l.JSEB
/armv6.JSEB
/armv61.JSEB
/armv6l.JSEB
/armv7l.JSEB
/dbg.JSEB
/exploit.JSEB
/i4.JSEB
/i486.JSEB
/i586.JSEB
/i6.JSEB
/i686.JSEB
/kill.JSEB
/m68.JSEB
/m68k.JSEB
/mips.JSEB
/mips64.JSEB
/mipsel.JSEB
/mpsl.JSEB
/pcc.JSEB
/powerpc-440fp.JSEB
/powerpc.JSEB
/powerppc.JSEB
/ppc.JSEB
/ppc2.JSEB
/ppc440.JSEB
/ppc440fp.JSEB
/root.JSEB
/root32.JSEB
/sh.JSEB
/sh4.JSEB
/sparc.JSEB
/spc.JSEB
/ssh4.JSEB
/x32.JSEB
/x64.JSEB
/x86.JSEB
/x86_32.JSEB
/x86_64.JSEB
/JSEB.arc
/JSEB.arm
/JSEB.arm4
/JSEB.arm4l
/JSEB.arm4t
/JSEB.arm4tl
/JSEB.arm4tll
/JSEB.arm5
/JSEB.arm5l
/JSEB.arm5n
/JSEB.arm6
/JSEB.arm64
/JSEB.arm6l
/JSEB.arm7
/JSEB.arm7l
/JSEB.arm8
/JSEB.armv4
/JSEB.armv4l
/JSEB.armv5l
/JSEB.armv6
/JSEB.armv61
/JSEB.armv6l
/JSEB.armv7l
/JSEB.dbg
/JSEB.exploit
/JSEB.i4
/JSEB.i486
/JSEB.i586
/JSEB.i6
/JSEB.i686
/JSEB.kill
/JSEB.m68
/JSEB.m68k
/JSEB.mips
/JSEB.mips64
/JSEB.mipsel
/JSEB.mpsl
/JSEB.pcc
/JSEB.powerpc
/JSEB.powerpc-440fp
/JSEB.powerppc
/JSEB.ppc
/JSEB.ppc2
/JSEB.ppc440
/JSEB.ppc440fp
/JSEB.root
/JSEB.root32
/JSEB.sh
/JSEB.sh4
/JSEB.sparc
/JSEB.spc
/JSEB.ssh4
/JSEB.x32
/JSEB.x64
/JSEB.x86
/JSEB.x86_32
/JSEB.x86_64
/arc.felix
/arm.felix
/arm4.felix
/arm4l.felix
/arm4t.felix
/arm4tl.felix
/arm4tll.felix
/arm5.felix
/arm5l.felix
/arm5n.felix
/arm6.felix
/arm64.felix
/arm6l.felix
/arm7.felix
/arm7l.felix
/arm8.felix
/armv4.felix
/armv4l.felix
/armv5l.felix
/armv6.felix
/armv61.felix
/armv6l.felix
/armv7l.felix
/dbg.felix
/exploit.felix
/i4.felix
/i486.felix
/i586.felix
/i6.felix
/i686.felix
/kill.felix
/m68.felix
/m68k.felix
/mips.felix
/mips64.felix
/mipsel.felix
/mpsl.felix
/pcc.felix
/powerpc-440fp.felix
/powerpc.felix
/powerppc.felix
/ppc.felix
/ppc2.felix
/ppc440.felix
/ppc440fp.felix
/root.felix
/root32.felix
/sh.felix
/sh4.felix
/sparc.felix
/spc.felix
/ssh4.felix
/x32.felix
/x64.felix
/x86.felix
/x86_32.felix
/x86_64.felix
/felix.arc
/felix.arm
/felix.arm4
/felix.arm4l
/felix.arm4t
/felix.arm4tl
/felix.arm4tll
/felix.arm5
/felix.arm5l
/felix.arm5n
/felix.arm6
/felix.arm64
/felix.arm6l
/felix.arm7
/felix.arm7l
/felix.arm8
/felix.armv4
/felix.armv4l
/felix.armv5l
/felix.armv6
/felix.armv61
/felix.armv6l
/felix.armv7l
/felix.dbg
/felix.exploit
/felix.i4
/felix.i486
/felix.i586
/felix.i6
/felix.i686
/felix.kill
/felix.m68
/felix.m68k
/felix.mips
/felix.mips64
/felix.mipsel
/felix.mpsl
/felix.pcc
/felix.powerpc
/felix.powerpc-440fp
/felix.powerppc
/felix.ppc
/felix.ppc2
/felix.ppc440
/felix.ppc440fp
/felix.root
/felix.root32
/felix.sh
/felix.sh4
/felix.sparc
/felix.spc
/felix.ssh4
/felix.x32
/felix.x64
/felix.x86
/felix.x86_32
/felix.x86_64
/arc.p00py107b07n37
/arm.p00py107b07n37
/arm4.p00py107b07n37
/arm4l.p00py107b07n37
/arm4t.p00py107b07n37
/arm4tl.p00py107b07n37
/arm4tll.p00py107b07n37
/arm5.p00py107b07n37
/arm5l.p00py107b07n37
/arm5n.p00py107b07n37
/arm6.p00py107b07n37
/arm64.p00py107b07n37
/arm6l.p00py107b07n37
/arm7.p00py107b07n37
/arm7l.p00py107b07n37
/arm8.p00py107b07n37
/armv4.p00py107b07n37
/armv4l.p00py107b07n37
/armv5l.p00py107b07n37
/armv6.p00py107b07n37
/armv61.p00py107b07n37
/armv6l.p00py107b07n37
/armv7l.p00py107b07n37
/dbg.p00py107b07n37
/exploit.p00py107b07n37
/i4.p00py107b07n37
/i486.p00py107b07n37
/i586.p00py107b07n37
/i6.p00py107b07n37
/i686.p00py107b07n37
/kill.p00py107b07n37
/m68.p00py107b07n37
/m68k.p00py107b07n37
/mips.p00py107b07n37
/mips64.p00py107b07n37
/mipsel.p00py107b07n37
/mpsl.p00py107b07n37
/pcc.p00py107b07n37
/powerpc-440fp.p00py107b07n37
/powerpc.p00py107b07n37
/powerppc.p00py107b07n37
/ppc.p00py107b07n37
/ppc2.p00py107b07n37
/ppc440.p00py107b07n37
/ppc440fp.p00py107b07n37
/root.p00py107b07n37
/root32.p00py107b07n37
/sh.p00py107b07n37
/sh4.p00py107b07n37
/sparc.p00py107b07n37
/spc.p00py107b07n37
/ssh4.p00py107b07n37
/x32.p00py107b07n37
/x64.p00py107b07n37
/x86.p00py107b07n37
/x86_32.p00py107b07n37
/x86_64.p00py107b07n37
/p00py107b07n37.arc
/p00py107b07n37.arm
/p00py107b07n37.arm4
/p00py107b07n37.arm4l
/p00py107b07n37.arm4t
/p00py107b07n37.arm4tl
/p00py107b07n37.arm4tll
/p00py107b07n37.arm5
/p00py107b07n37.arm5l
/p00py107b07n37.arm5n
/p00py107b07n37.arm6
/p00py107b07n37.arm64
/p00py107b07n37.arm6l
/p00py107b07n37.arm7
/p00py107b07n37.arm7l
/p00py107b07n37.arm8
/p00py107b07n37.armv4
/p00py107b07n37.armv4l
/p00py107b07n37.armv5l
/p00py107b07n37.armv6
/p00py107b07n37.armv61
/p00py107b07n37.armv6l
/p00py107b07n37.armv7l
/p00py107b07n37.dbg
/p00py107b07n37.exploit
/p00py107b07n37.i4
/p00py107b07n37.i486
/p00py107b07n37.i586
/p00py107b07n37.i6
/p00py107b07n37.i686
/p00py107b07n37.kill
/p00py107b07n37.m68
/p00py107b07n37.m68k
/p00py107b07n37.mips
/p00py107b07n37.mips64
/p00py107b07n37.mipsel
/p00py107b07n37.mpsl
/p00py107b07n37.pcc
/p00py107b07n37.powerpc
/p00py107b07n37.powerpc-440fp
/p00py107b07n37.powerppc
/p00py107b07n37.ppc
/p00py107b07n37.ppc2
/p00py107b07n37.ppc440
/p00py107b07n37.ppc440fp
/p00py107b07n37.root
/p00py107b07n37.root32
/p00py107b07n37.sh
/p00py107b07n37.sh4
/p00py107b07n37.sparc
/p00py107b07n37.spc
/p00py107b07n37.ssh4
/p00py107b07n37.x32
/p00py107b07n37.x64
/p00py107b07n37.x86
/p00py107b07n37.x86_32
/p00py107b07n37.x86_64
/deusbins/
/wrgjwrgjwrg246356356356/

# Reference: https://pastebin.com/raw/AXYAf3BZ

/arc.hikati
/arm.hikati
/arm4.hikati
/arm4l.hikati
/arm4t.hikati
/arm4tl.hikati
/arm4tll.hikati
/arm5.hikati
/arm5l.hikati
/arm5n.hikati
/arm6.hikati
/arm64.hikati
/arm6l.hikati
/arm7.hikati
/arm7l.hikati
/arm8.hikati
/armv4.hikati
/armv4l.hikati
/armv5l.hikati
/armv6.hikati
/armv61.hikati
/armv6l.hikati
/armv7l.hikati
/dbg.hikati
/exploit.hikati
/i4.hikati
/i486.hikati
/i586.hikati
/i6.hikati
/i686.hikati
/kill.hikati
/m68.hikati
/m68k.hikati
/mips.hikati
/mips64.hikati
/mipsel.hikati
/mpsl.hikati
/pcc.hikati
/powerpc-440fp.hikati
/powerpc.hikati
/powerppc.hikati
/ppc.hikati
/ppc2.hikati
/ppc440.hikati
/ppc440fp.hikati
/root.hikati
/root32.hikati
/sh.hikati
/sh4.hikati
/sparc.hikati
/spc.hikati
/ssh4.hikati
/x32.hikati
/x64.hikati
/x86.hikati
/x86_32.hikati
/x86_64.hikati
/hikati.arc
/hikati.arm
/hikati.arm4
/hikati.arm4l
/hikati.arm4t
/hikati.arm4tl
/hikati.arm4tll
/hikati.arm5
/hikati.arm5l
/hikati.arm5n
/hikati.arm6
/hikati.arm64
/hikati.arm6l
/hikati.arm7
/hikati.arm7l
/hikati.arm8
/hikati.armv4
/hikati.armv4l
/hikati.armv5l
/hikati.armv6
/hikati.armv61
/hikati.armv6l
/hikati.armv7l
/hikati.dbg
/hikati.exploit
/hikati.i4
/hikati.i486
/hikati.i586
/hikati.i6
/hikati.i686
/hikati.kill
/hikati.m68
/hikati.m68k
/hikati.mips
/hikati.mips64
/hikati.mipsel
/hikati.mpsl
/hikati.pcc
/hikati.powerpc
/hikati.powerpc-440fp
/hikati.powerppc
/hikati.ppc
/hikati.ppc2
/hikati.ppc440
/hikati.ppc440fp
/hikati.root
/hikati.root32
/hikati.sh
/hikati.sh4
/hikati.sparc
/hikati.spc
/hikati.ssh4
/hikati.x32
/hikati.x64
/hikati.x86
/hikati.x86_32
/hikati.x86_64

# Reference: https://twitter.com/bad_packets/status/1260354368210997248

139.99.237.109:114
139.99.237.109:60010

# Reference: https://twitter.com/0xrb/status/1260824675820515328

192.136.146.53:1691
/arc.ffwaFawe
/arm.ffwaFawe
/arm4.ffwaFawe
/arm4l.ffwaFawe
/arm4t.ffwaFawe
/arm4tl.ffwaFawe
/arm4tll.ffwaFawe
/arm5.ffwaFawe
/arm5l.ffwaFawe
/arm5n.ffwaFawe
/arm6.ffwaFawe
/arm64.ffwaFawe
/arm6l.ffwaFawe
/arm7.ffwaFawe
/arm7l.ffwaFawe
/arm8.ffwaFawe
/armv4.ffwaFawe
/armv4l.ffwaFawe
/armv5l.ffwaFawe
/armv6.ffwaFawe
/armv61.ffwaFawe
/armv6l.ffwaFawe
/armv7l.ffwaFawe
/dbg.ffwaFawe
/exploit.ffwaFawe
/i4.ffwaFawe
/i486.ffwaFawe
/i586.ffwaFawe
/i6.ffwaFawe
/i686.ffwaFawe
/kill.ffwaFawe
/m68.ffwaFawe
/m68k.ffwaFawe
/mips.ffwaFawe
/mips64.ffwaFawe
/mipsel.ffwaFawe
/mpsl.ffwaFawe
/pcc.ffwaFawe
/powerpc-440fp.ffwaFawe
/powerpc.ffwaFawe
/powerppc.ffwaFawe
/ppc.ffwaFawe
/ppc2.ffwaFawe
/ppc440.ffwaFawe
/ppc440fp.ffwaFawe
/root.ffwaFawe
/root32.ffwaFawe
/sh.ffwaFawe
/sh4.ffwaFawe
/sparc.ffwaFawe
/spc.ffwaFawe
/ssh4.ffwaFawe
/x32.ffwaFawe
/x64.ffwaFawe
/x86.ffwaFawe
/x86_32.ffwaFawe
/x86_64.ffwaFawe
/ffwaFawe.arc
/ffwaFawe.arm
/ffwaFawe.arm4
/ffwaFawe.arm4l
/ffwaFawe.arm4t
/ffwaFawe.arm4tl
/ffwaFawe.arm4tll
/ffwaFawe.arm5
/ffwaFawe.arm5l
/ffwaFawe.arm5n
/ffwaFawe.arm6
/ffwaFawe.arm64
/ffwaFawe.arm6l
/ffwaFawe.arm7
/ffwaFawe.arm7l
/ffwaFawe.arm8
/ffwaFawe.armv4
/ffwaFawe.armv4l
/ffwaFawe.armv5l
/ffwaFawe.armv6
/ffwaFawe.armv61
/ffwaFawe.armv6l
/ffwaFawe.armv7l
/ffwaFawe.dbg
/ffwaFawe.exploit
/ffwaFawe.i4
/ffwaFawe.i486
/ffwaFawe.i586
/ffwaFawe.i6
/ffwaFawe.i686
/ffwaFawe.kill
/ffwaFawe.m68
/ffwaFawe.m68k
/ffwaFawe.mips
/ffwaFawe.mips64
/ffwaFawe.mipsel
/ffwaFawe.mpsl
/ffwaFawe.pcc
/ffwaFawe.powerpc
/ffwaFawe.powerpc-440fp
/ffwaFawe.powerppc
/ffwaFawe.ppc
/ffwaFawe.ppc2
/ffwaFawe.ppc440
/ffwaFawe.ppc440fp
/ffwaFawe.root
/ffwaFawe.root32
/ffwaFawe.sh
/ffwaFawe.sh4
/ffwaFawe.sparc
/ffwaFawe.spc
/ffwaFawe.ssh4
/ffwaFawe.x32
/ffwaFawe.x64
/ffwaFawe.x86
/ffwaFawe.x86_32
/ffwaFawe.x86_64

# Reference: https://unit42.paloaltonetworks.com/hoaxcalls-mirai-target-legacy-symantec-web-gateways/
# Reference: https://www.virustotal.com/gui/domain/plexle.us/relations

plexle.us
/Th5xrRAm

# Reference: https://twitter.com/bad_packets/status/1263239864335491072

134.209.86.250:420
134.209.86.250:999

# Reference: https://twitter.com/malwaremustd1e/status/1265321238383099904

37.49.230.190:839

# Reference: https://twitter.com/malwaremustd1e/status/1264417940742389762

45.14.224.106:45454

# Reference: https://www.virustotal.com/gui/file/73a39b4fa389eedadd230adf1b96ba7e295c30edbacd9484fef6168a0b345e37/detection

/puparc
/puparm
/puparm4
/puparm4l
/puparm4t
/puparm4tl
/puparm4tll
/puparm5
/puparm5l
/puparm5n
/puparm6
/puparm64
/puparm6l
/puparm7
/puparm7l
/puparm8
/puparmv4
/puparmv4l
/puparmv5l
/puparmv6
/puparmv61
/puparmv6l
/puparmv7l
/pupdbg
/pupexploit
/pupi4
/pupi486
/pupi586
/pupi6
/pupi686
/pupkill
/pupm68
/pupm68k
/pupmips
/pupmips64
/pupmipsel
/pupmpsl
/puppcc
/puppowerpc
/puppowerpc-440fp
/puppowerppc
/pupppc
/pupppc2
/pupppc440
/pupppc440fp
/puproot
/puproot32
/pupsh
/pupsh4
/pupsparc
/pupspc
/pupssh4
/pupx32
/pupx64
/pupx86
/pupx86_32
/pupx86_64

# Reference: https://twitter.com/bad_packets/status/1266804760817963009

23.254.164.76:1337
23.254.164.76:89
/mmmmh.arc
/mmmmh.arm
/mmmmh.arm4
/mmmmh.arm4l
/mmmmh.arm4t
/mmmmh.arm4tl
/mmmmh.arm4tll
/mmmmh.arm5
/mmmmh.arm5l
/mmmmh.arm5n
/mmmmh.arm6
/mmmmh.arm64
/mmmmh.arm6l
/mmmmh.arm7
/mmmmh.arm7l
/mmmmh.arm8
/mmmmh.armv4
/mmmmh.armv4l
/mmmmh.armv5l
/mmmmh.armv6
/mmmmh.armv61
/mmmmh.armv6l
/mmmmh.armv7l
/mmmmh.dbg
/mmmmh.exploit
/mmmmh.i4
/mmmmh.i486
/mmmmh.i586
/mmmmh.i6
/mmmmh.i686
/mmmmh.kill
/mmmmh.m68
/mmmmh.m68k
/mmmmh.mips
/mmmmh.mips64
/mmmmh.mipsel
/mmmmh.mpsl
/mmmmh.pcc
/mmmmh.powerpc
/mmmmh.powerpc-440fp
/mmmmh.powerppc
/mmmmh.ppc
/mmmmh.ppc2
/mmmmh.ppc440
/mmmmh.ppc440fp
/mmmmh.root
/mmmmh.root32
/mmmmh.sh
/mmmmh.sh4
/mmmmh.sparc
/mmmmh.spc
/mmmmh.ssh4
/mmmmh.x32
/mmmmh.x64
/mmmmh.x86
/mmmmh.x86_32
/mmmmh.x86_64

# Reference: https://twitter.com/bad_packets/status/1266600546288336896

37.49.226.220:1111
37.49.226.220:666

# Reference: https://twitter.com/bad_packets/status/1268385295935795200

37.49.224.159:420
37.49.224.159:666

# Reference: https://twitter.com/bad_packets/status/1272280904967176192

192.236.146.153:12942
192.236.146.153:17244

# Reference: https://twitter.com/bad_packets/status/1275918363877752832

80.82.70.140:49152
80.82.70.140:65535

# Reference: https://twitter.com/bad_packets/status/1275917398487400449

/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arc
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm4
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm4l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm4t
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm4tl
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm4tll
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm5
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm5l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm5n
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm6
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm64
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm6l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm7
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm7l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.arm8
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.armv4
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.armv4l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.armv5l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.armv6
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.armv61
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.armv6l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.armv7l
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.dbg
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.exploit
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.i4
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.i486
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.i586
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.i6
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.i686
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.kill
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.m68
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.m68k
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.mips
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.mips64
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.mipsel
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.mpsl
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.pcc
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.powerpc
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.powerpc-440fp
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.powerppc
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.ppc
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.ppc2
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.ppc440
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.ppc440fp
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.root
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.root32
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.sh
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.sh4
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.sparc
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.spc
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.ssh4
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.x32
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.x64
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.x86
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.x86_32
/ef59f34faec0514e8d96b40f72b355d99b91f45d5cd14dce39094dbcd8c4e002.x86_64

# Reference: https://www.virustotal.com/gui/file/bfb4cb6e39383976353e8e1d4458c50ab0fc45415e3d7cdbf5d7bd6bf5abb763/detection

185.103.110.146:9371

# Reference: https://www.virustotal.com/gui/file/26e3198952b77204760f20d2202165ee1dfc43de8beda6e6c7a1e238bcd9ef6b/detection

185.103.110.146:9272

# Reference: https://www.virustotal.com/gui/file/7cc1b3b0b8efbbc7c2fcc4d293fd64b2755275baee3f692ebdbcaa9fa48e380e/detection

37.49.224.67:555

# Reference: https://www.virustotal.com/gui/file/4fb93870581a652c1a9c0f96d2ed5c192e6e86066a2d0177ea8a8d23b018e600/detection

37.49.224.67:1555

# Reference: https://blog.netlab.360.com/the-gafgyt-variant-vbot-and-its-31-campaigns/

104.244.75.12:666
142.11.194.209:1337
142.11.194.209:17911
142.11.194.209:34
142.11.194.209:44
184.172.110.248:666
184.172.110.249:666
185.172.110.248:323
185.172.110.248:666
185.225.19.200:2017
185.225.19.200:666
192.119.66.66:7331
192.129.188.98:323
205.185.123.101:666
23.254.164.76:107
23.254.164.76:33
23.254.164.76:89
45.84.196.148:1227
50.115.173.131:111
85.92.108.211:1447
kowaiontop.xyz
cnc.kowaiontop.xyz

# Reference: https://www.virustotal.com/gui/file/84f5daba5fa4c994b72178a8afa33d31405f8e82dc0233878d785e6c379fbb67/detection

185.172.110.210:3742

# Reference: https://www.virustotal.com/gui/file/84f5daba5fa4c994b72178a8afa33d31405f8e82dc0233878d785e6c379fbb67/detection

185.172.110.210:18035

# Reference: https://www.virustotal.com/gui/ip-address/185.172.110.210/relations

/SP.arcServ
/SP.armServ
/SP.arm4Serv
/SP.arm4lServ
/SP.arm4tServ
/SP.arm4tlServ
/SP.arm4tllServ
/SP.arm5Serv
/SP.arm5lServ
/SP.arm5nServ
/SP.arm6Serv
/SP.arm64Serv
/SP.arm6lServ
/SP.arm7Serv
/SP.arm7lServ
/SP.arm8Serv
/SP.armv4Serv
/SP.armv4lServ
/SP.armv5lServ
/SP.armv6Serv
/SP.armv61Serv
/SP.armv6lServ
/SP.armv7lServ
/SP.dbgServ
/SP.exploitServ
/SP.i4Serv
/SP.i486Serv
/SP.i586Serv
/SP.i6Serv
/SP.i686Serv
/SP.killServ
/SP.m68Serv
/SP.m68kServ
/SP.mipsServ
/SP.mips64Serv
/SP.mipsebServ
/SP.mipselServ
/SP.mpslServ
/SP.pccServ
/SP.powerpcServ
/SP.powerpc-440fpServ
/SP.powerppcServ
/SP.ppcServ
/SP.ppc2Serv
/SP.ppc440Serv
/SP.ppc440fpServ
/SP.rootServ
/SP.root32Serv
/SP.shServ
/SP.sh4Serv
/SP.sparcServ
/SP.spcServ
/SP.ssh4Serv
/SP.x32Serv
/SP.x64Serv
/SP.x86Serv
/SP.x86_32Serv
/SP.x86_64Serv

# Reference: https://twitter.com/bad_packets/status/1284980788908285952

198.211.110.4:733
198.211.110.4:961

# Reference: https://twitter.com/bad_packets/status/1278083837096951809
# Reference: https://www.virustotal.com/gui/file/5672ef20892ace383ee3a4d7dd81c0bf79a72a126523584f0b65e094f78b9e12/detection

5.206.227.228:7654
5.206.227.228:7685

# Reference: https://www.virustotal.com/gui/file/acfabf7bc62e33b26b1250ae802068d8b1d70ea4b30a9bbccd8d02dd980adce7/detection

5.206.227.228:60001
5.206.227.228:5555
5.206.227.228:80

# Reference: https://twitter.com/bad_packets/status/1291789970689015811

/skidbot.arc
/skidbot.arm
/skidbot.arm4
/skidbot.arm4l
/skidbot.arm4t
/skidbot.arm4tl
/skidbot.arm4tll
/skidbot.arm5
/skidbot.arm5l
/skidbot.arm5n
/skidbot.arm6
/skidbot.arm64
/skidbot.arm6l
/skidbot.arm7
/skidbot.arm7l
/skidbot.arm8
/skidbot.armv4
/skidbot.armv4l
/skidbot.armv5l
/skidbot.armv6
/skidbot.armv61
/skidbot.armv6l
/skidbot.armv7l
/skidbot.dbg
/skidbot.exploit
/skidbot.i4
/skidbot.i486
/skidbot.i586
/skidbot.i6
/skidbot.i686
/skidbot.kill
/skidbot.m68
/skidbot.m68k
/skidbot.mips
/skidbot.mips64
/skidbot.mipsel
/skidbot.mpsl
/skidbot.pcc
/skidbot.powerpc
/skidbot.powerpc-440fp
/skidbot.powerppc
/skidbot.ppc
/skidbot.ppc2
/skidbot.ppc440
/skidbot.ppc440fp
/skidbot.root
/skidbot.root32
/skidbot.sh
/skidbot.sh4
/skidbot.sparc
/skidbot.spc
/skidbot.ssh4
/skidbot.x32
/skidbot.x64
/skidbot.x86
/skidbot.x86_32
/skidbot.x86_64

# Reference: https://twitter.com/abuse_ch/status/1294160873259438083

/wet.arc
/wet.arm
/wet.arm4
/wet.arm4l
/wet.arm4t
/wet.arm4tl
/wet.arm4tll
/wet.arm5
/wet.arm5l
/wet.arm5n
/wet.arm6
/wet.arm64
/wet.arm6l
/wet.arm7
/wet.arm7l
/wet.arm8
/wet.armv4
/wet.armv4l
/wet.armv5l
/wet.armv6
/wet.armv61
/wet.armv6l
/wet.armv7l
/wet.dbg
/wet.exploit
/wet.i4
/wet.i486
/wet.i586
/wet.i6
/wet.i686
/wet.kill
/wet.m68
/wet.m68k
/wet.mips
/wet.mips64
/wet.mipseb
/wet.mipsel
/wet.mpsl
/wet.pcc
/wet.powerpc
/wet.powerpc-440fp
/wet.powerppc
/wet.ppc
/wet.ppc2
/wet.ppc440
/wet.ppc440fp
/wet.root
/wet.root32
/wet.sh
/wet.sh4
/wet.sparc
/wet.spc
/wet.ssh4
/wet.x32
/wet.x64
/wet.x86
/wet.x86_32
/wet.x86_64

# Reference: https://twitter.com/bad_packets/status/1297255744597716992

5.206.227.136:34712
5.206.227.136:45
/wowe.arc
/wowe.arm
/wowe.arm4
/wowe.arm4l
/wowe.arm4t
/wowe.arm4tl
/wowe.arm4tll
/wowe.arm5
/wowe.arm5l
/wowe.arm5n
/wowe.arm6
/wowe.arm64
/wowe.arm6l
/wowe.arm7
/wowe.arm7l
/wowe.arm8
/wowe.armv4
/wowe.armv4l
/wowe.armv5l
/wowe.armv6
/wowe.armv61
/wowe.armv6l
/wowe.armv7l
/wowe.dbg
/wowe.exploit
/wowe.i4
/wowe.i486
/wowe.i586
/wowe.i6
/wowe.i686
/wowe.kill
/wowe.m68
/wowe.m68k
/wowe.mips
/wowe.mips64
/wowe.mipseb
/wowe.mipsel
/wowe.mpsl
/wowe.pcc
/wowe.powerpc
/wowe.powerpc-440fp
/wowe.powerppc
/wowe.ppc
/wowe.ppc2
/wowe.ppc440
/wowe.ppc440fp
/wowe.root
/wowe.root32
/wowe.sh
/wowe.sh4
/wowe.sparc
/wowe.spc
/wowe.ssh4
/wowe.x32
/wowe.x64
/wowe.x86
/wowe.x86_32
/wowe.x86_64

# Reference: https://twitter.com/0xrb/status/1297836170752081921

/xt.arc
/xt.arm
/xt.arm4
/xt.arm4l
/xt.arm4t
/xt.arm4tl
/xt.arm4tll
/xt.arm5
/xt.arm5l
/xt.arm5n
/xt.arm6
/xt.arm64
/xt.arm6l
/xt.arm7
/xt.arm7l
/xt.arm8
/xt.armv4
/xt.armv4l
/xt.armv5l
/xt.armv6
/xt.armv61
/xt.armv6l
/xt.armv7l
/xt.dbg
/xt.exploit
/xt.i4
/xt.i486
/xt.i586
/xt.i6
/xt.i686
/xt.kill
/xt.m68
/xt.m68k
/xt.mips
/xt.mips64
/xt.mipseb
/xt.mipsel
/xt.mpsl
/xt.pcc
/xt.powerpc
/xt.powerpc-440fp
/xt.powerppc
/xt.ppc
/xt.ppc2
/xt.ppc440
/xt.ppc440fp
/xt.root
/xt.root32
/xt.sh
/xt.sh4
/xt.sparc
/xt.spc
/xt.ssh4
/xt.x32
/xt.x64
/xt.x86
/xt.x86_32
/xt.x86_64
/.xxshit/

# Reference: https://twitter.com/VessOnSecurity/status/1297907140464717824

/(null).arc
/(null).arm
/(null).arm4
/(null).arm4l
/(null).arm4t
/(null).arm4tl
/(null).arm4tll
/(null).arm5
/(null).arm5l
/(null).arm5n
/(null).arm6
/(null).arm64
/(null).arm6l
/(null).arm7
/(null).arm7l
/(null).arm8
/(null).armv4
/(null).armv4l
/(null).armv5l
/(null).armv6
/(null).armv61
/(null).armv6l
/(null).armv7l
/(null).dbg
/(null).exploit
/(null).i4
/(null).i486
/(null).i586
/(null).i6
/(null).i686
/(null).kill
/(null).m68
/(null).m68k
/(null).mips
/(null).mips64
/(null).mipseb
/(null).mipsel
/(null).mpsl
/(null).pcc
/(null).powerpc
/(null).powerpc-440fp
/(null).powerppc
/(null).ppc
/(null).ppc2
/(null).ppc440
/(null).ppc440fp
/(null).root
/(null).root32
/(null).sh
/(null).sh4
/(null).sparc
/(null).spc
/(null).ssh4
/(null).x32
/(null).x64
/(null).x86
/(null).x86_32
/(null).x86_64

# Reference: https://twitter.com/malwaremustd1e/status/1298230798135558145
# Reference: https://www.virustotal.com/gui/ip-address/149.56.26.173/relations
# Reference: https://www.virustotal.com/gui/file/2646bd9f9050ce9d691d5d2705ddff2b25a93d76021f19f4f1c45d26f5dbdf1e/detection
# Reference: https://www.virustotal.com/gui/file/9fedeb48fb7d2b90616e1355f77aed2ee2dfe5b229ed655aad1ff982ac5ff211/detection

158.37.239.176:37215
158.37.239.176:45999
164.243.193.113:37215
164.243.193.113:45999
93.122.204.209:37215
93.122.204.209:45999
fuckme69.duckdns.org
justcry.duckdns.org

# Reference: https://pastebin.com/6JpUcnWT

/Akio.arc
/Akio.arm
/Akio.arm4
/Akio.arm4l
/Akio.arm4t
/Akio.arm4tl
/Akio.arm4tll
/Akio.arm5
/Akio.arm5l
/Akio.arm5n
/Akio.arm6
/Akio.arm64
/Akio.arm6l
/Akio.arm7
/Akio.arm7l
/Akio.arm8
/Akio.armv4
/Akio.armv4l
/Akio.armv5l
/Akio.armv6
/Akio.armv61
/Akio.armv6l
/Akio.armv7l
/Akio.dbg
/Akio.exploit
/Akio.i4
/Akio.i486
/Akio.i586
/Akio.i6
/Akio.i686
/Akio.kill
/Akio.m68
/Akio.m68k
/Akio.mips
/Akio.mips64
/Akio.mipseb
/Akio.mipsel
/Akio.mpsl
/Akio.pcc
/Akio.powerpc
/Akio.powerpc-440fp
/Akio.powerppc
/Akio.ppc
/Akio.ppc2
/Akio.ppc440
/Akio.ppc440fp
/Akio.root
/Akio.root32
/Akio.sh
/Akio.sh4
/Akio.sparc
/Akio.spc
/Akio.ssh4
/Akio.x32
/Akio.x64
/Akio.x86
/Akio.x86_32
/Akio.x86_64
/HashtagFreeInternet.arc
/HashtagFreeInternet.arm
/HashtagFreeInternet.arm4
/HashtagFreeInternet.arm4l
/HashtagFreeInternet.arm4t
/HashtagFreeInternet.arm4tl
/HashtagFreeInternet.arm4tll
/HashtagFreeInternet.arm5
/HashtagFreeInternet.arm5l
/HashtagFreeInternet.arm5n
/HashtagFreeInternet.arm6
/HashtagFreeInternet.arm64
/HashtagFreeInternet.arm6l
/HashtagFreeInternet.arm7
/HashtagFreeInternet.arm7l
/HashtagFreeInternet.arm8
/HashtagFreeInternet.armv4
/HashtagFreeInternet.armv4l
/HashtagFreeInternet.armv5l
/HashtagFreeInternet.armv6
/HashtagFreeInternet.armv61
/HashtagFreeInternet.armv6l
/HashtagFreeInternet.armv7l
/HashtagFreeInternet.dbg
/HashtagFreeInternet.exploit
/HashtagFreeInternet.i4
/HashtagFreeInternet.i486
/HashtagFreeInternet.i586
/HashtagFreeInternet.i6
/HashtagFreeInternet.i686
/HashtagFreeInternet.kill
/HashtagFreeInternet.m68
/HashtagFreeInternet.m68k
/HashtagFreeInternet.mips
/HashtagFreeInternet.mips64
/HashtagFreeInternet.mipseb
/HashtagFreeInternet.mipsel
/HashtagFreeInternet.mpsl
/HashtagFreeInternet.pcc
/HashtagFreeInternet.powerpc
/HashtagFreeInternet.powerpc-440fp
/HashtagFreeInternet.powerppc
/HashtagFreeInternet.ppc
/HashtagFreeInternet.ppc2
/HashtagFreeInternet.ppc440
/HashtagFreeInternet.ppc440fp
/HashtagFreeInternet.root
/HashtagFreeInternet.root32
/HashtagFreeInternet.sh
/HashtagFreeInternet.sh4
/HashtagFreeInternet.sparc
/HashtagFreeInternet.spc
/HashtagFreeInternet.ssh4
/HashtagFreeInternet.x32
/HashtagFreeInternet.x64
/HashtagFreeInternet.x86
/HashtagFreeInternet.x86_32
/HashtagFreeInternet.x86_64
/xZTYFDBXVSDVS456/

# Reference: https://twitter.com/bad_packets/status/1300858046587969536

78.142.18.20:1312
78.142.18.20:3912

# Reference: https://twitter.com/0xrb/status/1302439106459262977

/aeneas.arc
/aeneas.arm
/aeneas.arm4
/aeneas.arm4l
/aeneas.arm4t
/aeneas.arm4tl
/aeneas.arm4tll
/aeneas.arm5
/aeneas.arm5l
/aeneas.arm5n
/aeneas.arm6
/aeneas.arm64
/aeneas.arm6l
/aeneas.arm7
/aeneas.arm7l
/aeneas.arm8
/aeneas.armv4
/aeneas.armv4l
/aeneas.armv5l
/aeneas.armv6
/aeneas.armv61
/aeneas.armv6l
/aeneas.armv7l
/aeneas.dbg
/aeneas.exploit
/aeneas.i4
/aeneas.i486
/aeneas.i586
/aeneas.i6
/aeneas.i686
/aeneas.kill
/aeneas.m68
/aeneas.m68k
/aeneas.mips
/aeneas.mips64
/aeneas.mipseb
/aeneas.mipsel
/aeneas.mpsl
/aeneas.pcc
/aeneas.powerpc
/aeneas.powerpc-440fp
/aeneas.powerppc
/aeneas.ppc
/aeneas.ppc2
/aeneas.ppc440
/aeneas.ppc440fp
/aeneas.root
/aeneas.root32
/aeneas.sh
/aeneas.sh4
/aeneas.sparc
/aeneas.spc
/aeneas.ssh4
/aeneas.x32
/aeneas.x64
/aeneas.x86
/aeneas.x86_32
/aeneas.x86_64
/Anti.arc
/Anti.arm
/Anti.arm4
/Anti.arm4l
/Anti.arm4t
/Anti.arm4tl
/Anti.arm4tll
/Anti.arm5
/Anti.arm5l
/Anti.arm5n
/Anti.arm6
/Anti.arm64
/Anti.arm6l
/Anti.arm7
/Anti.arm7l
/Anti.arm8
/Anti.armv4
/Anti.armv4l
/Anti.armv5l
/Anti.armv6
/Anti.armv61
/Anti.armv6l
/Anti.armv7l
/Anti.dbg
/Anti.exploit
/Anti.i4
/Anti.i486
/Anti.i586
/Anti.i6
/Anti.i686
/Anti.kill
/Anti.m68
/Anti.m68k
/Anti.mips
/Anti.mips64
/Anti.mipseb
/Anti.mipsel
/Anti.mpsl
/Anti.pcc
/Anti.powerpc
/Anti.powerpc-440fp
/Anti.powerppc
/Anti.ppc
/Anti.ppc2
/Anti.ppc440
/Anti.ppc440fp
/Anti.root
/Anti.root32
/Anti.sh
/Anti.sh4
/Anti.sparc
/Anti.spc
/Anti.ssh4
/Anti.x32
/Anti.x64
/Anti.x86
/Anti.x86_32
/Anti.x86_64
/aztec.arc
/aztec.arm
/aztec.arm4
/aztec.arm4l
/aztec.arm4t
/aztec.arm4tl
/aztec.arm4tll
/aztec.arm5
/aztec.arm5l
/aztec.arm5n
/aztec.arm6
/aztec.arm64
/aztec.arm6l
/aztec.arm7
/aztec.arm7l
/aztec.arm8
/aztec.armv4
/aztec.armv4l
/aztec.armv5l
/aztec.armv6
/aztec.armv61
/aztec.armv6l
/aztec.armv7l
/aztec.dbg
/aztec.exploit
/aztec.i4
/aztec.i486
/aztec.i586
/aztec.i6
/aztec.i686
/aztec.kill
/aztec.m68
/aztec.m68k
/aztec.mips
/aztec.mips64
/aztec.mipseb
/aztec.mipsel
/aztec.mpsl
/aztec.pcc
/aztec.powerpc
/aztec.powerpc-440fp
/aztec.powerppc
/aztec.ppc
/aztec.ppc2
/aztec.ppc440
/aztec.ppc440fp
/aztec.root
/aztec.root32
/aztec.sh
/aztec.sh4
/aztec.sparc
/aztec.spc
/aztec.ssh4
/aztec.x32
/aztec.x64
/aztec.x86
/aztec.x86_32
/aztec.x86_64
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arc
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm4
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm4l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm4t
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm4tl
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm4tll
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm5
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm5l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm5n
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm6
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm64
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm6l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm7
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm7l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.arm8
/FuckBitchBastardDamnCuntJesusHaroldChristbins.armv4
/FuckBitchBastardDamnCuntJesusHaroldChristbins.armv4l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.armv5l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.armv6
/FuckBitchBastardDamnCuntJesusHaroldChristbins.armv61
/FuckBitchBastardDamnCuntJesusHaroldChristbins.armv6l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.armv7l
/FuckBitchBastardDamnCuntJesusHaroldChristbins.dbg
/FuckBitchBastardDamnCuntJesusHaroldChristbins.exploit
/FuckBitchBastardDamnCuntJesusHaroldChristbins.i4
/FuckBitchBastardDamnCuntJesusHaroldChristbins.i486
/FuckBitchBastardDamnCuntJesusHaroldChristbins.i586
/FuckBitchBastardDamnCuntJesusHaroldChristbins.i6
/FuckBitchBastardDamnCuntJesusHaroldChristbins.i686
/FuckBitchBastardDamnCuntJesusHaroldChristbins.kill
/FuckBitchBastardDamnCuntJesusHaroldChristbins.m68
/FuckBitchBastardDamnCuntJesusHaroldChristbins.m68k
/FuckBitchBastardDamnCuntJesusHaroldChristbins.mips
/FuckBitchBastardDamnCuntJesusHaroldChristbins.mips64
/FuckBitchBastardDamnCuntJesusHaroldChristbins.mipseb
/FuckBitchBastardDamnCuntJesusHaroldChristbins.mipsel
/FuckBitchBastardDamnCuntJesusHaroldChristbins.mpsl
/FuckBitchBastardDamnCuntJesusHaroldChristbins.pcc
/FuckBitchBastardDamnCuntJesusHaroldChristbins.powerpc
/FuckBitchBastardDamnCuntJesusHaroldChristbins.powerpc-440fp
/FuckBitchBastardDamnCuntJesusHaroldChristbins.powerppc
/FuckBitchBastardDamnCuntJesusHaroldChristbins.ppc
/FuckBitchBastardDamnCuntJesusHaroldChristbins.ppc2
/FuckBitchBastardDamnCuntJesusHaroldChristbins.ppc440
/FuckBitchBastardDamnCuntJesusHaroldChristbins.ppc440fp
/FuckBitchBastardDamnCuntJesusHaroldChristbins.root
/FuckBitchBastardDamnCuntJesusHaroldChristbins.root32
/FuckBitchBastardDamnCuntJesusHaroldChristbins.sh
/FuckBitchBastardDamnCuntJesusHaroldChristbins.sh4
/FuckBitchBastardDamnCuntJesusHaroldChristbins.sparc
/FuckBitchBastardDamnCuntJesusHaroldChristbins.spc
/FuckBitchBastardDamnCuntJesusHaroldChristbins.ssh4
/FuckBitchBastardDamnCuntJesusHaroldChristbins.x32
/FuckBitchBastardDamnCuntJesusHaroldChristbins.x64
/FuckBitchBastardDamnCuntJesusHaroldChristbins.x86
/FuckBitchBastardDamnCuntJesusHaroldChristbins.x86_32
/FuckBitchBastardDamnCuntJesusHaroldChristbins.x86_64
/s0ylu.arc
/s0ylu.arm
/s0ylu.arm4
/s0ylu.arm4l
/s0ylu.arm4t
/s0ylu.arm4tl
/s0ylu.arm4tll
/s0ylu.arm5
/s0ylu.arm5l
/s0ylu.arm5n
/s0ylu.arm6
/s0ylu.arm64
/s0ylu.arm6l
/s0ylu.arm7
/s0ylu.arm7l
/s0ylu.arm8
/s0ylu.armv4
/s0ylu.armv4l
/s0ylu.armv5l
/s0ylu.armv6
/s0ylu.armv61
/s0ylu.armv6l
/s0ylu.armv7l
/s0ylu.dbg
/s0ylu.exploit
/s0ylu.i4
/s0ylu.i486
/s0ylu.i586
/s0ylu.i6
/s0ylu.i686
/s0ylu.kill
/s0ylu.m68
/s0ylu.m68k
/s0ylu.mips
/s0ylu.mips64
/s0ylu.mipseb
/s0ylu.mipsel
/s0ylu.mpsl
/s0ylu.pcc
/s0ylu.powerpc
/s0ylu.powerpc-440fp
/s0ylu.powerppc
/s0ylu.ppc
/s0ylu.ppc2
/s0ylu.ppc440
/s0ylu.ppc440fp
/s0ylu.root
/s0ylu.root32
/s0ylu.sh
/s0ylu.sh4
/s0ylu.sparc
/s0ylu.spc
/s0ylu.ssh4
/s0ylu.x32
/s0ylu.x64
/s0ylu.x86
/s0ylu.x86_32
/s0ylu.x86_64
/000x000/

# Reference: https://www.virustotal.com/gui/file/949c6f19c90d27c1a1277d38e56095bcb5f1cd6f0aeb886cb1e086be179d65b8/detection

156.190.222.16:37215
156.190.222.16:52869
156.190.222.16:60001
156.190.222.16:9833

# Reference: https://pastebin.com/Yipatipt
# Reference: https://blog.netlab.360.com/not-really-new-pyhton-ddos-bot-n3cr0m0rph-necromorph/

0ctosniff.net
/keksec.arc
/keksec.arcle-hs38
/keksec.arm
/keksec.arm4
/keksec.arm4l
/keksec.arm4t
/keksec.arm4tl
/keksec.arm4tll
/keksec.arm5
/keksec.arm5l
/keksec.arm5n
/keksec.arm6
/keksec.arm64
/keksec.arm6l
/keksec.arm7
/keksec.arm7l
/keksec.arm8
/keksec.armv4
/keksec.armv4l
/keksec.armv5l
/keksec.armv6
/keksec.armv61
/keksec.armv6l
/keksec.armv7l
/keksec.dbg
/keksec.exploit
/keksec.i4
/keksec.i486
/keksec.i586
/keksec.i6
/keksec.i686
/keksec.kill
/keksec.m68
/keksec.m68k
/keksec.mips
/keksec.mips64
/keksec.mipseb
/keksec.mipsel
/keksec.mpsl
/keksec.pcc
/keksec.powerpc
/keksec.powerpc-440fp
/keksec.powerppc
/keksec.ppc
/keksec.ppc2
/keksec.ppc440
/keksec.ppc440fp
/keksec.root
/keksec.root32
/keksec.sh
/keksec.sh4
/keksec.sparc
/keksec.spc
/keksec.ssh4
/keksec.x32
/keksec.x64
/keksec.x86
/keksec.x86_32
/keksec.x88_32
/keksec.x86_64
/keksec.x88_64
/notabotnet.arc
/notabotnet.arcle-hs38
/notabotnet.arm
/notabotnet.arm4
/notabotnet.arm4l
/notabotnet.arm4t
/notabotnet.arm4tl
/notabotnet.arm4tll
/notabotnet.arm5
/notabotnet.arm5l
/notabotnet.arm5n
/notabotnet.arm6
/notabotnet.arm64
/notabotnet.arm6l
/notabotnet.arm7
/notabotnet.arm7l
/notabotnet.arm8
/notabotnet.armv4
/notabotnet.armv4l
/notabotnet.armv5l
/notabotnet.armv6
/notabotnet.armv61
/notabotnet.armv6l
/notabotnet.armv7l
/notabotnet.dbg
/notabotnet.exploit
/notabotnet.i4
/notabotnet.i486
/notabotnet.i586
/notabotnet.i6
/notabotnet.i686
/notabotnet.kill
/notabotnet.m68
/notabotnet.m68k
/notabotnet.mips
/notabotnet.mips64
/notabotnet.mipseb
/notabotnet.mipsel
/notabotnet.mpsl
/notabotnet.pcc
/notabotnet.powerpc
/notabotnet.powerpc-440fp
/notabotnet.powerppc
/notabotnet.ppc
/notabotnet.ppc2
/notabotnet.ppc440
/notabotnet.ppc440fp
/notabotnet.root
/notabotnet.root32
/notabotnet.sh
/notabotnet.sh4
/notabotnet.sparc
/notabotnet.spc
/notabotnet.ssh4
/notabotnet.x32
/notabotnet.x64
/notabotnet.x86
/notabotnet.x86_32
/notabotnet.x86_64
/Oblivion121.arc
/Oblivion121.arcle-hs38
/Oblivion121.arm
/Oblivion121.arm4
/Oblivion121.arm4l
/Oblivion121.arm4t
/Oblivion121.arm4tl
/Oblivion121.arm4tll
/Oblivion121.arm5
/Oblivion121.arm5l
/Oblivion121.arm5n
/Oblivion121.arm6
/Oblivion121.arm64
/Oblivion121.arm6l
/Oblivion121.arm7
/Oblivion121.arm7l
/Oblivion121.arm8
/Oblivion121.armv4
/Oblivion121.armv4l
/Oblivion121.armv5l
/Oblivion121.armv6
/Oblivion121.armv61
/Oblivion121.armv6l
/Oblivion121.armv7l
/Oblivion121.dbg
/Oblivion121.exploit
/Oblivion121.i4
/Oblivion121.i486
/Oblivion121.i586
/Oblivion121.i6
/Oblivion121.i686
/Oblivion121.kill
/Oblivion121.m68
/Oblivion121.m68k
/Oblivion121.mips
/Oblivion121.mips64
/Oblivion121.mipseb
/Oblivion121.mipsel
/Oblivion121.mpsl
/Oblivion121.pcc
/Oblivion121.powerpc
/Oblivion121.powerpc-440fp
/Oblivion121.powerppc
/Oblivion121.ppc
/Oblivion121.ppc2
/Oblivion121.ppc440
/Oblivion121.ppc440fp
/Oblivion121.root
/Oblivion121.root32
/Oblivion121.sh
/Oblivion121.sh4
/Oblivion121.sparc
/Oblivion121.spc
/Oblivion121.ssh4
/Oblivion121.x32
/Oblivion121.x64
/Oblivion121.x86
/Oblivion121.x86_32
/Oblivion121.x86_64
/omfgitsloligang.arc
/omfgitsloligang.arcle-hs38
/omfgitsloligang.arm
/omfgitsloligang.arm4
/omfgitsloligang.arm4l
/omfgitsloligang.arm4t
/omfgitsloligang.arm4tl
/omfgitsloligang.arm4tll
/omfgitsloligang.arm5
/omfgitsloligang.arm5l
/omfgitsloligang.arm5n
/omfgitsloligang.arm6
/omfgitsloligang.arm64
/omfgitsloligang.arm6l
/omfgitsloligang.arm7
/omfgitsloligang.arm7l
/omfgitsloligang.arm8
/omfgitsloligang.armv4
/omfgitsloligang.armv4l
/omfgitsloligang.armv5l
/omfgitsloligang.armv6
/omfgitsloligang.armv61
/omfgitsloligang.armv6l
/omfgitsloligang.armv7l
/omfgitsloligang.dbg
/omfgitsloligang.exploit
/omfgitsloligang.i4
/omfgitsloligang.i486
/omfgitsloligang.i586
/omfgitsloligang.i6
/omfgitsloligang.i686
/omfgitsloligang.kill
/omfgitsloligang.m68
/omfgitsloligang.m68k
/omfgitsloligang.mips
/omfgitsloligang.mips64
/omfgitsloligang.mipseb
/omfgitsloligang.mipsel
/omfgitsloligang.mpsl
/omfgitsloligang.pcc
/omfgitsloligang.powerpc
/omfgitsloligang.powerpc-440fp
/omfgitsloligang.powerppc
/omfgitsloligang.ppc
/omfgitsloligang.ppc2
/omfgitsloligang.ppc440
/omfgitsloligang.ppc440fp
/omfgitsloligang.root
/omfgitsloligang.root32
/omfgitsloligang.sh
/omfgitsloligang.sh4
/omfgitsloligang.sparc
/omfgitsloligang.spc
/omfgitsloligang.ssh4
/omfgitsloligang.x32
/omfgitsloligang.x64
/omfgitsloligang.x86
/omfgitsloligang.x86_32
/omfgitsloligang.x86_64
/GenesisBrain/
/notabotnet/
/school-shit/
/yuwqukyl7238oliqadsa/67ot8l6y4gwlg/

# Reference: https://twitter.com/tolisec/status/1331638551298105346
# Reference: https://tolisec.com/ssh-backdoor-botnet-with-research-infection-technique/
# Reference: https://www.virustotal.com/gui/ip-address/45.11.181.37/relations
# Reference: https://www.virustotal.com/gui/file/3a09d7ff4e492c9df2ddd9f547d0307d8e57dabebfb0bb8673c0c078deda6232/detection

http://45.11.181.37
206.189.181.216:666
gay.energy
/WelcomeNewBotBuddy/
/WelcomeNewBotBuddy/OwO.php

# Reference: https://www.virustotal.com/gui/file/b0721830e67db7ecb74e931a5a75fd331308c70d521e60f5606a01f105abc47b/detection

37.49.225.110:1060

# Reference: https://www.virustotal.com/gui/file/ed0dbea1e14d3cd462076a4822deac41f00c1b030b56a7f55c388e39cb843a9d/detection

37.49.225.110:1070

# Reference: https://www.virustotal.com/gui/file/6a54d385c6054e8960deb0c6ffe2949ea77b8d1bc0b64cb3cbe44c8584ed72c6/detection

194.87.139.131:666

# Reference: https://www.virustotal.com/gui/file/39af622659d471e800bf6796347f70fef2a317140f989b735f8d9c0289a23c40/detection

134.122.16.251:666

# Reference: https://www.virustotal.com/gui/file/7b3deae9a12a99650e0797280ff6ed06e247b40a8bcea03d0712ff1797986efe/detection

198.144.190.136:666

# Reference: https://www.virustotal.com/gui/file/79f9db30b29afd565387c3eb6461065ba0a55bcc6ddc19be35cbce8db72b404f/detection

107.175.115.68:777

# Reference: https://www.virustotal.com/gui/file/b7613e4d1423abb47ee140d1402f8c3e17d084e481626b47c0cfbc279aa43d80/detection

140.82.62.247:666

# Reference: https://www.virustotal.com/gui/file/b566ec214dbf2c3fd91d175ae6613a64b6bc8d8de05db9a8878627648fe7fd30/detection

107.172.0.128:666

# Reference: https://www.virustotal.com/gui/file/04b0b762295445c423a7a7bd79632bc98ec7b1e99f83d028ab5f3cae50b7b1fb/detection

107.172.137.132:666

# Reference: https://www.virustotal.com/gui/file/8465ab89810f71cf1ce9de4464d675f374bcc31d21682edafa21ca46132c2f21/detection

107.172.165.188:666

# Reference: https://www.virustotal.com/gui/file/d6ed82c929f175f57c83d0f7b79ea51f60913b3b648264b83d56ba513d42ccc3/detection

67.205.159.43:666

# Reference: https://www.virustotal.com/gui/file/a56b22818f1ea3994b086c165a2c46b70e2d7352a3fdc0df523bc005a3b15548/detection

161.35.104.249:666

# Reference: https://www.virustotal.com/gui/file/6ecd3dfccf4f2a8281e60da3ecfd5cfc093bd8248363d9d975330433780ab1c9/detection

192.3.105.183:666

# Reference: https://www.virustotal.com/gui/file/ff5b4d6ce09ae4841bae072e7e073d18eb8c37349295ea2685cf75f50f960eff/detection

192.3.67.133:666

# Reference: https://www.virustotal.com/gui/file/2263ee6474b9c0b8ec5efc65f403bd2875e24a750eaefabe83b6a767f9c46118/detection

192.3.251.121:666

# Reference: https://www.virustotal.com/gui/file/1c4a8dc7ecd901ccc53061a0f5bd11aef45dedc7afd4cd8bc19b0fb0af6e3541/detection

174.138.36.204:7331

# Reference: https://www.virustotal.com/gui/file/dc8058f4564faa8e68021aff521f29b622da9a8c03ece9ba4a35576546fed915/detection

159.203.24.10:666

# Reference: https://www.virustotal.com/gui/file/7357f66c2778df70cb294b5d9740aa8c1b23eb7243268efb1c8143fdf9fb3385/detection

93.114.133.198:666

# Reference: https://www.virustotal.com/gui/file/d49b5b7da3dc5e19384c39c9da15e74c4525a5f852779428efc287819b46d67d/detection

37.46.150.177:666

# Reference: https://www.virustotal.com/gui/file/b85959de19993d0713dc5b08b47c5f74d4bfc4ba6b4f76c03f292cf54cb0dfd9/detection

37.49.230.175:666

# Reference: https://www.virustotal.com/gui/file/b7c309c1a77d99d21617af5a28b8f1cd7b18b54ecb845a08b5f66cbd3bf2a762/detection

185.158.248.203:666

# Reference: https://www.virustotal.com/gui/file/0df9ae3fa9f92fd59b7d97a997044da3f59da34e046fcb23a62cbbf3185ca244/detection

198.23.209.128:666

# Reference: https://www.virustotal.com/gui/file/c254fbc1cdc5bbf741c9eefe128c74af8758b6b97ff724e8e5737d90b4596a52/detection

45.14.224.77:666

# Reference: https://www.virustotal.com/gui/file/78a42a8c071fdd2e8808bbc8f4187d1580c42ca199af450093f8626a71b59757/detection

134.209.217.167:666

# Reference: https://www.virustotal.com/gui/file/01c25f51757a212a16df1c723f6f58161adba275a6fc4c98ed09d0e9d525b30a/detection

45.153.187.185:666

# Reference: https://www.virustotal.com/gui/file/4f5c3d0373bf8fc63bbd4208c31f1ec30f02946a37d1816791b67f96535c5bf8/detection

68.183.71.89:666

# Reference: https://www.virustotal.com/gui/file/08c92d41cf51b347324a58aab09125bc571fb290fa78f048bc9efa2f4ae84f54/detection

165.22.194.206:666

# Reference: https://www.virustotal.com/gui/file/1688f2a5cf91a10d8bfc7a99f85674eb3918d769ba5752b1d7a05c70a3019d5e/detection

167.172.147.200:666

# Reference: https://www.virustotal.com/gui/file/a111bf4fef8d90353d2c11206c05c88a1b4824c0e24e34b5f5bc42eea83593ce/detection

170.130.205.119:666

# Reference: https://www.virustotal.com/gui/file/22be1beff926138b9955781017b386d508cecd480d1e8b8d0e736b1f5f5aab76/detection

23.95.214.40:666

# Reference: https://www.virustotal.com/gui/file/08a813ff2bbf9adedf8179ca2bf428716c8f236c71d595b96c7864af07d73e26/detection

198.255.78.69:666

# Reference: https://www.virustotal.com/gui/file/e8212226ca6aa9036a6104669aa24084ea9c10051ffc5a0160c1ea35ba52e7e0/detection

134.209.220.1:666

# Reference: https://www.virustotal.com/gui/file/9bbc47bd83f63c74e58d3c3eb3ef0f0163c4d45febe17dccea8bded07a5304a1/detection

134.209.221.126:666

# Reference: https://www.virustotal.com/gui/file/c9953ccb36b3c70f48eb126595a4de83de9b9f81098f02ba9199add9d3e45f33/detection

93.114.133.190:420

# Reference: https://www.virustotal.com/gui/file/1fc0e2a2303212b52ad00de83752aab34a755cbb9120a800ba2d4c4a3837de6b/detection

194.15.36.243:666

# Reference: https://twitter.com/0xrb/status/1352101798467670016
# Reference: https://twitter.com/bad_packets/status/1352068028028997632

194.37.82.252:1010
194.37.82.252:281

# Reference: https://twitter.com/0xrb/status/1354305607570874370

/Anon.arc
/Anon.arcle-hs38
/Anon.arm
/Anon.arm4
/Anon.arm4l
/Anon.arm4t
/Anon.arm4tl
/Anon.arm4tll
/Anon.arm5
/Anon.arm5l
/Anon.arm5n
/Anon.arm6
/Anon.arm64
/Anon.arm6l
/Anon.arm7
/Anon.arm7l
/Anon.arm8
/Anon.armv4
/Anon.armv4l
/Anon.armv5l
/Anon.armv6
/Anon.armv61
/Anon.armv6l
/Anon.armv7l
/Anon.dbg
/Anon.exploit
/Anon.i4
/Anon.i486
/Anon.i586
/Anon.i6
/Anon.i686
/Anon.kill
/Anon.m68
/Anon.m68k
/Anon.mips
/Anon.mips64
/Anon.mipseb
/Anon.mipsel
/Anon.mpsl
/Anon.pcc
/Anon.powerpc
/Anon.powerpc-440fp
/Anon.powerppc
/Anon.ppc
/Anon.ppc2
/Anon.ppc440
/Anon.ppc440fp
/Anon.root
/Anon.root32
/Anon.sh
/Anon.sh4
/Anon.sparc
/Anon.spc
/Anon.ssh4
/Anon.x32
/Anon.x64
/Anon.x86
/Anon.x86_32
/Anon.x86_64
/cbr.arc
/cbr.arcle-hs38
/cbr.arm
/cbr.arm4
/cbr.arm4l
/cbr.arm4t
/cbr.arm4tl
/cbr.arm4tll
/cbr.arm5
/cbr.arm5l
/cbr.arm5n
/cbr.arm6
/cbr.arm64
/cbr.arm6l
/cbr.arm7
/cbr.arm7l
/cbr.arm8
/cbr.armv4
/cbr.armv4l
/cbr.armv5l
/cbr.armv6
/cbr.armv61
/cbr.armv6l
/cbr.armv7l
/cbr.dbg
/cbr.exploit
/cbr.i4
/cbr.i486
/cbr.i586
/cbr.i6
/cbr.i686
/cbr.kill
/cbr.m68
/cbr.m68k
/cbr.mips
/cbr.mips64
/cbr.mipseb
/cbr.mipsel
/cbr.mpsl
/cbr.pcc
/cbr.powerpc
/cbr.powerpc-440fp
/cbr.powerppc
/cbr.ppc
/cbr.ppc2
/cbr.ppc440
/cbr.ppc440fp
/cbr.root
/cbr.root32
/cbr.sh
/cbr.sh4
/cbr.sparc
/cbr.spc
/cbr.ssh4
/cbr.x32
/cbr.x64
/cbr.x86
/cbr.x86_32
/cbr.x86_64
/K1lLeR.arc
/K1lLeR.arcle-hs38
/K1lLeR.arm
/K1lLeR.arm4
/K1lLeR.arm4l
/K1lLeR.arm4t
/K1lLeR.arm4tl
/K1lLeR.arm4tll
/K1lLeR.arm5
/K1lLeR.arm5l
/K1lLeR.arm5n
/K1lLeR.arm6
/K1lLeR.arm64
/K1lLeR.arm6l
/K1lLeR.arm7
/K1lLeR.arm7l
/K1lLeR.arm8
/K1lLeR.armv4
/K1lLeR.armv4l
/K1lLeR.armv5l
/K1lLeR.armv6
/K1lLeR.armv61
/K1lLeR.armv6l
/K1lLeR.armv7l
/K1lLeR.dbg
/K1lLeR.exploit
/K1lLeR.i4
/K1lLeR.i486
/K1lLeR.i586
/K1lLeR.i6
/K1lLeR.i686
/K1lLeR.kill
/K1lLeR.m68
/K1lLeR.m68k
/K1lLeR.mips
/K1lLeR.mips64
/K1lLeR.mipseb
/K1lLeR.mipsel
/K1lLeR.mpsl
/K1lLeR.pcc
/K1lLeR.powerpc
/K1lLeR.powerpc-440fp
/K1lLeR.powerppc
/K1lLeR.ppc
/K1lLeR.ppc2
/K1lLeR.ppc440
/K1lLeR.ppc440fp
/K1lLeR.root
/K1lLeR.root32
/K1lLeR.sh
/K1lLeR.sh4
/K1lLeR.sparc
/K1lLeR.spc
/K1lLeR.ssh4
/K1lLeR.x32
/K1lLeR.x64
/K1lLeR.x86
/K1lLeR.x86_32
/K1lLeR.x86_64
/uzdad.arc
/uzdad.arcle-hs38
/uzdad.arm
/uzdad.arm4
/uzdad.arm4l
/uzdad.arm4t
/uzdad.arm4tl
/uzdad.arm4tll
/uzdad.arm5
/uzdad.arm5l
/uzdad.arm5n
/uzdad.arm6
/uzdad.arm64
/uzdad.arm6l
/uzdad.arm7
/uzdad.arm7l
/uzdad.arm8
/uzdad.armv4
/uzdad.armv4l
/uzdad.armv5l
/uzdad.armv6
/uzdad.armv61
/uzdad.armv6l
/uzdad.armv7l
/uzdad.dbg
/uzdad.exploit
/uzdad.i4
/uzdad.i486
/uzdad.i586
/uzdad.i6
/uzdad.i686
/uzdad.kill
/uzdad.m68
/uzdad.m68k
/uzdad.mips
/uzdad.mips64
/uzdad.mipseb
/uzdad.mipsel
/uzdad.mpsl
/uzdad.pcc
/uzdad.powerpc
/uzdad.powerpc-440fp
/uzdad.powerppc
/uzdad.ppc
/uzdad.ppc2
/uzdad.ppc440
/uzdad.ppc440fp
/uzdad.root
/uzdad.root32
/uzdad.sh
/uzdad.sh4
/uzdad.sparc
/uzdad.spc
/uzdad.ssh4
/uzdad.x32
/uzdad.x64
/uzdad.x86
/uzdad.x86_32
/uzdad.x86_64

# Reference: https://www.virustotal.com/gui/file/9dd113b788695d6dce8d7386fa9bf64e7efe3876a4dd51af3430da9d18a7c8b3/detection

46.29.163.28:9548

# Reference: https://twitter.com/r3dbU7z/status/1357089130077896704

/ktn.arc
/ktn.arcle-hs38
/ktn.arm
/ktn.arm4
/ktn.arm4l
/ktn.arm4t
/ktn.arm4tl
/ktn.arm4tll
/ktn.arm5
/ktn.arm5l
/ktn.arm5n
/ktn.arm6
/ktn.arm64
/ktn.arm6l
/ktn.arm7
/ktn.arm7l
/ktn.arm8
/ktn.armv4
/ktn.armv4l
/ktn.armv5l
/ktn.armv6
/ktn.armv61
/ktn.armv6l
/ktn.armv7l
/ktn.dbg
/ktn.exploit
/ktn.i4
/ktn.i486
/ktn.i586
/ktn.i6
/ktn.i686
/ktn.kill
/ktn.m68
/ktn.m68k
/ktn.mips
/ktn.mips64
/ktn.mipseb
/ktn.mipsel
/ktn.mpsl
/ktn.pcc
/ktn.powerpc
/ktn.powerpc-440fp
/ktn.powerppc
/ktn.ppc
/ktn.pp-c
/ktn.ppc2
/ktn.ppc440
/ktn.ppc440fp
/ktn.root
/ktn.root32
/ktn.sh
/ktn.sh4
/ktn.sparc
/ktn.spc
/ktn.ssh4
/ktn.x32
/ktn.x32_64
/ktn.x64
/ktn.x86
/ktn.x86_32
/ktn.x86_64

# Reference: https://twitter.com/r3dbU7z/status/1357475552010137600

/dk32
/dk64
/dk86

# Reference: https://www.virustotal.com/gui/file/62c323f4059e2ccf0a495007f04683275b009e34e41c0fb6062115ffa3899cf0/detection

78.142.29.122:2727

# Reference: https://www.virustotal.com/gui/file/f9db2639283312265e18f37b818713845ae505cfe3d98514c32f55fdf1eeb235/detection

78.142.29.122:4477

# Reference: https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/
# Reference: https://otx.alienvault.com/pulse/60425b0ab6820770fa97dae3

wvp3te7pkfczmnnl.onion

# Reference: https://blog.netlab.360.com/necro-shi-yong-tor-dong-tai-yu-ming-dga-shuang-sha-windows-linux/

faw623ska5evipvarobhpzu4ntoru5v6ia5444krr6deerdnvpa3p7ad.onion
bdcauhuzk0d.viewdns.net
ewmhkvdcoj3.servemp3.com
m1afommgsdowkmegc.redirectme.net
ntxkg0la99w.zapto.org
nwpzhm8ziyhdzm.redirectme.net
qb7opowcawiagia.viewdns.net
tfcxvcg0lkc9vpx.myftp.org
v5jke3mv89fjvxgd.serveftp.com
xxdqj6xbjpkzhk7k.servemp3.com

# Reference: https://www.lacework.com/the-kek-security-network/
# Reference: https://otx.alienvault.com/pulse/6053a8f9141fd3dd1337c02a

/ayylmao420kekuaintgettindesebinsarc
/ayylmao420kekuaintgettindesebinsarcle-hs38
/ayylmao420kekuaintgettindesebinsarm
/ayylmao420kekuaintgettindesebinsarm4
/ayylmao420kekuaintgettindesebinsarm4l
/ayylmao420kekuaintgettindesebinsarm4t
/ayylmao420kekuaintgettindesebinsarm4tl
/ayylmao420kekuaintgettindesebinsarm4tll
/ayylmao420kekuaintgettindesebinsarm5
/ayylmao420kekuaintgettindesebinsarm5l
/ayylmao420kekuaintgettindesebinsarm5n
/ayylmao420kekuaintgettindesebinsarm6
/ayylmao420kekuaintgettindesebinsarm64
/ayylmao420kekuaintgettindesebinsarm6l
/ayylmao420kekuaintgettindesebinsarm7
/ayylmao420kekuaintgettindesebinsarm7l
/ayylmao420kekuaintgettindesebinsarm8
/ayylmao420kekuaintgettindesebinsarmv4
/ayylmao420kekuaintgettindesebinsarmv4l
/ayylmao420kekuaintgettindesebinsarmv5l
/ayylmao420kekuaintgettindesebinsarmv6
/ayylmao420kekuaintgettindesebinsarmv61
/ayylmao420kekuaintgettindesebinsarmv6l
/ayylmao420kekuaintgettindesebinsarmv7l
/ayylmao420kekuaintgettindesebinsdbg
/ayylmao420kekuaintgettindesebinsexploit
/ayylmao420kekuaintgettindesebinsi4
/ayylmao420kekuaintgettindesebinsi486
/ayylmao420kekuaintgettindesebinsi586
/ayylmao420kekuaintgettindesebinsi6
/ayylmao420kekuaintgettindesebinsi686
/ayylmao420kekuaintgettindesebinskill
/ayylmao420kekuaintgettindesebinsm68
/ayylmao420kekuaintgettindesebinsm68k
/ayylmao420kekuaintgettindesebinsmips
/ayylmao420kekuaintgettindesebinsmips64
/ayylmao420kekuaintgettindesebinsmipseb
/ayylmao420kekuaintgettindesebinsmipsel
/ayylmao420kekuaintgettindesebinsmpsl
/ayylmao420kekuaintgettindesebinsmnvm
/ayylmao420kekuaintgettindesebinsnvm2
/ayylmao420kekuaintgettindesebinspcc
/ayylmao420kekuaintgettindesebinspowerpc
/ayylmao420kekuaintgettindesebinspowerpc-440fp
/ayylmao420kekuaintgettindesebinspowerppc
/ayylmao420kekuaintgettindesebinsppc
/ayylmao420kekuaintgettindesebinspp-c
/ayylmao420kekuaintgettindesebinsppc2
/ayylmao420kekuaintgettindesebinsppc440
/ayylmao420kekuaintgettindesebinsppc440fp
/ayylmao420kekuaintgettindesebinsroot
/ayylmao420kekuaintgettindesebinsroot32
/ayylmao420kekuaintgettindesebinssh
/ayylmao420kekuaintgettindesebinssh4
/ayylmao420kekuaintgettindesebinssparc
/ayylmao420kekuaintgettindesebinsspc
/ayylmao420kekuaintgettindesebinsssh4
/ayylmao420kekuaintgettindesebinsx32
/ayylmao420kekuaintgettindesebinsx32_64
/ayylmao420kekuaintgettindesebinsx64
/ayylmao420kekuaintgettindesebinsx86
/ayylmao420kekuaintgettindesebinsx86_32
/ayylmao420kekuaintgettindesebinsx86_64
/fagbinz.arc
/fagbinz.arcle-hs38
/fagbinz.arm
/fagbinz.arm4
/fagbinz.arm4l
/fagbinz.arm4t
/fagbinz.arm4tl
/fagbinz.arm4tll
/fagbinz.arm5
/fagbinz.arm5l
/fagbinz.arm5n
/fagbinz.arm6
/fagbinz.arm64
/fagbinz.arm6l
/fagbinz.arm7
/fagbinz.arm7l
/fagbinz.arm8
/fagbinz.armv4
/fagbinz.armv4l
/fagbinz.armv5l
/fagbinz.armv6
/fagbinz.armv61
/fagbinz.armv6l
/fagbinz.armv7l
/fagbinz.dbg
/fagbinz.exploit
/fagbinz.i4
/fagbinz.i486
/fagbinz.i586
/fagbinz.i6
/fagbinz.i686
/fagbinz.kill
/fagbinz.m68
/fagbinz.m68k
/fagbinz.mips
/fagbinz.mips64
/fagbinz.mipseb
/fagbinz.mipsel
/fagbinz.mpsl
/fagbinz.mnvm
/fagbinz.nvm2
/fagbinz.pcc
/fagbinz.powerpc
/fagbinz.powerpc-440fp
/fagbinz.powerppc
/fagbinz.ppc
/fagbinz.pp-c
/fagbinz.ppc2
/fagbinz.ppc440
/fagbinz.ppc440fp
/fagbinz.root
/fagbinz.root32
/fagbinz.sh
/fagbinz.sh4
/fagbinz.sparc
/fagbinz.spc
/fagbinz.ssh4
/fagbinz.x32
/fagbinz.x32_64
/fagbinz.x64
/fagbinz.x86
/fagbinz.x86_32
/fagbinz.x86_64
/SDFhsfdJI.arc
/SDFhsfdJI.arcle-hs38
/SDFhsfdJI.arm
/SDFhsfdJI.arm4
/SDFhsfdJI.arm4l
/SDFhsfdJI.arm4t
/SDFhsfdJI.arm4tl
/SDFhsfdJI.arm4tll
/SDFhsfdJI.arm5
/SDFhsfdJI.arm5l
/SDFhsfdJI.arm5n
/SDFhsfdJI.arm6
/SDFhsfdJI.arm64
/SDFhsfdJI.arm6l
/SDFhsfdJI.arm7
/SDFhsfdJI.arm7l
/SDFhsfdJI.arm8
/SDFhsfdJI.armv4
/SDFhsfdJI.armv4l
/SDFhsfdJI.armv5l
/SDFhsfdJI.armv6
/SDFhsfdJI.armv61
/SDFhsfdJI.armv6l
/SDFhsfdJI.armv7l
/SDFhsfdJI.dbg
/SDFhsfdJI.exploit
/SDFhsfdJI.i4
/SDFhsfdJI.i486
/SDFhsfdJI.i586
/SDFhsfdJI.i6
/SDFhsfdJI.i686
/SDFhsfdJI.kill
/SDFhsfdJI.m68
/SDFhsfdJI.m68k
/SDFhsfdJI.mips
/SDFhsfdJI.mips64
/SDFhsfdJI.mipseb
/SDFhsfdJI.mipsel
/SDFhsfdJI.mpsl
/SDFhsfdJI.mnvm
/SDFhsfdJI.nvm2
/SDFhsfdJI.pcc
/SDFhsfdJI.powerpc
/SDFhsfdJI.powerpc-440fp
/SDFhsfdJI.powerppc
/SDFhsfdJI.ppc
/SDFhsfdJI.pp-c
/SDFhsfdJI.ppc2
/SDFhsfdJI.ppc440
/SDFhsfdJI.ppc440fp
/SDFhsfdJI.root
/SDFhsfdJI.root32
/SDFhsfdJI.sh
/SDFhsfdJI.sh4
/SDFhsfdJI.sparc
/SDFhsfdJI.spc
/SDFhsfdJI.ssh4
/SDFhsfdJI.x32
/SDFhsfdJI.x32_64
/SDFhsfdJI.x64
/SDFhsfdJI.x86
/SDFhsfdJI.x86_32
/SDFhsfdJI.x86_64
00ohn3s9r8cvclhq.myddns.me
03cpxlvjybj94ano9.zapto.org
0ooq2mzeveyln5.servehttp.com
0q2d0hy2dyiohcu0.webhop.me
0qiobsey7zn.sytes.net
1soah9qlad2nd.zapto.org
1vcovadbz6imj.serveblog.net
1z36foeytesdzb.servepics.com
1zxbhbfkxvc.freedynamicdns.net
2qbuoniiqaoh.servecounterstrike.com
3dc1bgcpp19clnrvn.serveblog.net
3dhbeel2b9aeqlc.servepics.com
3iwgdwca0ocqdkp.ddnsking.com
3vgor9l1zgkpf.onthewifi.com
3ypyavbcfhvvn.servehalflife.com
3zhkxlldm4hqi.3utilities.com
4chgh6wwcywxivb.servehalflife.com
4d09fqv2otvhi.webhop.me
5ljdlfxnhdc3yd.freedynamicdns.org
5qpaxixymgivxx2f7w.servehttp.com
5ximdigx6oo5lhgo3.myvnc.com
5yezwbmuwr2vaann7b.serveirc.com
6ncdz3niuxh5iex2ye.redirectme.net
6o0kauqyoafakk.serveblog.net
6omaaqoulwif4g1.myddns.me
6qnwijvml5mq8.myddns.me
6timxnxeadz.servepics.com
729owgmuig.serveftp.com
7gkdfaqyxdk3dzbj.viewdns.net
7o0maxgpsddnjkq.myftp.biz
7thsk6fmoylo.serveirc.com
8hjowigjx4i41.hopto.org
8hubxfpno5k3.myftp.org
8noqakvfqovsgund.serveftp.com
8vb8c5hkynvn.servegame.com
8z3oic70mvodmawzc.myftp.org
a1twnobczmbnw.webhop.me
a2psnavsou.freedynamicdns.org
a8dpukdxoden.serveirc.com
aa8zhvpjhfap8isan5.servehalflife.com
aaa0udcwhas5g5.servecounterstrike.com
aanlndhara.myddns.me
afantx3dptuudji7o.servehalflife.com
agkhazmozj5.ddns.net
an4x5nsiqwd.myvnc.com
aob0klff5giaeddmn2.serveirc.com
aobyzqedyirxaii.ddnsking.com
apzg1wjmmsn0hft6r.3utilities.com
as64dwhn4coody.myftp.biz
at1v2nohr8hi.myftp.biz
audyzo4uhngubyh.redirectme.net
aulhhojaxxgl6o.ddns.net
b1egzbiem5u.bounceme.net
basf6zbyvhu2p1.serveblog.net
bdcauhuzk0d.viewdns.net
berdkgp6kq6cqwos.servebeer.com
bf0iabl5d6i6luk.hopto.org
boohsa9bfmi.redirectme.net
boplsroaqlbcy.serveblog.net
bq9tjyebqvl5qma.zapto.org
bwi1diglnhakajxx.sytes.net
c25a3ho0aooq9w.zapto.org
ca4qwjdxrqzhuz.redirectme.net
ccnfwpngoqhuq7.myddns.me
cn6ly2hbmon3ep.myddns.me
ctjxh2jdhwmmfenhyh.servemp3.com
cvngvtdgsw.myddns.me
cvwaqg75eh2knvn.myvnc.com
cwwwbyacna7.servepics.com
d8u2hwjbppo.myftp.org
dacepm9aakcbc57gau.myvnc.com
dddiwnoxixvgikz.serveftp.com
df5qhufjoequzpzyj.webhop.me
dfcaod2lgavd.servecounterstrike.com
dgmciglcgo7.myftp.biz
dkhhig3gwd8tfaywzo.freedynamicdns.org
dnis1poovx.3utilities.com
dorsobiwdc.myvnc.com
dsuutgicgposgb0wuw.serveblog.net
dtawlja82bo3h.redirectme.net
dvj4slleogemc5h.servecounterstrike.com
e7kmdd8inix.servebeer.com
eajdwdfu5yaea.freedynamicdns.org
ebo7dnhoakju.zapto.org
ecd8fxwcqaam.redirectme.net
eisiizh9bln.sytes.net
ejhowx7axazddqnfi.servemp3.com
emhlecfeosl.servegame.com
epe4mpqyvcqjqlwom.serveblog.net
eperaownias.freedynamicdns.org
ewmhkvdcoj3.servemp3.com
f09lwp8iski.servepics.com
f4xbhybzaok.hopto.org
fanwkjscuv.serveblog.net
fkgqkgifjunqmyck.bounceme.net
fq1nmopagtirdrq.myftp.biz
fqwn8dwfgu1bu4.freedynamicdns.net
fsaahjfjacna9d.servebeer.com
ft8n29aahpcmeoh.myvnc.com
gf8wewtkpmobz5fb.servebeer.com
gmw8ymxao45loyj.hopto.org
gxngdomsvca.servegame.com
hag7qhatl0dhbz.ddns.net
hha2du5cxay.serveirc.com
hhfofpyfcgmpa.hopto.org
hjjsnyi6jes8nj.serveirc.com
hohbt2cf1deaiszo.myftp.org
hpq33mcw9u.hopto.org
hqxbcialyc.servequake.com
hsadjy30bjtnd.servecounterstrike.com
huhevo3hy1klh.servecounterstrike.com
hunakzev85axob.serveftp.com
hvq0jg3f423tdn.serveftp.com
hvzokxsl40nai.servepics.com
hwxbb1yo9yd3xe.serveblog.net
hyotfyj8x00k5s.freedynamicdns.org
ics0llxiqs0dyh.bounceme.net
idbjlzb4fqlgyjq.redirectme.net
ifgygn8fsul0qv2y.servehttp.com
iipiafj8ol7.serveirc.com
ij9va2d5bylbe3ue0d.serveftp.com
ikhopklltxtabx.3utilities.com
iocaouhehbkwvnpov.redirectme.net
ixicu4gmc0ggdxa.myvnc.com
iyaax6qjskgc8w.freedynamicdns.net
izi9lmzkcjnxlauqbo.3utilities.com
j0jgtcaa7watcof.serveftp.com
j1yy2ws9pm9.myddns.me
jf8cbokcdpnumdcblh.servequake.com
jglcmri0olljh.webhop.me
joaisl3apiga.servegame.com
joooddooaw4anznvt.serveirc.com
jrgavs2zhlzj.servequake.com
jzdcjdviiexlms.myvnc.com
kadievyjbsw7yv.onthewifi.com
kaswpfbommo44z.servehalflife.com
kcyoyfrsthy.onthewifi.com
kkxdf6ytowu.servebeer.com
klwudvhdj6q.servehalflife.com
koqzrkb7sy3.serveftp.com
ksgfnahj4os1o.myvnc.com
l8q1l5fxn8key.sytes.net
lcfmgiq4uu7ba.servemp3.com
le48dpg3xedkf6.serveblog.net
lkqc9icpodzgyo6b.ddnsking.com
m1afommgsdowkmegc.redirectme.net
m1s2hnbxlc.myddns.me
memjaeznerzsa.viewdns.net
ml13fyq5dchdm.zapto.org
mmthka7tdtdu.freedynamicdns.org
myfnayyumld.bounceme.net
n3ijwcg6opdv.viewdns.net
nfikaegafzlbb.serveirc.com
ngdldusdn2misyjm.myvnc.com
nipd4k9db6mfklkz6.servehttp.com
nkyzmzcbugp0msfxdc.hopto.org
npaft0uxyo.freedynamicdns.net
npllv8oiounmpouo.myddns.me
ntxkg0la99w.zapto.org
nvxqujifi3j.myvnc.com
nwpzhm8ziyhdzm.redirectme.net
ny3x1xewuuvw17.servehttp.com
o0ohkedkotjidp6ib4.3utilities.com
o4igeero6azo6wkaz0.servehttp.com
o72ik5g829tnma3.bounceme.net
ocdcijkpnnri8jh.ddnsking.com
odaqmymfj5kodqsmcg.onthewifi.com
odsshzbx7hf7m.myftp.org
odwjoiamhmxqhu.gotdns.ch
omuhpqkzkz5o08schc.myvnc.com
opsczqt6zikg6wn.myvnc.com
owbskboqzybwu.viewdns.net
oxoqkvpa64yuwu.hopto.org
oyava0cz9xyfa0h.viewdns.net
pavnnfcqhs.zapto.org
plyeywddbktceaiex.freedynamicdns.net
pozmx6dhcjbnca.hopto.org
ppi3njz4ur8hl5.servebeer.com
q0zq5objzit.servehttp.com
qb7opowcawiagia.viewdns.net
qew9lpok51h6a.3utilities.com
qn3isckex32.viewdns.net
qoxl8coc8ijodjs.webhop.me
qs1t1fdgda5an.zapto.org
r1ssk1mjed3io.serveftp.com
rihii2sd86k.ddnsking.com
rrzmkvhfdeppjy.freedynamicdns.net
sfoqqy3tth7ho.bounceme.net
shcsagfvlcc.myftp.org
shlkbhusangpapj.bounceme.net
spjetoetocz9olrms.bounceme.net
szzcdfnfblaz.myvnc.com
tfcxvcg0lkc9vpx.myftp.org
tlxwpwqobihoh.servegame.com
tm2whi2dl8g9xhhem8.myvnc.com
tq6oc69awg.servehalflife.com
tuc92asg6kf.freedynamicdns.net
uap6afeydhyuimhca.freedynamicdns.net
ufzxcfg8ncp.ddnsking.com
ui53cdmhdy8ioma6nu.servequake.com
ujtwdz9cimvjsd5p.3utilities.com
urklmycn58o1kvza7.serveblog.net
uw9paqd2qkbbmnpj.servecounterstrike.com
uxsaiowxltmahf8cet.servepics.com
v4zomjqwvayjbvs.viewdns.net
v5jke3mv89fjvxgd.serveftp.com
v6nwsvmkahaeiaqd6a.hopto.org
vak7zjg3sd.servehalflife.com
vcbpkzoahpycmz.hopto.org
vflpxobdotqf.servecounterstrike.com
vitromvznf.redirectme.net
vks7b3hndio8.viewdns.net
vlmx1xctilwpx1nl.sytes.net
vlxo3c7n6hjyjdri30.ddns.net
vnr9okv0bulopadtai.servegame.com
vooup25s3kilow.servegame.com
voz8pdtqzy.serveirc.com
vxgy1i8ovd.gotdns.ch
w1eql47oicciyekuqo.servecounterstrike.com
w5id2sawav.ddnsking.com
wacvd2gsr4zucb.redirectme.net
wbormxauq0i.ddns.net
wf8ik4bg46d23oo4.freedynamicdns.net
wio1lb0k4ipomlfsu.zapto.org
wod5qqtavahipp.servebeer.com
x7ozolqliva.redirectme.net
xbhywk8fiva7j.servecounterstrike.com
xe0kiaxzgqgxaulcdy.servemp3.com
xgl3nucwapoxiolkhd.servehttp.com
xko4c4awl6fnc.myvnc.com
xku1kyxerzo8e.myvnc.com
xoofamjhb4.viewdns.net
xx4odzkiwbxgks.viewdns.net
xxdqj6xbjpkzhk7k.servemp3.com
yd3ohodv089.servequake.com
ygoi1zhyvpk.servehttp.com
yhq6jnkjxa.zapto.org
yjop2jiavcolc9xil.zapto.org
yyx99x7dnnjt5xgef.myvnc.com
zanhap0kpcllia4dwy.servepics.com
zapjsyhc1aszahp6v.3utilities.com
zdj7wdpv9v.myddns.me
zds9njdf6lgsna2.myftp.biz
zlrhndrz3v.freedynamicdns.org
zmfkcsjaiyo.myftp.biz
zscqhclfxfsci7o4l6.onthewifi.com
zvsdnbxwenerua.servecounterstrike.com

# Reference: https://twitter.com/liuya0904/status/1380001707753566208

143.198.120.58:888

# Reference: https://twitter.com/0xrb/status/1379721209693151232

/fuckme.arc
/fuckme.arcle-hs38
/fuckme.arm
/fuckme.arm4
/fuckme.arm4l
/fuckme.arm4t
/fuckme.arm4tl
/fuckme.arm4tll
/fuckme.arm5
/fuckme.arm5l
/fuckme.arm5n
/fuckme.arm6
/fuckme.arm64
/fuckme.arm6l
/fuckme.arm7
/fuckme.arm7l
/fuckme.arm8
/fuckme.armv4
/fuckme.armv4l
/fuckme.armv5l
/fuckme.armv6
/fuckme.armv61
/fuckme.armv6l
/fuckme.armv7l
/fuckme.dbg
/fuckme.exploit
/fuckme.i4
/fuckme.i486
/fuckme.i586
/fuckme.i6
/fuckme.i686
/fuckme.kill
/fuckme.m68
/fuckme.m68k
/fuckme.mips
/fuckme.mips64
/fuckme.mipseb
/fuckme.mipsel
/fuckme.mpsl
/fuckme.pcc
/fuckme.powerpc
/fuckme.powerpc-440fp
/fuckme.powerppc
/fuckme.ppc
/fuckme.pp-c
/fuckme.ppc2
/fuckme.ppc440
/fuckme.ppc440fp
/fuckme.root
/fuckme.root32
/fuckme.sh
/fuckme.sh4
/fuckme.sparc
/fuckme.spc
/fuckme.ssh4
/fuckme.x32
/fuckme.x32_64
/fuckme.x64
/fuckme.x86
/fuckme.x86_32
/fuckme.x86_64
/uz.arc
/uz.arcle-hs38
/uz.arm
/uz.arm4
/uz.arm4l
/uz.arm4t
/uz.arm4tl
/uz.arm4tll
/uz.arm5
/uz.arm5l
/uz.arm5n
/uz.arm6
/uz.arm64
/uz.arm6l
/uz.arm7
/uz.arm7l
/uz.arm8
/uz.armv4
/uz.armv4l
/uz.armv5l
/uz.armv6
/uz.armv61
/uz.armv6l
/uz.armv7l
/uz.dbg
/uz.exploit
/uz.i4
/uz.i486
/uz.i586
/uz.i6
/uz.i686
/uz.kill
/uz.m68
/uz.m68k
/uz.mips
/uz.mips64
/uz.mipseb
/uz.mipsel
/uz.mpsl
/uz.pcc
/uz.powerpc
/uz.powerpc-440fp
/uz.powerppc
/uz.ppc
/uz.pp-c
/uz.ppc2
/uz.ppc440
/uz.ppc440fp
/uz.root
/uz.root32
/uz.sh
/uz.sh4
/uz.sparc
/uz.spc
/uz.ssh4
/uz.x32
/uz.x32_64
/uz.x64
/uz.x86
/uz.x86_32
/uz.x86_64

# Reference: https://www.virustotal.com/gui/file/3599b248b607586a76dcb6e2420c059d9ff2022dd6540c7e6488a86242faec7b/detection

/.lightarc
/.lightarcle-hs38
/.lightarm
/.lightarm4
/.lightarm4l
/.lightarm4t
/.lightarm4tl
/.lightarm4tll
/.lightarm5
/.lightarm5l
/.lightarm5n
/.lightarm6
/.lightarm64
/.lightarm6l
/.lightarm7
/.lightarm7l
/.lightarm8
/.lightarmv4
/.lightarmv4l
/.lightarmv5l
/.lightarmv6
/.lightarmv61
/.lightarmv6l
/.lightarmv7l
/.lightdbg
/.lightexploit
/.lighti4
/.lighti486
/.lighti586
/.lighti6
/.lighti686
/.lightkill
/.lightm68
/.lightm68k
/.lightmips
/.lightmips64
/.lightmipseb
/.lightmipsel
/.lightmpsl
/.lightpcc
/.lightpowerpc
/.lightpowerpc-440fp
/.lightpowerppc
/.lightppc
/.lightpp-c
/.lightppc2
/.lightppc440
/.lightppc440fp
/.lightroot
/.lightroot32
/.lightsh
/.lightsh4
/.lightsparc
/.lightspc
/.lightssh4
/.lightx32
/.lightx32_64
/.lightx64
/.lightx86
/.lightx86_32
/.lightx86_64

# Reference: https://twitter.com/michalmalik/status/1387129810342842369
# Reference: https://www.virustotal.com/gui/file/043d136c260e40d13744b91b252f7a34355474ad0876154668f7e57de3c92670/detection

200.9.155.138:58193

# Reference: https://www.virustotal.com/gui/file/4e5886681eb1d6d6d3e568222fdf5a69a273c12f906b74e4dd025ddebb550576/detection

185.244.25.200:222

# Reference: https://www.virustotal.com/gui/file/02694aabadeee7cc3e4af9a5ecd73c70ad75d97c4e60d61806f3d6044a2b3102/detection

185.244.25.200:23

# Reference: https://www.virustotal.com/gui/file/1010ae4a7f99abe62d67fbffc2d61b31e9a71beb08969ee36a5b0bacbdd96212/detection

185.244.25.200:3134

# Reference: https://www.virustotal.com/gui/file/dfbb7626fd439069058650ad22eb2f22837c1a093e8b4b2a74e731e6396c0f1d/detection

185.244.25.200:347

# Reference: https://www.virustotal.com/gui/file/d2a16007161c083503e182e3033c7611018cb3751e46522dd08f240e4ea5e1e0/detection

185.244.25.200:4554

# Reference: https://www.virustotal.com/gui/file/20263e3a3d044a6c087a0abd766538649f7838e9d5b460b2d0926f230db26d2a/detection

185.244.25.200:555

# Reference: https://www.virustotal.com/gui/file/3cc87731672622205d077a4c1cd64a2fe11b211ffcef7acddbc8ea5ce320b627/detection

185.244.25.200:666

# Reference: https://www.virustotal.com/gui/file/d54dd784c66616d93b680b94eec901fe142f4638b33bcf59d42d5aafbc6cb813/detection

185.244.25.200:6969

# Reference: https://www.virustotal.com/gui/file/a08eaa6d543a9fbda29786428809bd2a5b60c6ed5eae0ca1cb1a16acc455a3fb/detection
# Reference: https://www.virustotal.com/gui/file/9fd8c1d81699384d14432855bd06c3422f29ae08767a74a8e2a0060f0a3c996c/detection

185.244.25.200:37215
185.244.25.200:8245
41.148.28.36:37215
41.148.28.36:8245

# Reference: https://udurrani.com/exp0/linux_bot/index.html

185.244.25.200:45411
185.244.25.200:6443

# Reference: https://www.virustotal.com/gui/file/0c883925ed3b548073b3d465a9c36ec8a58decdc3ec2aee45f50cf3fe9387262/detection

185.244.25.201:1994

# Reference: https://www.virustotal.com/gui/file/c6f01a46369b3270237d172518600d59e1431fc0063cdbbc98214c7acf857196/detection

185.244.25.201:23

# Reference: https://www.virustotal.com/gui/file/c62c785b11214baf5fa3b5a660549f2517b047c1d3d1401ac65b8dbe5632a0a0/detection

185.244.25.201:369

# Reference: https://www.virustotal.com/gui/file/fd9312a33bf6eded812a0b22719a05811076f14cea1ef2113829baa91624cc2d/detection

185.244.25.201:5757

# Reference: https://www.virustotal.com/gui/file/5c1a9440eebfdabe9ff763488a9e0a9ef0f632287f5410e761ee0b40c8839468/detection

34.125.147.122:391

# Reference: https://twitter.com/r3dbU7z/status/1391407620200800261

/SIOT.arc
/SIOT.arcle-hs38
/SIOT.arm
/SIOT.arm4
/SIOT.arm4l
/SIOT.arm4t
/SIOT.arm4tl
/SIOT.arm4tll
/SIOT.arm5
/SIOT.arm5l
/SIOT.arm5n
/SIOT.arm6
/SIOT.arm64
/SIOT.arm6l
/SIOT.arm7
/SIOT.arm7l
/SIOT.arm8
/SIOT.armv4
/SIOT.armv4l
/SIOT.armv5l
/SIOT.armv6
/SIOT.armv61
/SIOT.armv6l
/SIOT.armv7l
/SIOT.dbg
/SIOT.exploit
/SIOT.i4
/SIOT.i486
/SIOT.i586
/SIOT.i6
/SIOT.i686
/SIOT.kill
/SIOT.m68
/SIOT.m68k
/SIOT.mips
/SIOT.mips64
/SIOT.mipseb
/SIOT.mipsel
/SIOT.mpsl
/SIOT.pcc
/SIOT.powerpc
/SIOT.powerpc-440fp
/SIOT.powerppc
/SIOT.ppc
/SIOT.pp-c
/SIOT.ppc2
/SIOT.ppc440
/SIOT.ppc440fp
/SIOT.root
/SIOT.root32
/SIOT.sh
/SIOT.sh4
/SIOT.sparc
/SIOT.spc
/SIOT.ssh4
/SIOT.x32
/SIOT.x32_64
/SIOT.x64
/SIOT.x86
/SIOT.x86_32
/SIOT.x86_64

# Reference: https://www.virustotal.com/gui/file/6f2f274639439174687b6368b795a999896f20fea9b8c203e4e3af9eeba4d53a/detection

111.157.93.124:7070
111.157.93.124:5555
61.193.27.239:7070
61.193.27.239:5555
61.193.27.239:8080
iotsecurity.xyz

# Reference: https://www.virustotal.com/gui/file/83e3a5cd635bcbe42bef5ad2f08a1bb5b66d6b467d259b94a2e522048f7257c0/detection

17.31.220.150:1791
17.31.220.150:40756
17.31.220.150:43192
17.31.220.150:47895
17.31.220.150:52571
17.31.220.150:52869
17.31.220.150:55241
17.31.220.150:8080
200.6.93.198:1791
200.6.93.198:33508
200.6.93.198:34486
200.6.93.198:35223
200.6.93.198:35937
200.6.93.198:39209
200.6.93.198:45699
200.6.93.198:50720
200.6.93.198:52478
200.6.93.198:52869
200.6.93.198:59481
200.6.93.198:8080

# Reference: https://www.virustotal.com/gui/file/e64d115e6be6fb3e1618fc018253d69cd610e33df646bb11bf6f57475b807f16/detection

158.229.107.204:1791
158.229.107.204:36288
158.229.107.204:36332
158.229.107.204:39198
158.229.107.204:39354
158.229.107.204:39729
158.229.107.204:40253
158.229.107.204:41286
158.229.107.204:41524
158.229.107.204:44807
158.229.107.204:48848
158.229.107.204:50193
158.229.107.204:52773
158.229.107.204:52869
158.229.107.204:54751
158.229.107.204:56734
158.229.107.204:57333
158.229.107.204:59211
158.229.107.204:60797
158.229.107.204:60901
158.229.107.204:8080

# Reference: https://www.virustotal.com/gui/file/d405dce11bafa52853ceb190e7711c0c8bf30b4daa423789eb1ba2bef14c5f17/detection

48.246.45.7:5555
48.246.45.7:8080
48.246.45.7:9000

# Reference: https://www.virustotal.com/gui/file/4a7e8483e2eeb1e146d1b20ffaf7d088d9a32002f0efdd845957ef580cfdc153/detection

154.96.56.13:8080
157.179.219.82:7070
19.213.167.182:5555
19.213.167.182:8080
19.213.167.182:9000
253.95.73.16:5555
253.95.73.16:7070
253.95.73.16:8080

# Reference: https://www.virustotal.com/gui/file/8ccf2b8d6160307bbafbe9e86aeee505aa01fd435467312bf4daa1d8bacb06e9/detection

102.181.246.168:1791
118.65.149.203:1791
14.254.39.157:1791

# Reference: https://www.virustotal.com/gui/file/554079e7b99d41e0c65e89c7a24a3045bf18af92782112c38fa80eaaeecc099a/detection

145.105.183.100:1791
145.105.183.100:38977
145.105.183.100:56371
145.105.183.100:8080
85.232.39.149:1791
85.232.39.149:33324
85.232.39.149:33420
85.232.39.149:34617
85.232.39.149:36348
85.232.39.149:36723
85.232.39.149:38619
85.232.39.149:38627
85.232.39.149:39840
85.232.39.149:41392
85.232.39.149:42051
85.232.39.149:42081
85.232.39.149:43728
85.232.39.149:43908
85.232.39.149:45000
85.232.39.149:45398
85.232.39.149:46591
85.232.39.149:49776
85.232.39.149:50663
85.232.39.149:50668
85.232.39.149:51215
85.232.39.149:51986
85.232.39.149:52166
85.232.39.149:52350
85.232.39.149:52869
85.232.39.149:53925
85.232.39.149:53993
85.232.39.149:59140
85.232.39.149:60714
85.232.39.149:60741
85.232.39.149:8080

# Reference: https://www.virustotal.com/gui/file/e109d08a9858c43ec5967320bb4caea2fbcb17c45f3dd587f070fd8a7a6c1878/detection

115.224.187.4:1791
115.224.187.4:48621
115.224.187.4:50080
115.224.187.4:51275
115.224.187.4:52869
115.224.187.4:8080
177.215.89.250:1791
177.215.89.250:33151
177.215.89.250:33464
177.215.89.250:33957
177.215.89.250:34250
177.215.89.250:35168
177.215.89.250:35682
177.215.89.250:36913
177.215.89.250:37902
177.215.89.250:37969
177.215.89.250:38147
177.215.89.250:39582
177.215.89.250:40547
177.215.89.250:40626
177.215.89.250:41413
177.215.89.250:42218
177.215.89.250:43036
177.215.89.250:43118
177.215.89.250:44245
177.215.89.250:44878
177.215.89.250:45711
177.215.89.250:45833
177.215.89.250:47078
177.215.89.250:47483
177.215.89.250:48246
177.215.89.250:50175
177.215.89.250:50410
177.215.89.250:50677
177.215.89.250:51223
177.215.89.250:51233
177.215.89.250:51592
177.215.89.250:51961
177.215.89.250:52226
177.215.89.250:52429
177.215.89.250:52869
177.215.89.250:53237
177.215.89.250:53708
177.215.89.250:54057
177.215.89.250:54168
177.215.89.250:54642
177.215.89.250:55172
177.215.89.250:55703
177.215.89.250:56146
177.215.89.250:56685
177.215.89.250:56915
177.215.89.250:57167
177.215.89.250:59378
177.215.89.250:59475
177.215.89.250:59826
177.215.89.250:59855
177.215.89.250:60167
177.215.89.250:60456
177.215.89.250:60603
177.215.89.250:8080
181.245.131.192:1791
181.245.131.192:33026
181.245.131.192:36444
181.245.131.192:39044
181.245.131.192:39629
181.245.131.192:41118
181.245.131.192:41687
181.245.131.192:41901
181.245.131.192:42107
181.245.131.192:42706
181.245.131.192:44515
181.245.131.192:45203
181.245.131.192:45442
181.245.131.192:45828
181.245.131.192:46214
181.245.131.192:46755
181.245.131.192:47134
181.245.131.192:47712
181.245.131.192:48680
181.245.131.192:49041
181.245.131.192:49745
181.245.131.192:50269
181.245.131.192:51406
181.245.131.192:52869
181.245.131.192:54520
181.245.131.192:55139
181.245.131.192:55215
181.245.131.192:55558
181.245.131.192:56833
181.245.131.192:57339
181.245.131.192:57527
181.245.131.192:57635
181.245.131.192:57849
181.245.131.192:58400
181.245.131.192:58436
181.245.131.192:58529
181.245.131.192:58747
181.245.131.192:58955
181.245.131.192:58994
181.245.131.192:60057
181.245.131.192:60644
181.245.131.192:60788
181.245.131.192:60813
181.245.131.192:8080
232.196.102.183:1791
232.196.102.183:34189
232.196.102.183:34436
232.196.102.183:36247
232.196.102.183:36639
232.196.102.183:37511
232.196.102.183:37889
232.196.102.183:37980
232.196.102.183:38112
232.196.102.183:39049
232.196.102.183:39248
232.196.102.183:39402
232.196.102.183:40366
232.196.102.183:40415
232.196.102.183:40618
232.196.102.183:40922
232.196.102.183:42534
232.196.102.183:42766
232.196.102.183:43741
232.196.102.183:44728
232.196.102.183:45316
232.196.102.183:45813
232.196.102.183:46130
232.196.102.183:46285
232.196.102.183:47515
232.196.102.183:48299
232.196.102.183:48787
232.196.102.183:49275
232.196.102.183:50853
232.196.102.183:51473
232.196.102.183:51937
232.196.102.183:51985
232.196.102.183:52399
232.196.102.183:52869
232.196.102.183:53090
232.196.102.183:53981
232.196.102.183:54280
232.196.102.183:56562
232.196.102.183:57819
232.196.102.183:57896
232.196.102.183:58008
232.196.102.183:58187
232.196.102.183:58514
232.196.102.183:58999
232.196.102.183:60258
232.196.102.183:60520
232.196.102.183:60597
232.196.102.183:60818
232.196.102.183:60844
232.196.102.183:8080

# Reference: https://www.virustotal.com/gui/file/d95f6f3f084cb962505d06b44eab286d21f9d4d6a961d06a748a4a49b114a3d1/detection

250.199.109.222:1791
250.199.109.222:33291
250.199.109.222:34400
250.199.109.222:35736
250.199.109.222:36523
250.199.109.222:36654
250.199.109.222:37912
250.199.109.222:37991
250.199.109.222:38654
250.199.109.222:38846
250.199.109.222:39209
250.199.109.222:39245
250.199.109.222:41445
250.199.109.222:41625
250.199.109.222:41968
250.199.109.222:41993
250.199.109.222:42601
250.199.109.222:42619
250.199.109.222:43247
250.199.109.222:43736
250.199.109.222:44802
250.199.109.222:45715
250.199.109.222:45998
250.199.109.222:46743
250.199.109.222:47203
250.199.109.222:47283
250.199.109.222:47398
250.199.109.222:47514
250.199.109.222:47799
250.199.109.222:48770
250.199.109.222:49310
250.199.109.222:50531
250.199.109.222:51566
250.199.109.222:52774
250.199.109.222:53450
250.199.109.222:53880
250.199.109.222:54832
250.199.109.222:55523
250.199.109.222:55739
250.199.109.222:56560
250.199.109.222:57032
250.199.109.222:57307
250.199.109.222:57578
250.199.109.222:57796
250.199.109.222:58026
250.199.109.222:58496
250.199.109.222:59250
250.199.109.222:59477
250.199.109.222:59652
250.199.109.222:60027
250.199.109.222:60978
spaghetticonfetti.xyz

# Reference: https://www.virustotal.com/gui/file/8d93876ef13ef93025a16ebe46b40943ef78eb43d7514d184c434c222cf0fd4a/detection

44.72.147.99:9000
44.72.147.99:9090

# Reference: https://www.virustotal.com/gui/file/6321e89afe1e2da97bdc1b26b693469198fde66456c3243dc3556852f425fdff/detection

47.247.133.187:5555
47.247.133.187:8080
47.247.133.187:9000

# Reference: https://www.virustotal.com/gui/file/6872659c60af49ae1e153590a4e8ee4fb546356e515fef6cf78a4fef8951b0fc/detection

12.184.132.251:9080

# Reference: https://www.virustotal.com/gui/file/eeb0a704181f25ac9474852f87299a234c89bccbd62370ad05de5a4b4d111884/detection
# Reference: https://www.virustotal.com/gui/file/82e9cf3173b9ecf1f25f7690c0b2685c7b22826d630149fe8c548bccf542d4cb/detection

95.213.159.171:1791
95.213.159.171:33393
95.213.159.171:34050
95.213.159.171:34088
95.213.159.171:34593
95.213.159.171:35427
95.213.159.171:35948
95.213.159.171:35949
95.213.159.171:36546
95.213.159.171:36915
95.213.159.171:37839
95.213.159.171:38016
95.213.159.171:38474
95.213.159.171:41116
95.213.159.171:41378
95.213.159.171:41478
95.213.159.171:41581
95.213.159.171:42689
95.213.159.171:43202
95.213.159.171:43648
95.213.159.171:43671
95.213.159.171:44189
95.213.159.171:44312
95.213.159.171:44399
95.213.159.171:45171
95.213.159.171:45307
95.213.159.171:45379
95.213.159.171:45479
95.213.159.171:46151
95.213.159.171:48343
95.213.159.171:48817
95.213.159.171:48941
95.213.159.171:49543
95.213.159.171:49642
95.213.159.171:49877
95.213.159.171:50622
95.213.159.171:50959
95.213.159.171:51009
95.213.159.171:51099
95.213.159.171:52072
95.213.159.171:52184
95.213.159.171:52282
95.213.159.171:52305
95.213.159.171:52954
95.213.159.171:53429
95.213.159.171:54164
95.213.159.171:54567
95.213.159.171:54582
95.213.159.171:54649
95.213.159.171:54776
95.213.159.171:55195
95.213.159.171:55480
95.213.159.171:57597
95.213.159.171:59088
95.213.159.171:60224

# Reference: https://www.virustotal.com/gui/file/06d0d559ff8869849231026b4f9c059e886347fe55ab443ff3d499569a1bd66a/detection

23.95.80.200:679

# Reference: https://www.virustotal.com/gui/file/724abc7a7d32c30e729fba89ca78319cb3211c6365318dd7e204608cad3218c2/detection

23.95.80.200:65500
23.95.80.200:8080
23.95.80.200:8081

# Reference: https://www.virustotal.com/gui/file/d6d6bfa3a8c4d1532ebca902c5c7d7d19b5868094584ce9e78c0391087272afa/detection

23.95.80.200:443

# Reference: https://www.virustotal.com/gui/ip-address/23.95.80.200/relations

/N1qq3r.arc
/N1qq3r.arcle-hs38
/N1qq3r.arm
/N1qq3r.arm4
/N1qq3r.arm4l
/N1qq3r.arm4t
/N1qq3r.arm4tl
/N1qq3r.arm4tll
/N1qq3r.arm5
/N1qq3r.arm5l
/N1qq3r.arm5n
/N1qq3r.arm6
/N1qq3r.arm64
/N1qq3r.arm6l
/N1qq3r.arm7
/N1qq3r.arm7l
/N1qq3r.arm8
/N1qq3r.armv4
/N1qq3r.armv4l
/N1qq3r.armv5l
/N1qq3r.armv6
/N1qq3r.armv61
/N1qq3r.armv6l
/N1qq3r.armv7l
/N1qq3r.dbg
/N1qq3r.exploit
/N1qq3r.i4
/N1qq3r.i486
/N1qq3r.i586
/N1qq3r.i6
/N1qq3r.i686
/N1qq3r.kill
/N1qq3r.m68
/N1qq3r.m68k
/N1qq3r.mips
/N1qq3r.mips64
/N1qq3r.mipseb
/N1qq3r.mipsel
/N1qq3r.mpsl
/N1qq3r.pcc
/N1qq3r.powerpc
/N1qq3r.powerpc-440fp
/N1qq3r.powerppc
/N1qq3r.ppc
/N1qq3r.pp-c
/N1qq3r.ppc2
/N1qq3r.ppc440
/N1qq3r.ppc440fp
/N1qq3r.root
/N1qq3r.root32
/N1qq3r.sh
/N1qq3r.sh4
/N1qq3r.sparc
/N1qq3r.spc
/N1qq3r.ssh4
/N1qq3r.x32
/N1qq3r.x32_64
/N1qq3r.x64
/N1qq3r.x86
/N1qq3r.x86_32
/N1qq3r.x86_64
/ur0a.arc
/ur0a.arcle-hs38
/ur0a.arm
/ur0a.arm4
/ur0a.arm4l
/ur0a.arm4t
/ur0a.arm4tl
/ur0a.arm4tll
/ur0a.arm5
/ur0a.arm5l
/ur0a.arm5n
/ur0a.arm6
/ur0a.arm64
/ur0a.arm6l
/ur0a.arm7
/ur0a.arm7l
/ur0a.arm8
/ur0a.armv4
/ur0a.armv4l
/ur0a.armv5l
/ur0a.armv6
/ur0a.armv61
/ur0a.armv6l
/ur0a.armv7l
/ur0a.dbg
/ur0a.exploit
/ur0a.i4
/ur0a.i486
/ur0a.i586
/ur0a.i6
/ur0a.i686
/ur0a.kill
/ur0a.m68
/ur0a.m68k
/ur0a.mips
/ur0a.mips64
/ur0a.mipseb
/ur0a.mipsel
/ur0a.mpsl
/ur0a.pcc
/ur0a.powerpc
/ur0a.powerpc-440fp
/ur0a.powerppc
/ur0a.ppc
/ur0a.pp-c
/ur0a.ppc2
/ur0a.ppc440
/ur0a.ppc440fp
/ur0a.root
/ur0a.root32
/ur0a.sh
/ur0a.sh4
/ur0a.sparc
/ur0a.spc
/ur0a.ssh4
/ur0a.x32
/ur0a.x32_64
/ur0a.x64
/ur0a.x86
/ur0a.x86_32
/ur0a.x86_64

# Reference: https://www.uptycs.com/blog/discovery-of-simps-botnet-leads-ties-to-keksec-group
# Reference: https://otx.alienvault.com/pulse/60a55815a84a22b374ebfd98
# Reference: https://www.virustotal.com/gui/file/f021bf6e2ab701110a5b6762ae4a4007dea5566ac63cf221b69f25454cea3aab/detection
# Reference: https://www.virustotal.com/gui/file/37ee27de2baafd426ff8fa9533985a29bfd72444386355b97c6eee3e73396164/detection
# Reference: https://www.virustotal.com/gui/file/1289452429ee098b0f0677ac29693fe6b33d1907a3f34a31b0aa7b6919d2a7f3/detection
# Reference: https://www.virustotal.com/gui/file/f131d629f3ad40aac9b41a7c4a47bfe3c410ec02a40625cb45ad460ce8f24aa7/detection

185.224.129.235:65525
185.224.129.235:65535
45.14.224.127:65525
45.14.224.127:65535
b0tz.xyz
simpsnet.xyz

# Reference: https://www.virustotal.com/gui/file/2fc107757f55eab077bc8b7450e117aa1352d91cfc7f06e8c3f962867468d6ab/detection

45.81.235.31:158

# Reference: https://www.virustotal.com/gui/file/f0fdb3de75f85e199766bbb39722865cac578cde754afa2d2f065ef028eec788/detection

45.81.235.31:241

# Reference: https://www.virustotal.com/gui/file/253f34a15ac87e2d0cccbfe3111b0d4ef079a27f26ba4ce393a4826578267921/detection

45.81.235.31:23

# Reference: https://www.lacework.com/keksec-tsunami-ryuk/
# Reference: https://otx.alienvault.com/pulse/60c23b8ce911becad33c4829

dimumdjenyy4jwlc.onion
vp3te7pkfczmnnl.onion

# Reference: https://twitter.com/SethKingHi/status/1403193023555543042

dui25pvlzkfzpkkc.onion

# Reference: https://www.virustotal.com/gui/file/061440ab984f239b28629ea346d516114705dac4f20f44a5700000f31cdcd00d/detection

23.94.179.104:1337

# Reference: https://twitter.com/r3dbU7z/status/1405859167508832256

/Samael.arc
/Samael.arcle-hs38
/Samael.arm
/Samael.arm4
/Samael.arm4l
/Samael.arm4t
/Samael.arm4tl
/Samael.arm4tll
/Samael.arm5
/Samael.arm5l
/Samael.arm5n
/Samael.arm6
/Samael.arm64
/Samael.arm6l
/Samael.arm7
/Samael.arm7l
/Samael.arm8
/Samael.armv4
/Samael.armv4l
/Samael.armv5l
/Samael.armv6
/Samael.armv61
/Samael.armv6l
/Samael.armv7l
/Samael.dbg
/Samael.exploit
/Samael.i4
/Samael.i486
/Samael.i586
/Samael.i6
/Samael.i686
/Samael.kill
/Samael.m68
/Samael.m68k
/Samael.mips
/Samael.mips64
/Samael.mipseb
/Samael.mipsel
/Samael.mpsl
/Samael.pcc
/Samael.powerpc
/Samael.powerpc-440fp
/Samael.powerppc
/Samael.ppc
/Samael.pp-c
/Samael.ppc2
/Samael.ppc440
/Samael.ppc440fp
/Samael.root
/Samael.root32
/Samael.sh
/Samael.sh4
/Samael.sparc
/Samael.spc
/Samael.ssh4
/Samael.x32
/Samael.x32_64
/Samael.x64
/Samael.x86
/Samael.x86_32
/Samael.x86_64

# Reference: https://elfdigest.com/brief/7f081336f6ad02e75f1e001d4efad0bbaee6a4256d7e58442618870baabc28d8

212.192.241.127:3074

# Reference: https://elfdigest.com/brief/91650ba26394de59c53cd85a8c063a2632874d3339fdf72025441125a4623337

134.122.66.33:666

# Reference: https://elfdigest.com/brief/88068602acaba9d08d8cbc670f47e72e09af786cbc9af5b2a99d9178c8bd18a7

192.3.15.119:666

# Reference: https://twitter.com/elfdigest/status/1407367336257110022

212.192.241.36:666

# Reference: https://www.virustotal.com/gui/file/b29832bd3ae89b457a1738f835b7598a3b03cd31e1e789d9533890e99c89f9ce/detection

104.168.170.155:606

# Reference: https://www.virustotal.com/gui/file/bb379abb97eef51b34747c125ccb7749266a5290f17b93f56ec823fd7636a129/detection

104.168.170.155:23
/a-r.m-4.Re.Ming.Ton
/a-r.m-5.Re.Ming.Ton
/a-r.m-6.Re.Ming.Ton
/a-r.m-7.Re.Ming.Ton
/i-4.8-6.Re.Ming.Ton
/i-5.8-6.Re.Ming.Ton
/i-6.8-6.Re.Ming.Ton
/m-6.8-k.Re.Ming.Ton
/m-i.p-s.Re.Ming.Ton
/m-p.s-l.Re.Ming.Ton
/p-p.c-.Re.Ming.Ton
/s-h.4-.Re.Ming.Ton
/x-3.2-.Re.Ming.Ton
/x-6.4-.Re.Ming.Ton
/x-8.6-.Re.Ming.Ton

# Reference: https://elfdigest.com/brief/bf0643695d745eb4e18fd4e200eda41b76f751c4a472271db462da5e308ce960

210.101.157.199:59394

# Reference: https://elfdigest.com/brief/445e3b12f5c44761d7bdb0e7658fbae3bb36e679353f047dfe551bae173cc535

23.94.190.149:23

# Reference: https://elfdigest.com/brief/9738e6420fa60ac4cfe72077e53df534e3010bc6feef26b915bb9d3392593f28

130.239.18.159:6881
212.129.33.59:6881
82.221.103.244:6881
87.98.162.88:6881

# Reference: https://twitter.com/liuya0904/status/1420580746935209989

144.172.73.52:8877
gafgyt.xyz
/Goober.arc
/Goober.arcle-hs38
/Goober.arm
/Goober.arm4
/Goober.arm4l
/Goober.arm4t
/Goober.arm4tl
/Goober.arm4tll
/Goober.arm5
/Goober.arm5l
/Goober.arm5n
/Goober.arm6
/Goober.arm64
/Goober.arm6l
/Goober.arm7
/Goober.arm7l
/Goober.arm8
/Goober.armv4
/Goober.armv4l
/Goober.armv5l
/Goober.armv6
/Goober.armv61
/Goober.armv6l
/Goober.armv7l
/Goober.dbg
/Goober.exploit
/Goober.i4
/Goober.i486
/Goober.i586
/Goober.i6
/Goober.i686
/Goober.kill
/Goober.m68
/Goober.m68k
/Goober.mips
/Goober.mips64
/Goober.mipseb
/Goober.mipsel
/Goober.mpsl
/Goober.pcc
/Goober.powerpc
/Goober.powerpc-440fp
/Goober.powerppc
/Goober.ppc
/Goober.pp-c
/Goober.ppc2
/Goober.ppc440
/Goober.ppc440fp
/Goober.root
/Goober.root32
/Goober.sh
/Goober.sh4
/Goober.sparc
/Goober.spc
/Goober.ssh4
/Goober.x32
/Goober.x32_64
/Goober.x64
/Goober.x86
/Goober.x86_32
/Goober.x86_64

# Reference: https://www.virustotal.com/gui/file/784f509c6a3cecb427a9b3c2a32366599673861da09364a25aead1fa56cf9e4d/detection

197.120.18.239:37215
197.120.18.239:52

# Reference: https://www.virustotal.com/gui/file/85a0b779ad47f060cb56a1e9114f3482ce742cf5b46cc8c8c450be26589561df/detection

185.130.104.180:452

# Reference: https://twitter.com/r3dbU7z/status/1470785760358019086

ajaxpfp.cf
/devI.arc
/devI.arcle-hs38
/devI.arm
/devI.arm4
/devI.arm4l
/devI.arm4t
/devI.arm4tl
/devI.arm4tll
/devI.arm5
/devI.arm5l
/devI.arm5n
/devI.arm6
/devI.arm64
/devI.arm6l
/devI.arm7
/devI.arm7l
/devI.arm8
/devI.armv4
/devI.armv4l
/devI.armv5l
/devI.armv6
/devI.armv61
/devI.armv6l
/devI.armv7l
/devI.dbg
/devI.exploit
/devI.i4
/devI.i486
/devI.i586
/devI.i6
/devI.i686
/devI.kill
/devI.m68
/devI.m68k
/devI.mips
/devI.mips64
/devI.mipseb
/devI.mipsel
/devI.mpsl
/devI.pcc
/devI.powerpc
/devI.powerpc-440fp
/devI.powerppc
/devI.ppc
/devI.pp-c
/devI.ppc2
/devI.ppc440
/devI.ppc440fp
/devI.root
/devI.root32
/devI.sh
/devI.sh4
/devI.sparc
/devI.spc
/devI.ssh4
/devI.x32
/devI.x32_64
/devI.x64
/devI.x86
/devI.x86_32
/devI.x86_64
/devl.arc
/devl.arcle-hs38
/devl.arm
/devl.arm4
/devl.arm4l
/devl.arm4t
/devl.arm4tl
/devl.arm4tll
/devl.arm5
/devl.arm5l
/devl.arm5n
/devl.arm6
/devl.arm64
/devl.arm6l
/devl.arm7
/devl.arm7l
/devl.arm8
/devl.armv4
/devl.armv4l
/devl.armv5l
/devl.armv6
/devl.armv61
/devl.armv6l
/devl.armv7l
/devl.dbg
/devl.exploit
/devl.i4
/devl.i486
/devl.i586
/devl.i6
/devl.i686
/devl.kill
/devl.m68
/devl.m68k
/devl.mips
/devl.mips64
/devl.mipseb
/devl.mipsel
/devl.mpsl
/devl.pcc
/devl.powerpc
/devl.powerpc-440fp
/devl.powerppc
/devl.ppc
/devl.pp-c
/devl.ppc2
/devl.ppc440
/devl.ppc440fp
/devl.root
/devl.root32
/devl.sh
/devl.sh4
/devl.sparc
/devl.spc
/devl.ssh4
/devl.x32
/devl.x32_64
/devl.x64
/devl.x86
/devl.x86_32
/devl.x86_64
/.pxp32x/

# Reference: https://twitter.com/r3dbU7z/status/1474848020076367883

/qwx.arc
/qwx.arcle-hs38
/qwx.arm
/qwx.arm4
/qwx.arm4l
/qwx.arm4t
/qwx.arm4tl
/qwx.arm4tll
/qwx.arm5
/qwx.arm5l
/qwx.arm5n
/qwx.arm6
/qwx.arm64
/qwx.arm6l
/qwx.arm7
/qwx.arm7l
/qwx.arm8
/qwx.armv4
/qwx.armv4l
/qwx.armv5l
/qwx.armv6
/qwx.armv61
/qwx.armv6l
/qwx.armv7l
/qwx.dbg
/qwx.exploit
/qwx.i4
/qwx.i486
/qwx.i586
/qwx.i6
/qwx.i686
/qwx.kill
/qwx.m68
/qwx.m68k
/qwx.mips
/qwx.mips64
/qwx.mipseb
/qwx.mipsel
/qwx.mpsl
/qwx.pcc
/qwx.powerpc
/qwx.powerpc-440fp
/qwx.powerppc
/qwx.ppc
/qwx.pp-c
/qwx.ppc2
/qwx.ppc440
/qwx.ppc440fp
/qwx.root
/qwx.root32
/qwx.sh
/qwx.sh4
/qwx.sparc
/qwx.spc
/qwx.ssh4
/qwx.x32
/qwx.x32_64
/qwx.x64
/qwx.x86
/qwx.x86_32
/qwx.x86_64

# Reference: https://www.virustotal.com/gui/file/b9c584c1833f7de7a1e16fd24667bfcb019acb5bf29e0b1480d809e2f4de1b82/detection
# Reference: https://www.virustotal.com/gui/file/0349a2c12d234b35ea13df7f56a3339fcc95081b7533467478cc1f78daf9345a/detection
# Reference: https://www.virustotal.com/gui/file/e58bbaa3671e2d02abb51cffcc3dc22c887975ae336c4e48d3bc24e6fa39fee4/detection

http://209.141.46.133
209.141.46.133:444
/oops.arc
/oops.arcle-hs38
/oops.arm
/oops.arm4
/oops.arm4l
/oops.arm4t
/oops.arm4tl
/oops.arm4tll
/oops.arm5
/oops.arm5l
/oops.arm5n
/oops.arm6
/oops.arm64
/oops.arm6l
/oops.arm7
/oops.arm7l
/oops.arm8
/oops.armv4
/oops.armv4l
/oops.armv5l
/oops.armv6
/oops.armv61
/oops.armv6l
/oops.armv7l
/oops.dbg
/oops.exploit
/oops.i4
/oops.i486
/oops.i586
/oops.i6
/oops.i686
/oops.kill
/oops.m68
/oops.m68k
/oops.mips
/oops.mips64
/oops.mipseb
/oops.mipsel
/oops.mpsl
/oops.pcc
/oops.powerpc
/oops.powerpc-440fp
/oops.powerppc
/oops.ppc
/oops.pp-c
/oops.ppc2
/oops.ppc440
/oops.ppc440fp
/oops.root
/oops.root32
/oops.sh
/oops.sh4
/oops.sparc
/oops.spc
/oops.ssh4
/oops.x32
/oops.x32_64
/oops.x64
/oops.x86
/oops.x86_32
/oops.x86_64

# Reference: https://www.virustotal.com/gui/file/b17893170e90c41d7455d9cb0ad0507f38fd59a8e65a865ee8d51b8ded13b101/detection

209.141.46.223:666

# Reference: https://www.virustotal.com/gui/file/cd48addd392e7912ab15a5464c710055f696990fab564f29f13121e7a5e93730/detection

209.141.46.241:34021

# Reference: https://www.virustotal.com/gui/file/d7bbed7b8d9e88529a2afef3c60c27483abc3b6c92c13d5f38b8b7d5ee938be5/detection

209.141.46.241:9955
/gov.arc
/gov.arcle-hs38
/gov.arm
/gov.arm4
/gov.arm4l
/gov.arm4t
/gov.arm4tl
/gov.arm4tll
/gov.arm5
/gov.arm5l
/gov.arm5n
/gov.arm6
/gov.arm64
/gov.arm6l
/gov.arm7
/gov.arm7l
/gov.arm8
/gov.armv4
/gov.armv4l
/gov.armv5l
/gov.armv6
/gov.armv61
/gov.armv6l
/gov.armv7l
/gov.dbg
/gov.exploit
/gov.i4
/gov.i486
/gov.i586
/gov.i6
/gov.i686
/gov.kill
/gov.m68
/gov.m68k
/gov.mips
/gov.mips64
/gov.mipseb
/gov.mipsel
/gov.mpsl
/gov.pcc
/gov.powerpc
/gov.powerpc-440fp
/gov.powerppc
/gov.ppc
/gov.pp-c
/gov.ppc2
/gov.ppc440
/gov.ppc440fp
/gov.root
/gov.root32
/gov.sh
/gov.sh4
/gov.sparc
/gov.spc
/gov.ssh4
/gov.x32
/gov.x32_64
/gov.x64
/gov.x86
/gov.x86_32
/gov.x86_64

# Reference: https://www.virustotal.com/gui/file/1fee96cfb425d0bc1178ff81c1a8ce550a881291321442526d0dd9bd4e8d3ddd/detection
# Reference: https://www.virustotal.com/gui/file/4f0a8a72d186169a3b04686c854cb5f063d1b827d48c5b05547fbd9f9adb7afb/detection

23.254.202.192:818

# Reference: https://www.virustotal.com/gui/file/59715529a71c0b135835a2605acd4271d1f707c747f33d2eff3cb1ec1a395cfd/detection

41.196.27.11:37215
41.196.27.11:52869
41.196.27.11:2323
41.196.27.11:6261
45.142.212.125:6261
45.142.212.125:2323
45.142.212.125:52869
45.142.212.125:37215

# Reference: https://twitter.com/honeymoon_ioc/status/1489715781202059266

/beamer.arc
/beamer.arcle-hs38
/beamer.arm
/beamer.arm4
/beamer.arm4l
/beamer.arm4t
/beamer.arm4tl
/beamer.arm4tll
/beamer.arm5
/beamer.arm5l
/beamer.arm5n
/beamer.arm6
/beamer.arm64
/beamer.arm6l
/beamer.arm7
/beamer.arm7l
/beamer.arm8
/beamer.armv4
/beamer.armv4l
/beamer.armv5l
/beamer.armv6
/beamer.armv61
/beamer.armv6l
/beamer.armv7l
/beamer.dbg
/beamer.exploit
/beamer.i4
/beamer.i486
/beamer.i586
/beamer.i6
/beamer.i686
/beamer.kill
/beamer.m68
/beamer.m68k
/beamer.mips
/beamer.mips64
/beamer.mipseb
/beamer.mipsel
/beamer.mpsl
/beamer.pcc
/beamer.powerpc
/beamer.powerpc-440fp
/beamer.powerppc
/beamer.ppc
/beamer.pp-c
/beamer.ppc2
/beamer.ppc440
/beamer.ppc440fp
/beamer.root
/beamer.root32
/beamer.sh
/beamer.sh4
/beamer.sparc
/beamer.spc
/beamer.ssh4
/beamer.x32
/beamer.x32_64
/beamer.x64
/beamer.x86
/beamer.x86_32
/beamer.x86_64

# Reference: https://twitter.com/elfdigest/status/1510266225749897220

103.136.42.153:45526

# Reference: https://www.virustotal.com/gui/file/06d8efe74609ef71eb859e26633985c72f36218fe3a11e65a21905683666b49c/detection
# Reference: https://www.virustotal.com/gui/file/7829bf3b2867603e5880f81c5b16029a1c4e326c949315605e8dc788b65f899c/detection

185.101.107.92:69

# Reference: https://www.virustotal.com/gui/file/42aedcca31e049e943b212269ce11d659a41dbada41d6357c5377d1e348dab61/detection

172.245.210.119:17638

# Reference: https://www.nozominetworks.com/blog/new-botenago-variant-discovered-by-nozomi-networks-labs/
# Reference: https://otx.alienvault.com/pulse/625fc63c2e7b178b7c8b7287

http://136.144.41.169

# Reference: https://elfdigest.com/brief/6343dff98aa383da941d8d26f75e93f8a26446d4deaf83132e33e58de57c7568

104.168.49.30:10019

# Reference: https://elfdigest.com/brief/2e4fdacdeb0977ae8e41a7c43e61a1992e12cb44bffa709fc3ebd2c64941d74c

69.10.35.150:606

# Reference: https://www.virustotal.com/gui/file/260d20091001c039f55224c6abc157d9ea591ee538980e9adc9eeb9860f9ca8a/detection

5.206.224.233:37215
5.206.224.233:6585
/ahsok.arc
/ahsok.arcle-hs38
/ahsok.arm
/ahsok.arm4
/ahsok.arm4l
/ahsok.arm4t
/ahsok.arm4tl
/ahsok.arm4tll
/ahsok.arm5
/ahsok.arm5l
/ahsok.arm5n
/ahsok.arm6
/ahsok.arm64
/ahsok.arm6l
/ahsok.arm7
/ahsok.arm7l
/ahsok.arm8
/ahsok.armv4
/ahsok.armv4l
/ahsok.armv5l
/ahsok.armv6
/ahsok.armv61
/ahsok.armv6l
/ahsok.armv7l
/ahsok.dbg
/ahsok.exploit
/ahsok.i4
/ahsok.i486
/ahsok.i586
/ahsok.i6
/ahsok.i686
/ahsok.kill
/ahsok.m68
/ahsok.m68k
/ahsok.mips
/ahsok.mips64
/ahsok.mipseb
/ahsok.mipsel
/ahsok.mpsl
/ahsok.pcc
/ahsok.powerpc
/ahsok.powerpc-440fp
/ahsok.powerppc
/ahsok.ppc
/ahsok.pp-c
/ahsok.ppc2
/ahsok.ppc440
/ahsok.ppc440fp
/ahsok.root
/ahsok.root32
/ahsok.sh
/ahsok.sh4
/ahsok.sparc
/ahsok.spc
/ahsok.ssh4
/ahsok.x32
/ahsok.x32_64
/ahsok.x64
/ahsok.x86
/ahsok.x86_32
/ahsok.x86_64

# Reference: https://www.virustotal.com/gui/file/a317f2f90e869079f75523bde895515014c058ec818412b1209b22d1e2a5f89d/detection

108.61.218.205:29240
135.125.250.120:14498
135.148.11.151:3563
139.162.45.218:5165
141.164.62.19:14771
146.59.11.103:1701
146.59.11.109:5089
149.202.9.14:19765
149.202.9.7:9898
149.56.154.210:24709
149.56.154.211:21299
172.104.100.78:1039
172.104.158.4:23416
172.104.70.232:28549
172.105.170.180:17648
172.105.180.239:19531
172.105.36.137:23125
172.105.36.167:10843
172.106.70.134:25054
172.106.70.135:692
185.150.117.10:29086
185.150.117.41:20790
195.189.96.60:9700
195.189.96.61:29582
207.148.74.163:32389
207.148.85.65:13777
45.32.117.248:15357
45.32.8.100:19759
45.79.193.124:7158
45.79.74.219:24280
5.199.174.242:27931
51.178.185.236:21685
51.178.185.237:32
51.195.152.255:25107
51.195.209.80:26848
51.81.139.251:6255
65.21.16.80:23560
65.21.16.94:28056
84.32.188.34:1157
84.32.188.37:1454
91.134.216.103:16358
95.179.158.147:22413

# Reference: https://elfdigest.com/brief/9de4bb1695d67d1928076572bf551415a5265edfec261f6f578faa0da60fe174
# Reference: https://www.virustotal.com/gui/file/1e5453064803174962654b3db0acfc26730937e7cd06e794b8c5dadcd1703623/detection

http://194.180.48.22

# Reference: https://www.virustotal.com/gui/file/0000002a10959ec38b808d8252eed2e814294fbb25d2cd016b24bf853a44857e/detection

http://206.189.2.23
206.189.2.23:666

# Reference: https://elfdigest.com/brief/5aa4af96e9c1fa6573f4278551acd0bcb4f03872b23cbfe2d987f4baba52555d
# Reference: https://www.virustotal.com/gui/file/5aa4af96e9c1fa6573f4278551acd0bcb4f03872b23cbfe2d987f4baba52555d/detection

79.110.63.9:20002

# Reference: https://www.virustotal.com/gui/file/7de1d97c9380d4b3e10f264c0327847fe5394abc15f26443463ddb244d129991/detection
# Reference: https://www.virustotal.com/gui/file/45ee1b341384fc58c1ed25f6ef28c41829d3a8e67ac8155801b0197747e9be79/detection
# Reference: https://www.virustotal.com/gui/file/2447ea4057f42591361d038885642ed7c15c07052c324864d6b27f3077d19b1f/detection

45.144.2.127:85

# Reference: https://twitter.com/tosscoinwitcher/status/1608179631034892288
# Reference: https://tria.ge/221228-w913yabb93/behavioral1

1.246.222.40:4523

# Reference: https://viz.greynoise.io/ip/185.117.73.208
# Reference: https://www.virustotal.com/gui/file/90d6a71704db3d1c31e6073468d84d183a443dbbc503c44591ee4736cebf6032/detection

185.117.73.208:164

# Reference: https://www.virustotal.com/gui/file/b6d8a66388d96564177f5fa29be30d4d6a6189f1e9793eeceb194ba54d09d31a/detection

167.99.5.116:812

# Reference: https://elfdigest.com/brief/6e239f67ba41171e19c308d1bd4539cd1526d42b223931ed03eb4278de136f30

193.35.18.171:9166

# Reference: https://www.virustotal.com/gui/file/1f80cabcbd95131a18909eaf0e0e59e654bdf96f48c3eed8458f944d5acd90f9/detection

98.159.98.37:23

# Reference: https://www.virustotal.com/gui/ip-address/45.12.253.180/relations

http://45.12.253.180
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arc
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arcle-hs38
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm4
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm4l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm4t
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm4tl
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm4tll
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm5
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm5l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm5n
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm6
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm64
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm6l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm7
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm7l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.arm8
/x3x38db0fa4b8db0333367e9bda3ab68b8042.armv4
/x3x38db0fa4b8db0333367e9bda3ab68b8042.armv4l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.armv5l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.armv6
/x3x38db0fa4b8db0333367e9bda3ab68b8042.armv61
/x3x38db0fa4b8db0333367e9bda3ab68b8042.armv6l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.armv7l
/x3x38db0fa4b8db0333367e9bda3ab68b8042.dbg
/x3x38db0fa4b8db0333367e9bda3ab68b8042.exploit
/x3x38db0fa4b8db0333367e9bda3ab68b8042.i4
/x3x38db0fa4b8db0333367e9bda3ab68b8042.i486
/x3x38db0fa4b8db0333367e9bda3ab68b8042.i586
/x3x38db0fa4b8db0333367e9bda3ab68b8042.i6
/x3x38db0fa4b8db0333367e9bda3ab68b8042.i686
/x3x38db0fa4b8db0333367e9bda3ab68b8042.kill
/x3x38db0fa4b8db0333367e9bda3ab68b8042.m68
/x3x38db0fa4b8db0333367e9bda3ab68b8042.m68k
/x3x38db0fa4b8db0333367e9bda3ab68b8042.mips
/x3x38db0fa4b8db0333367e9bda3ab68b8042.mips64
/x3x38db0fa4b8db0333367e9bda3ab68b8042.mipseb
/x3x38db0fa4b8db0333367e9bda3ab68b8042.mipsel
/x3x38db0fa4b8db0333367e9bda3ab68b8042.mpsl
/x3x38db0fa4b8db0333367e9bda3ab68b8042.pcc
/x3x38db0fa4b8db0333367e9bda3ab68b8042.powerpc
/x3x38db0fa4b8db0333367e9bda3ab68b8042.powerpc-440fp
/x3x38db0fa4b8db0333367e9bda3ab68b8042.powerppc
/x3x38db0fa4b8db0333367e9bda3ab68b8042.ppc
/x3x38db0fa4b8db0333367e9bda3ab68b8042.pp-c
/x3x38db0fa4b8db0333367e9bda3ab68b8042.ppc2
/x3x38db0fa4b8db0333367e9bda3ab68b8042.ppc440
/x3x38db0fa4b8db0333367e9bda3ab68b8042.ppc440fp
/x3x38db0fa4b8db0333367e9bda3ab68b8042.root
/x3x38db0fa4b8db0333367e9bda3ab68b8042.root32
/x3x38db0fa4b8db0333367e9bda3ab68b8042.sh
/x3x38db0fa4b8db0333367e9bda3ab68b8042.sh4
/x3x38db0fa4b8db0333367e9bda3ab68b8042.sparc
/x3x38db0fa4b8db0333367e9bda3ab68b8042.spc
/x3x38db0fa4b8db0333367e9bda3ab68b8042.ssh4
/x3x38db0fa4b8db0333367e9bda3ab68b8042.x32
/x3x38db0fa4b8db0333367e9bda3ab68b8042.x32_64
/x3x38db0fa4b8db0333367e9bda3ab68b8042.x64
/x3x38db0fa4b8db0333367e9bda3ab68b8042.x86
/x3x38db0fa4b8db0333367e9bda3ab68b8042.x86_32
/x3x38db0fa4b8db0333367e9bda3ab68b8042.x86_64

# Reference: https://www.virustotal.com/gui/file/71f0c3231d89eae72f4e8b26b77f04bdfe8c2dcd0648457c286bf628c51bbf93/detection
# Reference: https://www.virustotal.com/gui/file/f5a1fbf92b0b801a987b2c2af8cffe2a5f97a89043a0bf9dc19d37dcfd13c3ef/detection
# Reference: https://www.virustotal.com/gui/file/8a6287445a4e64f0ff3364ef70a2f78562ac5cfda1a92519be72467349afffce/detection

http://194.53.108.15
50.115.168.110:42516

# Reference: https://www.virustotal.com/gui/file/50747def987c357ec59e211af7992b7e7c008e596cf287dd4b2a992e69265c2e/detection

http://199.19.225.2
199.19.225.2:42516

# Reference: https://elfdigest.com/brief/9bff12d3a6bdc189dc76cbbd3b5c2f4eaf82cef2b775a2cc2c3e62eaf8fc79de
# Reference: https://elfdigest.com/brief/b64e240a4f9bb47f63b04eb222598c149b524a15009ae4176a31f8786b61bb11

http://37.49.229.52
37.49.229.52:23

# Reference: https://elfdigest.com/brief/cdc8f0e0e0de5b971bc3c0744fc87ccc789636372e03655ab21ba6f7567403a4

5.181.80.18:1337

# Reference: https://elfdigest.com/brief/1375348b20b4a2f78dc4f54226393ad7bf88dc8bb6879a1fb28b23dd90e44583

185.246.220.200:666

# Reference: https://elfdigest.com/brief/49e37df00e188b71d3970d1c92268175b974e08745dd4e4223c4e86d1e061551

45.61.144.146:42070

# Reference: https://elfdigest.com/brief/0f5f6cf9bf07bef47975dcee96814d6ee69afe585302bfb1d91f462059883608

179.61.251.89:839

# Reference: https://twitter.com/RedDrip7/status/1630041308491575296
# Reference: https://www.virustotal.com/gui/file/30910d31f28de5665a9f5b5032ec8626e6d50126f9f5ea88ac1ca485db42d7b8/detection

37.44.238.191:41

# Reference: https://www.virustotal.com/gui/file/0c4fd966880f2de6c60deed295a276f628c27b8ab1a53cf42cb7d489445e1ac0/detection

/fuckjewishpeople.32
/fuckjewishpeople.64
/fuckjewishpeople.arc
/fuckjewishpeople.arcle-hs38
/fuckjewishpeople.arm
/fuckjewishpeople.arm4
/fuckjewishpeople.arm4l
/fuckjewishpeople.arm4t
/fuckjewishpeople.arm4tl
/fuckjewishpeople.arm4tll
/fuckjewishpeople.arm5
/fuckjewishpeople.arm5l
/fuckjewishpeople.arm5n
/fuckjewishpeople.arm6
/fuckjewishpeople.arm64
/fuckjewishpeople.arm6l
/fuckjewishpeople.arm7
/fuckjewishpeople.arm7l
/fuckjewishpeople.arm8
/fuckjewishpeople.armv4
/fuckjewishpeople.armv4l
/fuckjewishpeople.armv5l
/fuckjewishpeople.armv6
/fuckjewishpeople.armv61
/fuckjewishpeople.armv6l
/fuckjewishpeople.armv7l
/fuckjewishpeople.dbg
/fuckjewishpeople.exploit
/fuckjewishpeople.i4
/fuckjewishpeople.i486
/fuckjewishpeople.i586
/fuckjewishpeople.i6
/fuckjewishpeople.i686
/fuckjewishpeople.kill
/fuckjewishpeople.m68
/fuckjewishpeople.m68k
/fuckjewishpeople.mips
/fuckjewishpeople.mips64
/fuckjewishpeople.mipseb
/fuckjewishpeople.mipsel
/fuckjewishpeople.mpsl
/fuckjewishpeople.pcc
/fuckjewishpeople.powerpc
/fuckjewishpeople.powerpc-440fp
/fuckjewishpeople.powerppc
/fuckjewishpeople.ppc
/fuckjewishpeople.pp-c
/fuckjewishpeople.ppc2
/fuckjewishpeople.ppc440
/fuckjewishpeople.ppc440fp
/fuckjewishpeople.root
/fuckjewishpeople.root32
/fuckjewishpeople.sh
/fuckjewishpeople.sh4
/fuckjewishpeople.sparc
/fuckjewishpeople.spc
/fuckjewishpeople.ssh4
/fuckjewishpeople.x32
/fuckjewishpeople.x32_64
/fuckjewishpeople.x64
/fuckjewishpeople.x86
/fuckjewishpeople.x86_32
/fuckjewishpeople.x86_64

# Reference: https://www.virustotal.com/gui/file/71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0/detection

185.244.129.29:6689

# Reference: https://elfdigest.com/brief/99b8cd472f0f22fcff6d2c73e77b8d9c75a14f0c60fcb592660442b51dea1541

45.81.243.34:59666
softdetails.in
xlollo.softdetails.in

# Reference: https://www.virustotal.com/gui/file/125fc9bfe6e286a147424a0357a09754718e2c16f6f2201fa9874be148c4f3b9/detection

dxqertxhp.cfd
softdetails.ru
suka.dxqertxhp.cfd

# Reference: https://www.virustotal.com/gui/file/773409c5569b15ea58851555e4feb149595760f1205c737e75a77c65d6984072/detection

soka.root.sx

# Reference: https://www.virustotal.com/gui/file/a94981a0e1c42fca68b9f405226adf5ab8f26fab3c52299986070b2131df7776/detection

163.123.142.170:1791

# Reference: https://twitter.com/fuyinglab/status/1640996958830743552
# Reference: https://www.virustotal.com/gui/ip-address/37.44.238.182/relations
# Reference: https://www.virustotal.com/gui/file/1a3de52692191f65bc5282c71f3331da2367ab58ad325adc361172c42ff0bf3a/detection
# Reference: https://www.virustotal.com/gui/file/f195868aa999b61913d1f18571ae7b905a7e1951586948c7d48558a7964a0ec7/detection

37.44.238.182:101
37.44.238.182:39
/kirin.32
/kirin.64
/kirin.arc
/kirin.arcle-hs38
/kirin.arm
/kirin.arm4
/kirin.arm4l
/kirin.arm4t
/kirin.arm4tl
/kirin.arm4tll
/kirin.arm5
/kirin.arm5l
/kirin.arm5n
/kirin.arm6
/kirin.arm64
/kirin.arm6l
/kirin.arm7
/kirin.arm7l
/kirin.arm8
/kirin.armv4
/kirin.armv4l
/kirin.armv5l
/kirin.armv6
/kirin.armv61
/kirin.armv6l
/kirin.armv7l
/kirin.dbg
/kirin.exploit
/kirin.i4
/kirin.i486
/kirin.i586
/kirin.i6
/kirin.i686
/kirin.kill
/kirin.m68
/kirin.m68k
/kirin.mips
/kirin.mips64
/kirin.mipseb
/kirin.mipsel
/kirin.mpsl
/kirin.pcc
/kirin.powerpc
/kirin.powerpc-440fp
/kirin.powerppc
/kirin.ppc
/kirin.pp-c
/kirin.ppc2
/kirin.ppc440
/kirin.ppc440fp
/kirin.root
/kirin.root32
/kirin.sh
/kirin.sh4
/kirin.sparc
/kirin.spc
/kirin.ssh4
/kirin.x32
/kirin.x32_64
/kirin.x64
/kirin.x86
/kirin.x86_32
/kirin.x86_64
/terry.32
/terry.64
/terry.arc
/terry.arcle-hs38
/terry.arm
/terry.arm4
/terry.arm4l
/terry.arm4t
/terry.arm4tl
/terry.arm4tll
/terry.arm5
/terry.arm5l
/terry.arm5n
/terry.arm6
/terry.arm64
/terry.arm6l
/terry.arm7
/terry.arm7l
/terry.arm8
/terry.armv4
/terry.armv4l
/terry.armv5l
/terry.armv6
/terry.armv61
/terry.armv6l
/terry.armv7l
/terry.dbg
/terry.exploit
/terry.i4
/terry.i486
/terry.i586
/terry.i6
/terry.i686
/terry.kill
/terry.m68
/terry.m68k
/terry.mips
/terry.mips64
/terry.mipseb
/terry.mipsel
/terry.mpsl
/terry.pcc
/terry.powerpc
/terry.powerpc-440fp
/terry.powerppc
/terry.ppc
/terry.pp-c
/terry.ppc2
/terry.ppc440
/terry.ppc440fp
/terry.root
/terry.root32
/terry.sh
/terry.sh4
/terry.sparc
/terry.spc
/terry.ssh4
/terry.x32
/terry.x32_64
/terry.x64
/terry.x86
/terry.x86_32
/terry.x86_64

# Reference: https://elfdigest.com/brief/8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc

43.153.37.45:707

# Reference: https://elfdigest.com/brief/94b34225c084dba7db19725bc2aad74bcf85b9d0990a2c31b665faa4f42ec39a

85.204.116.121:6149

# Reference: https://elfdigest.com/brief/be5b7678ca03a70b75085b7725f2b332492253fe6582ddec166ba5557afe8392

185.225.74.175:31337

# Reference: https://elfdigest.com/brief/fa0b84aae297a49e16d4978783b3a3c091a3f49c27035daed06f6ef21836945f

45.131.111.251:666

# Reference: https://elfdigest.com/brief/c0b9fb5c366cf7edbe3b29aee23177aed010486779beb4afed7ac323b3b93342

31.222.202.229:666

# Reference: https://elfdigest.com/brief/a1e35e8d161cc6dc0d8746f7ec125c96115f5964126f690d22838077d9fe6e69

146.0.36.62:666

# Reference: https://elfdigest.com/brief/a0b62a5c1cbc7ae2e1ec252d3c0218ad087e784a0bdf84083cdd04cc920b016b

109.206.243.119:3778

# Reference: https://twitter.com/r3dbU7z/status/1649390463059734528
# Reference: https://elfdigest.com/brief/69a68d5d98da6d654615e2c7a140c49681ddc02acc71fa0172bd9ba8535a77c7

http://5.206.227.132
5.206.224.174:666
5.206.227.132:158

# Reference: https://elfdigest.com/brief/eb195d22bac7a2093977f4bfc79b3466eed0a9bad7ffe5dc7845f24fbb564ffa

172.98.14.94:26455

# Reference: https://elfdigest.com/brief/8be90502f3ef639b9505035bd1cc631ef97afa948522aa7a4935c8fd80e97c1e

194.34.132.186:6667

# Reference: https://elfdigest.com/brief/bb7ac2ba0dea3b0ac95a9f76a8c52df6dac96dbb2c8506e0708524f1b57ac88c

78.142.228.151:839

# Reference: https://elfdigest.com/brief/5863cb12f72ad06613c1d3eb694c0ccabd30452299f1f7fb8a3b07e4b1b34b7e

172.81.41.196:963

# Reference: https://twitter.com/SecureSh3ll/status/1653033096168591360

http://91.234.99.218
hubbyte.pw
rdns.hubbyte.pw

# Reference: https://elfdigest.com/brief/3bc240fe769e681eedf59f725d51a7d9f42f4451dc7feb4f85a39603c8fabd34

38.48.123.55:1749

# Reference: https://elfdigest.com/brief/245cdf25d5633a8bfc5485db713f417818c936052cb72e10abbedc31354c275c

84.54.50.8:65535

# Reference: https://elfdigest.com/brief/b45e98ce0bfe48a2b2dd5f9a985a1449d8bf4099dd5b596cb1d053e32de8947f

http://5.181.80.119
5.181.80.119:7447

# Reference: https://elfdigest.com/brief/94a7beb2d03227aa404988abfde526fb9d36d8f3da6f8e68b998506e111905af

176.111.173.27:666

# Reference: https://elfdigest.com/brief/1b1c1e47117c9196cd1a6a086541628fdd2ce3d694a4a6a3d4e3a270eef4ae05

138.3.250.75:23

# Reference: https://elfdigest.com/brief/44885431a45d3f867466c22a081ab4711102f919c9e40cc508f9892c5009857c

45.88.66.177:23

# Reference: https://elfdigest.com/brief/2273ef203aebcca4f6f660716acc47ff5def38ba85f790c84381f04e1212b5aa

47.87.163.214:6667

# Reference: https://elfdigest.com/brief/ab3bcd9ea102dca65d2e7355d349bb43a1a41c7cb7976e76cc1b4fd168fbd8e8

89.208.106.135:655

# Reference: https://elfdigest.com/brief/3d4c54e873e9ab5804d5c7a405640a1220307ce6119485701b981d8e28f4adf7

209.126.1.176:1112

# Reference: https://elfdigest.com/brief/0ace999b9f9214186b70e4a8d77332613342b7b88d72d167405b2cfc983914a9

85.204.116.179:6149

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/

http://104.43.244.94
http://173.232.146.125
http://20.106.163.35
http://23.183.81.112
http://45.56.96.91
http://46.166.185.38
103.119.112.34:55568
103.136.43.143:1111
103.142.26.181:666
103.161.17.201:606
103.161.17.233:1227
103.161.17.233:1229
103.162.30.118:23
103.180.137.4:1337
103.66.57.47:9050
104.131.121.49:42516
104.131.4.244:666
104.156.227.75:606
104.168.102.14:34
104.168.46.22:6119
104.168.47.214:65525
104.168.52.153:64153
104.193.255.117:1234
104.206.252.100:42516
104.237.142.77:23
104.238.220.38:808
104.244.72.234:64938
104.248.251.231:1209
104.248.47.1:666
104.248.49.108:4258
107.167.2.174:23
107.172.0.117:666
107.172.0.199:2111
107.172.102.161:123
107.172.137.175:7777
107.172.140.104:1124
107.172.141.135:1194
107.172.156.136:23
107.172.156.158:21
107.172.196.111:999
107.172.197.100:58777
107.172.197.192:606
107.172.201.217:606
107.172.248.140:666
107.172.248.202:42516
107.172.79.248:606
107.172.79.52:666
107.173.141.175:51675
107.173.176.113:6969
107.173.176.144:42516
107.173.176.183:909
107.173.176.7:5558
107.173.181.135:1041
107.173.181.13:666
107.173.255.198:65535
107.173.49.29:42516
107.174.14.229:666
107.174.144.231:666
107.174.250.15:65530
107.174.35.229:9999
107.174.46.89:717
107.174.68.38:121
107.175.123.57:839
107.175.196.13:671
107.175.21.222:999
107.175.215.195:606
107.175.64.119:8080
107.175.87.159:42516
107.175.87.164:576
107.189.10.234:4258
107.189.11.231:61002
107.189.13.139:6969
108.61.208.92:23
109.206.243.105:4200
109.206.243.200:60001
109.71.254.181:839
128.199.29.170:606
128.199.40.220:23
13.250.126.74:606
134.122.121.150:666
134.122.33.137:443
134.209.157.41:9900
135.125.210.161:666
135.148.152.157:30120
135.181.98.1:1865
136.144.41.117:1468
136.144.41.117:3685
136.175.200.142:888
137.184.104.63:1335
137.184.124.163:42516
137.184.30.219:6149
137.184.38.105:1111
137.184.63.226:1229
137.184.94.156:606
137.220.52.165:282
138.124.186.54:606
138.124.186.96:606
138.197.166.6:23
138.201.192.217:3128
138.68.76.71:4258
138.68.81.110:62514
139.177.192.32:23
139.59.140.224:606
139.59.165.186:23
139.99.135.131:23
139.99.135.131:606
139.99.135.131:666
139.99.161.143:120
141.94.124.121:666
141.95.214.149:60001
142.202.189.114:666
142.4.196.193:909
142.4.196.195:565
142.44.236.6:9900
142.44.240.149:839
142.93.165.5:717
142.93.243.70:6667
143.110.146.241:4258
143.198.112.33:606
143.198.115.46:6666
143.198.116.230:42516
143.198.157.131:12345
143.198.157.92:60
143.198.189.89:2238
143.198.71.184:909
143.244.134.207:23
143.244.181.120:151
144.217.147.254:42516
146.66.220.59:1749
147.182.140.37:666
147.182.221.123:666
147.182.223.129:4258
148.251.238.46:13568
149.129.132.93:42516
149.56.114.180:839
149.56.164.192:1229
149.56.35.183:606
149.56.35.183:909
149.57.170.179:6422
15.235.131.10:59666
15.235.131.10:666
154.16.118.34:666
154.16.118.84:666
155.138.239.74:1337
155.138.239.74:23
155.138.252.212:42516
156.234.211.155:59999
156.96.157.117:1111
157.245.108.193:606
157.245.143.43:6149
157.245.158.246:4258
157.245.158.246:55555
157.245.75.82:999
157.245.93.119:999
157.245.93.157:606
158.51.124.114:6646
158.51.96.28:1749
158.69.124.146:6633
158.69.124.146:993
159.203.21.230:42516
159.203.72.143:666
159.223.1.239:42516
159.223.107.144:666
159.223.135.220:42516
159.65.117.231:717
159.65.221.234:42516
159.65.25.30:666
159.89.17.205:8976
159.89.198.93:1111
159.89.226.85:23
160.20.146.54:42516
161.35.25.184:9034
161.35.85.160:606
161.97.80.232:12345
162.240.30.112:42516
162.243.172.46:666
162.55.142.8:666
162.55.165.178:809
163.123.143.216:13769
163.172.82.219:5555
164.90.206.206:23
164.92.184.121:717
164.92.211.51:158
164.92.242.51:1111
165.227.152.223:606
165.232.132.216:96
165.232.146.240:23
165.232.146.246:666
166.0.133.106:1229
166.0.133.125:717
167.114.27.123:6258
167.172.148.13:23
167.172.99.133:606
167.88.12.77:21
167.99.177.145:666
167.99.254.203:42516
167.99.35.197:839
170.64.130.205:23
172.105.119.145:9975
172.105.23.74:666
172.105.37.233:443
172.245.142.15:888
172.245.184.103:666
172.245.184.130:666
172.245.185.117:606
172.245.185.117:839
172.245.186.149:65501
172.245.36.108:888
172.245.5.201:65501
172.245.7.14:666
172.245.8.243:576
172.93.129.227:443
173.212.249.232:606
173.249.0.42:12345
173.82.206.235:777
176.123.10.9:606
176.123.5.44:200
176.123.6.196:666
176.123.6.43:839
176.123.6.48:839
176.126.175.205:55101
178.128.110.165:23
178.128.164.227:6149
178.128.193.205:606
178.33.159.135:7778
178.62.253.153:4258
178.62.79.170:666
179.43.187.169:872
179.43.187.230:7771
179.61.251.251:60001
181.214.231.41:5555
185.101.107.55:42516
185.107.195.203:606
185.117.3.107:23
185.117.3.107:999
185.120.144.174:12345
185.145.245.55:6394
185.154.13.88:57541
185.177.57.45:47657
185.186.244.183:1749
185.189.51.86:42511
185.212.44.240:23
185.213.27.2:1588
185.219.221.161:6666
185.225.73.130:666
185.225.74.3:9999
185.234.13.129:1337
185.236.228.145:23
185.237.96.86:8202
185.38.142.103:872
185.44.81.78:9700
188.127.231.132:606
188.127.239.36:606
188.127.251.1:839
188.165.170.24:420
188.227.106.34:23
191.96.165.103:420
192.210.163.112:669
192.210.163.130:576
192.210.163.130:839
192.210.163.166:5655
192.210.226.183:65501
192.210.239.176:55312
192.227.131.134:576
192.236.147.78:6666
192.3.118.107:576
192.3.15.116:1111
192.3.15.116:839
192.3.15.119:576
192.3.228.148:666
192.3.231.100:21952
192.3.231.100:22392
192.3.80.128:42516
192.3.80.137:56388
192.95.50.228:1041
192.99.169.203:420
193.105.134.119:9999
193.169.253.161:158
193.169.253.161:69
193.26.22.107:8890
193.35.18.171:8338
193.35.18.57:1312
193.42.32.175:1500
193.84.88.86:9703
194.147.142.169:666
194.147.149.3:606
194.163.148.138:23
194.195.117.185:24681
194.195.246.14:23
194.233.90.81:23
194.34.132.186:23
194.34.132.186:998
194.37.80.116:606
194.55.186.118:60012
194.85.248.128:606
194.85.249.3:1011
194.85.249.7:9987
194.85.249.9:1011
194.85.249.9:1020
194.85.249.9:1599
194.85.250.154:9975
194.87.106.36:2323
194.87.138.136:5312
194.87.138.146:999
194.87.138.169:839
194.87.138.171:158
194.87.138.18:30888
194.87.197.237:1337
195.133.40.45:4849
195.133.5.119:2323
195.133.5.119:4444
195.249.159.167:5571
195.249.159.187:5571
195.249.159.195:5571
195.58.38.210:6667
195.58.39.200:23
195.58.39.207:671
195.58.39.231:4258
195.58.39.250:42516
198.12.113.239:65535
198.12.120.177:22876
198.12.123.196:3077
198.23.214.174:666
198.23.255.14:841
198.244.189.90:1337
198.244.189.90:666
198.244.193.25:45716
198.46.148.130:59666
198.46.188.140:23
198.46.202.103:717
198.46.223.161:36457
198.98.48.39:717
198.98.54.27:151
198.98.54.38:666
198.98.55.220:60001
199.19.226.142:23
2.58.149.173:909
2.58.149.40:6942
20.63.103.150:839
205.185.115.164:16782
205.185.115.164:45657
205.185.115.164:9142
205.185.118.192:872
205.185.118.192:9827
205.185.119.11:59666
205.185.121.251:606
205.185.122.29:58541
205.185.124.167:65530
206.189.234.6:666
206.83.40.162:839
206.83.40.53:839
208.58.102.71:60022
209.126.73.248:839
209.141.32.221:1337
209.141.33.136:35742
209.141.34.151:65530
209.141.36.110:606
209.141.37.70:666
209.141.40.33:666
209.141.42.178:666
209.141.48.229:12345
209.141.51.34:576
209.141.56.206:963
209.141.57.91:9783
209.141.57.91:9832
209.141.60.62:42516
209.141.61.201:717
209.25.141.229:22586
212.129.56.171:1111
212.192.216.31:1227
212.192.216.78:1227
212.192.241.221:23
212.192.241.44:1066
212.193.30.219:8683
212.193.30.245:59666
216.173.119.164:666
23.160.192.157:1749
23.160.193.38:1749
23.160.193.99:1749
23.224.189.182:8080
23.227.184.194:717
23.88.113.7:606
23.94.138.109:11
23.94.138.109:231
23.94.182.29:576
23.94.22.112:66
23.94.24.109:22876
23.94.24.109:65531
23.94.245.9:4258
23.94.26.138:1202
23.94.26.138:1229
23.94.27.204:454
23.94.36.134:888
23.94.7.153:666
23.94.7.197:54923
23.94.77.150:23
23.95.213.111:771
23.95.222.185:606
23.95.226.100:839
23.95.230.108:1111
23.95.9.231:123
3.143.112.92:42516
31.210.20.60:839
31.220.51.145:23
31.222.202.229:9999
31.42.186.77:1111
31.7.62.22:576
34.127.55.77:9975
37.0.10.182:1111
37.0.10.182:4258
37.0.10.182:606
37.0.10.210:42516
37.0.10.214:909
37.221.65.77:666
37.221.92.202:1111
37.44.238.191:45
37.49.229.52:4258
37.49.230.122:9506
37.49.230.83:23
41.216.182.144:60005
41.216.182.17:666
41.216.182.203:1111
41.216.182.214:666
45.128.153.154:61915
45.128.232.144:158
45.128.232.144:9999
45.132.88.184:54321
45.132.88.184:606
45.134.10.88:666
45.134.11.110:666
45.14.226.72:666
45.140.188.33:6989
45.144.179.23:2323
45.144.29.99:42516
45.148.10.243:1111
45.148.10.243:909
45.148.10.76:22222
45.148.120.171:666
45.148.120.226:666
45.148.120.80:839
45.148.121.228:839
45.148.123.10:839
45.150.128.182:4258
45.150.128.182:55555
45.156.21.213:666
45.159.189.101:6725
45.32.202.111:42516
45.33.63.122:666
45.56.96.91:23
45.61.184.126:2782
45.61.187.108:633
45.61.188.118:17263
45.61.188.150:114
45.61.188.220:9832
45.76.253.113:666
45.77.46.118:282
45.79.207.123:666
45.85.90.172:717
45.9.168.102:65509
45.9.168.102:666
45.90.160.173:65004
45.90.161.92:44
45.90.162.184:576
45.95.169.115:23
45.95.169.115:839
45.95.169.119:666
45.95.169.133:717
46.101.134.104:70
46.101.172.62:666
46.101.223.83:839
46.243.187.18:23
46.249.32.109:1111
46.249.32.109:1227
46.249.32.109:1336
46.249.32.109:1337
46.249.32.109:23
46.249.32.215:1111
46.249.32.66:51675
47.87.131.128:9999
47.87.161.172:6580
47.87.218.20:6667
47.87.218.20:9999
49.12.200.229:666
49.12.34.17:666
5.154.181.68:1111
5.181.159.128:23
5.181.159.19:2
5.181.159.19:55312
5.181.80.13:666
5.188.6.139:23
5.189.141.159:666
5.199.169.12:4258
5.199.169.21:9506
5.2.73.241:999
5.206.227.11:55555
5.206.227.77:666
5.249.162.136:4258
5.249.162.136:55555
5.255.101.135:1111
5.255.98.75:65530
50.115.174.119:606
50.115.175.128:1337
50.116.35.248:606
50.7.239.226:13568
51.15.189.176:23
51.15.189.176:666
51.159.54.29:666
51.161.64.194:158
51.195.155.220:23
51.195.194.83:22
51.195.217.90:1337
51.195.91.119:666
51.210.149.255:666
51.222.234.64:4258
51.68.127.202:23
51.68.202.107:999
51.75.166.195:23
51.79.56.180:1194
51.79.85.22:1337
51.81.38.251:443
51.81.8.35:9999
51.89.134.84:22
51.89.213.135:1337
51.89.223.6:23
51.89.223.7:23
51.89.223.7:666
51.89.240.11:33060
51.89.240.11:420
51.89.247.17:839
54.39.209.225:25565
57.128.168.187:23
57.128.168.187:666
62.197.136.231:62989
62.197.136.60:909
62.33.2.50:23
62.3.58.154:839
64.226.111.37:5558
65.108.81.182:23
65.108.81.182:6982
65.21.178.89:23
65.21.178.89:6982
66.70.188.177:666
66.70.198.232:9517
67.205.135.39:2831
68.183.196.213:666
69.162.86.229:666
74.201.30.210:23
74.201.30.210:666
74.208.247.243:999
74.208.25.33:42516
74.208.253.211:42516
77.247.178.7:13568
78.47.230.250:4258
79.137.33.37:42516
82.117.253.43:27532
83.229.67.31:42516
84.32.188.55:576
85.204.116.28:42516
85.204.116.32:60001
85.204.116.32:839
85.204.116.33:717
85.209.2.163:606
85.237.217.143:42516
85.237.217.143:44500
85.237.217.143:839
85.237.217.174:42516
85.237.217.174:839
85.237.217.174:8888
85.239.55.238:405
87.121.221.107:1971
87.121.221.229:6996
88.208.199.38:5555
88.214.20.184:1337
88.214.20.184:606
88.218.227.141:839
89.107.57.43:777
89.43.107.94:606
91.208.206.146:140
91.208.206.205:9975
91.234.99.218:65534
91.243.121.19:606
92.118.237.177:839
92.38.184.248:11
93.188.162.146:22
95.179.132.17:23
96.8.118.142:888

# Reference: https://elfdigest.com/brief/a4b5803592049a1169245b8e24242cffb80d596c9d576d6bacce3e2c8f603a86

91.132.167.13:655

# Reference: https://elfdigest.com/brief/a026295ae72f8d95e812e2d3ac48ed3e555e9c929ddc3f05cc27775ad8a1dd22

5.78.92.158:10024

# Reference: https://elfdigest.com/brief/50381f61ef742cf02fae1e58bfcfeb74d8607b532e995db6d006133fdd49c951

87.121.113.2:4261

# Reference: https://elfdigest.com/brief/ade5fd3b5560e3319b1ac22030745086e824aa533aebeef9f8c821c288bfe585

193.200.16.112:415

# Reference: https://elfdigest.com/brief/6c901ba15327da68159712a9726807fb08868309726c55ef202818bfde22a5a7

167.172.72.193:23

# Reference: https://elfdigest.com/brief/39049c006affcdff3476a317732a70e08e64d206dadd71de8ff89fd9575bc3bd

172.104.44.216:23

# Reference: https://elfdigest.com/brief/a40fec7100ac7b71414df6a6e133cbf1a71fb89e0e18e874ee11af004f2ca5ae

45.142.107.167:6667

# Reference: https://elfdigest.com/brief/2cf079b6ef9d520ec72fe94f7f91d3bbe74a840768a572c4dc0a0101c283311a

41.216.182.140:23

# Reference: https://elfdigest.com/brief/7895e5757d7fd2e8d3c87a19ba8225272f2af47d5bb17ca8ec73893ce4684e07

87.121.221.67:655

# Reference: https://elfdigest.com/brief/da7084f087da561f253c2f9528253b935c7bfae9445fcac062bf64d1d4b78fb7

194.62.157.35:6667

# Reference: https://elfdigest.com/brief/65c3c126d7a6ad3a6ae8d9450b4d122630d8ac76bbb847a13e6e7525af0b63cf

45.79.127.90:23

# Reference: https://elfdigest.com/brief/025abb54e3a396927219650f041123edb96132bd854221bd3922a656ba2c8bb7

176.123.6.160:69

# Reference: https://elfdigest.com/brief/f36ed47327ce75f8d2b42b3821d1a39c6268a526a0815d599720acbf2dffae66

194.59.31.34:747

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/

134.209.244.239:666
194.180.48.30:666
198.98.62.168:23
2.57.122.117:4258
35.204.65.246:23
41.216.182.140:1337
45.79.127.90:443
91.208.197.66:666

# Reference: https://elfdigest.com/brief/3ecfd69cc68c49a26adec8de2581e6421f7571b4517cddffe427e091365cf1a8

194.59.31.34:666

# Reference: https://elfdigest.com/brief/be29f8805c419c60b82e61239a276c882634deb7d9e0e5dca4153ee4cc46121d

51.68.165.13:1111

# Reference: https://elfdigest.com/brief/ab3cca37cf5da9a1e89a13630e73bfbe29c901dde99aa2b3e240f890921c8f58

194.59.31.34:65509

# Reference: https://elfdigest.com/brief/86c70374e90ea8970f14433ac5ed628f217fa3b8e43aa4089ddf26a968c21f99

45.138.157.9:38242
dstat.win
kkk.dstat.win

# Reference: https://elfdigest.com/brief/3805a3eb7ff64a53f5391ee2e3252a79c21c10045f68b9d630cf5172a2531984

45.90.161.73:5558

# Reference: https://elfdigest.com/brief/79dbdefdc74c61a4190f9df749df192290829fd8f13bfa06d1a0f0ab086898fc

45.90.14.172:666

# Reference: https://elfdigest.com/brief/6865ead2ca8b0c6ef05863b81e8d08dad19258e427ef1eda8fcacf248269d0cc

15.204.49.165:23

# Reference: https://elfdigest.com/brief/e04eacb23d3b484d3cf2e7534fb792bafcefb59befa16f73a6587685b6463a50

193.35.18.212:606

# Reference: https://elfdigest.com/brief/f5d84e6beec187cecf663ac96713dc1ee2438227a179d4f7ee111d40f544a8e3

139.177.202.27:23

# Reference: https://elfdigest.com/brief/2506a2c22497300374eccc1e135db8bf3a72d60b9be2261a4f2633da14b53186

45.81.234.229:606

# Reference: https://elfdigest.com/brief/87eeca4494d17c364e0178a584d237ad52e0d9788b621fead565a92cd6a678bf

139.162.221.59:23

# Reference: https://elfdigest.com/brief/8c65aa2ad5e46c0dd63ebbb6cd04a3dac2651a1bfa0f16ee80d444b4db789dc9

185.17.0.167:42516

# Reference: https://elfdigest.com/brief/c7496539ac0ab4b92344231106960b0cf21a7b80d2b80ab4adb99732b2508826

37.44.238.169:7100

# Reference: https://elfdigest.com/brief/93186fffde6fd904f67dec7f1a1b72993f93862a35f0fe452bb911be874836f2

http://95.214.26.108
95.214.26.108:666

# Reference: https://elfdigest.com/brief/8a453ef89aa5f168a7ee9883d20d7cf97abcca66eddb3b8eab64fd0ce2cae5c2

209.25.141.223:18065

# Reference: https://elfdigest.com/brief/6331e1c5393ef11ff4e056edd90f98417a1f169d3b7f2efa9e1f27e2acbe17fd

http://45.88.90.152
45.88.90.152:6969

# Reference: https://twitter.com/petrovic082/status/1681543886743695364
# Reference: https://www.virustotal.com/gui/file/c8542b04ea9e91ea501b95a913c778ea49e5c77a4a5a51a4bccb7f40a994d977/detection
# Reference: https://www.virustotal.com/gui/file/3862e59c7f62daf91010ae17c9729abd936d414b24b384541c055b5918682930/detection

http://2.59.255.213
2.59.255.213:1312

# Reference: https://www.virustotal.com/gui/file/fab034d705b3ad7a10101858daf5da93a88f8bfd509dee9b8072678b27290ed3/detection
# Reference: https://www.virustotal.com/gui/file/d8fbf6d68993045b4840729c788665ab10c50c42b27246a290031664f3b956eb/detection
# Reference: https://www.virustotal.com/gui/file/39891a1c13e4e6ec9de410201f697d23c05e83a29ec0010c6c62c6829386e6a6/detection
# Reference: https://www.virustotal.com/gui/file/301099095c1b91ad215c10854d6389fb4d96d3dff21849e15e8f9791b85c7137/detection
# Reference: https://www.virustotal.com/gui/file/0c51e8d01373ed2935ab4978a9234ae1f118699c4399ee784d161186e2e5f1d7/detection
# Reference: https://www.virustotal.com/gui/file/02f84bcbfa8085f78c61d9c0272c4c881f34242c442dea382fe2d2cc6f0df33d/detection

185.10.68.127:5690

# Reference: https://www.virustotal.com/gui/file/222208d65b041273daf3cf62949e772dab8edac8d0599a798f2c1c0a4a6c989c/detection

beautypluspartner.ml

# Reference: https://twitter.com/SecureSh3ll/status/1691530482993815552
# Reference: https://www.virustotal.com/gui/file/b8ab6f63e813823e65313507933400016179c288ed2ca85f255e2d0a37879726/detection
# Reference: https://www.virustotal.com/gui/file/84249a68c5ab76c207a222c481acb49577495b31feb142880bf62a3e2a07fd5f/detection
# Reference: https://www.virustotal.com/gui/file/26329d12916873d50b0a03a51b9146cb5b2bfc9cdeec8d5b51e3533ff956cac2/detection

http://185.225.75.206
185.225.75.206:58000

# Reference: https://www.virustotal.com/gui/file/51ad00f88bbbef8491cbc209c1739eda406750630939e5c38d4a9ec6b9032c8a/detection

http://79.137.202.177
/git.32
/git.64
/git.arc
/git.arcle-hs38
/git.arm
/git.arm4
/git.arm4l
/git.arm4t
/git.arm4tl
/git.arm4tll
/git.arm5
/git.arm5l
/git.arm5n
/git.arm6
/git.arm64
/git.arm6l
/git.arm7
/git.arm7l
/git.arm8
/git.armv4
/git.armv4l
/git.armv5l
/git.armv6
/git.armv61
/git.armv6l
/git.armv7l
/git.exploit
/git.i4
/git.i486
/git.i586
/git.i6
/git.i686
/git.kill
/git.m68
/git.m68k
/git.mips
/git.mips64
/git.mipseb
/git.mipsel
/git.mpsl
/git.pcc
/git.powerpc
/git.powerpc-440fp
/git.powerppc
/git.ppc
/git.pp-c
/git.ppc2
/git.ppc440
/git.ppc440fp
/git.root
/git.root32
/git.sh
/git.sh4
/git.sparc
/git.spc
/git.ssh4
/git.x32
/git.x32_64
/git.x64
/git.x86
/git.x86_32
/git.x86_64

# Reference: https://www.virustotal.com/gui/file/0a04a82e6ccef94b1303a5834a33ea1753dab0ffa104bf32315b779a540a8c4c/detection

23.95.128.195:777

# Reference: https://www.virustotal.com/gui/file/2625411a7e863f6bff5b1cb2fcb22be00bb46127374dde11499f781f8bb74922/detection
# Reference: https://www.virustotal.com/gui/file/3e54946815e3c108234c399631f36311f6b8b12d247984f96628f560a4f57046/detection

23.95.128.195:1920

# Reference: https://twitter.com/r3dbU7z/status/1704222237572649048
# Reference: https://www.virustotal.com/gui/file/ff1fc1111592f0d136521647797a6ed7379f203f383f9a0bde97f72179541ea2/detection

http://47.87.139.127
47.87.139.127:6969
/arcle-hs38.bruh
/arm.bruh
/arm4.bruh
/arm4l.bruh
/arm4t.bruh
/arm4tl.bruh
/arm4tll.bruh
/arm5.bruh
/arm5l.bruh
/arm5n.bruh
/arm6.bruh
/arm64.bruh
/arm6l.bruh
/arm7.bruh
/arm7l.bruh
/arm8.bruh
/armv4.bruh
/armv4l.bruh
/armv5l.bruh
/armv6.bruh
/armv61.bruh
/armv6l.bruh
/armv7l.bruh
/dbg.bruh
/exploit.bruh
/i4.bruh
/i486.bruh
/i586.bruh
/i6.bruh
/i686.bruh
/kill.bruh
/m68.bruh
/m68k.bruh
/mips.bruh
/mips64.bruh
/mipseb.bruh
/mipsel.bruh
/mpsl.bruh
/pcc.bruh
/powerpc.bruh
/powerpc-440fp.bruh
/powerppc.bruh
/ppc.bruh
/pp-c.bruh
/ppc2.bruh
/ppc440.bruh
/ppc440fp.bruh
/root.bruh
/root32.bruh
/sh.bruh
/sh4.bruh
/sparc.bruh
/spc.bruh
/ssh4.bruh
/x32.bruh
/x32_64.bruh
/x64.bruh
/x86.bruh
/x86_32.bruh
/x86_64.bruh

# Reference: https://www.virustotal.com/gui/file/aada9ee10a7966b489983b2c2dd756aa833b24c6a466157aca215f47b8a3a6a8/detection

http://94.177.217.207

# Reference: https://www.virustotal.com/gui/file/c5983a875a6c0c7afab0fcf080b9ac48bb5e8fe5679961d4af302fd5178ae0e2/detection
# Reference: https://www.virustotal.com/gui/file/db4fb5a27a5346b6f341c8a804fb77f44c50a2d0dc5e99065cbc02b3a6c6cdd8/detection
# Reference: https://www.virustotal.com/gui/file/e41e3fbe2ada385f978109f23e3cfc66e25d49f3a3ef5ac65f1ec81c1c4b44e2/detection

94.177.217.207:420

# Reference: https://threatfox.abuse.ch/ioc/1166019/

45.66.230.89:19283

# Reference: https://threatfox.abuse.ch/ioc/1167771/

75.119.154.167:420

# Reference: https://www.virustotal.com/gui/file/5b3be00881b01eb8b9bdc25c97782c109c11473bb28fa18797f7bd0f5b177c4a/detection

http://104.248.235.86

# Reference: https://www.virustotal.com/gui/file/549a8210c042b4b2bc967539ffbf254dcdb94155cdcc138ee20246e2112bb0ea/detection

104.248.235.86:666

# Reference: https://www.virustotal.com/gui/file/65220973dd85f8de2d228d170810a6b6916a7b91f06712a42bdc78b7283b6925/detection

http://35.231.224.76
35.231.224.76:456

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/

45.12.253.38:19283
5.181.80.86:666

# Reference: https://threatfox.abuse.ch/ioc/1189823/

95.214.25.85:655

# Reference: https://threatfox.abuse.ch/ioc/1191603/

23.239.26.165:69

# Reference: https://github.com/Gi7w0rm/MalwareConfigLists/blob/main/gafgyt/gafgyt_c2s_2020_to_2023.txt

101.99.91.77:812
103.228.74.173:4258
103.29.2.134:12345
103.42.31.11:23
104.168.24.242:666
104.244.73.93:606
107.174.25.148:4258
108.174.195.105:42516
108.61.156.19:23
137.74.9.244:606
139.59.156.65:23
144.202.39.248:23
146.19.191.106:666
147.182.237.145:23
149.100.154.55:839
157.230.247.140:168
162.240.100.114:12345
162.240.100.4:23
162.240.105.54:23
173.212.203.99:839
178.218.146.89:12345
178.218.146.89:839
179.43.162.124:7342
185.144.156.81:4258
185.165.31.69:812
185.196.8.154:8331
185.225.74.241:23
185.254.37.229:666
193.42.33.136:666
194.15.36.150:42516
194.87.197.237:23
2.57.122.129:8889
205.147.101.170:4258
37.221.92.130:8228
37.44.238.99:9998
41.216.182.132:23
41.216.182.214:4258
45.128.232.115:606
45.128.232.76:4258
45.13.119.116:6149
45.66.230.173:23
45.66.230.200:6969
45.66.230.25:666
45.95.147.204:5555
45.95.169.190:130
47.87.189.154:23
5.180.183.1:120
5.181.80.134:888
5.181.80.141:158
5.181.80.141:351
5.181.80.188:1111
62.192.173.7:65481
63.250.59.100:839
68.183.122.246:666
79.110.48.116:666
79.110.48.251:2782
79.110.62.125:839
81.161.229.147:4258
84.54.51.87:6969
89.190.156.159:671
91.208.206.98:23
91.212.121.196:6149
91.234.99.218:71
91.92.242.92:650
93.123.118.215:2782
93.123.85.14:23
94.156.102.166:2782
94.156.161.21:4261
94.156.67.137:7854

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/ (# 2023-12-04)

140.82.33.83:23
152.104.161.36:23
159.203.71.125:23
172.233.214.141:23
185.196.9.51:23
185.196.9.57:23
188.166.67.116:4258
203.148.17.67:23
209.222.18.222:23
45.90.12.75:23
45.95.146.38:671
66.175.213.12:23
69.197.142.158:23
73.170.133.26:23
84.54.51.156:65281
91.92.240.152:23
93.123.85.35:1889

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/ (# 2023-12-17)

103.14.48.18:23
103.78.0.111:444
146.190.178.31:606
213.232.235.84:23
45.90.217.165:23
47.7.145.133:23
84.54.51.74:19285
93.123.85.116:23456
93.123.85.5:6969
93.123.85.6:4258
94.142.139.228:23

# Reference: https://twitter.com/tosscoinwitcher/status/1737574842441080990
# Reference: https://tria.ge/231220-y9mxeseccn/behavioral1
# Reference: https://tria.ge/231220-zgnhxsghf9/behavioral1

http://146.19.191.205
146.19.191.205:666

# Reference: https://twitter.com/sicehice/status/1739779125689364800
# Reference: https://www.virustotal.com/gui/file/f820ed02edcd36fb382516c6404c8ce10678da84212764c3e37104d2a568384b/detection
# Reference: https://www.virustotal.com/gui/file/93d1f26d6befc0bfc6228b64c0f2ce747ccb317d8e001b2bbd36c0427e572292/detection
# Reference: https://www.virustotal.com/gui/file/933498b6ac61a1d15884e3cb88acf34a64610af851e9f18b3c5044c173571028/detection
# Reference: https://www.virustotal.com/gui/file/86478eec6f6f525dd1157c6f8449d074567c7eee31a53d389475c3ede748c4df/detection
# Reference: https://www.virustotal.com/gui/file/5826860a114df6eb650c3f082e096142186edc8e670682f23b7fc2328dfc8c7f/detection
# Reference: https://www.virustotal.com/gui/file/3b9697c28872d8b78feec778f1e78123504e68aa744f8665e455e7ed83d7c719/detection

http://172.111.10.188
172.111.10.188:4258

# Reference: https://twitter.com/sicehice/status/1731078656473072004
# Reference: https://www.virustotal.com/gui/file/e1307460e95e49b56d796a2c09c6aa51cdea761d9b3a917c52c69a1d98370dfc/detection
# Reference: https://www.virustotal.com/gui/file/884852f7217d62b1cf8e1aa09738526d6f7384371c87a5a97696b9b97bdbed06/detection
# Reference: https://www.virustotal.com/gui/file/6205648212c92d19549a64f1b508e223edf2b50953745ab48e76d3cf38401f2e/detection
# Reference: https://www.virustotal.com/gui/file/25c521aba0faf6391900b6319fad7d5d28d24cb42298a07b8281f719c4f907c6/detection

http://84.54.51.26
84.54.51.26:1111
84.54.51.26:56744

# Reference: https://twitter.com/SecureSh3ll/status/1740152055896097183
# Reference: https://www.virustotal.com/gui/file/d5e9a0c54d9e5772d6ac394abbed286598d176fb878f62e8d5f1a963e5597cc7/detection

http://93.123.85.111
muiepayr.monster

# Reference: https://twitter.com/SecureSh3ll/status/1740147578870915176
# Reference: https://www.virustotal.com/gui/file/7f6abb58bad1ef5860c7e64466ec7c8b0330950fe1e5a5249bcf0c14d888e969/detection

http://193.222.96.26

# Reference: https://twitter.com/SecureSh3ll/status/1740147582020837846
# Reference: https://www.virustotal.com/gui/file/cbf95c23234db26cccbb3ae415ca05e70e87effbbf28e0ee893ff7c6356d0461/detection

http://45.95.146.105
host0.solisbet1.com

# Reference: https://twitter.com/redrabytes/status/1740882987011711363
# Reference: https://twitter.com/redrabytes/status/1740885073065615837
# Reference: https://www.virustotal.com/gui/ip-address/89.190.156.5/relations
# Reference: https://www.virustotal.com/gui/file/50211696477d9f84c4700b551322c71096d6cffa681e377527115323248cb1ea/detection
# Reference: https://www.virustotal.com/gui/file/4bee7a31766503ab7283bcd614f33258955eded7cd7f55208b15f3bba263c615/detection
# Reference: https://www.virustotal.com/gui/file/3270a62e879395dde97c7cc66051e4609e77f8999452a98413067f959bf8bb08/detection
# Reference: https://www.virustotal.com/gui/file/f35aa1cf716b81a39b75fc32d0ca57a69fcf724db2fdb102a31c7c82944ebce3/detection
# Reference: https://www.virustotal.com/gui/file/f2d468f41dcc9f51ae2bc0da5eec8544adbaeeb54fc410775407f374a5851f60/detection
# Reference: https://www.virustotal.com/gui/file/e4b7a32a801df68fc9a843bc17e3d6592ac579499decdb2ff38684f6b3acd664/detection
# Reference: https://www.virustotal.com/gui/file/e2454f648386f2d8dcd3fbb9fea9444e84db13b3f94b47ba6cd3715b3988c723/detection
# Reference: https://www.virustotal.com/gui/file/dd1a1b3434518628ad16841df928e13676f81a77481824dfc2c9ea232016ac30/detection
# Reference: https://www.virustotal.com/gui/file/d8166b83ac0732304f0301e11f08f6dbd18a3bfecdd35b2be2323b3ea856b3b9/detection
# Reference: https://www.virustotal.com/gui/file/d4fbed5dff821107901b5a530059dbbe756e3a416897b019a9927fbeff62a2a6/detection
# Reference: https://www.virustotal.com/gui/file/ca4b81b80064b1a6b8a831de4f3ee68fd3176d09f58e6e58cf00ed4092b21b75/detection
# Reference: https://www.virustotal.com/gui/file/a986e51f27dd4f9ae0fec70a801b0e216002baaedbcc54dc7349c44fc54ebada/detection
# Reference: https://www.virustotal.com/gui/file/50886d171ad10085b92188b20f5bbef78ae9cf425f7218b3c34b6290a25ede22/detection

http://45.95.147.173
5.181.80.111:24002
89.190.156.140:1663
89.190.156.140:8693
89.190.156.141:11227
89.190.156.141:20918
89.190.156.144:7893
89.190.156.5:2530
akamaicute.online
dsfasdfasdfasd.online
hailbot.geek
hailnet.online
jiggaboo.oss
oosdfewugsd.online
rrsadtfusdf.online
sdfsdfhhps.online
sfdopospdofpsdo.dyn
yoursocuteong.dyn
cnc.hailnet.online

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/ (# 2024-01-03)

184.105.191.94:6969
67.131.57.133:23

# Reference: https://www.virustotal.com/gui/file/0d34fd85e7b95f28ba7dcaa775a2d97004e3b60951c825ac1253a8fa14007d43/detection
# Reference: https://www.virustotal.com/gui/file/7f49a1cfcfff2ea9cc03388bdb6c4ddc9c44880badad27e678d0338c6bb7d2b6/detection

45.95.168.229:23

# Reference: https://www.virustotal.com/gui/file/8530accc24f943e1c939304a95c7d96971e9873ff20d53400b9ee338074c92eb/detection

195.144.21.137:6667

# Reference: https://twitter.com/redrabytes/status/1741595100202013019
# Reference: https://twitter.com/redrabytes/status/1742901857842811263
# Reference: https://twitter.com/redrabytes/status/1744514736534757401

http://213.255.246.81
http://93.123.85.79
93.123.85.79:1337
93.123.85.79:1338
93.123.85.79:1339
93.123.85.79:4258

# Reference: https://twitter.com/sicehice/status/1745665405538951654
# Reference: https://www.virustotal.com/gui/ip-address/104.168.5.4/relations

http://104.168.5.4
tcpack.lol

# Reference: https://www.virustotal.com/gui/file/80d6a3e20e0a3e3ea585b9eabd0e8e429c64344ea8891265a3abca16dafa1e47/detection
# Reference: https://www.virustotal.com/gui/file/7e0e905caf0bf27092f5be82ff35faaf8a8cafc0a65e6a0f379a1a91c3ca1e89/detection

89.190.156.4:2530
jamiedsummers.indy
jasonistein.gopher
johndrichardson.parody
kimberlyngomez.geek
robertmlewis.dyn
theresavcampbell.libre
wendykortiz.gopher

# Reference: https://twitter.com/banthisguy9349/status/1746918491863584828
# Reference: https://www.virustotal.com/gui/ip-address/5.181.80.10/relations

chinklabs.dyn

# Reference: https://www.virustotal.com/gui/file/1c6dce23206f5e612df66d12af80f5b6b7079d3d1c6c308de2059c023d48e5b3/detection

91.92.254.204:1256
91.92.254.204:1655

# Reference: https://www.virustotal.com/gui/file/1c5c443dbca2e0a652d8769f142de80c64bb3634aa4da148d3b85064ce060b96/detection
# Reference: https://www.virustotal.com/gui/file/37e7c91dc6e90809f9f359634519cda195e2178437bc5482f7abb3123220e467/detection
# Reference: https://www.virustotal.com/gui/file/4f893908a59c32e1b5ec80c2f74a433d6f30c2ac8ea005bf4aec835bcd1e1369/detection

159.89.114.96:6667

# Reference: https://www.virustotal.com/gui/file/3c76c3c1fc41e5842952d17fb46fa9aeb45e7e95eec6a5603cd90c55b89e4e5e/detection

139.59.12.52:6667

# Reference: https://www.virustotal.com/gui/file/1bb4996ced51e712e268a4c02bffae58cbee50732c9cab649390aa7346beedd6/detection

93.123.85.14:839

# Reference: https://www.virustotal.com/gui/file/1b38040d448b331c2f40824121e78e2490e0101d16154909a7a9a11c8d1b2a71/detection

93.123.85.14:6667

# Reference: https://www.virustotal.com/gui/file/172d5fe3a70109923f7e12d9245e9506031d89af0a151582393bd110c253a7c7/detection

93.123.85.14:812

# Reference: https://www.virustotal.com/gui/ip-address/93.123.85.14/relations

greek-stresser.duckdns.org

# Reference: https://twitter.com/banthisguy9349/status/1757023759985217880

http://93.123.85.101
http://93.123.85.126
http://93.123.85.30
/tokyeo.32
/tokyeo.64
/tokyeo.arc
/tokyeo.arcle-hs38
/tokyeo.arm
/tokyeo.arm4
/tokyeo.arm4l
/tokyeo.arm4t
/tokyeo.arm4tl
/tokyeo.arm4tll
/tokyeo.arm5
/tokyeo.arm5l
/tokyeo.arm5n
/tokyeo.arm6
/tokyeo.arm64
/tokyeo.arm6l
/tokyeo.arm7
/tokyeo.arm7l
/tokyeo.arm8
/tokyeo.armv4
/tokyeo.armv4l
/tokyeo.armv5l
/tokyeo.armv6
/tokyeo.armv61
/tokyeo.armv6l
/tokyeo.armv7l
/tokyeo.dbg
/tokyeo.exploit
/tokyeo.i4
/tokyeo.i486
/tokyeo.i586
/tokyeo.i6
/tokyeo.i686
/tokyeo.kill
/tokyeo.m68
/tokyeo.m68k
/tokyeo.mips
/tokyeo.mips64
/tokyeo.mipseb
/tokyeo.mipsel
/tokyeo.mpsl
/tokyeo.pcc
/tokyeo.powerpc
/tokyeo.powerpc-440fp
/tokyeo.powerppc
/tokyeo.pp-c
/tokyeo.ppc
/tokyeo.ppc2
/tokyeo.ppc440
/tokyeo.ppc440fp
/tokyeo.root
/tokyeo.root32
/tokyeo.sh
/tokyeo.sh4
/tokyeo.sparc
/tokyeo.spc
/tokyeo.ssh4
/tokyeo.x32
/tokyeo.x32_64
/tokyeo.x64
/tokyeo.x86
/tokyeo.x86_32
/tokyeo.x86_64

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/ (# 2024-02-12)

15.204.245.61:23
37.60.227.156:7
45.128.232.240:23
45.157.11.10:4258
45.95.169.103:2545
61.247.164.51:23
74.70.4.221:23

# Reference: https://urlhaus.abuse.ch/host/194.110.247.222/
# Reference: https://www.virustotal.com/gui/file/5c2fcc6722a74c374d8d77e7a2d05afb78d85c6ce6cc10f8f14233a7aabef29b/detection

http://194.110.247.222
194.110.247.222:59666
fucktheccp.top
/shinde32
/shinde64
/shindearc
/shindearcle-hs38
/shindearm
/shindearm4
/shindearm4l
/shindearm4t
/shindearm4tl
/shindearm4tll
/shindearm5
/shindearm5l
/shindearm5n
/shindearm6
/shindearm64
/shindearm6l
/shindearm7
/shindearm7l
/shindearm8
/shindearmv4
/shindearmv4l
/shindearmv5l
/shindearmv6
/shindearmv61
/shindearmv6l
/shindearmv7l
/shindedbg
/shindeexploit
/shindei4
/shindei486
/shindei586
/shindei6
/shindei686
/shindekill
/shindem68
/shindem68k
/shindemips
/shindemips64
/shindemipseb
/shindemipsel
/shindempsl
/shindepcc
/shindepowerpc
/shindepowerpc-440fp
/shindepowerppc
/shindeppc
/shindepp-c
/shindeppc2
/shindeppc440
/shindeppc440fp
/shinderoot
/shinderoot32
/shindesh
/shindesh4
/shindesparc
/shindespc
/shindessh4
/shindex32
/shindex32_64
/shindex64
/shindex86
/shindex86_32
/shindex86_64

# Reference: https://www.virustotal.com/gui/file/24346aa4d375c18fcb6b13066dbe38540d35a65a78e869c2a92d0779675d803c/detection

badworldgama.top
fluu.badworldgama.top
/wkshinde32
/wkshinde64
/wkshindearc
/wkshindearcle-hs38
/wkshindearm
/wkshindearm4
/wkshindearm4l
/wkshindearm4t
/wkshindearm4tl
/wkshindearm4tll
/wkshindearm5
/wkshindearm5l
/wkshindearm5n
/wkshindearm6
/wkshindearm64
/wkshindearm6l
/wkshindearm7
/wkshindearm7l
/wkshindearm8
/wkshindearmv4
/wkshindearmv4l
/wkshindearmv5l
/wkshindearmv6
/wkshindearmv61
/wkshindearmv6l
/wkshindearmv7l
/wkshindedbg
/wkshindeexploit
/wkshindei4
/wkshindei486
/wkshindei586
/wkshindei6
/wkshindei686
/wkshindekill
/wkshindem68
/wkshindem68k
/wkshindemips
/wkshindemips64
/wkshindemipseb
/wkshindemipsel
/wkshindempsl
/wkshindepcc
/wkshindepowerpc
/wkshindepowerpc-440fp
/wkshindepowerppc
/wkshindeppc
/wkshindepp-c
/wkshindeppc2
/wkshindeppc440
/wkshindeppc440fp
/wkshinderoot
/wkshinderoot32
/wkshindesh
/wkshindesh4
/wkshindesparc
/wkshindespc
/wkshindessh4
/wkshindex32
/wkshindex32_64
/wkshindex64
/wkshindex86
/wkshindex86_32
/wkshindex86_64

# Reference: https://www.virustotal.com/gui/file/f5b97dfe4c391bb02797938d876c4c0ce94d3df705e1d98879e5ef659dc0a3d2/detection

188.127.235.191:59666

# Reference: https://www.virustotal.com/gui/file/975da76824c8994f795da2e9643f30e6b0e0ba1d630bec0eb8b29a872760baf0/detection

157.97.105.189:59666
badworldgama.xyz
fluu.badworldgama.xyz

# Reference: https://urlhaus.abuse.ch/host/93.123.85.141
# Reference: https://www.virustotal.com/gui/file/b93e12c3b04ce268766dcfb0ec916a7b28a3608773f378d07ab0184e7d6e2afe/detection

http://71.27.48.12:80
http://93.123.85.141
93.123.85.141:666

# Reference: https://pastebin.com/yYXdbBHc

http://91.92.241.68

# Reference: https://urlhaus.abuse.ch/host/103.179.172.139
# Reference: https://www.virustotal.com/gui/file/f6d13972720bc282e720f8e2b4f3ca68aa653f952b1a533be231a7d5a2026871/detection

http://103.179.172.139
103.179.172.139:19990

# Reference: https://urlhaus.abuse.ch/host/45.142.182.90
# Reference: https://www.virustotal.com/gui/file/d536f365c473b53e8136816794bbb2cebf5cea9c27264d850e80d1883881eff3/detection
# Reference: https://www.virustotal.com/gui/file/d1ebc382da39df68ddf3e92c9c31b5ed6b073e809c1de35194bd30d74198dd85/detection

http://45.142.182.90
45.142.182.90:5555
45.142.182.90:9931

# Reference: https://urlhaus.abuse.ch/host/45.142.182.95
# Reference: https://www.virustotal.com/gui/file/bcc376e29f8fb540c4cc2ec9e63c933259023d7297ac57282699e70d07f317a0/detection

45.142.182.95:43957

# Reference: https://pastebin.com/yYXdbBHc
# Reference: https://www.virustotal.com/gui/ip-address/213.142.159.239/detection

http://213.142.159.239

# Reference: https://twitter.com/sicehice/status/1766268444842795296
# Reference: https://www.virustotal.com/gui/file/3cecf71156bfe44850604fe84ca6a903df20252bfd6e8b6d4638c56031f8964f/detection

http://74.119.194.123
http://86.104.194.182

# Reference: https://pastebin.com/3m1ESpHK

91.29.246.112:6969

# Reference: https://twitter.com/sicehice/status/1766966960527380669
# Reference: https://www.virustotal.com/gui/file/0c4e29d75393fb84fb39e49617df4a24347cb1a5d4f55ec1a929f34040c3b876/detection

http://91.92.246.164
justarun.000webhostapp.com

# Reference: https://www.virustotal.com/gui/file/627e41e82f3e0d0f5ce00645d03fcd34077b7d7d59709dcc3785edb0bea5024b/detection
# Reference: https://www.virustotal.com/gui/file/6f85047409576cd4ad4c3d3660ce111e6db40caa5c97e0b921ae9877a388141f/detection
# Reference: https://www.virustotal.com/gui/file/b0abe38ff6bb812069ce8d6975f80846ea6bb006fad348d8505edf1e4b16054b/detection

64.32.6.209:23

# Reference: https://www.virustotal.com/gui/file/ae67caab5f7c8b4d99cd01b47873476ec95e369c950cad7e9f953049999fb8c3/detection
# Reference: https://www.virustotal.com/gui/file/ce3f9862f59ae9049d411c30cb4d90e3076ed56745f002f31cea427141288c1d/detection

64.32.6.209:812

# Reference: https://twitter.com/banthisguy9349/status/1770500743633535098
# Reference: https://pastebin.com/s5wuqH8c

http://103.14.225.191
http://103.153.69.117
http://103.153.69.99
http://107.172.214.19
http://128.199.74.81
http://138.68.99.63
http://141.98.10.46
http://141.98.168.102
http://141.98.168.103
http://141.98.168.105
http://141.98.168.109
http://141.98.7.233
http://154.9.246.101
http://154.9.25.250
http://159.89.201.37
http://161.35.236.24
http://164.92.75.19
http://176.123.1.226
http://185.191.127.212
http://188.132.150.203
http://188.166.198.104
http://193.233.252.242
http://193.35.18.127
http://193.35.18.66
http://194.169.175.20
http://194.169.175.43
http://194.36.190.78
http://209.141.55.67
http://209.141.60.174
http://217.18.63.132
http://31.220.3.125
http://34.16.130.148
http://38.6.175.57
http://45.125.66.146
http://45.128.232.245
http://45.128.232.250
http://45.128.232.45
http://45.128.232.71
http://45.131.108.174
http://45.144.165.227
http://45.61.184.159
http://45.90.12.135
http://45.90.97.58
http://45.95.146.125
http://45.95.146.93
http://45.95.147.230
http://5.181.80.138
http://5.253.246.170
http://54.38.175.224
http://66.187.7.55
http://74.50.66.176
http://75.119.134.80
http://77.105.163.9
http://78.40.116.156
http://78.40.117.218
http://79.124.40.47
http://80.92.206.77
http://84.54.51.124
http://84.54.51.159
http://84.54.51.6
http://85.204.116.154
http://85.204.116.169
http://85.239.34.89
http://91.92.240.119
http://91.92.240.31
http://91.92.241.34
http://91.92.242.112
http://91.92.247.11
http://91.92.251.252
http://91.92.252.132
http://91.92.254.120
http://91.92.254.60
http://93.123.39.121
http://93.123.85.127
http://93.123.85.94
http://93.123.85.97
http://94.103.188.202
http://94.156.71.204
http://94.156.71.231
http://95.164.1.96
103.174.73.85:1500
103.245.236.120:2023
14.225.208.190:42597
141.98.10.128:59666
141.98.7.19:16837
141.98.7.62:1337
147.78.103.94:59666
176.97.210.31:23
185.117.3.184:3569
185.209.160.19:54438
198.12.88.130:1312
198.46.203.232:8723
205.185.126.140:24124
212.113.116.216:23
23.94.104.16:56789
45.61.54.105:23
89.185.84.115:23
91.92.253.70:17691
94.156.69.6:19522

# Reference: https://www.virustotal.com/gui/file/51c91249d58302b1b2d23f355d23eb2a425bcd953969bac0258b554cde1a865a/detection

45.88.3.145:8241

# Reference: https://www.virustotal.com/gui/file/33824760b2a1f204d73c20439254c745dadbaae306e05da08057885d47e61d16/detection

http://45.88.3.145

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/ (# 2024-03-24)

103.153.69.99:4258
103.173.255.143:839
103.195.236.98:23
104.167.221.222:555
104.168.33.31:1111
144.91.93.153:4444
146.71.78.14:151
147.45.77.28:4258
159.253.120.118:1111
185.196.10.134:6117
185.196.8.191:1290
185.226.106.107:666
185.91.127.233:23
194.169.175.20:35342
194.169.175.43:35342
195.62.32.227:1337
195.62.32.227:666
217.18.63.132:12345
217.18.63.132:707
41.216.182.215:666
45.128.232.250:6149
45.131.108.174:23
45.140.188.133:666
45.86.86.217:4444
45.95.169.102:4258
5.181.80.195:4258
78.40.117.218:23
79.124.40.47:4258
85.204.116.154:839
85.204.116.169:666
86.104.194.182:666
91.92.241.71:666
91.92.243.188:839
91.92.244.104:655
93.123.39.166:671
93.123.85.197:606
93.123.85.73:4258
94.103.188.173:666
94.103.188.202:666
94.156.8.116:4258
95.164.45.31:606
lkasjdfhsdag.servebeer.com
rebirthltd.com

# Reference: https://urlhaus.abuse.ch/host/195.62.32.227/

http://195.62.32.227

# Reference: https://urlhaus.abuse.ch/host/104.168.33.31

http://104.168.33.31

# Reference: https://twitter.com/banthisguy9349/status/1772610732846166279

195.62.32.227:5000
93.123.85.60:5000

# Reference: https://twitter.com/sicehice/status/1772768187534168188
# Reference: https://www.virustotal.com/gui/file/d3b947b3458ac270ce991b8a1a8db662ef39f94eeff7475f7e55e2d354753a20/detection
# Reference: https://www.virustotal.com/gui/file/c10ca2ef29ec4a4dccb800d845ddf5b29eac943113a79f1a0ab8d123859881de/detection
# Reference: https://www.virustotal.com/gui/file/5ece8e67c9ddbee53330989f5bc4e0b8c828b3f4547807d4fde5b16743df2f5a/detection

http://91.92.241.246
91.92.241.246:3778
91.92.241.246:60001

# Reference: https://twitter.com/banthisguy9349/status/1772923219407708236
# Reference: https://urlhaus.abuse.ch/host/144.126.192.224/
# Reference: https://www.virustotal.com/gui/file/02bdc206fa2dc29c8ea34e23e98a65dd1518dee7016ff3dd20d10cbd68647ec8/detection

http://144.126.192.224
144.126.192.224:666
144.126.192.224:9999

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/ (# 2024-03-31)

103.35.190.189:666
103.35.190.238:666
45.131.111.159:23
45.145.42.90:6969
91.92.254.140:562
92.249.48.114:1337
93.123.85.8:666

# Reference: https://twitter.com/sicehice/status/1776287269407608996
# Reference: https://www.virustotal.com/gui/file/f55bf6ecc5093842b0c10e15a033b3dfa817161e9c6945fb9de39ed89d29531a/detection

http://45.13.119.116
45.13.119.116:6149
/onZOJCOwJJD625J/

# Reference: https://twitter.com/banthisguy9349/status/1778384952268120266
# Reference: https://twitter.com/banthisguy9349/status/1778385026956099730

139.177.195.93:8021
143.42.11.97:8021
170.187.193.115:8021
172.105.98.97:8021
176.97.210.229:8021
193.149.176.207:8021
2.58.113.242:8021
38.6.224.248:8021
45.61.136.71:8021
45.95.147.171:8021
79.124.40.48:8021
89.190.156.211:8021
91.92.247.79:8021
92.119.159.25:8021

# Reference: https://urlhaus.abuse.ch/host/38.6.224.248

http://38.6.224.248

# Reference: https://urlhaus.abuse.ch/host/141.98.10.46

141.98.10.46:88

# Reference: https://threatfox.abuse.ch/browse/malware/elf.bashlite/ (# 2024-04-11)

104.234.204.151:1
141.11.228.23:65483
141.98.7.37:65480
141.98.7.56:4258
159.100.30.207:666
166.88.61.185:10020
166.88.61.185:606
176.123.1.215:666
185.196.8.31:76
192.53.123.224:666
2.58.113.208:23
2.58.95.131:65480
205.185.121.20:5386
38.89.76.175:61915
45.13.227.109:23
45.148.244.74:839
45.178.6.2:4444
45.87.153.190:1111
85.239.34.72:9981
89.190.156.227:23
89.23.102.165:158
91.92.240.123:999
91.92.251.238:5366
91.92.253.58:23
92.249.48.39:23
93.123.39.73:666
93.123.85.139:7775
93.123.85.166:606
93.123.85.170:666
94.156.8.109:671

# Reference: https://www.virustotal.com/gui/file/f57d2d47686c9004b6da2816842cad966f1e5f58449e3eb1b1377f22b7c8a886/detection

80.66.79.43:55666
80.66.79.43:7965
leboathp.duckdns.org

# Reference: https://twitter.com/redrabytes/status/1779830763728322981

http://167.114.127.89
http://209.141.60.189
167.114.127.89:5214
2.58.95.100:1337
2.58.95.100:999
209.141.60.189:666
89.116.236.8:1337
89.116.236.8:999

# Reference: https://twitter.com/banthisguy9349/status/1779899343345971357
# Reference: https://urlhaus.abuse.ch/host/206.72.193.93

http://206.72.193.93

# Reference: https://twitter.com/banthisguy9349/status/1780610255514120636

143.244.162.41:23
146.190.207.195:23
164.92.166.129:23
51.81.38.137:23
64.227.166.207:23
79.132.128.95:23

# Reference: https://twitter.com/banthisguy9349/status/1780614067834540493
# Reference: https://urlhaus.abuse.ch/host/185.196.8.31

http://85.239.55.70
185.196.8.31:76
85.239.55.70:515

# Reference: https://twitter.com/banthisguy9349/status/1781229155373269239
# Reference: https://www.fortinet.com/blog/threat-research/botnets-continue-exploiting-cve-2023-1389-for-wide-scale-spread

http://5.10.249.153
http://91.92.253.70
5.10.249.153:9999
ngcv.top
fjsnsinfinsf.ngcv.top

# Reference: https://twitter.com/banthisguy9349/status/1781352131573760042

http://203.55.81.4

# Reference: https://twitter.com/redrabytes/status/1781797056392143055

http://2.58.95.131
2.58.95.131:21
2.58.95.131:65337
2.58.95.131:65480

# Reference: https://twitter.com/sicehice/status/1782159096977699036
# Reference: https://www.virustotal.com/gui/file/ee2cbccf0f1039a1f046217ef0bbd78a76f7c2eae310e18c2f02407e6c3ed170/detection
# Reference: https://www.virustotal.com/gui/file/eb751b7fdab661f403eb0799dd5859625ebf8f37ff1ac708787d66d15a7a67b8/detection
# Reference: https://www.virustotal.com/gui/file/1dd0f718e86b351a56d5c531f92ce82cfdff54971e86b88ab37c5480f468123f/detection
# Reference: https://www.virustotal.com/gui/file/0da18284dd0d5fa46075e0ef573ecaf222f7ca776c45dca110fe418380fb5aaa/detection

http://62.72.191.247
62.72.191.247:777
/777ssbb31.arc
/777ssbb31.arm
/777ssbb31.arm4
/777ssbb31.arm4l
/777ssbb31.arm4t
/777ssbb31.arm4tl
/777ssbb31.arm4tll
/777ssbb31.arm5
/777ssbb31.arm5l
/777ssbb31.arm5n
/777ssbb31.arm6
/777ssbb31.arm64
/777ssbb31.arm6l
/777ssbb31.arm7
/777ssbb31.arm7l
/777ssbb31.arm8
/777ssbb31.armv4
/777ssbb31.armv4l
/777ssbb31.armv5l
/777ssbb31.armv6
/777ssbb31.armv61
/777ssbb31.armv6l
/777ssbb31.armv7l
/777ssbb31.dbg
/777ssbb31.exploit
/777ssbb31.i4
/777ssbb31.i486
/777ssbb31.i586
/777ssbb31.i6
/777ssbb31.i686
/777ssbb31.kill
/777ssbb31.m68
/777ssbb31.m68k
/777ssbb31.mips
/777ssbb31.mips64
/777ssbb31.mipseb
/777ssbb31.mipsel
/777ssbb31.mpsl
/777ssbb31.pcc
/777ssbb31.powerpc
/777ssbb31.powerpc-440fp
/777ssbb31.powerppc
/777ssbb31.ppc
/777ssbb31.ppc2
/777ssbb31.ppc440
/777ssbb31.ppc440fp
/777ssbb31.root
/777ssbb31.root32
/777ssbb31.sh
/777ssbb31.sh4
/777ssbb31.sparc
/777ssbb31.spc
/777ssbb31.ssh4
/777ssbb31.x32
/777ssbb31.x64
/777ssbb31.x86
/777ssbb31.x86_32
/777ssbb31.x86_64


# Reference: https://twitter.com/banthisguy9349/status/1782763991581778356
# Reference: https://twitter.com/banthisguy9349/status/1782853781299896563

http://51.81.104.112
135.148.57.151:1337
methbot-proxy.pro
neger.icu
/dashboard/attack.html

# Reference: https://www.virustotal.com/gui/file/04f2b04e179ede5422448fa38ecd25b65d9d717541bbf08ca0592b380cca2269/detection

185.150.26.226:1486

# Reference: https://www.virustotal.com/gui/file/248e29e3dc6e5a19541b617839fa861a66a81dc283b6cadd1589eaccb9cd4e18/detection

185.150.26.226:8325

# Reference: https://www.virustotal.com/gui/file/2ada40d5f7e49c68a6d402744cc9b4cbd7b40cc54897731fbd96cf1497b2bcff/detection

185.150.26.226:7832