# Copyright (c) 2014-2021 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Aliases: muhstik

# Reference: https://www.virustotal.com/#/ip-address/77.87.77.250

/izuku.sh
/izuku.arc
/izuku.arm
/izuku.arm4
/izuku.armv4l
/izuku.arm5
/izuku.arm5n
/izuku.arm6
/izuku.arm7
/izuku.i586
/izuku.i686
/izuku.dbg
/izuku.mips
/izuku.mips64
/izuku.m68k
/izuku.mpsl
/izuku.ppc
/izuku.spc
/izuku.sparc
/izuku.sh4
/izuku.x86
/izuku.x32
/izuku.x64
/izuku.x86_64

# Reference: https://blog.paranoidpenguin.net/2018/08/hakaied-with-love-from-telecom-egypt/

/hakai.arc
/hakai.arm
/hakai.arm4
/hakai.armv4l
/hakai.arm5
/hakai.arm5n
/hakai.arm6
/hakai.arm7
/hakai.dbg
/hakai.i586
/hakai.i686
/hakai.mips
/hakai.mips64
/hakai.mpsl
/hakai.m68k
/hakai.ppc
/hakai.spc
/hakai.sparc
/hakai.sh4
/hakai.x86_64

# Reference: https://researchcenter.paloaltonetworks.com/2018/07/unit42-finds-new-mirai-gafgyt-iotlinux-botnet-campaigns/

/okane.arc
/okane.arm
/okane.arm4
/okane.armv4l
/okane.arm5
/okane.arm5n
/okane.arm6
/okane.arm7
/okane.i486
/okane.i586
/okane.i686
/okane.dbg
/okane.m68k
/okane.mips
/okane.mips64
/okane.mpsl
/okane.ppc
/okane.ppc440fp
/okane.sh4
/okane.spc
/okane.sparc
/okane.x86
/okane.x32
/okane.x64
/okane.x86_64

# Reference: https://www.bleepingcomputer.com/news/security/mirai-iot-malware-uses-aboriginal-linux-to-target-multiple-platforms/

/sora.arc
/sora.arm
/sora.arm4
/sora.armv4l
/sora.arm5
/sora.arm5n
/sora.arm6
/sora.arm7
/sora.dbg
/sora.mips
/sora.mips64
/sora.mpsl
/sora.m68k
/sora.ppc
/sora.sh4
/sora.spc
/sora.sparc
/sora.x86
/sora.x32
/sora.x64
/sora.x86_64

# Reference: https://www.hindawi.com/journals/scn/2018/7178164/lst16/
# Reference: https://otx.alienvault.com/pulse/6053a8f9141fd3dd1337c02a

/mirai.arc
/mirai.arm
/mirai.arm4
/mirai.arm4l
/mirai.arm4t
/mirai.arm4tl
/mirai.arm4tll
/mirai.armv4l
/mirai.arm5
/mirai.arm5l
/mirai.arm5n
/mirai.arm6
/mirai.arm64
/mirai.arm6l
/mirai.arm7
/mirai.arm7l
/mirai.arm8
/mirai.armv4
/mirai.armv4l
/mirai.armv5l
/mirai.armv6
/mirai.armv61
/mirai.armv6l
/mirai.armv7l
/mirai.dbg
/mirai.exploit
/mirai.i4
/mirai.i486
/mirai.i586
/mirai.i6
/mirai.i686
/mirai.kill
/mirai.m68
/mirai.m68k
/mirai.mips
/mirai.mips64
/mirai.mipsel
/mirai.mipsl
/mirai.mpsl
/mirai.nvm
/mirai.nvm2
/mirai.pcc
/mirai.pcc2
/mirai.powerpc
/mirai.powerpc-440fp
/mirai.powerppc
/mirai.ppc
/mirai.ppc2
/mirai.ppc440
/mirai.ppc440fp
/mirai.root
/mirai.root32
/mirai.sh
/mirai.sh4
/mirai.sparc
/mirai.spc
/mirai.ssh4
/mirai.x32
/mirai.x64
/mirai.x86
/mirai.x86_32
/mirai.x86_64

# Reference: https://www.virustotal.com/en/ip-address/209.141.55.13/information/
# Reference: https://twitter.com/i/moments/1046121581393543168

/Extendo.arc
/Extendo.arm
/Extendo.arm4
/Extendo.armv4l
/Extendo.arm5
/Extendo.arm5n
/Extendo.arm6
/Extendo.arm7
/Extendo.dbg
/Extendo.m68k
/Extendo.mips
/Extendo.mips64
/Extendo.mipsl
/Extendo.m68k
/Extendo.ppc
/Extendo.sh4
/Extendo.spc
/Extendo.sparc
/Extendo.x86
/Extendo.x32
/Extendo.x64
/Extendo.x86_64
/8UsA.sh
/zaky.sh

# Reference: https://twitter.com/bad_packets/status/1036415216718733312

/seraph.arc
/seraph.arm
/seraph.arm4
/seraph.armv4l
/seraph.arm5
/seraph.arm5n
/seraph.arm6
/seraph.arm7
/seraph.dbg
/seraph.i586
/seraph.i686
/seraph.m68k
/seraph.mips
/seraph.mips64
/seraph.mpsl
/seraph.ppc
/seraph.sh
/seraph.sh4
/seraph.spc
/seraph.sparc
/seraph.x32
/seraph.x86
/seraph.x64
/seraph.x86_64

# Reference: https://twitter.com/bad_packets/status/1038620066873409536
# Reference: https://twitter.com/SugitaMuchi/status/1083983657684021248

/apep.arc
/apep.arm
/apep.arm4
/apep.armv4l
/apep.arm5
/apep.arm5n
/apep.arm6
/apep.arm7
/apep.dbg
/apep.i586
/apep.i686
/apep.m68k
/apep.mips
/apep.mips64
/apep.mpsl
/apep.ppc
/apep.sh
/apep.sh4
/apep.spc
/apep.sparc
/apep.x86
/apep.x32
/apep.x64
/apep.x86_64
/arc.b
/arm.b
/arm4.b
/armv4l.b
/arm5.b
/arm5n.b
/arm6.b
/arm7.b
/dbg.b
/i586.b
/i686.b
/m68k.b
/mips.b
/mips64.b
/mpsl.b
/ppc.b
/sh4.b
/spc.b
/sparc.b
/x32.b
/x64.b
/x86_64.b

# Reference: https://researchcenter.paloaltonetworks.com/2018/09/unit42-multi-exploit-iotlinux-botnets-mirai-gafgyt-target-apache-struts-sonicwall/

l.ocalhost.host
/sonicwall

# Reference: https://twitter.com/bad_packets/status/1043273974560448514

/ultron.armv4l
/ultron.armv5l
/ultron.armv6l
/ultron.i586
/ultron.i686
/ultron.m68k
/ultron.mips
/ultron.mipsel
/ultron.mipseln
/ultron.powerpc
/ultron.powerpc440fp
/ultron.sh4
/ultron.sparc
/ultron.x86_64
/ultronfinal.armv4l
/ultronfinal.armv5l
/ultronfinal.armv6l
/ultronfinal.i586
/ultronfinal.i686
/ultronfinal.m68k
/ultronfinal.mips
/ultronfinal.mipsel
/ultronfinal.mipseln
/ultronfinal.powerpc
/ultronfinal.powerpc440fp
/ultronfinal.sh4
/ultronfinal.sparc
/ultronfinal.x86_64
/ultron-syn.sh

# Reference: https://twitter.com/bad_packets/status/1043404764027838464
# Reference: https://twitter.com/_odisseus/status/1151420268893618176

/hoho.arm
/hoho.arm5
/hoho.arm5.1
/hoho.arm6
/hoho.arm7
/hoho.m68k
/hoho.mips
/hoho.mpsl
/hoho.ppc
/hoho.sh4
/hoho.spc
/hoho.x86

# Reference: https://twitter.com/bad_packets/status/1032494091290832896

/.shinka.mips
/.shinka.mpsl

# Reference: https://twitter.com/bad_packets/status/1029608234569453569

/init0
/sals

# Reference: https://twitter.com/Ajouini99/status/1046898647764545536

/Boatnet.arm4
/Boatnet.arm5
/Boatnet.arm6
/Boatnet.arm7
/Boatnet.m68k
/Boatnet.mips
/Boatnet.mpsl
/Boatnet.ppc
/Boatnet.sh4
/Boatnet.spc
/Boatnet.x86
/Boatnet.x86_64

# Generic trail from MT heuristic detection

/sefa.arm
/sefa.arm5
/sefa.arm6
/sefa.arm7
/sefa.i586
/sefa.i686
/sefa.m68k
/sefa.mips
/sefa.mpsl
/sefa.ppc
/sefa.ppc440
/sefa.sh4
/sefa.spc
/sefa.x86

# Reference: https://twitter.com/bad_packets/status/1051616610035806209

/oxy.arm
/oxy.arm5
/oxy.arm6
/oxy.arm7
/oxy.i586
/oxy.i686
/oxy.m68k
/oxy.mips
/oxy.mpsl
/oxy.ppc
/oxy.ppc440
/oxy.sh4
/oxy.spc
/oxy.x86

# Reference: https://twitter.com/ulexec/status/1051959861964169217
# Reference: https://twitter.com/0xrb/status/1160055482846867456

34.67.138.200:1791
/dark.arc
/dark.arm
/dark.arm4
/dark.arm4l
/dark.arm4t
/dark.arm4tl
/dark.arm4tll
/dark.armv4l
/dark.arm5
/dark.arm5n
/dark.arm6
/dark.arm64
/dark.arm7
/dark.dbg
/dark.i4
/dark.i486
/dark.i586
/dark.i686
/dark.kill
/dark.m68k
/dark.mips
/dark.mips64
/dark.mpsl
/dark.mipsel
/dark.ppc
/dark.ppc2
/dark.ppc440
/dark.powerppc
/dark.root
/dark.root32
/dark.sh4
/dark.ssh4
/dark.spc
/dark.sparc
/dark.srv
/dark.x32
/dark.x64
/dark.x86
/dark.x86_32
/dark.x86_64

# Reference: https://twitter.com/VessOnSecurity/status/1053591992888950784

/arm.yakuza
/arm5.yakuza
/arm6.yakuza
/arm7.yakuza
/dbg.yakuza
/i586.yakuza
/i686.yakuza
/m68k.yakuza
/mips.yakuza
/mpsl.yakuza
/ppc.yakuza
/ppc440.yakuza
/sh4.yakuza
/spc.yakuza
/srv.yakuza
/x86.yakuza

# Reference: https://twitter.com/VessOnSecurity/status/1051226957118103560

/gemini.arm
/gemini.arm5
/gemini.arm6
/gemini.arm7
/gemini.dbg
/gemini.i586
/gemini.i686
/gemini.m68k
/gemini.mips
/gemini.mpsl
/gemini.ppc
/gemini.ppc440
/gemini.sh4
/gemini.spc
/gemini.srv
/gemini.x86

# Reference: https://twitter.com/VessOnSecurity/status/1036375414141345793

/arc.Akiru
/arm.Akiru
/arm4.Akiru
/armv4l.Akiru
/arm5.Akiru
/arm6.Akiru
/arm7.Akiru
/dbg.Akiru
/i586.Akiru
/i686.Akiru
/m68k.Akiru
/mips.Akiru
/mips64.Akiru
/mpsl.Akiru
/ppc.Akiru
/ppc440.Akiru
/sh4.Akiru
/spc.Akiru
/sparc.Akiru
/srv.Akiru
/x86.Akiru
/x64.Akiru
/x32.Akiru
/x86_64.Akiru

# Reference: https://twitter.com/VessOnSecurity/status/1031653320467927046

/BleedStreet.arc
/BleedStreet.arm
/BleedStreet.arm4
/BleedStreet.armv4l
/BleedStreet.arm5
/BleedStreet.arm6
/BleedStreet.arm7
/BleedStreet.dbg
/BleedStreet.i586
/BleedStreet.i686
/BleedStreet.m68k
/BleedStreet.mips
/BleedStreet.mips64
/BleedStreet.mpsl
/BleedStreet.ppc
/BleedStreet.ppc440
/BleedStreet.sh4
/BleedStreet.spc
/BleedStreet.sparc
/BleedStreet.srv
/BleedStreet.x86
/BleedStreet.x64
/BleedStreet.x32
/BleedStreet.x86_64

# Reference: https://twitter.com/xxdesmus/status/1053440011289280512

/jiren.arc
/jiren.arm
/jiren.armv4l
/jiren.arm4
/jiren.arm5
/jiren.arm5n
/jiren.arm6
/jiren.arm7
/jiren.dbg
/jiren.i586
/jiren.i686
/jiren.m68k
/jiren.mips
/jiren.mips64
/jiren.mpsl
/jiren.ppc
/jiren.sh
/jiren.sh4
/jiren.spc
/jiren.sparc
/jiren.x86
/jiren.x64
/jiren.x86_64
/jiren.x32

# Reference: https://otx.alienvault.com/pulse/5a7878488a342f781764803b

cloudflarecock.club
fghdfth.club
fuckthefeds.tk
hightechcrime.club
imadaddy.us
malwaremustive.club
mirai.ao
neuvostoliitto.tk
traplife.ru

# Reference: http://vxcube.com/recent-threats-ioc/5a505721a39bb533af5137ed/detail

0x01.nexusiotsolutions.net
0x01.preload.su
0x90.bid
1eryxnva.glibc.org
aced.ga
air.sinushost.biz
akuma.pw
alhctuyy.tk
asapvpns.club
aspectleaks.xyz
back.uu8889.com
bakiiszwart.tk
base.monello.tk
bbase.monello.tk
bcnc.changeme.com
bc.nexusiotsolutions.net
bfrxznyisbestie.ml
bfyfa.fun
bhromofreah.top
bigboats.club
bigboatz.us
bkush.ml
blacklister.nl
bloodwars.ws
blueandsausesfries.us
bnexusiotsolutions.net
boatnet.xyz
boat.racoon.ml
booters.ml
botnet.remaiten.org
botnetsale.tk
bounty.bigbotpein.ru
bwww.scotsa.pw
ccc.snicker.ir
central.glibc.org
cked.4horsemen.pw
cktzoh.xyz
cmdmirai.tk
cnc111.ml
cnc.bigbandsinmyvault.tk
cnc.bigbotpein.ru
cncbot.cnbot.space
cncbot.ddns.net
cnc.changeme.com
cnc.linux.lol
cnc.mirai.com
cnc.nutsz.club
cnc.skidsec.org
cnc.smokemethallday.tk
cnc.spamtech.win
cnc.teammalefic.pw
cnc.tonguepunchfartbox.life
cnc.urgay.cf
cnc.vdskge7as.xyz
cnc.voxlobid.tk
c.nexusiotsolutions.net
cn.uvgczsuidrtg.com
conwangg.de
cool.kingdomplugin.nl
coolxr.info
cottoncandyloverscute.website
crazyclothes.store
dankstresser.tk
dannyexe.xyz
ddosattacks.tk
deathlives.ddns.net
d.hi8520.com
dportsmirai.tk
dssgasrea.club
eccc.bulletpool.ru
ertwer.vdskge7as.xyz
featured.cf
fedtraps.cf
ffvfvcnc.changeme.com
frost.botnet.hackedfiles.pw
frxznyisbestie.ml
ftp.xenonbooter.xyz
fyfa.fun
gangsters.cf
gndfgdd.club
gnikllort.com
gotnulled.ga
greekhelios21.tk
happyf33t.nl
hello.bigpuller.cf
hoaxnet.ddns.net
hromofreah.top
ikbensupercool.nl
iktufopjou.nl
infecteverywhere.online
int.aerx.io
internetgangster.tk
internetpolice.ga
internetpolice.ml
internetpolice.tk
iotmirai.tk
isalinux.intercomonline.com
kagbe.nl
kormirai.ddns.net
kringelstan.net
kush.ml
leakedfiles.org
legendarysprx.pw
linuxsecuritys.com
lol665.tk
lol.godlynet.cf
mail.harikatha.com
majikku.us
miraibotnet.ml
miraibotnet.online
miraihoneypot.tk
mirainet.ml
mirainet.tk
mm.haxornah.top
moanmybins.ml
modems.pw
myacerusername.hopto.org
mymiraiserver.hopto.org
mypawnshop.men
nageboorte.ga
naotogoyamamcc.asuscomm.com
net.nageboorte.nl
neuvostoliitto.ml
neuvostoliitto.tk
nexusaquariums.ir
nnn.shenron.pw
nullserversmirai.tk
offlineservers.tk
online.upmirai.club
onyxreppingoat.cf
panel.miraibotnet.eu
powa.daddyhackingteam.com
power4you.ddns.net
predoxing.tk
purgeblood.duckdns.org
putintrump.cf
putintrump.tk
pvpcloud.us
pyfulthag0d.pw
q5f2k0evy7go2rax9m4g.ru
reppin.tk
rofl.leakvortex.pro
rootyi.site
runscape.cf
rw595phpt4kk538s.botanik.gq
s0.3eu.ru
santasbigcandycane.cx
sbnmcd.org
sepinsftw.tk
serveranywhere.cf
serveranywhere.ga
serversrus.club
sevenp.top
smithre.top
ssh.gammaboat.us
swatnetiphone.tk
swatnetsucks.tk
swinginwithme.ru
swizzthegod.us
thebigbadbotnet.tk
thonder.club
totalbooter.us
truepower.club
ttymirai.tk
unix.tk
upfiles.online
uryjsdrfg.club
vap3.ddns.net
wheresmirai.tk
winter.winterboot.net
ghoststresser.pw
newel.se
scotsa.pw
trapboat.club
yzykar.ddns.net
zammanaakis.link
zetastress.net

# Reference: https://twitter.com/bad_packets/status/1053873672824356866

/Botnet.arm4
/Botnet.arm5
/Botnet.arm6
/Botnet.arm7
/Botnet.dbg
/Botnet.m68k
/Botnet.mips
/Botnet.mpsl
/Botnet.ppc
/Botnet.sh4
/Botnet.sparc
/Botnet.x86
/Botnet.x86_32
/Botnet.x86_64
/hakai.arm4
/hakai.arm5
/hakai.arm6
/hakai.arm7
/hakai.dbg
/hakai.m68k
/hakai.mips
/hakai.mpsl
/hakai.ppc
/hakai.sh4
/hakai.sparc
/hakai.x86
/hakai.x86_32
/hakai.x86_64
/sensi1.sh

# From MT heur detection

/neko.sh

# Reference: https://twitter.com/SugitaMuchi/status/1062330928205156352

/kowai.arm
/kowai.arm5
/kowai.arm6
/kowai.arm7
/kowai.m68k
/kowai.mips
/kowai.mpsl
/kowai.ppc
/kowai.sh4
/kowai.spc
/kowai.x86

# Reference: https://twitter.com/ankit_anubhav/status/1069907888368484353
# Reference: https://twitter.com/0xrb/status/1098513464480264192

/arm.light
/arm5.light
/arm6.light
/arm7.light
/m68k.light
/mips.light
/mpsl.light
/ppc.light
/sh4.light
/spc.light
/x86.light

# Reference: https://twitter.com/SugitaMuchi/status/1063754561339322368

/shinto
/shinto.arm
/shinto.arm4
/shinto.armv4l
/shinto.arm5
/shinto.arm5n
/shinto.arm6
/shinto.arm7
/shinto.dbg
/shinto.i586
/shinto.i686
/shinto.m68k
/shinto.mips
/shinto.mpsl
/shinto.ppc
/shinto.sh4
/shinto.spc
/shinto.sparc
/shinto.x32
/shinto.x86
/shinto.x64
/shinto.x86_64

# Reference: https://telekomsecurity.github.io/2018/07/adb-botnet.html

rippr.cc
/adbs
/i586.bot.le
/i686.bot.le
/arm.bot.le
/arm7.bot.le
/mips.bot.be
/mipsel.bot.le
/x86_64.bot.le

# Reference: https://twitter.com/bad_packets/status/1106343623996538880
# Reference: https://twitter.com/IAM__Network/status/1097163771116744704

/josho.arc
/josho.arm
/josho.arm4
/josho.arm4l
/josho.arm4t
/josho.arm4tl
/josho.arm4tll
/josho.armv4l
/josho.arm5
/josho.arm5n
/josho.arm6
/josho.arm64
/josho.arm7
/josho.arm8
/josho.dbg
/josho.exploit
/josho.i4
/josho.i486
/josho.i586
/josho.i686
/josho.kill
/josho.m68k
/josho.mips
/josho.mips64
/josho.mpsl
/josho.mipsel
/josho.ppc
/josho.ppc2
/josho.ppc440
/josho.powerppc
/josho.root
/josho.root32
/josho.sh4
/josho.ssh4
/josho.spc
/josho.sparc
/josho.x32
/josho.x64
/josho.x86
/josho.x86_32
/josho.x86_64

# Reference: https://twitter.com/bad_packets/status/1105882282626150401

/frosty.arc
/frosty.arm
/frosty.arm4
/frosty.armv4l
/frosty.arm5
/frosty.arm5n
/frosty.arm6
/frosty.arm7
/frosty.dbg
/frosty.i586
/frosty.i686
/frosty.m68k
/frosty.mips
/frosty.mips64
/frosty.mpsl
/frosty.ppc
/frosty.sh4
/frosty.spc
/frosty.sparc
/frosty.x32
/frosty.x86
/frosty.x64
/frosty.x86_64

# Reference: https://twitter.com/bad_packets/status/1105281977173729280

/time.arc
/time.arm
/time.arm4
/time.armv4l
/time.arm5
/time.arm5n
/time.arm6
/time.arm7
/time.dbg
/time.i586
/time.i686
/time.m68k
/time.mips
/time.mips64
/time.mpsl
/time.ppc
/time.sh4
/time.spc
/time.sparc
/time.x32
/time.x86
/time.x64
/time.x86_64

# Reference: https://twitter.com/bad_packets/status/1104487572015788032

/a.sh
/ai.arc
/ai.arm
/ai.arm4
/ai.armv4l
/ai.arm5
/ai.arm5n
/ai.arm6
/ai.arm7
/ai.dbg
/ai.i586
/ai.i686
/ai.m68k
/ai.mips
/ai.mips64
/ai.mpsl
/ai.ppc
/ai.sh4
/ai.spc
/ai.sparc
/ai.x32
/ai.x86
/ai.x64
/ai.x86_64
/dsl2750b
/jno.arc
/jno.arm
/jno.arm4
/jno.armv4l
/jno.arm5
/jno.arm5n
/jno.arm6
/jno.arm7
/jno.dbg
/jno.i586
/jno.i686
/jno.m68k
/jno.mips
/jno.mips64
/jno.mpsl
/jno.ppc
/jno.sh4
/jno.spc
/jno.sparc
/jno.x32
/jno.x86
/jno.x64
/jno.x86_64
/rbot.arc
/rbot.arm
/rbot.arm4
/rbot.armv4l
/rbot.arm5
/rbot.arm5n
/rbot.arm6
/rbot.arm7
/rbot.dbg
/rbot.i586
/rbot.i686
/rbot.m68k
/rbot.mips
/rbot.mips64
/rbot.mpsl
/rbot.ppc
/rbot.sh4
/rbot.spc
/rbot.sparc
/rbot.x32
/rbot.x86
/rbot.x64
/rbot.x86_64
/snwrite

# Reference: https://twitter.com/360Netlab/status/1102425923381587968

/estella.arc
/estella.arm
/estella.arm4
/estella.armv4l
/estella.arm5
/estella.arm5n
/estella.arm6
/estella.arm7
/estella.dbg
/estella.i586
/estella.i686
/estella.m68k
/estella.mips
/estella.mips64
/estella.mpsl
/estella.ppc
/estella.sh4
/estella.spc
/estella.sparc
/estella.x32
/estella.x86
/estella.x64
/estella.x86_64
/ricco.arc
/ricco.arm
/ricco.arm4
/ricco.armv4l
/ricco.arm5
/ricco.arm5n
/ricco.arm6
/ricco.arm7
/ricco.dbg
/ricco.i586
/ricco.i686
/ricco.m68k
/ricco.mips
/ricco.mips64
/ricco.mpsl
/ricco.ppc
/ricco.sh4
/ricco.spc
/ricco.sparc
/ricco.x32
/ricco.x86
/ricco.x64
/ricco.x86_64

# Reference: https://twitter.com/bad_packets/status/1104255547702800384

/xxx.arc
/xxx.arm
/xxx.arm4
/xxx.armv4l
/xxx.arm5
/xxx.arm5n
/xxx.arm6
/xxx.arm7
/xxx.dbg
/xxx.i586
/xxx.i686
/xxx.m68k
/xxx.mips
/xxx.mips64
/xxx.mpsl
/xxx.ppc
/xxx.sh4
/xxx.spc
/xxx.sparc
/xxx.x86
/xxx.x32
/xxx.x64
/xxx.x86_64

# Reference: https://twitter.com/bad_packets/status/1107179579393740801

/set.arc
/set.arm
/set.arm4
/set.armv4l
/set.arm5
/set.arm5n
/set.arm6
/set.arm7
/set.dbg
/set.i586
/set.i686
/set.m68k
/set.mips
/set.mips64
/set.mpsl
/set.ppc
/set.sh4
/set.spc
/set.sparc
/set.x32
/set.x86
/set.x64
/set.x86_64
/Solstice.arc
/Solstice.arm
/Solstice.arm4
/Solstice.armv4l
/Solstice.arm5
/Solstice.arm5n
/Solstice.arm6
/Solstice.arm7
/Solstice.dbg
/Solstice.i586
/Solstice.i686
/Solstice.m68k
/Solstice.mips
/Solstice.mips64
/Solstice.mpsl
/Solstice.ppc
/Solstice.sh4
/Solstice.spc
/Solstice.sparc
/Solstice.x32
/Solstice.x86
/Solstice.x64
/Solstice.x86_64

# Reference: https://twitter.com/bad_packets/status/1103024034495619072
# Reference: https://twitter.com/0xrb/status/1102806642071003141

/cayo1
/cayo10
/cayo11
/cayo12
/cayo13
/cayo2
/cayo3
/cayo4
/cayo5
/cayo6
/cayo7
/cayo8
/cayo9

# Reference: https://twitter.com/bad_packets/status/1107030028162719744

/Demon.arc
/Demon.arm
/Demon.arm4
/Demon.armv4l
/Demon.arm5
/Demon.arm5n
/Demon.arm6
/Demon.arm7
/Demon.dbg
/Demon.i586
/Demon.i686
/Demon.m68k
/Demon.mips
/Demon.mips64
/Demon.mpsl
/Demon.ppc
/Demon.sh4
/Demon.spc
/Demon.sparc
/Demon.x32
/Demon.x86
/Demon.x64
/Demon.x86_64

# Reference: https://twitter.com/bad_packets/status/1103032616964415488

/Meraki.arc
/Meraki.arm
/Meraki.arm4
/Meraki.armv4l
/Meraki.arm5
/Meraki.arm5n
/Meraki.arm6
/Meraki.arm7
/Meraki.dbg
/Meraki.i586
/Meraki.i686
/Meraki.m68k
/Meraki.mips
/Meraki.mips64
/Meraki.mpsl
/Meraki.ppc
/Meraki.sh4
/Meraki.spc
/Meraki.sparc
/Meraki.x32
/Meraki.x86
/Meraki.x64
/Meraki.x86_64

# Reference: https://twitter.com/0xrb/status/1098513464480264192

/0kami.arc
/0kami.arm
/0kami.arm4
/0kami.armv4l
/0kami.arm5
/0kami.arm5n
/0kami.arm6
/0kami.arm7
/0kami.dbg
/0kami.i586
/0kami.i686
/0kami.m68k
/0kami.mips
/0kami.mips64
/0kami.mpsl
/0kami.ppc
/0kami.sh4
/0kami.sparc
/0kami.x32
/0kami.x86
/0kami.x64
/0kami.x86_64
/Okami.arc
/Okami.arm
/Okami.arm4
/Okami.arm5
/Okami.arm5n
/Okami.arm6
/Okami.arm7
/Okami.dbg
/Okami.i586
/Okami.i686
/Okami.m68k
/Okami.mips
/Okami.mips64
/Okami.mpsl
/Okami.ppc
/Okami.sh4
/Okami.spc
/Okami.sparc
/Okami.x86
/Okami.x32
/Okami.x64
/Okami.x86_64

# Reference: https://twitter.com/bad_packets/status/1091781818854957056

/Tsunami.arc
/Tsunami.arm
/Tsunami.arm4
/Tsunami.armv4l
/Tsunami.arm5
/Tsunami.arm5n
/Tsunami.arm6
/Tsunami.arm7
/Tsunami.dbg
/Tsunami.i586
/Tsunami.i686
/Tsunami.m68k
/Tsunami.mips
/Tsunami.mips64
/Tsunami.mpsl
/Tsunami.ppc
/Tsunami.sh4
/Tsunami.sparc
/Tsunami.spc
/Tsunami.x86
/Tsunami.x32
/Tsunami.x64
/Tsunami.x86_64
/Yowai.arc
/Yowai.arm
/Yowai.arm4
/Yowai.armv4l
/Yowai.arm5
/Yowai.arm5n
/Yowai.arm6
/Yowai.arm7
/Yowai.dbg
/Yowai.i586
/Yowai.i686
/Yowai.m68k
/Yowai.mips
/Yowai.mips64
/Yowai.mpsl
/Yowai.ppc
/Yowai.sh4
/Yowai.sparc
/Yowai.spc
/Yowai.x32
/Yowai.x86
/Yowai.x64
/Yowai.x86_64

# Reference: https://twitter.com/bad_packets/status/1090099611887235073

ngv2.duckdns.org

# Reference: https://twitter.com/bad_packets/status/1085423672515616769

/kalon.arc
/kalon.arm
/kalon.arm4
/kalon.armv4l
/kalon.arm5
/kalon.arm6
/kalon.arm7
/kalon.dbg
/kalon.i586
/kalon.i686
/kalon.m68k
/kalon.mips
/kalon.mips64
/kalon.mpsl
/kalon.ppc
/kalon.sh4
/kalon.sparc
/kalon.spc
/kalon.x86
/kalon.x32
/kalon.x64
/kalon.x86_64

# Reference: https://twitter.com/bad_packets/status/1079244007824183296
# Reference: https://twitter.com/gorimpthon/status/1074581436416581632
# Reference: https://twitter.com/0xrb/status/1103216803969359873

/rift.arc
/rift.arm
/rift.arm4
/rift.armv4l
/rift.arm5
/rift.arm5n
/rift.arm6
/rift.arm7
/rift.dbg
/rift.i486
/rift.i586
/rift.i686
/rift.m68k
/rift.mips
/rift.mips64
/rift.mpsl
/rift.ppc
/rift.ppc-440fp
/rift.sh4
/rift.sparc
/rift.spc
/rift.x86
/rift.x32
/rift.x64
/rift.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1107503086052888576

/despise.arc
/despise.arm
/despise.arm4
/despise.armv4l
/despise.arm5
/despise.arm5n
/despise.arm6
/despise.arm7
/despise.dbg
/despise.i586
/despise.i686
/despise.m68k
/despise.mips
/despise.mips64
/despise.mpsl
/despise.ppc
/despise.sh4
/despise.sparc
/despise.spc
/despise.x86
/despise.x32
/despise.x64
/despise.x86_64

# Reference: https://otx.alienvault.com/pulse/5c8fa03c1bff9c0896577b9b
# Reference: https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/
# Reference: https://www.virustotal.com/gui/domain/epicrustserver.cf/relations

128.244.98.74:2332
128.244.98.74:3933
133.51.27.211:2332
133.51.27.211:3933
133.51.27.211:8080
133.51.27.211:8081
133.51.27.211:8083
133.51.27.211:8181
139.203.22.68:2332
139.203.22.68:3933
147.133.138.130:2332
147.133.138.130:3933
147.133.138.130:8080
147.133.138.130:8081
147.133.138.130:8083
147.133.138.130:8181
149.58.122.219:2332
149.58.122.219:3933
149.58.122.219:8080
149.58.122.219:8081
149.58.122.219:8083
149.58.122.219:8181
155.169.205.198:2332
155.169.205.198:3933
155.169.205.198:8080
155.169.205.198:8081
155.169.205.198:8083
155.169.205.198:8181
155.223.168.208:2332
155.223.168.208:3933
194.25.244.166:2332
194.25.244.166:3933
210.234.205.181:2332
210.234.205.181:3933
211.242.104.162:2332
211.242.104.162:3933
213.135.165.173:2332
213.135.165.173:3933
213.245.229.13:2332
213.245.229.13:3933
222.227.222.211:2332
222.227.222.211:3933
50.63.202.11:2332
50.63.202.11:3933
50.63.202.11:8080
50.63.202.11:8081
50.63.202.11:8083
50.63.202.11:8181
65.107.9.195:2332
65.107.9.195:3933
67.19.37.226:2332
67.19.37.226:3933
70.192.147.153:2332
70.192.147.153:3933
71.5.86.197:2332
71.5.86.197:3933
79.51.97.203:2332
79.51.97.203:3933
85.135.168.75:2332
85.135.168.75:3933
85.135.168.75:8080
85.135.168.75:8081
85.135.168.75:8083
85.135.168.75:8181
epicrustserver.cf
/clean.arc
/clean.arm
/clean.arm4
/clean.armv4l
/clean.arm5
/clean.arm5n
/clean.arm6
/clean.arm7
/clean.dbg
/clean.i586
/clean.i686
/clean.m68k
/clean.x86
/clean.x86_64
/clean.x32
/clean.x64
/clean.mips
/clean.mpsl
/clean.ppc
/clean.sh4
/clean.spc
/clean.sparc
/eeppinen.arc
/eeppinen.arm
/eeppinen.arm4
/eeppinen.armv4l
/eeppinen.arm5
/eeppinen.arm5n
/eeppinen.arm6
/eeppinen.arm7
/eeppinen.dbg
/eeppinen.i586
/eeppinen.i686
/eeppinen.m68k
/eeppinen.ppc
/eeppinen.sh4
/eeppinen.sparc
/eeppinen.spc
/eeppinen.x86
/eeppinen.x86_64
/eeppinen.x32
/eeppinen.x64
/wgetbin.sh

# Reference: https://twitter.com/bad_packets/status/1108198117944418304

/shiina.sh
/shiina1.sh
/shiina.arc
/shiina.arm
/shiina.arm4
/shiina.armv4l
/shiina.arm5
/shiina.arm5n
/shiina.arm6
/shiina.arm7
/shiina.dbg
/shiina.i586
/shiina.i686
/shiina.m68k
/shiina.mips
/shiina.mips64
/shiina.mpsl
/shiina.ppc
/shiina.sh4
/shiina.spc
/shiina.sparc
/shiina.x32
/shiina.x64
/shiina.x86
/shiina.x86_64

# Reference: https://twitter.com/x42x5a/status/1108443839013052416

/le.arc.bot
/le.arm.bot
/le.arm4.bot
/le.arm5.bot
/le.arm6.bot
/le.arm7.bot
/le.m68k.bot
/le.mips.bot
/le.mpsl.bot
/le.ppc.bot
/le.sh4.bot
/le.spc.bot
/le.x86.bot
/le.x64.bot

# Reference: https://twitter.com/bad_packets/status/1107183598484897792

vampwrotesatori.cf

# Reference: https://twitter.com/bad_packets/status/1108853601168850944

/ARES1.sh
/tmp.arc
/tmp.arm
/tmp.arm4
/tmp.armv4l
/tmp.arm5
/tmp.arm5n
/tmp.arm6
/tmp.arm7
/tmp.dbg
/tmp.i586
/tmp.i686
/tmp.m68k
/tmp.mips
/tmp.mips64
/tmp.mpsl
/tmp.ppc
/tmp.sh4
/tmp.spc
/tmp.sparc
/tmp.x32
/tmp.x64
/tmp.x86
/tmp.x86_64

# Reference: https://twitter.com/bad_packets/status/1109720375951151104

/sbot.arc
/sbot.arm
/sbot.arm4
/sbot.armv4l
/sbot.arm5
/sbot.arm5n
/sbot.arm6
/sbot.arm7
/sbot.dbg
/sbot.i586
/sbot.i686
/sbot.m68k
/sbot.mips
/sbot.mips64
/sbot.mpsl
/sbot.ppc
/sbot.sh4
/sbot.spc
/sbot.sparc
/sbot.x32
/sbot.x64
/sbot.x86
/sbot.x86_64

# Reference: https://twitter.com/malwaremustd1e/status/1074213727791017985

senpai.site
/miori.arc
/miori.arm
/miori.arm4
/miori.armv4l
/miori.arm5
/miori.arm5n
/miori.arm6
/miori.arm7
/miori.dbg
/miori.i586
/miori.i686
/miori.m68k
/miori.mips
/miori.mips64
/miori.mpsl
/miori.ppc
/miori.sh4
/miori.spc
/miori.sparc
/miori.x32
/miori.x64
/miori.x86
/miori.x86_64

# Reference: https://twitter.com/0xrb/status/1107900627693125632

/8UsA1.sh
/bot.arc
/bot.arm
/bot.arm4
/bot.armv4l
/bot.arm5
/bot.arm5n
/bot.arm6
/bot.arm7
/bot.dbg
/bot.i586
/bot.i686
/bot.m68k
/bot.mips
/bot.mips64
/bot.mpsl
/bot.ppc
/bot.sh4
/bot.spc
/bot.sparc
/bot.x32
/bot.x64
/bot.x86
/bot.x86_64

# Reference: https://twitter.com/0xrb/status/1106913710323331074

/messiahbins.sh

# Reference: https://twitter.com/0xrb/status/1108630159635156992

/Nazi.arc
/Nazi.arm
/Nazi.arm4
/Nazi.armv4l
/Nazi.arm5
/Nazi.arm5n
/Nazi.arm6
/Nazi.arm7
/Nazi.dbg
/Nazi.i586
/Nazi.i686
/Nazi.m68k
/Nazi.mips
/Nazi.mips64
/Nazi.mpsl
/Nazi.ppc
/Nazi.sh4
/Nazi.spc
/Nazi.sparc
/Nazi.x32
/Nazi.x64
/Nazi.x86
/Nazi.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1107773193731756032
# Reference: https://twitter.com/bad_packets/status/1134692367133335553

62.210.207.229:89
/owari.arc
/owari.arm
/owari.arm4
/owari.armv4l
/owari.arm5
/owari.arm5n
/owari.arm6
/owari.arm7
/owari.dbg
/owari.i586
/owari.i686
/owari.m68k
/owari.mips
/owari.mips64
/owari.mpsl
/owari.ppc
/owari.root
/owari.root32
/owari.sh4
/owari.spc
/owari.sparc
/owari.x32
/owari.x64
/owari.x86
/owari.x86_64
/netis

# Reference: https://twitter.com/0xrb/status/1107897430048034816

/air.arc
/air.arm
/air.arm4
/air.armv4l
/air.arm5
/air.arm5n
/air.arm6
/air.arm7
/air.dbg
/air.i586
/air.i686
/air.m68k
/air.mips
/air.mips64
/air.mpsl
/air.ppc
/air.sh4
/air.spc
/air.sparc
/air.x32
/air.x64
/air.x86
/air.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1107772353289682944

/September.arc
/September.arm
/September.arm4
/September.armv4l
/September.arm5
/September.arm5n
/September.arm6
/September.arm7
/September.dbg
/September.i586
/September.i686
/September.m68k
/September.mips
/September.mips64
/September.mpsl
/September.ppc
/September.sh4
/September.spc
/September.sparc
/September.x32
/September.x64
/September.x86
/September.x86_64

# Reference: https://twitter.com/0xrb/status/1107592182100189184

/Pemex1.sh
/loligang.arc
/loligang.arm
/loligang.arm4
/loligang.armv4l
/loligang.arm5
/loligang.arm5n
/loligang.arm6
/loligang.arm7
/loligang.dbg
/loligang.i586
/loligang.i686
/loligang.m68k
/loligang.mips
/loligang.mips64
/loligang.mpsl
/loligang.ppc
/loligang.sh4
/loligang.spc
/loligang.sparc
/loligang.x32
/loligang.x64
/loligang.x86
/loligang.x86_64

# Reference: https://twitter.com/0xrb/status/1106796078450593798

/hdawd.arc
/hdawd.arm
/hdawd.arm4
/hdawd.armv4l
/hdawd.arm5
/hdawd.arm5n
/hdawd.arm6
/hdawd.arm7
/hdawd.dbg
/hdawd.i586
/hdawd.i686
/hdawd.m68k
/hdawd.mips
/hdawd.mips64
/hdawd.mpsl
/hdawd.ppc
/hdawd.sh4
/hdawd.spc
/hdawd.sparc
/hdawd.x32
/hdawd.x64
/hdawd.x86
/hdawd.x86_64

# Reference: https://twitter.com/ulexec/status/1065155269028708352

/adb.arc
/adb.arm
/adb.arm4
/adb.armv4l
/adb.arm5
/adb.arm5n
/adb.arm6
/adb.arm7
/adb.dbg
/adb.i586
/adb.i686
/adb.m68k
/adb.mips
/adb.mips64
/adb.mpsl
/adb.ppc
/adb.sh4
/adb.spc
/adb.sparc
/adb.x32
/adb.x64
/adb.x86
/adb.x86_64

# Reference: https://twitter.com/ulexec/status/1063798453799653376

/dank.arc
/dank.arm
/dank.arm4
/dank.armv4l
/dank.arm5
/dank.arm5n
/dank.arm6
/dank.arm7
/dank.dbg
/dank.i586
/dank.i686
/dank.m68k
/dank.mips
/dank.mips64
/dank.mpsl
/dank.ppc
/dank.sh4
/dank.spc
/dank.sparc
/dank.x32
/dank.x64
/dank.x86
/dank.x86_64

# Reference: https://twitter.com/executemalware/status/1006957509528162304
# Reference: https://twitter.com/0xrb/status/1093420116639768576

/gay.arc
/gay.arm
/gay.arm4
/gay.arm4tl
/gay.armv4l
/gay.arm5
/gay.arm5n
/gay.arm6
/gay.arm7
/gay.dbg
/gay.i586
/gay.i686
/gay.m68k
/gay.mips
/gay.mips64
/gay.mpsl
/gay.ppc
/gay.sh4
/gay.spc
/gay.sparc
/gay.x32
/gay.x64
/gay.x86
/gay.x86_64

# Reference: https://twitter.com/bad_packets/status/1110025683093196801

/k1ra1.arc
/k1ra1.arm
/k1ra1.arm4
/k1ra1.armv4l
/k1ra1.arm5
/k1ra1.arm5n
/k1ra1.arm6
/k1ra1.arm7
/k1ra1.dbg
/k1ra1.i586
/k1ra1.i686
/k1ra1.m68k
/k1ra1.mips
/k1ra1.mips64
/k1ra1.mpsl
/k1ra1.ppc
/k1ra1.sh4
/k1ra1.spc
/k1ra1.sparc
/k1ra1.x32
/k1ra1.x64
/k1ra1.x86
/k1ra1.x86_64
/kirai.arc
/kirai.arm
/kirai.arm4
/kirai.armv4l
/kirai.arm5
/kirai.arm5n
/kirai.arm6
/kirai.arm7
/kirai.dbg
/kirai.i586
/kirai.i686
/kirai.m68k
/kirai.mips
/kirai.mips64
/kirai.mpsl
/kirai.ppc
/kirai.sh4
/kirai.spc
/kirai.sparc
/kirai.x32
/kirai.x64
/kirai.x86
/kirai.x86_64

# Reference: https://twitter.com/bad_packets/status/1111524886919307264

/unstable.arc
/unstable.arm
/unstable.arm4
/unstable.armv4l
/unstable.arm5
/unstable.arm5n
/unstable.arm6
/unstable.arm7
/unstable.dbg
/unstable.i586
/unstable.i686
/unstable.m68k
/unstable.mips
/unstable.mips64
/unstable.mpsl
/unstable.ppc
/unstable.sh4
/unstable.spc
/unstable.sparc
/unstable.x32
/unstable.x64
/unstable.x86
/unstable.x86_64

# Reference: https://twitter.com/bad_packets/status/1111777543869194240

/Trickle.arc
/Trickle.arm
/Trickle.arm4
/Trickle.armv4l
/Trickle.arm5
/Trickle.arm5n
/Trickle.arm6
/Trickle.arm7
/Trickle.dbg
/Trickle.i586
/Trickle.i686
/Trickle.m68k
/Trickle.mips
/Trickle.mips64
/Trickle.mpsl
/Trickle.ppc
/Trickle.sh4
/Trickle.spc
/Trickle.sparc
/Trickle.x32
/Trickle.x64
/Trickle.x86
/Trickle.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1089187830369181696

/honchoz.arc
/honchoz.arm
/honchoz.arm4
/honchoz.armv4l
/honchoz.arm5
/honchoz.arm5n
/honchoz.arm6
/honchoz.arm7
/honchoz.dbg
/honchoz.i586
/honchoz.i686
/honchoz.m68k
/honchoz.mips
/honchoz.mips64
/honchoz.mpsl
/honchoz.ppc
/honchoz.sh4
/honchoz.spc
/honchoz.sparc
/honchoz.x32
/honchoz.x64
/honchoz.x86
/honchoz.x86_64
/headhoncho.arc
/headhoncho.arm
/headhoncho.arm4
/headhoncho.armv4l
/headhoncho.arm5
/headhoncho.arm5n
/headhoncho.arm6
/headhoncho.arm7
/headhoncho.dbg
/headhoncho.i586
/headhoncho.i686
/headhoncho.m68k
/headhoncho.mips
/headhoncho.mips64
/headhoncho.mpsl
/headhoncho.ppc
/headhoncho.sh4
/headhoncho.spc
/headhoncho.sparc
/headhoncho.x32
/headhoncho.x64
/headhoncho.x86
/headhoncho.x86_64
/dwabniduawdbwad/

# Reference: https://twitter.com/SugitaMuchi/status/1087128158149591040

/beefy
/qlu.arc
/qlu.arm
/qlu.arm4
/qlu.armv4l
/qlu.arm5
/qlu.arm5n
/qlu.arm6
/qlu.arm7
/qlu.dbg
/qlu.i586
/qlu.i686
/qlu.m68k
/qlu.mips
/qlu.mips64
/qlu.mpsl
/qlu.ppc
/qlu.sh4
/qlu.spc
/qlu.sparc
/qlu.x32
/qlu.x64
/qlu.x86
/qlu.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1087113481671692288

/Oasis.arc
/Oasis.arm
/Oasis.arm4
/Oasis.armv4l
/Oasis.arm5
/Oasis.arm5n
/Oasis.arm6
/Oasis.arm7
/Oasis.dbg
/Oasis.i586
/Oasis.i686
/Oasis.m68k
/Oasis.mips
/Oasis.mips64
/Oasis.mpsl
/Oasis.ppc
/Oasis.sh4
/Oasis.spc
/Oasis.sparc
/Oasis.x32
/Oasis.x64
/Oasis.x86
/Oasis.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1087112232398290945

/hades.arc
/hades.arm
/hades.arm4
/hades.armv4l
/hades.arm5
/hades.arm5n
/hades.arm6
/hades.arm7
/hades.dbg
/hades.i586
/hades.i686
/hades.m68k
/hades.mips
/hades.mips64
/hades.mpsl
/hades.ppc
/hades.sh4
/hades.spc
/hades.sparc
/hades.x32
/hades.x64
/hades.x86
/hades.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1084938640482914304
/a.arc
/a.arm
/a.arm4
/a.armv4l
/a.arm5
/a.arm5n
/a.arm6
/a.arm7
/a.dbg
/a.i586
/a.i686
/a.m68k
/a.mips
/a.mips64
/a.mpsl
/a.ppc
/a.sh4
/a.spc
/a.sparc
/a.x32
/a.x64
/a.x86
/a.x86_64
/furasshu.arc
/furasshu.arm
/furasshu.arm4
/furasshu.armv4l
/furasshu.arm5
/furasshu.arm5n
/furasshu.arm6
/furasshu.arm7
/furasshu.dbg
/furasshu.i586
/furasshu.i686
/furasshu.kill
/furasshu.m68k
/furasshu.mips
/furasshu.mips64
/furasshu.mpsl
/furasshu.ppc
/furasshu.sh4
/furasshu.spc
/furasshu.sparc
/furasshu.x32
/furasshu.x64
/furasshu.x86
/furasshu.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1084936992268283904

/Mushi.arc
/Mushi.arm
/Mushi.arm4
/Mushi.armv4l
/Mushi.arm5
/Mushi.arm5n
/Mushi.arm6
/Mushi.arm7
/Mushi.dbg
/Mushi.i586
/Mushi.i686
/Mushi.m68k
/Mushi.mips
/Mushi.mips64
/Mushi.mpsl
/Mushi.ppc
/Mushi.sh4
/Mushi.spc
/Mushi.sparc
/Mushi.x32
/Mushi.x64
/Mushi.x86
/Mushi.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083983657684021248

/Damien.arc
/Damien.arm
/Damien.arm4
/Damien.armv4l
/Damien.arm5
/Damien.arm5n
/Damien.arm6
/Damien.arm7
/Damien.dbg
/Damien.i586
/Damien.i686
/Damien.m68k
/Damien.mips
/Damien.mips64
/Damien.mpsl
/Damien.ppc
/Damien.sh4
/Damien.spc
/Damien.sparc
/Damien.x32
/Damien.x64
/Damien.x86
/Damien.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1076706974027341824

/arc.fgt
/arm.fgt
/arm4.fgt
/armv4l.fgt
/arm5.fgt
/arm5n.fgt
/arm6.fgt
/arm7.fgt
/dbg.fgt
/i586.fgt
/i686.fgt
/m68k.fgt
/mips.fgt
/mips64.fgt
/mpsl.fgt
/ppc.fgt
/sh4.fgt
/spc.fgt
/sparc.fgt
/x32.fgt
/x64.fgt
/x86.fgt
/x86_64.fgt
/fucking.arc
/fucking.arm
/fucking.arm4
/fucking.armv4l
/fucking.arm5
/fucking.arm5n
/fucking.arm6
/fucking.arm7
/fucking.dbg
/fucking.i586
/fucking.i686
/fucking.m68k
/fucking.mips
/fucking.mips64
/fucking.mpsl
/fucking.ppc
/fucking.sh4
/fucking.spc
/fucking.sparc
/fucking.x32
/fucking.x64
/fucking.x86
/fucking.x86_64
/x86hua

# Reference: https://twitter.com/SugitaMuchi/status/1076275952923987968

/Shine.arc
/Shine.arm
/Shine.arm4
/Shine.armv4l
/Shine.arm5
/Shine.arm5n
/Shine.arm6
/Shine.arm7
/Shine.dbg
/Shine.i586
/Shine.i686
/Shine.m68k
/Shine.mips
/Shine.mips64
/Shine.mpsl
/Shine.ppc
/Shine.sh4
/Shine.spc
/Shine.sparc
/Shine.x32
/Shine.x64
/Shine.x86
/Shine.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1076060597362380800

/kyton.arc
/kyton.arm
/kyton.arm4
/kyton.armv4l
/kyton.arm5
/kyton.arm5n
/kyton.arm6
/kyton.arm7
/kyton.dbg
/kyton.i586
/kyton.i686
/kyton.m68k
/kyton.mips
/kyton.mips64
/kyton.mpsl
/kyton.ppc
/kyton.sh4
/kyton.spc
/kyton.sparc
/kyton.x32
/kyton.x64
/kyton.x86
/kyton.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1072979237445849090

/TrioSec.arc
/TrioSec.arm
/TrioSec.arm4
/TrioSec.armv4l
/TrioSec.arm5
/TrioSec.arm5n
/TrioSec.arm6
/TrioSec.arm7
/TrioSec.dbg
/TrioSec.i586
/TrioSec.i686
/TrioSec.m68k
/TrioSec.mips
/TrioSec.mips64
/TrioSec.mpsl
/TrioSec.ppc
/TrioSec.sh4
/TrioSec.spc
/TrioSec.sparc
/TrioSec.x32
/TrioSec.x64
/TrioSec.x86
/TrioSec.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1072663518900563969

/cloudi.arc
/cloudi.arm
/cloudi.arm4
/cloudi.armv4l
/cloudi.arm5
/cloudi.arm5n
/cloudi.arm6
/cloudi.arm7
/cloudi.dbg
/cloudi.i586
/cloudi.i686
/cloudi.m68k
/cloudi.mips
/cloudi.mips64
/cloudi.mpsl
/cloudi.ppc
/cloudi.sh4
/cloudi.spc
/cloudi.sparc
/cloudi.x32
/cloudi.x64
/cloudi.x86
/cloudi.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1071904311871889413

/snowy.arc
/snowy.arm
/snowy.arm4
/snowy.armv4l
/snowy.arm5
/snowy.arm5n
/snowy.arm6
/snowy.arm7
/snowy.dbg
/snowy.i586
/snowy.i686
/snowy.m68k
/snowy.mips
/snowy.mips64
/snowy.mpsl
/snowy.ppc
/snowy.sh4
/snowy.spc
/snowy.sparc
/snowy.x32
/snowy.x64
/snowy.x86
/snowy.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1071635025018286080

/polo.arc
/polo.arm
/polo.arm4
/polo.armv4l
/polo.arm5
/polo.arm5n
/polo.arm6
/polo.arm7
/polo.dbg
/polo.i586
/polo.i686
/polo.m68k
/polo.mips
/polo.mips64
/polo.mpsl
/polo.ppc
/polo.sh4
/polo.spc
/polo.sparc
/polo.x32
/polo.x64
/polo.x86
/polo.x86_64
/arc.f
/arm.f
/arm4.f
/armv4l.f
/arm5.f
/arm5n.f
/arm6.f
/arm7.f
/dbg.f
/i586.f
/i686.f
/m68k.f
/mips.f
/mips64.f
/mpsl.f
/ppc.f
/sh4.f
/spc.f
/sparc.f
/x32.f
/x64.f
/x86_64.f

# Reference: https://twitter.com/SugitaMuchi/status/1066849595425079296

/hentai.arc
/hentai.arm
/hentai.arm4
/hentai.armv4l
/hentai.arm5
/hentai.arm5n
/hentai.arm6
/hentai.arm7
/hentai.dbg
/hentai.i586
/hentai.i686
/hentai.m68k
/hentai.mips
/hentai.mips64
/hentai.mpsl
/hentai.ppc
/hentai.sh4
/hentai.spc
/hentai.sparc
/hentai.x32
/hentai.x64
/hentai.x86
/hentai.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1067550048538386432

/PhantomATM.arc
/PhantomATM.arm
/PhantomATM.arm4
/PhantomATM.armv4l
/PhantomATM.arm5
/PhantomATM.arm5n
/PhantomATM.arm6
/PhantomATM.arm7
/PhantomATM.dbg
/PhantomATM.i586
/PhantomATM.i686
/PhantomATM.m68k
/PhantomATM.mips
/PhantomATM.mips64
/PhantomATM.mpsl
/PhantomATM.ppc
/PhantomATM.sh4
/PhantomATM.spc
/PhantomATM.sparc
/PhantomATM.x32
/PhantomATM.x64
/PhantomATM.x86
/PhantomATM.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1067926544021020673

/paimon.arc
/paimon.arm
/paimon.arm4
/paimon.armv4l
/paimon.arm5
/paimon.arm5n
/paimon.arm6
/paimon.arm7
/paimon.dbg
/paimon.i586
/paimon.i686
/paimon.m68k
/paimon.mips
/paimon.mips64
/paimon.mpsl
/paimon.ppc
/paimon.sh4
/paimon.spc
/paimon.sparc
/paimon.x32
/paimon.x64
/paimon.x86
/paimon.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1068489061357117440

/n.arc
/n.arm
/n.arm4
/n.armv4l
/n.arm5
/n.arm5n
/n.arm6
/n.arm7
/n.dbg
/n.i586
/n.i686
/n.m68k
/n.mips
/n.mips64
/n.mpsl
/n.ppc
/n.sh4
/n.spc
/n.sparc
/n.x32
/n.x64
/n.x86
/n.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1068648068294168576
# Reference: https://twitter.com/0xrb/status/1098108996089565184

/shaolin.arc
/shaolin.arm
/shaolin.arm4
/shaolin.armv4l
/shaolin.arm5
/shaolin.arm5n
/shaolin.arm6
/shaolin.arm7
/shaolin.dbg
/shaolin.i586
/shaolin.i686
/shaolin.kill
/shaolin.m68k
/shaolin.mips
/shaolin.mips64
/shaolin.mpsl
/shaolin.ppc
/shaolin.sh4
/shaolin.spc
/shaolin.sparc
/shaolin.x32
/shaolin.x64
/shaolin.x86
/shaolin.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1068649952572669952

/kakeii.arc
/kakeii.arm
/kakeii.arm4
/kakeii.armv4l
/kakeii.arm5
/kakeii.arm5n
/kakeii.arm6
/kakeii.arm7
/kakeii.dbg
/kakeii.i586
/kakeii.i686
/kakeii.m68k
/kakeii.mips
/kakeii.mips64
/kakeii.mpsl
/kakeii.ppc
/kakeii.sh4
/kakeii.spc
/kakeii.sparc
/kakeii.x32
/kakeii.x64
/kakeii.x86
/kakeii.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1069066626195120128

/DEMONS.arc
/DEMONS.arm
/DEMONS.arm4
/DEMONS.armv4l
/DEMONS.arm5
/DEMONS.arm5n
/DEMONS.arm6
/DEMONS.arm7
/DEMONS.dbg
/DEMONS.i586
/DEMONS.i686
/DEMONS.m68k
/DEMONS.mips
/DEMONS.mips64
/DEMONS.mpsl
/DEMONS.ppc
/DEMONS.sh4
/DEMONS.spc
/DEMONS.sparc
/DEMONS.x32
/DEMONS.x64
/DEMONS.x86
/DEMONS.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1069792879818620928

/masuta.arc
/masuta.arm
/masuta.arm4
/masuta.armv4l
/masuta.arm5
/masuta.arm5n
/masuta.arm6
/masuta.arm7
/masuta.dbg
/masuta.i586
/masuta.i686
/masuta.m68k
/masuta.mips
/masuta.mips64
/masuta.mpsl
/masuta.ppc
/masuta.sh4
/masuta.spc
/masuta.sparc
/masuta.x32
/masuta.x64
/masuta.x86
/masuta.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1069794101405507585

/exploit.arc
/exploit.arm
/exploit.arm4
/exploit.armv4l
/exploit.arm5
/exploit.arm5n
/exploit.arm6
/exploit.arm7
/exploit.dbg
/exploit.i586
/exploit.i686
/exploit.m68k
/exploit.mips
/exploit.mips64
/exploit.mpsl
/exploit.ppc
/exploit.sh4
/exploit.spc
/exploit.sparc
/exploit.x32
/exploit.x64
/exploit.x86
/exploit.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1070292886661488641
# Reference: https://twitter.com/bad_packets/status/1164293462943862785

/arc.Tsunami
/arm.Tsunami
/arm4.Tsunami
/arm4l.Tsunami
/arm4t.Tsunami
/arm4tl.Tsunami
/arm4tll.Tsunami
/armv4l.Tsunami
/arm5.Tsunami
/arm5n.Tsunami
/arm6.Tsunami
/arm64.Tsunami
/arm7.Tsunami
/dbg.Tsunami
/i4.Tsunami
/i486.Tsunami
/i586.Tsunami
/i686.Tsunami
/kill.Tsunami
/m68k.Tsunami
/mips.Tsunami
/mips64.Tsunami
/mpsl.Tsunami
/mipsel.Tsunami
/ppc.Tsunami
/ppc2.Tsunami
/ppc440.Tsunami
/powerppc.Tsunami
/root.Tsunami
/root32.Tsunami
/sh4.Tsunami
/ssh4.Tsunami
/spc.Tsunami
/sparc.Tsunami
/x32.Tsunami
/x64.Tsunami
/x86.Tsunami
/x86_32.Tsunami
/x86_64.Tsunami

# Reference: https://twitter.com/SugitaMuchi/status/1070817589226434560

/kato.arc
/kato.arm
/kato.arm4
/kato.armv4l
/kato.arm5
/kato.arm5n
/kato.arm6
/kato.arm7
/kato.dbg
/kato.i586
/kato.i686
/kato.m68k
/kato.mips
/kato.mips64
/kato.mpsl
/kato.ppc
/kato.sh4
/kato.spc
/kato.sparc
/kato.x32
/kato.x64
/kato.x86
/kato.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1071375809842036737

/Horizon.arc
/Horizon.arm
/Horizon.arm4
/Horizon.armv4l
/Horizon.arm5
/Horizon.arm5n
/Horizon.arm6
/Horizon.arm7
/Horizon.dbg
/Horizon.i586
/Horizon.i686
/Horizon.m68k
/Horizon.mips
/Horizon.mips64
/Horizon.mpsl
/Horizon.ppc
/Horizon.sh4
/Horizon.spc
/Horizon.sparc
/Horizon.x32
/Horizon.x64
/Horizon.x86
/Horizon.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077015447281647617

/Cobra.arc
/Cobra.arm
/Cobra.arm4
/Cobra.armv4l
/Cobra.arm5
/Cobra.arm5n
/Cobra.arm6
/Cobra.arm7
/Cobra.dbg
/Cobra.i586
/Cobra.i686
/Cobra.m68k
/Cobra.mips
/Cobra.mips64
/Cobra.mpsl
/Cobra.ppc
/Cobra.sh4
/Cobra.spc
/Cobra.sparc
/Cobra.x32
/Cobra.x64
/Cobra.x86
/Cobra.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077098773703061504

/Azuja.arc
/Azuja.arm
/Azuja.arm4
/Azuja.armv4l
/Azuja.arm5
/Azuja.arm5n
/Azuja.arm6
/Azuja.arm7
/Azuja.dbg
/Azuja.i586
/Azuja.i686
/Azuja.m68k
/Azuja.mips
/Azuja.mips64
/Azuja.mpsl
/Azuja.ppc
/Azuja.sh4
/Azuja.spc
/Azuja.sparc
/Azuja.x32
/Azuja.x64
/Azuja.x86
/Azuja.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077692159535411203

/Lanisha.arc
/Lanisha.arm
/Lanisha.arm4
/Lanisha.armv4l
/Lanisha.arm5
/Lanisha.arm5n
/Lanisha.arm6
/Lanisha.arm7
/Lanisha.dbg
/Lanisha.i586
/Lanisha.i686
/Lanisha.m68k
/Lanisha.mips
/Lanisha.mips64
/Lanisha.mpsl
/Lanisha.ppc
/Lanisha.sh4
/Lanisha.spc
/Lanisha.sparc
/Lanisha.x32
/Lanisha.x64
/Lanisha.x86
/Lanisha.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077695005873954816

/Karu.arc
/Karu.arm
/Karu.arm4
/Karu.armv4l
/Karu.arm5
/Karu.arm5n
/Karu.arm6
/Karu.arm7
/Karu.dbg
/Karu.i586
/Karu.i686
/Karu.m68k
/Karu.mips
/Karu.mips64
/Karu.mpsl
/Karu.ppc
/Karu.sh4
/Karu.spc
/Karu.sparc
/Karu.x32
/Karu.x64
/Karu.x86
/Karu.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1078213601217863681

/kazen.arc
/kazen.arm
/kazen.arm4
/kazen.armv4l
/kazen.arm5
/kazen.arm5n
/kazen.arm6
/kazen.arm7
/kazen.dbg
/kazen.i586
/kazen.i686
/kazen.m68k
/kazen.mips
/kazen.mips64
/kazen.mpsl
/kazen.ppc
/kazen.sh4
/kazen.spc
/kazen.sparc
/kazen.x32
/kazen.x64
/kazen.x86
/kazen.x86_64
/s-kazen.arc
/s-kazen.arm
/s-kazen.arm4
/s-kazen.armv4l
/s-kazen.arm5
/s-kazen.arm5n
/s-kazen.arm6
/s-kazen.arm7
/s-kazen.dbg
/s-kazen.i586
/s-kazen.i686
/s-kazen.m68k
/s-kazen.mips
/s-kazen.mips64
/s-kazen.mpsl
/s-kazen.ppc
/s-kazen.sh4
/s-kazen.spc
/s-kazen.sparc
/s-kazen.x32
/s-kazen.x64
/s-kazen.x86
/s-kazen.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1081559402082009092

/301.arc
/301.arm
/301.arm4
/301.armv4l
/301.arm5
/301.arm5n
/301.arm6
/301.arm7
/301.dbg
/301.i586
/301.i686
/301.m68k
/301.mips
/301.mips64
/301.mpsl
/301.ppc
/301.sh4
/301.spc
/301.sparc
/301.x32
/301.x64
/301.x86
/301.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1081779020037902337

/Solar.arc
/Solar.arm
/Solar.arm4
/Solar.armv4l
/Solar.arm5
/Solar.arm5n
/Solar.arm6
/Solar.arm7
/Solar.dbg
/Solar.i586
/Solar.i686
/Solar.m68k
/Solar.mips
/Solar.mips64
/Solar.mpsl
/Solar.ppc
/Solar.sh4
/Solar.spc
/Solar.sparc
/Solar.x32
/Solar.x64
/Solar.x86
/Solar.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1081788732154437632

/penthouse.arc
/penthouse.arm
/penthouse.arm4
/penthouse.armv4l
/penthouse.arm5
/penthouse.arm5n
/penthouse.arm6
/penthouse.arm7
/penthouse.dbg
/penthouse.i586
/penthouse.i686
/penthouse.m68k
/penthouse.mips
/penthouse.mips64
/penthouse.mpsl
/penthouse.ppc
/penthouse.sh4
/penthouse.spc
/penthouse.sparc
/penthouse.x32
/penthouse.x64
/penthouse.x86
/penthouse.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1082403079230709761

/ptype.arc
/ptype.arm
/ptype.arm4
/ptype.armv4l
/ptype.arm5
/ptype.arm5n
/ptype.arm6
/ptype.arm7
/ptype.dbg
/ptype.i586
/ptype.i686
/ptype.m68k
/ptype.mips
/ptype.mips64
/ptype.mpsl
/ptype.ppc
/ptype.sh4
/ptype.spc
/ptype.sparc
/ptype.x32
/ptype.x64
/ptype.x86
/ptype.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083487810298929153

/yakuza.arc
/yakuza.arm
/yakuza.arm4
/yakuza.armv4l
/yakuza.arm5
/yakuza.arm5n
/yakuza.arm6
/yakuza.arm7
/yakuza.dbg
/yakuza.i586
/yakuza.i686
/yakuza.m68k
/yakuza.mips
/yakuza.mips64
/yakuza.mpsl
/yakuza.ppc
/yakuza.sh4
/yakuza.spc
/yakuza.sparc
/yakuza.x32
/yakuza.x64
/yakuza.x86
/yakuza.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083489293186752512
# Reference: https://twitter.com/VessOnSecurity/status/1138765917528166401

/Freya.arc
/Freya.arm
/Freya.arm4
/Freya.armv4l
/Freya.arm5
/Freya.arm5n
/Freya.arm6
/Freya.arm7
/Freya.dbg
/Freya.i586
/Freya.i686
/Freya.m68k
/Freya.mips
/Freya.mips64
/Freya.mpsl
/Freya.ppc
/Freya.sh4
/Freya.spc
/Freya.sparc
/Freya.x32
/Freya.x64
/Freya.x86
/Freya.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083490463749832706

/aisha.arc
/aisha.arm
/aisha.arm4
/aisha.armv4l
/aisha.arm5
/aisha.arm5n
/aisha.arm6
/aisha.arm7
/aisha.dbg
/aisha.i586
/aisha.i686
/aisha.m68k
/aisha.mips
/aisha.mips64
/aisha.mpsl
/aisha.ppc
/aisha.sh4
/aisha.spc
/aisha.sparc
/aisha.x32
/aisha.x64
/aisha.x86
/aisha.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1090839291998003202

/kowei.arc
/kowei.arm
/kowei.arm4
/kowei.armv4l
/kowei.arm5
/kowei.arm5n
/kowei.arm6
/kowei.arm7
/kowei.dbg
/kowei.i586
/kowei.i686
/kowei.m68k
/kowei.mips
/kowei.mips64
/kowei.mpsl
/kowei.ppc
/kowei.sh4
/kowei.spc
/kowei.sparc
/kowei.x32
/kowei.x64
/kowei.x86
/kowei.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1091096902764916736

/Cakle.arc
/Cakle.arm
/Cakle.arm4
/Cakle.armv4l
/Cakle.arm5
/Cakle.arm5n
/Cakle.arm6
/Cakle.arm7
/Cakle.dbg
/Cakle.i586
/Cakle.i686
/Cakle.m68k
/Cakle.mips
/Cakle.mips64
/Cakle.mpsl
/Cakle.ppc
/Cakle.sh4
/Cakle.spc
/Cakle.sparc
/Cakle.x32
/Cakle.x64
/Cakle.x86
/Cakle.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1091518821578432512

/blackc.arc
/blackc.arm
/blackc.arm4
/blackc.armv4l
/blackc.arm5
/blackc.arm5n
/blackc.arm6
/blackc.arm7
/blackc.dbg
/blackc.i586
/blackc.i686
/blackc.m68k
/blackc.mips
/blackc.mips64
/blackc.mpsl
/blackc.ppc
/blackc.sh4
/blackc.spc
/blackc.sparc
/blackc.x32
/blackc.x64
/blackc.x86

# Reference: https://twitter.com/SugitaMuchi/status/1091978407691223040

/Shatter.arc
/Shatter.arm
/Shatter.arm4
/Shatter.armv4l
/Shatter.arm5
/Shatter.arm5n
/Shatter.arm6
/Shatter.arm7
/Shatter.dbg
/Shatter.i586
/Shatter.i686
/Shatter.m68k
/Shatter.mips
/Shatter.mips64
/Shatter.mpsl
/Shatter.ppc
/Shatter.sh4
/Shatter.spc
/Shatter.sparc
/Shatter.x32
/Shatter.x64
/Shatter.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104522236646481920

/Slamed.arc
/Slamed.arm
/Slamed.arm4
/Slamed.armv4l
/Slamed.arm5
/Slamed.arm5n
/Slamed.arm6
/Slamed.arm7
/Slamed.dbg
/Slamed.i586
/Slamed.i686
/Slamed.m68k
/Slamed.mips
/Slamed.mips64
/Slamed.mpsl
/Slamed.ppc
/Slamed.sh4
/Slamed.spc
/Slamed.sparc
/Slamed.x32
/Slamed.x64
/Slamed.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104524755263139840

/orenji.arc
/orenji.arm
/orenji.arm4
/orenji.arm4l
/orenji.arm4t
/orenji.armv4l
/orenji.arm5
/orenji.arm5n
/orenji.arm6
/orenji.arm7
/orenji.dbg
/orenji.i486
/orenji.i586
/orenji.i686
/orenji.m68k
/orenji.mips
/orenji.mips64
/orenji.mpsl
/orenji.mipsel
/orenji.ppc
/orenji.ppc440
/orenji.root
/orenji.sh
/orenji.sh4
/orenji.spc
/orenji.sparc
/orenji.x32
/orenji.x64
/orenji.x86
/orenji.x86_32
/orenji.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1104552453100331013

/Ares.arc
/Ares.arm
/Ares.arm4
/Ares.armv4l
/Ares.arm5
/Ares.arm5n
/Ares.arm6
/Ares.arm7
/Ares.dbg
/Ares.i586
/Ares.i686
/Ares.m68k
/Ares.mips
/Ares.mips64
/Ares.mpsl
/Ares.ppc
/Ares.sh4
/Ares.spc
/Ares.sparc
/Ares.x32
/Ares.x64
/Ares.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104633777702092800

/onryo.arc
/onryo.arm
/onryo.arm4
/onryo.armv4l
/onryo.arm5
/onryo.arm5n
/onryo.arm6
/onryo.arm7
/onryo.dbg
/onryo.i586
/onryo.i686
/onryo.m68k
/onryo.mips
/onryo.mips64
/onryo.mpsl
/onryo.ppc
/onryo.sh4
/onryo.spc
/onryo.sparc
/onryo.x32
/onryo.x64
/onryo.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104871959072976897

/Eros.arc
/Eros.arm
/Eros.arm4
/Eros.armv4l
/Eros.arm5
/Eros.arm5n
/Eros.arm6
/Eros.arm7
/Eros.dbg
/Eros.i586
/Eros.i686
/Eros.m68k
/Eros.mips
/Eros.mips64
/Eros.mpsl
/Eros.ppc
/Eros.sh4
/Eros.spc
/Eros.sparc
/Eros.x32
/Eros.x64
/Eros.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104914512900050944

/DENIAL.arc
/DENIAL.arm
/DENIAL.arm4
/DENIAL.armv4l
/DENIAL.arm5
/DENIAL.arm5n
/DENIAL.arm6
/DENIAL.arm7
/DENIAL.dbg
/DENIAL.i586
/DENIAL.i686
/DENIAL.m68k
/DENIAL.mips
/DENIAL.mips64
/DENIAL.mpsl
/DENIAL.ppc
/DENIAL.sh4
/DENIAL.spc
/DENIAL.sparc
/DENIAL.x32
/DENIAL.x64
/DENIAL.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104915308765097985

/arc.bot
/arm.bot
/arm4.bot
/armv4l.bot
/arm5.bot
/arm5n.bot
/arm6.bot
/arm7.bot
/dbg.bot
/i586.bot
/i686.bot
/m68k.bot
/mips.bot
/mips64.bot
/mpsl.bot
/ppc.bot
/sh4.bot
/spc.bot
/sparc.bot
/x32.bot
/x64.bot
/x86_64.bot

# Reference: https://twitter.com/SugitaMuchi/status/1106194795876147200

/Khaos.arc
/Khaos.arm
/Khaos.arm4
/Khaos.armv4l
/Khaos.arm5
/Khaos.arm5n
/Khaos.arm6
/Khaos.arm7
/Khaos.dbg
/Khaos.i586
/Khaos.i686
/Khaos.m68k
/Khaos.mips
/Khaos.mips64
/Khaos.mpsl
/Khaos.ppc
/Khaos.sh4
/Khaos.spc
/Khaos.sparc
/Khaos.x32
/Khaos.x64
/Khaos.x86

# Reference: https://twitter.com/1IoTa3/status/1089402171689484289

/jirenv2.sh

# Reference: https://twitter.com/SugitaMuchi/status/1107774813534183424

/haarch64
/haarch64be
/harcle-750d
/harcle-hs38
/hm68k-68xxx
/hmicroblazebe
/hmicroblazeel
/hnios2
/hopenrisc
/hsh-sh4
/hx86-64-core-i7
/hx86-core2
/hx86-i686
/hxtensa
/rootOwO

# Reference: https://twitter.com/SugitaMuchi/status/1106322774560145408

/tron.arc
/tron.arm
/tron.arm4
/tron.armv4l
/tron.arm5
/tron.arm5n
/tron.arm6
/tron.arm7
/tron.dbg
/tron.i486
/tron.i586
/tron.i686
/tron.m68k
/tron.mips
/tron.mips64
/tron.mpsl
/tron.ppc
/tron.sh4
/tron.spc
/tron.sparc
/tron.x32
/tron.x64
/tron.x86

# Reference: https://twitter.com/0xrb/status/1098654743491239944

/loliv4.arc
/loliv4.arm
/loliv4.arm4
/loliv4.armv4l
/loliv4.arm5
/loliv4.arm5n
/loliv4.arm6
/loliv4.arm7
/loliv4.dbg
/loliv4.i486
/loliv4.i586
/loliv4.i686
/loliv4.m68k
/loliv4.mips
/loliv4.mips64
/loliv4.mpsl
/loliv4.ppc
/loliv4.sh4
/loliv4.spc
/loliv4.sparc
/loliv4.x32
/loliv4.x64
/loliv4.x86

# Reference: https://twitter.com/gorimpthon/status/1077435493061541889

/egg.arc
/egg.arm
/egg.arm4
/egg.armv4l
/egg.arm5
/egg.arm5n
/egg.arm6
/egg.arm7
/egg.dbg
/egg.i486
/egg.i586
/egg.i686
/egg.m68k
/egg.mips
/egg.mips64
/egg.mpsl
/egg.ppc
/egg.sh4
/egg.spc
/egg.sparc
/egg.x32
/egg.x64
/egg.x86

# Reference: https://twitter.com/SugitaMuchi/status/1075161057121918977

/WatchDog.arc
/WatchDog.arm
/WatchDog.arm4
/WatchDog.arm4l
/WatchDog.arm4t
/WatchDog.armv4l
/WatchDog.arm5
/WatchDog.arm5n
/WatchDog.arm6
/WatchDog.arm7
/WatchDog.dbg
/WatchDog.i486
/WatchDog.i586
/WatchDog.i686
/WatchDog.m68k
/WatchDog.mips
/WatchDog.mips64
/WatchDog.mpsl
/WatchDog.ppc
/WatchDog.sh4
/WatchDog.spc
/WatchDog.sparc
/WatchDog.x32
/WatchDog.x64
/WatchDog.x86

# Reference: https://twitter.com/gorimpthon/status/1074581436416581632

/airlink.sh

# Reference: https://twitter.com/w0lfvan/status/1074795109915484160

/telnet.arc
/telnet.arm
/telnet.arm4
/telnet.arm4l
/telnet.arm4t
/telnet.armv4l
/telnet.arm5
/telnet.arm5n
/telnet.arm6
/telnet.arm7
/telnet.dbg
/telnet.i486
/telnet.i586
/telnet.i686
/telnet.m68k
/telnet.mips
/telnet.mips64
/telnet.mpsl
/telnet.ppc
/telnet.sh4
/telnet.spc
/telnet.sparc
/telnet.x32
/telnet.x64
/telnet.x86

# Reference: https://twitter.com/w0lfvan/status/1072635199157100550

/tsuki.arc
/tsuki.arm
/tsuki.arm4
/tsuki.arm4l
/tsuki.arm4t
/tsuki.armv4l
/tsuki.arm5
/tsuki.arm5n
/tsuki.arm6
/tsuki.arm7
/tsuki.dbg
/tsuki.i486
/tsuki.i586
/tsuki.i686
/tsuki.m68k
/tsuki.mips
/tsuki.mips64
/tsuki.mpsl
/tsuki.ppc
/tsuki.sh4
/tsuki.spc
/tsuki.sparc
/tsuki.x32
/tsuki.x64
/tsuki.x86

# Reference: https://twitter.com/SugitaMuchi/status/1069718639429902336

/crushi.arc
/crushi.arm
/crushi.arm4
/crushi.arm4l
/crushi.arm4t
/crushi.armv4l
/crushi.arm5
/crushi.arm5n
/crushi.arm6
/crushi.arm7
/crushi.dbg
/crushi.i486
/crushi.i586
/crushi.i686
/crushi.m68k
/crushi.mips
/crushi.mips64
/crushi.mpsl
/crushi.ppc
/crushi.sh4
/crushi.spc
/crushi.sparc
/crushi.x32
/crushi.x64
/crushi.x86

# Reference: https://twitter.com/SugitaMuchi/status/1069717302063452160

/Trinity.arc
/Trinity.arm
/Trinity.arm4
/Trinity.arm4l
/Trinity.arm4t
/Trinity.armv4l
/Trinity.arm5
/Trinity.arm5n
/Trinity.arm6
/Trinity.arm7
/Trinity.dbg
/Trinity.i486
/Trinity.i586
/Trinity.i686
/Trinity.m68k
/Trinity.mips
/Trinity.mips64
/Trinity.mpsl
/Trinity.ppc
/Trinity.ppc440
/Trinity.sh4
/Trinity.spc
/Trinity.sparc
/Trinity.x32
/Trinity.x64
/Trinity.x86

# Reference: https://twitter.com/w0lfvan/status/1069208800815665152

/sector.arc
/sector.arm
/sector.arm4
/sector.arm4l
/sector.arm4t
/sector.armv4l
/sector.arm5
/sector.arm5n
/sector.arm6
/sector.arm7
/sector.dbg
/sector.i486
/sector.i586
/sector.i686
/sector.m68k
/sector.mips
/sector.mips64
/sector.mpsl
/sector.ppc
/sector.ppc440
/sector.sh4
/sector.spc
/sector.sparc
/sector.x32
/sector.x64
/sector.x86

# Reference: https://twitter.com/SugitaMuchi/status/1066835439326089216

/Nikkah.arc
/Nikkah.arm
/Nikkah.arm4
/Nikkah.arm4l
/Nikkah.arm4t
/Nikkah.armv4l
/Nikkah.arm5
/Nikkah.arm5n
/Nikkah.arm6
/Nikkah.arm7
/Nikkah.dbg
/Nikkah.i486
/Nikkah.i586
/Nikkah.i686
/Nikkah.m68k
/Nikkah.mips
/Nikkah.mips64
/Nikkah.mpsl
/Nikkah.ppc
/Nikkah.ppc440
/Nikkah.sh4
/Nikkah.spc
/Nikkah.sparc
/Nikkah.x32
/Nikkah.x64
/Nikkah.x86

# Reference: https://twitter.com/ankit_anubhav/status/1065156254526595072
# Reference: https://blog.netlab.360.com/warning-satori-a-new-mirai-variant-is-spreading-in-worm-style-on-port-37215-and-52869-en/
# Reference: https://www.hybrid-analysis.com/sample/f9a4c6857bb3a4feebb232c54e6ecffd3742ce598b48e975d675b38232b8e30e?environmentId=300

95.211.123.69:7645
network.bigbotpein.com
control.almashosting.ru
/okiru.arc
/okiru.arm
/okiru.arm4
/okiru.arm4l
/okiru.arm4t
/okiru.arm4tl
/okiru.armv4l
/okiru.arm5
/okiru.arm5n
/okiru.armv5l
/okiru.arm6
/okiru.armv6l
/okiru.arm7
/okiru.armv7l
/okiru.dbg
/okiru.i486
/okiru.i586
/okiru.i686
/okiru.m68k
/okiru.mips
/okiru.mips64
/okiru.mipsel
/okiru.mpsl
/okiru.ppc
/okiru.ppc440
/okiru.powerppc
/okiru.root
/okiru.sh
/okiru.sh4
/okiru.spc
/okiru.sparc
/okiru.superh
/okiru.x32
/okiru.x64
/okiru.x86
/okiru.x86_32
/okiru.x86_64
/cryptonite.arc
/cryptonite.arm
/cryptonite.arm4
/cryptonite.arm4l
/cryptonite.arm4t
/cryptonite.arm4tl
/cryptonite.armv4l
/cryptonite.arm5
/cryptonite.arm5n
/cryptonite.armv5l
/cryptonite.arm6
/cryptonite.armv6l
/cryptonite.arm7
/cryptonite.armv7l
/cryptonite.dbg
/cryptonite.i486
/cryptonite.i586
/cryptonite.i686
/cryptonite.m68k
/cryptonite.mips
/cryptonite.mips64
/cryptonite.mipsel
/cryptonite.mpsl
/cryptonite.ppc
/cryptonite.ppc440
/cryptonite.powerppc
/cryptonite.root
/cryptonite.sh
/cryptonite.sh4
/cryptonite.spc
/cryptonite.sparc
/cryptonite.x32
/cryptonite.x64
/cryptonite.x86
/cryptonite.x86_32
/cryptonite.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1064724293206999040

/Nikka.arc
/Nikka.arm
/Nikka.arm4
/Nikka.arm4l
/Nikka.arm4t
/Nikka.armv4l
/Nikka.arm5
/Nikka.arm5n
/Nikka.arm6
/Nikka.arm7
/Nikka.dbg
/Nikka.i486
/Nikka.i586
/Nikka.i686
/Nikka.m68k
/Nikka.mips
/Nikka.mips64
/Nikka.mpsl
/Nikka.ppc
/Nikka.ppc440
/Nikka.sh4
/Nikka.spc
/Nikka.sparc
/Nikka.x32
/Nikka.x64
/Nikka.x86

# Reference: https://twitter.com/SugitaMuchi/status/1064295597388136449

/larry.arc
/larry.arm
/larry.arm4
/larry.arm4l
/larry.arm4t
/larry.armv4l
/larry.arm5
/larry.arm5n
/larry.arm6
/larry.arm7
/larry.dbg
/larry.i486
/larry.i586
/larry.i686
/larry.m68k
/larry.mips
/larry.mips64
/larry.mpsl
/larry.ppc
/larry.ppc440
/larry.root
/larry.sh4
/larry.spc
/larry.sparc
/larry.x32
/larry.x64
/larry.x86
/lry.arc
/lry.arm
/lry.arm4
/lry.arm4l
/lry.arm4t
/lry.armv4l
/lry.arm5
/lry.arm5n
/lry.arm6
/lry.arm7
/lry.dbg
/lry.i486
/lry.i586
/lry.i686
/lry.m68k
/lry.mips
/lry.mips64
/lry.mpsl
/lry.ppc
/lry.ppc440
/lry.root
/lry.sh4
/lry.spc
/lry.sparc
/lry.x32
/lry.x64
/lry.x86
/lry.x86_32
/lry.x86_64
/x86huawei

# Reference: https://twitter.com/SugitaMuchi/status/1063962452323328000

/kwari.arc
/kwari.arm
/kwari.arm4
/kwari.arm4l
/kwari.arm4t
/kwari.armv4l
/kwari.arm5
/kwari.arm5n
/kwari.arm6
/kwari.arm7
/kwari.dbg
/kwari.i486
/kwari.i586
/kwari.i686
/kwari.m68k
/kwari.mips
/kwari.mips64
/kwari.mpsl
/kwari.ppc
/kwari.ppc440
/kwari.root
/kwari.sh4
/kwari.spc
/kwari.sparc
/kwari.x32
/kwari.x64
/kwari.x86
/kwari.x86_32
/kwari.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1063282314799542272

/hax.arc
/hax.arm
/hax.arm4
/hax.arm4l
/hax.arm4t
/hax.armv4l
/hax.arm5
/hax.arm5n
/hax.arm6
/hax.arm7
/hax.dbg
/hax.i486
/hax.i586
/hax.i686
/hax.m68k
/hax.mips
/hax.mips64
/hax.mpsl
/hax.ppc
/hax.ppc440
/hax.root
/hax.sh4
/hax.spc
/hax.sparc
/hax.x32
/hax.x64
/hax.x86
/hax.x86_32
/hax.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1063085934109851648

/VPNFilter.arc
/VPNFilter.arm
/VPNFilter.arm4
/VPNFilter.arm4l
/VPNFilter.arm4t
/VPNFilter.armv4l
/VPNFilter.arm5
/VPNFilter.arm5n
/VPNFilter.arm6
/VPNFilter.arm7
/VPNFilter.dbg
/VPNFilter.i486
/VPNFilter.i586
/VPNFilter.i686
/VPNFilter.m68k
/VPNFilter.mips
/VPNFilter.mips64
/VPNFilter.mpsl
/VPNFilter.ppc
/VPNFilter.ppc440
/VPNFilter.root
/VPNFilter.sh4
/VPNFilter.spc
/VPNFilter.sparc
/VPNFilter.x32
/VPNFilter.x64
/VPNFilter.x86
/VPNFilter.x86_32
/VPNFilter.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1062528904563281920

/ombra.arc
/ombra.arm
/ombra.arm4
/ombra.arm4l
/ombra.arm4t
/ombra.armv4l
/ombra.arm5
/ombra.arm5n
/ombra.arm6
/ombra.arm7
/ombra.dbg
/ombra.i486
/ombra.i586
/ombra.i686
/ombra.m68k
/ombra.mips
/ombra.mips64
/ombra.mpsl
/ombra.ppc
/ombra.ppc440
/ombra.root
/ombra.sh4
/ombra.spc
/ombra.sparc
/ombra.x32
/ombra.x64
/ombra.x86
/ombra.x86_32
/ombra.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1062523363195637760

/tnx12.arc
/tnx12.arm
/tnx12.arm4
/tnx12.arm4l
/tnx12.arm4t
/tnx12.armv4l
/tnx12.arm5
/tnx12.arm5n
/tnx12.arm6
/tnx12.arm7
/tnx12.dbg
/tnx12.i486
/tnx12.i586
/tnx12.i686
/tnx12.m68k
/tnx12.mips
/tnx12.mips64
/tnx12.mpsl
/tnx12.ppc
/tnx12.ppc440
/tnx12.root
/tnx12.sh4
/tnx12.spc
/tnx12.sparc
/tnx12.x32
/tnx12.x64
/tnx12.x86
/tnx12.x86_32
/tnx12.x86_64
/tnx12015.sh

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-iot-malware-updated-with-mining-and-backdoor-commands-targets-wemo-devices/
# Reference: https://blogs.akamai.com/sitr/2019/06/latest-echobot-26-infection-vectors.html

/ECHOBOT.arc
/ECHOBOT.arm
/ECHOBOT.arm4
/ECHOBOT.arm4l
/ECHOBOT.arm4t
/ECHOBOT.armv4l
/ECHOBOT.arm5
/ECHOBOT.arm5n
/ECHOBOT.arm6
/ECHOBOT.arm7
/ECHOBOT.dbg
/ECHOBOT.i486
/ECHOBOT.i586
/ECHOBOT.i686
/ECHOBOT.m68k
/ECHOBOT.mips
/ECHOBOT.mips64
/ECHOBOT.mpsl
/ECHOBOT.mipsel
/ECHOBOT.ppc
/ECHOBOT.ppc440
/ECHOBOT.root
/ECHOBOT.sh
/ECHOBOT.sh4
/ECHOBOT.spc
/ECHOBOT.sparc
/ECHOBOT.x32
/ECHOBOT.x64
/ECHOBOT.x86
/ECHOBOT.x86_32
/ECHOBOT.x86_64
/ECHOBOT1.sh
/UqHDZbqr9S.sh

# Reference: https://twitter.com/_odisseus/status/1114055047221006336

/Suicide_Binaries.sh
/Suicide_ntpd
/Suicide_sshd
/Suicide_openssh
/Suicide_bash
/Suicide_tftp
/Suicide_wget
/Suicide_cron
/Suicide_ftp
/Suicide_pftp
/Suicide_sh

# Reference: https://perchsecurity.com/perch-news/threat-report-sunday-february-3rd-2019/ (Mirai-based Cayosin variation)

hostnamepxssy.club
/cock.arc
/cock.arm
/cock.arm4
/cock.arm4l
/cock.arm4t
/cock.armv4l
/cock.arm5
/cock.arm5n
/cock.arm6
/cock.arm7
/cock.dbg
/cock.i486
/cock.i586
/cock.i686
/cock.m68k
/cock.mips
/cock.mips64
/cock.mpsl
/cock.ppc
/cock.ppc440
/cock.root
/cock.sh
/cock.sh4
/cock.spc
/cock.sparc
/cock.x32
/cock.x64
/cock.x86
/cock.x86_32
/cock.x86_64

# Reference: https://imgur.com/a/4YxuSfV (Mirai-based Cayosin variation)

hakaiboatnet.pw

# Reference: https://twitter.com/bad_packets/status/1115117347537215488

/shenzi.arc
/shenzi.arm
/shenzi.arm4
/shenzi.arm4l
/shenzi.arm4t
/shenzi.armv4l
/shenzi.arm5
/shenzi.arm5n
/shenzi.arm6
/shenzi.arm7
/shenzi.dbg
/shenzi.i486
/shenzi.i586
/shenzi.i686
/shenzi.m68k
/shenzi.mips
/shenzi.mips64
/shenzi.mpsl
/shenzi.ppc
/shenzi.ppc440
/shenzi.root
/shenzi.sh
/shenzi.sh4
/shenzi.spc
/shenzi.sparc
/shenzi.x32
/shenzi.x64
/shenzi.x86
/shenzi.x86_32
/shenzi.x86_64

# Reference: https://unit42.paloaltonetworks.com/mirai-compiled-for-new-processor-surfaces/
# Reference: https://twitter.com/bad_packets/status/1128029491010269184

/haarch64
/haarch64be
/harm4
/harm5
/harm6
/harm7
/hm68k
/hm68k-68xxx
/hmicroblazebe
/hmicroblazeel
/hmips
/hmips64
/hmipsl
/hmpsl
/hnios2
/hopenrisc
# /hppc
/hsh-sh4
/hsh4
/hspc
/hx86
/hx64
/hx86-64-core-i7
/hx86-core2
/hx86-i486
/hx86-i586
/hx86-i686
/hxtensa

# Reference: https://twitter.com/bad_packets/status/1115508643246399488
# Reference: https://twitter.com/0xrb/status/1114065129392431104

/ronin.dlink
/ronin.arc
/ronin.arm
/ronin.arm4
/ronin.arm4l
/ronin.arm4t
/ronin.armv4l
/ronin.arm5
/ronin.arm5n
/ronin.arm6
/ronin.arm7
/ronin.dbg
/ronin.i486
/ronin.i586
/ronin.i686
/ronin.m68k
/ronin.mips
/ronin.mips64
/ronin.mpsl
/ronin.mipsel
/ronin.ppc
/ronin.ppc440
/ronin.root
/ronin.sh
/ronin.sh4
/ronin.spc
/ronin.sparc
/ronin.x32
/ronin.x64
/ronin.x86
/ronin.x86_32
/ronin.x86_64

# Reference: https://twitter.com/bad_packets/status/1114705254195519489

/akira.arc
/akira.arm
/akira.arm4
/akira.arm4l
/akira.arm4t
/akira.armv4l
/akira.arm5
/akira.arm5n
/akira.arm6
/akira.arm7
/akira.dbg
/akira.i486
/akira.i586
/akira.i686
/akira.m68k
/akira.mips
/akira.mips64
/akira.mpsl
/akira.ppc
/akira.ppc440
/akira.root
/akira.sh
/akira.sh4
/akira.spc
/akira.sparc
/akira.x32
/akira.x64
/akira.x86
/akira.x86_32
/akira.x86_64

# Reference: https://twitter.com/Artilllerie/status/1115556048243437568
# Reference: https://www.bitdefender.com/files/News/CaseStudies/study/319/Bitdefender-PR-Whitepaper-DarkNexus-creat4349-en-EN-interactive.pdf

cnc.subby.xyz
scan.subby.xyz
51.68.214.116:3301

# Reference: https://twitter.com/zom3y3/status/1115481065701830657

149.255.36.139:1747
/bl.arc
/bl.arm
/bl.arm4
/bl.arm4l
/bl.arm4t
/bl.armv4l
/bl.arm5
/bl.arm5n
/bl.arm6
/bl.arm7
/bl.dbg
/bl.i486
/bl.i586
/bl.i686
/bl.m68k
/bl.mips
/bl.mips64
/bl.mpsl
/bl.ppc
/bl.ppc440
/bl.root
/bl.sh
/bl.sh4
/bl.spc
/bl.sparc
/bl.x32
/bl.x64
/bl.x86
/bl.x86_32
/bl.x86_64

# Reference: https://twitter.com/0xrb/status/1116988853812903936

/synbin.sh
/synbotpp.arc
/synbotpp.arm
/synbotpp.arm4
/synbotpp.arm4l
/synbotpp.arm4t
/synbotpp.armv4l
/synbotpp.arm5
/synbotpp.arm5n
/synbotpp.arm6
/synbotpp.arm7
/synbotpp.dbg
/synbotpp.i486
/synbotpp.i586
/synbotpp.i6
/synbotpp.i686
/synbotpp.m68k
/synbotpp.mips
/synbotpp.mips64
/synbotpp.mpsl
/synbotpp.mipsel
/synbotpp.ppc
/synbotpp.ppc440
/synbotpp.root
/synbotpp.sh
/synbotpp.sh4
/synbotpp.spc
/synbotpp.sparc
/synbotpp.x32
/synbotpp.x64
/synbotpp.x86
/synbotpp.x86_32
/synbotpp.x86_64

# Reference: https://twitter.com/0xrb/status/1116896431468699648

/Vanish.arc
/Vanish.arm
/Vanish.arm4
/Vanish.arm4l
/Vanish.arm4t
/Vanish.armv4l
/Vanish.arm5
/Vanish.arm5n
/Vanish.arm6
/Vanish.arm7
/Vanish.dbg
/Vanish.i486
/Vanish.i586
/Vanish.i686
/Vanish.m68k
/Vanish.mips
/Vanish.mips64
/Vanish.mpsl
/Vanish.mipsel
/Vanish.ppc
/Vanish.ppc440
/Vanish.root
/Vanish.sh
/Vanish.sh4
/Vanish.spc
/Vanish.sparc
/Vanish.x32
/Vanish.x64
/Vanish.x86
/Vanish.x86_32
/Vanish.x86_64

# Reference: https://twitter.com/0xrb/status/1115913590450589696

104.168.140.207:9375
/g0dm0d333.arc
/g0dm0d333.arm
/g0dm0d333.arm4
/g0dm0d333.arm4l
/g0dm0d333.arm4t
/g0dm0d333.armv4l
/g0dm0d333.arm5
/g0dm0d333.arm5n
/g0dm0d333.arm6
/g0dm0d333.arm7
/g0dm0d333.dbg
/g0dm0d333.i486
/g0dm0d333.i586
/g0dm0d333.i686
/g0dm0d333.m68k
/g0dm0d333.mips
/g0dm0d333.mips64
/g0dm0d333.mpsl
/g0dm0d333.mipsel
/g0dm0d333.ppc
/g0dm0d333.ppc440
/g0dm0d333.root
/g0dm0d333.sh
/g0dm0d333.sh4
/g0dm0d333.spc
/g0dm0d333.sparc
/g0dm0d333.x32
/g0dm0d333.x64
/g0dm0d333.x86
/g0dm0d333.x86_32
/g0dm0d333.x86_64

# Reference: https://twitter.com/executemalware/status/1009842279924813826

/mirai-ssh.arc
/mirai-ssh.arm
/mirai-ssh.arm4
/mirai-ssh.arm4l
/mirai-ssh.arm4t
/mirai-ssh.armv4l
/mirai-ssh.arm5
/mirai-ssh.arm5n
/mirai-ssh.arm6
/mirai-ssh.arm7
/mirai-ssh.dbg
/mirai-ssh.i486
/mirai-ssh.i586
/mirai-ssh.i686
/mirai-ssh.m68k
/mirai-ssh.mips
/mirai-ssh.mips64
/mirai-ssh.mpsl
/mirai-ssh.mipsel
/mirai-ssh.ppc
/mirai-ssh.ppc440
/mirai-ssh.root
/mirai-ssh.sh
/mirai-ssh.sh4
/mirai-ssh.spc
/mirai-ssh.sparc
/mirai-ssh.x32
/mirai-ssh.x64
/mirai-ssh.x86
/mirai-ssh.x86_32
/mirai-ssh.x86_64

# Reference: https://twitter.com/GranetMan/status/831622173068509185

/dlr.arc
/dlr.arm
/dlr.arm4
/dlr.arm4l
/dlr.arm4t
/dlr.armv4l
/dlr.arm5
/dlr.arm5n
/dlr.arm6
/dlr.arm7
/dlr.dbg
/dlr.i486
/dlr.i586
/dlr.i686
/dlr.m68k
/dlr.mips
/dlr.mips64
/dlr.mpsl
/dlr.mipsel
/dlr.ppc
/dlr.ppc440
/dlr.root
/dlr.sh
/dlr.sh4
/dlr.spc
/dlr.sparc
/dlr.x32
/dlr.x64
/dlr.x86
/dlr.x86_32
/dlr.x86_64

# Reference: https://twitter.com/bad_packets/status/1117596904768987136

love.thotiana.live
/kek.arc
/kek.arm
/kek.arm4
/kek.arm4l
/kek.arm4t
/kek.armv4l
/kek.arm5
/kek.arm5n
/kek.arm6
/kek.arm7
/kek.dbg
/kek.i486
/kek.i586
/kek.i686
/kek.m68k
/kek.mips
/kek.mips64
/kek.mpsl
/kek.mipsel
/kek.ppc
/kek.ppc440
/kek.root
/kek.sh
/kek.sh4
/kek.spc
/kek.sparc
/kek.x32
/kek.x64
/kek.x86
/kek.x86_32
/kek.x86_64

# Reference: https://twitter.com/0xrb/status/1118418257671680001

/ZuoIdj.arc
/ZuoIdj.arm
/ZuoIdj.arm4
/ZuoIdj.arm4l
/ZuoIdj.arm4t
/ZuoIdj.armv4l
/ZuoIdj.arm5
/ZuoIdj.arm5n
/ZuoIdj.arm6
/ZuoIdj.arm7
/ZuoIdj.dbg
/ZuoIdj.i486
/ZuoIdj.i586
/ZuoIdj.i686
/ZuoIdj.m68k
/ZuoIdj.mips
/ZuoIdj.mips64
/ZuoIdj.mpsl
/ZuoIdj.mipsel
/ZuoIdj.ppc
/ZuoIdj.ppc440
/ZuoIdj.root
/ZuoIdj.sh
/ZuoIdj.sh4
/ZuoIdj.spc
/ZuoIdj.sparc
/ZuoIdj.x32
/ZuoIdj.x64
/ZuoIdj.x86
/ZuoIdj.x86_32
/ZuoIdj.x86_64

# Reference: https://twitter.com/0xrb/status/1118400700545929216

/liunx.arc
/liunx.arm
/liunx.arm4
/liunx.arm4l
/liunx.arm4t
/liunx.armv4l
/liunx.arm5
/liunx.arm5n
/liunx.arm6
/liunx.arm7
/liunx.dbg
/liunx.i486
/liunx.i586
/liunx.i686
/liunx.m68k
/liunx.mips
/liunx.mips64
/liunx.mpsl
/liunx.mipsel
/liunx.ppc
/liunx.ppc440
/liunx.root
/liunx.sh
/liunx.sh4
/liunx.spc
/liunx.sparc
/liunx.x32
/liunx.x64
/liunx.x86
/liunx.x86_32
/liunx.x86_64

# Reference: https://twitter.com/0xrb/status/1115923901710602240

/gadfe.arc
/gadfe.arm
/gadfe.arm4
/gadfe.arm4l
/gadfe.arm4t
/gadfe.armv4l
/gadfe.arm5
/gadfe.arm5n
/gadfe.arm6
/gadfe.arm7
/gadfe.dbg
/gadfe.i486
/gadfe.i586
/gadfe.i686
/gadfe.m68k
/gadfe.mips
/gadfe.mips64
/gadfe.mpsl
/gadfe.mipsel
/gadfe.ppc
/gadfe.ppc440
/gadfe.root
/gadfe.sh
/gadfe.sh4
/gadfe.spc
/gadfe.sparc
/gadfe.x32
/gadfe.x64
/gadfe.x86
/gadfe.x86_32
/gadfe.x86_64
/gafdse.arc
/gafdse.arm
/gafdse.arm4
/gafdse.arm4l
/gafdse.arm4t
/gafdse.armv4l
/gafdse.arm5
/gafdse.arm5n
/gafdse.arm6
/gafdse.arm7
/gafdse.dbg
/gafdse.i486
/gafdse.i586
/gafdse.i686
/gafdse.m68k
/gafdse.mips
/gafdse.mips64
/gafdse.mpsl
/gafdse.mipsel
/gafdse.ppc
/gafdse.ppc440
/gafdse.root
/gafdse.sh
/gafdse.sh4
/gafdse.spc
/gafdse.sparc
/gafdse.x32
/gafdse.x64
/gafdse.x86
/gafdse.x86_32
/gafdse.x86_64
/gaefds.arc
/gaefds.arm
/gaefds.arm4
/gaefds.arm4l
/gaefds.arm4t
/gaefds.armv4l
/gaefds.arm5
/gaefds.arm5n
/gaefds.arm6
/gaefds.arm7
/gaefds.dbg
/gaefds.i486
/gaefds.i586
/gaefds.i686
/gaefds.m68k
/gaefds.mips
/gaefds.mips64
/gaefds.mpsl
/gaefds.mipsel
/gaefds.ppc
/gaefds.ppc440
/gaefds.root
/gaefds.sh
/gaefds.sh4
/gaefds.spc
/gaefds.sparc
/gaefds.x32
/gaefds.x64
/gaefds.x86
/gaefds.x86_32
/gaefds.x86_64
/sdfza.arc
/sdfza.arm
/sdfza.arm4
/sdfza.arm4l
/sdfza.arm4t
/sdfza.armv4l
/sdfza.arm5
/sdfza.arm5n
/sdfza.arm6
/sdfza.arm7
/sdfza.dbg
/sdfza.i486
/sdfza.i586
/sdfza.i686
/sdfza.m68k
/sdfza.mips
/sdfza.mips64
/sdfza.mpsl
/sdfza.mipsel
/sdfza.ppc
/sdfza.ppc440
/sdfza.root
/sdfza.sh
/sdfza.sh4
/sdfza.spc
/sdfza.sparc
/sdfza.x32
/sdfza.x64
/sdfza.x86
/sdfza.x86_32
/sdfza.x86_64
/yafsda.arc
/yafsda.arm
/yafsda.arm4
/yafsda.arm4l
/yafsda.arm4t
/yafsda.armv4l
/yafsda.arm5
/yafsda.arm5n
/yafsda.arm6
/yafsda.arm7
/yafsda.dbg
/yafsda.i486
/yafsda.i586
/yafsda.i686
/yafsda.m68k
/yafsda.mips
/yafsda.mips64
/yafsda.mpsl
/yafsda.mipsel
/yafsda.ppc
/yafsda.ppc440
/yafsda.root
/yafsda.sh
/yafsda.sh4
/yafsda.spc
/yafsda.sparc
/yafsda.x32
/yafsda.x64
/yafsda.x86
/yafsda.x86_32
/yafsda.x86_64
/yaksddfs.arc
/yaksddfs.arm
/yaksddfs.arm4
/yaksddfs.arm4l
/yaksddfs.arm4t
/yaksddfs.armv4l
/yaksddfs.arm5
/yaksddfs.arm5n
/yaksddfs.arm6
/yaksddfs.arm7
/yaksddfs.dbg
/yaksddfs.i486
/yaksddfs.i586
/yaksddfs.i686
/yaksddfs.m68k
/yaksddfs.mips
/yaksddfs.mips64
/yaksddfs.mpsl
/yaksddfs.mipsel
/yaksddfs.ppc
/yaksddfs.ppc440
/yaksddfs.root
/yaksddfs.sh
/yaksddfs.sh4
/yaksddfs.spc
/yaksddfs.sparc
/yaksddfs.x32
/yaksddfs.x64
/yaksddfs.x86
/yaksddfs.x86_32
/yaksddfs.x86_64
/yasddfa.arc
/yasddfa.arm
/yasddfa.arm4
/yasddfa.arm4l
/yasddfa.arm4t
/yasddfa.armv4l
/yasddfa.arm5
/yasddfa.arm5n
/yasddfa.arm6
/yasddfa.arm7
/yasddfa.dbg
/yasddfa.i486
/yasddfa.i586
/yasddfa.i686
/yasddfa.m68k
/yasddfa.mips
/yasddfa.mips64
/yasddfa.mpsl
/yasddfa.mipsel
/yasddfa.ppc
/yasddfa.ppc440
/yasddfa.root
/yasddfa.sh
/yasddfa.sh4
/yasddfa.spc
/yasddfa.sparc
/yasddfa.x32
/yasddfa.x64
/yasddfa.x86
/yasddfa.x86_32
/yasddfa.x86_64
/ysdfd.arc
/ysdfd.arm
/ysdfd.arm4
/ysdfd.arm4l
/ysdfd.arm4t
/ysdfd.armv4l
/ysdfd.arm5
/ysdfd.arm5n
/ysdfd.arm6
/ysdfd.arm7
/ysdfd.dbg
/ysdfd.i486
/ysdfd.i586
/ysdfd.i686
/ysdfd.m68k
/ysdfd.mips
/ysdfd.mips64
/ysdfd.mpsl
/ysdfd.mipsel
/ysdfd.ppc
/ysdfd.ppc440
/ysdfd.root
/ysdfd.sh
/ysdfd.sh4
/ysdfd.spc
/ysdfd.sparc
/ysdfd.x32
/ysdfd.x64
/ysdfd.x86
/ysdfd.x86_32
/ysdfd.x86_64
/yafdza.arc
/yafdza.arm
/yafdza.arm4
/yafdza.arm4l
/yafdza.arm4t
/yafdza.armv4l
/yafdza.arm5
/yafdza.arm5n
/yafdza.arm6
/yafdza.arm7
/yafdza.dbg
/yafdza.i486
/yafdza.i586
/yafdza.i686
/yafdza.m68k
/yafdza.mips
/yafdza.mips64
/yafdza.mpsl
/yafdza.mipsel
/yafdza.ppc
/yafdza.ppc440
/yafdza.root
/yafdza.sh
/yafdza.sh4
/yafdza.spc
/yafdza.sparc
/yafdza.x32
/yafdza.x64
/yafdza.x86
/yafdza.x86_32
/yafdza.x86_64

# Reference: https://twitter.com/0xrb/status/1114055819400699904

/pussy.sh
/legion.arc
/legion.arm
/legion.arm4
/legion.arm4l
/legion.arm4t
/legion.armv4l
/legion.arm5
/legion.arm5n
/legion.arm6
/legion.arm7
/legion.dbg
/legion.i486
/legion.i586
/legion.i686
/legion.m68k
/legion.mips
/legion.mips64
/legion.mpsl
/legion.mipsel
/legion.ppc
/legion.ppc440
/legion.root
/legion.sh
/legion.sh4
/legion.spc
/legion.sparc
/legion.x32
/legion.x64
/legion.x86
/legion.x86_32
/legion.x86_64

# Reference: https://twitter.com/0xrb/status/1114051759536627713

/Kiexi.arc
/Kiexi.arm
/Kiexi.arm4
/Kiexi.arm4l
/Kiexi.arm4t
/Kiexi.armv4l
/Kiexi.arm5
/Kiexi.arm5n
/Kiexi.arm6
/Kiexi.arm7
/Kiexi.dbg
/Kiexi.i486
/Kiexi.i586
/Kiexi.i686
/Kiexi.m68k
/Kiexi.mips
/Kiexi.mips64
/Kiexi.mpsl
/Kiexi.mipsel
/Kiexi.ppc
/Kiexi.ppc440
/Kiexi.root
/Kiexi.sh
/Kiexi.sh4
/Kiexi.spc
/Kiexi.sparc
/Kiexi.x32
/Kiexi.x64
/Kiexi.x86
/Kiexi.x86_32
/Kiexi.x86_64

# Reference: https://twitter.com/0xrb/status/1113496589354639361

/Matrix.arc
/Matrix.arm
/Matrix.arm4
/Matrix.arm4l
/Matrix.arm4t
/Matrix.armv4l
/Matrix.arm5
/Matrix.arm5n
/Matrix.arm6
/Matrix.arm7
/Matrix.dbg
/Matrix.i486
/Matrix.i586
/Matrix.i686
/Matrix.m68k
/Matrix.mips
/Matrix.mips64
/Matrix.mpsl
/Matrix.mipsel
/Matrix.ppc
/Matrix.ppc440
/Matrix.root
/Matrix.sh
/Matrix.sh4
/Matrix.spc
/Matrix.sparc
/Matrix.x32
/Matrix.x64
/Matrix.x86
/Matrix.x86_32
/Matrix.x86_64

# Reference: https://twitter.com/0xrb/status/1113132492008099845

/arc.orenji
/arm.orenji
/arm4.orenji
/armv4l.orenji
/arm5.orenji
/arm5n.orenji
/arm6.orenji
/arm7.orenji
/dbg.orenji
/i586.orenji
/i686.orenji
/m68k.orenji
/mips.orenji
/mips64.orenji
/mpsl.orenji
/ppc.orenji
/sh4.orenji
/spc.orenji
/sparc.orenji
/x32.orenji
/x64.orenji
/x86_64.orenji

# Reference: https://twitter.com/0xrb/status/1108635699325136896

/momentum.arc
/momentum.arm
/momentum.arm4
/momentum.arm4l
/momentum.arm4t
/momentum.armv4l
/momentum.arm5
/momentum.arm5n
/momentum.armv5l
/momentum.arm6
/momentum.armv6l
/momentum.arm7
/momentum.dbg
/momentum.i486
/momentum.i586
/momentum.i686
/momentum.m68k
/momentum.mips
/momentum.mips64
/momentum.mpsl
/momentum.mipsel
/momentum.ppc
/momentum.powerpc
/momentum.ppc440
/momentum.root
/momentum.sh
/momentum.sh4
/momentum.spc
/momentum.sparc
/momentum.x32
/momentum.x64
/momentum.x86
/momentum.x86_32
/momentum.x86_64

# Reference: https://twitter.com/0xrb/status/1108293858113277952

/FARE.arc
/FARE.arm
/FARE.arm4
/FARE.arm4l
/FARE.arm4t
/FARE.armv4l
/FARE.arm5
/FARE.arm5n
/FARE.arm6
/FARE.arm7
/FARE.dbg
/FARE.i486
/FARE.i586
/FARE.i686
/FARE.m68k
/FARE.mips
/FARE.mips64
/FARE.mpsl
/FARE.mipsel
/FARE.ppc
/FARE.ppc440
/FARE.root
/FARE.sh
/FARE.sh4
/FARE.spc
/FARE.sparc
/FARE.x32
/FARE.x64
/FARE.x86
/FARE.x86_32
/FARE.x86_64

# Reference: https://twitter.com/0xrb/status/1108048782468501504

/kito.arc
/kito.arm
/kito.arm4
/kito.arm4l
/kito.arm4t
/kito.armv4l
/kito.arm5
/kito.arm5n
/kito.arm6
/kito.arm7
/kito.dbg
/kito.i486
/kito.i586
/kito.i686
/kito.m68k
/kito.mips
/kito.mips64
/kito.mpsl
/kito.mipsel
/kito.ppc
/kito.ppc440
/kito.root
/kito.sh
/kito.sh4
/kito.spc
/kito.sparc
/kito.x32
/kito.x64
/kito.x86
/kito.x86_32
/kito.x86_64

# Reference: https://twitter.com/0xrb/status/1108045008320581632

/sunless.arc
/sunless.arm
/sunless.arm4
/sunless.arm4l
/sunless.arm4t
/sunless.armv4l
/sunless.arm5
/sunless.arm5n
/sunless.arm6
/sunless.arm7
/sunless.dbg
/sunless.i486
/sunless.i586
/sunless.i686
/sunless.m68k
/sunless.mips
/sunless.mips64
/sunless.mpsl
/sunless.mipsel
/sunless.ppc
/sunless.ppc440
/sunless.root
/sunless.sh
/sunless.sh4
/sunless.spc
/sunless.sparc
/sunless.x32
/sunless.x64
/sunless.x86
/sunless.x86_32
/sunless.x86_64

# Reference: https://twitter.com/ankit_anubhav/status/1107934291558916099

/fish.arc
/fish.arm
/fish.arm4
/fish.arm4l
/fish.arm4t
/fish.armv4l
/fish.arm5
/fish.arm5n
/fish.arm6
/fish.arm7
/fish.dbg
/fish.i486
/fish.i586
/fish.i686
/fish.m68k
/fish.mips
/fish.mips64
/fish.mpsl
/fish.mipsel
/fish.ppc
/fish.ppc440
/fish.root
/fish.sh
/fish.sh4
/fish.spc
/fish.sparc
/fish.x32
/fish.x64
/fish.x86
/fish.x86_32
/fish.x86_64

# Reference: https://twitter.com/0xrb/status/1107842666673381378

/WW3V1SRC.arc
/WW3V1SRC.arm
/WW3V1SRC.arm4
/WW3V1SRC.arm4l
/WW3V1SRC.arm4t
/WW3V1SRC.armv4l
/WW3V1SRC.arm5
/WW3V1SRC.arm5n
/WW3V1SRC.arm6
/WW3V1SRC.arm7
/WW3V1SRC.dbg
/WW3V1SRC.i486
/WW3V1SRC.i586
/WW3V1SRC.i686
/WW3V1SRC.m68k
/WW3V1SRC.mips
/WW3V1SRC.mips64
/WW3V1SRC.mpsl
/WW3V1SRC.mipsel
/WW3V1SRC.ppc
/WW3V1SRC.ppc440
/WW3V1SRC.root
/WW3V1SRC.sh
/WW3V1SRC.sh4
/WW3V1SRC.spc
/WW3V1SRC.sparc
/WW3V1SRC.x32
/WW3V1SRC.x64
/WW3V1SRC.x86
/WW3V1SRC.x86_32
/WW3V1SRC.x86_64

# Reference: https://twitter.com/0xrb/status/1107838407353528320

/njs.arc
/njs.arm
/njs.arm4
/njs.arm4l
/njs.arm4t
/njs.armv4l
/njs.arm5
/njs.arm5n
/njs.arm6
/njs.arm7
/njs.dbg
/njs.i486
/njs.i586
/njs.i686
/njs.m68k
/njs.mips
/njs.mips64
/njs.mpsl
/njs.mipsel
/njs.ppc
/njs.ppc440
/njs.root
/njs.sh
/njs.sh4
/njs.spc
/njs.sparc
/njs.x32
/njs.x64
/njs.x86
/njs.x86_32
/njs.x86_64

# Reference: https://twitter.com/0xrb/status/1107836003056869376

/thisissh

# Reference: https://twitter.com/0xrb/status/1106473339055497217

/qarc
/qarm
/qarm4
/qarm4l
/qarm4t
/qarmv4l
/qarm5
/qarm5n
/qarm6
/qarm7
/qdbg
/qi486
/qi586
/qi686
/qm68k
/qmips
/qmips64
/qmpsl
/qmipsel
/qppc
/qppc440
/qroot
/qsh
/qsh4
/qspc
/qsparc
/qx32
/qx64
/qx86
/qx86_32
/qx86_64
/hua

# Reference: https://twitter.com/0xrb/status/1105656726026637312

/rebirth.arc
/rebirth.arm
/rebirth.arm4
/rebirth.arm4l
/rebirth.arm4t
/rebirth.armv4l
/rebirth.arm5
/rebirth.arm5n
/rebirth.arm6
/rebirth.arm7
/rebirth.dbg
/rebirth.i486
/rebirth.i586
/rebirth.i686
/rebirth.m68k
/rebirth.mips
/rebirth.mips64
/rebirth.mpsl
/rebirth.mipsel
/rebirth.ppc
/rebirth.ppc440
/rebirth.root
/rebirth.sh
/rebirth.sh4
/rebirth.spc
/rebirth.sparc
/rebirth.x32
/rebirth.x64
/rebirth.x86
/rebirth.x86_32
/rebirth.x86_64

# Reference: https://twitter.com/0xrb/status/1105421139621208064

/tuna.arc
/tuna.arm
/tuna.arm4
/tuna.arm4l
/tuna.arm4t
/tuna.armv4l
/tuna.arm5
/tuna.arm5n
/tuna.arm6
/tuna.arm7
/tuna.dbg
/tuna.i486
/tuna.i586
/tuna.i686
/tuna.m68k
/tuna.mips
/tuna.mips64
/tuna.mpsl
/tuna.mipsel
/tuna.ppc
/tuna.ppc440
/tuna.root
/tuna.sh
/tuna.sh4
/tuna.spc
/tuna.sparc
/tuna.x32
/tuna.x64
/tuna.x86
/tuna.x86_32
/tuna.x86_64

# Reference: https://twitter.com/0xrb/status/1105414365971247104

/daku.arc
/daku.arm
/daku.arm4
/daku.arm4l
/daku.arm4t
/daku.armv4l
/daku.arm5
/daku.arm5n
/daku.arm6
/daku.arm7
/daku.rm7
/daku.dbg
/daku.i486
/daku.i586
/daku.i686
/daku.m68k
/daku.mips
/daku.mips64
/daku.mpsl
/daku.mipsel
/daku.ppc
/daku.ppc440
/daku.root
/daku.sh
/daku.sh4
/daku.spc
/daku.sparc
/daku.x32
/daku.x64
/daku.x86
/daku.x86_32
/daku.x86_64

# Reference: https://twitter.com/0xrb/status/1105094830034690050

/guguru.arc
/guguru.arm
/guguru.arm4
/guguru.arm4l
/guguru.arm4t
/guguru.armv4l
/guguru.arm5
/guguru.arm5n
/guguru.arm6
/guguru.arm7
/guguru.dbg
/guguru.i486
/guguru.i586
/guguru.i686
/guguru.m68k
/guguru.mips
/guguru.mips64
/guguru.mpsl
/guguru.mipsel
/guguru.ppc
/guguru.ppc440
/guguru.root
/guguru.sh
/guguru.sh4
/guguru.spc
/guguru.sparc
/guguru.x32
/guguru.x64
/guguru.x86
/guguru.x86_32
/guguru.x86_64

# Reference: https://twitter.com/0xrb/status/1102830637365387264

/lessie.arc
/lessie.arm
/lessie.arm4
/lessie.arm4l
/lessie.arm4t
/lessie.armv4l
/lessie.arm5
/lessie.arm5n
/lessie.arm6
/lessie.arm7
/lessie.dbg
/lessie.i486
/lessie.i586
/lessie.i686
/lessie.m68k
/lessie.mips
/lessie.mips64
/lessie.mpsl
/lessie.mipsel
/lessie.ppc
/lessie.ppc440
/lessie.root
/lessie.sh
/lessie.sh4
/lessie.spc
/lessie.sparc
/lessie.x32
/lessie.x64
/lessie.x86
/lessie.x86_32
/lessie.x86_64

# Reference: https://twitter.com/0xrb/status/1102457417856630785

/big.arc
/big.arm
/big.arm4
/big.arm4l
/big.arm4t
/big.arm4tl
/big.armv4l
/big.arm5
/big.arm5n
/big.arm6
/big.arm7
/big.dbg
/big.i486
/big.i586
/big.i686
/big.m68
/big.m68k
/big.mips
/big.mips64
/big.mpsl
/big.mipsel
/big.ppc
/big.ppc440
/big.root
/big.sh
/big.sh4
/big.spc
/big.sparc
/big.x32
/big.x64
/big.x86
/big.x86_32
/big.x86_64

# Reference: https://twitter.com/0xrb/status/1102401391887290369

/senpai.arc
/senpai.arm
/senpai.arm4
/senpai.arm4l
/senpai.arm4t
/senpai.armv4l
/senpai.arm5
/senpai.arm5n
/senpai.arm6
/senpai.arm7
/senpai.dbg
/senpai.i486
/senpai.i586
/senpai.i686
/senpai.m68k
/senpai.mips
/senpai.mips64
/senpai.mpsl
/senpai.mipsel
/senpai.ppc
/senpai.ppc440
/senpai.root
/senpai.sh
/senpai.sh4
/senpai.spc
/senpai.sparc
/senpai.x32
/senpai.x64
/senpai.x86
/senpai.x86_32
/senpai.x86_64

# Reference: https://twitter.com/0xrb/status/1100657286354153472

/xd.arc
/xd.arm
/xd.arm4
/xd.arm4l
/xd.arm4t
/xd.armv4l
/xd.arm5
/xd.arm5n
/xd.arm6
/xd.arm7
/xd.dbg
/xd.i486
/xd.i586
/xd.i686
/xd.m68k
/xd.mips
/xd.mips64
/xd.mpsl
/xd.mipsel
/xd.ppc
/xd.ppc440
/xd.root
/xd.sh
/xd.sh4
/xd.spc
/xd.sparc
/xd.x32
/xd.x64
/xd.x86
/xd.x86_32
/xd.x86_64

# Reference: https://twitter.com/0xrb/status/1100325987294695427

/comethazine.arc
/comethazine.arm
/comethazine.arm4
/comethazine.arm4l
/comethazine.arm4t
/comethazine.armv4l
/comethazine.arm5
/comethazine.arm5n
/comethazine.arm6
/comethazine.arm7
/comethazine.dbg
/comethazine.i486
/comethazine.i586
/comethazine.i686
/comethazine.m68k
/comethazine.mips
/comethazine.mips64
/comethazine.mpsl
/comethazine.mipsel
/comethazine.ppc
/comethazine.ppc440
/comethazine.root
/comethazine.sh
/comethazine.sh4
/comethazine.spc
/comethazine.sparc
/comethazine.x32
/comethazine.x64
/comethazine.x86
/comethazine.x86_32
/comethazine.x86_64

# Reference: https://twitter.com/0xrb/status/1100323162665799680

/shinobi.arc
/shinobi.arm
/shinobi.arm4
/shinobi.arm4l
/shinobi.arm4t
/shinobi.armv4l
/shinobi.arm5
/shinobi.arm5n
/shinobi.arm6
/shinobi.arm7
/shinobi.dbg
/shinobi.i486
/shinobi.i586
/shinobi.i686
/shinobi.m68k
/shinobi.mips
/shinobi.mips64
/shinobi.mpsl
/shinobi.mipsel
/shinobi.ppc
/shinobi.ppc440
/shinobi.root
/shinobi.sh
/shinobi.sh4
/shinobi.spc
/shinobi.sparc
/shinobi.x32
/shinobi.x64
/shinobi.x86
/shinobi.x86_32
/shinobi.x86_64

# Reference: https://twitter.com/0xrb/status/1098644363545059329

/mana.arc
/mana.arm
/mana.arm4
/mana.arm4l
/mana.arm4t
/mana.armv4l
/mana.arm5
/mana.arm5n
/mana.arm6
/mana.arm7
/mana.dbg
/mana.i486
/mana.i586
/mana.i686
/mana.m68k
/mana.mips
/mana.mips64
/mana.mpsl
/mana.mipsel
/mana.ppc
/mana.ppc440
/mana.root
/mana.sh
/mana.sh4
/mana.spc
/mana.sparc
/mana.x32
/mana.x64
/mana.x86
/mana.x86_32
/mana.x86_64

# Reference: https://twitter.com/0xrb/status/1098279273222365184

/xova.arc
/xova.arm
/xova.arm4
/xova.arm4l
/xova.arm4t
/xova.armv4l
/xova.arm5
/xova.arm5n
/xova.arm6
/xova.arm7
/xova.dbg
/xova.i486
/xova.i586
/xova.i686
/xova.m68k
/xova.mips
/xova.mips64
/xova.mpsl
/xova.mipsel
/xova.ppc
/xova.ppc440
/xova.root
/xova.sh
/xova.sh4
/xova.spc
/xova.sparc
/xova.x32
/xova.x64
/xova.x86
/xova.x86_32
/xova.x86_64

# Reference: https://twitter.com/0xrb/status/1098102422541500417

/Akiru.arc
/Akiru.arm
/Akiru.arm4
/Akiru.arm4l
/Akiru.arm4t
/Akiru.armv4l
/Akiru.arm5
/Akiru.arm5n
/Akiru.arm6
/Akiru.arm7
/Akiru.dbg
/Akiru.i486
/Akiru.i586
/Akiru.i686
/Akiru.m68k
/Akiru.mips
/Akiru.mips64
/Akiru.mpsl
/Akiru.mipsel
/Akiru.ppc
/Akiru.ppc440
/Akiru.root
/Akiru.sh
/Akiru.sh4
/Akiru.spc
/Akiru.sparc
/Akiru.x32
/Akiru.x64
/Akiru.x86
/Akiru.x86_32
/Akiru.x86_64

# Reference: https://twitter.com/0xrb/status/1097865113716117508

/storm.arc
/storm.arm
/storm.arm4
/storm.arm4l
/storm.arm4t
/storm.armv4l
/storm.arm5
/storm.arm5n
/storm.arm6
/storm.arm7
/storm.dbg
/storm.i486
/storm.i586
/storm.i686
/storm.m68k
/storm.mips
/storm.mips64
/storm.mpsl
/storm.mipsel
/storm.ppc
/storm.ppc440
/storm.root
/storm.sh
/storm.sh4
/storm.spc
/storm.sparc
/storm.x32
/storm.x64
/storm.x86
/storm.x86_32
/storm.x86_64

# Reference: https://twitter.com/0xrb/status/1097799680514236416

/HeFoundMyBinsKYS.arc
/HeFoundMyBinsKYS.arm
/HeFoundMyBinsKYS.arm4
/HeFoundMyBinsKYS.arm4l
/HeFoundMyBinsKYS.arm4t
/HeFoundMyBinsKYS.armv4l
/HeFoundMyBinsKYS.arm5
/HeFoundMyBinsKYS.arm5n
/HeFoundMyBinsKYS.arm6
/HeFoundMyBinsKYS.arm7
/HeFoundMyBinsKYS.dbg
/HeFoundMyBinsKYS.i486
/HeFoundMyBinsKYS.i586
/HeFoundMyBinsKYS.i686
/HeFoundMyBinsKYS.m68k
/HeFoundMyBinsKYS.mips
/HeFoundMyBinsKYS.mips64
/HeFoundMyBinsKYS.mpsl
/HeFoundMyBinsKYS.mipsel
/HeFoundMyBinsKYS.ppc
/HeFoundMyBinsKYS.ppc440
/HeFoundMyBinsKYS.root
/HeFoundMyBinsKYS.sh
/HeFoundMyBinsKYS.sh4
/HeFoundMyBinsKYS.spc
/HeFoundMyBinsKYS.sparc
/HeFoundMyBinsKYS.x32
/HeFoundMyBinsKYS.x64
/HeFoundMyBinsKYS.x86
/HeFoundMyBinsKYS.x86_32
/HeFoundMyBinsKYS.x86_64

# Reference: https://twitter.com/0xrb/status/1097392217243582464

/xbox.arc
/xbox.arm
/xbox.arm4
/xbox.arm4l
/xbox.arm4t
/xbox.armv4l
/xbox.arm5
/xbox.arm5n
/xbox.arm6
/xbox.arm7
/xbox.dbg
/xbox.i486
/xbox.i586
/xbox.i686
/xbox.m68k
/xbox.mips
/xbox.mips64
/xbox.mpsl
/xbox.mipsel
/xbox.ppc
/xbox.ppc440
/xbox.root
/xbox.sh
/xbox.sh4
/xbox.spc
/xbox.sparc
/xbox.x32
/xbox.x64
/xbox.x86
/xbox.x86_32
/xbox.x86_64

# Reference: https://twitter.com/0xrb/status/1096453342849654786

/Corona.arc
/Corona.arm
/Corona.arm4
/Corona.arm4l
/Corona.arm4t
/Corona.armv4l
/Corona.arm5
/Corona.arm5n
/Corona.arm6
/Corona.arm7
/Corona.dbg
/Corona.i486
/Corona.i586
/Corona.i686
/Corona.m68k
/Corona.mips
/Corona.mips64
/Corona.mpsl
/Corona.mipsel
/Corona.ppc
/Corona.ppc440
/Corona.root
/Corona.sh
/Corona.sh4
/Corona.spc
/Corona.sparc
/Corona.x32
/Corona.x64
/Corona.x86
/Corona.x86_32
/Corona.x86_64

# Reference: https://twitter.com/0xrb/status/1096446545094995974

/Amakano.arc
/Amakano.arm
/Amakano.arm4
/Amakano.arm4l
/Amakano.arm4t
/Amakano.armv4l
/Amakano.arm5
/Amakano.arm5n
/Amakano.arm6
/Amakano.arm7
/Amakano.dbg
/Amakano.i486
/Amakano.i586
/Amakano.i686
/Amakano.m68k
/Amakano.mips
/Amakano.mips64
/Amakano.mpsl
/Amakano.mipsel
/Amakano.ppc
/Amakano.ppc440
/Amakano.root
/Amakano.sh
/Amakano.sh4
/Amakano.spc
/Amakano.sparc
/Amakano.x32
/Amakano.x64
/Amakano.x86
/Amakano.x86_32
/Amakano.x86_64

# Reference: https://twitter.com/0xrb/status/1095983535855300608

/kdawa.arc
/kdawa.arm
/kdawa.arm4
/kdawa.arm4l
/kdawa.arm4t
/kdawa.armv4l
/kdawa.arm5
/kdawa.arm5n
/kdawa.arm6
/kdawa.arm7
/kdawa.dbg
/kdawa.i486
/kdawa.i586
/kdawa.i686
/kdawa.m68k
/kdawa.mips
/kdawa.mips64
/kdawa.mpsl
/kdawa.mipsel
/kdawa.ppc
/kdawa.ppc440
/kdawa.root
/kdawa.sh
/kdawa.sh4
/kdawa.spc
/kdawa.sparc
/kdawa.x32
/kdawa.x64
/kdawa.x86
/kdawa.x86_32
/kdawa.x86_64

# Reference: https://twitter.com/0xrb/status/1095933631099396096

/Unbound.arc
/Unbound.arm
/Unbound.arm4
/Unbound.arm4l
/Unbound.arm4t
/Unbound.armv4l
/Unbound.arm5
/Unbound.arm5n
/Unbound.arm6
/Unbound.arm7
/Unbound.dbg
/Unbound.i486
/Unbound.i586
/Unbound.i686
/Unbound.m68k
/Unbound.mips
/Unbound.mips64
/Unbound.mpsl
/Unbound.mipsel
/Unbound.ppc
/Unbound.ppc440
/Unbound.root
/Unbound.sh
/Unbound.sh4
/Unbound.spc
/Unbound.sparc
/Unbound.x32
/Unbound.x64
/Unbound.x86
/Unbound.x86_32
/Unbound.x86_64

# Reference: https://twitter.com/0xrb/status/1095739193907646464

/KowaiB3.arc
/KowaiB3.arm
/KowaiB3.arm4
/KowaiB3.arm4l
/KowaiB3.arm4t
/KowaiB3.armv4l
/KowaiB3.arm5
/KowaiB3.arm5n
/KowaiB3.arm6
/KowaiB3.arm7
/KowaiB3.dbg
/KowaiB3.i486
/KowaiB3.i586
/KowaiB3.i686
/KowaiB3.m68k
/KowaiB3.mips
/KowaiB3.mips64
/KowaiB3.mpsl
/KowaiB3.mipsel
/KowaiB3.ppc
/KowaiB3.ppc440
/KowaiB3.root
/KowaiB3.sh
/KowaiB3.sh4
/KowaiB3.spc
/KowaiB3.sparc
/KowaiB3.x32
/KowaiB3.x64
/KowaiB3.x86
/KowaiB3.x86_32
/KowaiB3.x86_64

# Reference: https://twitter.com/0xrb/status/1095342906724933636

/Omni.arc
/Omni.arm
/Omni.arm4
/Omni.arm4l
/Omni.arm4t
/Omni.armv4l
/Omni.arm5
/Omni.arm5n
/Omni.arm6
/Omni.arm7
/Omni.dbg
/Omni.i486
/Omni.i586
/Omni.i686
/Omni.m68k
/Omni.mips
/Omni.mips64
/Omni.mpsl
/Omni.mipsel
/Omni.ppc
/Omni.ppc440
/Omni.root
/Omni.sh
/Omni.sh4
/Omni.spc
/Omni.sparc
/Omni.x32
/Omni.x64
/Omni.x86
/Omni.x86_32
/Omni.x86_64

# Reference: https://twitter.com/0xrb/status/1094879391966932992
# Reference: https://twitter.com/bad_packets/status/1188553450876850176

34.94.100.213:1338
34.94.100.213:31337
jarry.online
/arc.idopoc
/arm.idopoc
/arm4.idopoc
/armv4l.idopoc
/arm5.idopoc
/arm5n.idopoc
/arm6.idopoc
/arm7.idopoc
/arm8.idopoc
/dbg.idopoc
/i586.idopoc
/i686.idopoc
/m68k.idopoc
/mips.idopoc
/mips64.idopoc
/mpsl.idopoc
/ppc.idopoc
/sh4.idopoc
/spc.idopoc
/sparc.idopoc
/x32.idopoc
/x86.idopoc
/x64.idopoc
/x86_32.idopoc
/x86_64.idopoc

# Reference: https://twitter.com/0xrb/status/1094591450522808326

/blecc.arc
/blecc.arm
/blecc.arm4
/blecc.arm4l
/blecc.arm4t
/blecc.arm4tl
/blecc.armv4l
/blecc.arm5
/blecc.arm5n
/blecc.arm6
/blecc.arm7
/blecc.dbg
/blecc.i486
/blecc.i586
/blecc.i686
/blecc.m68k
/blecc.mips
/blecc.mips64
/blecc.mpsl
/blecc.ppc
/blecc.ppc440
/blecc.powerppc
/blecc.root
/blecc.sh
/blecc.sh4
/blecc.spc
/blecc.sparc
/blecc.x32
/blecc.x64
/blecc.x86
/blecc.x86_32
/blecc.x86_64

# Reference: https://twitter.com/0xrb/status/1093736400275496960

/saskia.arc
/saskia.arm
/saskia.arm4
/saskia.arm4l
/saskia.arm4t
/saskia.arm4tl
/saskia.armv4l
/saskia.arm5
/saskia.arm5n
/saskia.arm6
/saskia.arm7
/saskia.dbg
/saskia.i486
/saskia.i586
/saskia.i686
/saskia.m68k
/saskia.mips
/saskia.mips64
/saskia.mpsl
/saskia.ppc
/saskia.ppc440
/saskia.powerppc
/saskia.root
/saskia.sh
/saskia.sh4
/saskia.spc
/saskia.sparc
/saskia.x32
/saskia.x64
/saskia.x86
/saskia.x86_32
/saskia.x86_64

# Reference: https://twitter.com/0xrb/status/1093399430189858816

/ssh2.arc
/ssh2.arm
/ssh2.arm4
/ssh2.arm4l
/ssh2.arm4t
/ssh2.arm4tl
/ssh2.armv4l
/ssh2.arm5
/ssh2.arm5n
/ssh2.arm6
/ssh2.arm7
/ssh2.dbg
/ssh2.i486
/ssh2.i586
/ssh2.i686
/ssh2.m68k
/ssh2.mips
/ssh2.mips64
/ssh2.mpsl
/ssh2.ppc
/ssh2.ppc440
/ssh2.powerppc
/ssh2.root
/ssh2.sh
/ssh2.sh4
/ssh2.spc
/ssh2.sparc
/ssh2.x32
/ssh2.x64
/ssh2.x86
/ssh2.x86_32
/ssh2.x86_64

# Reference: https://twitter.com/0xrb/status/1092324076599705600

/avengers.arc
/avengers.arm
/avengers.arm4
/avengers.arm4l
/avengers.arm4t
/avengers.arm4tl
/avengers.armv4l
/avengers.arm5
/avengers.arm5n
/avengers.arm6
/avengers.arm7
/avengers.dbg
/avengers.i486
/avengers.i586
/avengers.i686
/avengers.m68k
/avengers.mips
/avengers.mips64
/avengers.mpsl
/avengers.ppc
/avengers.ppc440
/avengers.powerppc
/avengers.root
/avengers.sh
/avengers.sh4
/avengers.spc
/avengers.sparc
/avengers.x32
/avengers.x64
/avengers.x86
/avengers.x86_32
/avengers.x86_64
/os.arc
/os.arm
/os.arm4
/os.arm4l
/os.arm4t
/os.arm4tl
/os.armv4l
/os.arm5
/os.arm5n
/os.arm6
/os.arm7
/os.dbg
/os.i486
/os.i586
/os.i686
/os.m68k
/os.mips
/os.mips64
/os.mpsl
/os.ppc
/os.ppc440
/os.powerppc
/os.root
/os.sh
/os.sh4
/os.spc
/os.sparc
/os.x32
/os.x64
/os.x86
/os.x86_32
/os.x86_64

# Reference: https://twitter.com/0xrb/status/1089780667259379713

/nisha.arc
/nisha.arm
/nisha.arm4
/nisha.arm4l
/nisha.arm4t
/nisha.arm4tl
/nisha.armv4l
/nisha.arm5
/nisha.arm5n
/nisha.arm6
/nisha.arm7
/nisha.dbg
/nisha.i486
/nisha.i586
/nisha.i686
/nisha.m68k
/nisha.mips
/nisha.mips64
/nisha.mpsl
/nisha.ppc
/nisha.ppc440
/nisha.powerppc
/nisha.root
/nisha.sh
/nisha.sh4
/nisha.spc
/nisha.sparc
/nisha.x32
/nisha.x64
/nisha.x86
/nisha.x86_32
/nisha.x86_64

# Reference: https://twitter.com/0xrb/status/1089578349284990978

/Skyfall.arc
/Skyfall.arm
/Skyfall.arm4
/Skyfall.arm4l
/Skyfall.arm4t
/Skyfall.arm4tl
/Skyfall.armv4l
/Skyfall.arm5
/Skyfall.arm5n
/Skyfall.arm6
/Skyfall.arm7
/Skyfall.dbg
/Skyfall.i486
/Skyfall.i586
/Skyfall.i686
/Skyfall.m68k
/Skyfall.mips
/Skyfall.mips64
/Skyfall.mpsl
/Skyfall.ppc
/Skyfall.ppc440
/Skyfall.powerppc
/Skyfall.root
/Skyfall.sh
/Skyfall.sh4
/Skyfall.spc
/Skyfall.sparc
/Skyfall.x32
/Skyfall.x64
/Skyfall.x86
/Skyfall.x86_32
/Skyfall.x86_64

# Reference: https://twitter.com/0xrb/status/1089525340949696512

/final.arc
/final.arm
/final.arm4
/final.arm4l
/final.arm4t
/final.arm4tl
/final.armv4l
/final.arm5
/final.arm5n
/final.arm6
/final.arm7
/final.dbg
/final.i486
/final.i586
/final.i686
/final.m68k
/final.mips
/final.mips64
/final.mpsl
/final.ppc
/final.ppc440
/final.powerppc
/final.root
/final.sh
/final.sh4
/final.spc
/final.sparc
/final.x32
/final.x64
/final.x86
/final.x86_32
/final.x86_64

# Reference: https://twitter.com/0xrb/status/1088325073994272768

/maticsdickishuge.arc
/maticsdickishuge.arm
/maticsdickishuge.arm4
/maticsdickishuge.arm4l
/maticsdickishuge.arm4t
/maticsdickishuge.arm4tl
/maticsdickishuge.armv4l
/maticsdickishuge.arm5
/maticsdickishuge.arm5n
/maticsdickishuge.arm6
/maticsdickishuge.arm7
/maticsdickishuge.dbg
/maticsdickishuge.i486
/maticsdickishuge.i586
/maticsdickishuge.i686
/maticsdickishuge.m68k
/maticsdickishuge.mips
/maticsdickishuge.mips64
/maticsdickishuge.mpsl
/maticsdickishuge.ppc
/maticsdickishuge.ppc440
/maticsdickishuge.powerppc
/maticsdickishuge.root
/maticsdickishuge.sh
/maticsdickishuge.sh4
/maticsdickishuge.spc
/maticsdickishuge.sparc
/maticsdickishuge.x32
/maticsdickishuge.x64
/maticsdickishuge.x86
/maticsdickishuge.x86_32
/maticsdickishuge.x86_64

# Reference: https://twitter.com/0xrb/status/1118934478418788353

/arc.daddyscum
/arm.daddyscum
/arm4.daddyscum
/armv4l.daddyscum
/arm5.daddyscum
/arm5n.daddyscum
/arm6.daddyscum
/arm7.daddyscum
/dbg.daddyscum
/i486.daddyscum
/i586.daddyscum
/i686.daddyscum
/m68k.daddyscum
/mips.daddyscum
/mips64.daddyscum
/mpsl.daddyscum
/ppc.daddyscum
/sh4.daddyscum
/spc.daddyscum
/sparc.daddyscum
/x32.daddyscum
/x64.daddyscum
/x86_64.daddyscum

# Reference: https://twitter.com/0xrb/status/1119280360783790082

157.230.43.191:45
/slav.arc
/slav.arm
/slav.arm4
/slav.arm4l
/slav.arm4t
/slav.arm4tl
/slav.armv4l
/slav.arm5
/slav.arm5n
/slav.arm6
/slav.arm7
/slav.dbg
/slav.i486
/slav.i586
/slav.i686
/slav.m68k
/slav.mips
/slav.mips64
/slav.mpsl
/slav.ppc
/slav.ppc440
/slav.powerppc
/slav.root
/slav.sh
/slav.sh4
/slav.spc
/slav.sparc
/slav.x32
/slav.x64
/slav.x86
/slav.x86_32
/slav.x86_64

# Reference: https://twitter.com/0xrb/status/1119288042156711938

77.73.70.235:6859

# Reference: https://twitter.com/0xrb/status/1117364213259931648

176.223.135.216:6859

# Reference: https://twitter.com/0xrb/status/1119428954350391296

51.68.214.116:8372

# Reference: https://twitter.com/0xrb/status/1119278432729407488

199.48.164.49:15412
/dayz.arc
/dayz.arm
/dayz.arm4
/dayz.arm4l
/dayz.arm4t
/dayz.arm4tl
/dayz.armv4l
/dayz.arm5
/dayz.arm5n
/dayz.arm6
/dayz.arm7
/dayz.dbg
/dayz.i486
/dayz.i586
/dayz.i686
/dayz.m68k
/dayz.mips
/dayz.mips64
/dayz.mpsl
/dayz.ppc
/dayz.ppc440
/dayz.powerppc
/dayz.root
/dayz.sh
/dayz.sh4
/dayz.spc
/dayz.sparc
/dayz.x32
/dayz.x64
/dayz.x86
/dayz.x86_32
/dayz.x86_64

# Reference: https://twitter.com/bad_packets/status/1120437110174097408

/ak.arc
/ak.arm
/ak.arm4
/ak.arm4l
/ak.arm4t
/ak.arm4tl
/ak.armv4l
/ak.arm5
/ak.arm5n
/ak.arm6
/ak.arm7
/ak.dbg
/ak.i486
/ak.i586
/ak.i686
/ak.m68k
/ak.mips
/ak.mips64
/ak.mpsl
/ak.ppc
/ak.ppc440
/ak.powerppc
/ak.root
/ak.sh
/ak.sh4
/ak.spc
/ak.sparc
/ak.x32
/ak.x64
/ak.x86
/ak.x86_32
/ak.x86_64
/BigAlma.arc
/BigAlma.arm
/BigAlma.arm4
/BigAlma.arm4l
/BigAlma.arm4t
/BigAlma.arm4tl
/BigAlma.armv4l
/BigAlma.arm5
/BigAlma.arm5n
/BigAlma.arm6
/BigAlma.arm7
/BigAlma.dbg
/BigAlma.i486
/BigAlma.i586
/BigAlma.i686
/BigAlma.m68k
/BigAlma.mips
/BigAlma.mips64
/BigAlma.mpsl
/BigAlma.ppc
/BigAlma.ppc440
/BigAlma.powerppc
/BigAlma.root
/BigAlma.sh
/BigAlma.sh4
/BigAlma.spc
/BigAlma.sparc
/BigAlma.x32
/BigAlma.x64
/BigAlma.x86
/BigAlma.x86_32
/BigAlma.x86_64

# Reference: https://twitter.com/smii_mondher/status/1120819533013573632
# Reference: https://twitter.com/0xrb/status/1121079666545188865

104.248.139.242:1024
/UnHAnaAW.arc
/UnHAnaAW.arm
/UnHAnaAW.arm4
/UnHAnaAW.arm4l
/UnHAnaAW.arm4t
/UnHAnaAW.arm4tl
/UnHAnaAW.armv4l
/UnHAnaAW.arm5
/UnHAnaAW.arm5n
/UnHAnaAW.arm6
/UnHAnaAW.arm7
/UnHAnaAW.dbg
/UnHAnaAW.i486
/UnHAnaAW.i586
/UnHAnaAW.i686
/UnHAnaAW.m68k
/UnHAnaAW.mips
/UnHAnaAW.mips64
/UnHAnaAW.mpsl
/UnHAnaAW.ppc
/UnHAnaAW.ppc440
/UnHAnaAW.powerppc
/UnHAnaAW.root
/UnHAnaAW.sh
/UnHAnaAW.sh4
/UnHAnaAW.spc
/UnHAnaAW.sparc
/UnHAnaAW.x32
/UnHAnaAW.x64
/UnHAnaAW.x86
/UnHAnaAW.x86_32
/UnHAnaAW.x86_64

# Reference: https://twitter.com/smii_mondher/status/1102272670626922496

/turbo.arc
/turbo.arm
/turbo.arm4
/turbo.arm4l
/turbo.arm4t
/turbo.arm4tl
/turbo.armv4l
/turbo.arm5
/turbo.arm5n
/turbo.arm6
/turbo.arm7
/turbo.dbg
/turbo.i486
/turbo.i586
/turbo.i686
/turbo.m68k
/turbo.mips
/turbo.mips64
/turbo.mpsl
/turbo.ppc
/turbo.ppc440
/turbo.powerppc
/turbo.root
/turbo.sh
/turbo.sh4
/turbo.spc
/turbo.sparc
/turbo.x32
/turbo.x64
/turbo.x86
/turbo.x86_32
/turbo.x86_64

# Reference: https://twitter.com/smii_mondher/status/1096711602236284928

/woah.arc
/woah.arm
/woah.arm4
/woah.arm4l
/woah.arm4t
/woah.arm4tl
/woah.armv4l
/woah.arm5
/woah.arm5n
/woah.arm6
/woah.arm7
/woah.dbg
/woah.i486
/woah.i586
/woah.i686
/woah.m68k
/woah.mips
/woah.mips64
/woah.mpsl
/woah.ppc
/woah.ppc440
/woah.powerppc
/woah.root
/woah.sh
/woah.sh4
/woah.spc
/woah.sparc
/woah.x32
/woah.x64
/woah.x86
/woah.x86_32
/woah.x86_64

# Reference: https://twitter.com/smii_mondher/status/1095759431336374272

/kadjw.arc
/kadjw.arm
/kadjw.arm4
/kadjw.arm4l
/kadjw.arm4t
/kadjw.arm4tl
/kadjw.armv4l
/kadjw.arm5
/kadjw.arm5n
/kadjw.arm6
/kadjw.arm7
/kadjw.dbg
/kadjw.i486
/kadjw.i586
/kadjw.i686
/kadjw.m68k
/kadjw.mips
/kadjw.mips64
/kadjw.mpsl
/kadjw.ppc
/kadjw.ppc440
/kadjw.powerppc
/kadjw.root
/kadjw.sh
/kadjw.sh4
/kadjw.spc
/kadjw.sparc
/kadjw.x32
/kadjw.x64
/kadjw.x86
/kadjw.x86_32
/kadjw.x86_64

# Reference: https://twitter.com/smii_mondher/status/1092404485434036225

/hitoarc
/hitoarm
/hitoarm4
/hitoarm4l
/hitoarm4t
/hitoarm4tl
/hitoarmv4l
/hitoarm5
/hitoarm5n
/hitoarm6
/hitoarm7
/hitodbg
/hitoi486
/hitoi586
/hitoi686
/hitom68k
/hitomips
/hitomips64
/hitompsl
/hitoppc
/hitoppc440
/hitopowerppc
/hitoroot
/hitosh
/hitosh4
/hitospc
/hitosparc
/hitox32
/hitox64
/hitox86
/hitox86_32
/hitox86_64

# Reference: https://twitter.com/smii_mondher/status/1061935757168967681

/khvirc.arc
/khvirc.arm
/khvirc.arm4
/khvirc.arm4l
/khvirc.arm4t
/khvirc.arm4tl
/khvirc.armv4l
/khvirc.arm5
/khvirc.arm5n
/khvirc.arm6
/khvirc.arm7
/khvirc.dbg
/khvirc.i486
/khvirc.i586
/khvirc.i686
/khvirc.m68k
/khvirc.mips
/khvirc.mips64
/khvirc.mpsl
/khvirc.ppc
/khvirc.ppc440
/khvirc.powerppc
/khvirc.root
/khvirc.sh
/khvirc.sh4
/khvirc.spc
/khvirc.sparc
/khvirc.x32
/khvirc.x64
/khvirc.x86
/khvirc.x86_32
/khvirc.x86_64

# Reference: https://twitter.com/smii_mondher/status/1061348717087911936
# Reference: https://twitter.com/0xrb/status/1122180975633420288

37.49.225.78:1994
/jiren.sh
/kittyhaxz.sh
/arc.Eros
/arm.Eros
/arm4.Eros
/arm4t.Eros
/arm4l.Eros
/arm4tl.Eros
/armv4l.Eros
/arm5.Eros
/arm5n.Eros
/arm6.Eros
/arm7.Eros
/dbg.Eros
/i586.Eros
/i686.Eros
/m68k.Eros
/mips.Eros
/mips64.Eros
/mpsl.Eros
/ppc.Eros
/sh4.Eros
/spc.Eros
/sparc.Eros
/x32.Eros
/x64.Eros
/x86.Eros
/x86_64.Eros
/arc.bushido
/arm.bushido
/arm4.bushido
/arm4l.bushido
/arm4t.bushido
/arm4tl.bushido
/armv4l.bushido
/arm5.bushido
/arm5n.bushido
/arm6.bushido
/arm7.bushido
/dbg.bushido
/i586.bushido
/i686.bushido
/m68k.bushido
/mips.bushido
/mips64.bushido
/mpsl.bushido
/ppc.bushido
/sh4.bushido
/spc.bushido
/sparc.bushido
/x32.bushido
/x64.bushido
/x86.bushido
/x86_64.bushido
/qtx.arc
/qtx.arm
/qtx.arm4
/qtx.arm4l
/qtx.arm4t
/qtx.arm4tl
/qtx.armv4l
/qtx.arm5
/qtx.arm5n
/qtx.arm6
/qtx.arm7
/qtx.dbg
/qtx.i486
/qtx.i586
/qtx.i686
/qtx.m68k
/qtx.mips
/qtx.mips64
/qtx.mpsl
/qtx.ppc
/qtx.ppc440
/qtx.powerppc
/qtx.root
/qtx.sh
/qtx.sh4
/qtx.spc
/qtx.sparc
/qtx.x32
/qtx.x64
/qtx.x86
/qtx.x86_32
/qtx.x86_64
/KHz.arc
/KHz.arm
/KHz.arm4
/KHz.arm4l
/KHz.arm4t
/KHz.arm4tl
/KHz.armv4l
/KHz.arm5
/KHz.arm5n
/KHz.arm6
/KHz.arm7
/KHz.dbg
/KHz.i486
/KHz.i586
/KHz.i686
/KHz.m68k
/KHz.mips
/KHz.mips64
/KHz.mpsl
/KHz.ppc
/KHz.ppc440
/KHz.powerppc
/KHz.root
/KHz.sh
/KHz.sh4
/KHz.spc
/KHz.sparc
/KHz.x32
/KHz.x64
/KHz.x86
/KHz.x86_32
/KHz.x86_64
/otaku.arc
/otaku.arm
/otaku.arm4
/otaku.arm4l
/otaku.arm4t
/otaku.arm4tl
/otaku.armv4l
/otaku.arm5
/otaku.arm5n
/otaku.arm6
/otaku.arm7
/otaku.dbg
/otaku.i486
/otaku.i586
/otaku.i686
/otaku.m68k
/otaku.mips
/otaku.mips64
/otaku.mpsl
/otaku.ppc
/otaku.ppc440
/otaku.powerppc
/otaku.root
/otaku.sh
/otaku.sh4
/otaku.spc
/otaku.sparc
/otaku.x32
/otaku.x64
/otaku.x86
/otaku.x86_32
/otaku.x86_64
/.b.arc
/.b.arm
/.b.arm4
/.b.arm4l
/.b.arm4t
/.b.arm4tl
/.b.armv4l
/.b.arm5
/.b.arm5n
/.b.arm6
/.b.arm7
/.b.dbg
/.b.i486
/.b.i586
/.b.i686
/.b.m68k
/.b.mips
/.b.mips64
/.b.mpsl
/.b.ppc
/.b.ppc440
/.b.powerppc
/.b.root
/.b.sh
/.b.sh4
/.b.spc
/.b.sparc
/.b.x32
/.b.x64
/.b.x86
/.b.x86_32
/.b.x86_64
/8arc8
/8arm8
/8arm48
/8arm4l8
/8arm4t8
/8arm4tl8
/8armv4l8
/8arm58
/8arm5n8
/8arm68
/8arm78
/8dbg8
/8i4868
/8i5868
/8i6868
/8m68k8
/8mips8
/8mips648
/8mpsl8
/8ppc8
/8ppc4408
/8powerppc8
/8root8
/8sh8
/8sh48
/8spc8
/8sparc8
/8x328
/8x648
/8x868
/8x86_328
/8x86_648

# Reference: https://twitter.com/smii_mondher/status/1037269776635256832

/Cult.arc
/Cult.arm
/Cult.arm4
/Cult.arm4l
/Cult.arm4t
/Cult.arm4tl
/Cult.armv4l
/Cult.arm5
/Cult.arm5n
/Cult.arm6
/Cult.arm7
/Cult.dbg
/Cult.i486
/Cult.i586
/Cult.i686
/Cult.m68k
/Cult.mips
/Cult.mips64
/Cult.mpsl
/Cult.ppc
/Cult.ppc440
/Cult.powerppc
/Cult.root
/Cult.sh
/Cult.sh4
/Cult.spc
/Cult.sparc
/Cult.x32
/Cult.x64
/Cult.x86
/Cult.x86_32
/Cult.x86_64
/dcloud.arc
/dcloud.arm
/dcloud.arm4
/dcloud.arm4l
/dcloud.arm4t
/dcloud.arm4tl
/dcloud.armv4l
/dcloud.arm5
/dcloud.arm5n
/dcloud.arm6
/dcloud.arm7
/dcloud.dbg
/dcloud.i486
/dcloud.i586
/dcloud.i686
/dcloud.m68k
/dcloud.mips
/dcloud.mips64
/dcloud.mpsl
/dcloud.ppc
/dcloud.ppc440
/dcloud.powerppc
/dcloud.root
/dcloud.sh
/dcloud.sh4
/dcloud.spc
/dcloud.sparc
/dcloud.x32
/dcloud.x64
/dcloud.x86
/dcloud.x86_32
/dcloud.x86_64
/kaizen.arc
/kaizen.arm
/kaizen.arm4
/kaizen.arm4l
/kaizen.arm4t
/kaizen.arm4tl
/kaizen.armv4l
/kaizen.arm5
/kaizen.arm5n
/kaizen.arm6
/kaizen.arm7
/kaizen.dbg
/kaizen.i486
/kaizen.i586
/kaizen.i686
/kaizen.m68k
/kaizen.mips
/kaizen.mips64
/kaizen.mpsl
/kaizen.ppc
/kaizen.ppc440
/kaizen.powerppc
/kaizen.root
/kaizen.sh
/kaizen.sh4
/kaizen.spc
/kaizen.sparc
/kaizen.x32
/kaizen.x64
/kaizen.x86
/kaizen.x86_32
/kaizen.x86_64
/Katrina.arc
/Katrina.arm
/Katrina.arm4
/Katrina.arm4l
/Katrina.arm4t
/Katrina.arm4tl
/Katrina.armv4l
/Katrina.arm5
/Katrina.arm5n
/Katrina.arm6
/Katrina.arm7
/Katrina.dbg
/Katrina.i486
/Katrina.i586
/Katrina.i686
/Katrina.m68k
/Katrina.mips
/Katrina.mips64
/Katrina.mpsl
/Katrina.ppc
/Katrina.ppc440
/Katrina.powerppc
/Katrina.root
/Katrina.sh
/Katrina.sh4
/Katrina.spc
/Katrina.sparc
/Katrina.x32
/Katrina.x64
/Katrina.x86
/Katrina.x86_32
/Katrina.x86_64
/ket.arc
/ket.arm
/ket.arm4
/ket.arm4l
/ket.arm4t
/ket.arm4tl
/ket.armv4l
/ket.arm5
/ket.arm5n
/ket.arm6
/ket.arm7
/ket.dbg
/ket.i486
/ket.i586
/ket.i686
/ket.m68k
/ket.mips
/ket.mips64
/ket.mpsl
/ket.ppc
/ket.ppc440
/ket.powerppc
/ket.root
/ket.sh
/ket.sh4
/ket.spc
/ket.sparc
/ket.x32
/ket.x64
/ket.x86
/ket.x86_32
/ket.x86_64
/Saikin.arc
/Saikin.arm
/Saikin.arm4
/Saikin.arm4l
/Saikin.arm4t
/Saikin.arm4tl
/Saikin.armv4l
/Saikin.arm5
/Saikin.arm5n
/Saikin.arm6
/Saikin.arm7
/Saikin.dbg
/Saikin.i486
/Saikin.i586
/Saikin.i686
/Saikin.m68k
/Saikin.mips
/Saikin.mips64
/Saikin.mpsl
/Saikin.ppc
/Saikin.ppc440
/Saikin.powerppc
/Saikin.root
/Saikin.sh
/Saikin.sh4
/Saikin.spc
/Saikin.sparc
/Saikin.x32
/Saikin.x64
/Saikin.x86
/Saikin.x86_32
/Saikin.x86_64
/shinoa.arc
/shinoa.arm
/shinoa.arm4
/shinoa.arm4l
/shinoa.arm4t
/shinoa.arm4tl
/shinoa.armv4l
/shinoa.arm5
/shinoa.arm5n
/shinoa.arm6
/shinoa.arm7
/shinoa.dbg
/shinoa.i486
/shinoa.i586
/shinoa.i686
/shinoa.m68k
/shinoa.mips
/shinoa.mips64
/shinoa.mpsl
/shinoa.ppc
/shinoa.ppc440
/shinoa.powerppc
/shinoa.root
/shinoa.sh
/shinoa.sh4
/shinoa.spc
/shinoa.sparc
/shinoa.x32
/shinoa.x64
/shinoa.x86
/shinoa.x86_32
/shinoa.x86_64
/void.arc
/void.arm
/void.arm4
/void.arm4l
/void.arm4t
/void.arm4tl
/void.armv4l
/void.arm5
/void.arm5n
/void.arm6
/void.arm7
/void.dbg
/void.i486
/void.i586
/void.i686
/void.m68k
/void.mips
/void.mips64
/void.mpsl
/void.ppc
/void.ppc440
/void.powerppc
/void.root
/void.sh
/void.sh4
/void.spc
/void.sparc
/void.x32
/void.x64
/void.x86
/void.x86_32
/void.x86_64
/bigsus.arc
/bigsus.arm
/bigsus.arm4
/bigsus.arm4l
/bigsus.arm4t
/bigsus.arm4tl
/bigsus.armv4l
/bigsus.arm5
/bigsus.arm5n
/bigsus.arm6
/bigsus.arm7
/bigsus.dbg
/bigsus.i486
/bigsus.i586
/bigsus.i686
/bigsus.m68k
/bigsus.mips
/bigsus.mips64
/bigsus.mpsl
/bigsus.ppc
/bigsus.ppc440
/bigsus.powerppc
/bigsus.root
/bigsus.sh
/bigsus.sh4
/bigsus.spc
/bigsus.sparc
/bigsus.x32
/bigsus.x64
/bigsus.x86
/bigsus.x86_32
/bigsus.x86_64
/wicked.arc
/wicked.arm
/wicked.arm4
/wicked.arm4l
/wicked.arm4t
/wicked.arm4tl
/wicked.armv4l
/wicked.arm5
/wicked.arm5n
/wicked.arm6
/wicked.arm7
/wicked.dbg
/wicked.i486
/wicked.i586
/wicked.i686
/wicked.m68k
/wicked.mips
/wicked.mips64
/wicked.mpsl
/wicked.ppc
/wicked.ppc440
/wicked.powerppc
/wicked.root
/wicked.sh
/wicked.sh4
/wicked.spc
/wicked.sparc
/wicked.x32
/wicked.x64
/wicked.x86
/wicked.x86_32
/wicked.x86_64

# Reference: https://twitter.com/ankit_anubhav/status/1036554280851763200

/kenjiro.arc
/kenjiro.arm
/kenjiro.arm4
/kenjiro.arm4l
/kenjiro.arm4t
/kenjiro.arm4tl
/kenjiro.armv4l
/kenjiro.arm5
/kenjiro.arm5n
/kenjiro.arm6
/kenjiro.arm7
/kenjiro.dbg
/kenjiro.i486
/kenjiro.i586
/kenjiro.i686
/kenjiro.m68k
/kenjiro.mips
/kenjiro.mips64
/kenjiro.mpsl
/kenjiro.ppc
/kenjiro.ppc440
/kenjiro.powerppc
/kenjiro.root
/kenjiro.sh
/kenjiro.sh4
/kenjiro.spc
/kenjiro.sparc
/kenjiro.x32
/kenjiro.x64
/kenjiro.x86
/kenjiro.x86_32
/kenjiro.x86_64

# Reference: https://twitter.com/smii_mondher/status/969139428508790784

/besuto.arc
/besuto.arm
/besuto.arm4
/besuto.arm4l
/besuto.arm4t
/besuto.arm4tl
/besuto.armv4l
/besuto.arm5
/besuto.arm5n
/besuto.arm6
/besuto.arm7
/besuto.dbg
/besuto.i486
/besuto.i586
/besuto.i686
/besuto.m68k
/besuto.mips
/besuto.mips64
/besuto.mpsl
/besuto.ppc
/besuto.ppc440
/besuto.powerppc
/besuto.root
/besuto.sh
/besuto.sh4
/besuto.spc
/besuto.sparc
/besuto.x32
/besuto.x64
/besuto.x86
/besuto.x86_32
/besuto.x86_64

# Reference: https://twitter.com/360Netlab/status/963625133436006400

/arc.shell
/arm.shell
/arm4.shell
/arm4l.shell
/arm4t.shell
/arm4tl.shell
/armv4l.shell
/arm5.shell
/arm5n.shell
/arm6.shell
/arm7.shell
/dbg.shell
/i586.shell
/i686.shell
/m68k.shell
/mips.shell
/mips64.shell
/mpsl.shell
/ppc.shell
/sh4.shell
/spc.shell
/sparc.shell
/x32.shell
/x64.shell
/x86.shell
/x86_64.shell

# Reference: https://twitter.com/smii_mondher/status/962028744486502401

/arc.satori
/arm.satori
/arm4.satori
/arm4l.satori
/arm4t.satori
/arm4tl.satori
/armv4l.satori
/arm5.satori
/arm5n.satori
/arm6.satori
/arm7.satori
/dbg.satori
/i586.satori
/i686.satori
/m68k.satori
/mips.satori
/mips64.satori
/mpsl.satori
/ppc.satori
/sh4.satori
/spc.satori
/sparc.satori
/x32.satori
/x64.satori
/x86.satori
/x86_64.satori

# Reference: https://twitter.com/smii_mondher/status/958632104765554688

/jennifer.arc
/jennifer.arm
/jennifer.arm4
/jennifer.arm4l
/jennifer.arm4t
/jennifer.arm4tl
/jennifer.armv4l
/jennifer.arm5
/jennifer.arm5n
/jennifer.arm6
/jennifer.arm7
/jennifer.dbg
/jennifer.i486
/jennifer.i586
/jennifer.i686
/jennifer.m68k
/jennifer.mips
/jennifer.mips64
/jennifer.mpsl
/jennifer.ppc
/jennifer.ppc440
/jennifer.powerppc
/jennifer.root
/jennifer.sh
/jennifer.sh4
/jennifer.spc
/jennifer.sparc
/jennifer.x32
/jennifer.x64
/jennifer.x86
/jennifer.x86_32
/jennifer.x86_64

# Reference: https://twitter.com/0xrb/status/1121673907256213505
# Reference: https://twitter.com/0xrb/status/1121678039010570242

80.211.75.183:9375
/Zehir.sh
/Zehir1.sh
/z3hir.arc
/z3hir.arm
/z3hir.arm4
/z3hir.arm4l
/z3hir.arm4t
/z3hir.arm4tl
/z3hir.armv4l
/z3hir.arm5
/z3hir.arm5n
/z3hir.arm6
/z3hir.arm7
/z3hir.dbg
/z3hir.i486
/z3hir.i586
/z3hir.i686
/z3hir.m68k
/z3hir.mips
/z3hir.mips64
/z3hir.mpsl
/z3hir.ppc
/z3hir.ppc440
/z3hir.powerppc
/z3hir.root
/z3hir.sh
/z3hir.sh4
/z3hir.spc
/z3hir.sparc
/z3hir.x32
/z3hir.x64
/z3hir.x86
/z3hir.x86_32
/z3hir.x86_64

# Reference: https://twitter.com/bad_packets/status/1121669080522477570

/ntpdd.arc
/ntpdd.arm
/ntpdd.arm4
/ntpdd.arm4l
/ntpdd.arm4t
/ntpdd.arm4tl
/ntpdd.armv4l
/ntpdd.arm5
/ntpdd.arm5n
/ntpdd.arm6
/ntpdd.arm7
/ntpdd.dbg
/ntpdd.i486
/ntpdd.i586
/ntpdd.i686
/ntpdd.m68k
/ntpdd.mips
/ntpdd.mips64
/ntpdd.mpsl
/ntpdd.ppc
/ntpdd.ppc440
/ntpdd.powerppc
/ntpdd.root
/ntpdd.sh
/ntpdd.sh4
/ntpdd.spc
/ntpdd.sparc
/ntpdd.x32
/ntpdd.x64
/ntpdd.x86
/ntpdd.x86_32
/ntpdd.x86_64

# Reference: https://twitter.com/0xrb/status/1121697929947832320

/lessie1.sh
/goahead.arc
/goahead.arm
/goahead.arm4
/goahead.arm4l
/goahead.arm4t
/goahead.arm4tl
/goahead.armv4l
/goahead.arm5
/goahead.arm5n
/goahead.arm6
/goahead.arm7
/goahead.dbg
/goahead.i486
/goahead.i586
/goahead.i686
/goahead.m68k
/goahead.mips
/goahead.mips64
/goahead.mpsl
/goahead.ppc
/goahead.ppc440
/goahead.powerppc
/goahead.root
/goahead.sh
/goahead.sh4
/goahead.spc
/goahead.sparc
/goahead.x32
/goahead.x64
/goahead.x86
/goahead.x86_32
/goahead.x86_64
/hootoo.arc
/hootoo.arm
/hootoo.arm4
/hootoo.arm4l
/hootoo.arm4t
/hootoo.arm4tl
/hootoo.armv4l
/hootoo.arm5
/hootoo.arm5n
/hootoo.arm6
/hootoo.arm7
/hootoo.dbg
/hootoo.i486
/hootoo.i586
/hootoo.i686
/hootoo.m68k
/hootoo.mips
/hootoo.mips64
/hootoo.mpsl
/hootoo.ppc
/hootoo.ppc440
/hootoo.powerppc
/hootoo.root
/hootoo.sh
/hootoo.sh4
/hootoo.spc
/hootoo.sparc
/hootoo.x32
/hootoo.x64
/hootoo.x86
/hootoo.x86_32
/hootoo.x86_64
/rtek.arc
/rtek.arm
/rtek.arm4
/rtek.arm4l
/rtek.arm4t
/rtek.arm4tl
/rtek.armv4l
/rtek.arm5
/rtek.arm5n
/rtek.arm6
/rtek.arm7
/rtek.dbg
/rtek.i486
/rtek.i586
/rtek.i686
/rtek.m68k
/rtek.mips
/rtek.mips64
/rtek.mpsl
/rtek.ppc
/rtek.ppc440
/rtek.powerppc
/rtek.root
/rtek.sh
/rtek.sh4
/rtek.spc
/rtek.sparc
/rtek.x32
/rtek.x64
/rtek.x86
/rtek.x86_32
/rtek.x86_64
/spp.arc
/spp.arm
/spp.arm4
/spp.arm4l
/spp.arm4t
/spp.arm4tl
/spp.armv4l
/spp.arm5
/spp.arm5n
/spp.arm6
/spp.arm7
/spp.dbg
/spp.i486
/spp.i586
/spp.i686
/spp.m68k
/spp.mips
/spp.mips64
/spp.mpsl
/spp.ppc
/spp.ppc440
/spp.powerppc
/spp.root
/spp.sh
/spp.sh4
/spp.spc
/spp.sparc
/spp.x32
/spp.x64
/spp.x86
/spp.x86_32
/spp.x86_64
/uchttpd.arc
/uchttpd.arm
/uchttpd.arm4
/uchttpd.arm4l
/uchttpd.arm4t
/uchttpd.arm4tl
/uchttpd.armv4l
/uchttpd.arm5
/uchttpd.arm5n
/uchttpd.arm6
/uchttpd.arm7
/uchttpd.dbg
/uchttpd.i486
/uchttpd.i586
/uchttpd.i686
/uchttpd.m68k
/uchttpd.mips
/uchttpd.mips64
/uchttpd.mpsl
/uchttpd.ppc
/uchttpd.ppc440
/uchttpd.powerppc
/uchttpd.root
/uchttpd.sh
/uchttpd.sh4
/uchttpd.spc
/uchttpd.sparc
/uchttpd.x32
/uchttpd.x64
/uchttpd.x86
/uchttpd.x86_32
/uchttpd.x86_64

# Reference: https://twitter.com/0xrb/status/1121820943972593665
# Reference: https://twitter.com/0xrb/status/1121831829298769920

/Yowai1.sh
/maouji1.sh
/maouji.arc
/maouji.arm
/maouji.arm4
/maouji.arm4l
/maouji.arm4t
/maouji.arm4tl
/maouji.armv4l
/maouji.arm5
/maouji.arm5n
/maouji.arm6
/maouji.arm7
/maouji.dbg
/maouji.i486
/maouji.i586
/maouji.i686
/maouji.m68k
/maouji.mips
/maouji.mips64
/maouji.mpsl
/maouji.ppc
/maouji.ppc440
/maouji.powerppc
/maouji.root
/maouji.sh
/maouji.sh4
/maouji.spc
/maouji.sparc
/maouji.x32
/maouji.x64
/maouji.x86
/maouji.x86_32
/maouji.x86_64

# Reference: https://twitter.com/0xrb/status/1121815166348218368

185.244.25.173:6996
/Fibre.arc
/Fibre.arm
/Fibre.arm4
/Fibre.arm4l
/Fibre.arm4t
/Fibre.arm4tl
/Fibre.armv4l
/Fibre.arm5
/Fibre.arm5n
/Fibre.arm6
/Fibre.arm7
/Fibre.dbg
/Fibre.i486
/Fibre.i586
/Fibre.i686
/Fibre.m68k
/Fibre.mips
/Fibre.mips64
/Fibre.mpsl
/Fibre.ppc
/Fibre.ppc440
/Fibre.powerppc
/Fibre.root
/Fibre.sh
/Fibre.sh4
/Fibre.spc
/Fibre.sparc
/Fibre.x32
/Fibre.x64
/Fibre.x86
/Fibre.x86_32
/Fibre.x86_64

# Reference: https://twitter.com/bad_packets/status/1122017887076507653
# Reference: https://twitter.com/0xrb/status/1122040829109886976
# Reference: https://twitter.com/bad_packets/status/1122046441256415232

/mpps
5.180.40.102:89
180.40.102.89:89
1vex.cn

# Reference: https://twitter.com/0xrb/status/1122057859259195393

/c4tch_m3_if_y0u_c4n.arc
/c4tch_m3_if_y0u_c4n.arm
/c4tch_m3_if_y0u_c4n.arm4
/c4tch_m3_if_y0u_c4n.arm4l
/c4tch_m3_if_y0u_c4n.arm4t
/c4tch_m3_if_y0u_c4n.arm4tl
/c4tch_m3_if_y0u_c4n.armv4l
/c4tch_m3_if_y0u_c4n.arm5
/c4tch_m3_if_y0u_c4n.arm5n
/c4tch_m3_if_y0u_c4n.arm6
/c4tch_m3_if_y0u_c4n.arm7
/c4tch_m3_if_y0u_c4n.dbg
/c4tch_m3_if_y0u_c4n.i486
/c4tch_m3_if_y0u_c4n.i586
/c4tch_m3_if_y0u_c4n.i686
/c4tch_m3_if_y0u_c4n.m68k
/c4tch_m3_if_y0u_c4n.mips
/c4tch_m3_if_y0u_c4n.mips64
/c4tch_m3_if_y0u_c4n.mpsl
/c4tch_m3_if_y0u_c4n.ppc
/c4tch_m3_if_y0u_c4n.ppc440
/c4tch_m3_if_y0u_c4n.powerppc
/c4tch_m3_if_y0u_c4n.root
/c4tch_m3_if_y0u_c4n.sh
/c4tch_m3_if_y0u_c4n.sh4
/c4tch_m3_if_y0u_c4n.spc
/c4tch_m3_if_y0u_c4n.sparc
/c4tch_m3_if_y0u_c4n.x32
/c4tch_m3_if_y0u_c4n.x64
/c4tch_m3_if_y0u_c4n.x86
/c4tch_m3_if_y0u_c4n.x86_32
/c4tch_m3_if_y0u_c4n.x86_64

# Reference: https://twitter.com/0xrb/status/1122087783739166720

/uint35.sh
/ako.arc
/ako.arm
/ako.arm4
/ako.arm4l
/ako.arm4t
/ako.arm4tl
/ako.armv4l
/ako.arm5
/ako.arm5n
/ako.arm6
/ako.arm7
/ako.dbg
/ako.i486
/ako.i586
/ako.i686
/ako.m68k
/ako.mips
/ako.mips64
/ako.mpsl
/ako.ppc
/ako.ppc440
/ako.powerppc
/ako.root
/ako.sh
/ako.sh4
/ako.spc
/ako.sparc
/ako.x32
/ako.x64
/ako.x86
/ako.x86_32
/ako.x86_64

# Reference: https://twitter.com/smii_mondher/status/1122583415667273728

/hx86_64

# Reference: https://twitter.com/0xrb/status/1122755177033768961

/sasuke.arc
/sasuke.arm
/sasuke.arm4
/sasuke.arm4l
/sasuke.arm4t
/sasuke.arm4tl
/sasuke.armv4l
/sasuke.arm5
/sasuke.arm5n
/sasuke.arm6
/sasuke.arm7
/sasuke.dbg
/sasuke.i486
/sasuke.i586
/sasuke.i686
/sasuke.m68k
/sasuke.mips
/sasuke.mips64
/sasuke.mpsl
/sasuke.ppc
/sasuke.ppc440
/sasuke.powerppc
/sasuke.root
/sasuke.sh
/sasuke.sh4
/sasuke.spc
/sasuke.sparc
/sasuke.x32
/sasuke.x64
/sasuke.x86
/sasuke.x86_32
/sasuke.x86_64
163.172.154.119:3771

# Reference: https://twitter.com/0xrb/status/1122728648996298752

/arc.akira
/arm.akira
/arm4.akira
/arm4l.akira
/arm4t.akira
/arm4tl.akira
/armv4l.akira
/arm5.akira
/arm5n.akira
/arm6.akira
/arm7.akira
/dbg.akira
/i486.akira
/i586.akira
/i686.akira
/m68k.akira
/mips.akira
/mips64.akira
/mpsl.akira
/ppc.akira
/ppc440.akira
/powerppc.akira
/root.akira
/sh.akira
/sh4.akira
/spc.akira
/sparc.akira
/x32.akira
/x64.akira
/x86.akira
/x86_32.akira
/x86_64.akira
/arc.akira.ak
/arm.akira.ak
/arm4.akira.ak
/arm4l.akira.ak
/arm4t.akira.ak
/arm4tl.akira.ak
/armv4l.akira.ak
/arm5.akira.ak
/arm5n.akira.ak
/arm6.akira.ak
/arm7.akira.ak
/dbg.akira.ak
/i486.akira.ak
/i586.akira.ak
/i686.akira.ak
/m68k.akira.ak
/mips.akira.ak
/mips64.akira.ak
/mpsl.akira.ak
/ppc.akira.ak
/ppc440.akira.ak
/powerppc.akira.ak
/root.akira.ak
/sh.akira.ak
/sh4.akira.ak
/spc.akira.ak
/sparc.akira.ak
/x32.akira.ak
/x64.akira.ak
/x86.akira.ak
/x86_32.akira.ak
/x86_64.akira.ak
185.244.25.199:1791

# Reference: https://twitter.com/0xrb/status/1123162337974734848

185.172.110.226:65535

# Reference: https://twitter.com/0xrb/status/1123149312689491973

23.19.58.91:6075

# Reference: https://twitter.com/UrBogan/status/1124765311729750016

/jaknet.arc
/jaknet.arm
/jaknet.arm4
/jaknet.arm4l
/jaknet.arm4t
/jaknet.arm4tl
/jaknet.armv4l
/jaknet.arm5
/jaknet.arm5n
/jaknet.arm6
/jaknet.arm7
/jaknet.dbg
/jaknet.i486
/jaknet.i586
/jaknet.i686
/jaknet.m68k
/jaknet.mips
/jaknet.mips64
/jaknet.mpsl
/jaknet.ppc
/jaknet.ppc440
/jaknet.powerppc
/jaknet.root
/jaknet.sh
/jaknet.sh4
/jaknet.spc
/jaknet.sparc
/jaknet.x32
/jaknet.x64
/jaknet.x86
/jaknet.x86_32
/jaknet.x86_64

# Reference: https://twitter.com/UrBogan/status/1061633676688019456

/loli.arc
/loli.arm
/loli.arm4
/loli.arm4l
/loli.arm4t
/loli.arm4tl
/loli.armv4l
/loli.arm5
/loli.arm5n
/loli.arm6
/loli.arm7
/loli.dbg
/loli.i486
/loli.i586
/loli.i686
/loli.m68k
/loli.mips
/loli.mips64
/loli.mpsl
/loli.ppc
/loli.ppc440
/loli.powerppc
/loli.root
/loli.sh
/loli.sh4
/loli.spc
/loli.sparc
/loli.x32
/loli.x64
/loli.x86
/loli.x86_32
/loli.x86_64
/loli.huawei
/loli.zte

# Reference: https://twitter.com/rommeljoven17/status/1125966892697415680

/gobot.arc
/gobot.arm
/gobot.arm4
/gobot.arm4l
/gobot.arm4t
/gobot.arm4tl
/gobot.armv4l
/gobot.arm5
/gobot.arm5n
/gobot.arm6
/gobot.arm64
/gobot.arm7
/gobot.dbg
/gobot.i486
/gobot.i586
/gobot.i686
/gobot.m68k
/gobot.mips
/gobot.mips64
/gobot.mipsl
/gobot.mpsl
/gobot.ppc
/gobot.ppc440
/gobot.powerppc
/gobot.root
/gobot.sh
/gobot.sh4
/gobot.spc
/gobot.sparc
/gobot.x32
/gobot.x64
/gobot.x86
/gobot.x86_32
/gobot.x86_64
/gobot.bsd
/gobot.exe
/gobot.mac

# Reference: https://twitter.com/rommeljoven17/status/1036430038894166016

/Gai.arc
/Gai.arm
/Gai.arm4
/Gai.arm4l
/Gai.arm4t
/Gai.arm4tl
/Gai.armv4l
/Gai.arm5
/Gai.arm5n
/Gai.arm6
/Gai.arm64
/Gai.arm7
/Gai.dbg
/Gai.i486
/Gai.i586
/Gai.i686
/Gai.m68k
/Gai.mips
/Gai.mips64
/Gai.mpsl
/Gai.ppc
/Gai.ppc440
/Gai.powerppc
/Gai.root
/Gai.sh
/Gai.sh4
/Gai.spc
/Gai.sparc
/Gai.x32
/Gai.x64
/Gai.x86
/Gai.x86_32
/Gai.x86_64

# Reference: https://twitter.com/_odisseus/status/1128971465074855936

/un1on.sh
/yuh.arc
/yuh.arm
/yuh.arm4
/yuh.arm4l
/yuh.arm4t
/yuh.arm4tl
/yuh.arm4tll
/yuh.armv4l
/yuh.arm5
/yuh.arm5n
/yuh.arm6
/yuh.arm64
/yuh.arm7
/yuh.dbg
/yuh.i4
/yuh.i486
/yuh.i586
/yuh.i686
/yuh.m68k
/yuh.mips
/yuh.mips64
/yuh.mpsl
/yuh.mipsel
/yuh.ppc
/yuh.ppc2
/yuh.ppc440
/yuh.powerppc
/yuh.root
/yuh.sh
/yuh.sh4
/yuh.ssh4
/yuh.spc
/yuh.sparc
/yuh.x32
/yuh.x64
/yuh.x86
/yuh.x86_32
/yuh.x86_64

# Reference: https://twitter.com/bad_packets/status/1130361720239665152

/arc.akirag
/arm.akirag
/arm4.akirag
/arm4l.akirag
/arm4t.akirag
/arm4tl.akirag
/armv4l.akirag
/arm5.akirag
/arm5n.akirag
/arm6.akirag
/arm7.akirag
/dbg.akirag
/i486.akirag
/i586.akirag
/i686.akirag
/m68k.akirag
/mips.akirag
/mips64.akirag
/mpsl.akirag
/ppc.akirag
/sh4.akirag
/spc.akirag
/sparc.akirag
/x32.akirag
/x64.akirag
/x86.akirag
/x86_64.akirag

# Reference: https://www.stratosphereips.org/blog/2019/5/17/iot-malware-analysis-series-a-mirai-variant-in-ctu-iot-malware-capture-49-1

 134.209.72.171:4554

# Reference: https://twitter.com/bad_packets/status/1130574485008949249

/sorai.arc
/sorai.arm
/sorai.arm4
/sorai.arm4l
/sorai.arm4t
/sorai.arm4tl
/sorai.arm4tll
/sorai.armv4l
/sorai.arm5
/sorai.arm5n
/sorai.arm6
/sorai.arm64
/sorai.arm7
/sorai.dbg
/sorai.i4
/sorai.i486
/sorai.i586
/sorai.i686
/sorai.m68k
/sorai.mips
/sorai.mips64
/sorai.mpsl
/sorai.mipsel
/sorai.ppc
/sorai.ppc2
/sorai.ppc440
/sorai.powerppc
/sorai.root
/sorai.sh
/sorai.sh4
/sorai.ssh4
/sorai.spc
/sorai.sparc
/sorai.x32
/sorai.x64
/sorai.x86
/sorai.x86_32
/sorai.x86_64

# Reference: https://otx.alienvault.com/pulse/5ce6ae4b1c699501802c814c

32.235.102.123:1337
ililililililililil.hopto.org

# Reference: https://twitter.com/VessOnSecurity/status/1130611319961509889

/oka.arc
/oka.arm
/oka.arm4
/oka.arm4l
/oka.arm4t
/oka.arm4tl
/oka.arm4tll
/oka.armv4l
/oka.arm5
/oka.arm5n
/oka.arm6
/oka.arm64
/oka.arm7
/oka.dbg
/oka.i4
/oka.i486
/oka.i586
/oka.i686
/oka.m68k
/oka.mips
/oka.mips64
/oka.mpsl
/oka.mipsel
/oka.ppc
/oka.ppc2
/oka.ppc440
/oka.powerppc
/oka.root
/oka.sh
/oka.sh4
/oka.ssh4
/oka.spc
/oka.sparc
/oka.x32
/oka.x64
/oka.x86
/oka.x86_32
/oka.x86_64
/LordAlma.arc
/LordAlma.arm
/LordAlma.arm4
/LordAlma.arm4l
/LordAlma.arm4t
/LordAlma.arm4tl
/LordAlma.arm4tll
/LordAlma.armv4l
/LordAlma.arm5
/LordAlma.arm5n
/LordAlma.arm6
/LordAlma.arm64
/LordAlma.arm7
/LordAlma.dbg
/LordAlma.i4
/LordAlma.i486
/LordAlma.i586
/LordAlma.i686
/LordAlma.m68k
/LordAlma.mips
/LordAlma.mips64
/LordAlma.mpsl
/LordAlma.mipsel
/LordAlma.ppc
/LordAlma.ppc2
/LordAlma.ppc440
/LordAlma.powerppc
/LordAlma.root
/LordAlma.sh
/LordAlma.sh4
/LordAlma.ssh4
/LordAlma.spc
/LordAlma.sparc
/LordAlma.x32
/LordAlma.x64
/LordAlma.x86
/LordAlma.x86_32
/LordAlma.x86_64

# Reference: https://twitter.com/bad_packets/status/1132010592061890560

/Dito.arc
/Dito.arm
/Dito.arm4
/Dito.arm4l
/Dito.arm4t
/Dito.arm4tl
/Dito.arm4tll
/Dito.armv4l
/Dito.arm5
/Dito.arm5n
/Dito.arm6
/Dito.arm64
/Dito.arm7
/Dito.dbg
/Dito.i4
/Dito.i486
/Dito.i586
/Dito.i686
/Dito.m68k
/Dito.mips
/Dito.mips64
/Dito.mpsl
/Dito.mipsel
/Dito.ppc
/Dito.ppc2
/Dito.ppc440
/Dito.powerppc
/Dito.root
/Dito.sh
/Dito.sh4
/Dito.ssh4
/Dito.spc
/Dito.sparc
/Dito.x32
/Dito.x64
/Dito.x86
/Dito.x86_32
/Dito.x86_64

# Reference: https://twitter.com/_odisseus/status/1132952263826259968

/garc
/garm
/garm4
/garm4l
/garm4t
/garm4tl
/garm4tll
/garmv4l
/garm5
/garm5n
/garm6
/garm64
/garm7
/gi486
/gi586
/gi686
/gm68k
/gmips
/gmips64
/gmipsel
/gmpsl
/gppc
/gppc2
/gpowerppc
/gspc
/gxtensa
/gsh-sh4
/gsh4
/gx86
/gx86-64-core-i7
/gx86-core2
/gx86-i686
/ugei1
/ugei2
/ugei3
/ugei4
/ugei5
/ugei6

# Reference: https://twitter.com/ankit_anubhav/status/1132974251194011648

/Faker.arc
/Faker.arm
/Faker.arm4
/Faker.arm4l
/Faker.arm4t
/Faker.arm4tl
/Faker.arm4tll
/Faker.armv4l
/Faker.arm5
/Faker.arm5n
/Faker.arm6
/Faker.arm64
/Faker.arm7
/Faker.dbg
/Faker.i4
/Faker.i486
/Faker.i586
/Faker.i686
/Faker.m68k
/Faker.mips
/Faker.mips64
/Faker.mpsl
/Faker.mipsel
/Faker.ppc
/Faker.ppc2
/Faker.ppc440
/Faker.powerppc
/Faker.root
/Faker.sh
/Faker.sh4
/Faker.ssh4
/Faker.spc
/Faker.sparc
/Faker.x32
/Faker.x64
/Faker.x86
/Faker.x86_32
/Faker.x86_64

# Reference: https://twitter.com/0xrb/status/1133055807572959232

122.10.82.239:5022

# Reference: https://twitter.com/VessOnSecurity/status/1133323732108402691

/daddyscum.arc
/daddyscum.arm
/daddyscum.arm4
/daddyscum.arm4l
/daddyscum.arm4t
/daddyscum.arm4tl
/daddyscum.arm4tll
/daddyscum.armv4l
/daddyscum.arm5
/daddyscum.arm5n
/daddyscum.arm6
/daddyscum.arm64
/daddyscum.arm7
/daddyscum.dbg
/daddyscum.i4
/daddyscum.i486
/daddyscum.i586
/daddyscum.i686
/daddyscum.m68k
/daddyscum.mips
/daddyscum.mips64
/daddyscum.mpsl
/daddyscum.mipsel
/daddyscum.ppc
/daddyscum.ppc2
/daddyscum.ppc440
/daddyscum.powerppc
/daddyscum.root
/daddyscum.sh
/daddyscum.sh4
/daddyscum.ssh4
/daddyscum.spc
/daddyscum.sparc
/daddyscum.x32
/daddyscum.x64
/daddyscum.x86
/daddyscum.x86_32
/daddyscum.x86_64
/GenAI.arc
/GenAI.arm
/GenAI.arm4
/GenAI.arm4l
/GenAI.arm4t
/GenAI.arm4tl
/GenAI.arm4tll
/GenAI.armv4l
/GenAI.arm5
/GenAI.arm5n
/GenAI.arm6
/GenAI.arm64
/GenAI.arm7
/GenAI.dbg
/GenAI.i4
/GenAI.i486
/GenAI.i586
/GenAI.i686
/GenAI.m68k
/GenAI.mips
/GenAI.mips64
/GenAI.mpsl
/GenAI.mipsel
/GenAI.ppc
/GenAI.ppc2
/GenAI.ppc440
/GenAI.powerppc
/GenAI.root
/GenAI.sh
/GenAI.sh4
/GenAI.ssh4
/GenAI.spc
/GenAI.sparc
/GenAI.x32
/GenAI.x64
/GenAI.x86
/GenAI.x86_32
/GenAI.x86_64
/Orage.arc
/Orage.arm
/Orage.arm4
/Orage.arm4l
/Orage.arm4t
/Orage.arm4tl
/Orage.arm4tll
/Orage.armv4l
/Orage.arm5
/Orage.arm5n
/Orage.arm6
/Orage.arm64
/Orage.arm7
/Orage.dbg
/Orage.i4
/Orage.i486
/Orage.i586
/Orage.i686
/Orage.m68k
/Orage.mips
/Orage.mips64
/Orage.mpsl
/Orage.mipsel
/Orage.ppc
/Orage.ppc2
/Orage.ppc440
/Orage.powerppc
/Orage.root
/Orage.sh
/Orage.sh4
/Orage.ssh4
/Orage.spc
/Orage.sparc
/Orage.x32
/Orage.x64
/Orage.x86
/Orage.x86_32
/Orage.x86_64
/Trouble.arc
/Trouble.arm
/Trouble.arm4
/Trouble.arm4l
/Trouble.arm4t
/Trouble.arm4tl
/Trouble.arm4tll
/Trouble.armv4l
/Trouble.arm5
/Trouble.arm5n
/Trouble.arm6
/Trouble.arm64
/Trouble.arm7
/Trouble.dbg
/Trouble.i4
/Trouble.i486
/Trouble.i586
/Trouble.i686
/Trouble.m68k
/Trouble.mips
/Trouble.mips64
/Trouble.mpsl
/Trouble.mipsel
/Trouble.ppc
/Trouble.ppc2
/Trouble.ppc440
/Trouble.powerppc
/Trouble.root
/Trouble.sh
/Trouble.sh4
/Trouble.ssh4
/Trouble.spc
/Trouble.sparc
/Trouble.x32
/Trouble.x64
/Trouble.x86
/Trouble.x86_32
/Trouble.x86_64

# Reference: https://blog.netlab.360.com/new-mirai-variant-with-dga/

tr069.online
tr069.support
tr069.tech
zugzwang.me

# Reference: https://twitter.com/bad_packets/status/1134904673289162752

/_-255.Net.arc
/_-255.Net.arm
/_-255.Net.arm4
/_-255.Net.arm4l
/_-255.Net.arm4t
/_-255.Net.arm4tl
/_-255.Net.arm4tll
/_-255.Net.armv4l
/_-255.Net.arm5
/_-255.Net.arm5n
/_-255.Net.arm6
/_-255.Net.arm64
/_-255.Net.arm7
/_-255.Net.dbg
/_-255.Net.i4
/_-255.Net.i486
/_-255.Net.i586
/_-255.Net.i686
/_-255.Net.m68k
/_-255.Net.mips
/_-255.Net.mips64
/_-255.Net.mpsl
/_-255.Net.mipsel
/_-255.Net.ppc
/_-255.Net.ppc2
/_-255.Net.ppc440
/_-255.Net.powerppc
/_-255.Net.root
/_-255.Net.root32
/_-255.Net.sh
/_-255.Net.sh4
/_-255.Net.ssh4
/_-255.Net.spc
/_-255.Net.sparc
/_-255.Net.x32
/_-255.Net.x64
/_-255.Net.x86
/_-255.Net.x86_32
/_-255.Net.x86_64

# Reference: https://twitter.com/bad_packets/status/1135250671798611975

/bigPussi.arc
/bigPussi.arm
/bigPussi.arm4
/bigPussi.arm4l
/bigPussi.arm4t
/bigPussi.arm4tl
/bigPussi.arm4tll
/bigPussi.armv4l
/bigPussi.arm5
/bigPussi.arm5n
/bigPussi.arm6
/bigPussi.arm64
/bigPussi.arm7
/bigPussi.dbg
/bigPussi.i4
/bigPussi.i486
/bigPussi.i586
/bigPussi.i686
/bigPussi.m68k
/bigPussi.mips
/bigPussi.mips64
/bigPussi.mpsl
/bigPussi.mipsel
/bigPussi.ppc
/bigPussi.ppc2
/bigPussi.ppc440
/bigPussi.powerppc
/bigPussi.root
/bigPussi.root32
/bigPussi.sh
/bigPussi.sh4
/bigPussi.ssh4
/bigPussi.spc
/bigPussi.sparc
/bigPussi.x32
/bigPussi.x64
/bigPussi.x86
/bigPussi.x86_32
/bigPussi.x86_64
/spc.spc

# Reference: https://twitter.com/liuya0904/status/1135390856150544384

185.244.25.166:5484

# Reference: https://twitter.com/0xrb/status/1135869164239769601

cnc.yiffgallery.xyz
185.244.25.173:6996

# Reference: https://unit42.paloaltonetworks.com/new-mirai-variant-adds-8-new-exploits-targets-additional-iot-devices/
# Reference: https://otx.alienvault.com/pulse/5cfa66ced7bc379b04017f36

akuma.pw
akumaiotsolutions.pw

# Reference: https://twitter.com/bad_packets/status/1138177432870014976

/orphic.arc
/orphic.arm
/orphic.arm4
/orphic.arm4l
/orphic.arm4t
/orphic.arm4tl
/orphic.arm4tll
/orphic.armv4l
/orphic.arm5
/orphic.arm5n
/orphic.arm6
/orphic.arm64
/orphic.arm7
/orphic.dbg
/orphic.i4
/orphic.i486
/orphic.i586
/orphic.i686
/orphic.kill
/orphic.m68k
/orphic.mips
/orphic.mips64
/orphic.mpsl
/orphic.mipsel
/orphic.ppc
/orphic.ppc2
/orphic.ppc440
/orphic.powerppc
/orphic.root
/orphic.root32
/orphic.sh
/orphic.sh4
/orphic.ssh4
/orphic.spc
/orphic.sparc
/orphic.x32
/orphic.x64
/orphic.x86
/orphic.x86_32
/orphic.x86_64

# Reference: https://twitter.com/MasafumiNegishi/status/1138345529190969344

185.244.25.148:2

# Reference: https://twitter.com/0xrb/status/1139413477297029120

185.244.25.164:3456
/myth.arc
/myth.arm
/myth.arm4
/myth.arm4l
/myth.arm4t
/myth.arm4tl
/myth.arm4tll
/myth.armv4l
/myth.arm5
/myth.arm5n
/myth.arm6
/myth.arm64
/myth.arm7
/myth.dbg
/myth.i4
/myth.i486
/myth.i586
/myth.i686
/myth.kill
/myth.m68k
/myth.mips
/myth.mips64
/myth.mpsl
/myth.mipsel
/myth.ppc
/myth.ppc2
/myth.ppc440
/myth.powerppc
/myth.root
/myth.root32
/myth.sh
/myth.sh4
/myth.ssh4
/myth.spc
/myth.sparc
/myth.x32
/myth.x64
/myth.x86
/myth.x86_32
/myth.x86_64
/myth1.sh
/doxarc
/doxarm
/doxarm4
/doxarm4l
/doxarm4t
/doxarm4tl
/doxarm4tll
/doxarmv4l
/doxarm5
/doxarm5n
/doxarm6
/doxarm64
/doxarm7
/doxdbg
/doxi4
/doxi486
/doxi586
/doxi686
/doxkill
/doxm68k
/doxmips
/doxmips64
/doxmpsl
/doxmipsel
/doxppc
/doxppc2
/doxppc440
/doxpowerppc
/doxroot
/doxroot32
/doxsh
/doxsh4
/doxssh4
/doxspc
/doxsparc
/doxx32
/doxx64
/doxx86
/doxx86_32
/doxx86_64

# Reference: https://twitter.com/VessOnSecurity/status/1139243241210093571

/okazzx.arc
/okazzx.arm
/okazzx.arm4
/okazzx.arm4l
/okazzx.arm4t
/okazzx.arm4tl
/okazzx.arm4tll
/okazzx.armv4l
/okazzx.arm5
/okazzx.arm5n
/okazzx.arm6
/okazzx.arm64
/okazzx.arm7
/okazzx.dbg
/okazzx.i4
/okazzx.i486
/okazzx.i586
/okazzx.i686
/okazzx.kill
/okazzx.m68k
/okazzx.mips
/okazzx.mips64
/okazzx.mpsl
/okazzx.mipsel
/okazzx.ppc
/okazzx.ppc2
/okazzx.ppc440
/okazzx.powerppc
/okazzx.root
/okazzx.root32
/okazzx.sh
/okazzx.sh4
/okazzx.ssh4
/okazzx.spc
/okazzx.sparc
/okazzx.x32
/okazzx.x64
/okazzx.x86
/okazzx.x86_32
/okazzx.x86_64
/obaris.arc
/obaris.arm
/obaris.arm4
/obaris.arm4l
/obaris.arm4t
/obaris.arm4tl
/obaris.arm4tll
/obaris.armv4l
/obaris.arm5
/obaris.arm5n
/obaris.arm6
/obaris.arm64
/obaris.arm7
/obaris.dbg
/obaris.i4
/obaris.i486
/obaris.i586
/obaris.i686
/obaris.kill
/obaris.m68k
/obaris.mips
/obaris.mips64
/obaris.mpsl
/obaris.mipsel
/obaris.ppc
/obaris.ppc2
/obaris.ppc440
/obaris.powerppc
/obaris.root
/obaris.root32
/obaris.sh
/obaris.sh4
/obaris.ssh4
/obaris.spc
/obaris.sparc
/obaris.x32
/obaris.x64
/obaris.x86
/obaris.x86_32
/obaris.x86_64

# Reference: https://twitter.com/bad_packets/status/1141078356273688576

68.183.151.62:8372

# Reference: https://twitter.com/bad_packets/status/1140899261766352897

185.244.25.157:5034

# Reference: https://twitter.com/bad_packets/status/1140728797823557632

188.165.179.9:358
188.165.179.9:666

# Reference: https://twitter.com/ankit_anubhav/status/1140621062197014529 (# Andypandy)
# Reference: https://twitter.com/bad_packets/status/1139265052341522432
# Reference: https://twitter.com/DomainTools/status/1139274018693869568

http://104.244.76.15
cnc.ddoshard.com
miningv2.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/193.70.26.48/relations

cncv2.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/209.141.55.73/relations

pstkgpo.us

# Reference: https://twitter.com/ankit_anubhav/status/1140623068844322816
# Reference: https://twitter.com/nicter_jp/status/1141179278723186688

94.156.77.36:45815
masterbogachev.com

# Reference: https://twitter.com/MasafumiNegishi/status/1138345529190969344

185.244.25.148:2

# Reference: https://twitter.com/bad_packets/status/1141284920238563328

/arc.xeno.ak
/arm.xeno.ak
/arm4.xeno.ak
/arm4l.xeno.ak
/arm4t.xeno.ak
/arm4tl.xeno.ak
/armv4l.xeno.ak
/arm5.xeno.ak
/arm5n.xeno.ak
/arm6.xeno.ak
/arm64.xeno.ak
/arm7.xeno.ak
/dbg.xeno.ak
/i486.xeno.ak
/i586.xeno.ak
/i686.xeno.ak
/m68k.xeno.ak
/mips.xeno.ak
/mips64.xeno.ak
/mpsl.xeno.ak
/mipsel.xeno.ak
/ppc.xeno.ak
/ppc440.xeno.ak
/powerppc.xeno.ak
/sh4.xeno.ak
/spc.xeno.ak
/sparc.xeno.ak
/x32.xeno.ak
/x64.xeno.ak
/x86.xeno.ak
/x86_32.xeno.ak
/x86_64.xeno.ak

# Reference: https://twitter.com/bad_packets/status/1141584871812292608

91.134.120.5:1024

# Reference: https://twitter.com/bad_packets/status/1141849087588753408

/SinixV4.arc
/SinixV4.arm
/SinixV4.arm4
/SinixV4.arm4l
/SinixV4.arm4t
/SinixV4.arm4tl
/SinixV4.arm4tll
/SinixV4.armv4l
/SinixV4.arm5
/SinixV4.arm5n
/SinixV4.arm6
/SinixV4.arm64
/SinixV4.arm7
/SinixV4.dbg
/SinixV4.i4
/SinixV4.i486
/SinixV4.i586
/SinixV4.i686
/SinixV4.kill
/SinixV4.m68k
/SinixV4.mips
/SinixV4.mips64
/SinixV4.mpsl
/SinixV4.mipsel
/SinixV4.ppc
/SinixV4.ppc2
/SinixV4.ppc440
/SinixV4.powerppc
/SinixV4.root
/SinixV4.root32
/SinixV4.sh
/SinixV4.sh4
/SinixV4.ssh4
/SinixV4.spc
/SinixV4.sparc
/SinixV4.x32
/SinixV4.x64
/SinixV4.x86
/SinixV4.x86_32
/SinixV4.x86_64

# Reference: https://twitter.com/bad_packets/status/1142545722367066112

79.137.123.208:555

# Reference: https://twitter.com/bad_packets/status/1142693343496794113

ardp.hldns.ru

# Reference: https://twitter.com/bad_packets/status/1140726096440287233

68.183.55.5:9375

# Reference: https://twitter.com/bad_packets/status/1142600441919750144

104.248.93.159:8372

# Reference: https://twitter.com/MasafumiNegishi/status/1143712813400989697

185.244.25.241:38344

# Reference: https://twitter.com/VessOnSecurity/status/1143903930474213377

198.98.51.104:2737
198.98.51.104:6743
198.98.51.104:8764
198.98.51.104:9182

# Reference: https://www.bleepingcomputer.com/news/security/botnet-uses-ssh-and-adb-to-create-android-cryptomining-army/

198.98.51.104:282

# Reference: https://twitter.com/bad_packets/status/1144154367500550145
# Reference: https://twitter.com/bad_packets/status/1146592416016695296

103.83.157.41:5301
103.83.157.46:5301

# Reference: https://twitter.com/bad_packets/status/1145995657200558080

198.98.59.176:3301

# Reference: https://twitter.com/bad_packets/status/1145985623607533569

198.98.59.176:52869

# Reference: https://twitter.com/bad_packets/status/1146216554943528961

185.172.110.226:1791

# Reference: https://twitter.com/bad_packets/status/1146920735891283968

/skatamayna.arc
/skatamayna.arm
/skatamayna.arm4
/skatamayna.arm4l
/skatamayna.arm4t
/skatamayna.arm4tl
/skatamayna.arm4tll
/skatamayna.armv4l
/skatamayna.arm5
/skatamayna.arm5n
/skatamayna.arm6
/skatamayna.arm64
/skatamayna.arm7
/skatamayna.dbg
/skatamayna.i4
/skatamayna.i486
/skatamayna.i586
/skatamayna.i686
/skatamayna.kill
/skatamayna.m68k
/skatamayna.mips
/skatamayna.mips64
/skatamayna.mpsl
/skatamayna.mipsel
/skatamayna.ppc
/skatamayna.ppc2
/skatamayna.ppc440
/skatamayna.powerppc
/skatamayna.root
/skatamayna.root32
/skatamayna.sh
/skatamayna.sh4
/skatamayna.ssh4
/skatamayna.spc
/skatamayna.sparc
/skatamayna.x32
/skatamayna.x64
/skatamayna.x86
/skatamayna.x86_32
/skatamayna.x86_64

# Reference: https://twitter.com/bad_packets/status/1146887589128892416

159.89.143.217:2269

# Reference: https://twitter.com/bad_packets/status/1147627138817748993

185.172.110.224:65533

# Reference: https://twitter.com/bad_packets/status/1147981572361994240

91.92.109.123:33677

# Reference: https://twitter.com/bad_packets/status/1147984025660751872

185.244.25.157:5034

# Reference: https://twitter.com/bad_packets/status/1148770798565380096

185.172.110.224:65532

# Reference: https://twitter.com/bad_packets/status/1148855521891405824

176.31.78.54:45587
/5743.arc
/5743.arm
/5743.arm4
/5743.arm4l
/5743.arm4t
/5743.arm4tl
/5743.arm4tll
/5743.armv4l
/5743.arm5
/5743.arm5n
/5743.arm6
/5743.arm64
/5743.arm7
/5743.dbg
/5743.i4
/5743.i486
/5743.i586
/5743.i686
/5743.kill
/5743.m68k
/5743.mips
/5743.mips64
/5743.mpsl
/5743.mipsel
/5743.ppc
/5743.ppc2
/5743.ppc440
/5743.powerppc
/5743.root
/5743.root32
/5743.sh4
/5743.ssh4
/5743.spc
/5743.sparc
/5743.x32
/5743.x64
/5743.x86
/5743.x86_32
/5743.x86_64

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/new-miori-variant-uses-unique-protocol-to-communicate-with-cc/
# Reference: https://otx.alienvault.com/pulse/5d2633a3f254f2f806764db4

185.244.39.74:10019
185.244.39.74:25346

# Reference: https://twitter.com/bad_packets/status/1149474648939061248

x.autistichorse.club
/hhh.arc
/hhh.arm
/hhh.arm4
/hhh.arm4l
/hhh.arm4t
/hhh.arm4tl
/hhh.arm4tll
/hhh.armv4l
/hhh.arm5
/hhh.arm5n
/hhh.arm6
/hhh.arm64
/hhh.arm7
/hhh.dbg
/hhh.i4
/hhh.i486
/hhh.i586
/hhh.i686
/hhh.kill
/hhh.m68k
/hhh.mips
/hhh.mips64
/hhh.mpsl
/hhh.mipsel
/hhh.ppc
/hhh.ppc2
/hhh.ppc440
/hhh.powerppc
/hhh.root
/hhh.root32
/hhh.sh4
/hhh.ssh4
/hhh.spc
/hhh.sparc
/hhh.x32
/hhh.x64
/hhh.x86
/hhh.x86_32
/hhh.x86_64

# Reference: https://twitter.com/bad_packets/status/1149409640813228032

209.141.56.142:37215

# Reference: https://twitter.com/bad_packets/status/1149050383165034496

89.190.159.178:85

# Reference: https://twitter.com/MasafumiNegishi/status/1149556214017118209

198.98.60.48:34567

# Reference: https://twitter.com/0xrb/status/1149941169914142720

/dsec.arc
/dsec.arm
/dsec.arm4
/dsec.arm4l
/dsec.arm4t
/dsec.arm4tl
/dsec.arm4tll
/dsec.armv4l
/dsec.arm5
/dsec.arm5n
/dsec.arm6
/dsec.arm64
/dsec.arm7
/dsec.dbg
/dsec.i4
/dsec.i486
/dsec.i586
/dsec.i686
/dsec.kill
/dsec.m68k
/dsec.mips
/dsec.mips64
/dsec.mpsl
/dsec.mipsel
/dsec.ppc
/dsec.ppc2
/dsec.ppc440
/dsec.powerppc
/dsec.root
/dsec.root32
/dsec.sh4
/dsec.ssh4
/dsec.spc
/dsec.sparc
/dsec.x32
/dsec.x64
/dsec.x86
/dsec.x86_32
/dsec.x86_64

# Reference: https://twitter.com/bad_packets/status/1149797441396285441

194.99.22.138:5301

# Reference: https://twitter.com/bad_packets/status/1150504925937356800

169.239.128.18:5301

# Reference: https://twitter.com/huiwangeth/status/1150733027162517504

n1gger.com

# Reference: https://twitter.com/0xrb/status/1150761561654382592

220.79.34.109:2018

# Reference: https://twitter.com/bad_packets/status/1151004639610855425

192.236.162.197:4426

# Reference: https://twitter.com/bad_packets/status/1150999027237867521

/Votan.arc
/Votan.arm
/Votan.arm4
/Votan.arm4l
/Votan.arm4t
/Votan.arm4tl
/Votan.arm4tll
/Votan.armv4l
/Votan.arm5
/Votan.arm5n
/Votan.arm6
/Votan.arm64
/Votan.arm7
/Votan.dbg
/Votan.i4
/Votan.i486
/Votan.i586
/Votan.i686
/Votan.kill
/Votan.m68k
/Votan.mips
/Votan.mips64
/Votan.mpsl
/Votan.mipsel
/Votan.ppc
/Votan.ppc2
/Votan.ppc440
/Votan.powerppc
/Votan.root
/Votan.root32
/Votan.sh4
/Votan.ssh4
/Votan.spc
/Votan.sparc
/Votan.x32
/Votan.x64
/Votan.x86
/Votan.x86_32
/Votan.x86_64
178.62.78.110:25565

# Reference: https://twitter.com/bad_packets/status/1151694013554028550

89.248.174.198:9999

# Reference: https://twitter.com/bad_packets/status/1152164106285092865

/ok.arc
/ok.arm
/ok.arm4
/ok.arm4l
/ok.arm4t
/ok.arm4tl
/ok.arm4tll
/ok.armv4l
/ok.arm5
/ok.arm5n
/ok.arm6
/ok.arm64
/ok.arm7
/ok.dbg
/ok.i4
/ok.i486
/ok.i586
/ok.i686
/ok.kill
/ok.m68k
/ok.mips
/ok.mips64
/ok.mpsl
/ok.mipsel
/ok.ppc
/ok.ppc2
/ok.ppc440
/ok.powerppc
/ok.root
/ok.root32
/ok.sh4
/ok.ssh4
/ok.spc
/ok.sparc
/ok.x32
/ok.x64
/ok.x86
/ok.x86_32
/ok.x86_64

# Reference: https://twitter.com/bad_packets/status/1152319067350421504

51.91.202.137:5301

# Reference: https://twitter.com/VessOnSecurity/status/1152538162704670721

/r4z0r.arc
/r4z0r.arm
/r4z0r.arm4
/r4z0r.arm4l
/r4z0r.arm4t
/r4z0r.arm4tl
/r4z0r.arm4tll
/r4z0r.armv4l
/r4z0r.arm5
/r4z0r.arm5n
/r4z0r.arm6
/r4z0r.arm64
/r4z0r.arm7
/r4z0r.dbg
/r4z0r.i4
/r4z0r.i486
/r4z0r.i586
/r4z0r.i686
/r4z0r.kill
/r4z0r.m68k
/r4z0r.mips
/r4z0r.mips64
/r4z0r.mpsl
/r4z0r.mipsel
/r4z0r.ppc
/r4z0r.ppc2
/r4z0r.ppc440
/r4z0r.powerppc
/r4z0r.root
/r4z0r.root32
/r4z0r.sh4
/r4z0r.ssh4
/r4z0r.spc
/r4z0r.sparc
/r4z0r.x32
/r4z0r.x64
/r4z0r.x86
/r4z0r.x86_32
/r4z0r.x86_64

# Reference: https://twitter.com/bad_packets/status/1152839425245642752

/ab.arc
/ab.arm
/ab.arm4
/ab.arm4l
/ab.arm4t
/ab.arm4tl
/ab.arm4tll
/ab.armv4l
/ab.arm5
/ab.arm5n
/ab.arm6
/ab.arm64
/ab.arm7
/ab.dbg
/ab.i4
/ab.i486
/ab.i586
/ab.i686
/ab.kill
/ab.m68k
/ab.mips
/ab.mips64
/ab.mpsl
/ab.mipsel
/ab.ppc
/ab.ppc2
/ab.ppc440
/ab.powerppc
/ab.root
/ab.root32
/ab.sh4
/ab.ssh4
/ab.spc
/ab.sparc
/ab.x32
/ab.x64
/ab.x86
/ab.x86_32
/ab.x86_64

# Reference: https://twitter.com/bad_packets/status/1153089384884736000

/u.arc
/u.arm
/u.arm4
/u.arm4l
/u.arm4t
/u.arm4tl
/u.arm4tll
/u.armv4l
/u.arm5
/u.arm5n
/u.arm6
/u.arm64
/u.arm7
/u.dbg
/u.i4
/u.i486
/u.i586
/u.i686
/u.kill
/u.m68k
/u.mips
/u.mips64
/u.mpsl
/u.mipsel
/u.ppc
/u.ppc2
/u.ppc440
/u.powerppc
/u.root
/u.root32
/u.sh4
/u.ssh4
/u.spc
/u.sparc
/u.x32
/u.x64
/u.x86
/u.x86_32
/u.x86_64
ch.silynigr.xyz
80.211.9.40:495

# Reference: https://twitter.com/bad_packets/status/1152689410229620736

/dude.arc
/dude.arm
/dude.arm4
/dude.arm4l
/dude.arm4t
/dude.arm4tl
/dude.arm4tll
/dude.armv4l
/dude.arm5
/dude.arm5n
/dude.arm6
/dude.arm64
/dude.arm7
/dude.dbg
/dude.i4
/dude.i486
/dude.i586
/dude.i686
/dude.kill
/dude.m68k
/dude.mips
/dude.mips64
/dude.mpsl
/dude.mipsel
/dude.ppc
/dude.ppc2
/dude.ppc440
/dude.powerppc
/dude.root
/dude.root32
/dude.sh4
/dude.ssh4
/dude.spc
/dude.sparc
/dude.x32
/dude.x64
/dude.x86
/dude.x86_32
/dude.x86_64
195.231.6.216:48

# Reference: https://twitter.com/bad_packets/status/1153833810032599043

87.120.37.148:38
/autism.arc
/autism.arm
/autism.arm4
/autism.arm4l
/autism.arm4t
/autism.arm4tl
/autism.arm4tll
/autism.armv4l
/autism.arm5
/autism.arm5n
/autism.arm6
/autism.arm64
/autism.arm7
/autism.dbg
/autism.i4
/autism.i486
/autism.i586
/autism.i686
/autism.kill
/autism.m68k
/autism.mips
/autism.mips64
/autism.mpsl
/autism.mipsel
/autism.ppc
/autism.ppc2
/autism.ppc440
/autism.powerppc
/autism.root
/autism.root32
/autism.sh4
/autism.ssh4
/autism.spc
/autism.sparc
/autism.x32
/autism.x64
/autism.x86
/autism.x86_32
/autism.x86_64
/hisil.arc
/hisil.arm
/hisil.arm4
/hisil.arm4l
/hisil.arm4t
/hisil.arm4tl
/hisil.arm4tll
/hisil.armv4l
/hisil.arm5
/hisil.arm5n
/hisil.arm6
/hisil.arm64
/hisil.arm7
/hisil.dbg
/hisil.i4
/hisil.i486
/hisil.i586
/hisil.i686
/hisil.kill
/hisil.m68k
/hisil.mips
/hisil.mips64
/hisil.mpsl
/hisil.mipsel
/hisil.ppc
/hisil.ppc2
/hisil.ppc440
/hisil.powerppc
/hisil.root
/hisil.root32
/hisil.sh4
/hisil.ssh4
/hisil.spc
/hisil.sparc
/hisil.x32
/hisil.x64
/hisil.x86
/hisil.x86_32
/hisil.x86_64

# Reference: https://twitter.com/bad_packets/status/1151699683187683328

/ab.arc
/ab.arm
/ab.arm4
/ab.arm4l
/ab.arm4t
/ab.arm4tl
/ab.arm4tll
/ab.armv4l
/ab.arm5
/ab.arm5n
/ab.arm6
/ab.arm64
/ab.arm7
/ab.dbg
/ab.i4
/ab.i486
/ab.i586
/ab.i686
/ab.kill
/ab.m68k
/ab.mips
/ab.mips64
/ab.mpsl
/ab.mipsel
/ab.ppc
/ab.ppc2
/ab.ppc440
/ab.powerppc
/ab.root
/ab.root32
/ab.sh4
/ab.ssh4
/ab.spc
/ab.sparc
/ab.x32
/ab.x64
/ab.x86
/ab.x86_32
/ab.x86_64

# Reference: https://twitter.com/bad_packets/status/1153956016695812098

104.168.215.139:5301

# Reference: https://twitter.com/bad_packets/status/1154971543857799168

142.11.238.236:34

# Reference: https://twitter.com/bad_packets/status/1154853477664751617

185.246.152.89:37212

# Reference: https://twitter.com/bad_packets/status/1153936032947040256
# Reference: https://twitter.com/bad_packets/status/1154999493781123072

185.172.110.224:70
185.172.110.224:77

# Reference: https://twitter.com/bad_packets/status/1155025248493817856

165.22.209.154:26663

# Reference: https://twitter.com/bad_packets/status/1156495926178922496

103.1.186.118:44
103.1.186.118:6949

# Reference: https://twitter.com/0xrb/status/1156804860345384960

/amen.arc
/amen.arm
/amen.arm4
/amen.arm4l
/amen.arm4t
/amen.arm4tl
/amen.arm4tll
/amen.armv4l
/amen.arm5
/amen.arm5n
/amen.arm6
/amen.arm64
/amen.arm7
/amen.dbg
/amen.i4
/amen.i486
/amen.i586
/amen.i686
/amen.kill
/amen.m68k
/amen.mips
/amen.mips64
/amen.mpsl
/amen.mipsel
/amen.ppc
/amen.ppc2
/amen.ppc440
/amen.powerppc
/amen.root
/amen.root32
/amen.sh4
/amen.ssh4
/amen.spc
/amen.sparc
/amen.x32
/amen.x64
/amen.x86
/amen.x86_32
/amen.x86_64

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/keeping-a-hidden-identity-mirai-ccs-in-tor-network/
# Reference: https://otx.alienvault.com/pulse/5d42ef25d68039678206ae45

/t.arc
/t.arm
/t.arm4
/t.arm4l
/t.arm4t
/t.arm4tl
/t.arm4tll
/t.armv4l
/t.arm5
/t.arm5n
/t.arm6
/t.arm64
/t.arm7
/t.dbg
/t.i4
/t.i486
/t.i586
/t.i686
/t.kill
/t.m68k
/t.mips
/t.mips64
/t.mpsl
/t.mipsel
/t.ppc
/t.ppc2
/t.ppc440
/t.powerppc
/t.root
/t.root32
/t.sh4
/t.ssh4
/t.spc
/t.sparc
/t.x32
/t.x64
/t.x86
/t.x86_32
/t.x86_64
nd3rwzslqhxibkl7.onion

# Reference: https://twitter.com/bad_packets/status/1157139943841386503

185.244.150.111:38344

# Reference: https://twitter.com/huiwangeth/status/1157206905015525377

tyx35qmt7pni4pdg.onion

# Reference: https://twitter.com/bad_packets/status/1156294314122551297

159.89.41.188:5301

# Reference: https://twitter.com/bad_packets/status/1157867496961011712

185.172.110.224:79
185.172.110.224:993

# Reference: https://twitter.com/0xrb/status/1157825274790076416

45.129.3.130:1994

# Reference: https://twitter.com/0xrb/status/1157875749577056256

40.89.161.108:1791

# Reference: https://twitter.com/bad_packets/status/1157734891510833152

185.244.25.181:9375

# Reference: https://twitter.com/0xrb/status/1157544700053581824

5.104.110.2:88
67.216.204.113:8000

# Reference: https://twitter.com/bad_packets/status/1157125722223202305

147.135.116.64:45
/Hilix.arc
/Hilix.arm
/Hilix.arm4
/Hilix.arm4l
/Hilix.arm4t
/Hilix.arm4tl
/Hilix.arm4tll
/Hilix.armv4l
/Hilix.arm5
/Hilix.arm5n
/Hilix.arm6
/Hilix.arm64
/Hilix.arm7
/Hilix.dbg
/Hilix.i4
/Hilix.i486
/Hilix.i586
/Hilix.i686
/Hilix.kill
/Hilix.m68k
/Hilix.mips
/Hilix.mips64
/Hilix.mpsl
/Hilix.mipsel
/Hilix.ppc
/Hilix.ppc2
/Hilix.ppc440
/Hilix.powerppc
/Hilix.root
/Hilix.root32
/Hilix.sh4
/Hilix.ssh4
/Hilix.spc
/Hilix.sparc
/Hilix.x32
/Hilix.x64
/Hilix.x86
/Hilix.x86_32
/Hilix.x86_64

# Reference: https://twitter.com/MasafumiNegishi/status/1158588492248567808

ujnffkp4b2s33fyh.onion

# Reference: https://twitter.com/bad_packets/status/1158639154835513345

158.255.5.216:8915

# Reference: https://twitter.com/MasafumiNegishi/status/1159289331279773696

dbkjbueuvmf5hh7z.onion

# Reference: https://twitter.com/bad_packets/status/1159566694160801792

185.244.25.185:1312
185.244.25.185:3912
185.244.25.185:43195

# Reference: https://twitter.com/bad_packets/status/1159604474668732416

185.172.110.224:11751

# Reference: https://twitter.com/bad_packets/status/1159579228108492800

91.92.66.192:63236

# Reference: https://twitter.com/0xrb/status/1160083082000515072

142.11.240.29:9506
/ankit.arc
/ankit.arm
/ankit.arm4
/ankit.arm4l
/ankit.arm4t
/ankit.arm4tl
/ankit.arm4tll
/ankit.armv4l
/ankit.arm5
/ankit.arm5n
/ankit.arm6
/ankit.arm64
/ankit.arm7
/ankit.dbg
/ankit.i4
/ankit.i486
/ankit.i586
/ankit.i686
/ankit.kill
/ankit.m68k
/ankit.mips
/ankit.mips64
/ankit.mpsl
/ankit.mipsel
/ankit.ppc
/ankit.ppc2
/ankit.ppc440
/ankit.powerppc
/ankit.root
/ankit.root32
/ankit.sh4
/ankit.ssh4
/ankit.spc
/ankit.sparc
/ankit.x32
/ankit.x64
/ankit.x86
/ankit.x86_32
/ankit.x86_64
/slump.arc
/slump.arm
/slump.arm4
/slump.arm4l
/slump.arm4t
/slump.arm4tl
/slump.arm4tll
/slump.armv4l
/slump.arm5
/slump.arm5n
/slump.arm6
/slump.arm64
/slump.arm7
/slump.dbg
/slump.i4
/slump.i486
/slump.i586
/slump.i686
/slump.kill
/slump.m68k
/slump.mips
/slump.mips64
/slump.mpsl
/slump.mipsel
/slump.ppc
/slump.ppc2
/slump.ppc440
/slump.powerppc
/slump.root
/slump.root32
/slump.sh4
/slump.ssh4
/slump.spc
/slump.sparc
/slump.x32
/slump.x64
/slump.x86
/slump.x86_32
/slump.x86_64

# Reference: https://twitter.com/bad_packets/status/1160129296301559808

40.89.175.73:1280
40.89.175.73:44460
/distortion.arc
/distortion.arm
/distortion.arm4
/distortion.arm4l
/distortion.arm4t
/distortion.arm4tl
/distortion.arm4tll
/distortion.armv4l
/distortion.arm5
/distortion.arm5n
/distortion.arm6
/distortion.arm64
/distortion.arm7
/distortion.dbg
/distortion.i4
/distortion.i486
/distortion.i586
/distortion.i686
/distortion.kill
/distortion.m68k
/distortion.mips
/distortion.mips64
/distortion.mpsl
/distortion.mipsel
/distortion.ppc
/distortion.ppc2
/distortion.ppc440
/distortion.powerppc
/distortion.root
/distortion.root32
/distortion.sh4
/distortion.ssh4
/distortion.spc
/distortion.sparc
/distortion.x32
/distortion.x64
/distortion.x86
/distortion.x86_32
/distortion.x86_64

# Reference: https://twitter.com/c2nner/status/1160144595013033985

51.81.20.98:1791
54.36.138.190:9375

# Reference: https://twitter.com/bad_packets/status/1160269665626554368

167.71.128.164:1337
167.71.128.164:3663
tronified.pw

# Reference: https://twitter.com/bad_packets/status/1160419048200392704

23.254.204.46:5301
23.254.204.46:9545

# Reference: https://twitter.com/0xrb/status/1160513921809129472

40.89.175.73:1280

# Reference: https://documents.trendmicro.com/assets/pdf/APPENDIX_Back-to-Back%20Campaigns.pdf
# Reference: https://otx.alienvault.com/pulse/5d52a56c0ef61fbaa08d0745

/arc.neko
/arm.neko
/arm4.neko
/arm4l.neko
/arm4t.neko
/arm4tl.neko
/arm4tll.neko
/armv4l.neko
/arm5.neko
/arm5n.neko
/arm6.neko
/arm64.neko
/arm7.neko
/dbg.neko
/i4.neko
/i486.neko
/i586.neko
/i686.neko
/kill.neko
/m68k.neko
/mips.neko
/mips64.neko
/mpsl.neko
/mipsel.neko
/ppc.neko
/ppc2.neko
/ppc440.neko
/powerppc.neko
/root.neko
/root32.neko
/sh4.neko
/ssh4.neko
/spc.neko
/sparc.neko
/x32.neko
/x64.neko
/x86.neko
/x86_32.neko
/x86_64.neko
/neko.arc
/neko.arm
/neko.arm4
/neko.arm4l
/neko.arm4t
/neko.arm4tl
/neko.arm4tll
/neko.armv4l
/neko.arm5
/neko.arm5n
/neko.arm6
/neko.arm64
/neko.arm7
/neko.dbg
/neko.i4
/neko.i486
/neko.i586
/neko.i686
/neko.kill
/neko.m68k
/neko.mips
/neko.mips64
/neko.mpsl
/neko.mipsel
/neko.ppc
/neko.ppc2
/neko.ppc440
/neko.powerppc
/neko.root
/neko.root32
/neko.sh4
/neko.ssh4
/neko.spc
/neko.sparc
/neko.x32
/neko.x64
/neko.x86
/neko.x86_32
/neko.x86_64

# Reference: https://twitter.com/bad_packets/status/1161164632104456193

31.13.195.49:79
31.13.195.49:6968

# Reference: https://twitter.com/bad_packets/status/1161459553528975360

142.44.251.105:11751
142.44.251.105:65535

# Reference: https://twitter.com/MasafumiNegishi/status/1161526802638090245

31.13.195.56:23013

# Reference: https://twitter.com/0xrb/status/1161590785596243969

shiina.mashiro.ml
18.222.226.29:42022

# Reference: https://twitter.com/0xrb/status/1161583769360293888

40.114.13.117:1791

# Reference: https://twitter.com/0xrb/status/1157975083014483969

35.193.34.171:1791
/eternal.arc
/eternal.arm
/eternal.arm4
/eternal.arm4l
/eternal.arm4t
/eternal.arm4tl
/eternal.arm4tll
/eternal.armv4l
/eternal.arm5
/eternal.arm5n
/eternal.arm6
/eternal.arm64
/eternal.arm7
/eternal.dbg
/eternal.exploit
/eternal.i4
/eternal.i486
/eternal.i586
/eternal.i686
/eternal.kill
/eternal.m68k
/eternal.mips
/eternal.mips64
/eternal.mpsl
/eternal.mipsel
/eternal.ppc
/eternal.ppc2
/eternal.ppc440
/eternal.powerppc
/eternal.root
/eternal.root32
/eternal.sh4
/eternal.ssh4
/eternal.spc
/eternal.sparc
/eternal.x32
/eternal.x64
/eternal.x86
/eternal.x86_32
/eternal.x86_64

# Reference: https://twitter.com/bad_packets/status/1161722520233340928
# Reference: https://twitter.com/0xrb/status/1162955576927670272

179.43.149.189:2470
server1.zenithnetworxs.com
/aarch64be.cloudbot
/arcle-750d.cloudbot
/arcle-hs38.cloudbot
/arc.cloudbot
/arm.cloudbot
/arm4.cloudbot
/arm4l.cloudbot
/arm4t.cloudbot
/arm4tl.cloudbot
/arm4tll.cloudbot
/armv4l.cloudbot
/arm5.cloudbot
/arm5n.cloudbot
/arm6.cloudbot
/arm64.cloudbot
/arm7.cloudbot
/dbg.cloudbot
/exploit.cloudbot
/fritzbox.cloudbot
/haarch64.cloudbot
/hnios2.cloudbot
/hopenrisc.cloudbot
/hriscv64.cloudbot
/i4.cloudbot
/i486.cloudbot
/i586.cloudbot
/i686.cloudbot
/kill.cloudbot
/linksys.cloudbot
/m68k.cloudbot
/m68k-68xxx.cloudbot
/microblazebe.cloudbot
/microblazeel.cloudbot
/mips.cloudbot
/mips2.cloudbot
/mips64.cloudbot
/mpsl.cloudbot
/mipsel.cloudbot
/ppc.cloudbot
/ppc2.cloudbot
/ppc440.cloudbot
/powerppc.cloudbot
/root.cloudbot
/root32.cloudbot
/sh-sh4.cloudbot
/sh4.cloudbot
/ssh4.cloudbot
/spc.cloudbot
/sparc.cloudbot
/x32.cloudbot
/x64.cloudbot
/x86.cloudbot
/x86_32.cloudbot
/x86_64.cloudbot
/xtensa.cloudbot
/cloudbot.aarch64be
/cloudbot.arc
/cloudbot.arcle-750d
/cloudbot.arcle-hs38
/cloudbot.arm
/cloudbot.arm4
/cloudbot.arm4l
/cloudbot.arm4t
/cloudbot.arm4tl
/cloudbot.arm4tll
/cloudbot.armv4l
/cloudbot.arm5
/cloudbot.arm5n
/cloudbot.arm6
/cloudbot.arm64
/cloudbot.arm7
/cloudbot.dbg
/cloudbot.exploit
/cloudbot.fritzbox
/cloudbot.haarch64
/cloudbot.hnios2
/cloudbot.hopenrisc
/cloudbot.hriscv64
/cloudbot.i4
/cloudbot.i486
/cloudbot.i586
/cloudbot.i686
/cloudbot.kill
/cloudbot.linksys
/cloudbot.m68k
/cloudbot.m68k-68xxx
/cloudbot.microblazebe
/cloudbot.microblazeel
/cloudbot.mips
/cloudbot.mips2
/cloudbot.mips64
/cloudbot.mpsl
/cloudbot.mipsel
/cloudbot.ppc
/cloudbot.ppc2
/cloudbot.ppc440
/cloudbot.powerppc
/cloudbot.root
/cloudbot.root32
/cloudbot.sh-sh4
/cloudbot.sh4
/cloudbot.ssh4
/cloudbot.spc
/cloudbot.sparc
/cloudbot.x32
/cloudbot.x64
/cloudbot.x86
/cloudbot.x86_32
/cloudbot.x86_64
/cloudbot.xtensa

# Reference: https://twitter.com/bad_packets/status/1161780674644156416

213.139.205.242:35668
213.139.205.242:455

# Reference: https://twitter.com/0xrb/status/1162053859180609536

40.89.172.209:1280
/dstrtn.arc
/dstrtn.arm
/dstrtn.arm4
/dstrtn.arm4l
/dstrtn.arm4t
/dstrtn.arm4tl
/dstrtn.arm4tll
/dstrtn.armv4l
/dstrtn.arm5
/dstrtn.arm5n
/dstrtn.arm6
/dstrtn.arm64
/dstrtn.arm7
/dstrtn.dbg
/dstrtn.exploit
/dstrtn.i4
/dstrtn.i486
/dstrtn.i586
/dstrtn.i686
/dstrtn.kill
/dstrtn.m68k
/dstrtn.mips
/dstrtn.mips64
/dstrtn.mpsl
/dstrtn.mipsel
/dstrtn.ppc
/dstrtn.ppc2
/dstrtn.ppc440
/dstrtn.powerppc
/dstrtn.root
/dstrtn.root32
/dstrtn.sh4
/dstrtn.ssh4
/dstrtn.spc
/dstrtn.sparc
/dstrtn.x32
/dstrtn.x64
/dstrtn.x86
/dstrtn.x86_32
/dstrtn.x86_64

# Reference: https://twitter.com/bad_packets/status/1162230113829654528

45.95.147.26:6968
45.95.147.26:79
switchnets.net

# Reference: https://twitter.com/0xrb/status/1162423882730446848

3.15.158.164:42022
shiina.mashiro.cf

# Reference: https://twitter.com/bad_packets/status/1162612382968844289

51.91.202.137:12345
51.91.202.137:8811

# Reference: https://twitter.com/bad_packets/status/1162885040839114752

198.98.62.146:23
198.98.62.146:91

# Reference: https://twitter.com/bad_packets/status/1162167149764329472

164.68.116.122:1337
164.68.116.122:65535

# Reference: https://twitter.com/0xrb/status/1163726289921953793

134.209.117.22:360
/Messiah.arc
/Messiah.arm
/Messiah.arm4
/Messiah.arm4l
/Messiah.arm4t
/Messiah.arm4tl
/Messiah.arm4tll
/Messiah.armv4l
/Messiah.arm5
/Messiah.arm5n
/Messiah.arm6
/Messiah.arm64
/Messiah.arm7
/Messiah.dbg
/Messiah.exploit
/Messiah.i4
/Messiah.i486
/Messiah.i586
/Messiah.i686
/Messiah.kill
/Messiah.m68k
/Messiah.mips
/Messiah.mips64
/Messiah.mpsl
/Messiah.mipsel
/Messiah.ppc
/Messiah.ppc2
/Messiah.ppc440
/Messiah.powerppc
/Messiah.root
/Messiah.root32
/Messiah.sh4
/Messiah.ssh4
/Messiah.spc
/Messiah.sparc
/Messiah.x32
/Messiah.x64
/Messiah.x86
/Messiah.x86_32
/Messiah.x86_64

# Reference: https://twitter.com/bad_packets/status/1164030835533549570

199.195.253.85:2323
199.195.253.85:10444
199.195.253.85:64334

# Reference: https://twitter.com/bad_packets/status/1164776376676675585

185.244.39.124:5555
185.244.39.124:10019

# Reference: https://twitter.com/nmatte90/status/1159740413445648384

/d.arc
/d.arm
/d.arm4
/d.arm4l
/d.arm4t
/d.arm4tl
/d.arm4tll
/d.armv4l
/d.arm5
/d.arm5n
/d.arm6
/d.arm64
/d.arm7
/d.dbg
/d.exploit
/d.i4
/d.i486
/d.i586
/d.i686
/d.kill
/d.m68k
/d.mips
/d.mips64
/d.mpsl
/d.mipsel
/d.ppc
/d.ppc2
/d.ppc440
/d.powerppc
/d.root
/d.root32
/d.sh4
/d.ssh4
/d.spc
/d.sparc
/d.x32
/d.x64
/d.x86
/d.x86_32
/d.x86_64

# Reference: https://twitter.com/nmatte90/status/1146721042645377024

/tronxwouvi.arc
/tronxwouvi.arm
/tronxwouvi.arm4
/tronxwouvi.arm4l
/tronxwouvi.arm4t
/tronxwouvi.arm4tl
/tronxwouvi.arm4tll
/tronxwouvi.armv4l
/tronxwouvi.arm5
/tronxwouvi.arm5n
/tronxwouvi.arm6
/tronxwouvi.arm64
/tronxwouvi.arm7
/tronxwouvi.dbg
/tronxwouvi.exploit
/tronxwouvi.i4
/tronxwouvi.i486
/tronxwouvi.i586
/tronxwouvi.i686
/tronxwouvi.kill
/tronxwouvi.m68k
/tronxwouvi.mips
/tronxwouvi.mips64
/tronxwouvi.mpsl
/tronxwouvi.mipsel
/tronxwouvi.ppc
/tronxwouvi.ppc2
/tronxwouvi.ppc440
/tronxwouvi.powerppc
/tronxwouvi.root
/tronxwouvi.root32
/tronxwouvi.sh4
/tronxwouvi.ssh4
/tronxwouvi.spc
/tronxwouvi.sparc
/tronxwouvi.x32
/tronxwouvi.x64
/tronxwouvi.x86
/tronxwouvi.x86_32
/tronxwouvi.x86_64

# Reference: https://twitter.com/nmatte90/status/1084475351089270784
# Reference: https://www.virustotal.com/gui/file/58bb77c25378cd7c57fad9f1ce98f38a8629d48018a597e78d46d38b862833a0/detection

solarpanels.com

# Reference: https://twitter.com/MasafumiNegishi/status/1165116187480481792

raiseyourdongers.pw

# Reference: https://twitter.com/bad_packets/status/1164791286265602050

185.244.25.73:81
185.244.25.73:6996
/a-r.m-4.SNOOPY
/a-r.m-5.SNOOPY
/a-r.m-6.SNOOPY
/a-r.m-7.SNOOPY
/i-4.8-6.SNOOPY
/i-5.8-6.SNOOPY
/i-6.8-6.SNOOPY
/m-6.8-k.SNOOPY
/m-i.p-s.SNOOPY
/m-p.s-l.SNOOPY
/p-p.c-.SNOOPY
/s-h.4-.SNOOPY
/x-3.2-.SNOOPY
/x-6.4-.SNOOPY
/x-8.6-.SNOOPY

# Reference: https://twitter.com/bad_packets/status/1165120433462493186

147.135.124.113:396
147.135.124.113:455
147.135.124.113:3465

# Reference: https://twitter.com/MasafumiNegishi/status/1165551089820684288

51.81.20.95:41301

# Reference: https://twitter.com/bad_packets/status/1166580475093245952

199.19.225.2:1024
199.19.225.2:1982

# Reference: https://twitter.com/bad_packets/status/1167336978041303040

80.82.65.213:123
80.82.65.213:9060
80.82.65.213:37420
cc.stresser.cc

# Reference: https://twitter.com/bad_packets/status/1168735334969958400

206.72.206.82:36496
206.72.206.82:8372

# Reference: https://twitter.com/0xrb/status/1168803616309702657

35.188.134.193:1791
/calamityarc
/calamityarm
/calamityarm4
/calamityarm4l
/calamityarm4t
/calamityarm4tl
/calamityarm4tll
/calamityarmv4l
/calamityarm5
/calamityarm5n
/calamityarm6
/calamityarm64
/calamityarm7
/calamitydbg
/calamityexploit
/calamityi4
/calamityi486
/calamityi586
/calamityi686
/calamitykill
/calamitym68k
/calamitymips
/calamitymips64
/calamitympsl
/calamitymipsel
/calamityppc
/calamityppc2
/calamityppc440
/calamitypowerppc
/calamityroot
/calamityroot32
/calamitysh
/calamitysh4
/calamityssh4
/calamityspc
/calamitysparc
/calamityx32
/calamityx64
/calamityx86
/calamityx86_32
/calamityx86_64
/calamity.arc
/calamity.arm
/calamity.arm4
/calamity.arm4l
/calamity.arm4t
/calamity.arm4tl
/calamity.arm4tll
/calamity.armv4l
/calamity.arm5
/calamity.arm5n
/calamity.arm6
/calamity.arm64
/calamity.arm7
/calamity.dbg
/calamity.exploit
/calamity.i4
/calamity.i486
/calamity.i586
/calamity.i686
/calamity.kill
/calamity.m68k
/calamity.mips
/calamity.mips64
/calamity.mpsl
/calamity.mipsel
/calamity.ppc
/calamity.ppc2
/calamity.ppc440
/calamity.powerppc
/calamity.root
/calamity.root32
/calamity.sh
/calamity.sh4
/calamity.ssh4
/calamity.spc
/calamity.sparc
/calamity.x32
/calamity.x64
/calamity.x86
/calamity.x86_32
/calamity.x86_64

# Reference: https://twitter.com/bad_packets/status/1169143015132356610

31.13.195.116:34567
31.13.195.116:64756
anunna.club

# Reference: https://twitter.com/bad_packets/status/1169511241305378817

31.13.195.65:79
switchnets.net

# Reference: https://twitter.com/bad_packets/status/1169840035048255491

50.115.162.6:23
50.115.162.6:4352

# Reference: https://twitter.com/_odisseus/status/1170967330203062272

142.11.194.239:666
142.11.253.29:45
185.164.72.149:9375
185.214.10.172:45
185.244.25.72:1791
185.7.78.31:1024
192.119.111.12:45
205.185.118.152:81
51.79.84.171:81
89.35.39.74:1092

# Reference: https://twitter.com/bad_packets/status/1172386690779865090

104.168.199.188:42069
104.168.199.188:46216

# Reference: https://twitter.com/0xrb/status/1173842132236300289

34.90.45.71:2700

# Reference: https:/twitter.com/bad_packets/status/1174566758545362944
# Reference: https://www.virustotal.com/gui/file/c75e48f5e9ae2d5514941558a57d7f440c6e825ecd0c40e9fba7cd007950046f/detection

188.209.52.11:43210

# Reference: https://twitter.com/bad_packets/status/1175485090970791939

142.11.210.231:1791
142.11.210.231:21769

# Reference: https://twitter.com/0xrb/status/1175783280789995535

botnetisharam.com

# Reference: https://twitter.com/bad_packets/status/1177330150356045826

185.244.25.122:55667
185.244.25.122:62333
/203Xmi39S.arc
/203Xmi39S.arm
/203Xmi39S.arm4
/203Xmi39S.arm4l
/203Xmi39S.arm4t
/203Xmi39S.arm4tl
/203Xmi39S.arm4tll
/203Xmi39S.armv4l
/203Xmi39S.arm5
/203Xmi39S.arm5n
/203Xmi39S.arm6
/203Xmi39S.arm64
/203Xmi39S.arm7
/203Xmi39S.dbg
/203Xmi39S.exploit
/203Xmi39S.i4
/203Xmi39S.i486
/203Xmi39S.i586
/203Xmi39S.i686
/203Xmi39S.kill
/203Xmi39S.m68k
/203Xmi39S.mips
/203Xmi39S.mips64
/203Xmi39S.mpsl
/203Xmi39S.mipsel
/203Xmi39S.ppc
/203Xmi39S.ppc2
/203Xmi39S.ppc440
/203Xmi39S.powerppc
/203Xmi39S.root
/203Xmi39S.root32
/203Xmi39S.sh4
/203Xmi39S.ssh4
/203Xmi39S.spc
/203Xmi39S.sparc
/203Xmi39S.x32
/203Xmi39S.x64
/203Xmi39S.x86
/203Xmi39S.x86_32
/203Xmi39S.x86_64

# Reference: https://twitter.com/VessOnSecurity/status/1177562345494732800

/xs.arc
/xs.arm
/xs.arm4
/xs.arm4l
/xs.arm4t
/xs.arm4tl
/xs.arm4tll
/xs.armv4l
/xs.arm5
/xs.arm5n
/xs.arm6
/xs.arm64
/xs.arm7
/xs.dbg
/xs.exploit
/xs.i4
/xs.i486
/xs.i586
/xs.i686
/xs.kill
/xs.m68k
/xs.mips
/xs.mips64
/xs.mpsl
/xs.mipsel
/xs.ppc
/xs.ppc2
/xs.ppc440
/xs.powerppc
/xs.root
/xs.root32
/xs.sh4
/xs.ssh4
/xs.spc
/xs.sparc
/xs.x32
/xs.x64
/xs.x86
/xs.x86_32
/xs.x86_64
/xenith.arc
/xenith.arm
/xenith.arm4
/xenith.arm4l
/xenith.arm4t
/xenith.arm4tl
/xenith.arm4tll
/xenith.armv4l
/xenith.arm5
/xenith.arm5n
/xenith.arm6
/xenith.arm64
/xenith.arm7
/xenith.dbg
/xenith.exploit
/xenith.i4
/xenith.i486
/xenith.i586
/xenith.i686
/xenith.kill
/xenith.m68k
/xenith.mips
/xenith.mips64
/xenith.mpsl
/xenith.mipsel
/xenith.ppc
/xenith.ppc2
/xenith.ppc440
/xenith.powerppc
/xenith.root
/xenith.root32
/xenith.sh4
/xenith.ssh4
/xenith.spc
/xenith.sparc
/xenith.x32
/xenith.x64
/xenith.x86
/xenith.x86_32
/xenith.x86_64
/Yosemite.arc
/Yosemite.arm
/Yosemite.arm4
/Yosemite.arm4l
/Yosemite.arm4t
/Yosemite.arm4tl
/Yosemite.arm4tll
/Yosemite.armv4l
/Yosemite.arm5
/Yosemite.arm5n
/Yosemite.arm6
/Yosemite.arm64
/Yosemite.arm7
/Yosemite.dbg
/Yosemite.exploit
/Yosemite.i4
/Yosemite.i486
/Yosemite.i586
/Yosemite.i686
/Yosemite.kill
/Yosemite.m68k
/Yosemite.mips
/Yosemite.mips64
/Yosemite.mpsl
/Yosemite.mipsel
/Yosemite.ppc
/Yosemite.ppc2
/Yosemite.ppc440
/Yosemite.powerppc
/Yosemite.root
/Yosemite.root32
/Yosemite.sh4
/Yosemite.ssh4
/Yosemite.spc
/Yosemite.sparc
/Yosemite.x32
/Yosemite.x64
/Yosemite.x86
/Yosemite.x86_32
/Yosemite.x86_64
/kungfu.arc
/kungfu.arm
/kungfu.arm4
/kungfu.arm4l
/kungfu.arm4t
/kungfu.arm4tl
/kungfu.arm4tll
/kungfu.armv4l
/kungfu.arm5
/kungfu.arm5n
/kungfu.arm6
/kungfu.arm64
/kungfu.arm7
/kungfu.dbg
/kungfu.exploit
/kungfu.i4
/kungfu.i486
/kungfu.i586
/kungfu.i686
/kungfu.kill
/kungfu.m68k
/kungfu.mips
/kungfu.mips64
/kungfu.mpsl
/kungfu.mipsel
/kungfu.ppc
/kungfu.ppc2
/kungfu.ppc440
/kungfu.powerppc
/kungfu.root
/kungfu.root32
/kungfu.sh4
/kungfu.ssh4
/kungfu.spc
/kungfu.sparc
/kungfu.x32
/kungfu.x64
/kungfu.x86
/kungfu.x86_32
/kungfu.x86_64
/4_20_gang.arc
/4_20_gang.arm
/4_20_gang.arm4
/4_20_gang.arm4l
/4_20_gang.arm4t
/4_20_gang.arm4tl
/4_20_gang.arm4tll
/4_20_gang.armv4l
/4_20_gang.arm5
/4_20_gang.arm5n
/4_20_gang.arm6
/4_20_gang.arm64
/4_20_gang.arm7
/4_20_gang.dbg
/4_20_gang.exploit
/4_20_gang.i4
/4_20_gang.i486
/4_20_gang.i586
/4_20_gang.i686
/4_20_gang.kill
/4_20_gang.m68k
/4_20_gang.mips
/4_20_gang.mips64
/4_20_gang.mpsl
/4_20_gang.mipsel
/4_20_gang.ppc
/4_20_gang.ppc2
/4_20_gang.ppc440
/4_20_gang.powerppc
/4_20_gang.root
/4_20_gang.root32
/4_20_gang.sh4
/4_20_gang.ssh4
/4_20_gang.spc
/4_20_gang.sparc
/4_20_gang.x32
/4_20_gang.x64
/4_20_gang.x86
/4_20_gang.x86_32
/4_20_gang.x86_64
/Fourloko.arc
/Fourloko.arm
/Fourloko.arm4
/Fourloko.arm4l
/Fourloko.arm4t
/Fourloko.arm4tl
/Fourloko.arm4tll
/Fourloko.armv4l
/Fourloko.arm5
/Fourloko.arm5n
/Fourloko.arm6
/Fourloko.arm64
/Fourloko.arm7
/Fourloko.dbg
/Fourloko.exploit
/Fourloko.i4
/Fourloko.i486
/Fourloko.i586
/Fourloko.i686
/Fourloko.kill
/Fourloko.m68k
/Fourloko.mips
/Fourloko.mips64
/Fourloko.mpsl
/Fourloko.mipsel
/Fourloko.ppc
/Fourloko.ppc2
/Fourloko.ppc440
/Fourloko.powerppc
/Fourloko.root
/Fourloko.root32
/Fourloko.sh4
/Fourloko.ssh4
/Fourloko.spc
/Fourloko.sparc
/Fourloko.x32
/Fourloko.x64
/Fourloko.x86
/Fourloko.x86_32
/Fourloko.x86_64

# Reference: https://blog.netlab.360.com/the-botnet-cluster-on-185-244-25-0-24-en/

sisuugde7gzpef2d.onion
/kuojin.arc
/kuojin.arm
/kuojin.arm4
/kuojin.arm4l
/kuojin.arm4t
/kuojin.arm4tl
/kuojin.arm4tll
/kuojin.armv4l
/kuojin.arm5
/kuojin.arm5n
/kuojin.arm6
/kuojin.arm64
/kuojin.arm7
/kuojin.dbg
/kuojin.exploit
/kuojin.i4
/kuojin.i486
/kuojin.i586
/kuojin.i686
/kuojin.kill
/kuojin.m68k
/kuojin.mips
/kuojin.mips64
/kuojin.mpsl
/kuojin.mipsel
/kuojin.ppc
/kuojin.ppc2
/kuojin.ppc440
/kuojin.powerppc
/kuojin.root
/kuojin.root32
/kuojin.sh4
/kuojin.ssh4
/kuojin.spc
/kuojin.sparc
/kuojin.x32
/kuojin.x64
/kuojin.x86
/kuojin.x86_32
/kuojin.x86_64
/arc.handymanny
/arm.handymanny
/arm4.handymanny
/arm4l.handymanny
/arm4t.handymanny
/arm4tl.handymanny
/arm4tll.handymanny
/armv4l.handymanny
/arm5.handymanny
/arm5n.handymanny
/arm6.handymanny
/arm64.handymanny
/arm7.handymanny
/dbg.handymanny
/exploit.handymanny
/i4.handymanny
/i486.handymanny
/i586.handymanny
/i686.handymanny
/kill.handymanny
/m68k.handymanny
/mips.handymanny
/mips64.handymanny
/mpsl.handymanny
/mipsel.handymanny
/ppc.handymanny
/ppc440.handymanny
/powerppc.handymanny
/root.handymanny
/root32.handymanny
/sh4.handymanny
/spc.handymanny
/sparc.handymanny
/x32.handymanny
/x64.handymanny
/x86.handymanny
/x86_32.handymanny
/x86_64.handymanny

# Reference: https://twitter.com/bad_packets/status/1177855406149816320
# Reference: https://twitter.com/bad_packets/status/1179484377018961922

64.44.40.242:1024
64.44.40.242:1982
64.44.40.242:34712
64.44.40.242:45

# Reference: https://twitter.com/bad_packets/status/1159344580510146561

185.35.138.156:655

# Reference: https://twitter.com/malwaremustd1e/status/1179366248221741056

233.250.62.178:5888

# Reference: https://securelist.com/new-wave-of-mirai-attacking-home-routers/76791/
# Reference: https://twitter.com/MalwareConfig/status/1180888733542993925
# Reference: https://malwareconfig.com/config/238a67e6f9b129680b618a3c579a8c6c

mziep.pw
securityupdates.us
srrys.pw
timeserver.host
tr069.pw
p.ocalhost.host
ocalhost.host

# Reference: https://twitter.com/mjbv/status/1180493072083369984

/taramisu4.arc
/taramisu4.arm
/taramisu4.arm4
/taramisu4.arm4l
/taramisu4.arm4t
/taramisu4.arm4tl
/taramisu4.arm4tll
/taramisu4.armv4l
/taramisu4.arm5
/taramisu4.arm5n
/taramisu4.arm6
/taramisu4.arm64
/taramisu4.arm7
/taramisu4.dbg
/taramisu4.exploit
/taramisu4.i4
/taramisu4.i486
/taramisu4.i586
/taramisu4.i686
/taramisu4.kill
/taramisu4.m68k
/taramisu4.mips
/taramisu4.mips64
/taramisu4.mpsl
/taramisu4.mipsel
/taramisu4.ppc
/taramisu4.ppc2
/taramisu4.ppc440
/taramisu4.powerppc
/taramisu4.root
/taramisu4.root32
/taramisu4.sh4
/taramisu4.ssh4
/taramisu4.spc
/taramisu4.sparc
/taramisu4.x32
/taramisu4.x64
/taramisu4.x86
/taramisu4.x86_32
/taramisu4.x86_64

# Reference: https://twitter.com/mjbv/status/1180187125226098688

/UwUAkashicO.arc
/UwUAkashicO.arm
/UwUAkashicO.arm4
/UwUAkashicO.arm4l
/UwUAkashicO.arm4t
/UwUAkashicO.arm4tl
/UwUAkashicO.arm4tll
/UwUAkashicO.armv4l
/UwUAkashicO.arm5
/UwUAkashicO.arm5n
/UwUAkashicO.arm6
/UwUAkashicO.arm64
/UwUAkashicO.arm7
/UwUAkashicO.dbg
/UwUAkashicO.exploit
/UwUAkashicO.i4
/UwUAkashicO.i486
/UwUAkashicO.i586
/UwUAkashicO.i686
/UwUAkashicO.kill
/UwUAkashicO.m68k
/UwUAkashicO.mips
/UwUAkashicO.mips64
/UwUAkashicO.mpsl
/UwUAkashicO.mipsel
/UwUAkashicO.ppc
/UwUAkashicO.ppc2
/UwUAkashicO.ppc440
/UwUAkashicO.powerppc
/UwUAkashicO.root
/UwUAkashicO.root32
/UwUAkashicO.sh4
/UwUAkashicO.ssh4
/UwUAkashicO.spc
/UwUAkashicO.sparc
/UwUAkashicO.x32
/UwUAkashicO.x64
/UwUAkashicO.x86
/UwUAkashicO.x86_32
/UwUAkashicO.x86_64

# Reference: https://twitter.com/mjbv/status/1179717303061110785

/wolf.arc
/wolf.arm
/wolf.arm4
/wolf.arm4l
/wolf.arm4t
/wolf.arm4tl
/wolf.arm4tll
/wolf.armv4l
/wolf.arm5
/wolf.arm5n
/wolf.arm6
/wolf.arm64
/wolf.arm7
/wolf.dbg
/wolf.exploit
/wolf.i4
/wolf.i486
/wolf.i586
/wolf.i686
/wolf.kill
/wolf.m68k
/wolf.mips
/wolf.mips64
/wolf.mpsl
/wolf.mipsel
/wolf.ppc
/wolf.ppc2
/wolf.ppc440
/wolf.powerppc
/wolf.root
/wolf.root32
/wolf.sh4
/wolf.ssh4
/wolf.spc
/wolf.sparc
/wolf.x32
/wolf.x64
/wolf.x86
/wolf.x86_32
/wolf.x86_64

# Reference: https://twitter.com/mjbv/status/1180608179710939136

/layer.arc
/layer.arm
/layer.arm4
/layer.arm4l
/layer.arm4t
/layer.arm4tl
/layer.arm4tll
/layer.armv4l
/layer.arm5
/layer.arm5n
/layer.arm6
/layer.arm64
/layer.arm7
/layer.dbg
/layer.exploit
/layer.i4
/layer.i486
/layer.i586
/layer.i686
/layer.kill
/layer.m68k
/layer.mips
/layer.mips64
/layer.mpsl
/layer.mipsel
/layer.ppc
/layer.ppc2
/layer.ppc440
/layer.powerppc
/layer.root
/layer.root32
/layer.sh4
/layer.ssh4
/layer.spc
/layer.sparc
/layer.x32
/layer.x64
/layer.x86
/layer.x86_32
/layer.x86_64

# Reference: https://twitter.com/0xrb/status/1181806574165098496

51.91.123.232:49627
/animehq.arc
/animehq.arm
/animehq.arm4
/animehq.arm4l
/animehq.arm4t
/animehq.arm4tl
/animehq.arm4tll
/animehq.armv4l
/animehq.arm5
/animehq.arm5n
/animehq.arm6
/animehq.arm64
/animehq.arm7
/animehq.dbg
/animehq.exploit
/animehq.i4
/animehq.i486
/animehq.i586
/animehq.i686
/animehq.kill
/animehq.m68k
/animehq.mips
/animehq.mips64
/animehq.mpsl
/animehq.mipsel
/animehq.ppc
/animehq.ppc2
/animehq.ppc440
/animehq.powerppc
/animehq.root
/animehq.root32
/animehq.sh4
/animehq.ssh4
/animehq.spc
/animehq.sparc
/animehq.x32
/animehq.x64
/animehq.x86
/animehq.x86_32
/animehq.x86_64

# Reference: https://twitter.com/0xrb/status/1181803862404894720

51.91.111.198:8760

# Reference: https://twitter.com/mjbv/status/1181924723514589194

/pandora.arc
/pandora.arm
/pandora.arm4
/pandora.arm4l
/pandora.arm4t
/pandora.arm4tl
/pandora.arm4tll
/pandora.armv4l
/pandora.arm5
/pandora.arm5n
/pandora.arm6
/pandora.arm64
/pandora.arm7
/pandora.dbg
/pandora.exploit
/pandora.i4
/pandora.i486
/pandora.i586
/pandora.i686
/pandora.kill
/pandora.m68k
/pandora.mips
/pandora.mips64
/pandora.mpsl
/pandora.mipsel
/pandora.ppc
/pandora.ppc2
/pandora.ppc440
/pandora.powerppc
/pandora.root
/pandora.root32
/pandora.sh4
/pandora.ssh4
/pandora.spc
/pandora.sparc
/pandora.x32
/pandora.x64
/pandora.x86
/pandora.x86_32
/pandora.x86_64

# Reference: https://twitter.com/_odisseus/status/1182198538010337280

/fortnite.arc
/fortnite.arm
/fortnite.arm4
/fortnite.arm4l
/fortnite.arm4t
/fortnite.arm4tl
/fortnite.arm4tll
/fortnite.armv4l
/fortnite.arm5
/fortnite.arm5n
/fortnite.arm6
/fortnite.arm64
/fortnite.arm7
/fortnite.dbg
/fortnite.exploit
/fortnite.i4
/fortnite.i486
/fortnite.i586
/fortnite.i686
/fortnite.kill
/fortnite.m68k
/fortnite.mips
/fortnite.mips64
/fortnite.mpsl
/fortnite.mipsel
/fortnite.ppc
/fortnite.ppc2
/fortnite.ppc440
/fortnite.powerppc
/fortnite.root
/fortnite.root32
/fortnite.sh4
/fortnite.ssh4
/fortnite.spc
/fortnite.sparc
/fortnite.x32
/fortnite.x64
/fortnite.x86
/fortnite.x86_32
/fortnite.x86_64
/ouija_a.rc
/ouija_a.rm
/ouija_a.rm4
/ouija_a.rm4l
/ouija_a.rm4t
/ouija_a.rm4tl
/ouijaa.rm4tll
/ouija_a.rmv4l
/ouija_a.rm5
/ouija_a.rm5n
/ouija_a.rm6
/ouija_a.rm64
/ouija_a.rm7
/ouija_d.bg
/ouija_e.xploit
/ouija_i.486
/ouija_i.586
/ouija_i.686
/ouija_m.68k
/ouija_m.ips
/ouija_m.ips64
/ouija_m.psl
/ouija_m.ipsel
/ouija_p.pc
/ouija_p.pc2
/ouija_p.pc440
/ouija_p.owerppc
/ouija_r.oot
/ouija_r.oot32
/ouija_s.h4
/ouija_s.sh4
/ouija_s.pc
/ouija_s.parc
/ouija_x.32
/ouija_x.64
/ouija_x.86
/ouija_x.86_32
/ouija_x.86_64

# Reference: https://twitter.com/zom3y3/status/1182869169164783616

93.174.93.178:31337

# Reference: https://twitter.com/0xrb/status/1184042533468262400

/cloud.arc
/cloud.arm
/cloud.arm4
/cloud.arm4l
/cloud.arm4t
/cloud.arm4tl
/cloud.arm4tll
/cloud.armv4l
/cloud.arm5
/cloud.arm5n
/cloud.arm6
/cloud.arm64
/cloud.arm7
/cloud.dbg
/cloud.exploit
/cloud.i4
/cloud.i486
/cloud.i586
/cloud.i686
/cloud.kill
/cloud.m68k
/cloud.mips
/cloud.mips64
/cloud.mpsl
/cloud.mipsel
/cloud.ppc
/cloud.ppc2
/cloud.ppc440
/cloud.powerppc
/cloud.root
/cloud.root32
/cloud.sh4
/cloud.ssh4
/cloud.spc
/cloud.sparc
/cloud.x32
/cloud.x64
/cloud.x86
/cloud.x86_32
/cloud.x86_64
/federal.arc
/federal.arm
/federal.arm4
/federal.arm4l
/federal.arm4t
/federal.arm4tl
/federal.arm4tll
/federal.armv4l
/federal.arm5
/federal.arm5n
/federal.arm6
/federal.arm64
/federal.arm7
/federal.dbg
/federal.exploit
/federal.i4
/federal.i486
/federal.i586
/federal.i686
/federal.kill
/federal.m68k
/federal.mips
/federal.mips64
/federal.mpsl
/federal.mipsel
/federal.ppc
/federal.ppc2
/federal.ppc440
/federal.powerppc
/federal.root
/federal.root32
/federal.sh4
/federal.ssh4
/federal.spc
/federal.sparc
/federal.x32
/federal.x64
/federal.x86
/federal.x86_32
/federal.x86_64
/onbdkyurs.arc
/onbdkyurs.arm
/onbdkyurs.arm4
/onbdkyurs.arm4l
/onbdkyurs.arm4t
/onbdkyurs.arm4tl
/onbdkyurs.arm4tll
/onbdkyurs.armv4l
/onbdkyurs.arm5
/onbdkyurs.arm5n
/onbdkyurs.arm6
/onbdkyurs.arm64
/onbdkyurs.arm7
/onbdkyurs.dbg
/onbdkyurs.exploit
/onbdkyurs.i4
/onbdkyurs.i486
/onbdkyurs.i586
/onbdkyurs.i686
/onbdkyurs.kill
/onbdkyurs.m68k
/onbdkyurs.mips
/onbdkyurs.mips64
/onbdkyurs.mpsl
/onbdkyurs.mipsel
/onbdkyurs.ppc
/onbdkyurs.ppc2
/onbdkyurs.ppc440
/onbdkyurs.powerppc
/onbdkyurs.root
/onbdkyurs.root32
/onbdkyurs.sh4
/onbdkyurs.ssh4
/onbdkyurs.spc
/onbdkyurs.sparc
/onbdkyurs.x32
/onbdkyurs.x64
/onbdkyurs.x86
/onbdkyurs.x86_32
/onbdkyurs.x86_64
/typpaostur.arc
/typpaostur.arm
/typpaostur.arm4
/typpaostur.arm4l
/typpaostur.arm4t
/typpaostur.arm4tl
/typpaostur.arm4tll
/typpaostur.armv4l
/typpaostur.arm5
/typpaostur.arm5n
/typpaostur.arm6
/typpaostur.arm64
/typpaostur.arm7
/typpaostur.dbg
/typpaostur.exploit
/typpaostur.i4
/typpaostur.i486
/typpaostur.i586
/typpaostur.i686
/typpaostur.kill
/typpaostur.m68k
/typpaostur.mips
/typpaostur.mips64
/typpaostur.mpsl
/typpaostur.mipsel
/typpaostur.ppc
/typpaostur.ppc2
/typpaostur.ppc440
/typpaostur.powerppc
/typpaostur.root
/typpaostur.root32
/typpaostur.sh4
/typpaostur.ssh4
/typpaostur.spc
/typpaostur.sparc
/typpaostur.x32
/typpaostur.x64
/typpaostur.x86
/typpaostur.x86_32
/typpaostur.x86_64

# Reference: https://twitter.com/0xrb/status/1184356822154502144

185.158.248.87:1791

# Reference: https://twitter.com/0xrb/status/1184506773358538753

/blxntz.arc
/blxntz.arm
/blxntz.arm4
/blxntz.arm4l
/blxntz.arm4t
/blxntz.arm4tl
/blxntz.arm4tll
/blxntz.armv4l
/blxntz.arm5
/blxntz.arm5n
/blxntz.arm6
/blxntz.arm64
/blxntz.arm7
/blxntz.dbg
/blxntz.exploit
/blxntz.i4
/blxntz.i486
/blxntz.i586
/blxntz.i686
/blxntz.kill
/blxntz.m68k
/blxntz.mips
/blxntz.mips64
/blxntz.mpsl
/blxntz.mipsel
/blxntz.ppc
/blxntz.ppc2
/blxntz.ppc440
/blxntz.powerppc
/blxntz.root
/blxntz.root32
/blxntz.sh4
/blxntz.ssh4
/blxntz.spc
/blxntz.sparc
/blxntz.x32
/blxntz.x64
/blxntz.x86
/blxntz.x86_32
/blxntz.x86_64
/test.arc
/test.arm
/test.arm4
/test.arm4l
/test.arm4t
/test.arm4tl
/test.arm4tll
/test.armv4l
/test.arm5
/test.arm5n
/test.arm6
/test.arm64
/test.arm7
/test.dbg
/test.exploit
/test.i4
/test.i486
/test.i586
/test.i686
/test.kill
/test.m68k
/test.mips
/test.mips64
/test.mpsl
/test.mipsel
/test.ppc
/test.ppc2
/test.ppc440
/test.powerppc
/test.root
/test.root32
/test.sh4
/test.ssh4
/test.spc
/test.sparc
/test.x32
/test.x64
/test.x86
/test.x86_32
/test.x86_64
/updating.arc
/updating.arm
/updating.arm4
/updating.arm4l
/updating.arm4t
/updating.arm4tl
/updating.arm4tll
/updating.armv4l
/updating.arm5
/updating.arm5n
/updating.arm6
/updating.arm64
/updating.arm7
/updating.dbg
/updating.exploit
/updating.i4
/updating.i486
/updating.i586
/updating.i686
/updating.kill
/updating.m68k
/updating.mips
/updating.mips64
/updating.mpsl
/updating.mipsel
/updating.ppc
/updating.ppc2
/updating.ppc440
/updating.powerppc
/updating.root
/updating.root32
/updating.sh4
/updating.ssh4
/updating.spc
/updating.sparc
/updating.x32
/updating.x64
/updating.x86
/updating.x86_32
/updating.x86_64

# Reference: https://twitter.com/0xrb/status/1184534416397389825

/selfrep.arc
/selfrep.arm
/selfrep.arm4
/selfrep.arm4l
/selfrep.arm4t
/selfrep.arm4tl
/selfrep.arm4tll
/selfrep.armv4l
/selfrep.arm5
/selfrep.arm5n
/selfrep.arm6
/selfrep.arm64
/selfrep.arm7
/selfrep.dbg
/selfrep.exploit
/selfrep.i4
/selfrep.i486
/selfrep.i586
/selfrep.i686
/selfrep.kill
/selfrep.m68k
/selfrep.mips
/selfrep.mips64
/selfrep.mpsl
/selfrep.mipsel
/selfrep.ppc
/selfrep.ppc2
/selfrep.ppc440
/selfrep.powerppc
/selfrep.root
/selfrep.root32
/selfrep.sh4
/selfrep.ssh4
/selfrep.spc
/selfrep.sparc
/selfrep.x32
/selfrep.x64
/selfrep.x86
/selfrep.x86_32
/selfrep.x86_64

# Reference: https://twitter.com/bad_packets/status/1186533002483884033

145.239.212.59:8080
145.239.212.59:43210
/linux.arc
/linux.arm
/linux.arm4
/linux.arm4l
/linux.arm4t
/linux.arm4tl
/linux.arm4tll
/linux.armv4l
/linux.arm5
/linux.arm5n
/linux.arm6
/linux.arm64
/linux.arm7
/linux.arm8
/linux.dbg
/linux.exploit
/linux.i4
/linux.i486
/linux.i586
/linux.i686
/linux.kill
/linux.m68k
/linux.mips
/linux.mips64
/linux.mpsl
/linux.mipsel
/linux.ppc
/linux.ppc2
/linux.ppc440
/linux.powerppc
/linux.root
/linux.root32
/linux.sh4
/linux.ssh4
/linux.spc
/linux.sparc
/linux.x32
/linux.x64
/linux.x86
/linux.x86_32
/linux.x86_64

# Reference: https://twitter.com/bad_packets/status/1186874026796281856

193.19.119.165:4201

# Reference: https://twitter.com/bad_packets/status/1187172876903862273

5.252.193.53:4201

# Reference: https://twitter.com/mjbv/status/1187371930040635393

/layerrrrrrrr.arc
/layerrrrrrrr.arm
/layerrrrrrrr.arm4
/layerrrrrrrr.arm4l
/layerrrrrrrr.arm4t
/layerrrrrrrr.arm4tl
/layerrrrrrrr.arm4tll
/layerrrrrrrr.armv4l
/layerrrrrrrr.arm5
/layerrrrrrrr.arm5n
/layerrrrrrrr.arm6
/layerrrrrrrr.arm64
/layerrrrrrrr.arm7
/layerrrrrrrr.arm8
/layerrrrrrrr.dbg
/layerrrrrrrr.exploit
/layerrrrrrrr.i4
/layerrrrrrrr.i486
/layerrrrrrrr.i586
/layerrrrrrrr.i686
/layerrrrrrrr.kill
/layerrrrrrrr.m68k
/layerrrrrrrr.mips
/layerrrrrrrr.mips64
/layerrrrrrrr.mpsl
/layerrrrrrrr.mipsel
/layerrrrrrrr.ppc
/layerrrrrrrr.ppc2
/layerrrrrrrr.ppc440
/layerrrrrrrr.powerppc
/layerrrrrrrr.root
/layerrrrrrrr.root32
/layerrrrrrrr.sh4
/layerrrrrrrr.ssh4
/layerrrrrrrr.spc
/layerrrrrrrr.sparc
/layerrrrrrrr.x32
/layerrrrrrrr.x64
/layerrrrrrrr.x86
/layerrrrrrrr.x86_32
/layerrrrrrrr.x86_64

# Reference: https://twitter.com/bad_packets/status/1188285300407029761

142.11.227.208:81
142.11.227.208:21769
/PacketsxTsunami.arc
/PacketsxTsunami.arm
/PacketsxTsunami.arm4
/PacketsxTsunami.arm4l
/PacketsxTsunami.arm4t
/PacketsxTsunami.arm4tl
/PacketsxTsunami.arm4tll
/PacketsxTsunami.armv4l
/PacketsxTsunami.arm5
/PacketsxTsunami.arm5n
/PacketsxTsunami.arm6
/PacketsxTsunami.arm64
/PacketsxTsunami.arm7
/PacketsxTsunami.arm8
/PacketsxTsunami.dbg
/PacketsxTsunami.exploit
/PacketsxTsunami.i4
/PacketsxTsunami.i486
/PacketsxTsunami.i586
/PacketsxTsunami.i686
/PacketsxTsunami.kill
/PacketsxTsunami.m68k
/PacketsxTsunami.mips
/PacketsxTsunami.mips64
/PacketsxTsunami.mpsl
/PacketsxTsunami.mipsel
/PacketsxTsunami.ppc
/PacketsxTsunami.ppc2
/PacketsxTsunami.ppc440
/PacketsxTsunami.powerppc
/PacketsxTsunami.root
/PacketsxTsunami.root32
/PacketsxTsunami.sh4
/PacketsxTsunami.ssh4
/PacketsxTsunami.spc
/PacketsxTsunami.sparc
/PacketsxTsunami.x32
/PacketsxTsunami.x64
/PacketsxTsunami.x86
/PacketsxTsunami.x86_32
/PacketsxTsunami.x86_64

# Reference: https://twitter.com/bad_packets/status/1188545158330994688

190.2.156.118:19992
190.2.156.118:26663

# Reference: https://twitter.com/bad_packets/status/1189597327297695744
# Reference: https://twitter.com/0xrb/status/1191047992192557056

35.236.44.15:1338
35.236.44.15:31337
35.236.111.58:1338
35.236.111.58:31337

# Reference: https://twitter.com/bad_packets/status/1189303080153690113
# Reference: https://twitter.com/huiwangeth/status/1194831544101113857

5.206.227.65:61002
5.206.227.65:6592
5.206.227.65:6593

# Reference: https://unit42.paloaltonetworks.com/home-small-office-wireless-routers-exploited-to-attack-gaming-servers/
# Reference: https://otx.alienvault.com/pulse/5dbaf1d8346dc64b7498801a

185.172.110.224:80
185.172.110.224:993

# Reference: https://twitter.com/0xrb/status/1189922842185351170

134.209.87.59:9812
/hyena.arc
/hyena.arm
/hyena.arm4
/hyena.arm4l
/hyena.arm4t
/hyena.arm4tl
/hyena.arm4tll
/hyena.armv4l
/hyena.arm5
/hyena.arm5n
/hyena.arm6
/hyena.arm64
/hyena.arm7
/hyena.arm8
/hyena.dbg
/hyena.exploit
/hyena.i4
/hyena.i486
/hyena.i586
/hyena.i686
/hyena.kill
/hyena.m68k
/hyena.mips
/hyena.mips64
/hyena.mpsl
/hyena.mipsel
/hyena.ppc
/hyena.ppc2
/hyena.ppc440
/hyena.powerppc
/hyena.root
/hyena.root32
/hyena.sh4
/hyena.ssh4
/hyena.spc
/hyena.sparc
/hyena.x32
/hyena.x64
/hyena.x86
/hyena.x86_32
/hyena.x86_64

# Reference: https://twitter.com/bad_packets/status/1190142325529436160

89.35.39.74:1092
89.35.39.74:1920

# Reference: https://twitter.com/bad_packets/status/1190368205245538305

2.56.8.157:748
2.56.8.157:1742

# Reference: https://twitter.com/bad_packets/status/1190447880487596032

192.99.154.217:1026
192.99.154.217:1366

# Reference: https://blog.radware.com/security/2018/02/jenx-los-calvos-de-san-calvicie/

80.82.70.202:127
skids.sancalvicie.com

# Reference: https://twitter.com/bad_packets/status/1190795126269825024

/fbot.aarch64
/fbot.arc
/fbot.arm
/fbot.arm4
/fbot.arm4l
/fbot.arm4t
/fbot.arm4tl
/fbot.arm4tll
/fbot.armv4l
/fbot.arm5
/fbot.arm5n
/fbot.arm6
/fbot.arm64
/fbot.arm7
/fbot.arm8
/fbot.dbg
/fbot.exploit
/fbot.i4
/fbot.i486
/fbot.i586
/fbot.i686
/fbot.kill
/fbot.m68k
/fbot.mips
/fbot.mips64
/fbot.mpsl
/fbot.mipsel
/fbot.ppc
/fbot.ppc2
/fbot.ppc440
/fbot.powerppc
/fbot.root
/fbot.root32
/fbot.sh4
/fbot.ssh4
/fbot.spc
/fbot.sparc
/fbot.x32
/fbot.x64
/fbot.x86
/fbot.x86_32
/fbot.x86_64

# Reference: https://blog.netlab.360.com/the-new-developments-of-the-fbot-en/

ukrainianhorseriding.com

# Reference: https://blog.netlab.360.com/threat-alert-a-new-worm-fbot-cleaning-adbminer-is-using-a-blockchain-based-dns-en/

musl.lib
ukrainianhorseriding.com
/adbs
/adbs2

# Reference: https://twitter.com/zom3y3/status/1105754947746856960

/adb_scan

# Reference: https://twitter.com/zom3y3/status/1103920635447635969

alice.ukrainianhorseriding.com
185.248.101.60:6592

# Reference: https://twitter.com/360Netlab/status/1097458737189552128

xabolfpzbz.ukrainianhorseriding.com
185.61.138.13:6592

# Reference: https://twitter.com/_odisseus/status/1194570666873364480
# Reference: https://pastebin.com/xEvgupqi

/Ayedz.aarch64
/Ayedz.arc
/Ayedz.arm
/Ayedz.arm4
/Ayedz.arm4l
/Ayedz.arm4t
/Ayedz.arm4tl
/Ayedz.arm4tll
/Ayedz.armv4l
/Ayedz.arm5
/Ayedz.arm5n
/Ayedz.arm6
/Ayedz.arm64
/Ayedz.arm7
/Ayedz.arm8
/Ayedz.dbg
/Ayedz.exploit
/Ayedz.i4
/Ayedz.i486
/Ayedz.i586
/Ayedz.i686
/Ayedz.kill
/Ayedz.m68k
/Ayedz.mips
/Ayedz.mips64
/Ayedz.mpsl
/Ayedz.mipsel
/Ayedz.ppc
/Ayedz.ppc2
/Ayedz.ppc440
/Ayedz.powerppc
/Ayedz.root
/Ayedz.root32
/Ayedz.sh4
/Ayedz.ssh4
/Ayedz.spc
/Ayedz.sparc
/Ayedz.x32
/Ayedz.x64
/Ayedz.x86
/Ayedz.x86_32
/Ayedz.x86_64
/ESEW4BXS.aarch64
/ESEW4BXS.arc
/ESEW4BXS.arm
/ESEW4BXS.arm4
/ESEW4BXS.arm4l
/ESEW4BXS.arm4t
/ESEW4BXS.arm4tl
/ESEW4BXS.arm4tll
/ESEW4BXS.armv4l
/ESEW4BXS.arm5
/ESEW4BXS.arm5n
/ESEW4BXS.arm6
/ESEW4BXS.arm64
/ESEW4BXS.arm7
/ESEW4BXS.arm8
/ESEW4BXS.dbg
/ESEW4BXS.exploit
/ESEW4BXS.i4
/ESEW4BXS.i486
/ESEW4BXS.i586
/ESEW4BXS.i686
/ESEW4BXS.kill
/ESEW4BXS.m68k
/ESEW4BXS.mips
/ESEW4BXS.mips64
/ESEW4BXS.mpsl
/ESEW4BXS.mipsel
/ESEW4BXS.ppc
/ESEW4BXS.ppc2
/ESEW4BXS.ppc440
/ESEW4BXS.powerppc
/ESEW4BXS.root
/ESEW4BXS.root32
/ESEW4BXS.sh4
/ESEW4BXS.ssh4
/ESEW4BXS.spc
/ESEW4BXS.sparc
/ESEW4BXS.x32
/ESEW4BXS.x64
/ESEW4BXS.x86
/ESEW4BXS.x86_32
/ESEW4BXS.x86_64
/FederalVPN.aarch64
/FederalVPN.arc
/FederalVPN.arm
/FederalVPN.arm4
/FederalVPN.arm4l
/FederalVPN.arm4t
/FederalVPN.arm4tl
/FederalVPN.arm4tll
/FederalVPN.armv4l
/FederalVPN.arm5
/FederalVPN.arm5n
/FederalVPN.arm6
/FederalVPN.arm64
/FederalVPN.arm7
/FederalVPN.arm8
/FederalVPN.dbg
/FederalVPN.exploit
/FederalVPN.i4
/FederalVPN.i486
/FederalVPN.i586
/FederalVPN.i686
/FederalVPN.kill
/FederalVPN.m68k
/FederalVPN.mips
/FederalVPN.mips64
/FederalVPN.mpsl
/FederalVPN.mipsel
/FederalVPN.ppc
/FederalVPN.ppc2
/FederalVPN.ppc440
/FederalVPN.powerppc
/FederalVPN.root
/FederalVPN.root32
/FederalVPN.sh4
/FederalVPN.ssh4
/FederalVPN.spc
/FederalVPN.sparc
/FederalVPN.x32
/FederalVPN.x64
/FederalVPN.x86
/FederalVPN.x86_32
/FederalVPN.x86_64
/shibui.aarch64
/shibui.arc
/shibui.arm
/shibui.arm4
/shibui.arm4l
/shibui.arm4t
/shibui.arm4tl
/shibui.arm4tll
/shibui.armv4l
/shibui.arm5
/shibui.arm5n
/shibui.arm6
/shibui.arm64
/shibui.arm7
/shibui.arm8
/shibui.dbg
/shibui.exploit
/shibui.i4
/shibui.i486
/shibui.i586
/shibui.i686
/shibui.kill
/shibui.m68k
/shibui.mips
/shibui.mips64
/shibui.mpsl
/shibui.mipsel
/shibui.ppc
/shibui.ppc2
/shibui.ppc440
/shibui.powerppc
/shibui.root
/shibui.root32
/shibui.sh4
/shibui.ssh4
/shibui.spc
/shibui.sparc
/shibui.x32
/shibui.x64
/shibui.x86
/shibui.x86_32
/shibui.x86_64
/system_file.aarch64
/system_file.arc
/system_file.arm
/system_file.arm4
/system_file.arm4l
/system_file.arm4t
/system_file.arm4tl
/system_file.arm4tll
/system_file.armv4l
/system_file.arm5
/system_file.arm5n
/system_file.arm6
/system_file.arm64
/system_file.arm7
/system_file.arm8
/system_file.dbg
/system_file.exploit
/system_file.i4
/system_file.i486
/system_file.i586
/system_file.i686
/system_file.kill
/system_file.m68k
/system_file.mips
/system_file.mips64
/system_file.mpsl
/system_file.mipsel
/system_file.ppc
/system_file.ppc2
/system_file.ppc440
/system_file.powerppc
/system_file.root
/system_file.root32
/system_file.sh4
/system_file.ssh4
/system_file.spc
/system_file.sparc
/system_file.x32
/system_file.x64
/system_file.x86
/system_file.x86_32
/system_file.x86_64
/vcimanagement.aarch64
/vcimanagement.arc
/vcimanagement.arm
/vcimanagement.arm4
/vcimanagement.arm4l
/vcimanagement.arm4t
/vcimanagement.arm4tl
/vcimanagement.arm4tll
/vcimanagement.armv4l
/vcimanagement.arm5
/vcimanagement.arm5n
/vcimanagement.arm6
/vcimanagement.arm64
/vcimanagement.arm7
/vcimanagement.arm8
/vcimanagement.dbg
/vcimanagement.exploit
/vcimanagement.i4
/vcimanagement.i486
/vcimanagement.i586
/vcimanagement.i686
/vcimanagement.kill
/vcimanagement.m68k
/vcimanagement.mips
/vcimanagement.mips64
/vcimanagement.mpsl
/vcimanagement.mipsel
/vcimanagement.ppc
/vcimanagement.ppc2
/vcimanagement.ppc440
/vcimanagement.powerppc
/vcimanagement.root
/vcimanagement.root32
/vcimanagement.sh4
/vcimanagement.ssh4
/vcimanagement.spc
/vcimanagement.sparc
/vcimanagement.x32
/vcimanagement.x64
/vcimanagement.x86
/vcimanagement.x86_32
/vcimanagement.x86_64

# Reference: https://twitter.com/360Netlab/status/961206650144247809

c.rippr.me

# Reference: https://twitter.com/mjbv/status/1186781178604466177
# Reference: https://twitter.com/bad_packets/status/1196184723187367937

208.73.204.202:17012
208.73.204.202:9670
/packets.arc
/packets.arm
/packets.arm4
/packets.arm4l
/packets.arm4t
/packets.arm4tl
/packets.arm4tll
/packets.armv4l
/packets.arm5
/packets.arm5n
/packets.arm6
/packets.arm64
/packets.arm7
/packets.arm8
/packets.dbg
/packets.exploit
/packets.i4
/packets.i486
/packets.i586
/packets.i686
/packets.kill
/packets.m68k
/packets.mips
/packets.mips64
/packets.mpsl
/packets.mipsel
/packets.ppc
/packets.ppc2
/packets.ppc440
/packets.powerppc
/packets.root
/packets.root32
/packets.sh4
/packets.ssh4
/packets.spc
/packets.sparc
/packets.x32
/packets.x64
/packets.x86
/packets.x86_32
/packets.x86_64

# Reference: https://twitter.com/bad_packets/status/1197364637307564033

194.15.36.41:20
194.15.36.41:88

# Reference: https://twitter.com/bad_packets/status/1198667902150250496

185.112.249.39:1024
185.112.249.39:1982

# Reference: https://pastebin.com/rnHdzfHy

/81c4603681c46036.arc
/81c4603681c46036.arm
/81c4603681c46036.arm4
/81c4603681c46036.arm4l
/81c4603681c46036.arm4t
/81c4603681c46036.arm4tl
/81c4603681c46036.arm4tll
/81c4603681c46036.armv4
/81c4603681c46036.armv4l
/81c4603681c46036.arm5
/81c4603681c46036.arm5n
/81c4603681c46036.arm6
/81c4603681c46036.arm64
/81c4603681c46036.arm7
/81c4603681c46036.arm8
/81c4603681c46036.dbg
/81c4603681c46036.exploit
/81c4603681c46036.i4
/81c4603681c46036.i486
/81c4603681c46036.i586
/81c4603681c46036.i686
/81c4603681c46036.kill
/81c4603681c46036.m68k
/81c4603681c46036.mips
/81c4603681c46036.mips64
/81c4603681c46036.mpsl
/81c4603681c46036.mipsel
/81c4603681c46036.pcc
/81c4603681c46036.ppc
/81c4603681c46036.ppc2
/81c4603681c46036.ppc440
/81c4603681c46036.ppc440fp
/81c4603681c46036.powerpc
/81c4603681c46036.powerppc
/81c4603681c46036.root
/81c4603681c46036.root32
/81c4603681c46036.sh4
/81c4603681c46036.ssh4
/81c4603681c46036.spc
/81c4603681c46036.sparc
/81c4603681c46036.x32
/81c4603681c46036.x64
/81c4603681c46036.x86
/81c4603681c46036.x86_32
/81c4603681c46036.x86_64
/akumanyu.arc
/akumanyu.arm
/akumanyu.arm4
/akumanyu.arm4l
/akumanyu.arm4t
/akumanyu.arm4tl
/akumanyu.arm4tll
/akumanyu.armv4
/akumanyu.armv4l
/akumanyu.arm5
/akumanyu.arm5n
/akumanyu.arm6
/akumanyu.arm64
/akumanyu.arm7
/akumanyu.arm8
/akumanyu.dbg
/akumanyu.exploit
/akumanyu.i4
/akumanyu.i486
/akumanyu.i586
/akumanyu.i686
/akumanyu.kill
/akumanyu.m68k
/akumanyu.mips
/akumanyu.mips64
/akumanyu.mpsl
/akumanyu.mipsel
/akumanyu.pcc
/akumanyu.ppc
/akumanyu.ppc2
/akumanyu.ppc440
/akumanyu.ppc440fp
/akumanyu.powerpc
/akumanyu.powerppc
/akumanyu.root
/akumanyu.root32
/akumanyu.sh4
/akumanyu.ssh4
/akumanyu.spc
/akumanyu.sparc
/akumanyu.x32
/akumanyu.x64
/akumanyu.x86
/akumanyu.x86_32
/akumanyu.x86_64
/amnyu.arc
/amnyu.arm
/amnyu.arm4
/amnyu.arm4l
/amnyu.arm4t
/amnyu.arm4tl
/amnyu.arm4tll
/amnyu.armv4
/amnyu.armv4l
/amnyu.arm5
/amnyu.arm5n
/amnyu.arm6
/amnyu.arm64
/amnyu.arm7
/amnyu.arm8
/amnyu.dbg
/amnyu.exploit
/amnyu.i4
/amnyu.i486
/amnyu.i586
/amnyu.i686
/amnyu.kill
/amnyu.m68k
/amnyu.mips
/amnyu.mips64
/amnyu.mpsl
/amnyu.mipsel
/amnyu.pcc
/amnyu.ppc
/amnyu.ppc2
/amnyu.ppc440
/amnyu.ppc440fp
/amnyu.powerpc
/amnyu.powerppc
/amnyu.root
/amnyu.root32
/amnyu.sh4
/amnyu.ssh4
/amnyu.spc
/amnyu.sparc
/amnyu.x32
/amnyu.x64
/amnyu.x86
/amnyu.x86_32
/amnyu.x86_64
/asdfg.arc
/asdfg.arm
/asdfg.arm4
/asdfg.arm4l
/asdfg.arm4t
/asdfg.arm4tl
/asdfg.arm4tll
/asdfg.armv4
/asdfg.armv4l
/asdfg.arm5
/asdfg.arm5n
/asdfg.arm6
/asdfg.arm64
/asdfg.arm7
/asdfg.arm8
/asdfg.dbg
/asdfg.exploit
/asdfg.i4
/asdfg.i486
/asdfg.i586
/asdfg.i686
/asdfg.kill
/asdfg.m68k
/asdfg.mips
/asdfg.mips64
/asdfg.mpsl
/asdfg.mipsel
/asdfg.pcc
/asdfg.ppc
/asdfg.ppc2
/asdfg.ppc440
/asdfg.ppc440fp
/asdfg.powerpc
/asdfg.powerppc
/asdfg.root
/asdfg.root32
/asdfg.sh4
/asdfg.ssh4
/asdfg.spc
/asdfg.sparc
/asdfg.x32
/asdfg.x64
/asdfg.x86
/asdfg.x86_32
/asdfg.x86_64
/asuna.arc
/asuna.arm
/asuna.arm4
/asuna.arm4l
/asuna.arm4t
/asuna.arm4tl
/asuna.arm4tll
/asuna.armv4
/asuna.armv4l
/asuna.arm5
/asuna.arm5n
/asuna.arm6
/asuna.arm64
/asuna.arm7
/asuna.arm8
/asuna.dbg
/asuna.exploit
/asuna.i4
/asuna.i486
/asuna.i586
/asuna.i686
/asuna.kill
/asuna.m68k
/asuna.mips
/asuna.mips64
/asuna.mpsl
/asuna.mipsel
/asuna.pcc
/asuna.ppc
/asuna.ppc2
/asuna.ppc440
/asuna.ppc440fp
/asuna.powerpc
/asuna.powerppc
/asuna.root
/asuna.root32
/asuna.sh4
/asuna.ssh4
/asuna.spc
/asuna.sparc
/asuna.x32
/asuna.x64
/asuna.x86
/asuna.x86_32
/asuna.x86_64
/boot.arc
/boot.arm
/boot.arm4
/boot.arm4l
/boot.arm4t
/boot.arm4tl
/boot.arm4tll
/boot.armv4
/boot.armv4l
/boot.arm5
/boot.arm5n
/boot.arm6
/boot.arm64
/boot.arm7
/boot.arm8
/boot.dbg
/boot.exploit
/boot.i4
/boot.i486
/boot.i586
/boot.i686
/boot.kill
/boot.m68k
/boot.mips
/boot.mips64
/boot.mpsl
/boot.mipsel
/boot.pcc
/boot.ppc
/boot.ppc2
/boot.ppc440
/boot.ppc440fp
/boot.powerpc
/boot.powerppc
/boot.root
/boot.root32
/boot.sh4
/boot.ssh4
/boot.spc
/boot.sparc
/boot.x32
/boot.x64
/boot.x86
/boot.x86_32
/boot.x86_64
/camili.arc
/camili.arm
/camili.arm4
/camili.arm4l
/camili.arm4t
/camili.arm4tl
/camili.arm4tll
/camili.armv4
/camili.armv4l
/camili.arm5
/camili.arm5n
/camili.arm6
/camili.arm64
/camili.arm7
/camili.arm8
/camili.dbg
/camili.exploit
/camili.i4
/camili.i486
/camili.i586
/camili.i686
/camili.kill
/camili.m68k
/camili.mips
/camili.mips64
/camili.mpsl
/camili.mipsel
/camili.pcc
/camili.ppc
/camili.ppc2
/camili.ppc440
/camili.ppc440fp
/camili.powerpc
/camili.powerppc
/camili.root
/camili.root32
/camili.sh4
/camili.ssh4
/camili.spc
/camili.sparc
/camili.x32
/camili.x64
/camili.x86
/camili.x86_32
/camili.x86_64
/friend.arc
/friend.arm
/friend.arm4
/friend.arm4l
/friend.arm4t
/friend.arm4tl
/friend.arm4tll
/friend.armv4
/friend.armv4l
/friend.arm5
/friend.arm5n
/friend.arm6
/friend.arm64
/friend.arm7
/friend.arm8
/friend.dbg
/friend.exploit
/friend.i4
/friend.i486
/friend.i586
/friend.i686
/friend.kill
/friend.m68k
/friend.mips
/friend.mips64
/friend.mpsl
/friend.mipsel
/friend.pcc
/friend.ppc
/friend.ppc2
/friend.ppc440
/friend.ppc440fp
/friend.powerpc
/friend.powerppc
/friend.root
/friend.root32
/friend.sh4
/friend.ssh4
/friend.spc
/friend.sparc
/friend.x32
/friend.x64
/friend.x86
/friend.x86_32
/friend.x86_64
/fyfa.arc
/fyfa.arm
/fyfa.arm4
/fyfa.arm4l
/fyfa.arm4t
/fyfa.arm4tl
/fyfa.arm4tll
/fyfa.armv4
/fyfa.armv4l
/fyfa.arm5
/fyfa.arm5n
/fyfa.arm6
/fyfa.arm64
/fyfa.arm7
/fyfa.arm8
/fyfa.dbg
/fyfa.exploit
/fyfa.i4
/fyfa.i486
/fyfa.i586
/fyfa.i686
/fyfa.kill
/fyfa.m68k
/fyfa.mips
/fyfa.mips64
/fyfa.mpsl
/fyfa.mipsel
/fyfa.pcc
/fyfa.ppc
/fyfa.ppc2
/fyfa.ppc440
/fyfa.ppc440fp
/fyfa.powerpc
/fyfa.powerppc
/fyfa.root
/fyfa.root32
/fyfa.sh4
/fyfa.ssh4
/fyfa.spc
/fyfa.sparc
/fyfa.x32
/fyfa.x64
/fyfa.x86
/fyfa.x86_32
/fyfa.x86_64
/gnome.arc
/gnome.arm
/gnome.arm4
/gnome.arm4l
/gnome.arm4t
/gnome.arm4tl
/gnome.arm4tll
/gnome.armv4
/gnome.armv4l
/gnome.arm5
/gnome.arm5n
/gnome.arm6
/gnome.arm64
/gnome.arm7
/gnome.arm8
/gnome.dbg
/gnome.exploit
/gnome.i4
/gnome.i486
/gnome.i586
/gnome.i686
/gnome.kill
/gnome.m68k
/gnome.mips
/gnome.mips64
/gnome.mpsl
/gnome.mipsel
/gnome.pcc
/gnome.ppc
/gnome.ppc2
/gnome.ppc440
/gnome.ppc440fp
/gnome.powerpc
/gnome.powerppc
/gnome.root
/gnome.root32
/gnome.sh4
/gnome.ssh4
/gnome.spc
/gnome.sparc
/gnome.x32
/gnome.x64
/gnome.x86
/gnome.x86_32
/gnome.x86_64
/lavertele.arc
/lavertele.arm
/lavertele.arm4
/lavertele.arm4l
/lavertele.arm4t
/lavertele.arm4tl
/lavertele.arm4tll
/lavertele.armv4
/lavertele.armv4l
/lavertele.arm5
/lavertele.arm5n
/lavertele.arm6
/lavertele.arm64
/lavertele.arm7
/lavertele.arm8
/lavertele.dbg
/lavertele.exploit
/lavertele.i4
/lavertele.i486
/lavertele.i586
/lavertele.i686
/lavertele.kill
/lavertele.m68k
/lavertele.mips
/lavertele.mips64
/lavertele.mpsl
/lavertele.mipsel
/lavertele.pcc
/lavertele.ppc
/lavertele.ppc2
/lavertele.ppc440
/lavertele.ppc440fp
/lavertele.powerpc
/lavertele.powerppc
/lavertele.root
/lavertele.root32
/lavertele.sh4
/lavertele.ssh4
/lavertele.spc
/lavertele.sparc
/lavertele.x32
/lavertele.x64
/lavertele.x86
/lavertele.x86_32
/lavertele.x86_64
/lavertelent.arc
/lavertelent.arm
/lavertelent.arm4
/lavertelent.arm4l
/lavertelent.arm4t
/lavertelent.arm4tl
/lavertelent.arm4tll
/lavertelent.armv4
/lavertelent.armv4l
/lavertelent.arm5
/lavertelent.arm5n
/lavertelent.arm6
/lavertelent.arm64
/lavertelent.arm7
/lavertelent.arm8
/lavertelent.dbg
/lavertelent.exploit
/lavertelent.i4
/lavertelent.i486
/lavertelent.i586
/lavertelent.i686
/lavertelent.kill
/lavertelent.m68k
/lavertelent.mips
/lavertelent.mips64
/lavertelent.mpsl
/lavertelent.mipsel
/lavertelent.pcc
/lavertelent.ppc
/lavertelent.ppc2
/lavertelent.ppc440
/lavertelent.ppc440fp
/lavertelent.powerpc
/lavertelent.powerppc
/lavertelent.root
/lavertelent.root32
/lavertelent.sh4
/lavertelent.ssh4
/lavertelent.spc
/lavertelent.sparc
/lavertelent.x32
/lavertelent.x64
/lavertelent.x86
/lavertelent.x86_32
/lavertelent.x86_64
/miraint.arc
/miraint.arm
/miraint.arm4
/miraint.arm4l
/miraint.arm4t
/miraint.arm4tl
/miraint.arm4tll
/miraint.armv4
/miraint.armv4l
/miraint.arm5
/miraint.arm5n
/miraint.arm6
/miraint.arm64
/miraint.arm7
/miraint.arm8
/miraint.dbg
/miraint.exploit
/miraint.i4
/miraint.i486
/miraint.i586
/miraint.i686
/miraint.kill
/miraint.m68k
/miraint.mips
/miraint.mips64
/miraint.mpsl
/miraint.mipsel
/miraint.pcc
/miraint.ppc
/miraint.ppc2
/miraint.ppc440
/miraint.ppc440fp
/miraint.powerpc
/miraint.powerppc
/miraint.root
/miraint.root32
/miraint.sh4
/miraint.ssh4
/miraint.spc
/miraint.sparc
/miraint.x32
/miraint.x64
/miraint.x86
/miraint.x86_32
/miraint.x86_64
/mm.arc
/mm.arm
/mm.arm4
/mm.arm4l
/mm.arm4t
/mm.arm4tl
/mm.arm4tll
/mm.armv4
/mm.armv4l
/mm.arm5
/mm.arm5n
/mm.arm6
/mm.arm64
/mm.arm7
/mm.arm8
/mm.dbg
/mm.exploit
/mm.i4
/mm.i486
/mm.i586
/mm.i686
/mm.kill
/mm.m68k
/mm.mips
/mm.mips64
/mm.mpsl
/mm.mipsel
/mm.pcc
/mm.ppc
/mm.ppc2
/mm.ppc440
/mm.ppc440fp
/mm.powerpc
/mm.powerppc
/mm.root
/mm.root32
/mm.sh4
/mm.ssh4
/mm.spc
/mm.sparc
/mm.x32
/mm.x64
/mm.x86
/mm.x86_32
/mm.x86_64
/orion.arc
/orion.arm
/orion.arm4
/orion.arm4l
/orion.arm4t
/orion.arm4tl
/orion.arm4tll
/orion.armv4
/orion.armv4l
/orion.arm5
/orion.arm5n
/orion.arm6
/orion.arm64
/orion.arm7
/orion.arm8
/orion.dbg
/orion.exploit
/orion.i4
/orion.i486
/orion.i586
/orion.i686
/orion.kill
/orion.m68k
/orion.mips
/orion.mips64
/orion.mpsl
/orion.mipsel
/orion.pcc
/orion.ppc
/orion.ppc2
/orion.ppc440
/orion.ppc440fp
/orion.powerpc
/orion.powerppc
/orion.root
/orion.root32
/orion.sh4
/orion.ssh4
/orion.spc
/orion.sparc
/orion.x32
/orion.x64
/orion.x86
/orion.x86_32
/orion.x86_64
/pein.arc
/pein.arm
/pein.arm4
/pein.arm4l
/pein.arm4t
/pein.arm4tl
/pein.arm4tll
/pein.armv4
/pein.armv4l
/pein.arm5
/pein.arm5n
/pein.arm6
/pein.arm64
/pein.arm7
/pein.arm8
/pein.dbg
/pein.exploit
/pein.i4
/pein.i486
/pein.i586
/pein.i686
/pein.kill
/pein.m68k
/pein.mips
/pein.mips64
/pein.mpsl
/pein.mipsel
/pein.pcc
/pein.ppc
/pein.ppc2
/pein.ppc440
/pein.ppc440fp
/pein.powerpc
/pein.powerppc
/pein.root
/pein.root32
/pein.sh4
/pein.ssh4
/pein.spc
/pein.sparc
/pein.x32
/pein.x64
/pein.x86
/pein.x86_32
/pein.x86_64
/putinhelper.arc
/putinhelper.arm
/putinhelper.arm4
/putinhelper.arm4l
/putinhelper.arm4t
/putinhelper.arm4tl
/putinhelper.arm4tll
/putinhelper.armv4
/putinhelper.armv4l
/putinhelper.arm5
/putinhelper.arm5n
/putinhelper.arm6
/putinhelper.arm64
/putinhelper.arm7
/putinhelper.arm8
/putinhelper.dbg
/putinhelper.exploit
/putinhelper.i4
/putinhelper.i486
/putinhelper.i586
/putinhelper.i686
/putinhelper.kill
/putinhelper.m68k
/putinhelper.mips
/putinhelper.mips64
/putinhelper.mpsl
/putinhelper.mipsel
/putinhelper.pcc
/putinhelper.ppc
/putinhelper.ppc2
/putinhelper.ppc440
/putinhelper.ppc440fp
/putinhelper.powerpc
/putinhelper.powerppc
/putinhelper.root
/putinhelper.root32
/putinhelper.sh4
/putinhelper.ssh4
/putinhelper.spc
/putinhelper.sparc
/putinhelper.x32
/putinhelper.x64
/putinhelper.x86
/putinhelper.x86_32
/putinhelper.x86_64
/rash.arc
/rash.arm
/rash.arm4
/rash.arm4l
/rash.arm4t
/rash.arm4tl
/rash.arm4tll
/rash.armv4
/rash.armv4l
/rash.arm5
/rash.arm5n
/rash.arm6
/rash.arm64
/rash.arm7
/rash.arm8
/rash.dbg
/rash.exploit
/rash.i4
/rash.i486
/rash.i586
/rash.i686
/rash.kill
/rash.m68k
/rash.mips
/rash.mips64
/rash.mpsl
/rash.mipsel
/rash.pcc
/rash.ppc
/rash.ppc2
/rash.ppc440
/rash.ppc440fp
/rash.powerpc
/rash.powerppc
/rash.root
/rash.root32
/rash.sh4
/rash.ssh4
/rash.spc
/rash.sparc
/rash.x32
/rash.x64
/rash.x86
/rash.x86_32
/rash.x86_64
/rekai.arc
/rekai.arm
/rekai.arm4
/rekai.arm4l
/rekai.arm4t
/rekai.arm4tl
/rekai.arm4tll
/rekai.armv4
/rekai.armv4l
/rekai.arm5
/rekai.arm5n
/rekai.arm6
/rekai.arm64
/rekai.arm7
/rekai.arm8
/rekai.dbg
/rekai.exploit
/rekai.i4
/rekai.i486
/rekai.i586
/rekai.i686
/rekai.kill
/rekai.m68k
/rekai.mips
/rekai.mips64
/rekai.mpsl
/rekai.mipsel
/rekai.pcc
/rekai.ppc
/rekai.ppc2
/rekai.ppc440
/rekai.ppc440fp
/rekai.powerpc
/rekai.powerppc
/rekai.root
/rekai.root32
/rekai.sh4
/rekai.ssh4
/rekai.spc
/rekai.sparc
/rekai.x32
/rekai.x64
/rekai.x86
/rekai.x86_32
/rekai.x86_64
/satori.arc
/satori.arm
/satori.arm4
/satori.arm4l
/satori.arm4t
/satori.arm4tl
/satori.arm4tll
/satori.armv4
/satori.armv4l
/satori.arm5
/satori.arm5n
/satori.arm6
/satori.arm64
/satori.arm7
/satori.arm8
/satori.dbg
/satori.exploit
/satori.i4
/satori.i486
/satori.i586
/satori.i686
/satori.kill
/satori.m68k
/satori.mips
/satori.mips64
/satori.mpsl
/satori.mipsel
/satori.pcc
/satori.ppc
/satori.ppc2
/satori.ppc440
/satori.ppc440fp
/satori.powerpc
/satori.powerppc
/satori.root
/satori.root32
/satori.sh4
/satori.ssh4
/satori.spc
/satori.sparc
/satori.x32
/satori.x64
/satori.x86
/satori.x86_32
/satori.x86_64
/scythe.arc
/scythe.arm
/scythe.arm4
/scythe.arm4l
/scythe.arm4t
/scythe.arm4tl
/scythe.arm4tll
/scythe.armv4
/scythe.armv4l
/scythe.arm5
/scythe.arm5n
/scythe.arm6
/scythe.arm64
/scythe.arm7
/scythe.arm8
/scythe.dbg
/scythe.exploit
/scythe.i4
/scythe.i486
/scythe.i586
/scythe.i686
/scythe.kill
/scythe.m68k
/scythe.mips
/scythe.mips64
/scythe.mpsl
/scythe.mipsel
/scythe.pcc
/scythe.ppc
/scythe.ppc2
/scythe.ppc440
/scythe.ppc440fp
/scythe.powerpc
/scythe.powerppc
/scythe.root
/scythe.root32
/scythe.sh4
/scythe.ssh4
/scythe.spc
/scythe.sparc
/scythe.x32
/scythe.x64
/scythe.x86
/scythe.x86_32
/scythe.x86_64
/sugit.arc
/sugit.arm
/sugit.arm4
/sugit.arm4l
/sugit.arm4t
/sugit.arm4tl
/sugit.arm4tll
/sugit.armv4
/sugit.armv4l
/sugit.arm5
/sugit.arm5n
/sugit.arm6
/sugit.arm64
/sugit.arm7
/sugit.arm8
/sugit.dbg
/sugit.exploit
/sugit.i4
/sugit.i486
/sugit.i586
/sugit.i686
/sugit.kill
/sugit.m68k
/sugit.mips
/sugit.mips64
/sugit.mpsl
/sugit.mipsel
/sugit.pcc
/sugit.ppc
/sugit.ppc2
/sugit.ppc440
/sugit.ppc440fp
/sugit.powerpc
/sugit.powerppc
/sugit.root
/sugit.root32
/sugit.sh4
/sugit.ssh4
/sugit.spc
/sugit.sparc
/sugit.x32
/sugit.x64
/sugit.x86
/sugit.x86_32
/sugit.x86_64
/synbot.arc
/synbot.arm
/synbot.arm4
/synbot.arm4l
/synbot.arm4t
/synbot.arm4tl
/synbot.arm4tll
/synbot.armv4
/synbot.armv4l
/synbot.arm5
/synbot.arm5n
/synbot.arm6
/synbot.arm64
/synbot.arm7
/synbot.arm8
/synbot.dbg
/synbot.exploit
/synbot.i4
/synbot.i486
/synbot.i586
/synbot.i686
/synbot.kill
/synbot.m68k
/synbot.mips
/synbot.mips64
/synbot.mpsl
/synbot.mipsel
/synbot.pcc
/synbot.ppc
/synbot.ppc2
/synbot.ppc440
/synbot.ppc440fp
/synbot.powerpc
/synbot.powerppc
/synbot.root
/synbot.root32
/synbot.sh4
/synbot.ssh4
/synbot.spc
/synbot.sparc
/synbot.x32
/synbot.x64
/synbot.x86
/synbot.x86_32
/synbot.x86_64
/Tenshi.arc
/Tenshi.arm
/Tenshi.arm4
/Tenshi.arm4l
/Tenshi.arm4t
/Tenshi.arm4tl
/Tenshi.arm4tll
/Tenshi.armv4
/Tenshi.armv4l
/Tenshi.arm5
/Tenshi.arm5n
/Tenshi.arm6
/Tenshi.arm64
/Tenshi.arm7
/Tenshi.arm8
/Tenshi.dbg
/Tenshi.exploit
/Tenshi.i4
/Tenshi.i486
/Tenshi.i586
/Tenshi.i686
/Tenshi.kill
/Tenshi.m68k
/Tenshi.mips
/Tenshi.mips64
/Tenshi.mpsl
/Tenshi.mipsel
/Tenshi.pcc
/Tenshi.ppc
/Tenshi.ppc2
/Tenshi.ppc440
/Tenshi.ppc440fp
/Tenshi.powerpc
/Tenshi.powerppc
/Tenshi.root
/Tenshi.root32
/Tenshi.sh4
/Tenshi.ssh4
/Tenshi.spc
/Tenshi.sparc
/Tenshi.x32
/Tenshi.x64
/Tenshi.x86
/Tenshi.x86_32
/Tenshi.x86_64
/tveth.arc
/tveth.arm
/tveth.arm4
/tveth.arm4l
/tveth.arm4t
/tveth.arm4tl
/tveth.arm4tll
/tveth.armv4
/tveth.armv4l
/tveth.arm5
/tveth.arm5n
/tveth.arm6
/tveth.arm64
/tveth.arm7
/tveth.arm8
/tveth.dbg
/tveth.exploit
/tveth.i4
/tveth.i486
/tveth.i586
/tveth.i686
/tveth.kill
/tveth.m68k
/tveth.mips
/tveth.mips64
/tveth.mpsl
/tveth.mipsel
/tveth.pcc
/tveth.ppc
/tveth.ppc2
/tveth.ppc440
/tveth.ppc440fp
/tveth.powerpc
/tveth.powerppc
/tveth.root
/tveth.root32
/tveth.sh4
/tveth.ssh4
/tveth.spc
/tveth.sparc
/tveth.x32
/tveth.x64
/tveth.x86
/tveth.x86_32
/tveth.x86_64
/usb.arc
/usb.arm
/usb.arm4
/usb.arm4l
/usb.arm4t
/usb.arm4tl
/usb.arm4tll
/usb.armv4
/usb.armv4l
/usb.arm5
/usb.arm5n
/usb.arm6
/usb.arm64
/usb.arm7
/usb.arm8
/usb.dbg
/usb.exploit
/usb.i4
/usb.i486
/usb.i586
/usb.i686
/usb.kill
/usb.m68k
/usb.mips
/usb.mips64
/usb.mpsl
/usb.mipsel
/usb.pcc
/usb.ppc
/usb.ppc2
/usb.ppc440
/usb.ppc440fp
/usb.powerpc
/usb.powerppc
/usb.root
/usb.root32
/usb.sh4
/usb.ssh4
/usb.spc
/usb.sparc
/usb.x32
/usb.x64
/usb.x86
/usb.x86_32
/usb.x86_64
/usb_bus.arc
/usb_bus.arm
/usb_bus.arm4
/usb_bus.arm4l
/usb_bus.arm4t
/usb_bus.arm4tl
/usb_bus.arm4tll
/usb_bus.armv4
/usb_bus.armv4l
/usb_bus.arm5
/usb_bus.arm5n
/usb_bus.arm6
/usb_bus.arm64
/usb_bus.arm7
/usb_bus.arm8
/usb_bus.dbg
/usb_bus.exploit
/usb_bus.i4
/usb_bus.i486
/usb_bus.i586
/usb_bus.i686
/usb_bus.kill
/usb_bus.m68k
/usb_bus.mips
/usb_bus.mips64
/usb_bus.mpsl
/usb_bus.mipsel
/usb_bus.pcc
/usb_bus.ppc
/usb_bus.ppc2
/usb_bus.ppc440
/usb_bus.ppc440fp
/usb_bus.powerpc
/usb_bus.powerppc
/usb_bus.root
/usb_bus.root32
/usb_bus.sh4
/usb_bus.ssh4
/usb_bus.spc
/usb_bus.sparc
/usb_bus.x32
/usb_bus.x64
/usb_bus.x86
/usb_bus.x86_32
/usb_bus.x86_64
/wget_line.arc
/wget_line.arm
/wget_line.arm4
/wget_line.arm4l
/wget_line.arm4t
/wget_line.arm4tl
/wget_line.arm4tll
/wget_line.armv4
/wget_line.armv4l
/wget_line.arm5
/wget_line.arm5n
/wget_line.arm6
/wget_line.arm64
/wget_line.arm7
/wget_line.arm8
/wget_line.dbg
/wget_line.exploit
/wget_line.i4
/wget_line.i486
/wget_line.i586
/wget_line.i686
/wget_line.kill
/wget_line.m68k
/wget_line.mips
/wget_line.mips64
/wget_line.mpsl
/wget_line.mipsel
/wget_line.pcc
/wget_line.ppc
/wget_line.ppc2
/wget_line.ppc440
/wget_line.ppc440fp
/wget_line.powerpc
/wget_line.powerppc
/wget_line.root
/wget_line.root32
/wget_line.sh4
/wget_line.ssh4
/wget_line.spc
/wget_line.sparc
/wget_line.x32
/wget_line.x64
/wget_line.x86
/wget_line.x86_32
/wget_line.x86_64

# Reference: https://twitter.com/bad_packets/status/1200122847982546944

/H34RT.arc
/H34RT.arm
/H34RT.arm4
/H34RT.arm4l
/H34RT.arm4t
/H34RT.arm4tl
/H34RT.arm4tll
/H34RT.armv4
/H34RT.armv4l
/H34RT.arm5
/H34RT.arm5n
/H34RT.arm6
/H34RT.arm64
/H34RT.arm7
/H34RT.arm8
/H34RT.dbg
/H34RT.exploit
/H34RT.i4
/H34RT.i486
/H34RT.i586
/H34RT.i686
/H34RT.kill
/H34RT.m68k
/H34RT.mips
/H34RT.mips64
/H34RT.mpsl
/H34RT.mipsel
/H34RT.pcc
/H34RT.ppc
/H34RT.ppc2
/H34RT.ppc440
/H34RT.ppc440fp
/H34RT.powerpc
/H34RT.powerppc
/H34RT.root
/H34RT.root32
/H34RT.sh4
/H34RT.ssh4
/H34RT.spc
/H34RT.sparc
/H34RT.x32
/H34RT.x64
/H34RT.x86
/H34RT.x86_32
/H34RT.x86_64

# Reference: https://twitter.com/bad_packets/status/1200671462396325888

23.254.224.153:34712
23.254.224.153:45
/Oblivion.arc
/Oblivion.arm
/Oblivion.arm4
/Oblivion.arm4l
/Oblivion.arm4t
/Oblivion.arm4tl
/Oblivion.arm4tll
/Oblivion.armv4
/Oblivion.armv4l
/Oblivion.arm5
/Oblivion.arm5n
/Oblivion.arm6
/Oblivion.arm64
/Oblivion.arm7
/Oblivion.arm8
/Oblivion.dbg
/Oblivion.exploit
/Oblivion.i4
/Oblivion.i486
/Oblivion.i586
/Oblivion.i686
/Oblivion.kill
/Oblivion.m68k
/Oblivion.mips
/Oblivion.mips64
/Oblivion.mpsl
/Oblivion.mipsel
/Oblivion.pcc
/Oblivion.ppc
/Oblivion.ppc2
/Oblivion.ppc440
/Oblivion.ppc440fp
/Oblivion.powerpc
/Oblivion.powerppc
/Oblivion.root
/Oblivion.root32
/Oblivion.sh4
/Oblivion.ssh4
/Oblivion.spc
/Oblivion.sparc
/Oblivion.x32
/Oblivion.x64
/Oblivion.x86
/Oblivion.x86_32
/Oblivion.x86_64

# Reference: https://twitter.com/0xrb/status/1202467361074241536

/fx19.arc
/fx19.arm
/fx19.arm4
/fx19.arm4l
/fx19.arm4t
/fx19.arm4tl
/fx19.arm4tll
/fx19.armv4
/fx19.armv4l
/fx19.arm5
/fx19.arm5n
/fx19.arm6
/fx19.arm64
/fx19.arm7
/fx19.arm8
/fx19.dbg
/fx19.exploit
/fx19.i4
/fx19.i486
/fx19.i586
/fx19.i686
/fx19.kill
/fx19.m68k
/fx19.mips
/fx19.mips64
/fx19.mpsl
/fx19.mipsel
/fx19.pcc
/fx19.ppc
/fx19.ppc2
/fx19.ppc440
/fx19.ppc440fp
/fx19.powerpc
/fx19.powerppc
/fx19.root
/fx19.root32
/fx19.sh4
/fx19.ssh4
/fx19.spc
/fx19.sparc
/fx19.x32
/fx19.x64
/fx19.x86
/fx19.x86_32
/fx19.x86_64
/henkieT.arc
/henkieT.arm
/henkieT.arm4
/henkieT.arm4l
/henkieT.arm4t
/henkieT.arm4tl
/henkieT.arm4tll
/henkieT.armv4
/henkieT.armv4l
/henkieT.arm5
/henkieT.arm5n
/henkieT.arm6
/henkieT.arm64
/henkieT.arm7
/henkieT.arm8
/henkieT.dbg
/henkieT.exploit
/henkieT.i4
/henkieT.i486
/henkieT.i586
/henkieT.i686
/henkieT.kill
/henkieT.m68k
/henkieT.mips
/henkieT.mips64
/henkieT.mpsl
/henkieT.mipsel
/henkieT.pcc
/henkieT.ppc
/henkieT.ppc2
/henkieT.ppc440
/henkieT.ppc440fp
/henkieT.powerpc
/henkieT.powerppc
/henkieT.root
/henkieT.root32
/henkieT.sh4
/henkieT.ssh4
/henkieT.spc
/henkieT.sparc
/henkieT.x32
/henkieT.x64
/henkieT.x86
/henkieT.x86_32
/henkieT.x86_64

# Reference: https://twitter.com/bad_packets/status/1204565215267831808

46.166.151.200:1212
46.166.151.200:122

# Reference: https://twitter.com/DGAFeedAlerts/status/1207121631681957895

bpmsfckfkrpr.support

# Reference: https://twitter.com/bad_packets/status/1209574268746399744

180.128.246.131:1676
180.128.246.131:420

# Reference: https://twitter.com/bad_packets/status/1210050652283359232

165.22.193.111:39284
165.22.193.111:9375

# Reference: https://twitter.com/bad_packets/status/1210292227810852864

198.211.59.149:2001
/badpacketsareniggers.arc
/badpacketsareniggers.arm
/badpacketsareniggers.arm4
/badpacketsareniggers.arm4l
/badpacketsareniggers.arm4t
/badpacketsareniggers.arm4tl
/badpacketsareniggers.arm4tll
/badpacketsareniggers.armv4
/badpacketsareniggers.armv4l
/badpacketsareniggers.arm5
/badpacketsareniggers.arm5n
/badpacketsareniggers.arm6
/badpacketsareniggers.arm64
/badpacketsareniggers.arm7
/badpacketsareniggers.arm8
/badpacketsareniggers.dbg
/badpacketsareniggers.exploit
/badpacketsareniggers.i4
/badpacketsareniggers.i486
/badpacketsareniggers.i586
/badpacketsareniggers.i686
/badpacketsareniggers.kill
/badpacketsareniggers.m68k
/badpacketsareniggers.mips
/badpacketsareniggers.mips64
/badpacketsareniggers.mpsl
/badpacketsareniggers.mipsel
/badpacketsareniggers.pcc
/badpacketsareniggers.ppc
/badpacketsareniggers.ppc2
/badpacketsareniggers.ppc440
/badpacketsareniggers.ppc440fp
/badpacketsareniggers.powerpc
/badpacketsareniggers.powerppc
/badpacketsareniggers.root
/badpacketsareniggers.root32
/badpacketsareniggers.sh4
/badpacketsareniggers.ssh4
/badpacketsareniggers.spc
/badpacketsareniggers.sparc
/badpacketsareniggers.x32
/badpacketsareniggers.x64
/badpacketsareniggers.x86
/badpacketsareniggers.x86_32
/badpacketsareniggers.x86_64
/mybotnettrash.arc
/mybotnettrash.arm
/mybotnettrash.arm4
/mybotnettrash.arm4l
/mybotnettrash.arm4t
/mybotnettrash.arm4tl
/mybotnettrash.arm4tll
/mybotnettrash.armv4
/mybotnettrash.armv4l
/mybotnettrash.arm5
/mybotnettrash.arm5n
/mybotnettrash.arm6
/mybotnettrash.arm64
/mybotnettrash.arm7
/mybotnettrash.arm8
/mybotnettrash.dbg
/mybotnettrash.exploit
/mybotnettrash.i4
/mybotnettrash.i486
/mybotnettrash.i586
/mybotnettrash.i686
/mybotnettrash.kill
/mybotnettrash.m68k
/mybotnettrash.mips
/mybotnettrash.mips64
/mybotnettrash.mpsl
/mybotnettrash.mipsel
/mybotnettrash.pcc
/mybotnettrash.ppc
/mybotnettrash.ppc2
/mybotnettrash.ppc440
/mybotnettrash.ppc440fp
/mybotnettrash.powerpc
/mybotnettrash.powerppc
/mybotnettrash.root
/mybotnettrash.root32
/mybotnettrash.sh4
/mybotnettrash.ssh4
/mybotnettrash.spc
/mybotnettrash.sparc
/mybotnettrash.x32
/mybotnettrash.x64
/mybotnettrash.x86
/mybotnettrash.x86_32
/mybotnettrash.x86_64

# Reference: https://twitter.com/bad_packets/status/1210439634758426624

185.172.110.204:7498

# Reference: https://twitter.com/DGAFeedAlerts/status/1210730720257179649

aojpocslpwsu.support

# Reference: https://twitter.com/bad_packets/status/1211001473548484608

185.242.104.13:64064
185.242.104.13:666
/yama.arc
/yama.arm
/yama.arm4
/yama.arm4l
/yama.arm4t
/yama.arm4tl
/yama.arm4tll
/yama.armv4
/yama.armv4l
/yama.arm5
/yama.arm5n
/yama.arm6
/yama.arm64
/yama.arm7
/yama.arm8
/yama.dbg
/yama.exploit
/yama.i4
/yama.i486
/yama.i586
/yama.i686
/yama.kill
/yama.m68k
/yama.mips
/yama.mips64
/yama.mpsl
/yama.mipsel
/yama.pcc
/yama.ppc
/yama.ppc2
/yama.ppc440
/yama.ppc440fp
/yama.powerpc
/yama.powerppc
/yama.root
/yama.root32
/yama.sh4
/yama.ssh4
/yama.spc
/yama.sparc
/yama.x32
/yama.x64
/yama.x86
/yama.x86_32
/yama.x86_64

# Reference: https://twitter.com/bad_packets/status/1211127588648697857

176.123.4.234:56473
udptcp.packetsv4.tk

# Reference: https://twitter.com/VessOnSecurity/status/1211223343543848960

hoho4christmastrees.duckdns.org
/arc.cbot
/arm.cbot
/arm4.cbot
/arm4l.cbot
/arm4t.cbot
/arm4tl.cbot
/arm4tll.cbot
/armv4.cbot
/armv4l.cbot
/arm5.cbot
/arm5n.cbot
/arm6.cbot
/arm64.cbot
/arm7.cbot
/arm8.cbot
/dbg.cbot
/exploit.cbot
/i4.cbot
/i486.cbot
/i586.cbot
/i686.cbot
/kill.cbot
/m68k.cbot
/mips.cbot
/mips64.cbot
/mpsl.cbot
/mipsel.cbot
/pcc.cbot
/ppc.cbot
/ppc2.cbot
/ppc440.cbot
/ppc440fp.cbot
/powerpc.cbot
/powerppc.cbot
/root.cbot
/root32.cbot
/sh4.cbot
/ssh4.cbot
/spc.cbot
/sparc.cbot
/x32.cbot
/x64.cbot
/x86.cbot
/x86_32.cbot
/x86_64.cbot
/cbot.arc
/cbot.arm
/cbot.arm4
/cbot.arm4l
/cbot.arm4t
/cbot.arm4tl
/cbot.arm4tll
/cbot.armv4
/cbot.armv4l
/cbot.arm5
/cbot.arm5n
/cbot.arm6
/cbot.arm64
/cbot.arm7
/cbot.arm8
/cbot.dbg
/cbot.exploit
/cbot.i4
/cbot.i486
/cbot.i586
/cbot.i686
/cbot.kill
/cbot.m68k
/cbot.mips
/cbot.mips64
/cbot.mpsl
/cbot.mipsel
/cbot.pcc
/cbot.ppc
/cbot.ppc2
/cbot.ppc440
/cbot.ppc440fp
/cbot.powerpc
/cbot.powerppc
/cbot.root
/cbot.root32
/cbot.sh4
/cbot.ssh4
/cbot.spc
/cbot.sparc
/cbot.x32
/cbot.x64
/cbot.x86
/cbot.x86_32
/cbot.x86_64

# Reference: https://twitter.com/huiwangeth/status/1211520165541826560

185.61.137.172:51235

# Reference: https://twitter.com/DGAFeedAlerts/status/1213266745370271745

fxdgbaifiqhs.support

# Reference: https://twitter.com/bad_packets/status/1214701789649354752

45.148.10.160:34712
45.148.10.160:45

# Reference: https://labs.bitdefender.com/2020/01/hold-my-beer-mirai-spinoff-named-liquorbot-incorporates-cryptomining/
# Reference: https://otx.alienvault.com/pulse/5e1603c3f3a01bdd02a678ed

ardp.hldns.ru
bpsuck.hldns.ru
systemservice.hldns.ru
wpceservice.hldns.ru
/wloli.arc
/wloli.arm
/wloli.arm4
/wloli.arm4l
/wloli.arm4t
/wloli.arm4tl
/wloli.arm4tll
/wloli.armv4
/wloli.armv4l
/wloli.arm5
/wloli.arm5n
/wloli.arm6
/wloli.arm64
/wloli.arm7
/wloli.arm8
/wloli.dbg
/wloli.exploit
/wloli.i4
/wloli.i486
/wloli.i586
/wloli.i686
/wloli.kill
/wloli.m68k
/wloli.mips
/wloli.mips64
/wloli.mpsl
/wloli.mipsel
/wloli.pcc
/wloli.ppc
/wloli.ppc2
/wloli.ppc440
/wloli.ppc440fp
/wloli.powerpc
/wloli.powerppc
/wloli.root
/wloli.root32
/wloli.sh4
/wloli.ssh4
/wloli.spc
/wloli.sparc
/wloli.x32
/wloli.x64
/wloli.x86
/wloli.x86_32
/wloli.x86_64

# Reference: https://twitter.com/VessOnSecurity/status/1216725079784087557

retardbot.duckdns.org
/arc.retardbot
/arm.retardbot
/arm4.retardbot
/arm4l.retardbot
/arm4t.retardbot
/arm4tl.retardbot
/arm4tll.retardbot
/armv4l.retardbot
/arm5.retardbot
/arm5n.retardbot
/arm6.retardbot
/arm64.retardbot
/arm7.retardbot
/arm8.retardbot
/dbg.retardbot
/i4.retardbot
/i486.retardbot
/i586.retardbot
/i686.retardbot
/exploit.retardbot
/kill.retardbot
/m68k.retardbot
/mips.retardbot
/mips64.retardbot
/mpsl.retardbot
/mipsel.retardbot
/pcc.retardbot
/ppc.retardbot
/ppc2.retardbot
/ppc440.retardbot
/ppc440fp.retardbot
/powerppc.retardbot
/root.retardbot
/root32.retardbot
/sh4.retardbot
/ssh4.retardbot
/spc.retardbot
/sparc.retardbot
/x32.retardbot
/x64.retardbot
/x86.retardbot
/x86_32.retardbot
/x86_64.retardbot
/retardbot.arc
/retardbot.arm
/retardbot.arm4
/retardbot.arm4l
/retardbot.arm4t
/retardbot.arm4tl
/retardbot.arm4tll
/retardbot.armv4l
/retardbot.arm5
/retardbot.arm5n
/retardbot.arm6
/retardbot.arm64
/retardbot.arm7
/retardbot.arm8
/retardbot.dbg
/retardbot.i4
/retardbot.i486
/retardbot.i586
/retardbot.i686
/retardbot.exploit
/retardbot.kill
/retardbot.m68k
/retardbot.mips
/retardbot.mips64
/retardbot.mpsl
/retardbot.mipsel
/retardbot.pcc
/retardbot.ppc
/retardbot.ppc2
/retardbot.ppc440
/retardbot.ppc440fp
/retardbot.powerppc
/retardbot.root
/retardbot.root32
/retardbot.sh4
/retardbot.ssh4
/retardbot.spc
/retardbot.sparc
/retardbot.x32
/retardbot.x64
/retardbot.x86
/retardbot.x86_32
/retardbot.x86_64

# Reference: https://twitter.com/bad_packets/status/1218735720497500160

198.23.238.235:666
/kttp.arc
/kttp.arm
/kttp.arm4
/kttp.arm4l
/kttp.arm4t
/kttp.arm4tl
/kttp.arm4tll
/kttp.armv4l
/kttp.arm5
/kttp.arm5n
/kttp.arm6
/kttp.arm64
/kttp.arm7
/kttp.arm8
/kttp.dbg
/kttp.i4
/kttp.i486
/kttp.i586
/kttp.i686
/kttp.exploit
/kttp.kill
/kttp.m68k
/kttp.mips
/kttp.mips64
/kttp.mpsl
/kttp.mipsel
/kttp.pcc
/kttp.ppc
/kttp.ppc2
/kttp.ppc440
/kttp.ppc440fp
/kttp.powerppc
/kttp.root
/kttp.root32
/kttp.sh4
/kttp.ssh4
/kttp.spc
/kttp.sparc
/kttp.x32
/kttp.x64
/kttp.x86
/kttp.x86_32
/kttp.x86_64

# Reference: https://twitter.com/bad_packets/status/1219160404431011842

91.208.184.118:65535
/enigmatic.arc
/enigmatic.arm
/enigmatic.arm4
/enigmatic.arm4l
/enigmatic.arm4t
/enigmatic.arm4tl
/enigmatic.arm4tll
/enigmatic.armv4l
/enigmatic.arm5
/enigmatic.arm5n
/enigmatic.arm6
/enigmatic.arm64
/enigmatic.arm7
/enigmatic.arm8
/enigmatic.dbg
/enigmatic.i4
/enigmatic.i486
/enigmatic.i586
/enigmatic.i686
/enigmatic.exploit
/enigmatic.kill
/enigmatic.m68k
/enigmatic.mips
/enigmatic.mips64
/enigmatic.mpsl
/enigmatic.mipsel
/enigmatic.pcc
/enigmatic.ppc
/enigmatic.ppc2
/enigmatic.ppc440
/enigmatic.ppc440fp
/enigmatic.powerppc
/enigmatic.root
/enigmatic.root32
/enigmatic.sh4
/enigmatic.ssh4
/enigmatic.spc
/enigmatic.sparc
/enigmatic.x32
/enigmatic.x64
/enigmatic.x86
/enigmatic.x86_32
/enigmatic.x86_64

# Reference: https://twitter.com/0xrb/status/1219948735892881410

147.135.99.103:9375
/3ngine.arc
/3ngine.arm
/3ngine.arm4
/3ngine.arm4l
/3ngine.arm4t
/3ngine.arm4tl
/3ngine.arm4tll
/3ngine.armv4l
/3ngine.arm5
/3ngine.arm5n
/3ngine.arm6
/3ngine.arm64
/3ngine.arm7
/3ngine.arm8
/3ngine.dbg
/3ngine.i4
/3ngine.i486
/3ngine.i586
/3ngine.i686
/3ngine.exploit
/3ngine.kill
/3ngine.m68k
/3ngine.mips
/3ngine.mips64
/3ngine.mpsl
/3ngine.mipsel
/3ngine.pcc
/3ngine.ppc
/3ngine.ppc2
/3ngine.ppc440
/3ngine.ppc440fp
/3ngine.powerppc
/3ngine.root
/3ngine.root32
/3ngine.sh4
/3ngine.ssh4
/3ngine.spc
/3ngine.sparc
/3ngine.x32
/3ngine.x64
/3ngine.x86
/3ngine.x86_32
/3ngine.x86_64

# Reference: https://twitter.com/0xrb/status/1219942866031525888

205.185.122.174:1024
/ChainAnti.arc
/ChainAnti.arm
/ChainAnti.arm4
/ChainAnti.arm4l
/ChainAnti.arm4t
/ChainAnti.arm4tl
/ChainAnti.arm4tll
/ChainAnti.armv4l
/ChainAnti.arm5
/ChainAnti.arm5n
/ChainAnti.arm6
/ChainAnti.arm64
/ChainAnti.arm7
/ChainAnti.arm8
/ChainAnti.dbg
/ChainAnti.i4
/ChainAnti.i486
/ChainAnti.i586
/ChainAnti.i686
/ChainAnti.exploit
/ChainAnti.kill
/ChainAnti.m68k
/ChainAnti.mips
/ChainAnti.mips64
/ChainAnti.mpsl
/ChainAnti.mipsel
/ChainAnti.pcc
/ChainAnti.ppc
/ChainAnti.ppc2
/ChainAnti.ppc440
/ChainAnti.ppc440fp
/ChainAnti.powerppc
/ChainAnti.root
/ChainAnti.root32
/ChainAnti.sh4
/ChainAnti.ssh4
/ChainAnti.spc
/ChainAnti.sparc
/ChainAnti.x32
/ChainAnti.x64
/ChainAnti.x86
/ChainAnti.x86_32
/ChainAnti.x86_64

# Reference: https://twitter.com/bad_packets/status/1220231950889189376

89.34.27.57:34529
89.34.27.57:8348
/arc.okuma
/arm.okuma
/arm4.okuma
/arm4l.okuma
/arm4t.okuma
/arm4tl.okuma
/arm4tll.okuma
/armv4.okuma
/armv4l.okuma
/arm5.okuma
/arm5n.okuma
/arm6.okuma
/arm64.okuma
/arm7.okuma
/arm8.okuma
/dbg.okuma
/exploit.okuma
/i4.okuma
/i486.okuma
/i586.okuma
/i686.okuma
/kill.okuma
/m68k.okuma
/mips.okuma
/mips64.okuma
/mpsl.okuma
/mipsel.okuma
/pcc.okuma
/ppc.okuma
/ppc2.okuma
/ppc440.okuma
/ppc440fp.okuma
/powerpc.okuma
/powerppc.okuma
/root.okuma
/root32.okuma
/sh4.okuma
/ssh4.okuma
/spc.okuma
/sparc.okuma
/x32.okuma
/x64.okuma
/x86.okuma
/x86_32.okuma
/x86_64.okuma
/okuma.arc
/okuma.arm
/okuma.arm4
/okuma.arm4l
/okuma.arm4t
/okuma.arm4tl
/okuma.arm4tll
/okuma.armv4
/okuma.armv4l
/okuma.arm5
/okuma.arm5n
/okuma.arm6
/okuma.arm64
/okuma.arm7
/okuma.arm8
/okuma.dbg
/okuma.exploit
/okuma.i4
/okuma.i486
/okuma.i586
/okuma.i686
/okuma.kill
/okuma.m68k
/okuma.mips
/okuma.mips64
/okuma.mpsl
/okuma.mipsel
/okuma.pcc
/okuma.ppc
/okuma.ppc2
/okuma.ppc440
/okuma.ppc440fp
/okuma.powerpc
/okuma.powerppc
/okuma.root
/okuma.root32
/okuma.sh4
/okuma.ssh4
/okuma.spc
/okuma.sparc
/okuma.x32
/okuma.x64
/okuma.x86
/okuma.x86_32
/okuma.x86_64

# Reference: https://twitter.com/0xrb/status/1219946554951254016

217.182.38.147:1791

# Reference: https://twitter.com/0xrb/status/1220270618827841536

45.148.10.181:50884
zxcxffyttygbbgfgf12121bot.duckdns.org
/arc.qw69
/arm.qw69
/arm4.qw69
/arm4l.qw69
/arm4t.qw69
/arm4tl.qw69
/arm4tll.qw69
/armv4.qw69
/armv4l.qw69
/arm5.qw69
/arm5n.qw69
/arm6.qw69
/arm64.qw69
/arm7.qw69
/arm8.qw69
/dbg.qw69
/exploit.qw69
/i4.qw69
/i486.qw69
/i586.qw69
/i686.qw69
/kill.qw69
/m68k.qw69
/mips.qw69
/mips64.qw69
/mpsl.qw69
/mipsel.qw69
/pcc.qw69
/ppc.qw69
/ppc2.qw69
/ppc440.qw69
/ppc440fp.qw69
/powerpc.qw69
/powerppc.qw69
/root.qw69
/root32.qw69
/sh4.qw69
/ssh4.qw69
/spc.qw69
/sparc.qw69
/x32.qw69
/x64.qw69
/x86.qw69
/x86_32.qw69
/x86_64.qw69
/qw69.arc
/qw69.arm
/qw69.arm4
/qw69.arm4l
/qw69.arm4t
/qw69.arm4tl
/qw69.arm4tll
/qw69.armv4
/qw69.armv4l
/qw69.arm5
/qw69.arm5n
/qw69.arm6
/qw69.arm64
/qw69.arm7
/qw69.arm8
/qw69.dbg
/qw69.exploit
/qw69.i4
/qw69.i486
/qw69.i586
/qw69.i686
/qw69.kill
/qw69.m68k
/qw69.mips
/qw69.mips64
/qw69.mpsl
/qw69.mipsel
/qw69.pcc
/qw69.ppc
/qw69.ppc2
/qw69.ppc440
/qw69.ppc440fp
/qw69.powerpc
/qw69.powerppc
/qw69.root
/qw69.root32
/qw69.sh4
/qw69.ssh4
/qw69.spc
/qw69.sparc
/qw69.x32
/qw69.x64
/qw69.x86
/qw69.x86_32
/qw69.x86_64

# Reference: https://twitter.com/0xrb/status/1220627438524174337

188.166.36.43:50717
/arc.s0s13
/arm.s0s13
/arm4.s0s13
/arm4l.s0s13
/arm4t.s0s13
/arm4tl.s0s13
/arm4tll.s0s13
/armv4.s0s13
/armv4l.s0s13
/arm5.s0s13
/arm5n.s0s13
/arm6.s0s13
/arm64.s0s13
/arm7.s0s13
/arm8.s0s13
/dbg.s0s13
/exploit.s0s13
/i4.s0s13
/i486.s0s13
/i586.s0s13
/i686.s0s13
/kill.s0s13
/m68k.s0s13
/mips.s0s13
/mips64.s0s13
/mpsl.s0s13
/mipsel.s0s13
/pcc.s0s13
/ppc.s0s13
/ppc2.s0s13
/ppc440.s0s13
/ppc440fp.s0s13
/powerpc.s0s13
/powerppc.s0s13
/root.s0s13
/root32.s0s13
/sh4.s0s13
/ssh4.s0s13
/spc.s0s13
/sparc.s0s13
/x32.s0s13
/x64.s0s13
/x86.s0s13
/x86_32.s0s13
/x86_64.s0s13
/s0s13.arc
/s0s13.arm
/s0s13.arm4
/s0s13.arm4l
/s0s13.arm4t
/s0s13.arm4tl
/s0s13.arm4tll
/s0s13.armv4
/s0s13.armv4l
/s0s13.arm5
/s0s13.arm5n
/s0s13.arm6
/s0s13.arm64
/s0s13.arm7
/s0s13.arm8
/s0s13.dbg
/s0s13.exploit
/s0s13.i4
/s0s13.i486
/s0s13.i586
/s0s13.i686
/s0s13.kill
/s0s13.m68k
/s0s13.mips
/s0s13.mips64
/s0s13.mpsl
/s0s13.mipsel
/s0s13.pcc
/s0s13.ppc
/s0s13.ppc2
/s0s13.ppc440
/s0s13.ppc440fp
/s0s13.powerpc
/s0s13.powerppc
/s0s13.root
/s0s13.root32
/s0s13.sh4
/s0s13.ssh4
/s0s13.spc
/s0s13.sparc
/s0s13.x32
/s0s13.x64
/s0s13.x86
/s0s13.x86_32
/s0s13.x86_64

# Reference: https://www.virustotal.com/gui/ip-address/37.49.231.104/relations

cnc.astrovpn.xyz
scan.astrovpn.xyz
/arc.lmfao293reuj239jrf234rft34jt
/arm.lmfao293reuj239jrf234rft34jt
/arm4.lmfao293reuj239jrf234rft34jt
/arm4l.lmfao293reuj239jrf234rft34jt
/arm4t.lmfao293reuj239jrf234rft34jt
/arm4tl.lmfao293reuj239jrf234rft34jt
/arm4tll.lmfao293reuj239jrf234rft34jt
/armv4.lmfao293reuj239jrf234rft34jt
/armv4l.lmfao293reuj239jrf234rft34jt
/arm5.lmfao293reuj239jrf234rft34jt
/arm5n.lmfao293reuj239jrf234rft34jt
/arm6.lmfao293reuj239jrf234rft34jt
/arm64.lmfao293reuj239jrf234rft34jt
/arm7.lmfao293reuj239jrf234rft34jt
/arm8.lmfao293reuj239jrf234rft34jt
/dbg.lmfao293reuj239jrf234rft34jt
/exploit.lmfao293reuj239jrf234rft34jt
/i4.lmfao293reuj239jrf234rft34jt
/i486.lmfao293reuj239jrf234rft34jt
/i586.lmfao293reuj239jrf234rft34jt
/i686.lmfao293reuj239jrf234rft34jt
/kill.lmfao293reuj239jrf234rft34jt
/m68k.lmfao293reuj239jrf234rft34jt
/mips.lmfao293reuj239jrf234rft34jt
/mips64.lmfao293reuj239jrf234rft34jt
/mpsl.lmfao293reuj239jrf234rft34jt
/mipsel.lmfao293reuj239jrf234rft34jt
/pcc.lmfao293reuj239jrf234rft34jt
/ppc.lmfao293reuj239jrf234rft34jt
/ppc2.lmfao293reuj239jrf234rft34jt
/ppc440.lmfao293reuj239jrf234rft34jt
/ppc440fp.lmfao293reuj239jrf234rft34jt
/powerpc.lmfao293reuj239jrf234rft34jt
/powerppc.lmfao293reuj239jrf234rft34jt
/root.lmfao293reuj239jrf234rft34jt
/root32.lmfao293reuj239jrf234rft34jt
/sh4.lmfao293reuj239jrf234rft34jt
/ssh4.lmfao293reuj239jrf234rft34jt
/spc.lmfao293reuj239jrf234rft34jt
/sparc.lmfao293reuj239jrf234rft34jt
/x32.lmfao293reuj239jrf234rft34jt
/x64.lmfao293reuj239jrf234rft34jt
/x86.lmfao293reuj239jrf234rft34jt
/x86_32.lmfao293reuj239jrf234rft34jt
/x86_64.lmfao293reuj239jrf234rft34jt
/lmfao293reuj239jrf234rft34jt.arc
/lmfao293reuj239jrf234rft34jt.arm
/lmfao293reuj239jrf234rft34jt.arm4
/lmfao293reuj239jrf234rft34jt.arm4l
/lmfao293reuj239jrf234rft34jt.arm4t
/lmfao293reuj239jrf234rft34jt.arm4tl
/lmfao293reuj239jrf234rft34jt.arm4tll
/lmfao293reuj239jrf234rft34jt.armv4
/lmfao293reuj239jrf234rft34jt.armv4l
/lmfao293reuj239jrf234rft34jt.arm5
/lmfao293reuj239jrf234rft34jt.arm5n
/lmfao293reuj239jrf234rft34jt.arm6
/lmfao293reuj239jrf234rft34jt.arm64
/lmfao293reuj239jrf234rft34jt.arm7
/lmfao293reuj239jrf234rft34jt.arm8
/lmfao293reuj239jrf234rft34jt.dbg
/lmfao293reuj239jrf234rft34jt.exploit
/lmfao293reuj239jrf234rft34jt.i4
/lmfao293reuj239jrf234rft34jt.i486
/lmfao293reuj239jrf234rft34jt.i586
/lmfao293reuj239jrf234rft34jt.i686
/lmfao293reuj239jrf234rft34jt.kill
/lmfao293reuj239jrf234rft34jt.m68k
/lmfao293reuj239jrf234rft34jt.mips
/lmfao293reuj239jrf234rft34jt.mips64
/lmfao293reuj239jrf234rft34jt.mpsl
/lmfao293reuj239jrf234rft34jt.mipsel
/lmfao293reuj239jrf234rft34jt.pcc
/lmfao293reuj239jrf234rft34jt.ppc
/lmfao293reuj239jrf234rft34jt.ppc2
/lmfao293reuj239jrf234rft34jt.ppc440
/lmfao293reuj239jrf234rft34jt.ppc440fp
/lmfao293reuj239jrf234rft34jt.powerpc
/lmfao293reuj239jrf234rft34jt.powerppc
/lmfao293reuj239jrf234rft34jt.root
/lmfao293reuj239jrf234rft34jt.root32
/lmfao293reuj239jrf234rft34jt.sh4
/lmfao293reuj239jrf234rft34jt.ssh4
/lmfao293reuj239jrf234rft34jt.spc
/lmfao293reuj239jrf234rft34jt.sparc
/lmfao293reuj239jrf234rft34jt.x32
/lmfao293reuj239jrf234rft34jt.x64
/lmfao293reuj239jrf234rft34jt.x86
/lmfao293reuj239jrf234rft34jt.x86_32
/lmfao293reuj239jrf234rft34jt.x86_64

# Reference: https://www.virustotal.com/gui/domain/fksdjfaksj321cnc.mybiadboats.xyz/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.148.10.92/relations

mybiadboats.xyz
fksdjfaksj321bots.mybiadboats.xyz
fksdjfaksj321cnc.mybiadboats.xyz
/arc.5531sx3
/arm.5531sx3
/arm4.5531sx3
/arm4l.5531sx3
/arm4t.5531sx3
/arm4tl.5531sx3
/arm4tll.5531sx3
/armv4.5531sx3
/armv4l.5531sx3
/arm5.5531sx3
/arm5n.5531sx3
/arm6.5531sx3
/arm64.5531sx3
/arm7.5531sx3
/arm8.5531sx3
/dbg.5531sx3
/exploit.5531sx3
/i4.5531sx3
/i486.5531sx3
/i586.5531sx3
/i686.5531sx3
/kill.5531sx3
/m68k.5531sx3
/mips.5531sx3
/mips64.5531sx3
/mpsl.5531sx3
/mipsel.5531sx3
/pcc.5531sx3
/ppc.5531sx3
/ppc2.5531sx3
/ppc440.5531sx3
/ppc440fp.5531sx3
/powerpc.5531sx3
/powerppc.5531sx3
/root.5531sx3
/root32.5531sx3
/sh4.5531sx3
/ssh4.5531sx3
/spc.5531sx3
/sparc.5531sx3
/x32.5531sx3
/x64.5531sx3
/x86.5531sx3
/x86_32.5531sx3
/x86_64.5531sx3
/5531sx3.arc
/5531sx3.arm
/5531sx3.arm4
/5531sx3.arm4l
/5531sx3.arm4t
/5531sx3.arm4tl
/5531sx3.arm4tll
/5531sx3.armv4
/5531sx3.armv4l
/5531sx3.arm5
/5531sx3.arm5n
/5531sx3.arm6
/5531sx3.arm64
/5531sx3.arm7
/5531sx3.arm8
/5531sx3.dbg
/5531sx3.exploit
/5531sx3.i4
/5531sx3.i486
/5531sx3.i586
/5531sx3.i686
/5531sx3.kill
/5531sx3.m68k
/5531sx3.mips
/5531sx3.mips64
/5531sx3.mpsl
/5531sx3.mipsel
/5531sx3.pcc
/5531sx3.ppc
/5531sx3.ppc2
/5531sx3.ppc440
/5531sx3.ppc440fp
/5531sx3.powerpc
/5531sx3.powerppc
/5531sx3.root
/5531sx3.root32
/5531sx3.sh4
/5531sx3.ssh4
/5531sx3.spc
/5531sx3.sparc
/5531sx3.x32
/5531sx3.x64
/5531sx3.x86
/5531sx3.x86_32
/5531sx3.x86_64

# Reference: https://twitter.com/bad_packets/status/1224062212236382208

207.154.212.220:5301
207.154.212.220:9545
/Stanleyy.arc
/Stanleyy.arm
/Stanleyy.arm4
/Stanleyy.arm4l
/Stanleyy.arm4t
/Stanleyy.arm4tl
/Stanleyy.arm4tll
/Stanleyy.armv4
/Stanleyy.armv4l
/Stanleyy.arm5
/Stanleyy.arm5l
/Stanleyy.arm5n
/Stanleyy.armv5
/Stanleyy.armv5l
/Stanleyy.arm6
/Stanleyy.arm6l
/Stanleyy.arm64
/Stanleyy.armv6
/Stanleyy.armv6l
/Stanleyy.armv61
/Stanleyy.arm7
/Stanleyy.arm7l
/Stanleyy.armv7
/Stanleyy.armv7l
/Stanleyy.arm8
/Stanleyy.armv8
/Stanleyy.dbg
/Stanleyy.exploit
/Stanleyy.i4
/Stanleyy.i6
/Stanleyy.i486
/Stanleyy.i586
/Stanleyy.i686
/Stanleyy.kill
/Stanleyy.m68
/Stanleyy.m68k
/Stanleyy.mips
/Stanleyy.mips64
/Stanleyy.mpsl
/Stanleyy.mipsel
/Stanleyy.pcc
/Stanleyy.ppc
/Stanleyy.ppc2
/Stanleyy.ppc440
/Stanleyy.ppc440fp
/Stanleyy.powerpc
/Stanleyy.powerppc
/Stanleyy.powerpc-440fp
/Stanleyy.root
/Stanleyy.root32
/Stanleyy.sh
/Stanleyy.sh4
/Stanleyy.ssh4
/Stanleyy.spc
/Stanleyy.sparc
/Stanleyy.x32
/Stanleyy.x64
/Stanleyy.x86
/Stanleyy.x86_32
/Stanleyy.x86_64

# Reference: https://twitter.com/bad_packets/status/1221641018262470657

206.81.1.189:39284
206.81.1.189:9375
/b3astmode.arc
/b3astmode.arm
/b3astmode.arm4
/b3astmode.arm4l
/b3astmode.arm4t
/b3astmode.arm4tl
/b3astmode.arm4tll
/b3astmode.armv4
/b3astmode.armv4l
/b3astmode.arm5
/b3astmode.arm5l
/b3astmode.arm5n
/b3astmode.armv5
/b3astmode.armv5l
/b3astmode.arm6
/b3astmode.arm6l
/b3astmode.arm64
/b3astmode.armv6
/b3astmode.armv6l
/b3astmode.armv61
/b3astmode.arm7
/b3astmode.arm7l
/b3astmode.armv7
/b3astmode.armv7l
/b3astmode.arm8
/b3astmode.armv8
/b3astmode.dbg
/b3astmode.exploit
/b3astmode.i4
/b3astmode.i6
/b3astmode.i486
/b3astmode.i586
/b3astmode.i686
/b3astmode.kill
/b3astmode.m68
/b3astmode.m68k
/b3astmode.mips
/b3astmode.mips64
/b3astmode.mpsl
/b3astmode.mipsel
/b3astmode.pcc
/b3astmode.ppc
/b3astmode.ppc2
/b3astmode.ppc440
/b3astmode.ppc440fp
/b3astmode.powerpc
/b3astmode.powerppc
/b3astmode.powerpc-440fp
/b3astmode.root
/b3astmode.root32
/b3astmode.sh
/b3astmode.sh4
/b3astmode.ssh4
/b3astmode.spc
/b3astmode.sparc
/b3astmode.x32
/b3astmode.x64
/b3astmode.x86
/b3astmode.x86_32
/b3astmode.x86_64

# Reference: https://twitter.com/0xrb/status/1224245436015230976
# Reference: https://twitter.com/0xrb/status/1224243105970323457
# Reference: https://twitter.com/0xrb/status/1224246687129993221

159.89.143.222:9375
204.48.21.31:9375
217.182.38.147:1111
/a-r.m-4.GHOUL
/a-r.m-5.GHOUL
/a-r.m-6.GHOUL
/a-r.m-7.GHOUL
/i-4.8-6.GHOUL
/i-5.8-6.GHOUL
/i-6.8-6.GHOUL
/m-6.8-k.GHOUL
/m-i.p-s.GHOUL
/m-p.s-l.GHOUL
/p-p.c-.GHOUL
/s-h.4-.GHOUL
/x-3.2-.GHOUL
/x-6.4-.GHOUL
/x-8.6-.GHOUL

# Reference: https://twitter.com/0xrb/status/1224250204875939840/photo/1

/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4t
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4tl
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4tll
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv4l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm5
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm5l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm5n
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv5
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv5l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm6
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm6l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm64
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv6
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv6l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv61
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm7
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm7l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv7
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv7l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm8
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv8
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.dbg
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.exploit
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i6
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i486
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i586
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i686
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.kill
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.m68
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.m68k
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mips
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mips64
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mpsl
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mipsel
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.pcc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc2
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc440
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc440fp
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.powerpc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.powerppc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.powerpc-440fp
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.root
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.root32
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.sh
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.sh4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ssh4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.spc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.sparc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x32
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x64
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x86
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x86_32
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x86_64
/Gh0ul.arc
/Gh0ul.arm
/Gh0ul.arm4
/Gh0ul.arm4l
/Gh0ul.arm4t
/Gh0ul.arm4tl
/Gh0ul.arm4tll
/Gh0ul.armv4
/Gh0ul.armv4l
/Gh0ul.arm5
/Gh0ul.arm5l
/Gh0ul.arm5n
/Gh0ul.armv5
/Gh0ul.armv5l
/Gh0ul.arm6
/Gh0ul.arm6l
/Gh0ul.arm64
/Gh0ul.armv6
/Gh0ul.armv6l
/Gh0ul.armv61
/Gh0ul.arm7
/Gh0ul.arm7l
/Gh0ul.armv7
/Gh0ul.armv7l
/Gh0ul.arm8
/Gh0ul.armv8
/Gh0ul.dbg
/Gh0ul.exploit
/Gh0ul.i4
/Gh0ul.i6
/Gh0ul.i486
/Gh0ul.i586
/Gh0ul.i686
/Gh0ul.kill
/Gh0ul.m68
/Gh0ul.m68k
/Gh0ul.mips
/Gh0ul.mips64
/Gh0ul.mpsl
/Gh0ul.mipsel
/Gh0ul.pcc
/Gh0ul.ppc
/Gh0ul.ppc2
/Gh0ul.ppc440
/Gh0ul.ppc440fp
/Gh0ul.powerpc
/Gh0ul.powerppc
/Gh0ul.powerpc-440fp
/Gh0ul.root
/Gh0ul.root32
/Gh0ul.sh
/Gh0ul.sh4
/Gh0ul.ssh4
/Gh0ul.spc
/Gh0ul.sparc
/Gh0ul.x32
/Gh0ul.x64
/Gh0ul.x86
/Gh0ul.x86_32
/Gh0ul.x86_64
/helios.arc
/helios.arm
/helios.arm4
/helios.arm4l
/helios.arm4t
/helios.arm4tl
/helios.arm4tll
/helios.armv4
/helios.armv4l
/helios.arm5
/helios.arm5l
/helios.arm5n
/helios.armv5
/helios.armv5l
/helios.arm6
/helios.arm6l
/helios.arm64
/helios.armv6
/helios.armv6l
/helios.armv61
/helios.arm7
/helios.arm7l
/helios.armv7
/helios.armv7l
/helios.arm8
/helios.armv8
/helios.dbg
/helios.exploit
/helios.i4
/helios.i6
/helios.i486
/helios.i586
/helios.i686
/helios.kill
/helios.m68
/helios.m68k
/helios.mips
/helios.mips64
/helios.mpsl
/helios.mipsel
/helios.pcc
/helios.ppc
/helios.ppc2
/helios.ppc440
/helios.ppc440fp
/helios.powerpc
/helios.powerppc
/helios.powerpc-440fp
/helios.root
/helios.root32
/helios.sh
/helios.sh4
/helios.ssh4
/helios.spc
/helios.sparc
/helios.x32
/helios.x64
/helios.x86
/helios.x86_32
/helios.x86_64
/kiga.arc
/kiga.arm
/kiga.arm4
/kiga.arm4l
/kiga.arm4t
/kiga.arm4tl
/kiga.arm4tll
/kiga.armv4
/kiga.armv4l
/kiga.arm5
/kiga.arm5l
/kiga.arm5n
/kiga.armv5
/kiga.armv5l
/kiga.arm6
/kiga.arm6l
/kiga.arm64
/kiga.armv6
/kiga.armv6l
/kiga.armv61
/kiga.arm7
/kiga.arm7l
/kiga.armv7
/kiga.armv7l
/kiga.arm8
/kiga.armv8
/kiga.dbg
/kiga.exploit
/kiga.i4
/kiga.i6
/kiga.i486
/kiga.i586
/kiga.i686
/kiga.kill
/kiga.m68
/kiga.m68k
/kiga.mips
/kiga.mips64
/kiga.mpsl
/kiga.mipsel
/kiga.pcc
/kiga.ppc
/kiga.ppc2
/kiga.ppc440
/kiga.ppc440fp
/kiga.powerpc
/kiga.powerppc
/kiga.powerpc-440fp
/kiga.root
/kiga.root32
/kiga.sh
/kiga.sh4
/kiga.ssh4
/kiga.spc
/kiga.sparc
/kiga.x32
/kiga.x64
/kiga.x86
/kiga.x86_32
/kiga.x86_64
/z2s234.arc
/z2s234.arm
/z2s234.arm4
/z2s234.arm4l
/z2s234.arm4t
/z2s234.arm4tl
/z2s234.arm4tll
/z2s234.armv4
/z2s234.armv4l
/z2s234.arm5
/z2s234.arm5l
/z2s234.arm5n
/z2s234.armv5
/z2s234.armv5l
/z2s234.arm6
/z2s234.arm6l
/z2s234.arm64
/z2s234.armv6
/z2s234.armv6l
/z2s234.armv61
/z2s234.arm7
/z2s234.arm7l
/z2s234.armv7
/z2s234.armv7l
/z2s234.arm8
/z2s234.armv8
/z2s234.dbg
/z2s234.exploit
/z2s234.i4
/z2s234.i6
/z2s234.i486
/z2s234.i586
/z2s234.i686
/z2s234.kill
/z2s234.m68
/z2s234.m68k
/z2s234.mips
/z2s234.mips64
/z2s234.mpsl
/z2s234.mipsel
/z2s234.pcc
/z2s234.ppc
/z2s234.ppc2
/z2s234.ppc440
/z2s234.ppc440fp
/z2s234.powerpc
/z2s234.powerppc
/z2s234.powerpc-440fp
/z2s234.root
/z2s234.root32
/z2s234.sh
/z2s234.sh4
/z2s234.ssh4
/z2s234.spc
/z2s234.sparc
/z2s234.x32
/z2s234.x64
/z2s234.x86
/z2s234.x86_32
/z2s234.x86_64

# Reference: https://twitter.com/DGAFeedAlerts/status/1224516139742646272

sdoplblbefwm.support

# Reference: https://www.virustotal.com/gui/domain/scan.casualaffinity.net/relations

# scan.casualaffinity.net

# Reference: https://www.virustotal.com/gui/domain/niggacumyafacenet.xyz/relations

# jhasdjahsdjasfkdaskdfasbot.niggacumyafacenet.xyz
# jhasdjahsdjasfkdaskdfascnc.niggacumyafacenet.xyz

/z0r0.arc
/z0r0.arm
/z0r0.arm4
/z0r0.arm4l
/z0r0.arm4t
/z0r0.arm4tl
/z0r0.arm4tll
/z0r0.armv4
/z0r0.armv4l
/z0r0.arm5
/z0r0.arm5l
/z0r0.arm5n
/z0r0.armv5
/z0r0.armv5l
/z0r0.arm6
/z0r0.arm6l
/z0r0.arm64
/z0r0.armv6
/z0r0.armv6l
/z0r0.armv61
/z0r0.arm7
/z0r0.arm7l
/z0r0.armv7
/z0r0.armv7l
/z0r0.arm8
/z0r0.armv8
/z0r0.dbg
/z0r0.exploit
/z0r0.i4
/z0r0.i6
/z0r0.i486
/z0r0.i586
/z0r0.i686
/z0r0.kill
/z0r0.m68
/z0r0.m68k
/z0r0.mips
/z0r0.mips64
/z0r0.mpsl
/z0r0.mipsel
/z0r0.pcc
/z0r0.ppc
/z0r0.ppc2
/z0r0.ppc440
/z0r0.ppc440fp
/z0r0.powerpc
/z0r0.powerppc
/z0r0.powerpc-440fp
/z0r0.root
/z0r0.root32
/z0r0.sh
/z0r0.sh4
/z0r0.ssh4
/z0r0.spc
/z0r0.sparc
/z0r0.x32
/z0r0.x64
/z0r0.x86
/z0r0.x86_32
/z0r0.x86_64

# Reference: https://twitter.com/bad_packets/status/1226403767198707712

/puzzle.arc
/puzzle.arm
/puzzle.arm4
/puzzle.arm4l
/puzzle.arm4t
/puzzle.arm4tl
/puzzle.arm4tll
/puzzle.armv4
/puzzle.armv4l
/puzzle.arm5
/puzzle.arm5l
/puzzle.arm5n
/puzzle.armv5
/puzzle.armv5l
/puzzle.arm6
/puzzle.arm6l
/puzzle.arm64
/puzzle.armv6
/puzzle.armv6l
/puzzle.armv61
/puzzle.arm7
/puzzle.arm7l
/puzzle.armv7
/puzzle.armv7l
/puzzle.arm8
/puzzle.armv8
/puzzle.dbg
/puzzle.exploit
/puzzle.i4
/puzzle.i6
/puzzle.i486
/puzzle.i586
/puzzle.i686
/puzzle.kill
/puzzle.m68
/puzzle.m68k
/puzzle.mips
/puzzle.mips64
/puzzle.mpsl
/puzzle.mipsel
/puzzle.pcc
/puzzle.ppc
/puzzle.ppc2
/puzzle.ppc440
/puzzle.ppc440fp
/puzzle.powerpc
/puzzle.powerppc
/puzzle.powerpc-440fp
/puzzle.root
/puzzle.root32
/puzzle.sh
/puzzle.sh4
/puzzle.ssh4
/puzzle.spc
/puzzle.sparc
/puzzle.x32
/puzzle.x64
/puzzle.x86
/puzzle.x86_32
/puzzle.x86_64

# Reference: https://twitter.com/bad_packets/status/1227309221244493825

178.128.183.31:24136
178.128.183.31:38565

# Reference: https://twitter.com/bad_packets/status/1227352199128211457

190.115.18.86:6323
190.115.18.86:8744

# Reference: https://twitter.com/bad_packets/status/1228733630194696197

51.79.70.163:3455
51.79.70.163:64537
breadsecurity.xyz
/Bread.arc
/Bread.arm
/Bread.arm4
/Bread.arm4l
/Bread.arm4t
/Bread.arm4tl
/Bread.arm4tll
/Bread.armv4
/Bread.armv4l
/Bread.arm5
/Bread.arm5l
/Bread.arm5n
/Bread.armv5
/Bread.armv5l
/Bread.arm6
/Bread.arm6l
/Bread.arm64
/Bread.armv6
/Bread.armv6l
/Bread.armv61
/Bread.arm7
/Bread.arm7l
/Bread.armv7
/Bread.armv7l
/Bread.arm8
/Bread.armv8
/Bread.dbg
/Bread.exploit
/Bread.i4
/Bread.i6
/Bread.i486
/Bread.i586
/Bread.i686
/Bread.kill
/Bread.m68
/Bread.m68k
/Bread.mips
/Bread.mips64
/Bread.mpsl
/Bread.mipsel
/Bread.pcc
/Bread.ppc
/Bread.ppc2
/Bread.ppc440
/Bread.ppc440fp
/Bread.powerpc
/Bread.powerppc
/Bread.powerpc-440fp
/Bread.root
/Bread.root32
/Bread.sh
/Bread.sh4
/Bread.ssh4
/Bread.spc
/Bread.sparc
/Bread.x32
/Bread.x64
/Bread.x86
/Bread.x86_32
/Bread.x86_64

# Reference: https://twitter.com/bad_packets/status/1229607800273113088

/kinam.arc
/kinam.arm
/kinam.arm4
/kinam.arm4l
/kinam.arm4t
/kinam.arm4tl
/kinam.arm4tll
/kinam.armv4
/kinam.armv4l
/kinam.arm5
/kinam.arm5l
/kinam.arm5n
/kinam.armv5
/kinam.armv5l
/kinam.arm6
/kinam.arm6l
/kinam.arm64
/kinam.armv6
/kinam.armv6l
/kinam.armv61
/kinam.arm7
/kinam.arm7l
/kinam.armv7
/kinam.armv7l
/kinam.arm8
/kinam.armv8
/kinam.dbg
/kinam.exploit
/kinam.i4
/kinam.i6
/kinam.i486
/kinam.i586
/kinam.i686
/kinam.kill
/kinam.m68
/kinam.m68k
/kinam.mips
/kinam.mips64
/kinam.mpsl
/kinam.mipsel
/kinam.pcc
/kinam.ppc
/kinam.ppc2
/kinam.ppc440
/kinam.ppc440fp
/kinam.powerpc
/kinam.powerppc
/kinam.powerpc-440fp
/kinam.root
/kinam.root32
/kinam.sh
/kinam.sh4
/kinam.ssh4
/kinam.spc
/kinam.sparc
/kinam.x32
/kinam.x64
/kinam.x86
/kinam.x86_32
/kinam.x86_64

# Reference: https://twitter.com/DGAFeedAlerts/status/1231386452732399616

xxxcujgnxiap.online

# Reference: https://twitter.com/DGAFeedAlerts/status/1231748397599744001

vudcifwrwoox.support

# Reference: https://twitter.com/malwaremustd1e/status/1231676771415674881
# Reference: https://www.virustotal.com/gui/ip-address/194.180.224.13/relations
# Reference: https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day-en/

194.180.224.1:80
l2d6beb7.justinstalledpanel.com
nlocalhost.wordtheminer.com
wor.wordtheminer.com

# Reference: https://twitter.com/bad_packets/status/1231796550441033728

167.172.251.116:9506
167.172.251.116:9621

# Reference: https://twitter.com/bad_packets/status/1231753032708186112

104.155.220.235:18819
104.155.220.235:40666

# Reference: https://twitter.com/bad_packets/status/1232209066836889600

/l1ch4.arc
/l1ch4.arm
/l1ch4.arm4
/l1ch4.arm4l
/l1ch4.arm4t
/l1ch4.arm4tl
/l1ch4.arm4tll
/l1ch4.armv4
/l1ch4.armv4l
/l1ch4.arm5
/l1ch4.arm5l
/l1ch4.arm5n
/l1ch4.armv5
/l1ch4.armv5l
/l1ch4.arm6
/l1ch4.arm6l
/l1ch4.arm64
/l1ch4.armv6
/l1ch4.armv6l
/l1ch4.armv61
/l1ch4.arm7
/l1ch4.arm7l
/l1ch4.armv7
/l1ch4.armv7l
/l1ch4.arm8
/l1ch4.armv8
/l1ch4.dbg
/l1ch4.exploit
/l1ch4.i4
/l1ch4.i6
/l1ch4.i486
/l1ch4.i586
/l1ch4.i686
/l1ch4.kill
/l1ch4.m68
/l1ch4.m68k
/l1ch4.mips
/l1ch4.mips64
/l1ch4.mpsl
/l1ch4.mipsel
/l1ch4.pcc
/l1ch4.ppc
/l1ch4.ppc2
/l1ch4.ppc440
/l1ch4.ppc440fp
/l1ch4.powerpc
/l1ch4.powerppc
/l1ch4.powerpc-440fp
/l1ch4.root
/l1ch4.root32
/l1ch4.sh
/l1ch4.sh4
/l1ch4.ssh4
/l1ch4.spc
/l1ch4.sparc
/l1ch4.x32
/l1ch4.x64
/l1ch4.x86
/l1ch4.x86_32
/l1ch4.x86_64

# Reference: https://twitter.com/0xrb/status/1232959818177998848

/d4mnasdasd4mn.arc
/d4mnasdasd4mn.arm
/d4mnasdasd4mn.arm4
/d4mnasdasd4mn.arm4l
/d4mnasdasd4mn.arm4t
/d4mnasdasd4mn.arm4tl
/d4mnasdasd4mn.arm4tll
/d4mnasdasd4mn.armv4
/d4mnasdasd4mn.armv4l
/d4mnasdasd4mn.arm5
/d4mnasdasd4mn.arm5l
/d4mnasdasd4mn.arm5n
/d4mnasdasd4mn.armv5
/d4mnasdasd4mn.armv5l
/d4mnasdasd4mn.arm6
/d4mnasdasd4mn.arm6l
/d4mnasdasd4mn.arm64
/d4mnasdasd4mn.armv6
/d4mnasdasd4mn.armv6l
/d4mnasdasd4mn.armv61
/d4mnasdasd4mn.arm7
/d4mnasdasd4mn.arm7l
/d4mnasdasd4mn.armv7
/d4mnasdasd4mn.armv7l
/d4mnasdasd4mn.arm8
/d4mnasdasd4mn.armv8
/d4mnasdasd4mn.dbg
/d4mnasdasd4mn.exploit
/d4mnasdasd4mn.i4
/d4mnasdasd4mn.i6
/d4mnasdasd4mn.i486
/d4mnasdasd4mn.i586
/d4mnasdasd4mn.i686
/d4mnasdasd4mn.kill
/d4mnasdasd4mn.m68
/d4mnasdasd4mn.m68k
/d4mnasdasd4mn.mips
/d4mnasdasd4mn.mips64
/d4mnasdasd4mn.mpsl
/d4mnasdasd4mn.mipsel
/d4mnasdasd4mn.pcc
/d4mnasdasd4mn.ppc
/d4mnasdasd4mn.ppc2
/d4mnasdasd4mn.ppc440
/d4mnasdasd4mn.ppc440fp
/d4mnasdasd4mn.powerpc
/d4mnasdasd4mn.powerppc
/d4mnasdasd4mn.powerpc-440fp
/d4mnasdasd4mn.root
/d4mnasdasd4mn.root32
/d4mnasdasd4mn.sh
/d4mnasdasd4mn.sh4
/d4mnasdasd4mn.ssh4
/d4mnasdasd4mn.spc
/d4mnasdasd4mn.sparc
/d4mnasdasd4mn.x32
/d4mnasdasd4mn.x64
/d4mnasdasd4mn.x86
/d4mnasdasd4mn.x86_32
/d4mnasdasd4mn.x86_64
/gh0st0a1s0as2d12.arc
/gh0st0a1s0as2d12.arm
/gh0st0a1s0as2d12.arm4
/gh0st0a1s0as2d12.arm4l
/gh0st0a1s0as2d12.arm4t
/gh0st0a1s0as2d12.arm4tl
/gh0st0a1s0as2d12.arm4tll
/gh0st0a1s0as2d12.armv4
/gh0st0a1s0as2d12.armv4l
/gh0st0a1s0as2d12.arm5
/gh0st0a1s0as2d12.arm5l
/gh0st0a1s0as2d12.arm5n
/gh0st0a1s0as2d12.armv5
/gh0st0a1s0as2d12.armv5l
/gh0st0a1s0as2d12.arm6
/gh0st0a1s0as2d12.arm6l
/gh0st0a1s0as2d12.arm64
/gh0st0a1s0as2d12.armv6
/gh0st0a1s0as2d12.armv6l
/gh0st0a1s0as2d12.armv61
/gh0st0a1s0as2d12.arm7
/gh0st0a1s0as2d12.arm7l
/gh0st0a1s0as2d12.armv7
/gh0st0a1s0as2d12.armv7l
/gh0st0a1s0as2d12.arm8
/gh0st0a1s0as2d12.armv8
/gh0st0a1s0as2d12.dbg
/gh0st0a1s0as2d12.exploit
/gh0st0a1s0as2d12.i4
/gh0st0a1s0as2d12.i6
/gh0st0a1s0as2d12.i486
/gh0st0a1s0as2d12.i586
/gh0st0a1s0as2d12.i686
/gh0st0a1s0as2d12.kill
/gh0st0a1s0as2d12.m68
/gh0st0a1s0as2d12.m68k
/gh0st0a1s0as2d12.mips
/gh0st0a1s0as2d12.mips64
/gh0st0a1s0as2d12.mpsl
/gh0st0a1s0as2d12.mipsel
/gh0st0a1s0as2d12.pcc
/gh0st0a1s0as2d12.ppc
/gh0st0a1s0as2d12.ppc2
/gh0st0a1s0as2d12.ppc440
/gh0st0a1s0as2d12.ppc440fp
/gh0st0a1s0as2d12.powerpc
/gh0st0a1s0as2d12.powerppc
/gh0st0a1s0as2d12.powerpc-440fp
/gh0st0a1s0as2d12.root
/gh0st0a1s0as2d12.root32
/gh0st0a1s0as2d12.sh
/gh0st0a1s0as2d12.sh4
/gh0st0a1s0as2d12.ssh4
/gh0st0a1s0as2d12.spc
/gh0st0a1s0as2d12.sparc
/gh0st0a1s0as2d12.x32
/gh0st0a1s0as2d12.x64
/gh0st0a1s0as2d12.x86
/gh0st0a1s0as2d12.x86_32
/gh0st0a1s0as2d12.x86_64
/jeksseeessss.arc
/jeksseeessss.arm
/jeksseeessss.arm4
/jeksseeessss.arm4l
/jeksseeessss.arm4t
/jeksseeessss.arm4tl
/jeksseeessss.arm4tll
/jeksseeessss.armv4
/jeksseeessss.armv4l
/jeksseeessss.arm5
/jeksseeessss.arm5l
/jeksseeessss.arm5n
/jeksseeessss.armv5
/jeksseeessss.armv5l
/jeksseeessss.arm6
/jeksseeessss.arm6l
/jeksseeessss.arm64
/jeksseeessss.armv6
/jeksseeessss.armv6l
/jeksseeessss.armv61
/jeksseeessss.arm7
/jeksseeessss.arm7l
/jeksseeessss.armv7
/jeksseeessss.armv7l
/jeksseeessss.arm8
/jeksseeessss.armv8
/jeksseeessss.dbg
/jeksseeessss.exploit
/jeksseeessss.i4
/jeksseeessss.i6
/jeksseeessss.i486
/jeksseeessss.i586
/jeksseeessss.i686
/jeksseeessss.kill
/jeksseeessss.m68
/jeksseeessss.m68k
/jeksseeessss.mips
/jeksseeessss.mips64
/jeksseeessss.mpsl
/jeksseeessss.mipsel
/jeksseeessss.pcc
/jeksseeessss.ppc
/jeksseeessss.ppc2
/jeksseeessss.ppc440
/jeksseeessss.ppc440fp
/jeksseeessss.powerpc
/jeksseeessss.powerppc
/jeksseeessss.powerpc-440fp
/jeksseeessss.root
/jeksseeessss.root32
/jeksseeessss.sh
/jeksseeessss.sh4
/jeksseeessss.ssh4
/jeksseeessss.spc
/jeksseeessss.sparc
/jeksseeessss.x32
/jeksseeessss.x64
/jeksseeessss.x86
/jeksseeessss.x86_32
/jeksseeessss.x86_64
/nomn0m.arc
/nomn0m.arm
/nomn0m.arm4
/nomn0m.arm4l
/nomn0m.arm4t
/nomn0m.arm4tl
/nomn0m.arm4tll
/nomn0m.armv4
/nomn0m.armv4l
/nomn0m.arm5
/nomn0m.arm5l
/nomn0m.arm5n
/nomn0m.armv5
/nomn0m.armv5l
/nomn0m.arm6
/nomn0m.arm6l
/nomn0m.arm64
/nomn0m.armv6
/nomn0m.armv6l
/nomn0m.armv61
/nomn0m.arm7
/nomn0m.arm7l
/nomn0m.armv7
/nomn0m.armv7l
/nomn0m.arm8
/nomn0m.armv8
/nomn0m.dbg
/nomn0m.exploit
/nomn0m.i4
/nomn0m.i6
/nomn0m.i486
/nomn0m.i586
/nomn0m.i686
/nomn0m.kill
/nomn0m.m68
/nomn0m.m68k
/nomn0m.mips
/nomn0m.mips64
/nomn0m.mpsl
/nomn0m.mipsel
/nomn0m.pcc
/nomn0m.ppc
/nomn0m.ppc2
/nomn0m.ppc440
/nomn0m.ppc440fp
/nomn0m.powerpc
/nomn0m.powerppc
/nomn0m.powerpc-440fp
/nomn0m.root
/nomn0m.root32
/nomn0m.sh
/nomn0m.sh4
/nomn0m.ssh4
/nomn0m.spc
/nomn0m.sparc
/nomn0m.x32
/nomn0m.x64
/nomn0m.x86
/nomn0m.x86_32
/nomn0m.x86_64
/RHOMBUS.arc
/RHOMBUS.arm
/RHOMBUS.arm4
/RHOMBUS.arm4l
/RHOMBUS.arm4t
/RHOMBUS.arm4tl
/RHOMBUS.arm4tll
/RHOMBUS.armv4
/RHOMBUS.armv4l
/RHOMBUS.arm5
/RHOMBUS.arm5l
/RHOMBUS.arm5n
/RHOMBUS.armv5
/RHOMBUS.armv5l
/RHOMBUS.arm6
/RHOMBUS.arm6l
/RHOMBUS.arm64
/RHOMBUS.armv6
/RHOMBUS.armv6l
/RHOMBUS.armv61
/RHOMBUS.arm7
/RHOMBUS.arm7l
/RHOMBUS.armv7
/RHOMBUS.armv7l
/RHOMBUS.arm8
/RHOMBUS.armv8
/RHOMBUS.dbg
/RHOMBUS.exploit
/RHOMBUS.i4
/RHOMBUS.i6
/RHOMBUS.i486
/RHOMBUS.i586
/RHOMBUS.i686
/RHOMBUS.kill
/RHOMBUS.m68
/RHOMBUS.m68k
/RHOMBUS.mips
/RHOMBUS.mips64
/RHOMBUS.mpsl
/RHOMBUS.mipsel
/RHOMBUS.pcc
/RHOMBUS.ppc
/RHOMBUS.ppc2
/RHOMBUS.ppc440
/RHOMBUS.ppc440fp
/RHOMBUS.powerpc
/RHOMBUS.powerppc
/RHOMBUS.powerpc-440fp
/RHOMBUS.root
/RHOMBUS.root32
/RHOMBUS.sh
/RHOMBUS.sh4
/RHOMBUS.ssh4
/RHOMBUS.spc
/RHOMBUS.sparc
/RHOMBUS.x32
/RHOMBUS.x64
/RHOMBUS.x86
/RHOMBUS.x86_32
/RHOMBUS.x86_64

# Reference: https://www.virustotal.com/gui/file/b982276458a85cd3dd7c8aa6cb4bbb2d4885b385053f92395a99abbfb0e43784/detection
# Reference: https://twitter.com/malwaremustd1e/status/1233134899130822656
# Reference: https://www.virustotal.com/gui/domain/cf0.pw/relations
# Reference: https://www.stratosphereips.org/blog/2020/4/29/rhombus-a-new-iot-malware

209.126.69.167:2020
209.126.69.167:4634
cf0.pw

# Reference: https://twitter.com/bad_packets/status/1233226684196773888

45.148.10.194:24136
45.148.10.194:38565

# Reference: https://twitter.com/JayTHL/status/1234492869160980485

/scanner.arc
/scanner.arm
/scanner.arm4
/scanner.arm4l
/scanner.arm4t
/scanner.arm4tl
/scanner.arm4tll
/scanner.armv4
/scanner.armv4l
/scanner.arm5
/scanner.arm5l
/scanner.arm5n
/scanner.armv5
/scanner.armv5l
/scanner.arm6
/scanner.arm6l
/scanner.arm64
/scanner.armv6
/scanner.armv6l
/scanner.armv61
/scanner.arm7
/scanner.arm7l
/scanner.armv7
/scanner.armv7l
/scanner.arm8
/scanner.armv8
/scanner.dbg
/scanner.exploit
/scanner.i4
/scanner.i6
/scanner.i486
/scanner.i586
/scanner.i686
/scanner.kill
/scanner.m68
/scanner.m68k
/scanner.mips
/scanner.mips64
/scanner.mpsl
/scanner.mipsel
/scanner.pcc
/scanner.ppc
/scanner.ppc2
/scanner.ppc440
/scanner.ppc440fp
/scanner.powerpc
/scanner.powerppc
/scanner.powerpc-440fp
/scanner.root
/scanner.root32
/scanner.sh
/scanner.sh4
/scanner.ssh4
/scanner.spc
/scanner.sparc
/scanner.x32
/scanner.x64
/scanner.x86
/scanner.x86_32
/scanner.x86_64

# Reference: https://twitter.com/JayTHL/status/1234493569186050051

/19.arc
/19.arm
/19.arm4
/19.arm4l
/19.arm4t
/19.arm4tl
/19.arm4tll
/19.armv4
/19.armv4l
/19.arm5
/19.arm5l
/19.arm5n
/19.armv5
/19.armv5l
/19.arm6
/19.arm6l
/19.arm64
/19.armv6
/19.armv6l
/19.armv61
/19.arm7
/19.arm7l
/19.armv7
/19.armv7l
/19.arm8
/19.armv8
/19.dbg
/19.exploit
/19.i4
/19.i6
/19.i486
/19.i586
/19.i686
/19.kill
/19.m68
/19.m68k
/19.mips
/19.mips64
/19.mpsl
/19.mipsel
/19.pcc
/19.ppc
/19.ppc2
/19.ppc440
/19.ppc440fp
/19.powerpc
/19.powerppc
/19.powerpc-440fp
/19.root
/19.root32
/19.sh
/19.sh4
/19.ssh4
/19.spc
/19.sparc
/19.x32
/19.x64
/19.x86
/19.x86_32
/19.x86_64

# Reference: https://twitter.com/bad_packets/status/1235113588840230912

5.39.217.219:7
5.39.217.219:936

# Reference: https://twitter.com/bad_packets/status/1235414095286824961

/1vs2dv.arc
/1vs2dv.arm
/1vs2dv.arm4
/1vs2dv.arm4l
/1vs2dv.arm4t
/1vs2dv.arm4tl
/1vs2dv.arm4tll
/1vs2dv.armv4
/1vs2dv.armv4l
/1vs2dv.arm5
/1vs2dv.arm5l
/1vs2dv.arm5n
/1vs2dv.armv5
/1vs2dv.armv5l
/1vs2dv.arm6
/1vs2dv.arm6l
/1vs2dv.arm64
/1vs2dv.armv6
/1vs2dv.armv6l
/1vs2dv.armv61
/1vs2dv.arm7
/1vs2dv.arm7l
/1vs2dv.armv7
/1vs2dv.armv7l
/1vs2dv.arm8
/1vs2dv.armv8
/1vs2dv.dbg
/1vs2dv.exploit
/1vs2dv.i4
/1vs2dv.i6
/1vs2dv.i486
/1vs2dv.i586
/1vs2dv.i686
/1vs2dv.kill
/1vs2dv.m68
/1vs2dv.m68k
/1vs2dv.mips
/1vs2dv.mips64
/1vs2dv.mpsl
/1vs2dv.mipsel
/1vs2dv.pcc
/1vs2dv.ppc
/1vs2dv.ppc2
/1vs2dv.ppc440
/1vs2dv.ppc440fp
/1vs2dv.powerpc
/1vs2dv.powerppc
/1vs2dv.powerpc-440fp
/1vs2dv.root
/1vs2dv.root32
/1vs2dv.sh
/1vs2dv.sh4
/1vs2dv.ssh4
/1vs2dv.spc
/1vs2dv.sparc
/1vs2dv.x32
/1vs2dv.x64
/1vs2dv.x86
/1vs2dv.x86_32
/1vs2dv.x86_64

# Reference: https://twitter.com/0xrb/status/1236919702833618946/photo/1

/arc_Sly
/arm_Sly
/arm4_Sly
/arm4l_Sly
/arm4t_Sly
/arm4tl_Sly
/arm4tll_Sly
/armv4_Sly
/armv4l_Sly
/arm5_Sly
/arm5l_Sly
/arm5n_Sly
/armv5l_Sly
/arm6_Sly
/arm6l_Sly
/armv6_Sly
/armv6l_Sly
/armv61_Sly
/arm64_Sly
/arm7_Sly
/arm7l_Sly
/armv7l_Sly
/arm8_Sly
/dbg_Sly
/exploit_Sly
/i4_Sly
/i6_Sly
/i486_Sly
/i586_Sly
/i686_Sly
/kill_Sly
/m68_Sly
/m68k_Sly
/mips_Sly
/mips64_Sly
/mpsl_Sly
/mipsel_Sly
/pcc_Sly
/ppc_Sly
/ppc2_Sly
/ppc440_Sly
/ppc440fp_Sly
/powerpc_Sly
/powerppc_Sly
/powerpc-440fp_Sly
/root_Sly
/root32_Sly
/sh_Sly
/sh4_Sly
/ssh4_Sly
/spc_Sly
/sparc_Sly
/x32_Sly
/x64_Sly
/x86_Sly
/x86_32_Sly
/x86_64_Sly
/Sly_arc
/Sly_arm
/Sly_arm4
/Sly_arm4l
/Sly_arm4t
/Sly_arm4tl
/Sly_arm4tll
/Sly_armv4
/Sly_armv4l
/Sly_arm5
/Sly_arm5l
/Sly_arm5n
/Sly_armv5l
/Sly_arm6
/Sly_arm6l
/Sly_arm64
/Sly_armv6
/Sly_armv6l
/Sly_armv61
/Sly_arm7
/Sly_arm7l
/Sly_armv7l
/Sly_arm8
/Sly_dbg
/Sly_exploit
/Sly_i4
/Sly_i6
/Sly_i486
/Sly_i586
/Sly_i686
/Sly_kill
/Sly_m68
/Sly_m68k
/Sly_mips
/Sly_mips64
/Sly_mpsl
/Sly_mipsel
/Sly_pcc
/Sly_ppc
/Sly_ppc2
/Sly_ppc440
/Sly_ppc440fp
/Sly_powerpc
/Sly_powerppc
/Sly_powerpc-440fp
/Sly_root
/Sly_root32
/Sly_sh
/Sly_sh4
/Sly_ssh4
/Sly_spc
/Sly_sparc
/Sly_x32
/Sly_x64
/Sly_x86
/Sly_x86_32
/Sly_x86_64
/arc.GHOUL
/arm.GHOUL
/arm4.GHOUL
/arm4l.GHOUL
/arm4t.GHOUL
/arm4tl.GHOUL
/arm4tll.GHOUL
/armv4.GHOUL
/armv4l.GHOUL
/arm5.GHOUL
/arm5l.GHOUL
/arm5n.GHOUL
/armv5l.GHOUL
/arm6.GHOUL
/arm6l.GHOUL
/armv6.GHOUL
/armv6l.GHOUL
/armv61.GHOUL
/arm64.GHOUL
/arm7.GHOUL
/arm7l.GHOUL
/armv7l.GHOUL
/arm8.GHOUL
/dbg.GHOUL
/exploit.GHOUL
/i4.GHOUL
/i6.GHOUL
/i486.GHOUL
/i586.GHOUL
/i686.GHOUL
/kill.GHOUL
/m68.GHOUL
/m68k.GHOUL
/mips.GHOUL
/mips64.GHOUL
/mpsl.GHOUL
/mipsel.GHOUL
/pcc.GHOUL
/ppc.GHOUL
/ppc2.GHOUL
/ppc440.GHOUL
/ppc440fp.GHOUL
/powerpc.GHOUL
/powerppc.GHOUL
/powerpc-440fp.GHOUL
/root.GHOUL
/root32.GHOUL
/sh.GHOUL
/sh4.GHOUL
/ssh4.GHOUL
/spc.GHOUL
/sparc.GHOUL
/x32.GHOUL
/x64.GHOUL
/x86.GHOUL
/x86_32.GHOUL
/x86_64.GHOUL
/GHOUL.arc
/GHOUL.arm
/GHOUL.arm4
/GHOUL.arm4l
/GHOUL.arm4t
/GHOUL.arm4tl
/GHOUL.arm4tll
/GHOUL.armv4
/GHOUL.armv4l
/GHOUL.arm5
/GHOUL.arm5l
/GHOUL.arm5n
/GHOUL.armv5l
/GHOUL.arm6
/GHOUL.arm6l
/GHOUL.arm64
/GHOUL.armv6
/GHOUL.armv6l
/GHOUL.armv61
/GHOUL.arm7
/GHOUL.arm7l
/GHOUL.armv7l
/GHOUL.arm8
/GHOUL.dbg
/GHOUL.exploit
/GHOUL.i4
/GHOUL.i6
/GHOUL.i486
/GHOUL.i586
/GHOUL.i686
/GHOUL.kill
/GHOUL.m68
/GHOUL.m68k
/GHOUL.mips
/GHOUL.mips64
/GHOUL.mpsl
/GHOUL.mipsel
/GHOUL.pcc
/GHOUL.ppc
/GHOUL.ppc2
/GHOUL.ppc440
/GHOUL.ppc440fp
/GHOUL.powerpc
/GHOUL.powerppc
/GHOUL.powerpc-440fp
/GHOUL.root
/GHOUL.root32
/GHOUL.sh
/GHOUL.sh4
/GHOUL.ssh4
/GHOUL.spc
/GHOUL.sparc
/GHOUL.x32
/GHOUL.x64
/GHOUL.x86
/GHOUL.x86_32
/GHOUL.x86_64
/arc.scheckiey
/arm.scheckiey
/arm4.scheckiey
/arm4l.scheckiey
/arm4t.scheckiey
/arm4tl.scheckiey
/arm4tll.scheckiey
/armv4.scheckiey
/armv4l.scheckiey
/arm5.scheckiey
/arm5l.scheckiey
/arm5n.scheckiey
/armv5l.scheckiey
/arm6.scheckiey
/arm6l.scheckiey
/armv6.scheckiey
/armv6l.scheckiey
/armv61.scheckiey
/arm64.scheckiey
/arm7.scheckiey
/arm7l.scheckiey
/armv7l.scheckiey
/arm8.scheckiey
/dbg.scheckiey
/exploit.scheckiey
/i4.scheckiey
/i6.scheckiey
/i486.scheckiey
/i586.scheckiey
/i686.scheckiey
/kill.scheckiey
/m68.scheckiey
/m68k.scheckiey
/mips.scheckiey
/mips64.scheckiey
/mpsl.scheckiey
/mipsel.scheckiey
/pcc.scheckiey
/ppc.scheckiey
/ppc2.scheckiey
/ppc440.scheckiey
/ppc440fp.scheckiey
/powerpc.scheckiey
/powerppc.scheckiey
/powerpc-440fp.scheckiey
/root.scheckiey
/root32.scheckiey
/sh.scheckiey
/sh4.scheckiey
/ssh4.scheckiey
/spc.scheckiey
/sparc.scheckiey
/x32.scheckiey
/x64.scheckiey
/x86.scheckiey
/x86_32.scheckiey
/x86_64.scheckiey
/scheckiey.arc
/scheckiey.arm
/scheckiey.arm4
/scheckiey.arm4l
/scheckiey.arm4t
/scheckiey.arm4tl
/scheckiey.arm4tll
/scheckiey.armv4
/scheckiey.armv4l
/scheckiey.arm5
/scheckiey.arm5l
/scheckiey.arm5n
/scheckiey.armv5l
/scheckiey.arm6
/scheckiey.arm6l
/scheckiey.arm64
/scheckiey.armv6
/scheckiey.armv6l
/scheckiey.armv61
/scheckiey.arm7
/scheckiey.arm7l
/scheckiey.armv7l
/scheckiey.arm8
/scheckiey.dbg
/scheckiey.exploit
/scheckiey.i4
/scheckiey.i6
/scheckiey.i486
/scheckiey.i586
/scheckiey.i686
/scheckiey.kill
/scheckiey.m68
/scheckiey.m68k
/scheckiey.mips
/scheckiey.mips64
/scheckiey.mpsl
/scheckiey.mipsel
/scheckiey.pcc
/scheckiey.ppc
/scheckiey.ppc2
/scheckiey.ppc440
/scheckiey.ppc440fp
/scheckiey.powerpc
/scheckiey.powerppc
/scheckiey.powerpc-440fp
/scheckiey.root
/scheckiey.root32
/scheckiey.sh
/scheckiey.sh4
/scheckiey.ssh4
/scheckiey.spc
/scheckiey.sparc
/scheckiey.x32
/scheckiey.x64
/scheckiey.x86
/scheckiey.x86_32
/scheckiey.x86_64
/arc.0s1s12
/arm.0s1s12
/arm4.0s1s12
/arm4l.0s1s12
/arm4t.0s1s12
/arm4tl.0s1s12
/arm4tll.0s1s12
/armv4.0s1s12
/armv4l.0s1s12
/arm5.0s1s12
/arm5l.0s1s12
/arm5n.0s1s12
/armv5l.0s1s12
/arm6.0s1s12
/arm6l.0s1s12
/armv6.0s1s12
/armv6l.0s1s12
/armv61.0s1s12
/arm64.0s1s12
/arm7.0s1s12
/arm7l.0s1s12
/armv7l.0s1s12
/arm8.0s1s12
/dbg.0s1s12
/exploit.0s1s12
/i4.0s1s12
/i6.0s1s12
/i486.0s1s12
/i586.0s1s12
/i686.0s1s12
/kill.0s1s12
/m68.0s1s12
/m68k.0s1s12
/mips.0s1s12
/mips64.0s1s12
/mpsl.0s1s12
/mipsel.0s1s12
/pcc.0s1s12
/ppc.0s1s12
/ppc2.0s1s12
/ppc440.0s1s12
/ppc440fp.0s1s12
/powerpc.0s1s12
/powerppc.0s1s12
/powerpc-440fp.0s1s12
/root.0s1s12
/root32.0s1s12
/sh.0s1s12
/sh4.0s1s12
/ssh4.0s1s12
/spc.0s1s12
/sparc.0s1s12
/x32.0s1s12
/x64.0s1s12
/x86.0s1s12
/x86_32.0s1s12
/x86_64.0s1s12
/0s1s12.arc
/0s1s12.arm
/0s1s12.arm4
/0s1s12.arm4l
/0s1s12.arm4t
/0s1s12.arm4tl
/0s1s12.arm4tll
/0s1s12.armv4
/0s1s12.armv4l
/0s1s12.arm5
/0s1s12.arm5l
/0s1s12.arm5n
/0s1s12.armv5l
/0s1s12.arm6
/0s1s12.arm6l
/0s1s12.arm64
/0s1s12.armv6
/0s1s12.armv6l
/0s1s12.armv61
/0s1s12.arm7
/0s1s12.arm7l
/0s1s12.armv7l
/0s1s12.arm8
/0s1s12.dbg
/0s1s12.exploit
/0s1s12.i4
/0s1s12.i6
/0s1s12.i486
/0s1s12.i586
/0s1s12.i686
/0s1s12.kill
/0s1s12.m68
/0s1s12.m68k
/0s1s12.mips
/0s1s12.mips64
/0s1s12.mpsl
/0s1s12.mipsel
/0s1s12.pcc
/0s1s12.ppc
/0s1s12.ppc2
/0s1s12.ppc440
/0s1s12.ppc440fp
/0s1s12.powerpc
/0s1s12.powerppc
/0s1s12.powerpc-440fp
/0s1s12.root
/0s1s12.root32
/0s1s12.sh
/0s1s12.sh4
/0s1s12.ssh4
/0s1s12.spc
/0s1s12.sparc
/0s1s12.x32
/0s1s12.x64
/0s1s12.x86
/0s1s12.x86_32
/0s1s12.x86_64
/arc.YGlux
/arm.YGlux
/arm4.YGlux
/arm4l.YGlux
/arm4t.YGlux
/arm4tl.YGlux
/arm4tll.YGlux
/armv4.YGlux
/armv4l.YGlux
/arm5.YGlux
/arm5l.YGlux
/arm5n.YGlux
/armv5l.YGlux
/arm6.YGlux
/arm6l.YGlux
/armv6.YGlux
/armv6l.YGlux
/armv61.YGlux
/arm64.YGlux
/arm7.YGlux
/arm7l.YGlux
/armv7l.YGlux
/arm8.YGlux
/dbg.YGlux
/exploit.YGlux
/i4.YGlux
/i6.YGlux
/i486.YGlux
/i586.YGlux
/i686.YGlux
/kill.YGlux
/m68.YGlux
/m68k.YGlux
/mips.YGlux
/mips64.YGlux
/mpsl.YGlux
/mipsel.YGlux
/pcc.YGlux
/ppc.YGlux
/ppc2.YGlux
/ppc440.YGlux
/ppc440fp.YGlux
/powerpc.YGlux
/powerppc.YGlux
/powerpc-440fp.YGlux
/root.YGlux
/root32.YGlux
/sh.YGlux
/sh4.YGlux
/ssh4.YGlux
/spc.YGlux
/sparc.YGlux
/x32.YGlux
/x64.YGlux
/x86.YGlux
/x86_32.YGlux
/x86_64.YGlux
/YGlux.arc
/YGlux.arm
/YGlux.arm4
/YGlux.arm4l
/YGlux.arm4t
/YGlux.arm4tl
/YGlux.arm4tll
/YGlux.armv4
/YGlux.armv4l
/YGlux.arm5
/YGlux.arm5l
/YGlux.arm5n
/YGlux.armv5l
/YGlux.arm6
/YGlux.arm6l
/YGlux.arm64
/YGlux.armv6
/YGlux.armv6l
/YGlux.armv61
/YGlux.arm7
/YGlux.arm7l
/YGlux.armv7l
/YGlux.arm8
/YGlux.dbg
/YGlux.exploit
/YGlux.i4
/YGlux.i6
/YGlux.i486
/YGlux.i586
/YGlux.i686
/YGlux.kill
/YGlux.m68
/YGlux.m68k
/YGlux.mips
/YGlux.mips64
/YGlux.mpsl
/YGlux.mipsel
/YGlux.pcc
/YGlux.ppc
/YGlux.ppc2
/YGlux.ppc440
/YGlux.ppc440fp
/YGlux.powerpc
/YGlux.powerppc
/YGlux.powerpc-440fp
/YGlux.root
/YGlux.root32
/YGlux.sh
/YGlux.sh4
/YGlux.ssh4
/YGlux.spc
/YGlux.sparc
/YGlux.x32
/YGlux.x64
/YGlux.x86
/YGlux.x86_32
/YGlux.x86_64
/arc.gang123isgodloluaintgettingthesebinslikedammwtf
/arm.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4t.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4tl.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4tll.gang123isgodloluaintgettingthesebinslikedammwtf
/armv4.gang123isgodloluaintgettingthesebinslikedammwtf
/armv4l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm5.gang123isgodloluaintgettingthesebinslikedammwtf
/arm5l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm5n.gang123isgodloluaintgettingthesebinslikedammwtf
/armv5l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm6.gang123isgodloluaintgettingthesebinslikedammwtf
/arm6l.gang123isgodloluaintgettingthesebinslikedammwtf
/armv6.gang123isgodloluaintgettingthesebinslikedammwtf
/armv6l.gang123isgodloluaintgettingthesebinslikedammwtf
/armv61.gang123isgodloluaintgettingthesebinslikedammwtf
/arm64.gang123isgodloluaintgettingthesebinslikedammwtf
/arm7.gang123isgodloluaintgettingthesebinslikedammwtf
/arm7l.gang123isgodloluaintgettingthesebinslikedammwtf
/armv7l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm8.gang123isgodloluaintgettingthesebinslikedammwtf
/dbg.gang123isgodloluaintgettingthesebinslikedammwtf
/exploit.gang123isgodloluaintgettingthesebinslikedammwtf
/i4.gang123isgodloluaintgettingthesebinslikedammwtf
/i6.gang123isgodloluaintgettingthesebinslikedammwtf
/i486.gang123isgodloluaintgettingthesebinslikedammwtf
/i586.gang123isgodloluaintgettingthesebinslikedammwtf
/i686.gang123isgodloluaintgettingthesebinslikedammwtf
/kill.gang123isgodloluaintgettingthesebinslikedammwtf
/m68.gang123isgodloluaintgettingthesebinslikedammwtf
/m68k.gang123isgodloluaintgettingthesebinslikedammwtf
/mips.gang123isgodloluaintgettingthesebinslikedammwtf
/mips64.gang123isgodloluaintgettingthesebinslikedammwtf
/mpsl.gang123isgodloluaintgettingthesebinslikedammwtf
/mipsel.gang123isgodloluaintgettingthesebinslikedammwtf
/pcc.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc2.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc440.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc440fp.gang123isgodloluaintgettingthesebinslikedammwtf
/powerpc.gang123isgodloluaintgettingthesebinslikedammwtf
/powerppc.gang123isgodloluaintgettingthesebinslikedammwtf
/powerpc-440fp.gang123isgodloluaintgettingthesebinslikedammwtf
/root.gang123isgodloluaintgettingthesebinslikedammwtf
/root32.gang123isgodloluaintgettingthesebinslikedammwtf
/sh.gang123isgodloluaintgettingthesebinslikedammwtf
/sh4.gang123isgodloluaintgettingthesebinslikedammwtf
/ssh4.gang123isgodloluaintgettingthesebinslikedammwtf
/spc.gang123isgodloluaintgettingthesebinslikedammwtf
/sparc.gang123isgodloluaintgettingthesebinslikedammwtf
/x32.gang123isgodloluaintgettingthesebinslikedammwtf
/x64.gang123isgodloluaintgettingthesebinslikedammwtf
/x86.gang123isgodloluaintgettingthesebinslikedammwtf
/x86_32.gang123isgodloluaintgettingthesebinslikedammwtf
/x86_64.gang123isgodloluaintgettingthesebinslikedammwtf
/gang123isgodloluaintgettingthesebinslikedammwtf.arc
/gang123isgodloluaintgettingthesebinslikedammwtf.arm
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4t
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4tl
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4tll
/gang123isgodloluaintgettingthesebinslikedammwtf.armv4
/gang123isgodloluaintgettingthesebinslikedammwtf.armv4l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm5
/gang123isgodloluaintgettingthesebinslikedammwtf.arm5l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm5n
/gang123isgodloluaintgettingthesebinslikedammwtf.armv5l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm6
/gang123isgodloluaintgettingthesebinslikedammwtf.arm6l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm64
/gang123isgodloluaintgettingthesebinslikedammwtf.armv6
/gang123isgodloluaintgettingthesebinslikedammwtf.armv6l
/gang123isgodloluaintgettingthesebinslikedammwtf.armv61
/gang123isgodloluaintgettingthesebinslikedammwtf.arm7
/gang123isgodloluaintgettingthesebinslikedammwtf.arm7l
/gang123isgodloluaintgettingthesebinslikedammwtf.armv7l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm8
/gang123isgodloluaintgettingthesebinslikedammwtf.dbg
/gang123isgodloluaintgettingthesebinslikedammwtf.exploit
/gang123isgodloluaintgettingthesebinslikedammwtf.i4
/gang123isgodloluaintgettingthesebinslikedammwtf.i6
/gang123isgodloluaintgettingthesebinslikedammwtf.i486
/gang123isgodloluaintgettingthesebinslikedammwtf.i586
/gang123isgodloluaintgettingthesebinslikedammwtf.i686
/gang123isgodloluaintgettingthesebinslikedammwtf.kill
/gang123isgodloluaintgettingthesebinslikedammwtf.m68
/gang123isgodloluaintgettingthesebinslikedammwtf.m68k
/gang123isgodloluaintgettingthesebinslikedammwtf.mips
/gang123isgodloluaintgettingthesebinslikedammwtf.mips64
/gang123isgodloluaintgettingthesebinslikedammwtf.mpsl
/gang123isgodloluaintgettingthesebinslikedammwtf.mipsel
/gang123isgodloluaintgettingthesebinslikedammwtf.pcc
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc2
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc440
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc440fp
/gang123isgodloluaintgettingthesebinslikedammwtf.powerpc
/gang123isgodloluaintgettingthesebinslikedammwtf.powerppc
/gang123isgodloluaintgettingthesebinslikedammwtf.powerpc-440fp
/gang123isgodloluaintgettingthesebinslikedammwtf.root
/gang123isgodloluaintgettingthesebinslikedammwtf.root32
/gang123isgodloluaintgettingthesebinslikedammwtf.sh
/gang123isgodloluaintgettingthesebinslikedammwtf.sh4
/gang123isgodloluaintgettingthesebinslikedammwtf.ssh4
/gang123isgodloluaintgettingthesebinslikedammwtf.spc
/gang123isgodloluaintgettingthesebinslikedammwtf.sparc
/gang123isgodloluaintgettingthesebinslikedammwtf.x32
/gang123isgodloluaintgettingthesebinslikedammwtf.x64
/gang123isgodloluaintgettingthesebinslikedammwtf.x86
/gang123isgodloluaintgettingthesebinslikedammwtf.x86_32
/gang123isgodloluaintgettingthesebinslikedammwtf.x86_64
/arc.h04sm4d
/arm.h04sm4d
/arm4.h04sm4d
/arm4l.h04sm4d
/arm4t.h04sm4d
/arm4tl.h04sm4d
/arm4tll.h04sm4d
/armv4.h04sm4d
/armv4l.h04sm4d
/arm5.h04sm4d
/arm5l.h04sm4d
/arm5n.h04sm4d
/armv5l.h04sm4d
/arm6.h04sm4d
/arm6l.h04sm4d
/armv6.h04sm4d
/armv6l.h04sm4d
/armv61.h04sm4d
/arm64.h04sm4d
/arm7.h04sm4d
/arm7l.h04sm4d
/armv7l.h04sm4d
/arm8.h04sm4d
/dbg.h04sm4d
/exploit.h04sm4d
/i4.h04sm4d
/i6.h04sm4d
/i486.h04sm4d
/i586.h04sm4d
/i686.h04sm4d
/kill.h04sm4d
/m68.h04sm4d
/m68k.h04sm4d
/mips.h04sm4d
/mips64.h04sm4d
/mpsl.h04sm4d
/mipsel.h04sm4d
/pcc.h04sm4d
/ppc.h04sm4d
/ppc2.h04sm4d
/ppc440.h04sm4d
/ppc440fp.h04sm4d
/powerpc.h04sm4d
/powerppc.h04sm4d
/powerpc-440fp.h04sm4d
/root.h04sm4d
/root32.h04sm4d
/sh.h04sm4d
/sh4.h04sm4d
/ssh4.h04sm4d
/spc.h04sm4d
/sparc.h04sm4d
/x32.h04sm4d
/x64.h04sm4d
/x86.h04sm4d
/x86_32.h04sm4d
/x86_64.h04sm4d
/h04sm4d.arc
/h04sm4d.arm
/h04sm4d.arm4
/h04sm4d.arm4l
/h04sm4d.arm4t
/h04sm4d.arm4tl
/h04sm4d.arm4tll
/h04sm4d.armv4
/h04sm4d.armv4l
/h04sm4d.arm5
/h04sm4d.arm5l
/h04sm4d.arm5n
/h04sm4d.armv5l
/h04sm4d.arm6
/h04sm4d.arm6l
/h04sm4d.arm64
/h04sm4d.armv6
/h04sm4d.armv6l
/h04sm4d.armv61
/h04sm4d.arm7
/h04sm4d.arm7l
/h04sm4d.armv7l
/h04sm4d.arm8
/h04sm4d.dbg
/h04sm4d.exploit
/h04sm4d.i4
/h04sm4d.i6
/h04sm4d.i486
/h04sm4d.i586
/h04sm4d.i686
/h04sm4d.kill
/h04sm4d.m68
/h04sm4d.m68k
/h04sm4d.mips
/h04sm4d.mips64
/h04sm4d.mpsl
/h04sm4d.mipsel
/h04sm4d.pcc
/h04sm4d.ppc
/h04sm4d.ppc2
/h04sm4d.ppc440
/h04sm4d.ppc440fp
/h04sm4d.powerpc
/h04sm4d.powerppc
/h04sm4d.powerpc-440fp
/h04sm4d.root
/h04sm4d.root32
/h04sm4d.sh
/h04sm4d.sh4
/h04sm4d.ssh4
/h04sm4d.spc
/h04sm4d.sparc
/h04sm4d.x32
/h04sm4d.x64
/h04sm4d.x86
/h04sm4d.x86_32
/h04sm4d.x86_64

# Reference: https://twitter.com/bad_packets/status/1237992087871574016

/arc.Kira
/arm.Kira
/arm4.Kira
/arm4l.Kira
/arm4t.Kira
/arm4tl.Kira
/arm4tll.Kira
/armv4.Kira
/armv4l.Kira
/arm5.Kira
/arm5l.Kira
/arm5n.Kira
/armv5l.Kira
/arm6.Kira
/arm6l.Kira
/armv6.Kira
/armv6l.Kira
/armv61.Kira
/arm64.Kira
/arm7.Kira
/arm7l.Kira
/armv7l.Kira
/arm8.Kira
/dbg.Kira
/exploit.Kira
/i4.Kira
/i6.Kira
/i486.Kira
/i586.Kira
/i686.Kira
/kill.Kira
/m68.Kira
/m68k.Kira
/mips.Kira
/mips64.Kira
/mpsl.Kira
/mipsel.Kira
/pcc.Kira
/ppc.Kira
/ppc2.Kira
/ppc440.Kira
/ppc440fp.Kira
/powerpc.Kira
/powerppc.Kira
/powerpc-440fp.Kira
/root.Kira
/root32.Kira
/sh.Kira
/sh4.Kira
/ssh4.Kira
/spc.Kira
/sparc.Kira
/x32.Kira
/x64.Kira
/x86.Kira
/x86_32.Kira
/x86_64.Kira
/Kira.arc
/Kira.arm
/Kira.arm4
/Kira.arm4l
/Kira.arm4t
/Kira.arm4tl
/Kira.arm4tll
/Kira.armv4
/Kira.armv4l
/Kira.arm5
/Kira.arm5l
/Kira.arm5n
/Kira.armv5l
/Kira.arm6
/Kira.arm6l
/Kira.arm64
/Kira.armv6
/Kira.armv6l
/Kira.armv61
/Kira.arm7
/Kira.arm7l
/Kira.armv7l
/Kira.arm8
/Kira.dbg
/Kira.exploit
/Kira.i4
/Kira.i6
/Kira.i486
/Kira.i586
/Kira.i686
/Kira.kill
/Kira.m68
/Kira.m68k
/Kira.mips
/Kira.mips64
/Kira.mpsl
/Kira.mipsel
/Kira.pcc
/Kira.ppc
/Kira.ppc2
/Kira.ppc440
/Kira.ppc440fp
/Kira.powerpc
/Kira.powerppc
/Kira.powerpc-440fp
/Kira.root
/Kira.root32
/Kira.sh
/Kira.sh4
/Kira.ssh4
/Kira.spc
/Kira.sparc
/Kira.x32
/Kira.x64
/Kira.x86
/Kira.x86_32
/Kira.x86_64

# Reference: https://twitter.com/0xrb/status/1237983250129154048

/arc.forehead
/arm.forehead
/arm4.forehead
/arm4l.forehead
/arm4t.forehead
/arm4tl.forehead
/arm4tll.forehead
/armv4.forehead
/armv4l.forehead
/arm5.forehead
/arm5l.forehead
/arm5n.forehead
/armv5l.forehead
/arm6.forehead
/arm6l.forehead
/armv6.forehead
/armv6l.forehead
/armv61.forehead
/arm64.forehead
/arm7.forehead
/arm7l.forehead
/armv7l.forehead
/arm8.forehead
/dbg.forehead
/exploit.forehead
/i4.forehead
/i6.forehead
/i486.forehead
/i586.forehead
/i686.forehead
/kill.forehead
/m68.forehead
/m68k.forehead
/mips.forehead
/mips64.forehead
/mpsl.forehead
/mipsel.forehead
/pcc.forehead
/ppc.forehead
/ppc2.forehead
/ppc440.forehead
/ppc440fp.forehead
/powerpc.forehead
/powerppc.forehead
/powerpc-440fp.forehead
/root.forehead
/root32.forehead
/sh.forehead
/sh4.forehead
/ssh4.forehead
/spc.forehead
/sparc.forehead
/x32.forehead
/x64.forehead
/x86.forehead
/x86_32.forehead
/x86_64.forehead
/forehead.arc
/forehead.arm
/forehead.arm4
/forehead.arm4l
/forehead.arm4t
/forehead.arm4tl
/forehead.arm4tll
/forehead.armv4
/forehead.armv4l
/forehead.arm5
/forehead.arm5l
/forehead.arm5n
/forehead.armv5l
/forehead.arm6
/forehead.arm6l
/forehead.arm64
/forehead.armv6
/forehead.armv6l
/forehead.armv61
/forehead.arm7
/forehead.arm7l
/forehead.armv7l
/forehead.arm8
/forehead.dbg
/forehead.exploit
/forehead.i4
/forehead.i6
/forehead.i486
/forehead.i586
/forehead.i686
/forehead.kill
/forehead.m68
/forehead.m68k
/forehead.mips
/forehead.mips64
/forehead.mpsl
/forehead.mipsel
/forehead.pcc
/forehead.ppc
/forehead.ppc2
/forehead.ppc440
/forehead.ppc440fp
/forehead.powerpc
/forehead.powerppc
/forehead.powerpc-440fp
/forehead.root
/forehead.root32
/forehead.sh
/forehead.sh4
/forehead.ssh4
/forehead.spc
/forehead.sparc
/forehead.x32
/forehead.x64
/forehead.x86
/forehead.x86_32
/forehead.x86_64

# Reference: https://unit42.paloaltonetworks.com/new-mirai-variant-mukashi/
# Reference: https://www.virustotal.com/gui/ip-address/45.84.196.75/relations

45.84.196.75:34834
45.84.196.75:4864
/arc.corona
/arm.corona
/arm4.corona
/arm4l.corona
/arm4t.corona
/arm4tl.corona
/arm4tll.corona
/arm5.corona
/arm5l.corona
/arm5n.corona
/arm6.corona
/arm64.corona
/arm6l.corona
/arm7.corona
/arm7l.corona
/arm8.corona
/armv4.corona
/armv4l.corona
/armv5l.corona
/armv6.corona
/armv61.corona
/armv6l.corona
/armv7l.corona
/dbg.corona
/exploit.corona
/i4.corona
/i486.corona
/i586.corona
/i6.corona
/i686.corona
/kill.corona
/m68.corona
/m68k.corona
/mips.corona
/mips64.corona
/mipsel.corona
/mpsl.corona
/pcc.corona
/powerpc-440fp.corona
/powerpc.corona
/powerppc.corona
/ppc.corona
/ppc2.corona
/ppc440.corona
/ppc440fp.corona
/root.corona
/root32.corona
/sh.corona
/sh4.corona
/sparc.corona
/spc.corona
/ssh4.corona
/x32.corona
/x64.corona
/x86.corona
/x86_32.corona
/x86_64.corona
/arc.kawaii
/arm.kawaii
/arm4.kawaii
/arm4l.kawaii
/arm4t.kawaii
/arm4tl.kawaii
/arm4tll.kawaii
/arm5.kawaii
/arm5l.kawaii
/arm5n.kawaii
/arm6.kawaii
/arm64.kawaii
/arm6l.kawaii
/arm7.kawaii
/arm7l.kawaii
/arm8.kawaii
/armv4.kawaii
/armv4l.kawaii
/armv5l.kawaii
/armv6.kawaii
/armv61.kawaii
/armv6l.kawaii
/armv7l.kawaii
/dbg.kawaii
/exploit.kawaii
/i4.kawaii
/i486.kawaii
/i586.kawaii
/i6.kawaii
/i686.kawaii
/kill.kawaii
/m68.kawaii
/m68k.kawaii
/mips.kawaii
/mips64.kawaii
/mipsel.kawaii
/mpsl.kawaii
/pcc.kawaii
/powerpc.kawaii
/powerpc-440fp.kawaii
/powerppc.kawaii
/ppc.kawaii
/ppc2.kawaii
/ppc440.kawaii
/ppc440fp.kawaii
/root.kawaii
/root32.kawaii
/sh.kawaii
/sh4.kawaii
/sparc.kawaii
/spc.kawaii
/ssh4.kawaii
/x32.kawaii
/x64.kawaii
/x86.kawaii
/x86_32.kawaii
/x86_64.kawaii
/kawaii.arc
/kawaii.arm
/kawaii.arm4
/kawaii.arm4l
/kawaii.arm4t
/kawaii.arm4tl
/kawaii.arm4tll
/kawaii.armv4
/kawaii.armv4l
/kawaii.arm5
/kawaii.arm5l
/kawaii.arm5n
/kawaii.armv5l
/kawaii.arm6
/kawaii.arm6l
/kawaii.arm64
/kawaii.armv6
/kawaii.armv6l
/kawaii.armv61
/kawaii.arm7
/kawaii.arm7l
/kawaii.armv7l
/kawaii.arm8
/kawaii.dbg
/kawaii.exploit
/kawaii.i4
/kawaii.i6
/kawaii.i486
/kawaii.i586
/kawaii.i686
/kawaii.kill
/kawaii.m68
/kawaii.m68k
/kawaii.mips
/kawaii.mips64
/kawaii.mpsl
/kawaii.mipsel
/kawaii.pcc
/kawaii.ppc
/kawaii.ppc2
/kawaii.ppc440
/kawaii.ppc440fp
/kawaii.powerpc
/kawaii.powerppc
/kawaii.powerpc-440fp
/kawaii.root
/kawaii.root32
/kawaii.sh
/kawaii.sh4
/kawaii.ssh4
/kawaii.spc
/kawaii.sparc
/kawaii.x32
/kawaii.x64
/kawaii.x86
/kawaii.x86_32
/kawaii.x86_64

# Reference: https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day-en/

45.10.90.89:61002

# Reference: https://twitter.com/bad_packets/status/1242518187788226560

lol.tf
/eRrlQF1.botnet
/arc.botnet
/arm.botnet
/arm4.botnet
/arm4l.botnet
/arm4t.botnet
/arm4tl.botnet
/arm4tll.botnet
/arm5.botnet
/arm5l.botnet
/arm5n.botnet
/arm6.botnet
/arm64.botnet
/arm6l.botnet
/arm7.botnet
/arm7l.botnet
/arm8.botnet
/armv4.botnet
/armv4l.botnet
/armv5l.botnet
/armv6.botnet
/armv61.botnet
/armv6l.botnet
/armv7l.botnet
/dbg.botnet
/exploit.botnet
/i4.botnet
/i486.botnet
/i586.botnet
/i6.botnet
/i686.botnet
/kill.botnet
/m68.botnet
/m68k.botnet
/mips.botnet
/mips64.botnet
/mipsel.botnet
/mpsl.botnet
/pcc.botnet
/powerpc-440fp.botnet
/powerpc.botnet
/powerppc.botnet
/ppc.botnet
/ppc2.botnet
/ppc440.botnet
/ppc440fp.botnet
/root.botnet
/root32.botnet
/sh.botnet
/sh4.botnet
/sparc.botnet
/spc.botnet
/ssh4.botnet
/x32.botnet
/x64.botnet
/x86.botnet
/x86_32.botnet
/x86_64.botnet

# Reference: https://twitter.com/0xrb/status/1242719928848797698

/1vs2dv.arc
/1vs2dv.arm
/1vs2dv.arm4
/1vs2dv.arm4l
/1vs2dv.arm4t
/1vs2dv.arm4tl
/1vs2dv.arm4tll
/1vs2dv.arm5
/1vs2dv.arm5l
/1vs2dv.arm5n
/1vs2dv.arm6
/1vs2dv.arm64
/1vs2dv.arm6l
/1vs2dv.arm7
/1vs2dv.arm7l
/1vs2dv.arm8
/1vs2dv.armv4
/1vs2dv.armv4l
/1vs2dv.armv5l
/1vs2dv.armv6
/1vs2dv.armv61
/1vs2dv.armv6l
/1vs2dv.armv7l
/1vs2dv.dbg
/1vs2dv.exploit
/1vs2dv.i4
/1vs2dv.i486
/1vs2dv.i586
/1vs2dv.i6
/1vs2dv.i686
/1vs2dv.kill
/1vs2dv.m68
/1vs2dv.m68k
/1vs2dv.mips
/1vs2dv.mips64
/1vs2dv.mipsel
/1vs2dv.mpsl
/1vs2dv.pcc
/1vs2dv.powerpc
/1vs2dv.powerpc-440fp
/1vs2dv.powerppc
/1vs2dv.ppc
/1vs2dv.ppc2
/1vs2dv.ppc440
/1vs2dv.ppc440fp
/1vs2dv.root
/1vs2dv.root32
/1vs2dv.sh
/1vs2dv.sh4
/1vs2dv.sparc
/1vs2dv.spc
/1vs2dv.ssh4
/1vs2dv.x32
/1vs2dv.x64
/1vs2dv.x86
/1vs2dv.x86_32
/1vs2dv.x86_64
/bomba.arc
/bomba.arm
/bomba.arm4
/bomba.arm4l
/bomba.arm4t
/bomba.arm4tl
/bomba.arm4tll
/bomba.arm5
/bomba.arm5l
/bomba.arm5n
/bomba.arm6
/bomba.arm64
/bomba.arm6l
/bomba.arm7
/bomba.arm7l
/bomba.arm8
/bomba.armv4
/bomba.armv4l
/bomba.armv5l
/bomba.armv6
/bomba.armv61
/bomba.armv6l
/bomba.armv7l
/bomba.dbg
/bomba.exploit
/bomba.i4
/bomba.i486
/bomba.i586
/bomba.i6
/bomba.i686
/bomba.kill
/bomba.m68
/bomba.m68k
/bomba.mips
/bomba.mips64
/bomba.mipsel
/bomba.mpsl
/bomba.pcc
/bomba.powerpc
/bomba.powerpc-440fp
/bomba.powerppc
/bomba.ppc
/bomba.ppc2
/bomba.ppc440
/bomba.ppc440fp
/bomba.root
/bomba.root32
/bomba.sh
/bomba.sh4
/bomba.sparc
/bomba.spc
/bomba.ssh4
/bomba.x32
/bomba.x64
/bomba.x86
/bomba.x86_32
/bomba.x86_64
/covid.arc
/covid.arm
/covid.arm4
/covid.arm4l
/covid.arm4t
/covid.arm4tl
/covid.arm4tll
/covid.arm5
/covid.arm5l
/covid.arm5n
/covid.arm6
/covid.arm64
/covid.arm6l
/covid.arm7
/covid.arm7l
/covid.arm8
/covid.armv4
/covid.armv4l
/covid.armv5l
/covid.armv6
/covid.armv61
/covid.armv6l
/covid.armv7l
/covid.dbg
/covid.exploit
/covid.i4
/covid.i486
/covid.i586
/covid.i6
/covid.i686
/covid.kill
/covid.m68
/covid.m68k
/covid.mips
/covid.mips64
/covid.mipsel
/covid.mpsl
/covid.pcc
/covid.powerpc
/covid.powerpc-440fp
/covid.powerppc
/covid.ppc
/covid.ppc2
/covid.ppc440
/covid.ppc440fp
/covid.root
/covid.root32
/covid.sh
/covid.sh4
/covid.sparc
/covid.spc
/covid.ssh4
/covid.x32
/covid.x64
/covid.x86
/covid.x86_32
/covid.x86_64
/jKira.arc
/jKira.arm
/jKira.arm4
/jKira.arm4l
/jKira.arm4t
/jKira.arm4tl
/jKira.arm4tll
/jKira.arm5
/jKira.arm5l
/jKira.arm5n
/jKira.arm6
/jKira.arm64
/jKira.arm6l
/jKira.arm7
/jKira.arm7l
/jKira.arm8
/jKira.armv4
/jKira.armv4l
/jKira.armv5l
/jKira.armv6
/jKira.armv61
/jKira.armv6l
/jKira.armv7l
/jKira.dbg
/jKira.exploit
/jKira.i4
/jKira.i486
/jKira.i586
/jKira.i6
/jKira.i686
/jKira.kill
/jKira.m68
/jKira.m68k
/jKira.mips
/jKira.mips64
/jKira.mipsel
/jKira.mpsl
/jKira.pcc
/jKira.powerpc
/jKira.powerpc-440fp
/jKira.powerppc
/jKira.ppc
/jKira.ppc2
/jKira.ppc440
/jKira.ppc440fp
/jKira.root
/jKira.root32
/jKira.sh
/jKira.sh4
/jKira.sparc
/jKira.spc
/jKira.ssh4
/jKira.x32
/jKira.x64
/jKira.x86
/jKira.x86_32
/jKira.x86_64
/suckukinjereeeettttttt.arc
/suckukinjereeeettttttt.arm
/suckukinjereeeettttttt.arm4
/suckukinjereeeettttttt.arm4l
/suckukinjereeeettttttt.arm4t
/suckukinjereeeettttttt.arm4tl
/suckukinjereeeettttttt.arm4tll
/suckukinjereeeettttttt.arm5
/suckukinjereeeettttttt.arm5l
/suckukinjereeeettttttt.arm5n
/suckukinjereeeettttttt.arm6
/suckukinjereeeettttttt.arm64
/suckukinjereeeettttttt.arm6l
/suckukinjereeeettttttt.arm7
/suckukinjereeeettttttt.arm7l
/suckukinjereeeettttttt.arm8
/suckukinjereeeettttttt.armv4
/suckukinjereeeettttttt.armv4l
/suckukinjereeeettttttt.armv5l
/suckukinjereeeettttttt.armv6
/suckukinjereeeettttttt.armv61
/suckukinjereeeettttttt.armv6l
/suckukinjereeeettttttt.armv7l
/suckukinjereeeettttttt.dbg
/suckukinjereeeettttttt.exploit
/suckukinjereeeettttttt.i4
/suckukinjereeeettttttt.i486
/suckukinjereeeettttttt.i586
/suckukinjereeeettttttt.i6
/suckukinjereeeettttttt.i686
/suckukinjereeeettttttt.kill
/suckukinjereeeettttttt.m68
/suckukinjereeeettttttt.m68k
/suckukinjereeeettttttt.mips
/suckukinjereeeettttttt.mips64
/suckukinjereeeettttttt.mipsel
/suckukinjereeeettttttt.mpsl
/suckukinjereeeettttttt.pcc
/suckukinjereeeettttttt.powerpc
/suckukinjereeeettttttt.powerpc-440fp
/suckukinjereeeettttttt.powerppc
/suckukinjereeeettttttt.ppc
/suckukinjereeeettttttt.ppc2
/suckukinjereeeettttttt.ppc440
/suckukinjereeeettttttt.ppc440fp
/suckukinjereeeettttttt.root
/suckukinjereeeettttttt.root32
/suckukinjereeeettttttt.sh
/suckukinjereeeettttttt.sh4
/suckukinjereeeettttttt.sparc
/suckukinjereeeettttttt.spc
/suckukinjereeeettttttt.ssh4
/suckukinjereeeettttttt.x32
/suckukinjereeeettttttt.x64
/suckukinjereeeettttttt.x86
/suckukinjereeeettttttt.x86_32
/suckukinjereeeettttttt.x86_64
/tbox.arc
/tbox.arm
/tbox.arm4
/tbox.arm4l
/tbox.arm4t
/tbox.arm4tl
/tbox.arm4tll
/tbox.arm5
/tbox.arm5l
/tbox.arm5n
/tbox.arm6
/tbox.arm64
/tbox.arm6l
/tbox.arm7
/tbox.arm7l
/tbox.arm8
/tbox.armv4
/tbox.armv4l
/tbox.armv5l
/tbox.armv6
/tbox.armv61
/tbox.armv6l
/tbox.armv7l
/tbox.dbg
/tbox.exploit
/tbox.i4
/tbox.i486
/tbox.i586
/tbox.i6
/tbox.i686
/tbox.kill
/tbox.m68
/tbox.m68k
/tbox.mips
/tbox.mips64
/tbox.mipsel
/tbox.mpsl
/tbox.pcc
/tbox.powerpc
/tbox.powerpc-440fp
/tbox.powerppc
/tbox.ppc
/tbox.ppc2
/tbox.ppc440
/tbox.ppc440fp
/tbox.root
/tbox.root32
/tbox.sh
/tbox.sh4
/tbox.sparc
/tbox.spc
/tbox.ssh4
/tbox.x32
/tbox.x64
/tbox.x86
/tbox.x86_32
/tbox.x86_64

# Reference: https://twitter.com/JayTHL/status/1242890029564858375

/nemesis.arc
/nemesis.arm
/nemesis.arm4
/nemesis.arm4l
/nemesis.arm4t
/nemesis.arm4tl
/nemesis.arm4tll
/nemesis.arm5
/nemesis.arm5l
/nemesis.arm5n
/nemesis.arm6
/nemesis.arm64
/nemesis.arm6l
/nemesis.arm7
/nemesis.arm7l
/nemesis.arm8
/nemesis.armv4
/nemesis.armv4l
/nemesis.armv5l
/nemesis.armv6
/nemesis.armv61
/nemesis.armv6l
/nemesis.armv7l
/nemesis.dbg
/nemesis.exploit
/nemesis.i4
/nemesis.i486
/nemesis.i586
/nemesis.i6
/nemesis.i686
/nemesis.kill
/nemesis.m68
/nemesis.m68k
/nemesis.mips
/nemesis.mips64
/nemesis.mipsel
/nemesis.mpsl
/nemesis.pcc
/nemesis.powerpc
/nemesis.powerpc-440fp
/nemesis.powerppc
/nemesis.ppc
/nemesis.ppc2
/nemesis.ppc440
/nemesis.ppc440fp
/nemesis.root
/nemesis.root32
/nemesis.sh
/nemesis.sh4
/nemesis.sparc
/nemesis.spc
/nemesis.ssh4
/nemesis.x32
/nemesis.x64
/nemesis.x86
/nemesis.x86_32
/nemesis.x86_64

# Reference: https://twitter.com/JayTHL/status/1243295553359884288

/a-r.m-4.GOOGLE
/a-r.m-5.GOOGLE
/a-r.m-6.GOOGLE
/a-r.m-7.GOOGLE
/i-4.8-6.GOOGLE
/i-5.8-6.GOOGLE
/i-6.8-6.GOOGLE
/m-6.8-k.GOOGLE
/m-i.p-s.GOOGLE
/m-p.s-l.GOOGLE
/p-p.c-.GOOGLE
/s-h.4-.GOOGLE
/x-3.2-.GOOGLE
/x-6.4-.GOOGLE
/x-8.6-.GOOGLE

# Reference: https://twitter.com/JayTHL/status/1243187653878657024
# Reference: https://pastebin.com/raw/jstA73mH

/SBIDIOT/
/EkSgbins.sh

# Reference: https://twitter.com/0xrb/status/1243439096086663168

cnc.uzavs.online
/arc.AthenaM
/arm.AthenaM
/arm4.AthenaM
/arm4l.AthenaM
/arm4t.AthenaM
/arm4tl.AthenaM
/arm4tll.AthenaM
/arm5.AthenaM
/arm5l.AthenaM
/arm5n.AthenaM
/arm6.AthenaM
/arm64.AthenaM
/arm6l.AthenaM
/arm7.AthenaM
/arm7l.AthenaM
/arm8.AthenaM
/armv4.AthenaM
/armv4l.AthenaM
/armv5l.AthenaM
/armv6.AthenaM
/armv61.AthenaM
/armv6l.AthenaM
/armv7l.AthenaM
/dbg.AthenaM
/exploit.AthenaM
/i4.AthenaM
/i486.AthenaM
/i586.AthenaM
/i6.AthenaM
/i686.AthenaM
/kill.AthenaM
/m68.AthenaM
/m68k.AthenaM
/mips.AthenaM
/mips64.AthenaM
/mipsel.AthenaM
/mpsl.AthenaM
/pcc.AthenaM
/powerpc-440fp.AthenaM
/powerpc.AthenaM
/powerppc.AthenaM
/ppc.AthenaM
/ppc2.AthenaM
/ppc440.AthenaM
/ppc440fp.AthenaM
/root.AthenaM
/root32.AthenaM
/sh.AthenaM
/sh4.AthenaM
/sparc.AthenaM
/spc.AthenaM
/ssh4.AthenaM
/x32.AthenaM
/x64.AthenaM
/x86.AthenaM
/x86_32.AthenaM
/x86_64.AthenaM
/AthenaM.arc
/AthenaM.arm
/AthenaM.arm4
/AthenaM.arm4l
/AthenaM.arm4t
/AthenaM.arm4tl
/AthenaM.arm4tll
/AthenaM.arm5
/AthenaM.arm5l
/AthenaM.arm5n
/AthenaM.arm6
/AthenaM.arm64
/AthenaM.arm6l
/AthenaM.arm7
/AthenaM.arm7l
/AthenaM.arm8
/AthenaM.armv4
/AthenaM.armv4l
/AthenaM.armv5l
/AthenaM.armv6
/AthenaM.armv61
/AthenaM.armv6l
/AthenaM.armv7l
/AthenaM.dbg
/AthenaM.exploit
/AthenaM.i4
/AthenaM.i486
/AthenaM.i586
/AthenaM.i6
/AthenaM.i686
/AthenaM.kill
/AthenaM.m68
/AthenaM.m68k
/AthenaM.mips
/AthenaM.mips64
/AthenaM.mipsel
/AthenaM.mpsl
/AthenaM.pcc
/AthenaM.powerpc
/AthenaM.powerpc-440fp
/AthenaM.powerppc
/AthenaM.ppc
/AthenaM.ppc2
/AthenaM.ppc440
/AthenaM.ppc440fp
/AthenaM.root
/AthenaM.root32
/AthenaM.sh
/AthenaM.sh4
/AthenaM.sparc
/AthenaM.spc
/AthenaM.ssh4
/AthenaM.x32
/AthenaM.x64
/AthenaM.x86
/AthenaM.x86_32
/AthenaM.x86_64
/arc.BackTrack
/arm.BackTrack
/arm4.BackTrack
/arm4l.BackTrack
/arm4t.BackTrack
/arm4tl.BackTrack
/arm4tll.BackTrack
/arm5.BackTrack
/arm5l.BackTrack
/arm5n.BackTrack
/arm6.BackTrack
/arm64.BackTrack
/arm6l.BackTrack
/arm7.BackTrack
/arm7l.BackTrack
/arm8.BackTrack
/armv4.BackTrack
/armv4l.BackTrack
/armv5l.BackTrack
/armv6.BackTrack
/armv61.BackTrack
/armv6l.BackTrack
/armv7l.BackTrack
/dbg.BackTrack
/exploit.BackTrack
/i4.BackTrack
/i486.BackTrack
/i586.BackTrack
/i6.BackTrack
/i686.BackTrack
/kill.BackTrack
/m68.BackTrack
/m68k.BackTrack
/mips.BackTrack
/mips64.BackTrack
/mipsel.BackTrack
/mpsl.BackTrack
/pcc.BackTrack
/powerpc-440fp.BackTrack
/powerpc.BackTrack
/powerppc.BackTrack
/ppc.BackTrack
/ppc2.BackTrack
/ppc440.BackTrack
/ppc440fp.BackTrack
/root.BackTrack
/root32.BackTrack
/sh.BackTrack
/sh4.BackTrack
/sparc.BackTrack
/spc.BackTrack
/ssh4.BackTrack
/x32.BackTrack
/x64.BackTrack
/x86.BackTrack
/x86_32.BackTrack
/x86_64.BackTrack
/BackTrack.arc
/BackTrack.arm
/BackTrack.arm4
/BackTrack.arm4l
/BackTrack.arm4t
/BackTrack.arm4tl
/BackTrack.arm4tll
/BackTrack.arm5
/BackTrack.arm5l
/BackTrack.arm5n
/BackTrack.arm6
/BackTrack.arm64
/BackTrack.arm6l
/BackTrack.arm7
/BackTrack.arm7l
/BackTrack.arm8
/BackTrack.armv4
/BackTrack.armv4l
/BackTrack.armv5l
/BackTrack.armv6
/BackTrack.armv61
/BackTrack.armv6l
/BackTrack.armv7l
/BackTrack.dbg
/BackTrack.exploit
/BackTrack.i4
/BackTrack.i486
/BackTrack.i586
/BackTrack.i6
/BackTrack.i686
/BackTrack.kill
/BackTrack.m68
/BackTrack.m68k
/BackTrack.mips
/BackTrack.mips64
/BackTrack.mipsel
/BackTrack.mpsl
/BackTrack.pcc
/BackTrack.powerpc
/BackTrack.powerpc-440fp
/BackTrack.powerppc
/BackTrack.ppc
/BackTrack.ppc2
/BackTrack.ppc440
/BackTrack.ppc440fp
/BackTrack.root
/BackTrack.root32
/BackTrack.sh
/BackTrack.sh4
/BackTrack.sparc
/BackTrack.spc
/BackTrack.ssh4
/BackTrack.x32
/BackTrack.x64
/BackTrack.x86
/BackTrack.x86_32
/BackTrack.x86_64
/arc.kbot
/arm.kbot
/arm4.kbot
/arm4l.kbot
/arm4t.kbot
/arm4tl.kbot
/arm4tll.kbot
/arm5.kbot
/arm5l.kbot
/arm5n.kbot
/arm6.kbot
/arm64.kbot
/arm6l.kbot
/arm7.kbot
/arm7l.kbot
/arm8.kbot
/armv4.kbot
/armv4l.kbot
/armv5l.kbot
/armv6.kbot
/armv61.kbot
/armv6l.kbot
/armv7l.kbot
/dbg.kbot
/exploit.kbot
/i4.kbot
/i486.kbot
/i586.kbot
/i6.kbot
/i686.kbot
/kill.kbot
/m68.kbot
/m68k.kbot
/mips.kbot
/mips64.kbot
/mipsel.kbot
/mpsl.kbot
/pcc.kbot
/powerpc-440fp.kbot
/powerpc.kbot
/powerppc.kbot
/ppc.kbot
/ppc2.kbot
/ppc440.kbot
/ppc440fp.kbot
/root.kbot
/root32.kbot
/sh.kbot
/sh4.kbot
/sparc.kbot
/spc.kbot
/ssh4.kbot
/x32.kbot
/x64.kbot
/x86.kbot
/x86_32.kbot
/x86_64.kbot
/kbot.arc
/kbot.arm
/kbot.arm4
/kbot.arm4l
/kbot.arm4t
/kbot.arm4tl
/kbot.arm4tll
/kbot.arm5
/kbot.arm5l
/kbot.arm5n
/kbot.arm6
/kbot.arm64
/kbot.arm6l
/kbot.arm7
/kbot.arm7l
/kbot.arm8
/kbot.armv4
/kbot.armv4l
/kbot.armv5l
/kbot.armv6
/kbot.armv61
/kbot.armv6l
/kbot.armv7l
/kbot.dbg
/kbot.exploit
/kbot.i4
/kbot.i486
/kbot.i586
/kbot.i6
/kbot.i686
/kbot.kill
/kbot.m68
/kbot.m68k
/kbot.mips
/kbot.mips64
/kbot.mipsel
/kbot.mpsl
/kbot.pcc
/kbot.powerpc
/kbot.powerpc-440fp
/kbot.powerppc
/kbot.ppc
/kbot.ppc2
/kbot.ppc440
/kbot.ppc440fp
/kbot.root
/kbot.root32
/kbot.sh
/kbot.sh4
/kbot.sparc
/kbot.spc
/kbot.ssh4
/kbot.x32
/kbot.x64
/kbot.x86
/kbot.x86_32
/kbot.x86_64
/arc.MiraiVariant
/arm.MiraiVariant
/arm4.MiraiVariant
/arm4l.MiraiVariant
/arm4t.MiraiVariant
/arm4tl.MiraiVariant
/arm4tll.MiraiVariant
/arm5.MiraiVariant
/arm5l.MiraiVariant
/arm5n.MiraiVariant
/arm6.MiraiVariant
/arm64.MiraiVariant
/arm6l.MiraiVariant
/arm7.MiraiVariant
/arm7l.MiraiVariant
/arm8.MiraiVariant
/armv4.MiraiVariant
/armv4l.MiraiVariant
/armv5l.MiraiVariant
/armv6.MiraiVariant
/armv61.MiraiVariant
/armv6l.MiraiVariant
/armv7l.MiraiVariant
/dbg.MiraiVariant
/exploit.MiraiVariant
/i4.MiraiVariant
/i486.MiraiVariant
/i586.MiraiVariant
/i6.MiraiVariant
/i686.MiraiVariant
/kill.MiraiVariant
/m68.MiraiVariant
/m68k.MiraiVariant
/mips.MiraiVariant
/mips64.MiraiVariant
/mipsel.MiraiVariant
/mpsl.MiraiVariant
/pcc.MiraiVariant
/powerpc-440fp.MiraiVariant
/powerpc.MiraiVariant
/powerppc.MiraiVariant
/ppc.MiraiVariant
/ppc2.MiraiVariant
/ppc440.MiraiVariant
/ppc440fp.MiraiVariant
/root.MiraiVariant
/root32.MiraiVariant
/sh.MiraiVariant
/sh4.MiraiVariant
/sparc.MiraiVariant
/spc.MiraiVariant
/ssh4.MiraiVariant
/x32.MiraiVariant
/x64.MiraiVariant
/x86.MiraiVariant
/x86_32.MiraiVariant
/x86_64.MiraiVariant
/MiraiVariant.arc
/MiraiVariant.arm
/MiraiVariant.arm4
/MiraiVariant.arm4l
/MiraiVariant.arm4t
/MiraiVariant.arm4tl
/MiraiVariant.arm4tll
/MiraiVariant.arm5
/MiraiVariant.arm5l
/MiraiVariant.arm5n
/MiraiVariant.arm6
/MiraiVariant.arm64
/MiraiVariant.arm6l
/MiraiVariant.arm7
/MiraiVariant.arm7l
/MiraiVariant.arm8
/MiraiVariant.armv4
/MiraiVariant.armv4l
/MiraiVariant.armv5l
/MiraiVariant.armv6
/MiraiVariant.armv61
/MiraiVariant.armv6l
/MiraiVariant.armv7l
/MiraiVariant.dbg
/MiraiVariant.exploit
/MiraiVariant.i4
/MiraiVariant.i486
/MiraiVariant.i586
/MiraiVariant.i6
/MiraiVariant.i686
/MiraiVariant.kill
/MiraiVariant.m68
/MiraiVariant.m68k
/MiraiVariant.mips
/MiraiVariant.mips64
/MiraiVariant.mipsel
/MiraiVariant.mpsl
/MiraiVariant.pcc
/MiraiVariant.powerpc
/MiraiVariant.powerpc-440fp
/MiraiVariant.powerppc
/MiraiVariant.ppc
/MiraiVariant.ppc2
/MiraiVariant.ppc440
/MiraiVariant.ppc440fp
/MiraiVariant.root
/MiraiVariant.root32
/MiraiVariant.sh
/MiraiVariant.sh4
/MiraiVariant.sparc
/MiraiVariant.spc
/MiraiVariant.ssh4
/MiraiVariant.x32
/MiraiVariant.x64
/MiraiVariant.x86
/MiraiVariant.x86_32
/MiraiVariant.x86_64
/arc.rapethemipcams
/arm.rapethemipcams
/arm4.rapethemipcams
/arm4l.rapethemipcams
/arm4t.rapethemipcams
/arm4tl.rapethemipcams
/arm4tll.rapethemipcams
/arm5.rapethemipcams
/arm5l.rapethemipcams
/arm5n.rapethemipcams
/arm6.rapethemipcams
/arm64.rapethemipcams
/arm6l.rapethemipcams
/arm7.rapethemipcams
/arm7l.rapethemipcams
/arm8.rapethemipcams
/armv4.rapethemipcams
/armv4l.rapethemipcams
/armv5l.rapethemipcams
/armv6.rapethemipcams
/armv61.rapethemipcams
/armv6l.rapethemipcams
/armv7l.rapethemipcams
/dbg.rapethemipcams
/exploit.rapethemipcams
/i4.rapethemipcams
/i486.rapethemipcams
/i586.rapethemipcams
/i6.rapethemipcams
/i686.rapethemipcams
/kill.rapethemipcams
/m68.rapethemipcams
/m68k.rapethemipcams
/mips.rapethemipcams
/mips64.rapethemipcams
/mipsel.rapethemipcams
/mpsl.rapethemipcams
/pcc.rapethemipcams
/powerpc-440fp.rapethemipcams
/powerpc.rapethemipcams
/powerppc.rapethemipcams
/ppc.rapethemipcams
/ppc2.rapethemipcams
/ppc440.rapethemipcams
/ppc440fp.rapethemipcams
/root.rapethemipcams
/root32.rapethemipcams
/sh.rapethemipcams
/sh4.rapethemipcams
/sparc.rapethemipcams
/spc.rapethemipcams
/ssh4.rapethemipcams
/x32.rapethemipcams
/x64.rapethemipcams
/x86.rapethemipcams
/x86_32.rapethemipcams
/x86_64.rapethemipcams
/rapethemipcams.arc
/rapethemipcams.arm
/rapethemipcams.arm4
/rapethemipcams.arm4l
/rapethemipcams.arm4t
/rapethemipcams.arm4tl
/rapethemipcams.arm4tll
/rapethemipcams.arm5
/rapethemipcams.arm5l
/rapethemipcams.arm5n
/rapethemipcams.arm6
/rapethemipcams.arm64
/rapethemipcams.arm6l
/rapethemipcams.arm7
/rapethemipcams.arm7l
/rapethemipcams.arm8
/rapethemipcams.armv4
/rapethemipcams.armv4l
/rapethemipcams.armv5l
/rapethemipcams.armv6
/rapethemipcams.armv61
/rapethemipcams.armv6l
/rapethemipcams.armv7l
/rapethemipcams.dbg
/rapethemipcams.exploit
/rapethemipcams.i4
/rapethemipcams.i486
/rapethemipcams.i586
/rapethemipcams.i6
/rapethemipcams.i686
/rapethemipcams.kill
/rapethemipcams.m68
/rapethemipcams.m68k
/rapethemipcams.mips
/rapethemipcams.mips64
/rapethemipcams.mipsel
/rapethemipcams.mpsl
/rapethemipcams.pcc
/rapethemipcams.powerpc
/rapethemipcams.powerpc-440fp
/rapethemipcams.powerppc
/rapethemipcams.ppc
/rapethemipcams.ppc2
/rapethemipcams.ppc440
/rapethemipcams.ppc440fp
/rapethemipcams.root
/rapethemipcams.root32
/rapethemipcams.sh
/rapethemipcams.sh4
/rapethemipcams.sparc
/rapethemipcams.spc
/rapethemipcams.ssh4
/rapethemipcams.x32
/rapethemipcams.x64
/rapethemipcams.x86
/rapethemipcams.x86_32
/rapethemipcams.x86_64
/arc.typpaostur
/arm.typpaostur
/arm4.typpaostur
/arm4l.typpaostur
/arm4t.typpaostur
/arm4tl.typpaostur
/arm4tll.typpaostur
/arm5.typpaostur
/arm5l.typpaostur
/arm5n.typpaostur
/arm6.typpaostur
/arm64.typpaostur
/arm6l.typpaostur
/arm7.typpaostur
/arm7l.typpaostur
/arm8.typpaostur
/armv4.typpaostur
/armv4l.typpaostur
/armv5l.typpaostur
/armv6.typpaostur
/armv61.typpaostur
/armv6l.typpaostur
/armv7l.typpaostur
/dbg.typpaostur
/exploit.typpaostur
/i4.typpaostur
/i486.typpaostur
/i586.typpaostur
/i6.typpaostur
/i686.typpaostur
/kill.typpaostur
/m68.typpaostur
/m68k.typpaostur
/mips.typpaostur
/mips64.typpaostur
/mipsel.typpaostur
/mpsl.typpaostur
/pcc.typpaostur
/powerpc-440fp.typpaostur
/powerpc.typpaostur
/powerppc.typpaostur
/ppc.typpaostur
/ppc2.typpaostur
/ppc440.typpaostur
/ppc440fp.typpaostur
/root.typpaostur
/root32.typpaostur
/sh.typpaostur
/sh4.typpaostur
/sparc.typpaostur
/spc.typpaostur
/ssh4.typpaostur
/x32.typpaostur
/x64.typpaostur
/x86.typpaostur
/x86_32.typpaostur
/x86_64.typpaostur
/typpaostur.arc
/typpaostur.arm
/typpaostur.arm4
/typpaostur.arm4l
/typpaostur.arm4t
/typpaostur.arm4tl
/typpaostur.arm4tll
/typpaostur.arm5
/typpaostur.arm5l
/typpaostur.arm5n
/typpaostur.arm6
/typpaostur.arm64
/typpaostur.arm6l
/typpaostur.arm7
/typpaostur.arm7l
/typpaostur.arm8
/typpaostur.armv4
/typpaostur.armv4l
/typpaostur.armv5l
/typpaostur.armv6
/typpaostur.armv61
/typpaostur.armv6l
/typpaostur.armv7l
/typpaostur.dbg
/typpaostur.exploit
/typpaostur.i4
/typpaostur.i486
/typpaostur.i586
/typpaostur.i6
/typpaostur.i686
/typpaostur.kill
/typpaostur.m68
/typpaostur.m68k
/typpaostur.mips
/typpaostur.mips64
/typpaostur.mipsel
/typpaostur.mpsl
/typpaostur.pcc
/typpaostur.powerpc
/typpaostur.powerpc-440fp
/typpaostur.powerppc
/typpaostur.ppc
/typpaostur.ppc2
/typpaostur.ppc440
/typpaostur.ppc440fp
/typpaostur.root
/typpaostur.root32
/typpaostur.sh
/typpaostur.sh4
/typpaostur.sparc
/typpaostur.spc
/typpaostur.ssh4
/typpaostur.x32
/typpaostur.x64
/typpaostur.x86
/typpaostur.x86_32
/typpaostur.x86_64

# Reference: https://www.virustotal.com/gui/ip-address/216.198.66.107/relations

216.198.66.107:2213
/arc.switchbladesq
/arm.switchbladesq
/arm4.switchbladesq
/arm4l.switchbladesq
/arm4t.switchbladesq
/arm4tl.switchbladesq
/arm4tll.switchbladesq
/arm5.switchbladesq
/arm5l.switchbladesq
/arm5n.switchbladesq
/arm6.switchbladesq
/arm64.switchbladesq
/arm6l.switchbladesq
/arm7.switchbladesq
/arm7l.switchbladesq
/arm8.switchbladesq
/armv4.switchbladesq
/armv4l.switchbladesq
/armv5l.switchbladesq
/armv6.switchbladesq
/armv61.switchbladesq
/armv6l.switchbladesq
/armv7l.switchbladesq
/dbg.switchbladesq
/exploit.switchbladesq
/i4.switchbladesq
/i486.switchbladesq
/i586.switchbladesq
/i6.switchbladesq
/i686.switchbladesq
/kill.switchbladesq
/m68.switchbladesq
/m68k.switchbladesq
/mips.switchbladesq
/mips64.switchbladesq
/mipsel.switchbladesq
/mpsl.switchbladesq
/pcc.switchbladesq
/powerpc-440fp.switchbladesq
/powerpc.switchbladesq
/powerppc.switchbladesq
/ppc.switchbladesq
/ppc2.switchbladesq
/ppc440.switchbladesq
/ppc440fp.switchbladesq
/root.switchbladesq
/root32.switchbladesq
/sh.switchbladesq
/sh4.switchbladesq
/sparc.switchbladesq
/spc.switchbladesq
/ssh4.switchbladesq
/x32.switchbladesq
/x64.switchbladesq
/x86.switchbladesq
/x86_32.switchbladesq
/x86_64.switchbladesq
/switchbladesq.arc
/switchbladesq.arm
/switchbladesq.arm4
/switchbladesq.arm4l
/switchbladesq.arm4t
/switchbladesq.arm4tl
/switchbladesq.arm4tll
/switchbladesq.arm5
/switchbladesq.arm5l
/switchbladesq.arm5n
/switchbladesq.arm6
/switchbladesq.arm64
/switchbladesq.arm6l
/switchbladesq.arm7
/switchbladesq.arm7l
/switchbladesq.arm8
/switchbladesq.armv4
/switchbladesq.armv4l
/switchbladesq.armv5l
/switchbladesq.armv6
/switchbladesq.armv61
/switchbladesq.armv6l
/switchbladesq.armv7l
/switchbladesq.dbg
/switchbladesq.exploit
/switchbladesq.i4
/switchbladesq.i486
/switchbladesq.i586
/switchbladesq.i6
/switchbladesq.i686
/switchbladesq.kill
/switchbladesq.m68
/switchbladesq.m68k
/switchbladesq.mips
/switchbladesq.mips64
/switchbladesq.mipsel
/switchbladesq.mpsl
/switchbladesq.pcc
/switchbladesq.powerpc
/switchbladesq.powerpc-440fp
/switchbladesq.powerppc
/switchbladesq.ppc
/switchbladesq.ppc2
/switchbladesq.ppc440
/switchbladesq.ppc440fp
/switchbladesq.root
/switchbladesq.root32
/switchbladesq.sh
/switchbladesq.sh4
/switchbladesq.sparc
/switchbladesq.spc
/switchbladesq.ssh4
/switchbladesq.x32
/switchbladesq.x64
/switchbladesq.x86
/switchbladesq.x86_32
/switchbladesq.x86_64

# Reference: https://www.virustotal.com/gui/domain/a.deadnig.ga/relations

a.deadnig.ga
/arc.booty
/arm.booty
/arm4.booty
/arm4l.booty
/arm4t.booty
/arm4tl.booty
/arm4tll.booty
/arm5.booty
/arm5l.booty
/arm5n.booty
/arm6.booty
/arm64.booty
/arm6l.booty
/arm7.booty
/arm7l.booty
/arm8.booty
/armv4.booty
/armv4l.booty
/armv5l.booty
/armv6.booty
/armv61.booty
/armv6l.booty
/armv7l.booty
/dbg.booty
/exploit.booty
/i4.booty
/i486.booty
/i586.booty
/i6.booty
/i686.booty
/kill.booty
/m68.booty
/m68k.booty
/mips.booty
/mips64.booty
/mipsel.booty
/mpsl.booty
/pcc.booty
/powerpc-440fp.booty
/powerpc.booty
/powerppc.booty
/ppc.booty
/ppc2.booty
/ppc440.booty
/ppc440fp.booty
/root.booty
/root32.booty
/sh.booty
/sh4.booty
/sparc.booty
/spc.booty
/ssh4.booty
/x32.booty
/x64.booty
/x86.booty
/x86_32.booty
/x86_64.booty
/booty.arc
/booty.arm
/booty.arm4
/booty.arm4l
/booty.arm4t
/booty.arm4tl
/booty.arm4tll
/booty.arm5
/booty.arm5l
/booty.arm5n
/booty.arm6
/booty.arm64
/booty.arm6l
/booty.arm7
/booty.arm7l
/booty.arm8
/booty.armv4
/booty.armv4l
/booty.armv5l
/booty.armv6
/booty.armv61
/booty.armv6l
/booty.armv7l
/booty.dbg
/booty.exploit
/booty.i4
/booty.i486
/booty.i586
/booty.i6
/booty.i686
/booty.kill
/booty.m68
/booty.m68k
/booty.mips
/booty.mips64
/booty.mipsel
/booty.mpsl
/booty.pcc
/booty.powerpc
/booty.powerpc-440fp
/booty.powerppc
/booty.ppc
/booty.ppc2
/booty.ppc440
/booty.ppc440fp
/booty.root
/booty.root32
/booty.sh
/booty.sh4
/booty.sparc
/booty.spc
/booty.ssh4
/booty.x32
/booty.x64
/booty.x86
/booty.x86_32
/booty.x86_64
/arc.rispek
/arm.rispek
/arm4.rispek
/arm4l.rispek
/arm4t.rispek
/arm4tl.rispek
/arm4tll.rispek
/arm5.rispek
/arm5l.rispek
/arm5n.rispek
/arm6.rispek
/arm64.rispek
/arm6l.rispek
/arm7.rispek
/arm7l.rispek
/arm8.rispek
/armv4.rispek
/armv4l.rispek
/armv5l.rispek
/armv6.rispek
/armv61.rispek
/armv6l.rispek
/armv7l.rispek
/dbg.rispek
/exploit.rispek
/i4.rispek
/i486.rispek
/i586.rispek
/i6.rispek
/i686.rispek
/kill.rispek
/m68.rispek
/m68k.rispek
/mips.rispek
/mips64.rispek
/mipsel.rispek
/mpsl.rispek
/pcc.rispek
/powerpc-440fp.rispek
/powerpc.rispek
/powerppc.rispek
/ppc.rispek
/ppc2.rispek
/ppc440.rispek
/ppc440fp.rispek
/root.rispek
/root32.rispek
/sh.rispek
/sh4.rispek
/sparc.rispek
/spc.rispek
/ssh4.rispek
/x32.rispek
/x64.rispek
/x86.rispek
/x86_32.rispek
/x86_64.rispek
/rispek.arc
/rispek.arm
/rispek.arm4
/rispek.arm4l
/rispek.arm4t
/rispek.arm4tl
/rispek.arm4tll
/rispek.arm5
/rispek.arm5l
/rispek.arm5n
/rispek.arm6
/rispek.arm64
/rispek.arm6l
/rispek.arm7
/rispek.arm7l
/rispek.arm8
/rispek.armv4
/rispek.armv4l
/rispek.armv5l
/rispek.armv6
/rispek.armv61
/rispek.armv6l
/rispek.armv7l
/rispek.dbg
/rispek.exploit
/rispek.i4
/rispek.i486
/rispek.i586
/rispek.i6
/rispek.i686
/rispek.kill
/rispek.m68
/rispek.m68k
/rispek.mips
/rispek.mips64
/rispek.mipsel
/rispek.mpsl
/rispek.pcc
/rispek.powerpc
/rispek.powerpc-440fp
/rispek.powerppc
/rispek.ppc
/rispek.ppc2
/rispek.ppc440
/rispek.ppc440fp
/rispek.root
/rispek.root32
/rispek.sh
/rispek.sh4
/rispek.sparc
/rispek.spc
/rispek.ssh4
/rispek.x32
/rispek.x64
/rispek.x86
/rispek.x86_32
/rispek.x86_64
/muck.sh

# Reference: https://twitter.com/bad_packets/status/1245063093463347200
# Reference: https://www.virustotal.com/gui/domain/hoaxcalls.pw/relations
# Reference: https://www.virustotal.com/gui/ip-address/178.32.148.5/relations
# Reference: https://unit42.paloaltonetworks.com/new-hoaxcalls-ddos-botnet/

178.32.148.5:1337
18.185.109.135:1337
hoaxcalls.pw
/arc.polaris
/arm.polaris
/arm4.polaris
/arm4l.polaris
/arm4t.polaris
/arm4tl.polaris
/arm4tll.polaris
/arm5.polaris
/arm5l.polaris
/arm5n.polaris
/arm6.polaris
/arm64.polaris
/arm6l.polaris
/arm7.polaris
/arm7l.polaris
/arm8.polaris
/armv4.polaris
/armv4l.polaris
/armv5l.polaris
/armv6.polaris
/armv61.polaris
/armv6l.polaris
/armv7l.polaris
/dbg.polaris
/exploit.polaris
/i4.polaris
/i486.polaris
/i586.polaris
/i6.polaris
/i686.polaris
/kill.polaris
/m68.polaris
/m68k.polaris
/mips.polaris
/mips64.polaris
/mipsel.polaris
/mpsl.polaris
/pcc.polaris
/powerpc-440fp.polaris
/powerpc.polaris
/powerppc.polaris
/ppc.polaris
/ppc2.polaris
/ppc440.polaris
/ppc440fp.polaris
/root.polaris
/root32.polaris
/sh.polaris
/sh4.polaris
/sparc.polaris
/spc.polaris
/ssh4.polaris
/x32.polaris
/x64.polaris
/x86.polaris
/x86_32.polaris
/x86_64.polaris
/polaris.arc
/polaris.arm
/polaris.arm4
/polaris.arm4l
/polaris.arm4t
/polaris.arm4tl
/polaris.arm4tll
/polaris.arm5
/polaris.arm5l
/polaris.arm5n
/polaris.arm6
/polaris.arm64
/polaris.arm6l
/polaris.arm7
/polaris.arm7l
/polaris.arm8
/polaris.armv4
/polaris.armv4l
/polaris.armv5l
/polaris.armv6
/polaris.armv61
/polaris.armv6l
/polaris.armv7l
/polaris.dbg
/polaris.exploit
/polaris.i4
/polaris.i486
/polaris.i586
/polaris.i6
/polaris.i686
/polaris.kill
/polaris.m68
/polaris.m68k
/polaris.mips
/polaris.mips64
/polaris.mipsel
/polaris.mpsl
/polaris.pcc
/polaris.powerpc
/polaris.powerpc-440fp
/polaris.powerppc
/polaris.ppc
/polaris.ppc2
/polaris.ppc440
/polaris.ppc440fp
/polaris.root
/polaris.root32
/polaris.sh
/polaris.sh4
/polaris.sparc
/polaris.spc
/polaris.ssh4
/polaris.x32
/polaris.x64
/polaris.x86
/polaris.x86_32
/polaris.x86_64

# Reference: https://www.virustotal.com/gui/ip-address/164.132.92.168/relations

http://164.132.92.168
164.132.92.168:6479
ip168.ip-164-132-92.eu
/arc.viktor
/arm.viktor
/arm4.viktor
/arm4l.viktor
/arm4t.viktor
/arm4tl.viktor
/arm4tll.viktor
/arm5.viktor
/arm5l.viktor
/arm5n.viktor
/arm6.viktor
/arm64.viktor
/arm6l.viktor
/arm7.viktor
/arm7l.viktor
/arm8.viktor
/armv4.viktor
/armv4l.viktor
/armv5l.viktor
/armv6.viktor
/armv61.viktor
/armv6l.viktor
/armv7l.viktor
/dbg.viktor
/exploit.viktor
/i4.viktor
/i486.viktor
/i586.viktor
/i6.viktor
/i686.viktor
/kill.viktor
/m68.viktor
/m68k.viktor
/mips.viktor
/mips64.viktor
/mipsel.viktor
/mpsl.viktor
/pcc.viktor
/powerpc-440fp.viktor
/powerpc.viktor
/powerppc.viktor
/ppc.viktor
/ppc2.viktor
/ppc440.viktor
/ppc440fp.viktor
/root.viktor
/root32.viktor
/sh.viktor
/sh4.viktor
/sparc.viktor
/spc.viktor
/ssh4.viktor
/x32.viktor
/x64.viktor
/x86.viktor
/x86_32.viktor
/x86_64.viktor
/viktor.arc
/viktor.arm
/viktor.arm4
/viktor.arm4l
/viktor.arm4t
/viktor.arm4tl
/viktor.arm4tll
/viktor.arm5
/viktor.arm5l
/viktor.arm5n
/viktor.arm6
/viktor.arm64
/viktor.arm6l
/viktor.arm7
/viktor.arm7l
/viktor.arm8
/viktor.armv4
/viktor.armv4l
/viktor.armv5l
/viktor.armv6
/viktor.armv61
/viktor.armv6l
/viktor.armv7l
/viktor.dbg
/viktor.exploit
/viktor.i4
/viktor.i486
/viktor.i586
/viktor.i6
/viktor.i686
/viktor.kill
/viktor.m68
/viktor.m68k
/viktor.mips
/viktor.mips64
/viktor.mipsel
/viktor.mpsl
/viktor.pcc
/viktor.powerpc
/viktor.powerpc-440fp
/viktor.powerppc
/viktor.ppc
/viktor.ppc2
/viktor.ppc440
/viktor.ppc440fp
/viktor.root
/viktor.root32
/viktor.sh
/viktor.sh4
/viktor.sparc
/viktor.spc
/viktor.ssh4
/viktor.x32
/viktor.x64
/viktor.x86
/viktor.x86_32
/viktor.x86_64

# Reference: https://twitter.com/makflwana/status/1247443970298281986

/botnet.xtensa
/xtensa.botnet

# Reference: https://www.bitdefender.com/files/News/CaseStudies/study/319/Bitdefender-PR-Whitepaper-DarkNexus-creat4349-en-EN-interactive.pdf
# Reference: https://otx.alienvault.com/pulse/5e8e02757be85bbebeeaf137

190.115.18.144:13000
thiccnigga.me

# Reference: https://twitter.com/0xrb/status/1251500117892329472

/arc.asdfghjkl
/arm.asdfghjkl
/arm4.asdfghjkl
/arm4l.asdfghjkl
/arm4t.asdfghjkl
/arm4tl.asdfghjkl
/arm4tll.asdfghjkl
/arm5.asdfghjkl
/arm5l.asdfghjkl
/arm5n.asdfghjkl
/arm6.asdfghjkl
/arm64.asdfghjkl
/arm6l.asdfghjkl
/arm7.asdfghjkl
/arm7l.asdfghjkl
/arm8.asdfghjkl
/armv4.asdfghjkl
/armv4l.asdfghjkl
/armv5l.asdfghjkl
/armv6.asdfghjkl
/armv61.asdfghjkl
/armv6l.asdfghjkl
/armv7l.asdfghjkl
/dbg.asdfghjkl
/exploit.asdfghjkl
/i4.asdfghjkl
/i486.asdfghjkl
/i586.asdfghjkl
/i6.asdfghjkl
/i686.asdfghjkl
/kill.asdfghjkl
/m68.asdfghjkl
/m68k.asdfghjkl
/mips.asdfghjkl
/mips64.asdfghjkl
/mipsel.asdfghjkl
/mpsl.asdfghjkl
/pcc.asdfghjkl
/powerpc-440fp.asdfghjkl
/powerpc.asdfghjkl
/powerppc.asdfghjkl
/ppc.asdfghjkl
/ppc2.asdfghjkl
/ppc440.asdfghjkl
/ppc440fp.asdfghjkl
/root.asdfghjkl
/root32.asdfghjkl
/sh.asdfghjkl
/sh4.asdfghjkl
/sparc.asdfghjkl
/spc.asdfghjkl
/ssh4.asdfghjkl
/x32.asdfghjkl
/x64.asdfghjkl
/x86.asdfghjkl
/x86_32.asdfghjkl
/x86_64.asdfghjkl
/asdfghjkl.arc
/asdfghjkl.arm
/asdfghjkl.arm4
/asdfghjkl.arm4l
/asdfghjkl.arm4t
/asdfghjkl.arm4tl
/asdfghjkl.arm4tll
/asdfghjkl.arm5
/asdfghjkl.arm5l
/asdfghjkl.arm5n
/asdfghjkl.arm6
/asdfghjkl.arm64
/asdfghjkl.arm6l
/asdfghjkl.arm7
/asdfghjkl.arm7l
/asdfghjkl.arm8
/asdfghjkl.armv4
/asdfghjkl.armv4l
/asdfghjkl.armv5l
/asdfghjkl.armv6
/asdfghjkl.armv61
/asdfghjkl.armv6l
/asdfghjkl.armv7l
/asdfghjkl.dbg
/asdfghjkl.exploit
/asdfghjkl.i4
/asdfghjkl.i486
/asdfghjkl.i586
/asdfghjkl.i6
/asdfghjkl.i686
/asdfghjkl.kill
/asdfghjkl.m68
/asdfghjkl.m68k
/asdfghjkl.mips
/asdfghjkl.mips64
/asdfghjkl.mipsel
/asdfghjkl.mpsl
/asdfghjkl.pcc
/asdfghjkl.powerpc
/asdfghjkl.powerpc-440fp
/asdfghjkl.powerppc
/asdfghjkl.ppc
/asdfghjkl.ppc2
/asdfghjkl.ppc440
/asdfghjkl.ppc440fp
/asdfghjkl.root
/asdfghjkl.root32
/asdfghjkl.sh
/asdfghjkl.sh4
/asdfghjkl.sparc
/asdfghjkl.spc
/asdfghjkl.ssh4
/asdfghjkl.x32
/asdfghjkl.x64
/asdfghjkl.x86
/asdfghjkl.x86_32
/asdfghjkl.x86_64
/arc.Faithful
/arm.Faithful
/arm4.Faithful
/arm4l.Faithful
/arm4t.Faithful
/arm4tl.Faithful
/arm4tll.Faithful
/arm5.Faithful
/arm5l.Faithful
/arm5n.Faithful
/arm6.Faithful
/arm64.Faithful
/arm6l.Faithful
/arm7.Faithful
/arm7l.Faithful
/arm8.Faithful
/armv4.Faithful
/armv4l.Faithful
/armv5l.Faithful
/armv6.Faithful
/armv61.Faithful
/armv6l.Faithful
/armv7l.Faithful
/dbg.Faithful
/exploit.Faithful
/i4.Faithful
/i486.Faithful
/i586.Faithful
/i6.Faithful
/i686.Faithful
/kill.Faithful
/m68.Faithful
/m68k.Faithful
/mips.Faithful
/mips64.Faithful
/mipsel.Faithful
/mpsl.Faithful
/pcc.Faithful
/powerpc-440fp.Faithful
/powerpc.Faithful
/powerppc.Faithful
/ppc.Faithful
/ppc2.Faithful
/ppc440.Faithful
/ppc440fp.Faithful
/root.Faithful
/root32.Faithful
/sh.Faithful
/sh4.Faithful
/sparc.Faithful
/spc.Faithful
/ssh4.Faithful
/x32.Faithful
/x64.Faithful
/x86.Faithful
/x86_32.Faithful
/x86_64.Faithful
/Faithful.arc
/Faithful.arm
/Faithful.arm4
/Faithful.arm4l
/Faithful.arm4t
/Faithful.arm4tl
/Faithful.arm4tll
/Faithful.arm5
/Faithful.arm5l
/Faithful.arm5n
/Faithful.arm6
/Faithful.arm64
/Faithful.arm6l
/Faithful.arm7
/Faithful.arm7l
/Faithful.arm8
/Faithful.armv4
/Faithful.armv4l
/Faithful.armv5l
/Faithful.armv6
/Faithful.armv61
/Faithful.armv6l
/Faithful.armv7l
/Faithful.dbg
/Faithful.exploit
/Faithful.i4
/Faithful.i486
/Faithful.i586
/Faithful.i6
/Faithful.i686
/Faithful.kill
/Faithful.m68
/Faithful.m68k
/Faithful.mips
/Faithful.mips64
/Faithful.mipsel
/Faithful.mpsl
/Faithful.pcc
/Faithful.powerpc
/Faithful.powerpc-440fp
/Faithful.powerppc
/Faithful.ppc
/Faithful.ppc2
/Faithful.ppc440
/Faithful.ppc440fp
/Faithful.root
/Faithful.root32
/Faithful.sh
/Faithful.sh4
/Faithful.sparc
/Faithful.spc
/Faithful.ssh4
/Faithful.x32
/Faithful.x64
/Faithful.x86
/Faithful.x86_32
/Faithful.x86_64
/arc.gucci
/arm.gucci
/arm4.gucci
/arm4l.gucci
/arm4t.gucci
/arm4tl.gucci
/arm4tll.gucci
/arm5.gucci
/arm5l.gucci
/arm5n.gucci
/arm6.gucci
/arm64.gucci
/arm6l.gucci
/arm7.gucci
/arm7l.gucci
/arm8.gucci
/armv4.gucci
/armv4l.gucci
/armv5l.gucci
/armv6.gucci
/armv61.gucci
/armv6l.gucci
/armv7l.gucci
/dbg.gucci
/exploit.gucci
/i4.gucci
/i486.gucci
/i586.gucci
/i6.gucci
/i686.gucci
/kill.gucci
/m68.gucci
/m68k.gucci
/mips.gucci
/mips64.gucci
/mipsel.gucci
/mpsl.gucci
/pcc.gucci
/powerpc-440fp.gucci
/powerpc.gucci
/powerppc.gucci
/ppc.gucci
/ppc2.gucci
/ppc440.gucci
/ppc440fp.gucci
/root.gucci
/root32.gucci
/sh.gucci
/sh4.gucci
/sparc.gucci
/spc.gucci
/ssh4.gucci
/x32.gucci
/x64.gucci
/x86.gucci
/x86_32.gucci
/x86_64.gucci
/gucci.arc
/gucci.arm
/gucci.arm4
/gucci.arm4l
/gucci.arm4t
/gucci.arm4tl
/gucci.arm4tll
/gucci.arm5
/gucci.arm5l
/gucci.arm5n
/gucci.arm6
/gucci.arm64
/gucci.arm6l
/gucci.arm7
/gucci.arm7l
/gucci.arm8
/gucci.armv4
/gucci.armv4l
/gucci.armv5l
/gucci.armv6
/gucci.armv61
/gucci.armv6l
/gucci.armv7l
/gucci.dbg
/gucci.exploit
/gucci.i4
/gucci.i486
/gucci.i586
/gucci.i6
/gucci.i686
/gucci.kill
/gucci.m68
/gucci.m68k
/gucci.mips
/gucci.mips64
/gucci.mipsel
/gucci.mpsl
/gucci.pcc
/gucci.powerpc
/gucci.powerpc-440fp
/gucci.powerppc
/gucci.ppc
/gucci.ppc2
/gucci.ppc440
/gucci.ppc440fp
/gucci.root
/gucci.root32
/gucci.sh
/gucci.sh4
/gucci.sparc
/gucci.spc
/gucci.ssh4
/gucci.x32
/gucci.x64
/gucci.x86
/gucci.x86_32
/gucci.x86_64
/arc.whoareyou
/arm.whoareyou
/arm4.whoareyou
/arm4l.whoareyou
/arm4t.whoareyou
/arm4tl.whoareyou
/arm4tll.whoareyou
/arm5.whoareyou
/arm5l.whoareyou
/arm5n.whoareyou
/arm6.whoareyou
/arm64.whoareyou
/arm6l.whoareyou
/arm7.whoareyou
/arm7l.whoareyou
/arm8.whoareyou
/armv4.whoareyou
/armv4l.whoareyou
/armv5l.whoareyou
/armv6.whoareyou
/armv61.whoareyou
/armv6l.whoareyou
/armv7l.whoareyou
/dbg.whoareyou
/exploit.whoareyou
/i4.whoareyou
/i486.whoareyou
/i586.whoareyou
/i6.whoareyou
/i686.whoareyou
/kill.whoareyou
/m68.whoareyou
/m68k.whoareyou
/mips.whoareyou
/mips64.whoareyou
/mipsel.whoareyou
/mpsl.whoareyou
/pcc.whoareyou
/powerpc-440fp.whoareyou
/powerpc.whoareyou
/powerppc.whoareyou
/ppc.whoareyou
/ppc2.whoareyou
/ppc440.whoareyou
/ppc440fp.whoareyou
/root.whoareyou
/root32.whoareyou
/sh.whoareyou
/sh4.whoareyou
/sparc.whoareyou
/spc.whoareyou
/ssh4.whoareyou
/x32.whoareyou
/x64.whoareyou
/x86.whoareyou
/x86_32.whoareyou
/x86_64.whoareyou
/whoareyou.arc
/whoareyou.arm
/whoareyou.arm4
/whoareyou.arm4l
/whoareyou.arm4t
/whoareyou.arm4tl
/whoareyou.arm4tll
/whoareyou.arm5
/whoareyou.arm5l
/whoareyou.arm5n
/whoareyou.arm6
/whoareyou.arm64
/whoareyou.arm6l
/whoareyou.arm7
/whoareyou.arm7l
/whoareyou.arm8
/whoareyou.armv4
/whoareyou.armv4l
/whoareyou.armv5l
/whoareyou.armv6
/whoareyou.armv61
/whoareyou.armv6l
/whoareyou.armv7l
/whoareyou.dbg
/whoareyou.exploit
/whoareyou.i4
/whoareyou.i486
/whoareyou.i586
/whoareyou.i6
/whoareyou.i686
/whoareyou.kill
/whoareyou.m68
/whoareyou.m68k
/whoareyou.mips
/whoareyou.mips64
/whoareyou.mipsel
/whoareyou.mpsl
/whoareyou.pcc
/whoareyou.powerpc
/whoareyou.powerpc-440fp
/whoareyou.powerppc
/whoareyou.ppc
/whoareyou.ppc2
/whoareyou.ppc440
/whoareyou.ppc440fp
/whoareyou.root
/whoareyou.root32
/whoareyou.sh
/whoareyou.sh4
/whoareyou.sparc
/whoareyou.spc
/whoareyou.ssh4
/whoareyou.x32
/whoareyou.x64
/whoareyou.x86
/whoareyou.x86_32
/whoareyou.x86_64
/arc.malware
/arm.malware
/arm4.malware
/arm4l.malware
/arm4t.malware
/arm4tl.malware
/arm4tll.malware
/arm5.malware
/arm5l.malware
/arm5n.malware
/arm6.malware
/arm64.malware
/arm6l.malware
/arm7.malware
/arm7l.malware
/arm8.malware
/armv4.malware
/armv4l.malware
/armv5l.malware
/armv6.malware
/armv61.malware
/armv6l.malware
/armv7l.malware
/dbg.malware
/exploit.malware
/i4.malware
/i486.malware
/i586.malware
/i6.malware
/i686.malware
/kill.malware
/m68.malware
/m68k.malware
/mips.malware
/mips64.malware
/mipsel.malware
/mpsl.malware
/pcc.malware
/powerpc-440fp.malware
/powerpc.malware
/powerppc.malware
/ppc.malware
/ppc2.malware
/ppc440.malware
/ppc440fp.malware
/root.malware
/root32.malware
/sh.malware
/sh4.malware
/sparc.malware
/spc.malware
/ssh4.malware
/x32.malware
/x64.malware
/x86.malware
/x86_32.malware
/x86_64.malware
/malware.arc
/malware.arm
/malware.arm4
/malware.arm4l
/malware.arm4t
/malware.arm4tl
/malware.arm4tll
/malware.arm5
/malware.arm5l
/malware.arm5n
/malware.arm6
/malware.arm64
/malware.arm6l
/malware.arm7
/malware.arm7l
/malware.arm8
/malware.armv4
/malware.armv4l
/malware.armv5l
/malware.armv6
/malware.armv61
/malware.armv6l
/malware.armv7l
/malware.dbg
/malware.exploit
/malware.i4
/malware.i486
/malware.i586
/malware.i6
/malware.i686
/malware.kill
/malware.m68
/malware.m68k
/malware.mips
/malware.mips64
/malware.mipsel
/malware.mpsl
/malware.pcc
/malware.powerpc
/malware.powerpc-440fp
/malware.powerppc
/malware.ppc
/malware.ppc2
/malware.ppc440
/malware.ppc440fp
/malware.root
/malware.root32
/malware.sh
/malware.sh4
/malware.sparc
/malware.spc
/malware.ssh4
/malware.x32
/malware.x64
/malware.x86
/malware.x86_32
/malware.x86_64
/AB4g5/
/ABCDEFGHIJKLMNOPQRSTUVWXYZ/
/awiotiwhiogoihahogahoi/
/beastmode/
/dirdir000/
/Faith_Bins/
/kc-botnet/
/lmaoWTF/

# Reference: https://twitter.com/bad_packets/status/1251993553238032384

/arc.more
/arm.more
/arm4.more
/arm4l.more
/arm4t.more
/arm4tl.more
/arm4tll.more
/arm5.more
/arm5l.more
/arm5n.more
/arm6.more
/arm64.more
/arm6l.more
/arm7.more
/arm7l.more
/arm8.more
/armv4.more
/armv4l.more
/armv5l.more
/armv6.more
/armv61.more
/armv6l.more
/armv7l.more
/dbg.more
/exploit.more
/i4.more
/i486.more
/i586.more
/i6.more
/i686.more
/kill.more
/m68.more
/m68k.more
/mips.more
/mips64.more
/mipsel.more
/mpsl.more
/pcc.more
/powerpc-440fp.more
/powerpc.more
/powerppc.more
/ppc.more
/ppc2.more
/ppc440.more
/ppc440fp.more
/root.more
/root32.more
/sh.more
/sh4.more
/sparc.more
/spc.more
/ssh4.more
/x32.more
/x64.more
/x86.more
/x86_32.more
/x86_64.more
/more.arc
/more.arm
/more.arm4
/more.arm4l
/more.arm4t
/more.arm4tl
/more.arm4tll
/more.arm5
/more.arm5l
/more.arm5n
/more.arm6
/more.arm64
/more.arm6l
/more.arm7
/more.arm7l
/more.arm8
/more.armv4
/more.armv4l
/more.armv5l
/more.armv6
/more.armv61
/more.armv6l
/more.armv7l
/more.dbg
/more.exploit
/more.i4
/more.i486
/more.i586
/more.i6
/more.i686
/more.kill
/more.m68
/more.m68k
/more.mips
/more.mips64
/more.mipsel
/more.mpsl
/more.pcc
/more.powerpc
/more.powerpc-440fp
/more.powerppc
/more.ppc
/more.ppc2
/more.ppc440
/more.ppc440fp
/more.root
/more.root32
/more.sh
/more.sh4
/more.sparc
/more.spc
/more.ssh4
/more.x32
/more.x64
/more.x86
/more.x86_32
/more.x86_64

# Reference: https://twitter.com/JayTHL/status/1252236963857354760

/Pandoras_Box/
/zehir/
/botz
/arc.anarchy
/arm.anarchy
/arm4.anarchy
/arm4l.anarchy
/arm4t.anarchy
/arm4tl.anarchy
/arm4tll.anarchy
/arm5.anarchy
/arm5l.anarchy
/arm5n.anarchy
/arm6.anarchy
/arm64.anarchy
/arm6l.anarchy
/arm7.anarchy
/arm7l.anarchy
/arm8.anarchy
/armv4.anarchy
/armv4l.anarchy
/armv5l.anarchy
/armv6.anarchy
/armv61.anarchy
/armv6l.anarchy
/armv7l.anarchy
/dbg.anarchy
/exploit.anarchy
/i4.anarchy
/i486.anarchy
/i586.anarchy
/i6.anarchy
/i686.anarchy
/kill.anarchy
/m68.anarchy
/m68k.anarchy
/mips.anarchy
/mips64.anarchy
/mipsel.anarchy
/mpsl.anarchy
/pcc.anarchy
/powerpc-440fp.anarchy
/powerpc.anarchy
/powerppc.anarchy
/ppc.anarchy
/ppc2.anarchy
/ppc440.anarchy
/ppc440fp.anarchy
/root.anarchy
/root32.anarchy
/sh.anarchy
/sh4.anarchy
/sparc.anarchy
/spc.anarchy
/ssh4.anarchy
/x32.anarchy
/x64.anarchy
/x86.anarchy
/x86_32.anarchy
/x86_64.anarchy
/anarchy.arc
/anarchy.arm
/anarchy.arm4
/anarchy.arm4l
/anarchy.arm4t
/anarchy.arm4tl
/anarchy.arm4tll
/anarchy.arm5
/anarchy.arm5l
/anarchy.arm5n
/anarchy.arm6
/anarchy.arm64
/anarchy.arm6l
/anarchy.arm7
/anarchy.arm7l
/anarchy.arm8
/anarchy.armv4
/anarchy.armv4l
/anarchy.armv5l
/anarchy.armv6
/anarchy.armv61
/anarchy.armv6l
/anarchy.armv7l
/anarchy.dbg
/anarchy.exploit
/anarchy.i4
/anarchy.i486
/anarchy.i586
/anarchy.i6
/anarchy.i686
/anarchy.kill
/anarchy.m68
/anarchy.m68k
/anarchy.mips
/anarchy.mips64
/anarchy.mipsel
/anarchy.mpsl
/anarchy.pcc
/anarchy.powerpc
/anarchy.powerpc-440fp
/anarchy.powerppc
/anarchy.ppc
/anarchy.ppc2
/anarchy.ppc440
/anarchy.ppc440fp
/anarchy.root
/anarchy.root32
/anarchy.sh
/anarchy.sh4
/anarchy.sparc
/anarchy.spc
/anarchy.ssh4
/anarchy.x32
/anarchy.x64
/anarchy.x86
/anarchy.x86_32
/anarchy.x86_64
/arc.leon
/arm.leon
/arm4.leon
/arm4l.leon
/arm4t.leon
/arm4tl.leon
/arm4tll.leon
/arm5.leon
/arm5l.leon
/arm5n.leon
/arm6.leon
/arm64.leon
/arm6l.leon
/arm7.leon
/arm7l.leon
/arm8.leon
/armv4.leon
/armv4l.leon
/armv5l.leon
/armv6.leon
/armv61.leon
/armv6l.leon
/armv7l.leon
/dbg.leon
/exploit.leon
/i4.leon
/i486.leon
/i586.leon
/i6.leon
/i686.leon
/kill.leon
/m68.leon
/m68k.leon
/mips.leon
/mips64.leon
/mipsel.leon
/mpsl.leon
/pcc.leon
/powerpc-440fp.leon
/powerpc.leon
/powerppc.leon
/ppc.leon
/ppc2.leon
/ppc440.leon
/ppc440fp.leon
/root.leon
/root32.leon
/sh.leon
/sh4.leon
/sparc.leon
/spc.leon
/ssh4.leon
/x32.leon
/x64.leon
/x86.leon
/x86_32.leon
/x86_64.leon
/leon.arc
/leon.arm
/leon.arm4
/leon.arm4l
/leon.arm4t
/leon.arm4tl
/leon.arm4tll
/leon.arm5
/leon.arm5l
/leon.arm5n
/leon.arm6
/leon.arm64
/leon.arm6l
/leon.arm7
/leon.arm7l
/leon.arm8
/leon.armv4
/leon.armv4l
/leon.armv5l
/leon.armv6
/leon.armv61
/leon.armv6l
/leon.armv7l
/leon.dbg
/leon.exploit
/leon.i4
/leon.i486
/leon.i586
/leon.i6
/leon.i686
/leon.kill
/leon.m68
/leon.m68k
/leon.mips
/leon.mips64
/leon.mipsel
/leon.mpsl
/leon.pcc
/leon.powerpc
/leon.powerpc-440fp
/leon.powerppc
/leon.ppc
/leon.ppc2
/leon.ppc440
/leon.ppc440fp
/leon.root
/leon.root32
/leon.sh
/leon.sh4
/leon.sparc
/leon.spc
/leon.ssh4
/leon.x32
/leon.x64
/leon.x86
/leon.x86_32
/leon.x86_64
/arc.systemUpdate
/arm.systemUpdate
/arm4.systemUpdate
/arm4l.systemUpdate
/arm4t.systemUpdate
/arm4tl.systemUpdate
/arm4tll.systemUpdate
/arm5.systemUpdate
/arm5l.systemUpdate
/arm5n.systemUpdate
/arm6.systemUpdate
/arm64.systemUpdate
/arm6l.systemUpdate
/arm7.systemUpdate
/arm7l.systemUpdate
/arm8.systemUpdate
/armv4.systemUpdate
/armv4l.systemUpdate
/armv5l.systemUpdate
/armv6.systemUpdate
/armv61.systemUpdate
/armv6l.systemUpdate
/armv7l.systemUpdate
/dbg.systemUpdate
/exploit.systemUpdate
/i4.systemUpdate
/i486.systemUpdate
/i586.systemUpdate
/i6.systemUpdate
/i686.systemUpdate
/kill.systemUpdate
/m68.systemUpdate
/m68k.systemUpdate
/mips.systemUpdate
/mips64.systemUpdate
/mipsel.systemUpdate
/mpsl.systemUpdate
/pcc.systemUpdate
/powerpc-440fp.systemUpdate
/powerpc.systemUpdate
/powerppc.systemUpdate
/ppc.systemUpdate
/ppc2.systemUpdate
/ppc440.systemUpdate
/ppc440fp.systemUpdate
/root.systemUpdate
/root32.systemUpdate
/sh.systemUpdate
/sh4.systemUpdate
/sparc.systemUpdate
/spc.systemUpdate
/ssh4.systemUpdate
/x32.systemUpdate
/x64.systemUpdate
/x86.systemUpdate
/x86_32.systemUpdate
/x86_64.systemUpdate
/systemUpdate.arc
/systemUpdate.arm
/systemUpdate.arm4
/systemUpdate.arm4l
/systemUpdate.arm4t
/systemUpdate.arm4tl
/systemUpdate.arm4tll
/systemUpdate.arm5
/systemUpdate.arm5l
/systemUpdate.arm5n
/systemUpdate.arm6
/systemUpdate.arm64
/systemUpdate.arm6l
/systemUpdate.arm7
/systemUpdate.arm7l
/systemUpdate.arm8
/systemUpdate.armv4
/systemUpdate.armv4l
/systemUpdate.armv5l
/systemUpdate.armv6
/systemUpdate.armv61
/systemUpdate.armv6l
/systemUpdate.armv7l
/systemUpdate.dbg
/systemUpdate.exploit
/systemUpdate.i4
/systemUpdate.i486
/systemUpdate.i586
/systemUpdate.i6
/systemUpdate.i686
/systemUpdate.kill
/systemUpdate.m68
/systemUpdate.m68k
/systemUpdate.mips
/systemUpdate.mips64
/systemUpdate.mipsel
/systemUpdate.mpsl
/systemUpdate.pcc
/systemUpdate.powerpc
/systemUpdate.powerpc-440fp
/systemUpdate.powerppc
/systemUpdate.ppc
/systemUpdate.ppc2
/systemUpdate.ppc440
/systemUpdate.ppc440fp
/systemUpdate.root
/systemUpdate.root32
/systemUpdate.sh
/systemUpdate.sh4
/systemUpdate.sparc
/systemUpdate.spc
/systemUpdate.ssh4
/systemUpdate.x32
/systemUpdate.x64
/systemUpdate.x86
/systemUpdate.x86_32
/systemUpdate.x86_64

# Reference: https://twitter.com/0xrb/status/1252309205425385474

/arc.Slsmodsd
/arm.Slsmodsd
/arm4.Slsmodsd
/arm4l.Slsmodsd
/arm4t.Slsmodsd
/arm4tl.Slsmodsd
/arm4tll.Slsmodsd
/arm5.Slsmodsd
/arm5l.Slsmodsd
/arm5n.Slsmodsd
/arm6.Slsmodsd
/arm64.Slsmodsd
/arm6l.Slsmodsd
/arm7.Slsmodsd
/arm7l.Slsmodsd
/arm8.Slsmodsd
/armv4.Slsmodsd
/armv4l.Slsmodsd
/armv5l.Slsmodsd
/armv6.Slsmodsd
/armv61.Slsmodsd
/armv6l.Slsmodsd
/armv7l.Slsmodsd
/dbg.Slsmodsd
/exploit.Slsmodsd
/i4.Slsmodsd
/i486.Slsmodsd
/i586.Slsmodsd
/i6.Slsmodsd
/i686.Slsmodsd
/kill.Slsmodsd
/m68.Slsmodsd
/m68k.Slsmodsd
/mips.Slsmodsd
/mips64.Slsmodsd
/mipsel.Slsmodsd
/mpsl.Slsmodsd
/pcc.Slsmodsd
/powerpc-440fp.Slsmodsd
/powerpc.Slsmodsd
/powerppc.Slsmodsd
/ppc.Slsmodsd
/ppc2.Slsmodsd
/ppc440.Slsmodsd
/ppc440fp.Slsmodsd
/root.Slsmodsd
/root32.Slsmodsd
/sh.Slsmodsd
/sh4.Slsmodsd
/sparc.Slsmodsd
/spc.Slsmodsd
/ssh4.Slsmodsd
/x32.Slsmodsd
/x64.Slsmodsd
/x86.Slsmodsd
/x86_32.Slsmodsd
/x86_64.Slsmodsd
/Slsmodsd.arc
/Slsmodsd.arm
/Slsmodsd.arm4
/Slsmodsd.arm4l
/Slsmodsd.arm4t
/Slsmodsd.arm4tl
/Slsmodsd.arm4tll
/Slsmodsd.arm5
/Slsmodsd.arm5l
/Slsmodsd.arm5n
/Slsmodsd.arm6
/Slsmodsd.arm64
/Slsmodsd.arm6l
/Slsmodsd.arm7
/Slsmodsd.arm7l
/Slsmodsd.arm8
/Slsmodsd.armv4
/Slsmodsd.armv4l
/Slsmodsd.armv5l
/Slsmodsd.armv6
/Slsmodsd.armv61
/Slsmodsd.armv6l
/Slsmodsd.armv7l
/Slsmodsd.dbg
/Slsmodsd.exploit
/Slsmodsd.i4
/Slsmodsd.i486
/Slsmodsd.i586
/Slsmodsd.i6
/Slsmodsd.i686
/Slsmodsd.kill
/Slsmodsd.m68
/Slsmodsd.m68k
/Slsmodsd.mips
/Slsmodsd.mips64
/Slsmodsd.mipsel
/Slsmodsd.mpsl
/Slsmodsd.pcc
/Slsmodsd.powerpc
/Slsmodsd.powerpc-440fp
/Slsmodsd.powerppc
/Slsmodsd.ppc
/Slsmodsd.ppc2
/Slsmodsd.ppc440
/Slsmodsd.ppc440fp
/Slsmodsd.root
/Slsmodsd.root32
/Slsmodsd.sh
/Slsmodsd.sh4
/Slsmodsd.sparc
/Slsmodsd.spc
/Slsmodsd.ssh4
/Slsmodsd.x32
/Slsmodsd.x64
/Slsmodsd.x86
/Slsmodsd.x86_32
/Slsmodsd.x86_64

# Reference: https://blog.netlab.360.com/the-leethozer-botnet-en/

37.49.226.171:31337
vbrxmrhrjnnouvjf.onion
w6gr2jqz3eag4ksi.onion

# Reference: https://www.virustotal.com/gui/file/ab0c24ce177af3f88944cad61048f6e441910dfab6d40fee8eabb4dc55de0661/detection

25.10.6.20:5555
25.10.6.20:54618
proxy.2u0apcm6ylhdy7s.com

# Reference: https://www.virustotal.com/gui/file/c9821c9f4277a4e35e20d794a7342d68033c1935bc0b6671f9a637a05604012e/detection

73.135.244.56:5555

# Reference: https://www.virustotal.com/gui/file/6d21a2269fdde733b4051e423af38b4d79cbe98aff518a2c0da2f17e7a315259/detection

100.206.219.177:5555
122.68.148.220:54618
122.68.148.220:5555

# Reference: https://www.virustotal.com/gui/file/cbbef96f21fc3673ec09415284720532e92f938f06211237ac727b15942c0125/detection

102.123.21.72:54618
102.123.21.72:5555
119.66.216.173:5555

# Reference: https://twitter.com/0xrb/status/1254829660573057026

192.236.161.6:1312

# Reference: https://twitter.com/bad_packets/status/1255216622605946883
# Reference: https://twitter.com/bad_packets/status/1261458827049762818

45.14.151.249:1920
45.14.151.249:3099
45.14.151.249:9090

# Reference: https://twitter.com/bad_packets/status/1227484002921041922

37.49.226.137:9375
37.49.226.137:39284

# Reference: https://twitter.com/bad_packets/status/1215763198688681984

68.183.219.115:28194
68.183.219.115:52921
/arc.IpvLye
/arm.IpvLye
/arm4.IpvLye
/arm4l.IpvLye
/arm4t.IpvLye
/arm4tl.IpvLye
/arm4tll.IpvLye
/arm5.IpvLye
/arm5l.IpvLye
/arm5n.IpvLye
/arm6.IpvLye
/arm64.IpvLye
/arm6l.IpvLye
/arm7.IpvLye
/arm7l.IpvLye
/arm8.IpvLye
/armv4.IpvLye
/armv4l.IpvLye
/armv5l.IpvLye
/armv6.IpvLye
/armv61.IpvLye
/armv6l.IpvLye
/armv7l.IpvLye
/dbg.IpvLye
/exploit.IpvLye
/i4.IpvLye
/i486.IpvLye
/i586.IpvLye
/i6.IpvLye
/i686.IpvLye
/kill.IpvLye
/m68.IpvLye
/m68k.IpvLye
/mips.IpvLye
/mips64.IpvLye
/mipsel.IpvLye
/mpsl.IpvLye
/pcc.IpvLye
/powerpc-440fp.IpvLye
/powerpc.IpvLye
/powerppc.IpvLye
/ppc.IpvLye
/ppc2.IpvLye
/ppc440.IpvLye
/ppc440fp.IpvLye
/root.IpvLye
/root32.IpvLye
/sh.IpvLye
/sh4.IpvLye
/sparc.IpvLye
/spc.IpvLye
/ssh4.IpvLye
/x32.IpvLye
/x64.IpvLye
/x86.IpvLye
/x86_32.IpvLye
/x86_64.IpvLye
/IpvLye.arc
/IpvLye.arm
/IpvLye.arm4
/IpvLye.arm4l
/IpvLye.arm4t
/IpvLye.arm4tl
/IpvLye.arm4tll
/IpvLye.arm5
/IpvLye.arm5l
/IpvLye.arm5n
/IpvLye.arm6
/IpvLye.arm64
/IpvLye.arm6l
/IpvLye.arm7
/IpvLye.arm7l
/IpvLye.arm8
/IpvLye.armv4
/IpvLye.armv4l
/IpvLye.armv5l
/IpvLye.armv6
/IpvLye.armv61
/IpvLye.armv6l
/IpvLye.armv7l
/IpvLye.dbg
/IpvLye.exploit
/IpvLye.i4
/IpvLye.i486
/IpvLye.i586
/IpvLye.i6
/IpvLye.i686
/IpvLye.kill
/IpvLye.m68
/IpvLye.m68k
/IpvLye.mips
/IpvLye.mips64
/IpvLye.mipsel
/IpvLye.mpsl
/IpvLye.pcc
/IpvLye.powerpc
/IpvLye.powerpc-440fp
/IpvLye.powerppc
/IpvLye.ppc
/IpvLye.ppc2
/IpvLye.ppc440
/IpvLye.ppc440fp
/IpvLye.root
/IpvLye.root32
/IpvLye.sh
/IpvLye.sh4
/IpvLye.sparc
/IpvLye.spc
/IpvLye.ssh4
/IpvLye.x32
/IpvLye.x64
/IpvLye.x86
/IpvLye.x86_32
/IpvLye.x86_64
/QpasYU/

# Reference: https://twitter.com/bad_packets/status/1210334931924086784

104.168.149.5:2001

# Reference: https://twitter.com/bad_packets/status/1180361965564121088

85.204.116.49:131
85.204.116.49:3143
prismware.ml

# Reference: https://twitter.com/bad_packets/status/1176352901746180101

45.95.168.161:26662
45.95.168.161:46664
45.95.168.161:56378

# Reference: https://www.virustotal.com/gui/ip-address/188.209.52.11/relations

namecheap-webmail.com
tgqbfcmfphxyq.xyz

# Reference: https://twitter.com/bad_packets/status/1166229707446050817

142.11.217.116:5301

# Reference: https://twitter.com/bad_packets/status/1155600305540587521

51.91.202.137:9999

# Reference: https://twitter.com/bad_packets/status/1154260530061725696

185.172.110.203:1024

# Reference: https://twitter.com/bad_packets/status/1154125599755005952

67.205.169.73:1791

# Reference: https://twitter.com/bad_packets/status/1153120432117055489

185.244.25.134:1791

# Reference: https://twitter.com/bad_packets/status/1152032061407940608

46.246.38.178:1791

# Reference: https://twitter.com/bad_packets/status/1151381642008649728

192.236.162.197:1791

# Reference: https://twitter.com/bad_packets/status/1147447606156517377

188.166.87.227:5301

# Reference: https://twitter.com/bad_packets/status/1146926925929074689

128.199.235.119:81

# Reference: https://twitter.com/0xrb/status/1257277263025893377

192.236.146.53:1691
211.137.225.76:53007
/arc.typpaostur
/arm.typpaostur
/arm4.typpaostur
/arm4l.typpaostur
/arm4t.typpaostur
/arm4tl.typpaostur
/arm4tll.typpaostur
/armv4.typpaostur
/armv4l.typpaostur
/arm5.typpaostur
/arm5l.typpaostur
/arm5n.typpaostur
/armv5l.typpaostur
/arm6.typpaostur
/arm6l.typpaostur
/armv6.typpaostur
/armv6l.typpaostur
/armv61.typpaostur
/arm64.typpaostur
/arm7.typpaostur
/arm7l.typpaostur
/armv7l.typpaostur
/arm8.typpaostur
/dbg.typpaostur
/exploit.typpaostur
/i4.typpaostur
/i6.typpaostur
/i486.typpaostur
/i586.typpaostur
/i686.typpaostur
/kill.typpaostur
/m68.typpaostur
/m68k.typpaostur
/mips.typpaostur
/mips64.typpaostur
/mpsl.typpaostur
/mipsel.typpaostur
/pcc.typpaostur
/ppc.typpaostur
/ppc2.typpaostur
/ppc440.typpaostur
/ppc440fp.typpaostur
/powerpc.typpaostur
/powerppc.typpaostur
/powerpc-440fp.typpaostur
/root.typpaostur
/root32.typpaostur
/sh.typpaostur
/sh4.typpaostur
/ssh4.typpaostur
/spc.typpaostur
/sparc.typpaostur
/x32.typpaostur
/x64.typpaostur
/x86.typpaostur
/x86_32.typpaostur
/x86_64.typpaostur
/typpaostur.arc
/typpaostur.arm
/typpaostur.arm4
/typpaostur.arm4l
/typpaostur.arm4t
/typpaostur.arm4tl
/typpaostur.arm4tll
/typpaostur.armv4
/typpaostur.armv4l
/typpaostur.arm5
/typpaostur.arm5l
/typpaostur.arm5n
/typpaostur.armv5l
/typpaostur.arm6
/typpaostur.arm6l
/typpaostur.arm64
/typpaostur.armv6
/typpaostur.armv6l
/typpaostur.armv61
/typpaostur.arm7
/typpaostur.arm7l
/typpaostur.armv7l
/typpaostur.arm8
/typpaostur.dbg
/typpaostur.exploit
/typpaostur.i4
/typpaostur.i6
/typpaostur.i486
/typpaostur.i586
/typpaostur.i686
/typpaostur.kill
/typpaostur.m68
/typpaostur.m68k
/typpaostur.mips
/typpaostur.mips64
/typpaostur.mpsl
/typpaostur.mipsel
/typpaostur.pcc
/typpaostur.ppc
/typpaostur.ppc2
/typpaostur.ppc440
/typpaostur.ppc440fp
/typpaostur.powerpc
/typpaostur.powerppc
/typpaostur.powerpc-440fp
/typpaostur.root
/typpaostur.root32
/typpaostur.sh
/typpaostur.sh4
/typpaostur.ssh4
/typpaostur.spc
/typpaostur.sparc
/typpaostur.x32
/typpaostur.x64
/typpaostur.x86
/typpaostur.x86_32
/typpaostur.x86_64
/as12a0s/
/itooamgay/
/swrgiuhguhwrguiwetu/

# Reference: https://twitter.com/DGAFeedAlerts/status/1257372531046191104

euviovpeqqsu.support

# Reference: https://twitter.com/DGAFeedAlerts/status/1257538858469769219

efuwlkmirpie.online

# Reference: https://twitter.com/mjbv/status/1261228371817771008
# Reference: https://www.virustotal.com/gui/domain/saoascnc.duckdns.org/relations

192.236.176.143:37215
192.236.176.143:58666
saoascnc.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b9b8a824168f96e9fbfb2d92d41d2704b0f413e5a0df637b026ec171e31694a8/detection

193.237.151.237:37215
193.237.151.237:58666

# Reference: https://www.virustotal.com/gui/file/9b62e40d0770e573eb1771d52a64ed471a9c7677f4cb4011ca6091f30f4fb038/detection

50.134.108.219:37215
50.134.108.219:58666

# Reference: https://www.virustotal.com/gui/file/7bdfe25eb983ea5d13d871c690369579b94d8615ed580ba55f0c9d07b1419916/detection 

217.32.184.17:37215
217.32.184.17:58666

# Reference: https://www.virustotal.com/gui/file/6b92ce27889a1c8caf02d61a5da9257159697cfb344f901392ef914d5d1e3228/detection

197.20.252.14:37215
197.20.252.14:58666

# Reference: https://www.virustotal.com/gui/file/e79fc3d76876524e94de9cf8090907abbb9e395aa401a9a1ed93d63200a774fd/detection

197.211.215.168:37215
197.211.215.168:58666

# Reference: https://www.virustotal.com/gui/file/d22c8793c00d104d397432a39168189a8bdedda97b6ad90f69f66dd90cc02b6f/detection

2.128.139.158:37215
2.128.139.158:58666

# Reference: https://www.virustotal.com/gui/file/bf9d9015640514ed85af83520ffa2c905626c5c15af7a7944a595916fd6d8f83/detection

124.142.175.62:37215
124.142.175.62:58666

# Reference: https://www.virustotal.com/gui/file/8c8c54043812936a13f0da1bed7fca295b98a8a88f525c98fed2c0d473064b25/detection

17.134.222.250:37215
17.134.222.250:58666

# Reference: https://www.virustotal.com/gui/file/3bc59c90a798255164669130b81019ca2726a244c30b103459709918a2dc732e/detection

142.123.244.201:37215
142.123.244.201:58666

# Reference: https://www.virustotal.com/gui/file/2c52ad0196da9dc8d484d81203bce5a85bda26868a8c810cf0e09a31cd1202b7/detection

88.181.145.203:37215
88.181.145.203:58666

# Reference: https://www.virustotal.com/gui/file/89fbdce685a0a6d63babb59339dbff0be68830e5b5b77a6221d6f4fd9a12a8dc/detection

197.220.4.203:37215
197.220.4.203:58666

# Reference: https://www.virustotal.com/gui/file/0d2d5f494b8a0f4f52923a962d23d90f19fbe82ec3020ff088862a79f54e3ef4/detection

75.216.182.106:37215
75.216.182.106:58666

# Reference: https://www.virustotal.com/gui/file/40154d33b36d2ee884f989cf70dcdbcdafd06a023bb013851eb36e9a543bae2d/detection

197.187.43.242:37215
197.187.43.242:58666

# Reference: https://www.virustotal.com/gui/file/e4abca3958055aa76f3337bdb56b6f7ac50cb24ca5f290068092f275a4da7487/detection

161.116.77.158:37215
161.116.77.158:58666

# Reference: https://www.virustotal.com/gui/file/7882e58a07cd61e9686cd69552a5021dfe7ccd3c4e5c162bc817da99cd715487/detection

136.162.221.196:37215
136.162.221.196:58666

# Reference: https://www.virustotal.com/gui/file/a61ef7d749e3d91b91d32fd4ba73dc675cccc3bacd1c153d1a1432ee78a580aa/detection

197.200.75.82:37215
197.200.75.82:58666

# Reference: https://www.virustotal.com/gui/file/e533fddd1278c8cfadaa39fe98e7ac6ff00d9ecdc979ecee27bc4c9feb95f5bd/detection

20.214.186.199:37215
20.214.186.199:58666

# Reference: https://www.virustotal.com/gui/file/fcf0871f70c5652ff6914fff74cbc8d851151230dfdfd03055010b46b5e630e5/detection

197.17.185.59:37215
197.17.185.59:58666

# Reference: https://www.virustotal.com/gui/file/7708a88aab442710759513b2e3297a93447aea770e3a6a8757517e81ba5af5d1/detection

125.42.85.48:37215
125.42.85.48:58666

# Reference: https://www.virustotal.com/gui/file/5a2563debdaeb62a18aadbc1d78f9dccc8111716d76bd8b9f95444702c75424b/detection

197.45.1.102:37215
197.45.1.102:58666

# Reference: https://www.virustotal.com/gui/file/21ab3b17239c6b152eee79ab8be1fadc140dee85887102d67b6ebb9c2109c9c1/detection

197.125.173.78:37215
197.125.173.78:58666

# Reference: https://www.virustotal.com/gui/file/ebf7bd700fb100a14a5893363ce703ad745a546c872eaf986c016eea843d1ee2/detection

209.168.243.134:37215
209.168.243.134:58666

# Reference: https://www.virustotal.com/gui/file/fce06b359367298a7e708ddd39a8ad210901438898aa06c877e23613aee00ac2/detection

201.112.67.184:37215
201.112.67.184:58666

# Reference: https://www.virustotal.com/gui/file/f76d76dc1857dbae93a59c30c3132b92f0acced1ecc8bf497463d095f1b55fc1/detection

197.142.15.17:37215
197.142.15.17:58666

# Reference: https://www.virustotal.com/gui/file/9466a43a53257f7df2e1b918353d54db9e1c1e6a2a38ba8016436529bd7744dc/detection

197.209.36.175:37215
197.209.36.175:58666

# Reference: https://www.virustotal.com/gui/file/3d5b2e46a11898537ac51c8c03aec50350119ebcfebf1e92868b007c2c8c3636/detection

59.169.193.112:37215
59.169.193.112:58666

# Reference: https://www.virustotal.com/gui/file/90caa6e2dd1307672bc462d9183d30fee42b566e870fd8928679c872d9c4414e/detection

117.113.251.250:37215
117.113.251.250:58666

# Reference: https://twitter.com/mjbv/status/1261382403341250560
# Reference: https://www.virustotal.com/gui/ip-address/185.158.249.80/relations

185.158.249.80:61214
/arc.reap
/arm.reap
/arm4.reap
/arm4l.reap
/arm4t.reap
/arm4tl.reap
/arm4tll.reap
/arm5.reap
/arm5l.reap
/arm5n.reap
/arm6.reap
/arm64.reap
/arm6l.reap
/arm7.reap
/arm7l.reap
/arm8.reap
/armv4.reap
/armv4l.reap
/armv5l.reap
/armv6.reap
/armv61.reap
/armv6l.reap
/armv7l.reap
/dbg.reap
/exploit.reap
/i4.reap
/i486.reap
/i586.reap
/i6.reap
/i686.reap
/kill.reap
/m68.reap
/m68k.reap
/mips.reap
/mips64.reap
/mipsel.reap
/mpsl.reap
/pcc.reap
/powerpc-440fp.reap
/powerpc.reap
/powerppc.reap
/ppc.reap
/ppc2.reap
/ppc440.reap
/ppc440fp.reap
/root.reap
/root32.reap
/sh.reap
/sh4.reap
/sparc.reap
/spc.reap
/ssh4.reap
/x32.reap
/x64.reap
/x86.reap
/x86_32.reap
/x86_64.reap
/reap.arc
/reap.arm
/reap.arm4
/reap.arm4l
/reap.arm4t
/reap.arm4tl
/reap.arm4tll
/reap.arm5
/reap.arm5l
/reap.arm5n
/reap.arm6
/reap.arm64
/reap.arm6l
/reap.arm7
/reap.arm7l
/reap.arm8
/reap.armv4
/reap.armv4l
/reap.armv5l
/reap.armv6
/reap.armv61
/reap.armv6l
/reap.armv7l
/reap.dbg
/reap.exploit
/reap.i4
/reap.i486
/reap.i586
/reap.i6
/reap.i686
/reap.kill
/reap.m68
/reap.m68k
/reap.mips
/reap.mips64
/reap.mipsel
/reap.mpsl
/reap.pcc
/reap.powerpc
/reap.powerpc-440fp
/reap.powerppc
/reap.ppc
/reap.ppc2
/reap.ppc440
/reap.ppc440fp
/reap.root
/reap.root32
/reap.sh
/reap.sh4
/reap.sparc
/reap.spc
/reap.ssh4
/reap.x32
/reap.x64
/reap.x86
/reap.x86_32
/reap.x86_64

# Reference: https://twitter.com/mjbv/status/1261732399748198401

45.95.168.175:58666

# Reference: https://twitter.com/mjbv/status/1262411907430076416

64.227.57.139:1791

# Reference: https://twitter.com/mjbv/status/1262419353586348033

194.147.34.79:9993

# Reference: https://twitter.com/DGAFeedAlerts/status/1262447515921723395

wowldwtcpowb.tech

# Reference: https://twitter.com/0xrb/status/1262738213472317442

/arc.infn
/arm.infn
/arm4.infn
/arm4l.infn
/arm4t.infn
/arm4tl.infn
/arm4tll.infn
/arm5.infn
/arm5l.infn
/arm5n.infn
/arm6.infn
/arm64.infn
/arm6l.infn
/arm7.infn
/arm7l.infn
/arm8.infn
/armv4.infn
/armv4l.infn
/armv5l.infn
/armv6.infn
/armv61.infn
/armv6l.infn
/armv7l.infn
/dbg.infn
/exploit.infn
/i4.infn
/i486.infn
/i586.infn
/i6.infn
/i686.infn
/kill.infn
/m68.infn
/m68k.infn
/mips.infn
/mips64.infn
/mipsel.infn
/mpsl.infn
/pcc.infn
/powerpc-440fp.infn
/powerpc.infn
/powerppc.infn
/ppc.infn
/ppc2.infn
/ppc440.infn
/ppc440fp.infn
/root.infn
/root32.infn
/sh.infn
/sh4.infn
/sparc.infn
/spc.infn
/ssh4.infn
/x32.infn
/x64.infn
/x86.infn
/x86_32.infn
/x86_64.infn
/infn.arc
/infn.arm
/infn.arm4
/infn.arm4l
/infn.arm4t
/infn.arm4tl
/infn.arm4tll
/infn.arm5
/infn.arm5l
/infn.arm5n
/infn.arm6
/infn.arm64
/infn.arm6l
/infn.arm7
/infn.arm7l
/infn.arm8
/infn.armv4
/infn.armv4l
/infn.armv5l
/infn.armv6
/infn.armv61
/infn.armv6l
/infn.armv7l
/infn.dbg
/infn.exploit
/infn.i4
/infn.i486
/infn.i586
/infn.i6
/infn.i686
/infn.kill
/infn.m68
/infn.m68k
/infn.mips
/infn.mips64
/infn.mipsel
/infn.mpsl
/infn.pcc
/infn.powerpc
/infn.powerpc-440fp
/infn.powerppc
/infn.ppc
/infn.ppc2
/infn.ppc440
/infn.ppc440fp
/infn.root
/infn.root32
/infn.sh
/infn.sh4
/infn.sparc
/infn.spc
/infn.ssh4
/infn.x32
/infn.x64
/infn.x86
/infn.x86_32
/infn.x86_64
/5311qjmikurawepedalnqmashrabotatuk61119123c/
/GbotTelnet/
/HORNY1/

# Reference: https://twitter.com/mjbv/status/1263144457265872897

45.14.224.204:34241

# Reference: https://pastebin.com/hLYWkUcD

15.164.214.61:8888
/arc.110v3107n37
/arm.110v3107n37
/arm4.110v3107n37
/arm4l.110v3107n37
/arm4t.110v3107n37
/arm4tl.110v3107n37
/arm4tll.110v3107n37
/arm5.110v3107n37
/arm5l.110v3107n37
/arm5n.110v3107n37
/arm6.110v3107n37
/arm64.110v3107n37
/arm6l.110v3107n37
/arm7.110v3107n37
/arm7l.110v3107n37
/arm8.110v3107n37
/armv4.110v3107n37
/armv4l.110v3107n37
/armv5l.110v3107n37
/armv6.110v3107n37
/armv61.110v3107n37
/armv6l.110v3107n37
/armv7l.110v3107n37
/dbg.110v3107n37
/exploit.110v3107n37
/i4.110v3107n37
/i486.110v3107n37
/i586.110v3107n37
/i6.110v3107n37
/i686.110v3107n37
/kill.110v3107n37
/m68.110v3107n37
/m68k.110v3107n37
/mips.110v3107n37
/mips64.110v3107n37
/mipsel.110v3107n37
/mpsl.110v3107n37
/pcc.110v3107n37
/powerpc-440fp.110v3107n37
/powerpc.110v3107n37
/powerppc.110v3107n37
/ppc.110v3107n37
/ppc2.110v3107n37
/ppc440.110v3107n37
/ppc440fp.110v3107n37
/root.110v3107n37
/root32.110v3107n37
/sh.110v3107n37
/sh4.110v3107n37
/sparc.110v3107n37
/spc.110v3107n37
/ssh4.110v3107n37
/x32.110v3107n37
/x64.110v3107n37
/x86.110v3107n37
/x86_32.110v3107n37
/x86_64.110v3107n37
/110v3107n37.arc
/110v3107n37.arm
/110v3107n37.arm4
/110v3107n37.arm4l
/110v3107n37.arm4t
/110v3107n37.arm4tl
/110v3107n37.arm4tll
/110v3107n37.arm5
/110v3107n37.arm5l
/110v3107n37.arm5n
/110v3107n37.arm6
/110v3107n37.arm64
/110v3107n37.arm6l
/110v3107n37.arm7
/110v3107n37.arm7l
/110v3107n37.arm8
/110v3107n37.armv4
/110v3107n37.armv4l
/110v3107n37.armv5l
/110v3107n37.armv6
/110v3107n37.armv61
/110v3107n37.armv6l
/110v3107n37.armv7l
/110v3107n37.dbg
/110v3107n37.exploit
/110v3107n37.i4
/110v3107n37.i486
/110v3107n37.i586
/110v3107n37.i6
/110v3107n37.i686
/110v3107n37.kill
/110v3107n37.m68
/110v3107n37.m68k
/110v3107n37.mips
/110v3107n37.mips64
/110v3107n37.mipsel
/110v3107n37.mpsl
/110v3107n37.pcc
/110v3107n37.powerpc
/110v3107n37.powerpc-440fp
/110v3107n37.powerppc
/110v3107n37.ppc
/110v3107n37.ppc2
/110v3107n37.ppc440
/110v3107n37.ppc440fp
/110v3107n37.root
/110v3107n37.root32
/110v3107n37.sh
/110v3107n37.sh4
/110v3107n37.sparc
/110v3107n37.spc
/110v3107n37.ssh4
/110v3107n37.x32
/110v3107n37.x64
/110v3107n37.x86
/110v3107n37.x86_32
/110v3107n37.x86_64
/arc.limit
/arm.limit
/arm4.limit
/arm4l.limit
/arm4t.limit
/arm4tl.limit
/arm4tll.limit
/arm5.limit
/arm5l.limit
/arm5n.limit
/arm6.limit
/arm64.limit
/arm6l.limit
/arm7.limit
/arm7l.limit
/arm8.limit
/armv4.limit
/armv4l.limit
/armv5l.limit
/armv6.limit
/armv61.limit
/armv6l.limit
/armv7l.limit
/dbg.limit
/exploit.limit
/i4.limit
/i486.limit
/i586.limit
/i6.limit
/i686.limit
/kill.limit
/m68.limit
/m68k.limit
/mips.limit
/mips64.limit
/mipsel.limit
/mpsl.limit
/pcc.limit
/powerpc-440fp.limit
/powerpc.limit
/powerppc.limit
/ppc.limit
/ppc2.limit
/ppc440.limit
/ppc440fp.limit
/root.limit
/root32.limit
/sh.limit
/sh4.limit
/sparc.limit
/spc.limit
/ssh4.limit
/x32.limit
/x64.limit
/x86.limit
/x86_32.limit
/x86_64.limit
/limit.arc
/limit.arm
/limit.arm4
/limit.arm4l
/limit.arm4t
/limit.arm4tl
/limit.arm4tll
/limit.arm5
/limit.arm5l
/limit.arm5n
/limit.arm6
/limit.arm64
/limit.arm6l
/limit.arm7
/limit.arm7l
/limit.arm8
/limit.armv4
/limit.armv4l
/limit.armv5l
/limit.armv6
/limit.armv61
/limit.armv6l
/limit.armv7l
/limit.dbg
/limit.exploit
/limit.i4
/limit.i486
/limit.i586
/limit.i6
/limit.i686
/limit.kill
/limit.m68
/limit.m68k
/limit.mips
/limit.mips64
/limit.mipsel
/limit.mpsl
/limit.pcc
/limit.powerpc
/limit.powerpc-440fp
/limit.powerppc
/limit.ppc
/limit.ppc2
/limit.ppc440
/limit.ppc440fp
/limit.root
/limit.root32
/limit.sh
/limit.sh4
/limit.sparc
/limit.spc
/limit.ssh4
/limit.x32
/limit.x64
/limit.x86
/limit.x86_32
/limit.x86_64
/iotbins/

# Reference: https://pastebin.com/raw/pcwTAeFY

/arc.Tnxl
/arm.Tnxl
/arm4.Tnxl
/arm4l.Tnxl
/arm4t.Tnxl
/arm4tl.Tnxl
/arm4tll.Tnxl
/arm5.Tnxl
/arm5l.Tnxl
/arm5n.Tnxl
/arm6.Tnxl
/arm64.Tnxl
/arm6l.Tnxl
/arm7.Tnxl
/arm7l.Tnxl
/arm8.Tnxl
/armv4.Tnxl
/armv4l.Tnxl
/armv5l.Tnxl
/armv6.Tnxl
/armv61.Tnxl
/armv6l.Tnxl
/armv7l.Tnxl
/dbg.Tnxl
/exploit.Tnxl
/i4.Tnxl
/i486.Tnxl
/i586.Tnxl
/i6.Tnxl
/i686.Tnxl
/kill.Tnxl
/m68.Tnxl
/m68k.Tnxl
/mips.Tnxl
/mips64.Tnxl
/mipsel.Tnxl
/mpsl.Tnxl
/pcc.Tnxl
/powerpc-440fp.Tnxl
/powerpc.Tnxl
/powerppc.Tnxl
/ppc.Tnxl
/ppc2.Tnxl
/ppc440.Tnxl
/ppc440fp.Tnxl
/root.Tnxl
/root32.Tnxl
/sh.Tnxl
/sh4.Tnxl
/sparc.Tnxl
/spc.Tnxl
/ssh4.Tnxl
/x32.Tnxl
/x64.Tnxl
/x86.Tnxl
/x86_32.Tnxl
/x86_64.Tnxl
/Tnxl.arc
/Tnxl.arm
/Tnxl.arm4
/Tnxl.arm4l
/Tnxl.arm4t
/Tnxl.arm4tl
/Tnxl.arm4tll
/Tnxl.arm5
/Tnxl.arm5l
/Tnxl.arm5n
/Tnxl.arm6
/Tnxl.arm64
/Tnxl.arm6l
/Tnxl.arm7
/Tnxl.arm7l
/Tnxl.arm8
/Tnxl.armv4
/Tnxl.armv4l
/Tnxl.armv5l
/Tnxl.armv6
/Tnxl.armv61
/Tnxl.armv6l
/Tnxl.armv7l
/Tnxl.dbg
/Tnxl.exploit
/Tnxl.i4
/Tnxl.i486
/Tnxl.i586
/Tnxl.i6
/Tnxl.i686
/Tnxl.kill
/Tnxl.m68
/Tnxl.m68k
/Tnxl.mips
/Tnxl.mips64
/Tnxl.mipsel
/Tnxl.mpsl
/Tnxl.pcc
/Tnxl.powerpc
/Tnxl.powerpc-440fp
/Tnxl.powerppc
/Tnxl.ppc
/Tnxl.ppc2
/Tnxl.ppc440
/Tnxl.ppc440fp
/Tnxl.root
/Tnxl.root32
/Tnxl.sh
/Tnxl.sh4
/Tnxl.sparc
/Tnxl.spc
/Tnxl.ssh4
/Tnxl.x32
/Tnxl.x64
/Tnxl.x86
/Tnxl.x86_32
/Tnxl.x86_64
/Tnxl_Bins/

# Reference: https://twitter.com/bad_packets/status/1263934728912146432

138.197.144.166:23
138.197.144.166:666

# Reference: https://twitter.com/0xrb/status/1268100424449396738
# Reference: https://pastebin.com/N9ncvY5L

27.122.56.147:8888
/0x1x1x1x21212121.arc
/0x1x1x1x21212121.arm
/0x1x1x1x21212121.arm4
/0x1x1x1x21212121.arm4l
/0x1x1x1x21212121.arm4t
/0x1x1x1x21212121.arm4tl
/0x1x1x1x21212121.arm4tll
/0x1x1x1x21212121.arm5
/0x1x1x1x21212121.arm5l
/0x1x1x1x21212121.arm5n
/0x1x1x1x21212121.arm6
/0x1x1x1x21212121.arm64
/0x1x1x1x21212121.arm6l
/0x1x1x1x21212121.arm7
/0x1x1x1x21212121.arm7l
/0x1x1x1x21212121.arm8
/0x1x1x1x21212121.armv4
/0x1x1x1x21212121.armv4l
/0x1x1x1x21212121.armv5l
/0x1x1x1x21212121.armv6
/0x1x1x1x21212121.armv61
/0x1x1x1x21212121.armv6l
/0x1x1x1x21212121.armv7l
/0x1x1x1x21212121.dbg
/0x1x1x1x21212121.exploit
/0x1x1x1x21212121.i4
/0x1x1x1x21212121.i486
/0x1x1x1x21212121.i586
/0x1x1x1x21212121.i6
/0x1x1x1x21212121.i686
/0x1x1x1x21212121.kill
/0x1x1x1x21212121.m68
/0x1x1x1x21212121.m68k
/0x1x1x1x21212121.mips
/0x1x1x1x21212121.mips64
/0x1x1x1x21212121.mipsel
/0x1x1x1x21212121.mpsl
/0x1x1x1x21212121.pcc
/0x1x1x1x21212121.powerpc
/0x1x1x1x21212121.powerpc-440fp
/0x1x1x1x21212121.powerppc
/0x1x1x1x21212121.ppc
/0x1x1x1x21212121.ppc2
/0x1x1x1x21212121.ppc440
/0x1x1x1x21212121.ppc440fp
/0x1x1x1x21212121.root
/0x1x1x1x21212121.root32
/0x1x1x1x21212121.sh
/0x1x1x1x21212121.sh4
/0x1x1x1x21212121.sparc
/0x1x1x1x21212121.spc
/0x1x1x1x21212121.ssh4
/0x1x1x1x21212121.x32
/0x1x1x1x21212121.x64
/0x1x1x1x21212121.x86
/0x1x1x1x21212121.x86_32
/0x1x1x1x21212121.x86_64
/g0dlike.arc
/g0dlike.arm
/g0dlike.arm4
/g0dlike.arm4l
/g0dlike.arm4t
/g0dlike.arm4tl
/g0dlike.arm4tll
/g0dlike.arm5
/g0dlike.arm5l
/g0dlike.arm5n
/g0dlike.arm6
/g0dlike.arm64
/g0dlike.arm6l
/g0dlike.arm7
/g0dlike.arm7l
/g0dlike.arm8
/g0dlike.armv4
/g0dlike.armv4l
/g0dlike.armv5l
/g0dlike.armv6
/g0dlike.armv61
/g0dlike.armv6l
/g0dlike.armv7l
/g0dlike.dbg
/g0dlike.exploit
/g0dlike.i4
/g0dlike.i486
/g0dlike.i586
/g0dlike.i6
/g0dlike.i686
/g0dlike.kill
/g0dlike.m68
/g0dlike.m68k
/g0dlike.mips
/g0dlike.mips64
/g0dlike.mipsel
/g0dlike.mpsl
/g0dlike.pcc
/g0dlike.powerpc
/g0dlike.powerpc-440fp
/g0dlike.powerppc
/g0dlike.ppc
/g0dlike.ppc2
/g0dlike.ppc440
/g0dlike.ppc440fp
/g0dlike.root
/g0dlike.root32
/g0dlike.sh
/g0dlike.sh4
/g0dlike.sparc
/g0dlike.spc
/g0dlike.ssh4
/g0dlike.x32
/g0dlike.x64
/g0dlike.x86
/g0dlike.x86_32
/g0dlike.x86_64
/sa0asbins.arc
/sa0asbins.arm
/sa0asbins.arm4
/sa0asbins.arm4l
/sa0asbins.arm4t
/sa0asbins.arm4tl
/sa0asbins.arm4tll
/sa0asbins.arm5
/sa0asbins.arm5l
/sa0asbins.arm5n
/sa0asbins.arm6
/sa0asbins.arm64
/sa0asbins.arm6l
/sa0asbins.arm7
/sa0asbins.arm7l
/sa0asbins.arm8
/sa0asbins.armv4
/sa0asbins.armv4l
/sa0asbins.armv5l
/sa0asbins.armv6
/sa0asbins.armv61
/sa0asbins.armv6l
/sa0asbins.armv7l
/sa0asbins.dbg
/sa0asbins.exploit
/sa0asbins.i4
/sa0asbins.i486
/sa0asbins.i586
/sa0asbins.i6
/sa0asbins.i686
/sa0asbins.kill
/sa0asbins.m68
/sa0asbins.m68k
/sa0asbins.mips
/sa0asbins.mips64
/sa0asbins.mipsel
/sa0asbins.mpsl
/sa0asbins.pcc
/sa0asbins.powerpc
/sa0asbins.powerpc-440fp
/sa0asbins.powerppc
/sa0asbins.ppc
/sa0asbins.ppc2
/sa0asbins.ppc440
/sa0asbins.ppc440fp
/sa0asbins.root
/sa0asbins.root32
/sa0asbins.sh
/sa0asbins.sh4
/sa0asbins.sparc
/sa0asbins.spc
/sa0asbins.ssh4
/sa0asbins.x32
/sa0asbins.x64
/sa0asbins.x86
/sa0asbins.x86_32
/sa0asbins.x86_64
/testingSVR88292.arc
/testingSVR88292.arm
/testingSVR88292.arm4
/testingSVR88292.arm4l
/testingSVR88292.arm4t
/testingSVR88292.arm4tl
/testingSVR88292.arm4tll
/testingSVR88292.arm5
/testingSVR88292.arm5l
/testingSVR88292.arm5n
/testingSVR88292.arm6
/testingSVR88292.arm64
/testingSVR88292.arm6l
/testingSVR88292.arm7
/testingSVR88292.arm7l
/testingSVR88292.arm8
/testingSVR88292.armv4
/testingSVR88292.armv4l
/testingSVR88292.armv5l
/testingSVR88292.armv6
/testingSVR88292.armv61
/testingSVR88292.armv6l
/testingSVR88292.armv7l
/testingSVR88292.dbg
/testingSVR88292.exploit
/testingSVR88292.i4
/testingSVR88292.i486
/testingSVR88292.i586
/testingSVR88292.i6
/testingSVR88292.i686
/testingSVR88292.kill
/testingSVR88292.m68
/testingSVR88292.m68k
/testingSVR88292.mips
/testingSVR88292.mips64
/testingSVR88292.mipsel
/testingSVR88292.mpsl
/testingSVR88292.pcc
/testingSVR88292.powerpc
/testingSVR88292.powerpc-440fp
/testingSVR88292.powerppc
/testingSVR88292.ppc
/testingSVR88292.ppc2
/testingSVR88292.ppc440
/testingSVR88292.ppc440fp
/testingSVR88292.root
/testingSVR88292.root32
/testingSVR88292.sh
/testingSVR88292.sh4
/testingSVR88292.sparc
/testingSVR88292.spc
/testingSVR88292.ssh4
/testingSVR88292.x32
/testingSVR88292.x64
/testingSVR88292.x86
/testingSVR88292.x86_32
/testingSVR88292.x86_64
/000jaknet000/
/n_Bins/

# Reference: https://github.com/unixfreaxjp/malwaremustdie/blob/master/etc/IoTBotnetISPAbuse202005.md

/GGWP.sh
/Irisbins.sh
/Joker.sh
/Pemex.sh
/SnOoPy.sh
/g0away.sh
/kyelbins.sh
/nasubins.sh
/oofbins.sh
/sensi.sh
/shoxbins.sh
/sora.sh
/vsUerS.sh
/yebins.sh
/yoyobins.sh

# Reference: https://twitter.com/tolisec/status/1269948415724736515
# Reference: https://pastebin.com/DpeMCgrL

172.245.8.9:3884
37.49.224.209:5959
45.143.220.246:1027
45.95.168.156:45
45.95.169.1:5959

# Reference: https://twitter.com/bad_packets/status/1270789161012744192

85.204.116.87:131
85.204.116.87:16850

# Reference: https://twitter.com/bad_packets/status/1266125300888297473

94.102.63.52:9102

# Reference: https://twitter.com/bad_packets/status/1271153910841925633

37.49.224.183:50821
37.49.224.183:58666

# Reference: https://twitter.com/VessOnSecurity/status/1271184863283077120

/CentralIntelligenceAgency.arc
/CentralIntelligenceAgency.arm
/CentralIntelligenceAgency.arm4
/CentralIntelligenceAgency.arm4l
/CentralIntelligenceAgency.arm4t
/CentralIntelligenceAgency.arm4tl
/CentralIntelligenceAgency.arm4tll
/CentralIntelligenceAgency.arm5
/CentralIntelligenceAgency.arm5l
/CentralIntelligenceAgency.arm5n
/CentralIntelligenceAgency.arm6
/CentralIntelligenceAgency.arm64
/CentralIntelligenceAgency.arm6l
/CentralIntelligenceAgency.arm7
/CentralIntelligenceAgency.arm7l
/CentralIntelligenceAgency.arm8
/CentralIntelligenceAgency.armv4
/CentralIntelligenceAgency.armv4l
/CentralIntelligenceAgency.armv5l
/CentralIntelligenceAgency.armv6
/CentralIntelligenceAgency.armv61
/CentralIntelligenceAgency.armv6l
/CentralIntelligenceAgency.armv7l
/CentralIntelligenceAgency.dbg
/CentralIntelligenceAgency.exploit
/CentralIntelligenceAgency.i4
/CentralIntelligenceAgency.i486
/CentralIntelligenceAgency.i586
/CentralIntelligenceAgency.i6
/CentralIntelligenceAgency.i686
/CentralIntelligenceAgency.kill
/CentralIntelligenceAgency.m68
/CentralIntelligenceAgency.m68k
/CentralIntelligenceAgency.mips
/CentralIntelligenceAgency.mips64
/CentralIntelligenceAgency.mipsel
/CentralIntelligenceAgency.mpsl
/CentralIntelligenceAgency.pcc
/CentralIntelligenceAgency.powerpc
/CentralIntelligenceAgency.powerpc-440fp
/CentralIntelligenceAgency.powerppc
/CentralIntelligenceAgency.ppc
/CentralIntelligenceAgency.ppc2
/CentralIntelligenceAgency.ppc440
/CentralIntelligenceAgency.ppc440fp
/CentralIntelligenceAgency.root
/CentralIntelligenceAgency.root32
/CentralIntelligenceAgency.sh
/CentralIntelligenceAgency.sh4
/CentralIntelligenceAgency.sparc
/CentralIntelligenceAgency.spc
/CentralIntelligenceAgency.ssh4
/CentralIntelligenceAgency.x32
/CentralIntelligenceAgency.x64
/CentralIntelligenceAgency.x86
/CentralIntelligenceAgency.x86_32
/CentralIntelligenceAgency.x86_64

# Reference: https://twitter.com/hypoweb/status/1272939520443346944
# Reference: https://www.virustotal.com/gui/domain/qweqwe.com/relations

qweqwe.com

# Reference: https://urlhaus.abuse.ch/url/392907/

/Meth.arc
/Meth.arm
/Meth.arm4
/Meth.arm4l
/Meth.arm4t
/Meth.arm4tl
/Meth.arm4tll
/Meth.arm5
/Meth.arm5l
/Meth.arm5n
/Meth.arm6
/Meth.arm64
/Meth.arm6l
/Meth.arm7
/Meth.arm7l
/Meth.arm8
/Meth.armv4
/Meth.armv4l
/Meth.armv5l
/Meth.armv6
/Meth.armv61
/Meth.armv6l
/Meth.armv7l
/Meth.dbg
/Meth.exploit
/Meth.i4
/Meth.i486
/Meth.i586
/Meth.i6
/Meth.i686
/Meth.kill
/Meth.m68
/Meth.m68k
/Meth.mips
/Meth.mips64
/Meth.mipsel
/Meth.mpsl
/Meth.pcc
/Meth.powerpc
/Meth.powerpc-440fp
/Meth.powerppc
/Meth.ppc
/Meth.ppc2
/Meth.ppc440
/Meth.ppc440fp
/Meth.root
/Meth.root32
/Meth.sh
/Meth.sh4
/Meth.sparc
/Meth.spc
/Meth.ssh4
/Meth.x32
/Meth.x64
/Meth.x86
/Meth.x86_32
/Meth.x86_64
/YaO2uFOvUG8LV1y5NY1aCHmr1WdBLjcjiVD6aRRAWDL6oNY29J88y0nrXxaHBmTLEYC9yB56gBn95pco8kCbldVsHmjNQk8JTaC/

# Reference: https://urlhaus.abuse.ch/url/392839/
# Reference: https://pastebin.com/jEjPXTTN

/M3tH.arc
/M3tH.arm
/M3tH.arm4
/M3tH.arm4l
/M3tH.arm4t
/M3tH.arm4tl
/M3tH.arm4tll
/M3tH.arm5
/M3tH.arm5l
/M3tH.arm5n
/M3tH.arm6
/M3tH.arm64
/M3tH.arm6l
/M3tH.arm7
/M3tH.arm7l
/M3tH.arm8
/M3tH.armv4
/M3tH.armv4l
/M3tH.armv5l
/M3tH.armv6
/M3tH.armv61
/M3tH.armv6l
/M3tH.armv7l
/M3tH.dbg
/M3tH.exploit
/M3tH.i4
/M3tH.i486
/M3tH.i586
/M3tH.i6
/M3tH.i686
/M3tH.kill
/M3tH.m68
/M3tH.m68k
/M3tH.mips
/M3tH.mips64
/M3tH.mipsel
/M3tH.mpsl
/M3tH.pcc
/M3tH.powerpc
/M3tH.powerpc-440fp
/M3tH.powerppc
/M3tH.ppc
/M3tH.ppc2
/M3tH.ppc440
/M3tH.ppc440fp
/M3tH.root
/M3tH.root32
/M3tH.sh
/M3tH.sh4
/M3tH.sparc
/M3tH.spc
/M3tH.ssh4
/M3tH.x32
/M3tH.x64
/M3tH.x86
/M3tH.x86_32
/M3tH.x86_64
/0xxx0xxxasdajshdsajhkgdja/
/sa0UGVOZIpAoQTtcR1KLEkN2x/

# Reference: https://twitter.com/0xrb/status/1273495537912692738

104.168.143.15:1312

# Reference: https://www.f5.com/labs/articles/threat-intelligence/mirai-is-attacking-again-so-were-outing-its-hilarious-explicit-c-c-hostnames

0x01.nexusiotsolutions.net
0x01.preload.su
0x90.bid
1eryxnva.glibc.org
aced.ga
air.sinushost.biz
akuma.pw
alhctuyy.tk
asapvpns.club
aspectleaks.xyz
back.uu8889.com
bakiiszwart.tk
base.monello.tk
bbase.monello.tk
bc.nexusiotsolutions.net
bcnc.changeme.com
bfrxznyisbestie.ml
bfyfa.fun
bhromofreah.top
bigboats.club
bigboatz.us
bkush.ml
blacklister.nl
bloodwars.ws
blueandsausesfries.us
bnexusiotsolutions.net
boat.racoon.ml
boatnet.xyz
booters.ml
botnet.remaiten.org
botnetsale.tk
bounty.bigbotpein.ru
bscotsa.pw
c.nexusiotsolutions.net
ccc.snicker.ir
central.glibc.org
cmdmirai.tk
cn.uvgczsuidrtg.com
cnbot.space
cnc.bigbandsinmyvault.tk
cnc.bigbotpein.ru
cnc.changeme.com
cnc.linux.lol
cnc.mirai.com
cnc.nutsz.club
cnc.skidsec.org
cnc.smokemethallday.tk
cnc.spamtech.win
cnc.teammalefic.pw
cnc.tonguepunchfartbox.life
cnc.urgay.cf
cnc.vdskge7as.xyz
cnc.voxlobid.tk
cnc111.ml
cncbot.cnbot.space
cncbot.ddns.net
conwangg.de
cool.kingdomplugin.nl
coolxr.info
cottoncandyloverscute.website
crazyclothes.store
d.hi8520.com
dankstresser.tk
dannyexe.xyz
ddosattacks.tk
deathlives.ddns.net
dportsmirai.tk
dssgasrea.club
eccc.bulletpool.ru
ertwer.vdskge7as.xyz
fFvFVcnc.changeme.com
featured.cf
fedtraps.cf
frost.botnet.hackedfiles.pw
frxznyisbestie.ml
ftp.xenonbooter.xyz
fucktzoh.xyz
fyfa.fun
gammaboat.us
gangsters.cf
ghoststresser.pw
gndfgdd.club
gnikllort.com
gotnulled.ga
greekhelios21.tk
happyf33t.nl
harikatha.com
hello.bigpuller.cf
hoaxnet.ddns.net
horsecocked.4horsemen.pw
hotelcasa.nl
hromofreah.top
ikbensupercool.nl
iktufopjou.nl
infecteverywhere.online
int.aerx.io
internetgangster.tk
internetpolice.ga
internetpolice.ml
internetpolice.tk
iotmirai.tk
isalinux.intercomonline.com
kagbe.nl
kingdomplugin.nl
kormirai.ddns.net
kringelstan.net
kush.ml
leakedfiles.org
legendarysprx.pw
linux.lol
linuxsecuritys.com
lol.godlynet.cf
lol665.tk
lolzsecsshittymirai.tk
majikku.us
miraibotnet.eu
miraibotnet.ml
miraibotnet.online
miraihoneypot.tk
mirainet.ml
mirainet.tk
mm.haxornah.top
moanmybins.ml
modems.pw
monello.tk
myacerusername.hopto.org
mymiraiserver.hopto.org
mypawnshop.men
nageboorte.ga
naotogoyamamcc.asuscomm.com
net.nageboorte.nl
neuvostoliitto.ml
neuvostoliitto.tk
newel.se
nexusaquariums.ir
nexusiotsolutions.net
nnn.shenron.pw
nullserversmirai.tk
nutsz.club
offlineservers.tk
online.upmirai.club
onyxreppingoat.cf
powa.daddyhackingteam.com
power4you.ddns.net
predoxing.tk
purgeblood.duckdns.org
puti.csgo
putintrump.cf
putintrump.tk
pvpcloud.us
pyfulthag0d.pw
q5f2k0evy7go2rax9m4g.ru
reppin.tk
rofl.leakvortex.pro
rootyi.site
runscape.cf
rw595phpt4kk538s.botanik.gq
s0.3eu.ru
santasbigcandycane.cx
sbnmcd.org
scotsa.pw
sepinsftw.tk
serveranywhere.cf
serveranywhere.ga
serversrus.club
sevenp.top
skidsec.org
smithre.top
smokemethallday.tk
snicker.ir
spamtech.win
ssh.gammaboat.us
swatnetiphone.tk
swatnetsucks.tk
swinginwithme.ru
swizzthegod.us
teammalefic.pw
test.cnc
thebigbadbotnet.tk
thonder.club
tonguepunchfartbox.life
totalbooter.us
trapboat.club
truepower.club
unix.tk
upfiles.online
urgay.cf
uryjsdrfg.club
vap3.ddns.net
vdskge7as.xyz
voxlobid.tk
wheresmirai.tk
winter.winterboot.net
yzykar.ddns.net
zammanaakis.link
zetastress.net

# Reference: https://www.virusbulletin.com/virusbulletin/2018/12/vb2018-paper-tracking-mirai-variants/

aandy.cf
aandy.xyz
askjasghasg.ru
cnc.aandy.xyz
cnc.ttoww.com

# Reference: https://twitter.com/huiwangeth/status/1275650252947800065
# Reference: https://www.virustotal.com/gui/file/f60b29cfb7eab3aeb391f46e94d4d8efadde5498583a2f5c71bd8212d8ae92da/detection

/fetch.arc
/fetch.arm
/fetch.arm4
/fetch.arm4l
/fetch.arm4t
/fetch.arm4tl
/fetch.arm4tll
/fetch.arm5
/fetch.arm5l
/fetch.arm5n
/fetch.arm6
/fetch.arm64
/fetch.arm6l
/fetch.arm7
/fetch.arm7l
/fetch.arm8
/fetch.armv4
/fetch.armv4l
/fetch.armv5l
/fetch.armv6
/fetch.armv61
/fetch.armv6l
/fetch.armv7l
/fetch.dbg
/fetch.exploit
/fetch.i4
/fetch.i486
/fetch.i586
/fetch.i6
/fetch.i686
/fetch.kill
/fetch.m68
/fetch.m68k
/fetch.mips
/fetch.mips64
/fetch.mipsel
/fetch.mpsl
/fetch.pcc
/fetch.powerpc
/fetch.powerpc-440fp
/fetch.powerppc
/fetch.ppc
/fetch.ppc2
/fetch.ppc440
/fetch.ppc440fp
/fetch.root
/fetch.root32
/fetch.sh
/fetch.sh4
/fetch.sparc
/fetch.spc
/fetch.ssh4
/fetch.x32
/fetch.x64
/fetch.x86
/fetch.x86_32
/fetch.x86_64
dotheneedfull.xyz

# Reference: https://blacklist.cyberthreatcoalition.org/vetted/url.txt

81.17.16.122:34343
81.17.16.122:44783
/666.arc
/666.arm
/666.arm4
/666.arm4l
/666.arm4t
/666.arm4tl
/666.arm4tll
/666.arm5
/666.arm5l
/666.arm5n
/666.arm6
/666.arm64
/666.arm6l
/666.arm7
/666.arm7l
/666.arm8
/666.armv4
/666.armv4l
/666.armv5l
/666.armv6
/666.armv61
/666.armv6l
/666.armv7l
/666.dbg
/666.exploit
/666.i4
/666.i486
/666.i586
/666.i6
/666.i686
/666.kill
/666.m68
/666.m68k
/666.mips
/666.mips64
/666.mipsel
/666.mpsl
/666.pcc
/666.powerpc
/666.powerpc-440fp
/666.powerppc
/666.ppc
/666.ppc2
/666.ppc440
/666.ppc440fp
/666.root
/666.root32
/666.sh
/666.sh4
/666.sparc
/666.spc
/666.ssh4
/666.x32
/666.x64
/666.x86
/666.x86_32
/666.x86_64
/888fff999.arc
/888fff999.arm
/888fff999.arm4
/888fff999.arm4l
/888fff999.arm4t
/888fff999.arm4tl
/888fff999.arm4tll
/888fff999.arm5
/888fff999.arm5l
/888fff999.arm5n
/888fff999.arm6
/888fff999.arm64
/888fff999.arm6l
/888fff999.arm7
/888fff999.arm7l
/888fff999.arm8
/888fff999.armv4
/888fff999.armv4l
/888fff999.armv5l
/888fff999.armv6
/888fff999.armv61
/888fff999.armv6l
/888fff999.armv7l
/888fff999.dbg
/888fff999.exploit
/888fff999.i4
/888fff999.i486
/888fff999.i586
/888fff999.i6
/888fff999.i686
/888fff999.kill
/888fff999.m68
/888fff999.m68k
/888fff999.mips
/888fff999.mips64
/888fff999.mipsel
/888fff999.mpsl
/888fff999.pcc
/888fff999.powerpc
/888fff999.powerpc-440fp
/888fff999.powerppc
/888fff999.ppc
/888fff999.ppc2
/888fff999.ppc440
/888fff999.ppc440fp
/888fff999.root
/888fff999.root32
/888fff999.sh
/888fff999.sh4
/888fff999.sparc
/888fff999.spc
/888fff999.ssh4
/888fff999.x32
/888fff999.x64
/888fff999.x86
/888fff999.x86_32
/888fff999.x86_64
/4LSI.arc
/4LSI.arm
/4LSI.arm4
/4LSI.arm4l
/4LSI.arm4t
/4LSI.arm4tl
/4LSI.arm4tll
/4LSI.arm5
/4LSI.arm5l
/4LSI.arm5n
/4LSI.arm6
/4LSI.arm64
/4LSI.arm6l
/4LSI.arm7
/4LSI.arm7l
/4LSI.arm8
/4LSI.armv4
/4LSI.armv4l
/4LSI.armv5l
/4LSI.armv6
/4LSI.armv61
/4LSI.armv6l
/4LSI.armv7l
/4LSI.dbg
/4LSI.exploit
/4LSI.i4
/4LSI.i486
/4LSI.i586
/4LSI.i6
/4LSI.i686
/4LSI.kill
/4LSI.m68
/4LSI.m68k
/4LSI.mips
/4LSI.mips64
/4LSI.mipsel
/4LSI.mpsl
/4LSI.pcc
/4LSI.powerpc
/4LSI.powerpc-440fp
/4LSI.powerppc
/4LSI.ppc
/4LSI.ppc2
/4LSI.ppc440
/4LSI.ppc440fp
/4LSI.root
/4LSI.root32
/4LSI.sh
/4LSI.sh4
/4LSI.sparc
/4LSI.spc
/4LSI.ssh4
/4LSI.x32
/4LSI.x64
/4LSI.x86
/4LSI.x86_32
/4LSI.x86_64
/a7mad.arc
/a7mad.arm
/a7mad.arm4
/a7mad.arm4l
/a7mad.arm4t
/a7mad.arm4tl
/a7mad.arm4tll
/a7mad.arm5
/a7mad.arm5l
/a7mad.arm5n
/a7mad.arm6
/a7mad.arm64
/a7mad.arm6l
/a7mad.arm7
/a7mad.arm7l
/a7mad.arm8
/a7mad.armv4
/a7mad.armv4l
/a7mad.armv5l
/a7mad.armv6
/a7mad.armv61
/a7mad.armv6l
/a7mad.armv7l
/a7mad.dbg
/a7mad.exploit
/a7mad.i4
/a7mad.i486
/a7mad.i586
/a7mad.i6
/a7mad.i686
/a7mad.kill
/a7mad.m68
/a7mad.m68k
/a7mad.mips
/a7mad.mips64
/a7mad.mipsel
/a7mad.mpsl
/a7mad.pcc
/a7mad.powerpc
/a7mad.powerpc-440fp
/a7mad.powerppc
/a7mad.ppc
/a7mad.ppc2
/a7mad.ppc440
/a7mad.ppc440fp
/a7mad.root
/a7mad.root32
/a7mad.sh
/a7mad.sh4
/a7mad.sparc
/a7mad.spc
/a7mad.ssh4
/a7mad.x32
/a7mad.x64
/a7mad.x86
/a7mad.x86_32
/a7mad.x86_64
/aisuru.arc
/aisuru.arm
/aisuru.arm4
/aisuru.arm4l
/aisuru.arm4t
/aisuru.arm4tl
/aisuru.arm4tll
/aisuru.arm5
/aisuru.arm5l
/aisuru.arm5n
/aisuru.arm6
/aisuru.arm64
/aisuru.arm6l
/aisuru.arm7
/aisuru.arm7l
/aisuru.arm8
/aisuru.armv4
/aisuru.armv4l
/aisuru.armv5l
/aisuru.armv6
/aisuru.armv61
/aisuru.armv6l
/aisuru.armv7l
/aisuru.dbg
/aisuru.exploit
/aisuru.i4
/aisuru.i486
/aisuru.i586
/aisuru.i6
/aisuru.i686
/aisuru.kill
/aisuru.m68
/aisuru.m68k
/aisuru.mips
/aisuru.mips64
/aisuru.mipsel
/aisuru.mpsl
/aisuru.pcc
/aisuru.powerpc
/aisuru.powerpc-440fp
/aisuru.powerppc
/aisuru.ppc
/aisuru.ppc2
/aisuru.ppc440
/aisuru.ppc440fp
/aisuru.root
/aisuru.root32
/aisuru.sh
/aisuru.sh4
/aisuru.sparc
/aisuru.spc
/aisuru.ssh4
/aisuru.x32
/aisuru.x64
/aisuru.x86
/aisuru.x86_32
/aisuru.x86_64
/Arceus.arc
/Arceus.arm
/Arceus.arm4
/Arceus.arm4l
/Arceus.arm4t
/Arceus.arm4tl
/Arceus.arm4tll
/Arceus.arm5
/Arceus.arm5l
/Arceus.arm5n
/Arceus.arm6
/Arceus.arm64
/Arceus.arm6l
/Arceus.arm7
/Arceus.arm7l
/Arceus.arm8
/Arceus.armv4
/Arceus.armv4l
/Arceus.armv5l
/Arceus.armv6
/Arceus.armv61
/Arceus.armv6l
/Arceus.armv7l
/Arceus.dbg
/Arceus.exploit
/Arceus.i4
/Arceus.i486
/Arceus.i586
/Arceus.i6
/Arceus.i686
/Arceus.kill
/Arceus.m68
/Arceus.m68k
/Arceus.mips
/Arceus.mips64
/Arceus.mipsel
/Arceus.mpsl
/Arceus.pcc
/Arceus.powerpc
/Arceus.powerpc-440fp
/Arceus.powerppc
/Arceus.ppc
/Arceus.ppc2
/Arceus.ppc440
/Arceus.ppc440fp
/Arceus.root
/Arceus.root32
/Arceus.sh
/Arceus.sh4
/Arceus.sparc
/Arceus.spc
/Arceus.ssh4
/Arceus.x32
/Arceus.x64
/Arceus.x86
/Arceus.x86_32
/Arceus.x86_64
/Athena.arc
/Athena.arm
/Athena.arm4
/Athena.arm4l
/Athena.arm4t
/Athena.arm4tl
/Athena.arm4tll
/Athena.arm5
/Athena.arm5l
/Athena.arm5n
/Athena.arm6
/Athena.arm64
/Athena.arm6l
/Athena.arm7
/Athena.arm7l
/Athena.arm8
/Athena.armv4
/Athena.armv4l
/Athena.armv5l
/Athena.armv6
/Athena.armv61
/Athena.armv6l
/Athena.armv7l
/Athena.dbg
/Athena.exploit
/Athena.i4
/Athena.i486
/Athena.i586
/Athena.i6
/Athena.i686
/Athena.kill
/Athena.m68
/Athena.m68k
/Athena.mips
/Athena.mips64
/Athena.mipsel
/Athena.mpsl
/Athena.pcc
/Athena.powerpc
/Athena.powerpc-440fp
/Athena.powerppc
/Athena.ppc
/Athena.ppc2
/Athena.ppc440
/Athena.ppc440fp
/Athena.root
/Athena.root32
/Athena.sh
/Athena.sh4
/Athena.sparc
/Athena.spc
/Athena.ssh4
/Athena.x32
/Athena.x64
/Athena.x86
/Athena.x86_32
/Athena.x86_64
/atomic.arc
/atomic.arm
/atomic.arm4
/atomic.arm4l
/atomic.arm4t
/atomic.arm4tl
/atomic.arm4tll
/atomic.arm5
/atomic.arm5l
/atomic.arm5n
/atomic.arm6
/atomic.arm64
/atomic.arm6l
/atomic.arm7
/atomic.arm7l
/atomic.arm8
/atomic.armv4
/atomic.armv4l
/atomic.armv5l
/atomic.armv6
/atomic.armv61
/atomic.armv6l
/atomic.armv7l
/atomic.dbg
/atomic.exploit
/atomic.i4
/atomic.i486
/atomic.i586
/atomic.i6
/atomic.i686
/atomic.kill
/atomic.m68
/atomic.m68k
/atomic.mips
/atomic.mips64
/atomic.mipsel
/atomic.mpsl
/atomic.pcc
/atomic.powerpc
/atomic.powerpc-440fp
/atomic.powerppc
/atomic.ppc
/atomic.ppc2
/atomic.ppc440
/atomic.ppc440fp
/atomic.root
/atomic.root32
/atomic.sh
/atomic.sh4
/atomic.sparc
/atomic.spc
/atomic.ssh4
/atomic.x32
/atomic.x64
/atomic.x86
/atomic.x86_32
/atomic.x86_64
/b00m19.arc
/b00m19.arm
/b00m19.arm4
/b00m19.arm4l
/b00m19.arm4t
/b00m19.arm4tl
/b00m19.arm4tll
/b00m19.arm5
/b00m19.arm5l
/b00m19.arm5n
/b00m19.arm6
/b00m19.arm64
/b00m19.arm6l
/b00m19.arm7
/b00m19.arm7l
/b00m19.arm8
/b00m19.armv4
/b00m19.armv4l
/b00m19.armv5l
/b00m19.armv6
/b00m19.armv61
/b00m19.armv6l
/b00m19.armv7l
/b00m19.dbg
/b00m19.exploit
/b00m19.i4
/b00m19.i486
/b00m19.i586
/b00m19.i6
/b00m19.i686
/b00m19.kill
/b00m19.m68
/b00m19.m68k
/b00m19.mips
/b00m19.mips64
/b00m19.mipsel
/b00m19.mpsl
/b00m19.pcc
/b00m19.powerpc
/b00m19.powerpc-440fp
/b00m19.powerppc
/b00m19.ppc
/b00m19.ppc2
/b00m19.ppc440
/b00m19.ppc440fp
/b00m19.root
/b00m19.root32
/b00m19.sh
/b00m19.sh4
/b00m19.sparc
/b00m19.spc
/b00m19.ssh4
/b00m19.x32
/b00m19.x64
/b00m19.x86
/b00m19.x86_32
/b00m19.x86_64
/boot64ntarc
/boot64ntarm
/boot64ntarm4
/boot64ntarm4l
/boot64ntarm4t
/boot64ntarm4tl
/boot64ntarm4tll
/boot64ntarm5
/boot64ntarm5l
/boot64ntarm5n
/boot64ntarm6
/boot64ntarm64
/boot64ntarm6l
/boot64ntarm7
/boot64ntarm7l
/boot64ntarm8
/boot64ntarmv4
/boot64ntarmv4l
/boot64ntarmv5l
/boot64ntarmv6
/boot64ntarmv61
/boot64ntarmv6l
/boot64ntarmv7l
/boot64ntdbg
/boot64ntexploit
/boot64nti4
/boot64nti486
/boot64nti586
/boot64nti6
/boot64nti686
/boot64ntkill
/boot64ntm68
/boot64ntm68k
/boot64ntmips
/boot64ntmips64
/boot64ntmipsel
/boot64ntmpsl
/boot64ntpcc
/boot64ntpowerpc
/boot64ntpowerpc-440fp
/boot64ntpowerppc
/boot64ntppc
/boot64ntppc2
/boot64ntppc440
/boot64ntppc440fp
/boot64ntroot
/boot64ntroot32
/boot64ntsh
/boot64ntsh4
/boot64ntsparc
/boot64ntspc
/boot64ntssh4
/boot64ntx32
/boot64ntx64
/boot64ntx86
/boot64ntx86_32
/boot64ntx86_64
/buiodawbdawbuiopdw.arc
/buiodawbdawbuiopdw.arm
/buiodawbdawbuiopdw.arm4
/buiodawbdawbuiopdw.arm4l
/buiodawbdawbuiopdw.arm4t
/buiodawbdawbuiopdw.arm4tl
/buiodawbdawbuiopdw.arm4tll
/buiodawbdawbuiopdw.arm5
/buiodawbdawbuiopdw.arm5l
/buiodawbdawbuiopdw.arm5n
/buiodawbdawbuiopdw.arm6
/buiodawbdawbuiopdw.arm64
/buiodawbdawbuiopdw.arm6l
/buiodawbdawbuiopdw.arm7
/buiodawbdawbuiopdw.arm7l
/buiodawbdawbuiopdw.arm8
/buiodawbdawbuiopdw.armv4
/buiodawbdawbuiopdw.armv4l
/buiodawbdawbuiopdw.armv5l
/buiodawbdawbuiopdw.armv6
/buiodawbdawbuiopdw.armv61
/buiodawbdawbuiopdw.armv6l
/buiodawbdawbuiopdw.armv7l
/buiodawbdawbuiopdw.dbg
/buiodawbdawbuiopdw.exploit
/buiodawbdawbuiopdw.i4
/buiodawbdawbuiopdw.i486
/buiodawbdawbuiopdw.i586
/buiodawbdawbuiopdw.i6
/buiodawbdawbuiopdw.i686
/buiodawbdawbuiopdw.kill
/buiodawbdawbuiopdw.m68
/buiodawbdawbuiopdw.m68k
/buiodawbdawbuiopdw.mips
/buiodawbdawbuiopdw.mips64
/buiodawbdawbuiopdw.mipsel
/buiodawbdawbuiopdw.mpsl
/buiodawbdawbuiopdw.pcc
/buiodawbdawbuiopdw.powerpc
/buiodawbdawbuiopdw.powerpc-440fp
/buiodawbdawbuiopdw.powerppc
/buiodawbdawbuiopdw.ppc
/buiodawbdawbuiopdw.ppc2
/buiodawbdawbuiopdw.ppc440
/buiodawbdawbuiopdw.ppc440fp
/buiodawbdawbuiopdw.root
/buiodawbdawbuiopdw.root32
/buiodawbdawbuiopdw.sh
/buiodawbdawbuiopdw.sh4
/buiodawbdawbuiopdw.sparc
/buiodawbdawbuiopdw.spc
/buiodawbdawbuiopdw.ssh4
/buiodawbdawbuiopdw.x32
/buiodawbdawbuiopdw.x64
/buiodawbdawbuiopdw.x86
/buiodawbdawbuiopdw.x86_32
/buiodawbdawbuiopdw.x86_64
/ch1n4.arc
/ch1n4.arm
/ch1n4.arm4
/ch1n4.arm4l
/ch1n4.arm4t
/ch1n4.arm4tl
/ch1n4.arm4tll
/ch1n4.arm5
/ch1n4.arm5l
/ch1n4.arm5n
/ch1n4.arm6
/ch1n4.arm64
/ch1n4.arm6l
/ch1n4.arm7
/ch1n4.arm7l
/ch1n4.arm8
/ch1n4.armv4
/ch1n4.armv4l
/ch1n4.armv5l
/ch1n4.armv6
/ch1n4.armv61
/ch1n4.armv6l
/ch1n4.armv7l
/ch1n4.dbg
/ch1n4.exploit
/ch1n4.i4
/ch1n4.i486
/ch1n4.i586
/ch1n4.i6
/ch1n4.i686
/ch1n4.kill
/ch1n4.m68
/ch1n4.m68k
/ch1n4.mips
/ch1n4.mips64
/ch1n4.mipsel
/ch1n4.mpsl
/ch1n4.pcc
/ch1n4.powerpc
/ch1n4.powerpc-440fp
/ch1n4.powerppc
/ch1n4.ppc
/ch1n4.ppc2
/ch1n4.ppc440
/ch1n4.ppc440fp
/ch1n4.root
/ch1n4.root32
/ch1n4.sh
/ch1n4.sh4
/ch1n4.sparc
/ch1n4.spc
/ch1n4.ssh4
/ch1n4.x32
/ch1n4.x64
/ch1n4.x86
/ch1n4.x86_32
/ch1n4.x86_64
/d3m0n.arc
/d3m0n.arm
/d3m0n.arm4
/d3m0n.arm4l
/d3m0n.arm4t
/d3m0n.arm4tl
/d3m0n.arm4tll
/d3m0n.arm5
/d3m0n.arm5l
/d3m0n.arm5n
/d3m0n.arm6
/d3m0n.arm64
/d3m0n.arm6l
/d3m0n.arm7
/d3m0n.arm7l
/d3m0n.arm8
/d3m0n.armv4
/d3m0n.armv4l
/d3m0n.armv5l
/d3m0n.armv6
/d3m0n.armv61
/d3m0n.armv6l
/d3m0n.armv7l
/d3m0n.dbg
/d3m0n.exploit
/d3m0n.i4
/d3m0n.i486
/d3m0n.i586
/d3m0n.i6
/d3m0n.i686
/d3m0n.kill
/d3m0n.m68
/d3m0n.m68k
/d3m0n.mips
/d3m0n.mips64
/d3m0n.mipsel
/d3m0n.mpsl
/d3m0n.pcc
/d3m0n.powerpc
/d3m0n.powerpc-440fp
/d3m0n.powerppc
/d3m0n.ppc
/d3m0n.ppc2
/d3m0n.ppc440
/d3m0n.ppc440fp
/d3m0n.root
/d3m0n.root32
/d3m0n.sh
/d3m0n.sh4
/d3m0n.sparc
/d3m0n.spc
/d3m0n.ssh4
/d3m0n.x32
/d3m0n.x64
/d3m0n.x86
/d3m0n.x86_32
/d3m0n.x86_64
/Drank.arc
/Drank.arm
/Drank.arm4
/Drank.arm4l
/Drank.arm4t
/Drank.arm4tl
/Drank.arm4tll
/Drank.arm5
/Drank.arm5l
/Drank.arm5n
/Drank.arm6
/Drank.arm64
/Drank.arm6l
/Drank.arm7
/Drank.arm7l
/Drank.arm8
/Drank.armv4
/Drank.armv4l
/Drank.armv5l
/Drank.armv6
/Drank.armv61
/Drank.armv6l
/Drank.armv7l
/Drank.dbg
/Drank.exploit
/Drank.i4
/Drank.i486
/Drank.i586
/Drank.i6
/Drank.i686
/Drank.kill
/Drank.m68
/Drank.m68k
/Drank.mips
/Drank.mips64
/Drank.mipsel
/Drank.mpsl
/Drank.pcc
/Drank.powerpc
/Drank.powerpc-440fp
/Drank.powerppc
/Drank.ppc
/Drank.ppc2
/Drank.ppc440
/Drank.ppc440fp
/Drank.root
/Drank.root32
/Drank.sh
/Drank.sh4
/Drank.sparc
/Drank.spc
/Drank.ssh4
/Drank.x32
/Drank.x64
/Drank.x86
/Drank.x86_32
/Drank.x86_64
/ekupmyarc
/ekupmyarm
/ekupmyarm4
/ekupmyarm4l
/ekupmyarm4t
/ekupmyarm4tl
/ekupmyarm4tll
/ekupmyarm5
/ekupmyarm5l
/ekupmyarm5n
/ekupmyarm6
/ekupmyarm64
/ekupmyarm6l
/ekupmyarm7
/ekupmyarm7l
/ekupmyarm8
/ekupmyarmv4
/ekupmyarmv4l
/ekupmyarmv5l
/ekupmyarmv6
/ekupmyarmv61
/ekupmyarmv6l
/ekupmyarmv7l
/ekupmydbg
/ekupmyexploit
/ekupmyi4
/ekupmyi486
/ekupmyi586
/ekupmyi6
/ekupmyi686
/ekupmykill
/ekupmym68
/ekupmym68k
/ekupmymips
/ekupmymips64
/ekupmymipsel
/ekupmympsl
/ekupmypcc
/ekupmypowerpc
/ekupmypowerpc-440fp
/ekupmypowerppc
/ekupmyppc
/ekupmyppc2
/ekupmyppc440
/ekupmyppc440fp
/ekupmyroot
/ekupmyroot32
/ekupmysh
/ekupmysh4
/ekupmysparc
/ekupmyspc
/ekupmyssh4
/ekupmyx32
/ekupmyx64
/ekupmyx86
/ekupmyx86_32
/ekupmyx86_64
/qazwsxedcrfvtgbyhnujmikolp.arc
/qazwsxedcrfvtgbyhnujmikolp.arm
/qazwsxedcrfvtgbyhnujmikolp.arm4
/qazwsxedcrfvtgbyhnujmikolp.arm4l
/qazwsxedcrfvtgbyhnujmikolp.arm4t
/qazwsxedcrfvtgbyhnujmikolp.arm4tl
/qazwsxedcrfvtgbyhnujmikolp.arm4tll
/qazwsxedcrfvtgbyhnujmikolp.arm5
/qazwsxedcrfvtgbyhnujmikolp.arm5l
/qazwsxedcrfvtgbyhnujmikolp.arm5n
/qazwsxedcrfvtgbyhnujmikolp.arm6
/qazwsxedcrfvtgbyhnujmikolp.arm64
/qazwsxedcrfvtgbyhnujmikolp.arm6l
/qazwsxedcrfvtgbyhnujmikolp.arm7
/qazwsxedcrfvtgbyhnujmikolp.arm7l
/qazwsxedcrfvtgbyhnujmikolp.arm8
/qazwsxedcrfvtgbyhnujmikolp.armv4
/qazwsxedcrfvtgbyhnujmikolp.armv4l
/qazwsxedcrfvtgbyhnujmikolp.armv5l
/qazwsxedcrfvtgbyhnujmikolp.armv6
/qazwsxedcrfvtgbyhnujmikolp.armv61
/qazwsxedcrfvtgbyhnujmikolp.armv6l
/qazwsxedcrfvtgbyhnujmikolp.armv7l
/qazwsxedcrfvtgbyhnujmikolp.dbg
/qazwsxedcrfvtgbyhnujmikolp.exploit
/qazwsxedcrfvtgbyhnujmikolp.i4
/qazwsxedcrfvtgbyhnujmikolp.i486
/qazwsxedcrfvtgbyhnujmikolp.i586
/qazwsxedcrfvtgbyhnujmikolp.i6
/qazwsxedcrfvtgbyhnujmikolp.i686
/qazwsxedcrfvtgbyhnujmikolp.kill
/qazwsxedcrfvtgbyhnujmikolp.m68
/qazwsxedcrfvtgbyhnujmikolp.m68k
/qazwsxedcrfvtgbyhnujmikolp.mips
/qazwsxedcrfvtgbyhnujmikolp.mips64
/qazwsxedcrfvtgbyhnujmikolp.mipsel
/qazwsxedcrfvtgbyhnujmikolp.mpsl
/qazwsxedcrfvtgbyhnujmikolp.pcc
/qazwsxedcrfvtgbyhnujmikolp.powerpc
/qazwsxedcrfvtgbyhnujmikolp.powerpc-440fp
/qazwsxedcrfvtgbyhnujmikolp.powerppc
/qazwsxedcrfvtgbyhnujmikolp.ppc
/qazwsxedcrfvtgbyhnujmikolp.ppc2
/qazwsxedcrfvtgbyhnujmikolp.ppc440
/qazwsxedcrfvtgbyhnujmikolp.ppc440fp
/qazwsxedcrfvtgbyhnujmikolp.root
/qazwsxedcrfvtgbyhnujmikolp.root32
/qazwsxedcrfvtgbyhnujmikolp.sh
/qazwsxedcrfvtgbyhnujmikolp.sh4
/qazwsxedcrfvtgbyhnujmikolp.sparc
/qazwsxedcrfvtgbyhnujmikolp.spc
/qazwsxedcrfvtgbyhnujmikolp.ssh4
/qazwsxedcrfvtgbyhnujmikolp.x32
/qazwsxedcrfvtgbyhnujmikolp.x64
/qazwsxedcrfvtgbyhnujmikolp.x86
/qazwsxedcrfvtgbyhnujmikolp.x86_32
/qazwsxedcrfvtgbyhnujmikolp.x86_64
/gooxla.arc
/gooxla.arm
/gooxla.arm4
/gooxla.arm4l
/gooxla.arm4t
/gooxla.arm4tl
/gooxla.arm4tll
/gooxla.arm5
/gooxla.arm5l
/gooxla.arm5n
/gooxla.arm6
/gooxla.arm64
/gooxla.arm6l
/gooxla.arm7
/gooxla.arm7l
/gooxla.arm8
/gooxla.armv4
/gooxla.armv4l
/gooxla.armv5l
/gooxla.armv6
/gooxla.armv61
/gooxla.armv6l
/gooxla.armv7l
/gooxla.dbg
/gooxla.exploit
/gooxla.i4
/gooxla.i486
/gooxla.i586
/gooxla.i6
/gooxla.i686
/gooxla.kill
/gooxla.m68
/gooxla.m68k
/gooxla.mips
/gooxla.mips64
/gooxla.mipsel
/gooxla.mpsl
/gooxla.pcc
/gooxla.powerpc
/gooxla.powerpc-440fp
/gooxla.powerppc
/gooxla.ppc
/gooxla.ppc2
/gooxla.ppc440
/gooxla.ppc440fp
/gooxla.root
/gooxla.root32
/gooxla.sh
/gooxla.sh4
/gooxla.sparc
/gooxla.spc
/gooxla.ssh4
/gooxla.x32
/gooxla.x64
/gooxla.x86
/gooxla.x86_32
/gooxla.x86_64
/Gummy.arc
/Gummy.arm
/Gummy.arm4
/Gummy.arm4l
/Gummy.arm4t
/Gummy.arm4tl
/Gummy.arm4tll
/Gummy.arm5
/Gummy.arm5l
/Gummy.arm5n
/Gummy.arm6
/Gummy.arm64
/Gummy.arm6l
/Gummy.arm7
/Gummy.arm7l
/Gummy.arm8
/Gummy.armv4
/Gummy.armv4l
/Gummy.armv5l
/Gummy.armv6
/Gummy.armv61
/Gummy.armv6l
/Gummy.armv7l
/Gummy.dbg
/Gummy.exploit
/Gummy.i4
/Gummy.i486
/Gummy.i586
/Gummy.i6
/Gummy.i686
/Gummy.kill
/Gummy.m68
/Gummy.m68k
/Gummy.mips
/Gummy.mips64
/Gummy.mipsel
/Gummy.mpsl
/Gummy.pcc
/Gummy.powerpc
/Gummy.powerpc-440fp
/Gummy.powerppc
/Gummy.ppc
/Gummy.ppc2
/Gummy.ppc440
/Gummy.ppc440fp
/Gummy.root
/Gummy.root32
/Gummy.sh
/Gummy.sh4
/Gummy.sparc
/Gummy.spc
/Gummy.ssh4
/Gummy.x32
/Gummy.x64
/Gummy.x86
/Gummy.x86_32
/Gummy.x86_64
/HTTPXOP2PRTY.arc
/HTTPXOP2PRTY.arm
/HTTPXOP2PRTY.arm4
/HTTPXOP2PRTY.arm4l
/HTTPXOP2PRTY.arm4t
/HTTPXOP2PRTY.arm4tl
/HTTPXOP2PRTY.arm4tll
/HTTPXOP2PRTY.arm5
/HTTPXOP2PRTY.arm5l
/HTTPXOP2PRTY.arm5n
/HTTPXOP2PRTY.arm6
/HTTPXOP2PRTY.arm64
/HTTPXOP2PRTY.arm6l
/HTTPXOP2PRTY.arm7
/HTTPXOP2PRTY.arm7l
/HTTPXOP2PRTY.arm8
/HTTPXOP2PRTY.armv4
/HTTPXOP2PRTY.armv4l
/HTTPXOP2PRTY.armv5l
/HTTPXOP2PRTY.armv6
/HTTPXOP2PRTY.armv61
/HTTPXOP2PRTY.armv6l
/HTTPXOP2PRTY.armv7l
/HTTPXOP2PRTY.dbg
/HTTPXOP2PRTY.exploit
/HTTPXOP2PRTY.i4
/HTTPXOP2PRTY.i486
/HTTPXOP2PRTY.i586
/HTTPXOP2PRTY.i6
/HTTPXOP2PRTY.i686
/HTTPXOP2PRTY.kill
/HTTPXOP2PRTY.m68
/HTTPXOP2PRTY.m68k
/HTTPXOP2PRTY.mips
/HTTPXOP2PRTY.mips64
/HTTPXOP2PRTY.mipsel
/HTTPXOP2PRTY.mpsl
/HTTPXOP2PRTY.pcc
/HTTPXOP2PRTY.powerpc
/HTTPXOP2PRTY.powerpc-440fp
/HTTPXOP2PRTY.powerppc
/HTTPXOP2PRTY.ppc
/HTTPXOP2PRTY.ppc2
/HTTPXOP2PRTY.ppc440
/HTTPXOP2PRTY.ppc440fp
/HTTPXOP2PRTY.root
/HTTPXOP2PRTY.root32
/HTTPXOP2PRTY.sh
/HTTPXOP2PRTY.sh4
/HTTPXOP2PRTY.sparc
/HTTPXOP2PRTY.spc
/HTTPXOP2PRTY.ssh4
/HTTPXOP2PRTY.x32
/HTTPXOP2PRTY.x64
/HTTPXOP2PRTY.x86
/HTTPXOP2PRTY.x86_32
/HTTPXOP2PRTY.x86_64
/fearlesshitter.arc
/fearlesshitter.arm
/fearlesshitter.arm4
/fearlesshitter.arm4l
/fearlesshitter.arm4t
/fearlesshitter.arm4tl
/fearlesshitter.arm4tll
/fearlesshitter.arm5
/fearlesshitter.arm5l
/fearlesshitter.arm5n
/fearlesshitter.arm6
/fearlesshitter.arm64
/fearlesshitter.arm6l
/fearlesshitter.arm7
/fearlesshitter.arm7l
/fearlesshitter.arm8
/fearlesshitter.armv4
/fearlesshitter.armv4l
/fearlesshitter.armv5l
/fearlesshitter.armv6
/fearlesshitter.armv61
/fearlesshitter.armv6l
/fearlesshitter.armv7l
/fearlesshitter.dbg
/fearlesshitter.exploit
/fearlesshitter.i4
/fearlesshitter.i486
/fearlesshitter.i586
/fearlesshitter.i6
/fearlesshitter.i686
/fearlesshitter.kill
/fearlesshitter.m68
/fearlesshitter.m68k
/fearlesshitter.mips
/fearlesshitter.mips64
/fearlesshitter.mipsel
/fearlesshitter.mpsl
/fearlesshitter.pcc
/fearlesshitter.powerpc
/fearlesshitter.powerpc-440fp
/fearlesshitter.powerppc
/fearlesshitter.ppc
/fearlesshitter.ppc2
/fearlesshitter.ppc440
/fearlesshitter.ppc440fp
/fearlesshitter.root
/fearlesshitter.root32
/fearlesshitter.sh
/fearlesshitter.sh4
/fearlesshitter.sparc
/fearlesshitter.spc
/fearlesshitter.ssh4
/fearlesshitter.x32
/fearlesshitter.x64
/fearlesshitter.x86
/fearlesshitter.x86_32
/fearlesshitter.x86_64
/jew.arc
/jew.arm
/jew.arm4
/jew.arm4l
/jew.arm4t
/jew.arm4tl
/jew.arm4tll
/jew.arm5
/jew.arm5l
/jew.arm5n
/jew.arm6
/jew.arm64
/jew.arm6l
/jew.arm7
/jew.arm7l
/jew.arm8
/jew.armv4
/jew.armv4l
/jew.armv5l
/jew.armv6
/jew.armv61
/jew.armv6l
/jew.armv7l
/jew.dbg
/jew.exploit
/jew.i4
/jew.i486
/jew.i586
/jew.i6
/jew.i686
/jew.kill
/jew.m68
/jew.m68k
/jew.mips
/jew.mips64
/jew.mipsel
/jew.mpsl
/jew.pcc
/jew.powerpc
/jew.powerpc-440fp
/jew.powerppc
/jew.ppc
/jew.ppc2
/jew.ppc440
/jew.ppc440fp
/jew.root
/jew.root32
/jew.sh
/jew.sh4
/jew.sparc
/jew.spc
/jew.ssh4
/jew.x32
/jew.x64
/jew.x86
/jew.x86_32
/jew.x86_64
/jigoku.arc
/jigoku.arm
/jigoku.arm4
/jigoku.arm4l
/jigoku.arm4t
/jigoku.arm4tl
/jigoku.arm4tll
/jigoku.arm5
/jigoku.arm5l
/jigoku.arm5n
/jigoku.arm6
/jigoku.arm64
/jigoku.arm6l
/jigoku.arm7
/jigoku.arm7l
/jigoku.arm8
/jigoku.armv4
/jigoku.armv4l
/jigoku.armv5l
/jigoku.armv6
/jigoku.armv61
/jigoku.armv6l
/jigoku.armv7l
/jigoku.dbg
/jigoku.exploit
/jigoku.i4
/jigoku.i486
/jigoku.i586
/jigoku.i6
/jigoku.i686
/jigoku.kill
/jigoku.m68
/jigoku.m68k
/jigoku.mips
/jigoku.mips64
/jigoku.mipsel
/jigoku.mpsl
/jigoku.pcc
/jigoku.powerpc
/jigoku.powerpc-440fp
/jigoku.powerppc
/jigoku.ppc
/jigoku.ppc2
/jigoku.ppc440
/jigoku.ppc440fp
/jigoku.root
/jigoku.root32
/jigoku.sh
/jigoku.sh4
/jigoku.sparc
/jigoku.spc
/jigoku.ssh4
/jigoku.x32
/jigoku.x64
/jigoku.x86
/jigoku.x86_32
/jigoku.x86_64
/KigaNet.arc
/KigaNet.arm
/KigaNet.arm4
/KigaNet.arm4l
/KigaNet.arm4t
/KigaNet.arm4tl
/KigaNet.arm4tll
/KigaNet.arm5
/KigaNet.arm5l
/KigaNet.arm5n
/KigaNet.arm6
/KigaNet.arm64
/KigaNet.arm6l
/KigaNet.arm7
/KigaNet.arm7l
/KigaNet.arm8
/KigaNet.armv4
/KigaNet.armv4l
/KigaNet.armv5l
/KigaNet.armv6
/KigaNet.armv61
/KigaNet.armv6l
/KigaNet.armv7l
/KigaNet.dbg
/KigaNet.exploit
/KigaNet.i4
/KigaNet.i486
/KigaNet.i586
/KigaNet.i6
/KigaNet.i686
/KigaNet.kill
/KigaNet.m68
/KigaNet.m68k
/KigaNet.mips
/KigaNet.mips64
/KigaNet.mipsel
/KigaNet.mpsl
/KigaNet.pcc
/KigaNet.powerpc
/KigaNet.powerpc-440fp
/KigaNet.powerppc
/KigaNet.ppc
/KigaNet.ppc2
/KigaNet.ppc440
/KigaNet.ppc440fp
/KigaNet.root
/KigaNet.root32
/KigaNet.sh
/KigaNet.sh4
/KigaNet.sparc
/KigaNet.spc
/KigaNet.ssh4
/KigaNet.x32
/KigaNet.x64
/KigaNet.x86
/KigaNet.x86_32
/KigaNet.x86_64
/ksp4nk.arc
/ksp4nk.arm
/ksp4nk.arm4
/ksp4nk.arm4l
/ksp4nk.arm4t
/ksp4nk.arm4tl
/ksp4nk.arm4tll
/ksp4nk.arm5
/ksp4nk.arm5l
/ksp4nk.arm5n
/ksp4nk.arm6
/ksp4nk.arm64
/ksp4nk.arm6l
/ksp4nk.arm7
/ksp4nk.arm7l
/ksp4nk.arm8
/ksp4nk.armv4
/ksp4nk.armv4l
/ksp4nk.armv5l
/ksp4nk.armv6
/ksp4nk.armv61
/ksp4nk.armv6l
/ksp4nk.armv7l
/ksp4nk.dbg
/ksp4nk.exploit
/ksp4nk.i4
/ksp4nk.i486
/ksp4nk.i586
/ksp4nk.i6
/ksp4nk.i686
/ksp4nk.kill
/ksp4nk.m68
/ksp4nk.m68k
/ksp4nk.mips
/ksp4nk.mips64
/ksp4nk.mipsel
/ksp4nk.mpsl
/ksp4nk.pcc
/ksp4nk.powerpc
/ksp4nk.powerpc-440fp
/ksp4nk.powerppc
/ksp4nk.ppc
/ksp4nk.ppc2
/ksp4nk.ppc440
/ksp4nk.ppc440fp
/ksp4nk.root
/ksp4nk.root32
/ksp4nk.sh
/ksp4nk.sh4
/ksp4nk.sparc
/ksp4nk.spc
/ksp4nk.ssh4
/ksp4nk.x32
/ksp4nk.x64
/ksp4nk.x86
/ksp4nk.x86_32
/ksp4nk.x86_64
/log.arc
/log.arm
/log.arm4
/log.arm4l
/log.arm4t
/log.arm4tl
/log.arm4tll
/log.arm5
/log.arm5l
/log.arm5n
/log.arm6
/log.arm64
/log.arm6l
/log.arm7
/log.arm7l
/log.arm8
/log.armv4
/log.armv4l
/log.armv5l
/log.armv6
/log.armv61
/log.armv6l
/log.armv7l
/log.dbg
/log.exploit
/log.i4
/log.i486
/log.i586
/log.i6
/log.i686
/log.kill
/log.m68
/log.m68k
/log.mips
/log.mips64
/log.mipsel
/log.mpsl
/log.pcc
/log.powerpc
/log.powerpc-440fp
/log.powerppc
/log.ppc
/log.ppc2
/log.ppc440
/log.ppc440fp
/log.root
/log.root32
/log.sh
/log.sh4
/log.sparc
/log.spc
/log.ssh4
/log.x32
/log.x64
/log.x86
/log.x86_32
/log.x86_64
/meerkat.arc
/meerkat.arm
/meerkat.arm4
/meerkat.arm4l
/meerkat.arm4t
/meerkat.arm4tl
/meerkat.arm4tll
/meerkat.arm5
/meerkat.arm5l
/meerkat.arm5n
/meerkat.arm6
/meerkat.arm64
/meerkat.arm6l
/meerkat.arm7
/meerkat.arm7l
/meerkat.arm8
/meerkat.armv4
/meerkat.armv4l
/meerkat.armv5l
/meerkat.armv6
/meerkat.armv61
/meerkat.armv6l
/meerkat.armv7l
/meerkat.dbg
/meerkat.exploit
/meerkat.i4
/meerkat.i486
/meerkat.i586
/meerkat.i6
/meerkat.i686
/meerkat.kill
/meerkat.m68
/meerkat.m68k
/meerkat.mips
/meerkat.mips64
/meerkat.mipsel
/meerkat.mpsl
/meerkat.pcc
/meerkat.powerpc
/meerkat.powerpc-440fp
/meerkat.powerppc
/meerkat.ppc
/meerkat.ppc2
/meerkat.ppc440
/meerkat.ppc440fp
/meerkat.root
/meerkat.root32
/meerkat.sh
/meerkat.sh4
/meerkat.sparc
/meerkat.spc
/meerkat.ssh4
/meerkat.x32
/meerkat.x64
/meerkat.x86
/meerkat.x86_32
/meerkat.x86_64
/meliodic.arc
/meliodic.arm
/meliodic.arm4
/meliodic.arm4l
/meliodic.arm4t
/meliodic.arm4tl
/meliodic.arm4tll
/meliodic.arm5
/meliodic.arm5l
/meliodic.arm5n
/meliodic.arm6
/meliodic.arm64
/meliodic.arm6l
/meliodic.arm7
/meliodic.arm7l
/meliodic.arm8
/meliodic.armv4
/meliodic.armv4l
/meliodic.armv5l
/meliodic.armv6
/meliodic.armv61
/meliodic.armv6l
/meliodic.armv7l
/meliodic.dbg
/meliodic.exploit
/meliodic.i4
/meliodic.i486
/meliodic.i586
/meliodic.i6
/meliodic.i686
/meliodic.kill
/meliodic.m68
/meliodic.m68k
/meliodic.mips
/meliodic.mips64
/meliodic.mipsel
/meliodic.mpsl
/meliodic.pcc
/meliodic.powerpc
/meliodic.powerpc-440fp
/meliodic.powerppc
/meliodic.ppc
/meliodic.ppc2
/meliodic.ppc440
/meliodic.ppc440fp
/meliodic.root
/meliodic.root32
/meliodic.sh
/meliodic.sh4
/meliodic.sparc
/meliodic.spc
/meliodic.ssh4
/meliodic.x32
/meliodic.x64
/meliodic.x86
/meliodic.x86_32
/meliodic.x86_64
/mtndewez.arc
/mtndewez.arm
/mtndewez.arm4
/mtndewez.arm4l
/mtndewez.arm4t
/mtndewez.arm4tl
/mtndewez.arm4tll
/mtndewez.arm5
/mtndewez.arm5l
/mtndewez.arm5n
/mtndewez.arm6
/mtndewez.arm64
/mtndewez.arm6l
/mtndewez.arm7
/mtndewez.arm7l
/mtndewez.arm8
/mtndewez.armv4
/mtndewez.armv4l
/mtndewez.armv5l
/mtndewez.armv6
/mtndewez.armv61
/mtndewez.armv6l
/mtndewez.armv7l
/mtndewez.dbg
/mtndewez.exploit
/mtndewez.i4
/mtndewez.i486
/mtndewez.i586
/mtndewez.i6
/mtndewez.i686
/mtndewez.kill
/mtndewez.m68
/mtndewez.m68k
/mtndewez.mips
/mtndewez.mips64
/mtndewez.mipsel
/mtndewez.mpsl
/mtndewez.pcc
/mtndewez.powerpc
/mtndewez.powerpc-440fp
/mtndewez.powerppc
/mtndewez.ppc
/mtndewez.ppc2
/mtndewez.ppc440
/mtndewez.ppc440fp
/mtndewez.root
/mtndewez.root32
/mtndewez.sh
/mtndewez.sh4
/mtndewez.sparc
/mtndewez.spc
/mtndewez.ssh4
/mtndewez.x32
/mtndewez.x64
/mtndewez.x86
/mtndewez.x86_32
/mtndewez.x86_64
/nig.arc
/nig.arm
/nig.arm4
/nig.arm4l
/nig.arm4t
/nig.arm4tl
/nig.arm4tll
/nig.arm5
/nig.arm5l
/nig.arm5n
/nig.arm6
/nig.arm64
/nig.arm6l
/nig.arm7
/nig.arm7l
/nig.arm8
/nig.armv4
/nig.armv4l
/nig.armv5l
/nig.armv6
/nig.armv61
/nig.armv6l
/nig.armv7l
/nig.dbg
/nig.exploit
/nig.i4
/nig.i486
/nig.i586
/nig.i6
/nig.i686
/nig.kill
/nig.m68
/nig.m68k
/nig.mips
/nig.mips64
/nig.mipsel
/nig.mpsl
/nig.pcc
/nig.powerpc
/nig.powerpc-440fp
/nig.powerppc
/nig.ppc
/nig.ppc2
/nig.ppc440
/nig.ppc440fp
/nig.root
/nig.root32
/nig.sh
/nig.sh4
/nig.sparc
/nig.spc
/nig.ssh4
/nig.x32
/nig.x64
/nig.x86
/nig.x86_32
/nig.x86_64
/NordVPN.arc
/NordVPN.arm
/NordVPN.arm4
/NordVPN.arm4l
/NordVPN.arm4t
/NordVPN.arm4tl
/NordVPN.arm4tll
/NordVPN.arm5
/NordVPN.arm5l
/NordVPN.arm5n
/NordVPN.arm6
/NordVPN.arm64
/NordVPN.arm6l
/NordVPN.arm7
/NordVPN.arm7l
/NordVPN.arm8
/NordVPN.armv4
/NordVPN.armv4l
/NordVPN.armv5l
/NordVPN.armv6
/NordVPN.armv61
/NordVPN.armv6l
/NordVPN.armv7l
/NordVPN.dbg
/NordVPN.exploit
/NordVPN.i4
/NordVPN.i486
/NordVPN.i586
/NordVPN.i6
/NordVPN.i686
/NordVPN.kill
/NordVPN.m68
/NordVPN.m68k
/NordVPN.mips
/NordVPN.mips64
/NordVPN.mipsel
/NordVPN.mpsl
/NordVPN.pcc
/NordVPN.powerpc
/NordVPN.powerpc-440fp
/NordVPN.powerppc
/NordVPN.ppc
/NordVPN.ppc2
/NordVPN.ppc440
/NordVPN.ppc440fp
/NordVPN.root
/NordVPN.root32
/NordVPN.sh
/NordVPN.sh4
/NordVPN.sparc
/NordVPN.spc
/NordVPN.ssh4
/NordVPN.x32
/NordVPN.x64
/NordVPN.x86
/NordVPN.x86_32
/NordVPN.x86_64
/ns_ntpdd.arc
/ns_ntpdd.arm
/ns_ntpdd.arm4
/ns_ntpdd.arm4l
/ns_ntpdd.arm4t
/ns_ntpdd.arm4tl
/ns_ntpdd.arm4tll
/ns_ntpdd.arm5
/ns_ntpdd.arm5l
/ns_ntpdd.arm5n
/ns_ntpdd.arm6
/ns_ntpdd.arm64
/ns_ntpdd.arm6l
/ns_ntpdd.arm7
/ns_ntpdd.arm7l
/ns_ntpdd.arm8
/ns_ntpdd.armv4
/ns_ntpdd.armv4l
/ns_ntpdd.armv5l
/ns_ntpdd.armv6
/ns_ntpdd.armv61
/ns_ntpdd.armv6l
/ns_ntpdd.armv7l
/ns_ntpdd.dbg
/ns_ntpdd.exploit
/ns_ntpdd.i4
/ns_ntpdd.i486
/ns_ntpdd.i586
/ns_ntpdd.i6
/ns_ntpdd.i686
/ns_ntpdd.kill
/ns_ntpdd.m68
/ns_ntpdd.m68k
/ns_ntpdd.mips
/ns_ntpdd.mips64
/ns_ntpdd.mipsel
/ns_ntpdd.mpsl
/ns_ntpdd.pcc
/ns_ntpdd.powerpc
/ns_ntpdd.powerpc-440fp
/ns_ntpdd.powerppc
/ns_ntpdd.ppc
/ns_ntpdd.ppc2
/ns_ntpdd.ppc440
/ns_ntpdd.ppc440fp
/ns_ntpdd.root
/ns_ntpdd.root32
/ns_ntpdd.sh
/ns_ntpdd.sh4
/ns_ntpdd.sparc
/ns_ntpdd.spc
/ns_ntpdd.ssh4
/ns_ntpdd.x32
/ns_ntpdd.x64
/ns_ntpdd.x86
/ns_ntpdd.x86_32
/ns_ntpdd.x86_64
/nuclear.arc
/nuclear.arm
/nuclear.arm4
/nuclear.arm4l
/nuclear.arm4t
/nuclear.arm4tl
/nuclear.arm4tll
/nuclear.arm5
/nuclear.arm5l
/nuclear.arm5n
/nuclear.arm6
/nuclear.arm64
/nuclear.arm6l
/nuclear.arm7
/nuclear.arm7l
/nuclear.arm8
/nuclear.armv4
/nuclear.armv4l
/nuclear.armv5l
/nuclear.armv6
/nuclear.armv61
/nuclear.armv6l
/nuclear.armv7l
/nuclear.dbg
/nuclear.exploit
/nuclear.i4
/nuclear.i486
/nuclear.i586
/nuclear.i6
/nuclear.i686
/nuclear.kill
/nuclear.m68
/nuclear.m68k
/nuclear.mips
/nuclear.mips64
/nuclear.mipsel
/nuclear.mpsl
/nuclear.pcc
/nuclear.powerpc
/nuclear.powerpc-440fp
/nuclear.powerppc
/nuclear.ppc
/nuclear.ppc2
/nuclear.ppc440
/nuclear.ppc440fp
/nuclear.root
/nuclear.root32
/nuclear.sh
/nuclear.sh4
/nuclear.sparc
/nuclear.spc
/nuclear.ssh4
/nuclear.x32
/nuclear.x64
/nuclear.x86
/nuclear.x86_32
/nuclear.x86_64
/null3d.arc
/null3d.arm
/null3d.arm4
/null3d.arm4l
/null3d.arm4t
/null3d.arm4tl
/null3d.arm4tll
/null3d.arm5
/null3d.arm5l
/null3d.arm5n
/null3d.arm6
/null3d.arm64
/null3d.arm6l
/null3d.arm7
/null3d.arm7l
/null3d.arm8
/null3d.armv4
/null3d.armv4l
/null3d.armv5l
/null3d.armv6
/null3d.armv61
/null3d.armv6l
/null3d.armv7l
/null3d.dbg
/null3d.exploit
/null3d.i4
/null3d.i486
/null3d.i586
/null3d.i6
/null3d.i686
/null3d.kill
/null3d.m68
/null3d.m68k
/null3d.mips
/null3d.mips64
/null3d.mipsel
/null3d.mpsl
/null3d.pcc
/null3d.powerpc
/null3d.powerpc-440fp
/null3d.powerppc
/null3d.ppc
/null3d.ppc2
/null3d.ppc440
/null3d.ppc440fp
/null3d.root
/null3d.root32
/null3d.sh
/null3d.sh4
/null3d.sparc
/null3d.spc
/null3d.ssh4
/null3d.x32
/null3d.x64
/null3d.x86
/null3d.x86_32
/null3d.x86_64
/pandorum.arc
/pandorum.arm
/pandorum.arm4
/pandorum.arm4l
/pandorum.arm4t
/pandorum.arm4tl
/pandorum.arm4tll
/pandorum.arm5
/pandorum.arm5l
/pandorum.arm5n
/pandorum.arm6
/pandorum.arm64
/pandorum.arm6l
/pandorum.arm7
/pandorum.arm7l
/pandorum.arm8
/pandorum.armv4
/pandorum.armv4l
/pandorum.armv5l
/pandorum.armv6
/pandorum.armv61
/pandorum.armv6l
/pandorum.armv7l
/pandorum.dbg
/pandorum.exploit
/pandorum.i4
/pandorum.i486
/pandorum.i586
/pandorum.i6
/pandorum.i686
/pandorum.kill
/pandorum.m68
/pandorum.m68k
/pandorum.mips
/pandorum.mips64
/pandorum.mipsel
/pandorum.mpsl
/pandorum.pcc
/pandorum.powerpc
/pandorum.powerpc-440fp
/pandorum.powerppc
/pandorum.ppc
/pandorum.ppc2
/pandorum.ppc440
/pandorum.ppc440fp
/pandorum.root
/pandorum.root32
/pandorum.sh
/pandorum.sh4
/pandorum.sparc
/pandorum.spc
/pandorum.ssh4
/pandorum.x32
/pandorum.x64
/pandorum.x86
/pandorum.x86_32
/pandorum.x86_64
/removesectioncomment.arc
/removesectioncomment.arm
/removesectioncomment.arm4
/removesectioncomment.arm4l
/removesectioncomment.arm4t
/removesectioncomment.arm4tl
/removesectioncomment.arm4tll
/removesectioncomment.arm5
/removesectioncomment.arm5l
/removesectioncomment.arm5n
/removesectioncomment.arm6
/removesectioncomment.arm64
/removesectioncomment.arm6l
/removesectioncomment.arm7
/removesectioncomment.arm7l
/removesectioncomment.arm8
/removesectioncomment.armv4
/removesectioncomment.armv4l
/removesectioncomment.armv5l
/removesectioncomment.armv6
/removesectioncomment.armv61
/removesectioncomment.armv6l
/removesectioncomment.armv7l
/removesectioncomment.dbg
/removesectioncomment.exploit
/removesectioncomment.i4
/removesectioncomment.i486
/removesectioncomment.i586
/removesectioncomment.i6
/removesectioncomment.i686
/removesectioncomment.kill
/removesectioncomment.m68
/removesectioncomment.m68k
/removesectioncomment.mips
/removesectioncomment.mips64
/removesectioncomment.mipsel
/removesectioncomment.mpsl
/removesectioncomment.pcc
/removesectioncomment.powerpc
/removesectioncomment.powerpc-440fp
/removesectioncomment.powerppc
/removesectioncomment.ppc
/removesectioncomment.ppc2
/removesectioncomment.ppc440
/removesectioncomment.ppc440fp
/removesectioncomment.root
/removesectioncomment.root32
/removesectioncomment.sh
/removesectioncomment.sh4
/removesectioncomment.sparc
/removesectioncomment.spc
/removesectioncomment.ssh4
/removesectioncomment.x32
/removesectioncomment.x64
/removesectioncomment.x86
/removesectioncomment.x86_32
/removesectioncomment.x86_64
/SCNSERV3292292.arc
/SCNSERV3292292.arm
/SCNSERV3292292.arm4
/SCNSERV3292292.arm4l
/SCNSERV3292292.arm4t
/SCNSERV3292292.arm4tl
/SCNSERV3292292.arm4tll
/SCNSERV3292292.arm5
/SCNSERV3292292.arm5l
/SCNSERV3292292.arm5n
/SCNSERV3292292.arm6
/SCNSERV3292292.arm64
/SCNSERV3292292.arm6l
/SCNSERV3292292.arm7
/SCNSERV3292292.arm7l
/SCNSERV3292292.arm8
/SCNSERV3292292.armv4
/SCNSERV3292292.armv4l
/SCNSERV3292292.armv5l
/SCNSERV3292292.armv6
/SCNSERV3292292.armv61
/SCNSERV3292292.armv6l
/SCNSERV3292292.armv7l
/SCNSERV3292292.dbg
/SCNSERV3292292.exploit
/SCNSERV3292292.i4
/SCNSERV3292292.i486
/SCNSERV3292292.i586
/SCNSERV3292292.i6
/SCNSERV3292292.i686
/SCNSERV3292292.kill
/SCNSERV3292292.m68
/SCNSERV3292292.m68k
/SCNSERV3292292.mips
/SCNSERV3292292.mips64
/SCNSERV3292292.mipsel
/SCNSERV3292292.mpsl
/SCNSERV3292292.pcc
/SCNSERV3292292.powerpc
/SCNSERV3292292.powerpc-440fp
/SCNSERV3292292.powerppc
/SCNSERV3292292.ppc
/SCNSERV3292292.ppc2
/SCNSERV3292292.ppc440
/SCNSERV3292292.ppc440fp
/SCNSERV3292292.root
/SCNSERV3292292.root32
/SCNSERV3292292.sh
/SCNSERV3292292.sh4
/SCNSERV3292292.sparc
/SCNSERV3292292.spc
/SCNSERV3292292.ssh4
/SCNSERV3292292.x32
/SCNSERV3292292.x64
/SCNSERV3292292.x86
/SCNSERV3292292.x86_32
/SCNSERV3292292.x86_64
/Scylla.arc
/Scylla.arm
/Scylla.arm4
/Scylla.arm4l
/Scylla.arm4t
/Scylla.arm4tl
/Scylla.arm4tll
/Scylla.arm5
/Scylla.arm5l
/Scylla.arm5n
/Scylla.arm6
/Scylla.arm64
/Scylla.arm6l
/Scylla.arm7
/Scylla.arm7l
/Scylla.arm8
/Scylla.armv4
/Scylla.armv4l
/Scylla.armv5l
/Scylla.armv6
/Scylla.armv61
/Scylla.armv6l
/Scylla.armv7l
/Scylla.dbg
/Scylla.exploit
/Scylla.i4
/Scylla.i486
/Scylla.i586
/Scylla.i6
/Scylla.i686
/Scylla.kill
/Scylla.m68
/Scylla.m68k
/Scylla.mips
/Scylla.mips64
/Scylla.mipsel
/Scylla.mpsl
/Scylla.pcc
/Scylla.powerpc
/Scylla.powerpc-440fp
/Scylla.powerppc
/Scylla.ppc
/Scylla.ppc2
/Scylla.ppc440
/Scylla.ppc440fp
/Scylla.root
/Scylla.root32
/Scylla.sh
/Scylla.sh4
/Scylla.sparc
/Scylla.spc
/Scylla.ssh4
/Scylla.x32
/Scylla.x64
/Scylla.x86
/Scylla.x86_32
/Scylla.x86_64
/Senpai-aarch64-2010-2020-Love-010111010
/Senpai-arcle_750d-2010-2020-Love-010111010
/Senpai-armv4eb-2010-2020-Love-010111010
/Senpai-i586-2010-2020-Love-010111010
/Senpai-i686-2010-2020-Love-010111010
/Senpai-m68k-2010-2020-Love-010111010
/Senpai-m68k_68xxx-2010-2020-Love-010111010
/Senpai-microblazebe-2010-2020-Love-010111010
/Senpai-microblazeel-2010-2020-Love-010111010
/Senpai-mips-2010-2020-Love-010111010
/Senpai-nios2-2010-2020-Love-010111010
/Senpai-powerpc-2010-2020-Love-010111010
/Senpai-powerpc-440fp-2010-2020-Love-010111010
/Senpai-sh4-2010-2020-Love-010111010
/Senpai-sh_sh4-2010-2020-Love-010111010
/Senpai-sparc-2010-2020-Love-010111010
/Senpai-x86_64-2010-2020-Love-010111010
/Senpai-x86_64_core_i7-2010-2020-Love-010111010
/Senpai-x86_i686-2010-2020-Love-010111010
/senpai-armv7l-2010-2020-love-010111010
/smartfridgeshitnigga.arc
/smartfridgeshitnigga.arm
/smartfridgeshitnigga.arm4
/smartfridgeshitnigga.arm4l
/smartfridgeshitnigga.arm4t
/smartfridgeshitnigga.arm4tl
/smartfridgeshitnigga.arm4tll
/smartfridgeshitnigga.arm5
/smartfridgeshitnigga.arm5l
/smartfridgeshitnigga.arm5n
/smartfridgeshitnigga.arm6
/smartfridgeshitnigga.arm64
/smartfridgeshitnigga.arm6l
/smartfridgeshitnigga.arm7
/smartfridgeshitnigga.arm7l
/smartfridgeshitnigga.arm8
/smartfridgeshitnigga.armv4
/smartfridgeshitnigga.armv4l
/smartfridgeshitnigga.armv5l
/smartfridgeshitnigga.armv6
/smartfridgeshitnigga.armv61
/smartfridgeshitnigga.armv6l
/smartfridgeshitnigga.armv7l
/smartfridgeshitnigga.dbg
/smartfridgeshitnigga.exploit
/smartfridgeshitnigga.i4
/smartfridgeshitnigga.i486
/smartfridgeshitnigga.i586
/smartfridgeshitnigga.i6
/smartfridgeshitnigga.i686
/smartfridgeshitnigga.kill
/smartfridgeshitnigga.m68
/smartfridgeshitnigga.m68k
/smartfridgeshitnigga.mips
/smartfridgeshitnigga.mips64
/smartfridgeshitnigga.mipsel
/smartfridgeshitnigga.mpsl
/smartfridgeshitnigga.pcc
/smartfridgeshitnigga.powerpc
/smartfridgeshitnigga.powerpc-440fp
/smartfridgeshitnigga.powerppc
/smartfridgeshitnigga.ppc
/smartfridgeshitnigga.ppc2
/smartfridgeshitnigga.ppc440
/smartfridgeshitnigga.ppc440fp
/smartfridgeshitnigga.root
/smartfridgeshitnigga.root32
/smartfridgeshitnigga.sh
/smartfridgeshitnigga.sh4
/smartfridgeshitnigga.sparc
/smartfridgeshitnigga.spc
/smartfridgeshitnigga.ssh4
/smartfridgeshitnigga.x32
/smartfridgeshitnigga.x64
/smartfridgeshitnigga.x86
/smartfridgeshitnigga.x86_32
/smartfridgeshitnigga.x86_64
/smtpd.arc
/smtpd.arm
/smtpd.arm4
/smtpd.arm4l
/smtpd.arm4t
/smtpd.arm4tl
/smtpd.arm4tll
/smtpd.arm5
/smtpd.arm5l
/smtpd.arm5n
/smtpd.arm6
/smtpd.arm64
/smtpd.arm6l
/smtpd.arm7
/smtpd.arm7l
/smtpd.arm8
/smtpd.armv4
/smtpd.armv4l
/smtpd.armv5l
/smtpd.armv6
/smtpd.armv61
/smtpd.armv6l
/smtpd.armv7l
/smtpd.dbg
/smtpd.exploit
/smtpd.i4
/smtpd.i486
/smtpd.i586
/smtpd.i6
/smtpd.i686
/smtpd.kill
/smtpd.m68
/smtpd.m68k
/smtpd.mips
/smtpd.mips64
/smtpd.mipsel
/smtpd.mpsl
/smtpd.pcc
/smtpd.powerpc
/smtpd.powerpc-440fp
/smtpd.powerppc
/smtpd.ppc
/smtpd.ppc2
/smtpd.ppc440
/smtpd.ppc440fp
/smtpd.root
/smtpd.root32
/smtpd.sh
/smtpd.sh4
/smtpd.sparc
/smtpd.spc
/smtpd.ssh4
/smtpd.x32
/smtpd.x64
/smtpd.x86
/smtpd.x86_32
/smtpd.x86_64
/Snoopy.arc
/Snoopy.arm
/Snoopy.arm4
/Snoopy.arm4l
/Snoopy.arm4t
/Snoopy.arm4tl
/Snoopy.arm4tll
/Snoopy.arm5
/Snoopy.arm5l
/Snoopy.arm5n
/Snoopy.arm6
/Snoopy.arm64
/Snoopy.arm6l
/Snoopy.arm7
/Snoopy.arm7l
/Snoopy.arm8
/Snoopy.armv4
/Snoopy.armv4l
/Snoopy.armv5l
/Snoopy.armv6
/Snoopy.armv61
/Snoopy.armv6l
/Snoopy.armv7l
/Snoopy.dbg
/Snoopy.exploit
/Snoopy.i4
/Snoopy.i486
/Snoopy.i586
/Snoopy.i6
/Snoopy.i686
/Snoopy.kill
/Snoopy.m68
/Snoopy.m68k
/Snoopy.mips
/Snoopy.mips64
/Snoopy.mipsel
/Snoopy.mpsl
/Snoopy.pcc
/Snoopy.powerpc
/Snoopy.powerpc-440fp
/Snoopy.powerppc
/Snoopy.ppc
/Snoopy.ppc2
/Snoopy.ppc440
/Snoopy.ppc440fp
/Snoopy.root
/Snoopy.root32
/Snoopy.sh
/Snoopy.sh4
/Snoopy.sparc
/Snoopy.spc
/Snoopy.ssh4
/Snoopy.x32
/Snoopy.x64
/Snoopy.x86
/Snoopy.x86_32
/Snoopy.x86_64
/string.arc
/string.arm
/string.arm4
/string.arm4l
/string.arm4t
/string.arm4tl
/string.arm4tll
/string.arm5
/string.arm5l
/string.arm5n
/string.arm6
/string.arm64
/string.arm6l
/string.arm7
/string.arm7l
/string.arm8
/string.armv4
/string.armv4l
/string.armv5l
/string.armv6
/string.armv61
/string.armv6l
/string.armv7l
/string.dbg
/string.exploit
/string.i4
/string.i486
/string.i586
/string.i6
/string.i686
/string.kill
/string.m68
/string.m68k
/string.mips
/string.mips64
/string.mipsel
/string.mpsl
/string.pcc
/string.powerpc
/string.powerpc-440fp
/string.powerppc
/string.ppc
/string.ppc2
/string.ppc440
/string.ppc440fp
/string.root
/string.root32
/string.sh
/string.sh4
/string.sparc
/string.spc
/string.ssh4
/string.x32
/string.x64
/string.x86
/string.x86_32
/string.x86_64
/SubZero.arc
/SubZero.arm
/SubZero.arm4
/SubZero.arm4l
/SubZero.arm4t
/SubZero.arm4tl
/SubZero.arm4tll
/SubZero.arm5
/SubZero.arm5l
/SubZero.arm5n
/SubZero.arm6
/SubZero.arm64
/SubZero.arm6l
/SubZero.arm7
/SubZero.arm7l
/SubZero.arm8
/SubZero.armv4
/SubZero.armv4l
/SubZero.armv5l
/SubZero.armv6
/SubZero.armv61
/SubZero.armv6l
/SubZero.armv7l
/SubZero.dbg
/SubZero.exploit
/SubZero.i4
/SubZero.i486
/SubZero.i586
/SubZero.i6
/SubZero.i686
/SubZero.kill
/SubZero.m68
/SubZero.m68k
/SubZero.mips
/SubZero.mips64
/SubZero.mipsel
/SubZero.mpsl
/SubZero.pcc
/SubZero.powerpc
/SubZero.powerpc-440fp
/SubZero.powerppc
/SubZero.ppc
/SubZero.ppc2
/SubZero.ppc440
/SubZero.ppc440fp
/SubZero.root
/SubZero.root32
/SubZero.sh
/SubZero.sh4
/SubZero.sparc
/SubZero.spc
/SubZero.ssh4
/SubZero.x32
/SubZero.x64
/SubZero.x86
/SubZero.x86_32
/SubZero.x86_64
/Thotty.arc
/Thotty.arm
/Thotty.arm4
/Thotty.arm4l
/Thotty.arm4t
/Thotty.arm4tl
/Thotty.arm4tll
/Thotty.arm5
/Thotty.arm5l
/Thotty.arm5n
/Thotty.arm6
/Thotty.arm64
/Thotty.arm6l
/Thotty.arm7
/Thotty.arm7l
/Thotty.arm8
/Thotty.armv4
/Thotty.armv4l
/Thotty.armv5l
/Thotty.armv6
/Thotty.armv61
/Thotty.armv6l
/Thotty.armv7l
/Thotty.dbg
/Thotty.exploit
/Thotty.i4
/Thotty.i486
/Thotty.i586
/Thotty.i6
/Thotty.i686
/Thotty.kill
/Thotty.m68
/Thotty.m68k
/Thotty.mips
/Thotty.mips64
/Thotty.mipsel
/Thotty.mpsl
/Thotty.pcc
/Thotty.powerpc
/Thotty.powerpc-440fp
/Thotty.powerppc
/Thotty.ppc
/Thotty.ppc2
/Thotty.ppc440
/Thotty.ppc440fp
/Thotty.root
/Thotty.root32
/Thotty.sh
/Thotty.sh4
/Thotty.sparc
/Thotty.spc
/Thotty.ssh4
/Thotty.x32
/Thotty.x64
/Thotty.x86
/Thotty.x86_32
/Thotty.x86_64
/uranium.arc
/uranium.arm
/uranium.arm4
/uranium.arm4l
/uranium.arm4t
/uranium.arm4tl
/uranium.arm4tll
/uranium.arm5
/uranium.arm5l
/uranium.arm5n
/uranium.arm6
/uranium.arm64
/uranium.arm6l
/uranium.arm7
/uranium.arm7l
/uranium.arm8
/uranium.armv4
/uranium.armv4l
/uranium.armv5l
/uranium.armv6
/uranium.armv61
/uranium.armv6l
/uranium.armv7l
/uranium.dbg
/uranium.exploit
/uranium.i4
/uranium.i486
/uranium.i586
/uranium.i6
/uranium.i686
/uranium.kill
/uranium.m68
/uranium.m68k
/uranium.mips
/uranium.mips64
/uranium.mipsel
/uranium.mpsl
/uranium.pcc
/uranium.powerpc
/uranium.powerpc-440fp
/uranium.powerppc
/uranium.ppc
/uranium.ppc2
/uranium.ppc440
/uranium.ppc440fp
/uranium.root
/uranium.root32
/uranium.sh
/uranium.sh4
/uranium.sparc
/uranium.spc
/uranium.ssh4
/uranium.x32
/uranium.x64
/uranium.x86
/uranium.x86_32
/uranium.x86_64
/whrgjwrgjwrg2463563563564.arc
/whrgjwrgjwrg2463563563564.arm
/whrgjwrgjwrg2463563563564.arm4
/whrgjwrgjwrg2463563563564.arm4l
/whrgjwrgjwrg2463563563564.arm4t
/whrgjwrgjwrg2463563563564.arm4tl
/whrgjwrgjwrg2463563563564.arm4tll
/whrgjwrgjwrg2463563563564.arm5
/whrgjwrgjwrg2463563563564.arm5l
/whrgjwrgjwrg2463563563564.arm5n
/whrgjwrgjwrg2463563563564.arm6
/whrgjwrgjwrg2463563563564.arm64
/whrgjwrgjwrg2463563563564.arm6l
/whrgjwrgjwrg2463563563564.arm7
/whrgjwrgjwrg2463563563564.arm7l
/whrgjwrgjwrg2463563563564.arm8
/whrgjwrgjwrg2463563563564.armv4
/whrgjwrgjwrg2463563563564.armv4l
/whrgjwrgjwrg2463563563564.armv5l
/whrgjwrgjwrg2463563563564.armv6
/whrgjwrgjwrg2463563563564.armv61
/whrgjwrgjwrg2463563563564.armv6l
/whrgjwrgjwrg2463563563564.armv7l
/whrgjwrgjwrg2463563563564.dbg
/whrgjwrgjwrg2463563563564.exploit
/whrgjwrgjwrg2463563563564.i4
/whrgjwrgjwrg2463563563564.i486
/whrgjwrgjwrg2463563563564.i586
/whrgjwrgjwrg2463563563564.i6
/whrgjwrgjwrg2463563563564.i686
/whrgjwrgjwrg2463563563564.kill
/whrgjwrgjwrg2463563563564.m68
/whrgjwrgjwrg2463563563564.m68k
/whrgjwrgjwrg2463563563564.mips
/whrgjwrgjwrg2463563563564.mips64
/whrgjwrgjwrg2463563563564.mipsel
/whrgjwrgjwrg2463563563564.mpsl
/whrgjwrgjwrg2463563563564.pcc
/whrgjwrgjwrg2463563563564.powerpc
/whrgjwrgjwrg2463563563564.powerpc-440fp
/whrgjwrgjwrg2463563563564.powerppc
/whrgjwrgjwrg2463563563564.ppc
/whrgjwrgjwrg2463563563564.ppc2
/whrgjwrgjwrg2463563563564.ppc440
/whrgjwrgjwrg2463563563564.ppc440fp
/whrgjwrgjwrg2463563563564.root
/whrgjwrgjwrg2463563563564.root32
/whrgjwrgjwrg2463563563564.sh
/whrgjwrgjwrg2463563563564.sh4
/whrgjwrgjwrg2463563563564.sparc
/whrgjwrgjwrg2463563563564.spc
/whrgjwrgjwrg2463563563564.ssh4
/whrgjwrgjwrg2463563563564.x32
/whrgjwrgjwrg2463563563564.x64
/whrgjwrgjwrg2463563563564.x86
/whrgjwrgjwrg2463563563564.x86_32
/whrgjwrgjwrg2463563563564.x86_64
/XIe20-xD.arc
/XIe20-xD.arm
/XIe20-xD.arm4
/XIe20-xD.arm4l
/XIe20-xD.arm4t
/XIe20-xD.arm4tl
/XIe20-xD.arm4tll
/XIe20-xD.arm5
/XIe20-xD.arm5l
/XIe20-xD.arm5n
/XIe20-xD.arm6
/XIe20-xD.arm64
/XIe20-xD.arm6l
/XIe20-xD.arm7
/XIe20-xD.arm7l
/XIe20-xD.arm8
/XIe20-xD.armv4
/XIe20-xD.armv4l
/XIe20-xD.armv5l
/XIe20-xD.armv6
/XIe20-xD.armv61
/XIe20-xD.armv6l
/XIe20-xD.armv7l
/XIe20-xD.dbg
/XIe20-xD.exploit
/XIe20-xD.i4
/XIe20-xD.i486
/XIe20-xD.i586
/XIe20-xD.i6
/XIe20-xD.i686
/XIe20-xD.kill
/XIe20-xD.m68
/XIe20-xD.m68k
/XIe20-xD.mips
/XIe20-xD.mips64
/XIe20-xD.mipsel
/XIe20-xD.mpsl
/XIe20-xD.pcc
/XIe20-xD.powerpc
/XIe20-xD.powerpc-440fp
/XIe20-xD.powerppc
/XIe20-xD.ppc
/XIe20-xD.ppc2
/XIe20-xD.ppc440
/XIe20-xD.ppc440fp
/XIe20-xD.root
/XIe20-xD.root32
/XIe20-xD.sh
/XIe20-xD.sh4
/XIe20-xD.sparc
/XIe20-xD.spc
/XIe20-xD.ssh4
/XIe20-xD.x32
/XIe20-xD.x64
/XIe20-xD.x86
/XIe20-xD.x86_32
/XIe20-xD.x86_64
9.wolfiot.xyz
c.wolfiot.xyz
hwsrv-675710.hostwindsdns.com
hwsrv-720737.hostwindsdns.com
jocuri.trophygaming.net
kankalarnetwork.duckdns.org
magic-living.com
scan.casualaffinity.net
v9orbit.ddns.net
vstress.pw
/ds8yg8wbaja2/
/gh0sssttluuckyy/
/ISelfrepCarsNShit/
/s84j93nd3ht03w33dt/
/servicesd000/
/servicesDATA00000/
/slr41ce7sE741/
/hoho4christmastrees/
/p0t4t0dir/
/PaulRohKi-nam/
/x0ox0ox0oxDefault/
/xz888000/
/yesabotnetbin/

# Reference: https://twitter.com/bad_packets/status/1276921635895824386

194.15.36.47:5034
194.15.36.47:59314

# Reference: https://www.virustotal.com/gui/file/85ecfbee636339743a93b105dac3ee197b61bbed6332d0fb7292f31283f0c708/detection

185.172.111.212:1283
185.172.111.212:2323
185.172.111.212:80

# Reference: https://urlhaus.abuse.ch/downloads/text_recent/

/ad.arc
/ad.arm
/ad.arm4
/ad.arm4l
/ad.arm4t
/ad.arm4tl
/ad.arm4tll
/ad.arm5
/ad.arm5l
/ad.arm5n
/ad.arm6
/ad.arm64
/ad.arm6l
/ad.arm7
/ad.arm7l
/ad.arm8
/ad.armv4
/ad.armv4l
/ad.armv5l
/ad.armv6
/ad.armv61
/ad.armv6l
/ad.armv7l
/ad.dbg
/ad.exploit
/ad.i4
/ad.i486
/ad.i586
/ad.i6
/ad.i686
/ad.kill
/ad.m68
/ad.m68k
/ad.mips
/ad.mips64
/ad.mipsel
/ad.mpsl
/ad.pcc
/ad.powerpc
/ad.powerpc-440fp
/ad.powerppc
/ad.ppc
/ad.ppc2
/ad.ppc440
/ad.ppc440fp
/ad.root
/ad.root32
/ad.sh
/ad.sh4
/ad.sparc
/ad.spc
/ad.ssh4
/ad.x32
/ad.x64
/ad.x86
/ad.x86_32
/ad.x86_64
/invictus.arc
/invictus.arm
/invictus.arm4
/invictus.arm4l
/invictus.arm4t
/invictus.arm4tl
/invictus.arm4tll
/invictus.arm5
/invictus.arm5l
/invictus.arm5n
/invictus.arm6
/invictus.arm64
/invictus.arm6l
/invictus.arm7
/invictus.arm7l
/invictus.arm8
/invictus.armv4
/invictus.armv4l
/invictus.armv5l
/invictus.armv6
/invictus.armv61
/invictus.armv6l
/invictus.armv7l
/invictus.dbg
/invictus.exploit
/invictus.i4
/invictus.i486
/invictus.i586
/invictus.i6
/invictus.i686
/invictus.kill
/invictus.m68
/invictus.m68k
/invictus.mips
/invictus.mips64
/invictus.mipsel
/invictus.mpsl
/invictus.pcc
/invictus.powerpc
/invictus.powerpc-440fp
/invictus.powerppc
/invictus.ppc
/invictus.ppc2
/invictus.ppc440
/invictus.ppc440fp
/invictus.root
/invictus.root32
/invictus.sh
/invictus.sh4
/invictus.sparc
/invictus.spc
/invictus.ssh4
/invictus.x32
/invictus.x64
/invictus.x86
/invictus.x86_32
/invictus.x86_64
/makask.arc
/makask.arm
/makask.arm4
/makask.arm4l
/makask.arm4t
/makask.arm4tl
/makask.arm4tll
/makask.arm5
/makask.arm5l
/makask.arm5n
/makask.arm6
/makask.arm64
/makask.arm6l
/makask.arm7
/makask.arm7l
/makask.arm8
/makask.armv4
/makask.armv4l
/makask.armv5l
/makask.armv6
/makask.armv61
/makask.armv6l
/makask.armv7l
/makask.dbg
/makask.exploit
/makask.i4
/makask.i486
/makask.i586
/makask.i6
/makask.i686
/makask.kill
/makask.m68
/makask.m68k
/makask.mips
/makask.mips64
/makask.mipsel
/makask.mpsl
/makask.pcc
/makask.powerpc
/makask.powerpc-440fp
/makask.powerppc
/makask.ppc
/makask.ppc2
/makask.ppc440
/makask.ppc440fp
/makask.root
/makask.root32
/makask.sh
/makask.sh4
/makask.sparc
/makask.spc
/makask.ssh4
/makask.x32
/makask.x64
/makask.x86
/makask.x86_32
/makask.x86_64

# Reference: https://twitter.com/FewAtoms/status/1279458304125616129

/FederalAgency.arc
/FederalAgency.arm
/FederalAgency.arm4
/FederalAgency.arm4l
/FederalAgency.arm4t
/FederalAgency.arm4tl
/FederalAgency.arm4tll
/FederalAgency.arm5
/FederalAgency.arm5l
/FederalAgency.arm5n
/FederalAgency.arm6
/FederalAgency.arm64
/FederalAgency.arm6l
/FederalAgency.arm7
/FederalAgency.arm7l
/FederalAgency.arm8
/FederalAgency.armv4
/FederalAgency.armv4l
/FederalAgency.armv5l
/FederalAgency.armv6
/FederalAgency.armv61
/FederalAgency.armv6l
/FederalAgency.armv7l
/FederalAgency.dbg
/FederalAgency.exploit
/FederalAgency.i4
/FederalAgency.i486
/FederalAgency.i586
/FederalAgency.i6
/FederalAgency.i686
/FederalAgency.kill
/FederalAgency.m68
/FederalAgency.m68k
/FederalAgency.mips
/FederalAgency.mips64
/FederalAgency.mipsel
/FederalAgency.mpsl
/FederalAgency.pcc
/FederalAgency.powerpc
/FederalAgency.powerpc-440fp
/FederalAgency.powerppc
/FederalAgency.ppc
/FederalAgency.ppc2
/FederalAgency.ppc440
/FederalAgency.ppc440fp
/FederalAgency.root
/FederalAgency.root32
/FederalAgency.sh
/FederalAgency.sh4
/FederalAgency.sparc
/FederalAgency.spc
/FederalAgency.ssh4
/FederalAgency.x32
/FederalAgency.x64
/FederalAgency.x86
/FederalAgency.x86_32
/FederalAgency.x86_64
/fbi.gov.arc
/fbi.gov.arm
/fbi.gov.arm4
/fbi.gov.arm4l
/fbi.gov.arm4t
/fbi.gov.arm4tl
/fbi.gov.arm4tll
/fbi.gov.arm5
/fbi.gov.arm5l
/fbi.gov.arm5n
/fbi.gov.arm6
/fbi.gov.arm64
/fbi.gov.arm6l
/fbi.gov.arm7
/fbi.gov.arm7l
/fbi.gov.arm8
/fbi.gov.armv4
/fbi.gov.armv4l
/fbi.gov.armv5l
/fbi.gov.armv6
/fbi.gov.armv61
/fbi.gov.armv6l
/fbi.gov.armv7l
/fbi.gov.dbg
/fbi.gov.exploit
/fbi.gov.i4
/fbi.gov.i486
/fbi.gov.i586
/fbi.gov.i6
/fbi.gov.i686
/fbi.gov.kill
/fbi.gov.m68
/fbi.gov.m68k
/fbi.gov.mips
/fbi.gov.mips64
/fbi.gov.mipsel
/fbi.gov.mpsl
/fbi.gov.pcc
/fbi.gov.powerpc
/fbi.gov.powerpc-440fp
/fbi.gov.powerppc
/fbi.gov.ppc
/fbi.gov.ppc2
/fbi.gov.ppc440
/fbi.gov.ppc440fp
/fbi.gov.root
/fbi.gov.root32
/fbi.gov.sh
/fbi.gov.sh4
/fbi.gov.sparc
/fbi.gov.spc
/fbi.gov.ssh4
/fbi.gov.x32
/fbi.gov.x64
/fbi.gov.x86
/fbi.gov.x86_32
/fbi.gov.x86_64

# Reference: https://twitter.com/bad_packets/status/1279611256547143680

/ttint.arc
/ttint.arm
/ttint.arm4
/ttint.arm4l
/ttint.arm4t
/ttint.arm4tl
/ttint.arm4tll
/ttint.arm5
/ttint.arm5l
/ttint.arm5n
/ttint.arm6
/ttint.arm64
/ttint.arm6l
/ttint.arm7
/ttint.arm7l
/ttint.arm8
/ttint.armv4
/ttint.armv4l
/ttint.armv5l
/ttint.armv6
/ttint.armv61
/ttint.armv6l
/ttint.armv7l
/ttint.dbg
/ttint.exploit
/ttint.i4
/ttint.i486
/ttint.i586
/ttint.i6
/ttint.i686
/ttint.kill
/ttint.m68
/ttint.m68k
/ttint.mips
/ttint.mips64
/ttint.mipseb
/ttint.mipsel
/ttint.mpsl
/ttint.pcc
/ttint.powerpc
/ttint.powerpc-440fp
/ttint.powerppc
/ttint.ppc
/ttint.ppc2
/ttint.ppc440
/ttint.ppc440fp
/ttint.root
/ttint.root32
/ttint.sh
/ttint.sh4
/ttint.sparc
/ttint.spc
/ttint.ssh4
/ttint.x32
/ttint.x64
/ttint.x86
/ttint.x86_32
/ttint.x86_64

# Reference: https://twitter.com/bad_packets/status/1279986441385172993
# Reference: https://otx.alienvault.com/pulse/5f034f9b9e99f7d878531c42

103.224.82.85:8000
185.172.111.233:999
http://217.12.199.179
http://45.77.28.70
panel.devilsden.net

# Reference: https://www.virustotal.com/gui/ip-address/45.95.168.173/relations

gay.energy

# Reference: https://www.virustotal.com/gui/domain/saoascnc.duckdns.org/relations

saoascnc.duckdns.org

# Reference: https://www.virustotal.com/gui/file/76875aa0a079816e43d5741b4d0f5e3facc1b5a3fee0ec1933a10e6faa813974/detection

177.160.103.220:37215
177.160.103.220:58666

# Reference: https://www.virustotal.com/gui/file/b9b8a824168f96e9fbfb2d92d41d2704b0f413e5a0df637b026ec171e31694a8/detection

193.237.151.237:37215
193.237.151.237:58666

# Reference: https://www.virustotal.com/gui/file/9b62e40d0770e573eb1771d52a64ed471a9c7677f4cb4011ca6091f30f4fb038/detection

50.134.108.219:37215
50.134.108.219:58666

# Reference: https://www.virustotal.com/gui/file/7bdfe25eb983ea5d13d871c690369579b94d8615ed580ba55f0c9d07b1419916/detection
# Reference: https://www.virustotal.com/gui/file/e76a87a6a31b32b3d4dea93792a4091dc06309ab9df957bdca95dea3d4cf5b9f/detection
# Reference: https://www.virustotal.com/gui/file/fac58a65429a5e56b135c3c808ebe3f72b2e802099026c97a58cdb62b07af463/detection

217.32.184.17:5555
217.32.184.17:8080
217.32.184.17:8088
217.32.184.17:9080
217.32.184.17:37215
217.32.184.17:55555
217.32.184.17:58666

# Reference: https://www.virustotal.com/gui/file/6b92ce27889a1c8caf02d61a5da9257159697cfb344f901392ef914d5d1e3228/detection

197.20.252.14:37215
197.20.252.14:58666

# Reference: https://www.virustotal.com/gui/file/e79fc3d76876524e94de9cf8090907abbb9e395aa401a9a1ed93d63200a774fd/detection

197.211.215.168:37215
197.211.215.168:58666

# Reference: https://www.virustotal.com/gui/file/d22c8793c00d104d397432a39168189a8bdedda97b6ad90f69f66dd90cc02b6f/detection

2.128.139.158:37215
2.128.139.158:58666

# Reference: https://www.virustotal.com/gui/file/4dd5be931474fc2d5d171685f097ebdbe678c9f0dde1e83bfb1beddcd2c9a611/detection

2.145.113.76:37215
2.145.113.76:58666

# Reference: https://www.virustotal.com/gui/file/bf9d9015640514ed85af83520ffa2c905626c5c15af7a7944a595916fd6d8f83/detection

124.142.175.62:37215
124.142.175.62:58666

# Reference: https://www.virustotal.com/gui/file/8c8c54043812936a13f0da1bed7fca295b98a8a88f525c98fed2c0d473064b25/detection

17.134.222.250:37215
17.134.222.250:58666

# Reference: https://www.virustotal.com/gui/file/3bc59c90a798255164669130b81019ca2726a244c30b103459709918a2dc732e/detection

142.123.244.201:37215
142.123.244.201:58666

# Reference: https://www.virustotal.com/gui/file/2c52ad0196da9dc8d484d81203bce5a85bda26868a8c810cf0e09a31cd1202b7/detection

88.181.145.203:37215
88.181.145.203:58666

# Reference: https://www.virustotal.com/gui/file/89fbdce685a0a6d63babb59339dbff0be68830e5b5b77a6221d6f4fd9a12a8dc/detection

197.220.4.203:37215
197.220.4.203:58666

# Reference: https://www.virustotal.com/gui/file/0d2d5f494b8a0f4f52923a962d23d90f19fbe82ec3020ff088862a79f54e3ef4/detection

75.216.182.106:37215
75.216.182.106:58666

# Reference: https://www.virustotal.com/gui/file/40154d33b36d2ee884f989cf70dcdbcdafd06a023bb013851eb36e9a543bae2d/detection

197.187.43.242:37215
197.187.43.242:58666

# Reference: https://www.virustotal.com/gui/file/e4abca3958055aa76f3337bdb56b6f7ac50cb24ca5f290068092f275a4da7487/detection

161.116.77.158:37215
161.116.77.158:58666

# Reference: https://www.virustotal.com/gui/file/7882e58a07cd61e9686cd69552a5021dfe7ccd3c4e5c162bc817da99cd715487/detection

136.162.221.196:37215
136.162.221.196:58666

# Reference: https://www.virustotal.com/gui/file/a61ef7d749e3d91b91d32fd4ba73dc675cccc3bacd1c153d1a1432ee78a580aa/detection

197.200.75.82:37215
197.200.75.82:58666

# Reference: https://www.virustotal.com/gui/file/e533fddd1278c8cfadaa39fe98e7ac6ff00d9ecdc979ecee27bc4c9feb95f5bd/detection

20.214.186.199:37215
20.214.186.199:58666

# Reference: https://www.virustotal.com/gui/file/fcf0871f70c5652ff6914fff74cbc8d851151230dfdfd03055010b46b5e630e5/detection

197.17.185.59:37215
197.17.185.59:58666

# Reference: https://www.virustotal.com/gui/file/d3acc130fbfffd1901579daad56d4f24fc127bd2a550428aa83f72e17de6b59f/detection

78.0.72.243:37215
78.0.72.243:58666

# Reference: https://www.virustotal.com/gui/file/7708a88aab442710759513b2e3297a93447aea770e3a6a8757517e81ba5af5d1/detection

125.42.85.48:37215
125.42.85.48:58666

# Reference: https://www.virustotal.com/gui/file/5a2563debdaeb62a18aadbc1d78f9dccc8111716d76bd8b9f95444702c75424b/detection

197.45.1.102:37215
197.45.1.102:58666

# Reference: https://www.virustotal.com/gui/file/21ab3b17239c6b152eee79ab8be1fadc140dee85887102d67b6ebb9c2109c9c1/detection

197.125.173.78:37215
197.125.173.78:58666

# Reference: https://www.virustotal.com/gui/file/ebf7bd700fb100a14a5893363ce703ad745a546c872eaf986c016eea843d1ee2/detection
# Reference: https://www.virustotal.com/gui/file/1807dc98fdee9fde4a6020ed2943a0bed9fa8031643ebe4fa9495ef2b3506d40/detection

209.168.243.134:5555
209.168.243.134:8088
209.168.243.134:37215
209.168.243.134:55555
209.168.243.134:58666

# Reference: https://www.virustotal.com/gui/file/fce06b359367298a7e708ddd39a8ad210901438898aa06c877e23613aee00ac2/detection

201.112.67.184:37215
201.112.67.184:58666

# Reference: https://www.virustotal.com/gui/file/f76d76dc1857dbae93a59c30c3132b92f0acced1ecc8bf497463d095f1b55fc1/detection

197.142.15.17:37215
197.142.15.17:58666

# Reference: https://www.virustotal.com/gui/file/9466a43a53257f7df2e1b918353d54db9e1c1e6a2a38ba8016436529bd7744dc/detection

197.209.36.175:37215
197.209.36.175:58666

# Reference: https://www.virustotal.com/gui/file/3d5b2e46a11898537ac51c8c03aec50350119ebcfebf1e92868b007c2c8c3636/detection

59.169.193.112:37215
59.169.193.112:58666

# Reference: https://www.virustotal.com/gui/file/90caa6e2dd1307672bc462d9183d30fee42b566e870fd8928679c872d9c4414e/detection

117.113.251.250:37215
117.113.251.250:58666

# Reference: https://www.virustotal.com/gui/file/7554a1de437ecabeb81f47b0a0f8d85805139f49b783becab48edb136ed19388/detection

14.147.246.171:37215
14.147.246.171:58666

# Reference: https://www.virustotal.com/gui/file/26bd86f6dd2669bdf9f60b09c7254127ea8c4d69954859ccd5d14af14e85708b/detection

204.147.67.136:37215
204.147.67.136:58666

# Reference: https://www.virustotal.com/gui/file/53eb1aefc0e8459f215893b71fbb1b5e1ca0722d57ace243e9cf943ed33dbb0e/detection

71.250.167.178:37215
71.250.167.178:58666

# Reference: https://www.virustotal.com/gui/file/2845c4fee5e9329eb4900eb9f17565cb244b4f7f0b3d068481d702e5f8c7ddba/detection

117.185.160.106:37215
117.185.160.106:58666

# Reference: https://www.virustotal.com/gui/file/53829633be309e93ebeddf8c009044a3ac508b13976fa9197ad7be23ddbebe34/detection

197.58.4.137:37215
197.58.4.137:58666

# Reference: https://www.virustotal.com/gui/file/3ce0a846216b09640067c62995dd32f90a76a3d4adf43ecb62fab923db892f8e/detection

197.49.211.83:37215
197.49.211.83:58666

# Reference: https://www.virustotal.com/gui/file/3a5f44928cb3041391d093a64d9105e4fc29be99ec057e3f600f9526cfeab49f/detection

171.246.82.132:37215
171.246.82.132:58666

# Reference: https://www.virustotal.com/gui/file/9ff7b832df8186899a2fb6c10aa906a17170a5a12cd130abd6f281b6fb14a860/detection

197.96.138.251:37215
197.96.138.251:58666

# Reference: https://www.virustotal.com/gui/file/b7c78864ae0414f16958aff4523216df03ff69ccbddc3f3cffe621fc0d96b591/detection

197.88.11.55:37215
197.88.11.55:58666

# Reference: https://www.virustotal.com/gui/file/9870ebed293a8fba0f59288d01a44b62ccba3613943967b4399f1abee861a85b/detection

197.70.163.239:37215
197.70.163.239:58666

# Reference: https://www.virustotal.com/gui/file/37af81449ae062c4dbb9334b5d9a21312d19ad7812a7334e4bd61a99ad1f57ab/detection

197.32.139.81:37215
197.32.139.81:58666

# Reference: https://www.virustotal.com/gui/file/ff399cbc39a0330834704e745c6ebeae621b416d495ba9661108350189b0b5cd/detection

197.199.232.87:37215
197.199.232.87:58666

# Reference: https://www.virustotal.com/gui/file/04da68d47d3b83fc8088f678f89ab4a9cf135f36beb9d2bfd12a932ea04fb1e1/detection

197.13.151.96:37215
197.13.151.96:58666

# Reference: https://www.virustotal.com/gui/file/3c9850932eeca9963391d38f0239d54628d19973150f9d55184e804f092096fb/detection

197.191.131.73:37215
197.191.131.73:58666

# Reference: https://www.virustotal.com/gui/file/123bc5637e362238931fa45a225abbaa4aa1d745dc977d1e4edadb822c8f8be8/detection

42.126.17.148:37215
42.126.17.148:58666

# Reference: https://www.virustotal.com/gui/file/3f8003f2a2222123ac0055979972a69cb8b43e578149f79a18629e5ff96b0e5a/detection

197.111.155.229:37215
197.111.155.229:58666

# Reference: https://www.virustotal.com/gui/file/72d84c12aa275c566d7f1d26290dd55e2c9f5df67d2503d2dbe9e757eb35aa3b/detection

99.177.72.95:37215
99.177.72.95:58666

# Reference: https://www.virustotal.com/gui/file/afdcd6c34334e951b090cae26d0192fc3743bfa0208119980be8ed913e39527c/detection

32.234.66.5:37215
32.234.66.5:58666

# Reference: https://www.virustotal.com/gui/file/404e00c57d96defd21258eb37a111e2c48d38ec90fe5c3d5bef73c6a6e505e44/detection

197.122.123.26:37215
197.122.123.26:58666

# Reference: https://www.virustotal.com/gui/file/e3e93afc77470568a41241b768044f18973a45230f081949891923cc5cee0952/detection

197.138.79.198:37215
197.138.79.198:58666

# Reference: https://www.virustotal.com/gui/file/cbcd7248122664cd7762308adf09360c6bae1e097df24d82a1e09d797e786769/detection

223.62.231.162:37215
223.62.231.162:58666

# Reference: https://www.virustotal.com/gui/file/99734626f69167ec0e616158ff76f2b48a4f1b9d1c1d6cd94f15279e25dcab56/detection

97.236.1.119:37215
97.236.1.119:58666

# Reference: https://www.virustotal.com/gui/file/8582e2ba24d913e3668a59dd54907e1efdedcf61adc331186e02b3ee2f08d03f/detection

162.89.244.166:37215
162.89.244.166:58666

# Reference: https://www.virustotal.com/gui/file/f04422756c09fbe827b13de89589257b31efdc18d1c8a51ff27998d416fafa47/detection

111.228.135.81:37215
111.228.135.81:58666

# Reference: https://www.virustotal.com/gui/file/93d615fb131af3e3d4fc1978053537038ff959a06edbf0fafe064fb9dc7afc3c/detection

137.145.167.7:37215
137.145.167.7:58666

# Reference: https://www.virustotal.com/gui/file/5c0677c28a709af414aa3f68144c366ac08b96d8a46c1fd2891ab0962a1b7b9e/detection

188.199.231.96:37215
188.199.231.96:58666

# Reference: https://www.virustotal.com/gui/file/167dcc26edcb9bcf5f8891e5e7cd6ab97716c7123355280f32f9d336468a4028/detection

183.54.156.69:37215
183.54.156.69:58666

# Reference: https://www.virustotal.com/gui/file/c44b211a51f25196b2fc1312f1d93f73f8db3b6ae8e3a642a39b4cba342c4130/detection

197.142.109.197:37215
197.142.109.197:58666

# Reference: https://www.virustotal.com/gui/file/82e3bbb14c418ebd7aac5a178d1701dbb318ae44dc56b752356920153e3bd8c3/detection

173.131.21.229:37215
173.131.21.229:58666

# Reference: https://www.virustotal.com/gui/file/30915b862ec0c1f586b581f174d0f913902f79179c97ac8b460fbc7c134d4bd9/detection

209.75.118.5:37215
209.75.118.5:58666

# Reference: https://www.virustotal.com/gui/file/cda11fdb9ae6bf3c826334b3c5854c74cb037f1e131c1b083a2d6499d49f516d/detection

198.126.188.125:37215
198.126.188.125:58666

# Reference: https://www.virustotal.com/gui/file/94ac9c5f2757b6c95e9f1b3a40b3b47ca88f69479c05ae38b22b9bf5ae73e90e/detection

217.211.195.38:37215
217.211.195.38:58666

# Reference: https://www.virustotal.com/gui/file/b503e083bfe8a0a96818874615b679f54c2243ee6608d4371f2db73d3012aa0e/detection

197.228.90.28:37215
197.228.90.28:58666

# Reference: https://www.virustotal.com/gui/file/b9bff3c121ef9591e65f5a9575b3032f82fad9b733c317864160643fc0227beb/detection

96.133.253.250:37215
96.133.253.250:58666

# Reference: https://www.virustotal.com/gui/file/359cd80681519f612648a579ab9e0ad5258c3f027ea9a5b20377bea6ef87a5cc/detection

51.94.88.35:37215
51.94.88.35:58666

# Reference: https://www.virustotal.com/gui/file/caa0e8aef5b7459fd6b96346e50d2d94e5c0ee42bd83f134f85324c8f8629414/detection

90.246.53.159:37215
90.246.53.159:58666

# Reference: https://www.virustotal.com/gui/file/040aa2081c3b1ad863812054322ccb461ebf75ad35fa2d775a26ac457623f565/detection

20.209.187.197:37215
20.209.187.197:58666

# Reference: https://www.virustotal.com/gui/file/e26a3c2b353227ae758d75d0d71f44dc46809726499ef9ef08525b2fa67f89d9/detection

197.197.140.145:37215
197.197.140.145:58666

# Reference: https://www.virustotal.com/gui/file/64615e729ace7441b2a7e6764798fd8a464e57aee1c0593dcdd3a982b6396733/detection

193.63.10.150:37215
193.63.10.150:58666

# Reference: https://www.virustotal.com/gui/file/c6c63421f126e31ca648a55f35ffaede1fe4139722a214ba0f797ac95fa8bb65/detection

163.212.197.222:37215
163.212.197.222:58666

# Reference: https://www.virustotal.com/gui/file/ffdb84277124311fd124cfcd4671b47c7c6cc734e3b7c2baae1a6b0669dc6ff0/detection

176.65.55.201:37215
176.65.55.201:58666

# Reference: https://www.virustotal.com/gui/file/3fa62b668822897e5ca11dcc6570360e1268b4d04a8aa13d340def30d963fdd8/detection

197.95.109.251:37215
197.95.109.251:58666

# Reference: https://www.virustotal.com/gui/file/93cfcd62f5bf873452295b3ef4b00adcf1d3addc542e931b11cc9156b41a8984/detection

133.23.125.34:37215
133.23.125.34:58666
194.28.75.154:37215
194.28.75.154:58666

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/new-mirai-variant-expands-arsenal-exploits-cve-2020-10173/
# Reference: https://otx.alienvault.com/pulse/5f0b68c987f1df5694e7d91b

methcnc.duckdns.org
methscan.duckdns.org

# Reference: https://www.virustotal.com/gui/file/993ec96e0354f3fc9a669701513d601cc0201ad4dd93fdad72f4ba10bb26c080/detection

218.218.149.18:37215
218.218.149.18:58666

# Reference: https://www.virustotal.com/gui/file/5898861b8c89b9971fc6dd6ec1546fffa908eda78bb546e4ec22ecdba6386e48/detection

35.94.170.88:5555
35.94.170.88:8088
35.94.170.88:9080
35.94.170.88:37215
35.94.170.88:58666
65.168.115.134:5555
65.168.115.134:8088
65.168.115.134:9080
65.168.115.134:37215
65.168.115.134:58666

# Reference: https://www.virustotal.com/gui/file/16c0cd375bc2a84ccbf01c15685c0380c2400995f628a78d7b58bbe17d43dd72/detection

108.139.95.106:5555
108.139.95.106:8088
108.139.95.106:9080
108.139.95.106:37215
108.139.95.106:58666

# Reference: https://www.virustotal.com/gui/file/a9576574d307b0616e0e00821aabdaa7f70133643f8737da57f6774749674a5d/detection

45.35.33.196:37215
45.35.33.196:58666

# Reference: https://www.virustotal.com/gui/file/393a319078e1ccf242364f812b8d0caeadd9e7f31a0502fd073675fe89a72e36/detection

178.72.192.58:1723
178.72.192.58:5555
178.72.192.58:8088
178.72.192.58:9080
178.72.192.58:37215
178.72.192.58:58666

# Reference: https://www.virustotal.com/gui/file/54c91af07090f05e702e8b1eedad637c8fb0845544cfef21c359e945e3591a5d/detection

169.219.187.52:1723
169.219.187.52:5555
169.219.187.52:8088
169.219.187.52:9080
169.219.187.52:37215
169.219.187.52:55555
169.219.187.52:58666

# Reference: https://www.virustotal.com/gui/file/f035980019a91dbccc73a7cc08a4dc945ececf332180c88b4d1f26bc966cb6ad/detection

124.178.97.103:55555
124.178.97.103:8081
124.178.97.103:8080
124.178.97.103:8088
124.178.97.103:52869
124.178.97.103:9080

# Reference: https://www.virustotal.com/gui/file/67b5db6faaea69e4148b548b16f94d14989bebc800c9f1165aef8d435d5c0e0b/detection

187.161.214.191:8080
187.161.214.191:9080
187.161.214.191:52869
187.161.214.191:88

# Reference: https://www.virustotal.com/gui/file/5673e7862deb2dff17dfef3662d72db22c476c7daad88ff512ff09f0c8ec0b04/detection

66.175.85.112:55555
66.175.85.112:8088
66.175.85.112:9080

# Reference: https://www.virustotal.com/gui/file/dfc44d53155d6b3556bd238494ac928dddd9d2762db46b5a8d0c6afc3bc5950b/detection

69.220.33.110:8080
69.220.33.110:88
69.220.33.110:37215
69.220.33.110:52869
69.220.33.110:58666

# Reference: https://www.virustotal.com/gui/file/0167a0027d3fe37c1c2c92fbdc58b6d3f4458c396bd11e08c73669906820280c/detection

95.68.88.157:8080
95.68.88.157:5555
95.68.88.157:9080
95.68.88.157:37215
95.68.88.157:52869
95.68.88.157:58666

# Reference: https://www.virustotal.com/gui/file/25db87c76dfbbafa0fe1b2c3a8f3392904e6708022b8ad9a3c30a12324de2b77/detection

186.136.128.125:1723
186.136.128.125:5555
186.136.128.125:8088
186.136.128.125:9080
186.136.128.125:37215
186.136.128.125:52869
186.136.128.125:55555
186.136.128.1258:58666

# Reference: https://twitter.com/albertzsigovits/status/1282668879962157056

/LEANONDECK.arc
/LEANONDECK.arm
/LEANONDECK.arm4
/LEANONDECK.arm4l
/LEANONDECK.arm4t
/LEANONDECK.arm4tl
/LEANONDECK.arm4tll
/LEANONDECK.arm5
/LEANONDECK.arm5l
/LEANONDECK.arm5n
/LEANONDECK.arm6
/LEANONDECK.arm64
/LEANONDECK.arm6l
/LEANONDECK.arm7
/LEANONDECK.arm7l
/LEANONDECK.arm8
/LEANONDECK.armv4
/LEANONDECK.armv4l
/LEANONDECK.armv5l
/LEANONDECK.armv6
/LEANONDECK.armv61
/LEANONDECK.armv6l
/LEANONDECK.armv7l
/LEANONDECK.dbg
/LEANONDECK.exploit
/LEANONDECK.i4
/LEANONDECK.i486
/LEANONDECK.i586
/LEANONDECK.i6
/LEANONDECK.i686
/LEANONDECK.kill
/LEANONDECK.m68
/LEANONDECK.m68k
/LEANONDECK.mips
/LEANONDECK.mips64
/LEANONDECK.mipseb
/LEANONDECK.mipsel
/LEANONDECK.mpsl
/LEANONDECK.pcc
/LEANONDECK.powerpc
/LEANONDECK.powerpc-440fp
/LEANONDECK.powerppc
/LEANONDECK.ppc
/LEANONDECK.ppc2
/LEANONDECK.ppc440
/LEANONDECK.ppc440fp
/LEANONDECK.root
/LEANONDECK.root32
/LEANONDECK.sh
/LEANONDECK.sh4
/LEANONDECK.sparc
/LEANONDECK.spc
/LEANONDECK.ssh4
/LEANONDECK.x32
/LEANONDECK.x64
/LEANONDECK.x86
/LEANONDECK.x86_32
/LEANONDECK.x86_64

# Reference: https://twitter.com/albertzsigovits/status/1283340442659151872

ev0lve.cf

# Reference: https://twitter.com/bad_packets/status/1285272610519969792

185.172.111.181:34712
185.172.111.181:45

# Reference: https://twitter.com/0xrb/status/1285482038506647553
# Reference: https://twitter.com/hackingump1/status/1288748204121567232

/FuckinToaster.arc
/FuckinToaster.arm
/FuckinToaster.arm4
/FuckinToaster.arm4l
/FuckinToaster.arm4t
/FuckinToaster.arm4tl
/FuckinToaster.arm4tll
/FuckinToaster.arm5
/FuckinToaster.arm5l
/FuckinToaster.arm5n
/FuckinToaster.arm6
/FuckinToaster.arm64
/FuckinToaster.arm6l
/FuckinToaster.arm7
/FuckinToaster.arm7l
/FuckinToaster.arm8
/FuckinToaster.armv4
/FuckinToaster.armv4l
/FuckinToaster.armv5l
/FuckinToaster.armv6
/FuckinToaster.armv61
/FuckinToaster.armv6l
/FuckinToaster.armv7l
/FuckinToaster.dbg
/FuckinToaster.exploit
/FuckinToaster.i4
/FuckinToaster.i486
/FuckinToaster.i586
/FuckinToaster.i6
/FuckinToaster.i686
/FuckinToaster.kill
/FuckinToaster.m68
/FuckinToaster.m68k
/FuckinToaster.mips
/FuckinToaster.mips64
/FuckinToaster.mipseb
/FuckinToaster.mipsel
/FuckinToaster.mpsl
/FuckinToaster.pcc
/FuckinToaster.powerpc
/FuckinToaster.powerpc-440fp
/FuckinToaster.powerppc
/FuckinToaster.ppc
/FuckinToaster.ppc2
/FuckinToaster.ppc440
/FuckinToaster.ppc440fp
/FuckinToaster.root
/FuckinToaster.root32
/FuckinToaster.sh
/FuckinToaster.sh4
/FuckinToaster.sparc
/FuckinToaster.spc
/FuckinToaster.ssh4
/FuckinToaster.x32
/FuckinToaster.x64
/FuckinToaster.x86
/FuckinToaster.x86_32
/FuckinToaster.x86_64
/FuckMalwareResearchers/

# Reference: https://blacklist.cyberthreatcoalition.org/vetted/url.txt

/fuk.arc
/fuk.arm
/fuk.arm4
/fuk.arm4l
/fuk.arm4t
/fuk.arm4tl
/fuk.arm4tll
/fuk.arm5
/fuk.arm5l
/fuk.arm5n
/fuk.arm6
/fuk.arm64
/fuk.arm6l
/fuk.arm7
/fuk.arm7l
/fuk.arm8
/fuk.armv4
/fuk.armv4l
/fuk.armv5l
/fuk.armv6
/fuk.armv61
/fuk.armv6l
/fuk.armv7l
/fuk.dbg
/fuk.exploit
/fuk.i4
/fuk.i486
/fuk.i586
/fuk.i6
/fuk.i686
/fuk.kill
/fuk.m68
/fuk.m68k
/fuk.mips
/fuk.mips64
/fuk.mipseb
/fuk.mipsel
/fuk.mpsl
/fuk.pcc
/fuk.powerpc
/fuk.powerpc-440fp
/fuk.powerppc
/fuk.ppc
/fuk.ppc2
/fuk.ppc440
/fuk.ppc440fp
/fuk.root
/fuk.root32
/fuk.sh
/fuk.sh4
/fuk.sparc
/fuk.spc
/fuk.ssh4
/fuk.x32
/fuk.x64
/fuk.x86
/fuk.x86_32
/fuk.x86_64
/fuk4
/fuk4t
/fuk5
/fuk6

# Reference: https://twitter.com/0xrb/status/1287636469708812289

/netlab360.arc
/netlab360.arm
/netlab360.arm4
/netlab360.arm4l
/netlab360.arm4t
/netlab360.arm4tl
/netlab360.arm4tll
/netlab360.arm5
/netlab360.arm5l
/netlab360.arm5n
/netlab360.arm6
/netlab360.arm64
/netlab360.arm6l
/netlab360.arm7
/netlab360.arm7l
/netlab360.arm8
/netlab360.armv4
/netlab360.armv4l
/netlab360.armv5l
/netlab360.armv6
/netlab360.armv61
/netlab360.armv6l
/netlab360.armv7l
/netlab360.dbg
/netlab360.exploit
/netlab360.i4
/netlab360.i486
/netlab360.i586
/netlab360.i6
/netlab360.i686
/netlab360.kill
/netlab360.m68
/netlab360.m68k
/netlab360.mips
/netlab360.mips64
/netlab360.mipseb
/netlab360.mipsel
/netlab360.mpsl
/netlab360.pcc
/netlab360.powerpc
/netlab360.powerpc-440fp
/netlab360.powerppc
/netlab360.ppc
/netlab360.ppc2
/netlab360.ppc440
/netlab360.ppc440fp
/netlab360.root
/netlab360.root32
/netlab360.sh
/netlab360.sh4
/netlab360.sparc
/netlab360.spc
/netlab360.ssh4
/netlab360.x32
/netlab360.x64
/netlab360.x86
/netlab360.x86_32
/netlab360.x86_64

# Reference: https://twitter.com/malwrhunterteam/status/1288075002613506049

/fuckyou.arc
/fuckyou.arm
/fuckyou.arm4
/fuckyou.arm4l
/fuckyou.arm4t
/fuckyou.arm4tl
/fuckyou.arm4tll
/fuckyou.arm5
/fuckyou.arm5l
/fuckyou.arm5n
/fuckyou.arm6
/fuckyou.arm64
/fuckyou.arm6l
/fuckyou.arm7
/fuckyou.arm7l
/fuckyou.arm8
/fuckyou.armv4
/fuckyou.armv4l
/fuckyou.armv5l
/fuckyou.armv6
/fuckyou.armv61
/fuckyou.armv6l
/fuckyou.armv7l
/fuckyou.dbg
/fuckyou.exploit
/fuckyou.i4
/fuckyou.i486
/fuckyou.i586
/fuckyou.i6
/fuckyou.i686
/fuckyou.kill
/fuckyou.m68
/fuckyou.m68k
/fuckyou.mips
/fuckyou.mips64
/fuckyou.mipseb
/fuckyou.mipsel
/fuckyou.mpsl
/fuckyou.pcc
/fuckyou.powerpc
/fuckyou.powerpc-440fp
/fuckyou.powerppc
/fuckyou.ppc
/fuckyou.ppc2
/fuckyou.ppc440
/fuckyou.ppc440fp
/fuckyou.root
/fuckyou.root32
/fuckyou.sh
/fuckyou.sh4
/fuckyou.sparc
/fuckyou.spc
/fuckyou.ssh4
/fuckyou.x32
/fuckyou.x64
/fuckyou.x86
/fuckyou.x86_32
/fuckyou.x86_64
/heyurlhause/

# Reference: https://twitter.com/albertzsigovits/status/1288837528355770368
# Reference: https://www.virustotal.com/gui/file/a05fce78e8ef42179c0b0a2acc6d27d418adc9b12ad10f3122d1f89d93926650/detection

64.227.45.23:9001
scan.aykashi.xyz

# Reference: https://twitter.com/bad_packets/status/1289825208073777153

/OneDrive.arc
/OneDrive.arm
/OneDrive.arm4
/OneDrive.arm4l
/OneDrive.arm4t
/OneDrive.arm4tl
/OneDrive.arm4tll
/OneDrive.arm5
/OneDrive.arm5l
/OneDrive.arm5n
/OneDrive.arm6
/OneDrive.arm64
/OneDrive.arm6l
/OneDrive.arm7
/OneDrive.arm7l
/OneDrive.arm8
/OneDrive.armv4
/OneDrive.armv4l
/OneDrive.armv5l
/OneDrive.armv6
/OneDrive.armv61
/OneDrive.armv6l
/OneDrive.armv7l
/OneDrive.dbg
/OneDrive.exploit
/OneDrive.i4
/OneDrive.i486
/OneDrive.i586
/OneDrive.i6
/OneDrive.i686
/OneDrive.kill
/OneDrive.m68
/OneDrive.m68k
/OneDrive.mips
/OneDrive.mips64
/OneDrive.mipseb
/OneDrive.mipsel
/OneDrive.mpsl
/OneDrive.pcc
/OneDrive.powerpc
/OneDrive.powerpc-440fp
/OneDrive.powerppc
/OneDrive.ppc
/OneDrive.ppc2
/OneDrive.ppc440
/OneDrive.ppc440fp
/OneDrive.root
/OneDrive.root32
/OneDrive.sh
/OneDrive.sh4
/OneDrive.sparc
/OneDrive.spc
/OneDrive.ssh4
/OneDrive.x32
/OneDrive.x64
/OneDrive.x86
/OneDrive.x86_32
/OneDrive.x86_64
/Testing.arc
/Testing.arm
/Testing.arm4
/Testing.arm4l
/Testing.arm4t
/Testing.arm4tl
/Testing.arm4tll
/Testing.arm5
/Testing.arm5l
/Testing.arm5n
/Testing.arm6
/Testing.arm64
/Testing.arm6l
/Testing.arm7
/Testing.arm7l
/Testing.arm8
/Testing.armv4
/Testing.armv4l
/Testing.armv5l
/Testing.armv6
/Testing.armv61
/Testing.armv6l
/Testing.armv7l
/Testing.dbg
/Testing.exploit
/Testing.i4
/Testing.i486
/Testing.i586
/Testing.i6
/Testing.i686
/Testing.kill
/Testing.m68
/Testing.m68k
/Testing.mips
/Testing.mips64
/Testing.mipseb
/Testing.mipsel
/Testing.mpsl
/Testing.pcc
/Testing.powerpc
/Testing.powerpc-440fp
/Testing.powerppc
/Testing.ppc
/Testing.ppc2
/Testing.ppc440
/Testing.ppc440fp
/Testing.root
/Testing.root32
/Testing.sh
/Testing.sh4
/Testing.sparc
/Testing.spc
/Testing.ssh4
/Testing.x32
/Testing.x64
/Testing.x86
/Testing.x86_32
/Testing.x86_64

# Reference: https://twitter.com/bad_packets/status/1290761195348058112

/aTBaTEh1U2NWRXpBY2lqNTVqSzFSQT09.sh
/aVdUbENMQ0RieUFpbmZqSVFydUdJUT09.sh

# Reference: https://twitter.com/hypoweb/status/1291607461456048129

/arc.HOPEIDONTTHITTHEurlhausabuseLOL
/arm.HOPEIDONTTHITTHEurlhausabuseLOL
/arm4.HOPEIDONTTHITTHEurlhausabuseLOL
/arm4l.HOPEIDONTTHITTHEurlhausabuseLOL
/arm4t.HOPEIDONTTHITTHEurlhausabuseLOL
/arm4tl.HOPEIDONTTHITTHEurlhausabuseLOL
/arm4tll.HOPEIDONTTHITTHEurlhausabuseLOL
/arm5.HOPEIDONTTHITTHEurlhausabuseLOL
/arm5l.HOPEIDONTTHITTHEurlhausabuseLOL
/arm5n.HOPEIDONTTHITTHEurlhausabuseLOL
/arm6.HOPEIDONTTHITTHEurlhausabuseLOL
/arm64.HOPEIDONTTHITTHEurlhausabuseLOL
/arm6l.HOPEIDONTTHITTHEurlhausabuseLOL
/arm7.HOPEIDONTTHITTHEurlhausabuseLOL
/arm7l.HOPEIDONTTHITTHEurlhausabuseLOL
/arm8.HOPEIDONTTHITTHEurlhausabuseLOL
/armv4.HOPEIDONTTHITTHEurlhausabuseLOL
/armv4l.HOPEIDONTTHITTHEurlhausabuseLOL
/armv5l.HOPEIDONTTHITTHEurlhausabuseLOL
/armv6.HOPEIDONTTHITTHEurlhausabuseLOL
/armv61.HOPEIDONTTHITTHEurlhausabuseLOL
/armv6l.HOPEIDONTTHITTHEurlhausabuseLOL
/armv7l.HOPEIDONTTHITTHEurlhausabuseLOL
/dbg.HOPEIDONTTHITTHEurlhausabuseLOL
/exploit.HOPEIDONTTHITTHEurlhausabuseLOL
/i4.HOPEIDONTTHITTHEurlhausabuseLOL
/i486.HOPEIDONTTHITTHEurlhausabuseLOL
/i586.HOPEIDONTTHITTHEurlhausabuseLOL
/i6.HOPEIDONTTHITTHEurlhausabuseLOL
/i686.HOPEIDONTTHITTHEurlhausabuseLOL
/kill.HOPEIDONTTHITTHEurlhausabuseLOL
/m68.HOPEIDONTTHITTHEurlhausabuseLOL
/m68k.HOPEIDONTTHITTHEurlhausabuseLOL
/mips.HOPEIDONTTHITTHEurlhausabuseLOL
/mips64.HOPEIDONTTHITTHEurlhausabuseLOL
/mipsel.HOPEIDONTTHITTHEurlhausabuseLOL
/mpsl.HOPEIDONTTHITTHEurlhausabuseLOL
/pcc.HOPEIDONTTHITTHEurlhausabuseLOL
/powerpc-440fp.HOPEIDONTTHITTHEurlhausabuseLOL
/powerpc.HOPEIDONTTHITTHEurlhausabuseLOL
/powerppc.HOPEIDONTTHITTHEurlhausabuseLOL
/ppc.HOPEIDONTTHITTHEurlhausabuseLOL
/ppc2.HOPEIDONTTHITTHEurlhausabuseLOL
/ppc440.HOPEIDONTTHITTHEurlhausabuseLOL
/ppc440fp.HOPEIDONTTHITTHEurlhausabuseLOL
/root.HOPEIDONTTHITTHEurlhausabuseLOL
/root32.HOPEIDONTTHITTHEurlhausabuseLOL
/sh.HOPEIDONTTHITTHEurlhausabuseLOL
/sh4.HOPEIDONTTHITTHEurlhausabuseLOL
/sparc.HOPEIDONTTHITTHEurlhausabuseLOL
/spc.HOPEIDONTTHITTHEurlhausabuseLOL
/ssh4.HOPEIDONTTHITTHEurlhausabuseLOL
/x32.HOPEIDONTTHITTHEurlhausabuseLOL
/x64.HOPEIDONTTHITTHEurlhausabuseLOL
/x86.HOPEIDONTTHITTHEurlhausabuseLOL
/x86_32.HOPEIDONTTHITTHEurlhausabuseLOL
/x86_64.HOPEIDONTTHITTHEurlhausabuseLOL
/HOPEIDONTTHITTHEurlhausabuseLOL/

# Reference: https://twitter.com/0xrb/status/1293852159000211458

/ADfafg.arc
/ADfafg.arm
/ADfafg.arm4
/ADfafg.arm4l
/ADfafg.arm4t
/ADfafg.arm4tl
/ADfafg.arm4tll
/ADfafg.arm5
/ADfafg.arm5l
/ADfafg.arm5n
/ADfafg.arm6
/ADfafg.arm64
/ADfafg.arm6l
/ADfafg.arm7
/ADfafg.arm7l
/ADfafg.arm8
/ADfafg.armv4
/ADfafg.armv4l
/ADfafg.armv5l
/ADfafg.armv6
/ADfafg.armv61
/ADfafg.armv6l
/ADfafg.armv7l
/ADfafg.dbg
/ADfafg.exploit
/ADfafg.i4
/ADfafg.i486
/ADfafg.i586
/ADfafg.i6
/ADfafg.i686
/ADfafg.kill
/ADfafg.m68
/ADfafg.m68k
/ADfafg.mips
/ADfafg.mips64
/ADfafg.mipseb
/ADfafg.mipsel
/ADfafg.mpsl
/ADfafg.pcc
/ADfafg.powerpc
/ADfafg.powerpc-440fp
/ADfafg.powerppc
/ADfafg.ppc
/ADfafg.ppc2
/ADfafg.ppc440
/ADfafg.ppc440fp
/ADfafg.root
/ADfafg.root32
/ADfafg.sh
/ADfafg.sh4
/ADfafg.sparc
/ADfafg.spc
/ADfafg.ssh4
/ADfafg.x32
/ADfafg.x64
/ADfafg.x86
/ADfafg.x86_32
/ADfafg.x86_64
/al3x.arc
/al3x.arm
/al3x.arm4
/al3x.arm4l
/al3x.arm4t
/al3x.arm4tl
/al3x.arm4tll
/al3x.arm5
/al3x.arm5l
/al3x.arm5n
/al3x.arm6
/al3x.arm64
/al3x.arm6l
/al3x.arm7
/al3x.arm7l
/al3x.arm8
/al3x.armv4
/al3x.armv4l
/al3x.armv5l
/al3x.armv6
/al3x.armv61
/al3x.armv6l
/al3x.armv7l
/al3x.dbg
/al3x.exploit
/al3x.i4
/al3x.i486
/al3x.i586
/al3x.i6
/al3x.i686
/al3x.kill
/al3x.m68
/al3x.m68k
/al3x.mips
/al3x.mips64
/al3x.mipseb
/al3x.mipsel
/al3x.mpsl
/al3x.pcc
/al3x.powerpc
/al3x.powerpc-440fp
/al3x.powerppc
/al3x.ppc
/al3x.ppc2
/al3x.ppc440
/al3x.ppc440fp
/al3x.root
/al3x.root32
/al3x.sh
/al3x.sh4
/al3x.sparc
/al3x.spc
/al3x.ssh4
/al3x.x32
/al3x.x64
/al3x.x86
/al3x.x86_32
/al3x.x86_64
/ChanHell.arc
/ChanHell.arm
/ChanHell.arm4
/ChanHell.arm4l
/ChanHell.arm4t
/ChanHell.arm4tl
/ChanHell.arm4tll
/ChanHell.arm5
/ChanHell.arm5l
/ChanHell.arm5n
/ChanHell.arm6
/ChanHell.arm64
/ChanHell.arm6l
/ChanHell.arm7
/ChanHell.arm7l
/ChanHell.arm8
/ChanHell.armv4
/ChanHell.armv4l
/ChanHell.armv5l
/ChanHell.armv6
/ChanHell.armv61
/ChanHell.armv6l
/ChanHell.armv7l
/ChanHell.dbg
/ChanHell.exploit
/ChanHell.i4
/ChanHell.i486
/ChanHell.i586
/ChanHell.i6
/ChanHell.i686
/ChanHell.kill
/ChanHell.m68
/ChanHell.m68k
/ChanHell.mips
/ChanHell.mips64
/ChanHell.mipseb
/ChanHell.mipsel
/ChanHell.mpsl
/ChanHell.pcc
/ChanHell.powerpc
/ChanHell.powerpc-440fp
/ChanHell.powerppc
/ChanHell.ppc
/ChanHell.ppc2
/ChanHell.ppc440
/ChanHell.ppc440fp
/ChanHell.root
/ChanHell.root32
/ChanHell.sh
/ChanHell.sh4
/ChanHell.sparc
/ChanHell.spc
/ChanHell.ssh4
/ChanHell.x32
/ChanHell.x64
/ChanHell.x86
/ChanHell.x86_32
/ChanHell.x86_64
/pwnNet.arc
/pwnNet.arm
/pwnNet.arm4
/pwnNet.arm4l
/pwnNet.arm4t
/pwnNet.arm4tl
/pwnNet.arm4tll
/pwnNet.arm5
/pwnNet.arm5l
/pwnNet.arm5n
/pwnNet.arm6
/pwnNet.arm64
/pwnNet.arm6l
/pwnNet.arm7
/pwnNet.arm7l
/pwnNet.arm8
/pwnNet.armv4
/pwnNet.armv4l
/pwnNet.armv5l
/pwnNet.armv6
/pwnNet.armv61
/pwnNet.armv6l
/pwnNet.armv7l
/pwnNet.dbg
/pwnNet.exploit
/pwnNet.i4
/pwnNet.i486
/pwnNet.i586
/pwnNet.i6
/pwnNet.i686
/pwnNet.kill
/pwnNet.m68
/pwnNet.m68k
/pwnNet.mips
/pwnNet.mips64
/pwnNet.mipseb
/pwnNet.mipsel
/pwnNet.mpsl
/pwnNet.pcc
/pwnNet.powerpc
/pwnNet.powerpc-440fp
/pwnNet.powerppc
/pwnNet.ppc
/pwnNet.ppc2
/pwnNet.ppc440
/pwnNet.ppc440fp
/pwnNet.root
/pwnNet.root32
/pwnNet.sh
/pwnNet.sh4
/pwnNet.sparc
/pwnNet.spc
/pwnNet.ssh4
/pwnNet.x32
/pwnNet.x64
/pwnNet.x86
/pwnNet.x86_32
/pwnNet.x86_64
/aaa1aaa/
/ch4n010a2a2126/
/uih7U8JY7Of7Y8O9d6t68IT67R8y76t7823tg8weuq/
/z0z0z/

# Reference: https://twitter.com/VessOnSecurity/status/1293910244813283332

/solokey.arc
/solokey.arm
/solokey.arm4
/solokey.arm4l
/solokey.arm4t
/solokey.arm4tl
/solokey.arm4tll
/solokey.arm5
/solokey.arm5l
/solokey.arm5n
/solokey.arm6
/solokey.arm64
/solokey.arm6l
/solokey.arm7
/solokey.arm7l
/solokey.arm8
/solokey.armv4
/solokey.armv4l
/solokey.armv5l
/solokey.armv6
/solokey.armv61
/solokey.armv6l
/solokey.armv7l
/solokey.dbg
/solokey.exploit
/solokey.i4
/solokey.i486
/solokey.i586
/solokey.i6
/solokey.i686
/solokey.kill
/solokey.m68
/solokey.m68k
/solokey.mips
/solokey.mips64
/solokey.mipseb
/solokey.mipsel
/solokey.mpsl
/solokey.pcc
/solokey.powerpc
/solokey.powerpc-440fp
/solokey.powerppc
/solokey.ppc
/solokey.ppc2
/solokey.ppc440
/solokey.ppc440fp
/solokey.root
/solokey.root32
/solokey.sh
/solokey.sh4
/solokey.sparc
/solokey.spc
/solokey.ssh4
/solokey.x32
/solokey.x64
/solokey.x86
/solokey.x86_32
/solokey.x86_64

# Reference: https://twitter.com/bad_packets/status/1294698654444339202
# Reference: https://twitter.com/malwrhunterteam/status/1298603169539330049

/zbetcheckin.arc
/zbetcheckin.arm
/zbetcheckin.arm4
/zbetcheckin.arm4l
/zbetcheckin.arm4t
/zbetcheckin.arm4tl
/zbetcheckin.arm4tll
/zbetcheckin.arm5
/zbetcheckin.arm5l
/zbetcheckin.arm5n
/zbetcheckin.arm6
/zbetcheckin.arm64
/zbetcheckin.arm6l
/zbetcheckin.arm7
/zbetcheckin.arm7l
/zbetcheckin.arm8
/zbetcheckin.armv4
/zbetcheckin.armv4l
/zbetcheckin.armv5l
/zbetcheckin.armv6
/zbetcheckin.armv61
/zbetcheckin.armv6l
/zbetcheckin.armv7l
/zbetcheckin.dbg
/zbetcheckin.exploit
/zbetcheckin.i4
/zbetcheckin.i486
/zbetcheckin.i586
/zbetcheckin.i6
/zbetcheckin.i686
/zbetcheckin.kill
/zbetcheckin.m68
/zbetcheckin.m68k
/zbetcheckin.mips
/zbetcheckin.mips64
/zbetcheckin.mipseb
/zbetcheckin.mipsel
/zbetcheckin.mpsl
/zbetcheckin.pcc
/zbetcheckin.powerpc
/zbetcheckin.powerpc-440fp
/zbetcheckin.powerppc
/zbetcheckin.ppc
/zbetcheckin.ppc2
/zbetcheckin.ppc440
/zbetcheckin.ppc440fp
/zbetcheckin.root
/zbetcheckin.root32
/zbetcheckin.sh
/zbetcheckin.sh4
/zbetcheckin.sparc
/zbetcheckin.spc
/zbetcheckin.ssh4
/zbetcheckin.x32
/zbetcheckin.x64
/zbetcheckin.x86
/zbetcheckin.x86_32
/zbetcheckin.x86_64
/HOPEIDONTHITTHEurlhausabuseLOL/

# Reference: https://www.virustotal.com/gui/file/9728392a42a4299f51443221faf1596023db9535b76bf1ae3425acfbdb372046/detection

103.65.209.140:37215
103.65.209.140:59666
18.102.82.173:37215
18.102.82.173:59666
217.32.184.17:37215
217.32.184.17:59666
jajajaja123.ddns.net

# Reference: https://www.virustotal.com/gui/file/959e0e7b4bc663d1ab870d73239720600c5064f8deea0b99f58aa12a9d384cb2/detection

159.180.213.186:37215
159.180.213.186:45999

# Reference: https://www.virustotal.com/gui/file/eb132308cbc76920f4a852ceb1fe9f15a2cab6ce358bcf7ac4f0e43c54a84201/detection

50.149.223.179:37215
50.149.223.179:45999

# Reference: https://www.virustotal.com/gui/file/602ae6c5134447e0f24812107980c10426be10866d7feb283cb9e47452d9c63a/detection

173.29.70.70:37215
173.29.70.70:45999

# Reference: https://www.virustotal.com/gui/file/767684df00bbbb8c700f566e1ad79423e54c46f8856c43baa6f7aac8d55d3bc6/detection

197.198.190.203:37215
197.198.190.203:45999

# Reference: https://www.virustotal.com/gui/file/a908ab88203d8e5a0dfa677cef2b8d73257e29babdd9e4d7defeaa8518af55a2/detection

197.114.154.118:37215
197.114.154.118:45999
85.39.222.14:37215
85.39.222.14:45999

# Reference: https://www.virustotal.com/gui/file/628d60c799e50791f2bf4c74e6cd85893b8c16cb6b5c9f12c38519687a2a3dac/detection

193.145.238.49:37215
193.145.238.49:45999

# Reference: https://unit42.paloaltonetworks.com/cve-2020-17496/ (# CVE-2019-16759, CVE-2020-17496, CVE-2020-10987, CVE-2020-10173, CVE-2020-1937, CVE-2020-5902)
# Reference: https://otx.alienvault.com/pulse/5f515222d9db96d212a2ba7c

http://178.170.117.50
66.7.149.161:6667

# Reference: https://twitter.com/smii_mondher/status/1306329537815490564
# Reference: https://www.virustotal.com/gui/ip-address/193.169.254.116/detection

http://193.169.254.116

# Reference: https://pastebin.com/Y55Sv7Z6
# Reference: https://www.virustotal.com/gui/domain/kreatr00t3d.site/relations

kreatr00t3d.site
cnc.kreatr00t3d.site
scan.kreatr00t3d.site
/dayum0x1a5sfd15as1fa.arc
/dayum0x1a5sfd15as1fa.arm
/dayum0x1a5sfd15as1fa.arm4
/dayum0x1a5sfd15as1fa.arm4l
/dayum0x1a5sfd15as1fa.arm4t
/dayum0x1a5sfd15as1fa.arm4tl
/dayum0x1a5sfd15as1fa.arm4tll
/dayum0x1a5sfd15as1fa.arm5
/dayum0x1a5sfd15as1fa.arm5l
/dayum0x1a5sfd15as1fa.arm5n
/dayum0x1a5sfd15as1fa.arm6
/dayum0x1a5sfd15as1fa.arm64
/dayum0x1a5sfd15as1fa.arm6l
/dayum0x1a5sfd15as1fa.arm7
/dayum0x1a5sfd15as1fa.arm7l
/dayum0x1a5sfd15as1fa.arm8
/dayum0x1a5sfd15as1fa.armv4
/dayum0x1a5sfd15as1fa.armv4l
/dayum0x1a5sfd15as1fa.armv5l
/dayum0x1a5sfd15as1fa.armv6
/dayum0x1a5sfd15as1fa.armv61
/dayum0x1a5sfd15as1fa.armv6l
/dayum0x1a5sfd15as1fa.armv7l
/dayum0x1a5sfd15as1fa.dbg
/dayum0x1a5sfd15as1fa.exploit
/dayum0x1a5sfd15as1fa.i4
/dayum0x1a5sfd15as1fa.i486
/dayum0x1a5sfd15as1fa.i586
/dayum0x1a5sfd15as1fa.i6
/dayum0x1a5sfd15as1fa.i686
/dayum0x1a5sfd15as1fa.kill
/dayum0x1a5sfd15as1fa.m68
/dayum0x1a5sfd15as1fa.m68k
/dayum0x1a5sfd15as1fa.mips
/dayum0x1a5sfd15as1fa.mips64
/dayum0x1a5sfd15as1fa.mipseb
/dayum0x1a5sfd15as1fa.mipsel
/dayum0x1a5sfd15as1fa.mpsl
/dayum0x1a5sfd15as1fa.pcc
/dayum0x1a5sfd15as1fa.powerpc
/dayum0x1a5sfd15as1fa.powerpc-440fp
/dayum0x1a5sfd15as1fa.powerppc
/dayum0x1a5sfd15as1fa.ppc
/dayum0x1a5sfd15as1fa.ppc2
/dayum0x1a5sfd15as1fa.ppc440
/dayum0x1a5sfd15as1fa.ppc440fp
/dayum0x1a5sfd15as1fa.root
/dayum0x1a5sfd15as1fa.root32
/dayum0x1a5sfd15as1fa.sh
/dayum0x1a5sfd15as1fa.sh4
/dayum0x1a5sfd15as1fa.sparc
/dayum0x1a5sfd15as1fa.spc
/dayum0x1a5sfd15as1fa.ssh4
/dayum0x1a5sfd15as1fa.x32
/dayum0x1a5sfd15as1fa.x64
/dayum0x1a5sfd15as1fa.x86
/dayum0x1a5sfd15as1fa.x86_32
/dayum0x1a5sfd15as1fa.x86_64
/Mercury.arc
/Mercury.arm
/Mercury.arm4
/Mercury.arm4l
/Mercury.arm4t
/Mercury.arm4tl
/Mercury.arm4tll
/Mercury.arm5
/Mercury.arm5l
/Mercury.arm5n
/Mercury.arm6
/Mercury.arm64
/Mercury.arm6l
/Mercury.arm7
/Mercury.arm7l
/Mercury.arm8
/Mercury.armv4
/Mercury.armv4l
/Mercury.armv5l
/Mercury.armv6
/Mercury.armv61
/Mercury.armv6l
/Mercury.armv7l
/Mercury.dbg
/Mercury.exploit
/Mercury.i4
/Mercury.i486
/Mercury.i586
/Mercury.i6
/Mercury.i686
/Mercury.kill
/Mercury.m68
/Mercury.m68k
/Mercury.mips
/Mercury.mips64
/Mercury.mipseb
/Mercury.mipsel
/Mercury.mpsl
/Mercury.pcc
/Mercury.powerpc
/Mercury.powerpc-440fp
/Mercury.powerppc
/Mercury.ppc
/Mercury.ppc2
/Mercury.ppc440
/Mercury.ppc440fp
/Mercury.root
/Mercury.root32
/Mercury.sh
/Mercury.sh4
/Mercury.sparc
/Mercury.spc
/Mercury.ssh4
/Mercury.x32
/Mercury.x64
/Mercury.x86
/Mercury.x86_32
/Mercury.x86_64
/Mercury1.arc
/Mercury1.arm
/Mercury1.arm4
/Mercury1.arm4l
/Mercury1.arm4t
/Mercury1.arm4tl
/Mercury1.arm4tll
/Mercury1.arm5
/Mercury1.arm5l
/Mercury1.arm5n
/Mercury1.arm6
/Mercury1.arm64
/Mercury1.arm6l
/Mercury1.arm7
/Mercury1.arm7l
/Mercury1.arm8
/Mercury1.armv4
/Mercury1.armv4l
/Mercury1.armv5l
/Mercury1.armv6
/Mercury1.armv61
/Mercury1.armv6l
/Mercury1.armv7l
/Mercury1.dbg
/Mercury1.exploit
/Mercury1.i4
/Mercury1.i486
/Mercury1.i586
/Mercury1.i6
/Mercury1.i686
/Mercury1.kill
/Mercury1.m68
/Mercury1.m68k
/Mercury1.mips
/Mercury1.mips64
/Mercury1.mipseb
/Mercury1.mipsel
/Mercury1.mpsl
/Mercury1.pcc
/Mercury1.powerpc
/Mercury1.powerpc-440fp
/Mercury1.powerppc
/Mercury1.ppc
/Mercury1.ppc2
/Mercury1.ppc440
/Mercury1.ppc440fp
/Mercury1.root
/Mercury1.root32
/Mercury1.sh
/Mercury1.sh4
/Mercury1.sparc
/Mercury1.spc
/Mercury1.ssh4
/Mercury1.x32
/Mercury1.x64
/Mercury1.x86
/Mercury1.x86_32
/Mercury1.x86_64
/nigga.arc
/nigga.arm
/nigga.arm4
/nigga.arm4l
/nigga.arm4t
/nigga.arm4tl
/nigga.arm4tll
/nigga.arm5
/nigga.arm5l
/nigga.arm5n
/nigga.arm6
/nigga.arm64
/nigga.arm6l
/nigga.arm7
/nigga.arm7l
/nigga.arm8
/nigga.armv4
/nigga.armv4l
/nigga.armv5l
/nigga.armv6
/nigga.armv61
/nigga.armv6l
/nigga.armv7l
/nigga.dbg
/nigga.exploit
/nigga.i4
/nigga.i486
/nigga.i586
/nigga.i6
/nigga.i686
/nigga.kill
/nigga.m68
/nigga.m68k
/nigga.mips
/nigga.mips64
/nigga.mipseb
/nigga.mipsel
/nigga.mpsl
/nigga.pcc
/nigga.powerpc
/nigga.powerpc-440fp
/nigga.powerppc
/nigga.ppc
/nigga.ppc2
/nigga.ppc440
/nigga.ppc440fp
/nigga.root
/nigga.root32
/nigga.sh
/nigga.sh4
/nigga.sparc
/nigga.spc
/nigga.ssh4
/nigga.x32
/nigga.x64
/nigga.x86
/nigga.x86_32
/nigga.x86_64
/vlastic.arc
/vlastic.arm
/vlastic.arm4
/vlastic.arm4l
/vlastic.arm4t
/vlastic.arm4tl
/vlastic.arm4tll
/vlastic.arm5
/vlastic.arm5l
/vlastic.arm5n
/vlastic.arm6
/vlastic.arm64
/vlastic.arm6l
/vlastic.arm7
/vlastic.arm7l
/vlastic.arm8
/vlastic.armv4
/vlastic.armv4l
/vlastic.armv5l
/vlastic.armv6
/vlastic.armv61
/vlastic.armv6l
/vlastic.armv7l
/vlastic.dbg
/vlastic.exploit
/vlastic.i4
/vlastic.i486
/vlastic.i586
/vlastic.i6
/vlastic.i686
/vlastic.kill
/vlastic.m68
/vlastic.m68k
/vlastic.mips
/vlastic.mips64
/vlastic.mipseb
/vlastic.mipsel
/vlastic.mpsl
/vlastic.pcc
/vlastic.powerpc
/vlastic.powerpc-440fp
/vlastic.powerppc
/vlastic.ppc
/vlastic.ppc2
/vlastic.ppc440
/vlastic.ppc440fp
/vlastic.root
/vlastic.root32
/vlastic.sh
/vlastic.sh4
/vlastic.sparc
/vlastic.spc
/vlastic.ssh4
/vlastic.x32
/vlastic.x64
/vlastic.x86
/vlastic.x86_32
/vlastic.x86_64

# Reference: https://blog.netlab.360.com/ttint-an-iot-rat-uses-two-0-days-to-spread/
# Reference: https://otx.alienvault.com/pulse/5f74a03fb74e50e9ad2a40bd

34.92.139.186:5001
back.notepod2.com
cnc.notepod2.com
q9uvveypib.notepod2.com
uhyg8v.notepod2.com
notepod2.com
/ttint.arc
/ttint.arm
/ttint.arm4
/ttint.arm4l
/ttint.arm4t
/ttint.arm4tl
/ttint.arm4tll
/ttint.arm5
/ttint.arm5el
/ttint.arm5l
/ttint.arm5n
/ttint.arm6
/ttint.arm64
/ttint.arm6l
/ttint.arm7
/ttint.arm7l
/ttint.arm8
/ttint.armv4
/ttint.armv4l
/ttint.armv5l
/ttint.armv6
/ttint.armv61
/ttint.armv6l
/ttint.armv7l
/ttint.dbg
/ttint.exploit
/ttint.i4
/ttint.i486
/ttint.i586
/ttint.i6
/ttint.i686
/ttint.kill
/ttint.m68
/ttint.m68k
/ttint.mips
/ttint.mips64
/ttint.mipseb
/ttint.mipsel
/ttint.mpsl
/ttint.pcc
/ttint.powerpc
/ttint.powerpc-440fp
/ttint.powerppc
/ttint.ppc
/ttint.ppc2
/ttint.ppc440
/ttint.ppc440fp
/ttint.root
/ttint.root32
/ttint.sh
/ttint.sh4
/ttint.sparc
/ttint.spc
/ttint.ssh4
/ttint.x32
/ttint.x64
/ttint.x86
/ttint.x86_32
/ttint.x86_64

# Reference: https://twitter.com/bad_packets/status/1311822756271415298

192.210.214.51:36457
192.210.214.51:55665
/Astra.arc
/Astra.arm
/Astra.arm4
/Astra.arm4l
/Astra.arm4t
/Astra.arm4tl
/Astra.arm4tll
/Astra.arm5
/Astra.arm5l
/Astra.arm5n
/Astra.arm6
/Astra.arm64
/Astra.arm6l
/Astra.arm7
/Astra.arm7l
/Astra.arm8
/Astra.armv4
/Astra.armv4l
/Astra.armv5l
/Astra.armv6
/Astra.armv61
/Astra.armv6l
/Astra.armv7l
/Astra.dbg
/Astra.exploit
/Astra.i4
/Astra.i486
/Astra.i586
/Astra.i6
/Astra.i686
/Astra.kill
/Astra.m68
/Astra.m68k
/Astra.mips
/Astra.mips64
/Astra.mipseb
/Astra.mipsel
/Astra.mpsl
/Astra.pcc
/Astra.powerpc
/Astra.powerpc-440fp
/Astra.powerppc
/Astra.ppc
/Astra.ppc2
/Astra.ppc440
/Astra.ppc440fp
/Astra.root
/Astra.root32
/Astra.sh
/Astra.sh4
/Astra.sparc
/Astra.spc
/Astra.ssh4
/Astra.x32
/Astra.x64
/Astra.x86
/Astra.x86_32
/Astra.x86_64

# Reference: https://pastebin.com/REr0nF4b

/flux.arc
/flux.arm
/flux.arm4
/flux.arm4l
/flux.arm4t
/flux.arm4tl
/flux.arm4tll
/flux.arm5
/flux.arm5l
/flux.arm5n
/flux.arm6
/flux.arm64
/flux.arm6l
/flux.arm7
/flux.arm7l
/flux.arm8
/flux.armv4
/flux.armv4l
/flux.armv5l
/flux.armv6
/flux.armv61
/flux.armv6l
/flux.armv7l
/flux.dbg
/flux.exploit
/flux.i4
/flux.i486
/flux.i586
/flux.i6
/flux.i686
/flux.kill
/flux.m68
/flux.m68k
/flux.mips
/flux.mips64
/flux.mipseb
/flux.mipsel
/flux.mpsl
/flux.pcc
/flux.powerpc
/flux.powerpc-440fp
/flux.powerppc
/flux.ppc
/flux.ppc2
/flux.ppc440
/flux.ppc440fp
/flux.root
/flux.root32
/flux.sh
/flux.sh4
/flux.sparc
/flux.spc
/flux.ssh4
/flux.x32
/flux.x64
/flux.x86
/flux.x86_32
/flux.x86_64
/katana_updated.arc
/katana_updated.arm
/katana_updated.arm4
/katana_updated.arm4l
/katana_updated.arm4t
/katana_updated.arm4tl
/katana_updated.arm4tll
/katana_updated.arm5
/katana_updated.arm5l
/katana_updated.arm5n
/katana_updated.arm6
/katana_updated.arm64
/katana_updated.arm6l
/katana_updated.arm7
/katana_updated.arm7l
/katana_updated.arm8
/katana_updated.armv4
/katana_updated.armv4l
/katana_updated.armv5l
/katana_updated.armv6
/katana_updated.armv61
/katana_updated.armv6l
/katana_updated.armv7l
/katana_updated.dbg
/katana_updated.exploit
/katana_updated.i4
/katana_updated.i486
/katana_updated.i586
/katana_updated.i6
/katana_updated.i686
/katana_updated.kill
/katana_updated.m68
/katana_updated.m68k
/katana_updated.mips
/katana_updated.mips64
/katana_updated.mipseb
/katana_updated.mipsel
/katana_updated.mpsl
/katana_updated.pcc
/katana_updated.powerpc
/katana_updated.powerpc-440fp
/katana_updated.powerppc
/katana_updated.ppc
/katana_updated.ppc2
/katana_updated.ppc440
/katana_updated.ppc440fp
/katana_updated.root
/katana_updated.root32
/katana_updated.sh
/katana_updated.sh4
/katana_updated.sparc
/katana_updated.spc
/katana_updated.ssh4
/katana_updated.x32
/katana_updated.x64
/katana_updated.x86
/katana_updated.x86_32
/katana_updated.x86_64
/lolk.arc
/lolk.arm
/lolk.arm4
/lolk.arm4l
/lolk.arm4t
/lolk.arm4tl
/lolk.arm4tll
/lolk.arm5
/lolk.arm5l
/lolk.arm5n
/lolk.arm6
/lolk.arm64
/lolk.arm6l
/lolk.arm7
/lolk.arm7l
/lolk.arm8
/lolk.armv4
/lolk.armv4l
/lolk.armv5l
/lolk.armv6
/lolk.armv61
/lolk.armv6l
/lolk.armv7l
/lolk.dbg
/lolk.exploit
/lolk.i4
/lolk.i486
/lolk.i586
/lolk.i6
/lolk.i686
/lolk.kill
/lolk.m68
/lolk.m68k
/lolk.mips
/lolk.mips64
/lolk.mipseb
/lolk.mipsel
/lolk.mpsl
/lolk.pcc
/lolk.powerpc
/lolk.powerpc-440fp
/lolk.powerppc
/lolk.ppc
/lolk.ppc2
/lolk.ppc440
/lolk.ppc440fp
/lolk.root
/lolk.root32
/lolk.sh
/lolk.sh4
/lolk.sparc
/lolk.spc
/lolk.ssh4
/lolk.x32
/lolk.x64
/lolk.x86
/lolk.x86_32
/lolk.x86_64
/nostalgia.arc
/nostalgia.arm
/nostalgia.arm4
/nostalgia.arm4l
/nostalgia.arm4t
/nostalgia.arm4tl
/nostalgia.arm4tll
/nostalgia.arm5
/nostalgia.arm5l
/nostalgia.arm5n
/nostalgia.arm6
/nostalgia.arm64
/nostalgia.arm6l
/nostalgia.arm7
/nostalgia.arm7l
/nostalgia.arm8
/nostalgia.armv4
/nostalgia.armv4l
/nostalgia.armv5l
/nostalgia.armv6
/nostalgia.armv61
/nostalgia.armv6l
/nostalgia.armv7l
/nostalgia.dbg
/nostalgia.exploit
/nostalgia.i4
/nostalgia.i486
/nostalgia.i586
/nostalgia.i6
/nostalgia.i686
/nostalgia.kill
/nostalgia.m68
/nostalgia.m68k
/nostalgia.mips
/nostalgia.mips64
/nostalgia.mipseb
/nostalgia.mipsel
/nostalgia.mpsl
/nostalgia.pcc
/nostalgia.powerpc
/nostalgia.powerpc-440fp
/nostalgia.powerppc
/nostalgia.ppc
/nostalgia.ppc2
/nostalgia.ppc440
/nostalgia.ppc440fp
/nostalgia.root
/nostalgia.root32
/nostalgia.sh
/nostalgia.sh4
/nostalgia.sparc
/nostalgia.spc
/nostalgia.ssh4
/nostalgia.x32
/nostalgia.x64
/nostalgia.x86
/nostalgia.x86_32
/nostalgia.x86_64
/S4YBOT/
/YoutubeVegaSec/

# Reference: https://prod-blog.avira.com/new-mirai-variant-exploits-unauthenticated-remote-code-execution-in-the-web-interface-of-tea-latex-1-0

/arc.deathh
/arm.deathh
/arm4.deathh
/arm4l.deathh
/arm4t.deathh
/arm4tl.deathh
/arm4tll.deathh
/arm5.deathh
/arm5l.deathh
/arm5n.deathh
/arm6.deathh
/arm64.deathh
/arm6l.deathh
/arm7.deathh
/arm7l.deathh
/arm8.deathh
/armv4.deathh
/armv4l.deathh
/armv5l.deathh
/armv6.deathh
/armv61.deathh
/armv6l.deathh
/armv7l.deathh
/dbg.deathh
/exploit.deathh
/i4.deathh
/i486.deathh
/i586.deathh
/i6.deathh
/i686.deathh
/kill.deathh
/m68.deathh
/m68k.deathh
/mips.deathh
/mips64.deathh
/mipsel.deathh
/mpsl.deathh
/pcc.deathh
/powerpc-440fp.deathh
/powerpc.deathh
/powerppc.deathh
/ppc.deathh
/ppc2.deathh
/ppc440.deathh
/ppc440fp.deathh
/root.deathh
/root32.deathh
/sh.deathh
/sh4.deathh
/sparc.deathh
/spc.deathh
/ssh4.deathh
/x32.deathh
/x64.deathh
/x86.deathh
/x86_32.deathh
/x86_64.deathh

# Reference: https://www.virustotal.com/gui/file/ad32c703ff90eff49a2acf0d044385825dfefe2f0844ab1f4d205491609e4473/detection
# Reference: https://www.virustotal.com/gui/file/b5b4bc152ffeb67234686799a020c12ab54ba4f2306afe1ad458ee1d3e6bf0e8/detection

1.68.2.2:908
152.247.92.184:908
155.138.203.46:908
185.163.47.189:908
189.121.232.17:908
48.105.223.146:908
69.166.231.29:908
74.204.42.231:908
81.223.20.189:908

# Reference: https://www.virustotal.com/gui/file/17c61e4d63e9bef584a6895ccac0613a43e862cd49e817b98927ca50172dac17/detection

/xb.arc
/xb.arm
/xb.arm4
/xb.arm4l
/xb.arm4t
/xb.arm4tl
/xb.arm4tll
/xb.arm5
/xb.arm5l
/xb.arm5n
/xb.arm6
/xb.arm64
/xb.arm6l
/xb.arm7
/xb.arm7l
/xb.arm8
/xb.armv4
/xb.armv4l
/xb.armv5l
/xb.armv6
/xb.armv61
/xb.armv6l
/xb.armv7l
/xb.dbg
/xb.exploit
/xb.i4
/xb.i486
/xb.i586
/xb.i6
/xb.i686
/xb.kill
/xb.m68
/xb.m68k
/xb.mips
/xb.mips64
/xb.mipseb
/xb.mipsel
/xb.mpsl
/xb.pcc
/xb.powerpc
/xb.powerpc-440fp
/xb.powerppc
/xb.ppc
/xb.ppc2
/xb.ppc440
/xb.ppc440fp
/xb.root
/xb.root32
/xb.sh
/xb.sh4
/xb.sparc
/xb.spc
/xb.ssh4
/xb.x32
/xb.x64
/xb.x86
/xb.x86_32
/xb.x86_64

# Reference: https://unit42.paloaltonetworks.com/iot-vulnerabilities-mirai-payloads/
# Reference: https://www.virustotal.com/gui/domain/moo.2u0apcm6ylhdy7s.com/relations
# Reference: https://www.virustotal.com/gui/domain/proxy.2u0apcm6ylhdy7s.com/relations
# Reference: https://www.virustotal.com/gui/file/04114bd136941811e355df28e9b2eeaa941a04b61b185fd214a4c54daa171e1c/detection

hxarasxg.hxarasxg.xyz
lol.thezone.vip
moo.2u0apcm6ylhdy7s.com
proxy.2u0apcm6ylhdy7s.com
xyz.hxarasxg.xyz

# Reference: https://www.virustotal.com/gui/file/7f1b5c6a4f6f359f86d1583b803fd4ba96e21c2918aa364526ad2445ec47f1e0/detection
# Reference: https://www.virustotal.com/gui/file/dded381c07e78587b61435f69d30a24d30b31b4306bd34f6441c69c45d5bb7a6/detection

139.127.13.112:21843
139.127.13.112:5555
149.211.215.6:21843
149.211.215.6:5555
159.238.163.205:21843
159.238.163.205:5555

# Reference: https://www.virustotal.com/gui/file/28bc81da421bc4851dfe638fbf03f13d158826061d8ff116a9d9a0bcdb152fe6/detection

133.138.191.247:21843
133.138.191.247:8080
133.138.191.247:8081
133.138.191.247:8083
71.192.192.7:21843
133.138.191.247:81
71.192.192.7:8080
71.192.192.7:8081
71.192.192.7:8083
71.192.192.7:81

# Reference: https://www.virustotal.com/gui/file/842b7ffada42b06bcba6289cdedc55d3a4d7b92e05e68289395062ec7a1f35b0/detection

201.190.0.238:22843
201.190.0.238:5555

# Reference: https://www.virustotal.com/gui/file/5a0879989c860bb5365669e8f75e45970758ecf11932adf7f5ef87d1bb051d9a/detection

153.168.179.134:21843
153.168.179.134:5555
192.17.109.179:21843
192.17.109.179:5555

# Reference: https://www.virustotal.com/gui/file/8288187596ef9b707bcf25c7788d88b50fd2c19445ff59537c18dfb48edaddc6/detection

12.171.49.86:21843
12.171.49.86:5555
4.230.197.244:21843
4.230.197.244:5555

# Reference: https://www.virustotal.com/gui/file/044322b9aad8334a4b658596d1762493ece6db8cd5b673ef043dc0ed8c86103e/detection

202.28.124.17:21843
202.28.124.17:8000
202.28.124.17:8080
202.28.124.17:81
202.28.124.17:88
31.194.219.6:21843
31.194.219.6:8000
31.194.219.6:8080
31.194.219.6:81
31.194.219.6:88

# Reference: https://www.virustotal.com/gui/file/ab0c24ce177af3f88944cad61048f6e441910dfab6d40fee8eabb4dc55de0661/detection

25.10.6.20:54618
25.10.6.20:5555

# Reference: https://www.virustotal.com/gui/file/c9821c9f4277a4e35e20d794a7342d68033c1935bc0b6671f9a637a05604012e/detection

73.135.244.56:54618
73.135.244.56:5555

# Reference: https://www.virustotal.com/gui/file/6d21a2269fdde733b4051e423af38b4d79cbe98aff518a2c0da2f17e7a315259/detection

100.206.219.177:54618
100.206.219.177:5555
122.68.148.220:54618
122.68.148.220:5555

# Reference: https://www.virustotal.com/gui/file/cbbef96f21fc3673ec09415284720532e92f938f06211237ac727b15942c0125/detection

102.123.21.72:54618
102.123.21.72:5555
119.66.216.173:54618
119.66.216.173:5555

# Reference: https://www.virustotal.com/gui/file/8191fb29ea40fed9fe2bf2cdef3d663e36bc758269be3feaa8454e0950f822de/detection

186.93.232.166:54618
186.93.232.166:5555

# Reference: https://www.virustotal.com/gui/file/59b1ca2d47af1d5b60b84c3a9d6a64a09b7340864b9e90247466d7f91ed53b84/detection

20.68.36.251:28314
20.68.36.251:8080
69.29.208.137:28314
69.29.208.137:8080

# Reference: https://www.virustotal.com/gui/file/d5d5488ae9c80558cc4634ce6d51837d82347fd48d1a665e606dcfbfdf638b7b/detection

176.172.36.124:28314
176.172.36.124:5555
139.253.8.63:28314
139.253.8.63:5555

# Reference: https://www.virustotal.com/gui/file/4e3f7832a105a00f1b8b2056ae83dc34f8a28717a61a331dd3b11bee107d42b5/detection

145.55.237.216:54618
145.55.237.216:5555
146.216.152.147:54618
146.216.152.147:5555

# Reference: https://twitter.com/VessOnSecurity/status/1317019753123319808
# Reference: https://twitter.com/0xrb/status/1318075195920318469
# Reference: https://www.virustotal.com/gui/domain/bot.warzone.to/relations
# Reference: https://pastebin.com/Z3q8AcNu

/0xVegak4t4n4.arc
/0xVegak4t4n4.arm
/0xVegak4t4n4.arm4
/0xVegak4t4n4.arm4l
/0xVegak4t4n4.arm4t
/0xVegak4t4n4.arm4tl
/0xVegak4t4n4.arm4tll
/0xVegak4t4n4.arm5
/0xVegak4t4n4.arm5l
/0xVegak4t4n4.arm5n
/0xVegak4t4n4.arm6
/0xVegak4t4n4.arm64
/0xVegak4t4n4.arm6l
/0xVegak4t4n4.arm7
/0xVegak4t4n4.arm7l
/0xVegak4t4n4.arm8
/0xVegak4t4n4.armv4
/0xVegak4t4n4.armv4l
/0xVegak4t4n4.armv5l
/0xVegak4t4n4.armv6
/0xVegak4t4n4.armv61
/0xVegak4t4n4.armv6l
/0xVegak4t4n4.armv7l
/0xVegak4t4n4.dbg
/0xVegak4t4n4.exploit
/0xVegak4t4n4.i4
/0xVegak4t4n4.i486
/0xVegak4t4n4.i586
/0xVegak4t4n4.i6
/0xVegak4t4n4.i686
/0xVegak4t4n4.kill
/0xVegak4t4n4.m68
/0xVegak4t4n4.m68k
/0xVegak4t4n4.mips
/0xVegak4t4n4.mips64
/0xVegak4t4n4.mipseb
/0xVegak4t4n4.mipsel
/0xVegak4t4n4.mpsl
/0xVegak4t4n4.pcc
/0xVegak4t4n4.powerpc
/0xVegak4t4n4.powerpc-440fp
/0xVegak4t4n4.powerppc
/0xVegak4t4n4.ppc
/0xVegak4t4n4.ppc2
/0xVegak4t4n4.ppc440
/0xVegak4t4n4.ppc440fp
/0xVegak4t4n4.root
/0xVegak4t4n4.root32
/0xVegak4t4n4.sh
/0xVegak4t4n4.sh4
/0xVegak4t4n4.sparc
/0xVegak4t4n4.spc
/0xVegak4t4n4.ssh4
/0xVegak4t4n4.x32
/0xVegak4t4n4.x64
/0xVegak4t4n4.x86
/0xVegak4t4n4.x86_32
/0xVegak4t4n4.x86_64
/1isequal9.arc
/1isequal9.arm
/1isequal9.arm4
/1isequal9.arm4l
/1isequal9.arm4t
/1isequal9.arm4tl
/1isequal9.arm4tll
/1isequal9.arm5
/1isequal9.arm5l
/1isequal9.arm5n
/1isequal9.arm6
/1isequal9.arm64
/1isequal9.arm6l
/1isequal9.arm7
/1isequal9.arm7l
/1isequal9.arm8
/1isequal9.armv4
/1isequal9.armv4l
/1isequal9.armv5l
/1isequal9.armv6
/1isequal9.armv61
/1isequal9.armv6l
/1isequal9.armv7l
/1isequal9.dbg
/1isequal9.exploit
/1isequal9.i4
/1isequal9.i486
/1isequal9.i586
/1isequal9.i6
/1isequal9.i686
/1isequal9.kill
/1isequal9.m68
/1isequal9.m68k
/1isequal9.mips
/1isequal9.mips64
/1isequal9.mipseb
/1isequal9.mipsel
/1isequal9.mpsl
/1isequal9.pcc
/1isequal9.powerpc
/1isequal9.powerpc-440fp
/1isequal9.powerppc
/1isequal9.ppc
/1isequal9.ppc2
/1isequal9.ppc440
/1isequal9.ppc440fp
/1isequal9.root
/1isequal9.root32
/1isequal9.sh
/1isequal9.sh4
/1isequal9.sparc
/1isequal9.spc
/1isequal9.ssh4
/1isequal9.x32
/1isequal9.x64
/1isequal9.x86
/1isequal9.x86_32
/1isequal9.x86_64
/7rtya.arc
/7rtya.arm
/7rtya.arm4
/7rtya.arm4l
/7rtya.arm4t
/7rtya.arm4tl
/7rtya.arm4tll
/7rtya.arm5
/7rtya.arm5l
/7rtya.arm5n
/7rtya.arm6
/7rtya.arm64
/7rtya.arm6l
/7rtya.arm7
/7rtya.arm7l
/7rtya.arm8
/7rtya.armv4
/7rtya.armv4l
/7rtya.armv5l
/7rtya.armv6
/7rtya.armv61
/7rtya.armv6l
/7rtya.armv7l
/7rtya.dbg
/7rtya.exploit
/7rtya.i4
/7rtya.i486
/7rtya.i586
/7rtya.i6
/7rtya.i686
/7rtya.kill
/7rtya.m68
/7rtya.m68k
/7rtya.mips
/7rtya.mips64
/7rtya.mipseb
/7rtya.mipsel
/7rtya.mpsl
/7rtya.pcc
/7rtya.powerpc
/7rtya.powerpc-440fp
/7rtya.powerppc
/7rtya.ppc
/7rtya.ppc2
/7rtya.ppc440
/7rtya.ppc440fp
/7rtya.root
/7rtya.root32
/7rtya.sh
/7rtya.sh4
/7rtya.sparc
/7rtya.spc
/7rtya.ssh4
/7rtya.x32
/7rtya.x64
/7rtya.x86
/7rtya.x86_32
/7rtya.x86_64
/8isnotequalto9.arc
/8isnotequalto9.arm
/8isnotequalto9.arm4
/8isnotequalto9.arm4l
/8isnotequalto9.arm4t
/8isnotequalto9.arm4tl
/8isnotequalto9.arm4tll
/8isnotequalto9.arm5
/8isnotequalto9.arm5l
/8isnotequalto9.arm5n
/8isnotequalto9.arm6
/8isnotequalto9.arm64
/8isnotequalto9.arm6l
/8isnotequalto9.arm7
/8isnotequalto9.arm7l
/8isnotequalto9.arm8
/8isnotequalto9.armv4
/8isnotequalto9.armv4l
/8isnotequalto9.armv5l
/8isnotequalto9.armv6
/8isnotequalto9.armv61
/8isnotequalto9.armv6l
/8isnotequalto9.armv7l
/8isnotequalto9.dbg
/8isnotequalto9.exploit
/8isnotequalto9.i4
/8isnotequalto9.i486
/8isnotequalto9.i586
/8isnotequalto9.i6
/8isnotequalto9.i686
/8isnotequalto9.kill
/8isnotequalto9.m68
/8isnotequalto9.m68k
/8isnotequalto9.mips
/8isnotequalto9.mips64
/8isnotequalto9.mipseb
/8isnotequalto9.mipsel
/8isnotequalto9.mpsl
/8isnotequalto9.pcc
/8isnotequalto9.powerpc
/8isnotequalto9.powerpc-440fp
/8isnotequalto9.powerppc
/8isnotequalto9.ppc
/8isnotequalto9.ppc2
/8isnotequalto9.ppc440
/8isnotequalto9.ppc440fp
/8isnotequalto9.root
/8isnotequalto9.root32
/8isnotequalto9.sh
/8isnotequalto9.sh4
/8isnotequalto9.sparc
/8isnotequalto9.spc
/8isnotequalto9.ssh4
/8isnotequalto9.x32
/8isnotequalto9.x64
/8isnotequalto9.x86
/8isnotequalto9.x86_32
/8isnotequalto9.x86_64
/azhure.arc
/azhure.arm
/azhure.arm4
/azhure.arm4l
/azhure.arm4t
/azhure.arm4tl
/azhure.arm4tll
/azhure.arm5
/azhure.arm5l
/azhure.arm5n
/azhure.arm6
/azhure.arm64
/azhure.arm6l
/azhure.arm7
/azhure.arm7l
/azhure.arm8
/azhure.armv4
/azhure.armv4l
/azhure.armv5l
/azhure.armv6
/azhure.armv61
/azhure.armv6l
/azhure.armv7l
/azhure.dbg
/azhure.exploit
/azhure.i4
/azhure.i486
/azhure.i586
/azhure.i6
/azhure.i686
/azhure.kill
/azhure.m68
/azhure.m68k
/azhure.mips
/azhure.mips64
/azhure.mipseb
/azhure.mipsel
/azhure.mpsl
/azhure.pcc
/azhure.powerpc
/azhure.powerpc-440fp
/azhure.powerppc
/azhure.ppc
/azhure.ppc2
/azhure.ppc440
/azhure.ppc440fp
/azhure.root
/azhure.root32
/azhure.sh
/azhure.sh4
/azhure.sparc
/azhure.spc
/azhure.ssh4
/azhure.x32
/azhure.x64
/azhure.x86
/azhure.x86_32
/azhure.x86_64
/H3LLN3Tarc
/H3LLN3Tarm
/H3LLN3Tarm4
/H3LLN3Tarm4l
/H3LLN3Tarm4t
/H3LLN3Tarm4tl
/H3LLN3Tarm4tll
/H3LLN3Tarm5
/H3LLN3Tarm5l
/H3LLN3Tarm5n
/H3LLN3Tarm6
/H3LLN3Tarm64
/H3LLN3Tarm6l
/H3LLN3Tarm7
/H3LLN3Tarm7l
/H3LLN3Tarm8
/H3LLN3Tarmv4
/H3LLN3Tarmv4l
/H3LLN3Tarmv5l
/H3LLN3Tarmv6
/H3LLN3Tarmv61
/H3LLN3Tarmv6l
/H3LLN3Tarmv7l
/H3LLN3Tdbg
/H3LLN3Texploit
/H3LLN3Ti4
/H3LLN3Ti486
/H3LLN3Ti586
/H3LLN3Ti6
/H3LLN3Ti686
/H3LLN3Tkill
/H3LLN3Tm68
/H3LLN3Tm68k
/H3LLN3Tmips
/H3LLN3Tmips64
/H3LLN3Tmipseb
/H3LLN3Tmipsel
/H3LLN3Tmpsl
/H3LLN3Tpcc
/H3LLN3Tpowerpc
/H3LLN3Tpowerpc-440fp
/H3LLN3Tpowerppc
/H3LLN3Tppc
/H3LLN3Tppc2
/H3LLN3Tppc440
/H3LLN3Tppc440fp
/H3LLN3Troot
/H3LLN3Troot32
/H3LLN3Tsh
/H3LLN3Tsh4
/H3LLN3Tsparc
/H3LLN3Tspc
/H3LLN3Tssh4
/H3LLN3Tx32
/H3LLN3Tx64
/H3LLN3Tx86
/H3LLN3Tx86_32
/H3LLN3Tx86_64
/JuffHell.arc
/JuffHell.arm
/JuffHell.arm4
/JuffHell.arm4l
/JuffHell.arm4t
/JuffHell.arm4tl
/JuffHell.arm4tll
/JuffHell.arm5
/JuffHell.arm5l
/JuffHell.arm5n
/JuffHell.arm6
/JuffHell.arm64
/JuffHell.arm6l
/JuffHell.arm7
/JuffHell.arm7l
/JuffHell.arm8
/JuffHell.armv4
/JuffHell.armv4l
/JuffHell.armv5l
/JuffHell.armv6
/JuffHell.armv61
/JuffHell.armv6l
/JuffHell.armv7l
/JuffHell.dbg
/JuffHell.exploit
/JuffHell.i4
/JuffHell.i486
/JuffHell.i586
/JuffHell.i6
/JuffHell.i686
/JuffHell.kill
/JuffHell.m68
/JuffHell.m68k
/JuffHell.mips
/JuffHell.mips64
/JuffHell.mipseb
/JuffHell.mipsel
/JuffHell.mpsl
/JuffHell.pcc
/JuffHell.powerpc
/JuffHell.powerpc-440fp
/JuffHell.powerppc
/JuffHell.ppc
/JuffHell.ppc2
/JuffHell.ppc440
/JuffHell.ppc440fp
/JuffHell.root
/JuffHell.root32
/JuffHell.sh
/JuffHell.sh4
/JuffHell.sparc
/JuffHell.spc
/JuffHell.ssh4
/JuffHell.x32
/JuffHell.x64
/JuffHell.x86
/JuffHell.x86_32
/JuffHell.x86_64
/PleaseSub.arc
/PleaseSub.arm
/PleaseSub.arm4
/PleaseSub.arm4l
/PleaseSub.arm4t
/PleaseSub.arm4tl
/PleaseSub.arm4tll
/PleaseSub.arm5
/PleaseSub.arm5l
/PleaseSub.arm5n
/PleaseSub.arm6
/PleaseSub.arm64
/PleaseSub.arm6l
/PleaseSub.arm7
/PleaseSub.arm7l
/PleaseSub.arm8
/PleaseSub.armv4
/PleaseSub.armv4l
/PleaseSub.armv5l
/PleaseSub.armv6
/PleaseSub.armv61
/PleaseSub.armv6l
/PleaseSub.armv7l
/PleaseSub.dbg
/PleaseSub.exploit
/PleaseSub.i4
/PleaseSub.i486
/PleaseSub.i586
/PleaseSub.i6
/PleaseSub.i686
/PleaseSub.kill
/PleaseSub.m68
/PleaseSub.m68k
/PleaseSub.mips
/PleaseSub.mips64
/PleaseSub.mipseb
/PleaseSub.mipsel
/PleaseSub.mpsl
/PleaseSub.pcc
/PleaseSub.powerpc
/PleaseSub.powerpc-440fp
/PleaseSub.powerppc
/PleaseSub.ppc
/PleaseSub.ppc2
/PleaseSub.ppc440
/PleaseSub.ppc440fp
/PleaseSub.root
/PleaseSub.root32
/PleaseSub.sh
/PleaseSub.sh4
/PleaseSub.sparc
/PleaseSub.spc
/PleaseSub.ssh4
/PleaseSub.x32
/PleaseSub.x64
/PleaseSub.x86
/PleaseSub.x86_32
/PleaseSub.x86_64
/s4y.arc
/s4y.arm
/s4y.arm4
/s4y.arm4l
/s4y.arm4t
/s4y.arm4tl
/s4y.arm4tll
/s4y.arm5
/s4y.arm5l
/s4y.arm5n
/s4y.arm6
/s4y.arm64
/s4y.arm6l
/s4y.arm7
/s4y.arm7l
/s4y.arm8
/s4y.armv4
/s4y.armv4l
/s4y.armv5l
/s4y.armv6
/s4y.armv61
/s4y.armv6l
/s4y.armv7l
/s4y.dbg
/s4y.exploit
/s4y.i4
/s4y.i486
/s4y.i586
/s4y.i6
/s4y.i686
/s4y.kill
/s4y.m68
/s4y.m68k
/s4y.mips
/s4y.mips64
/s4y.mipseb
/s4y.mipsel
/s4y.mpsl
/s4y.pcc
/s4y.powerpc
/s4y.powerpc-440fp
/s4y.powerppc
/s4y.ppc
/s4y.ppc2
/s4y.ppc440
/s4y.ppc440fp
/s4y.root
/s4y.root32
/s4y.sh
/s4y.sh4
/s4y.sparc
/s4y.spc
/s4y.ssh4
/s4y.x32
/s4y.x64
/s4y.x86
/s4y.x86_32
/s4y.x86_64
/t0xic.arc
/t0xic.arm
/t0xic.arm4
/t0xic.arm4l
/t0xic.arm4t
/t0xic.arm4tl
/t0xic.arm4tll
/t0xic.arm5
/t0xic.arm5l
/t0xic.arm5n
/t0xic.arm6
/t0xic.arm64
/t0xic.arm6l
/t0xic.arm7
/t0xic.arm7l
/t0xic.arm8
/t0xic.armv4
/t0xic.armv4l
/t0xic.armv5l
/t0xic.armv6
/t0xic.armv61
/t0xic.armv6l
/t0xic.armv7l
/t0xic.dbg
/t0xic.exploit
/t0xic.i4
/t0xic.i486
/t0xic.i586
/t0xic.i6
/t0xic.i686
/t0xic.kill
/t0xic.m68
/t0xic.m68k
/t0xic.mips
/t0xic.mips64
/t0xic.mipseb
/t0xic.mipsel
/t0xic.mpsl
/t0xic.pcc
/t0xic.powerpc
/t0xic.powerpc-440fp
/t0xic.powerppc
/t0xic.ppc
/t0xic.ppc2
/t0xic.ppc440
/t0xic.ppc440fp
/t0xic.root
/t0xic.root32
/t0xic.sh
/t0xic.sh4
/t0xic.sparc
/t0xic.spc
/t0xic.ssh4
/t0xic.x32
/t0xic.x64
/t0xic.x86
/t0xic.x86_32
/t0xic.x86_64
/warzone.arc
/warzone.arm
/warzone.arm4
/warzone.arm4l
/warzone.arm4t
/warzone.arm4tl
/warzone.arm4tll
/warzone.arm5
/warzone.arm5l
/warzone.arm5n
/warzone.arm6
/warzone.arm64
/warzone.arm6l
/warzone.arm7
/warzone.arm7l
/warzone.arm8
/warzone.armv4
/warzone.armv4l
/warzone.armv5l
/warzone.armv6
/warzone.armv61
/warzone.armv6l
/warzone.armv7l
/warzone.dbg
/warzone.exploit
/warzone.i4
/warzone.i486
/warzone.i586
/warzone.i6
/warzone.i686
/warzone.kill
/warzone.m68
/warzone.m68k
/warzone.mips
/warzone.mips64
/warzone.mipseb
/warzone.mipsel
/warzone.mpsl
/warzone.pcc
/warzone.powerpc
/warzone.powerpc-440fp
/warzone.powerppc
/warzone.ppc
/warzone.ppc2
/warzone.ppc440
/warzone.ppc440fp
/warzone.root
/warzone.root32
/warzone.sh
/warzone.sh4
/warzone.sparc
/warzone.spc
/warzone.ssh4
/warzone.x32
/warzone.x64
/warzone.x86
/warzone.x86_32
/warzone.x86_64
bot.warzone.to
/centos2139r209ru120934r123jhr908213jh4r09213/
/Please-Subscribe-To-My-YT-Channel-VegaSec/
/PleaseSub_to_YouTube-VegaSec/
/subscribetomy_youtube_channel_vegasec/
/Yoooooooutuuuuuuube-VegaSec/

# Reference: https://twitter.com/bad_packets/status/1317219274293792768

5.252.194.137:51847
5.252.194.137:56412

# Reference: https://www.virustotal.com/gui/file/248373fe08db828b8fa37a061ceeb51c73fa2d4baba7c3cf9a4255b395481314/detection

45.95.168.162:2074

# Reference: https://twitter.com/bad_packets/status/1320117450357133312

5.253.84.197:666
5.253.84.197:6660
5.253.84.197:9999

# Reference: https://twitter.com/malwrhunterteam/status/1321810467728359425

/hypoweb.arc
/hypoweb.arm
/hypoweb.arm4
/hypoweb.arm4l
/hypoweb.arm4t
/hypoweb.arm4tl
/hypoweb.arm4tll
/hypoweb.arm5
/hypoweb.arm5l
/hypoweb.arm5n
/hypoweb.arm6
/hypoweb.arm64
/hypoweb.arm6l
/hypoweb.arm7
/hypoweb.arm7l
/hypoweb.arm8
/hypoweb.armv4
/hypoweb.armv4l
/hypoweb.armv5l
/hypoweb.armv6
/hypoweb.armv61
/hypoweb.armv6l
/hypoweb.armv7l
/hypoweb.dbg
/hypoweb.exploit
/hypoweb.i4
/hypoweb.i486
/hypoweb.i586
/hypoweb.i6
/hypoweb.i686
/hypoweb.kill
/hypoweb.m68
/hypoweb.m68k
/hypoweb.mips
/hypoweb.mips64
/hypoweb.mipseb
/hypoweb.mipsel
/hypoweb.mpsl
/hypoweb.pcc
/hypoweb.powerpc
/hypoweb.powerpc-440fp
/hypoweb.powerppc
/hypoweb.ppc
/hypoweb.ppc2
/hypoweb.ppc440
/hypoweb.ppc440fp
/hypoweb.root
/hypoweb.root32
/hypoweb.sh
/hypoweb.sh4
/hypoweb.sparc
/hypoweb.spc
/hypoweb.ssh4
/hypoweb.x32
/hypoweb.x64
/hypoweb.x86
/hypoweb.x86_32
/hypoweb.x86_64

# Reference: https://www.virustotal.com/gui/file/93ab81f96ee7eb97acda77a34d8d99a11e4469041ddd09ca2f88bcee42186fd7/detection

77.170.123.192:81

# Reference: https://malwareconfig.com/config/c8f35ded44139ae098546576939c42a4
# Reference: https://www.virustotal.com/gui/file/f5d296ace78582403c8678a0517bb78d95ba81300c71e1be6d2d10d4401dcd21/detection
# Reference: https://www.virustotal.com/gui/file/1e2fc4ae25acfcf1de36a83ea30fc613d70064fb5a0ea39fca6cea93572f0dae/detection

bigbots.cc
botnet.goelites.cc

# Reference: https://www.virustotal.com/gui/file/359f8f15064bd490269bc061e28539cf96e006f4db145a9e0bc7a9512ba75fb3/detection

152.89.239.197:14107

# Reference: https://www.virustotal.com/gui/file/a253a92625f17ddea9d4338f0ed089e068a664d158d934ca6d1cd6635f342dc3/detection
# Reference: https://www.virustotal.com/gui/file/960132e546bdf812bb31cc8f72481052ab53d55b2affca62b89a71066c4b549d/detection

152.89.239.197:2323
152.89.239.197:25809

# Reference: https://unit42.paloaltonetworks.com/muhstik-botnet-exploits-the-latest-weblogic-vulnerability-for-cryptomining-and-ddos-attacks/
# Reference: https://www.virustotal.com/gui/file/e538026c0aa97deb2952afde3f8521be53ffb9ead6b6c349d6cd26942f609335/detection

http://165.227.78.159

# Reference: https://unit42.paloaltonetworks.com/muhstik-botnet-attacks-tomato-routers-to-harvest-new-iot-devices/
# Reference: https://otx.alienvault.com/pulse/5e2872f76ff2c00a49a60433

http://159.89.156.190
s.shadow.mods.net
y.fd6fq54s6df541q23sdxfg.eu

# Reference: https://www.lacework.com/meet-muhstik-iot-botnet-infecting-cloud-servers/
# Reference: https://github.com/lacework/lacework-labs/blob/master/blog/muhstik_indicators.csv
# Reference: https://otx.alienvault.com/pulse/5fac084160045cf3e322288b

de-zahlung.eu
deutschland-zahlung.eu
deutschland-zahlung.net
shadow-mods.net

# Reference: https://tolisec.com/active-iot-botnets-11-11-20/
# Reference: https://www.virustotal.com/gui/file/31b258676b9414bac1b7d1e49ef4ad1f/detection
# Reference: https://www.virustotal.com/gui/file/b73ceb52f8ec04f3a89ea524645d1ba0/detection
# Reference: https://www.virustotal.com/gui/file/bb907142b24c1a6aaa28b557baefdbb3/detection
# Reference: https://www.virustotal.com/gui/file/dc6db4547dd72eb688ba79e8605de3db/detection
# Reference: https://www.virustotal.com/gui/file/2ee7797e373b57710fd8437b2ade5246/detection
# Reference: https://www.virustotal.com/gui/file/ae00a6373156e09728cabcfc4cda372d/detection
# Reference: https://www.virustotal.com/gui/file/4876700c786bc07c8d28cd99e92460649119ff31ceb71a576c3a6cebfa6ac1b0/detection

104.248.120.130:34241
107.173.176.123:1024
120.177.65.68:2323
120.177.65.68:53547
142.11.242.17:666
206.166.251.223:25009
37.49.230.196:53547
37.49.230.208:5555
cnc.destiny2beyondlight.ml
cyberium.cc
/DAYUMitsKKKAAATTTAAANNNAAA.arc
/DAYUMitsKKKAAATTTAAANNNAAA.arm
/DAYUMitsKKKAAATTTAAANNNAAA.arm4
/DAYUMitsKKKAAATTTAAANNNAAA.arm4l
/DAYUMitsKKKAAATTTAAANNNAAA.arm4t
/DAYUMitsKKKAAATTTAAANNNAAA.arm4tl
/DAYUMitsKKKAAATTTAAANNNAAA.arm4tll
/DAYUMitsKKKAAATTTAAANNNAAA.arm5
/DAYUMitsKKKAAATTTAAANNNAAA.arm5l
/DAYUMitsKKKAAATTTAAANNNAAA.arm5n
/DAYUMitsKKKAAATTTAAANNNAAA.arm6
/DAYUMitsKKKAAATTTAAANNNAAA.arm64
/DAYUMitsKKKAAATTTAAANNNAAA.arm6l
/DAYUMitsKKKAAATTTAAANNNAAA.arm7
/DAYUMitsKKKAAATTTAAANNNAAA.arm7l
/DAYUMitsKKKAAATTTAAANNNAAA.arm8
/DAYUMitsKKKAAATTTAAANNNAAA.armv4
/DAYUMitsKKKAAATTTAAANNNAAA.armv4l
/DAYUMitsKKKAAATTTAAANNNAAA.armv5l
/DAYUMitsKKKAAATTTAAANNNAAA.armv6
/DAYUMitsKKKAAATTTAAANNNAAA.armv61
/DAYUMitsKKKAAATTTAAANNNAAA.armv6l
/DAYUMitsKKKAAATTTAAANNNAAA.armv7l
/DAYUMitsKKKAAATTTAAANNNAAA.dbg
/DAYUMitsKKKAAATTTAAANNNAAA.exploit
/DAYUMitsKKKAAATTTAAANNNAAA.i4
/DAYUMitsKKKAAATTTAAANNNAAA.i486
/DAYUMitsKKKAAATTTAAANNNAAA.i586
/DAYUMitsKKKAAATTTAAANNNAAA.i6
/DAYUMitsKKKAAATTTAAANNNAAA.i686
/DAYUMitsKKKAAATTTAAANNNAAA.kill
/DAYUMitsKKKAAATTTAAANNNAAA.m68
/DAYUMitsKKKAAATTTAAANNNAAA.m68k
/DAYUMitsKKKAAATTTAAANNNAAA.mips
/DAYUMitsKKKAAATTTAAANNNAAA.mips64
/DAYUMitsKKKAAATTTAAANNNAAA.mipseb
/DAYUMitsKKKAAATTTAAANNNAAA.mipsel
/DAYUMitsKKKAAATTTAAANNNAAA.mpsl
/DAYUMitsKKKAAATTTAAANNNAAA.pcc
/DAYUMitsKKKAAATTTAAANNNAAA.powerpc
/DAYUMitsKKKAAATTTAAANNNAAA.powerpc-440fp
/DAYUMitsKKKAAATTTAAANNNAAA.powerppc
/DAYUMitsKKKAAATTTAAANNNAAA.ppc
/DAYUMitsKKKAAATTTAAANNNAAA.ppc2
/DAYUMitsKKKAAATTTAAANNNAAA.ppc440
/DAYUMitsKKKAAATTTAAANNNAAA.ppc440fp
/DAYUMitsKKKAAATTTAAANNNAAA.root
/DAYUMitsKKKAAATTTAAANNNAAA.root32
/DAYUMitsKKKAAATTTAAANNNAAA.sh
/DAYUMitsKKKAAATTTAAANNNAAA.sh4
/DAYUMitsKKKAAATTTAAANNNAAA.sparc
/DAYUMitsKKKAAATTTAAANNNAAA.spc
/DAYUMitsKKKAAATTTAAANNNAAA.ssh4
/DAYUMitsKKKAAATTTAAANNNAAA.x32
/DAYUMitsKKKAAATTTAAANNNAAA.x64
/DAYUMitsKKKAAATTTAAANNNAAA.x86
/DAYUMitsKKKAAATTTAAANNNAAA.x86_32
/DAYUMitsKKKAAATTTAAANNNAAA.x86_64
/333Sao999Sao666/

# Reference: https://tolisec.com/active-iot-botnets-22-10-2020/
# Reference: https://www.virustotal.com/gui/file/9a3545da771f1855cf3da51167d8c93c/detection
# Reference: https://www.virustotal.com/gui/file/100ed2a62ddd9ec6096f14b9117b26c2/detection
# Reference: https://www.virustotal.com/gui/file/6bf9c3ab7e1f8e1ebbbda3e7d8682d23/detection
# Reference: https://www.virustotal.com/gui/file/0f2f4d29c538c468032a60a606c2b4ba/detection
# Reference: https://www.virustotal.com/gui/file/3573b95be87bee9c3f66056e9cd07cbd/detection
# Reference: https://www.virustotal.com/gui/file/3f8565d12803d06e5dfcadb24afc331c/detection
# Reference: https://www.virustotal.com/gui/file/c36f57d0a4ea105c8cc23314650b4b2b/detection
# Reference: https://www.virustotal.com/gui/file/3cd6a127cd46e050d7c5424937d4669a/detection
# Reference: https://www.virustotal.com/gui/file/b60c0bead153982539fefaae5b32702b/detection
# Reference: https://www.virustotal.com/gui/file/b592c677fda7c6ab800c22ca9ac8cfa0/detection
# Reference: https://www.virustotal.com/gui/file/5a4047340aa818fbea0083111bd0e515/detection

172.245.154.151:1272
2.57.122.107:1791
206.126.81.107:48529
206.126.81.140:63645
23.95.9.144:45
37.46.150.64:1791
37.49.225.116:10001
45.14.224.170:40666
45.61.136.13:25761
45.84.196.141:9506
45.95.168.114:666
cnchellnet.duckdns.org

# Reference: https://twitter.com/malwrhunterteam/status/1308338603748143104

/tolisec.arc
/tolisec.arm
/tolisec.arm4
/tolisec.arm4l
/tolisec.arm4t
/tolisec.arm4tl
/tolisec.arm4tll
/tolisec.arm5
/tolisec.arm5l
/tolisec.arm5n
/tolisec.arm6
/tolisec.arm64
/tolisec.arm6l
/tolisec.arm7
/tolisec.arm7l
/tolisec.arm8
/tolisec.armv4
/tolisec.armv4l
/tolisec.armv5l
/tolisec.armv6
/tolisec.armv61
/tolisec.armv6l
/tolisec.armv7l
/tolisec.dbg
/tolisec.exploit
/tolisec.i4
/tolisec.i486
/tolisec.i586
/tolisec.i6
/tolisec.i686
/tolisec.kill
/tolisec.m68
/tolisec.m68k
/tolisec.mips
/tolisec.mips64
/tolisec.mipseb
/tolisec.mipsel
/tolisec.mpsl
/tolisec.pcc
/tolisec.powerpc
/tolisec.powerpc-440fp
/tolisec.powerppc
/tolisec.ppc
/tolisec.ppc2
/tolisec.ppc440
/tolisec.ppc440fp
/tolisec.root
/tolisec.root32
/tolisec.sh
/tolisec.sh4
/tolisec.sparc
/tolisec.spc
/tolisec.ssh4
/tolisec.x32
/tolisec.x64
/tolisec.x86
/tolisec.x86_32
/tolisec.x86_64

# Reference: https://www.virustotal.com/gui/file/431080d355e9a5dc4bfdcdd738e823c26ecc638f42ba285f06db87893d226dfb/detection

66.78.194.204:2323
66.78.194.204:26
66.78.194.204:4700
66.78.194.204:9000
66.78.194.204:9001
snoopy.cyberium.cc

# Reference: https://www.virustotal.com/gui/file/e231fc9e669e5ea5c1842f888c3a83cf307c4af0d9e3df92194a08f6a2dea4ec/detection

165.37.197.225:2323
165.37.197.225:26
165.37.197.225:4700
165.37.197.225:9000
165.37.197.225:9001

# Reference: https://www.virustotal.com/gui/file/fe5f3beac939684dc634056c34a6e9321ed191f74bc286c05c07d434b8a300ed/detection

19.215.59.129:2323
19.215.59.129:4705
19.215.59.129:9000
19.215.59.129:9001

# Reference: https://www.virustotal.com/gui/file/6b364613c4643dd9dbbda94b380f01efd7c30b535f910bb358e0cd4e9396825d/detection

39.133.15.156:2323

# Reference: https://www.virustotal.com/gui/file/b468f9f2d705a422034a38db20a22abeeb3d8b07f7092e1dca26fe4567b28f6d/detection

99.189.97.199:2323

# Reference: https://www.virustotal.com/gui/file/1b0a2e9c62df314d42e9da960301debeb9fd01f355c51c8af4ca00113b6fe5e3/detection

102.78.255.97:2323
102.78.255.97:4705

# Reference: https://www.virustotal.com/gui/file/4e179b5f43b1956b21c21ab589e88f86c7ac3b770007ce4f45983720f1574562/detection

170.172.239.143:2323
170.172.239.143:4705
170.172.239.143:8089

# Reference: https://www.virustotal.com/gui/file/bf3406ad9a705da025d153a3f8cb10eb29fb7d861bc8060ab3bbb11e9fd6df11/detection

51.187.179.246:4705
51.187.179.246:60001

# Reference: https://www.virustotal.com/gui/file/4ec2c609358ee522457c429196a0368b546cd3fde4fa70971ba3db65d5ca0adb/detection

66.48.173.112:4705

# Reference: https://www.virustotal.com/gui/file/3e091d307e122f975f406f2affb04890891e51cb694845b3bc6152a07a992545/detection

47.175.82.228:2323
47.175.82.228:4707

# Reference: https://www.virustotal.com/gui/file/51753c0a8d32760b5c508a5679eaa5620e9669a25fc0e8b7492914ffb157e1dc/detection

226.197.62.121:2323
226.197.62.121:4707

# Reference: https://www.virustotal.com/gui/file/2600c26a88f6279098d437b8c9d577aaa305b4c5cb3af41f52bf71072b018de6/detection

141.215.72.199:2323
174.185.42.198:2323
175.69.201.42:2323
175.69.201.42:4707
227.130.167.253:2323
227.130.167.253:4707
250.99.218.220:2323
250.99.218.220:4707
33.243.204.0:2323
34.80.74.112:2323
36.210.116.196:2323
39.233.207.137:2323
39.233.207.137:4707
53.67.60.155:2323
53.67.60.155:4707
59.46.44.157:2323
59.46.44.157:4707

# Reference: https://www.virustotal.com/gui/file/26f326be6c1f35d5d20c8e27315c07b8d1d3982a26de80f44d5a926910b6adf4/detection

gcc.cyberium.cc

# Reference: https://www.virustotal.com/gui/file/0ff1385e82b616f4a73cb1f8304af4354f20f73d8b66529518d3edde3ca33c00/detection
# Reference: https://www.virustotal.com/gui/file/c7910b885ffd45977da536d5cc557ec8af21f802f9d9bb8eaf347b58ff66f546/detection
# Reference: https://www.virustotal.com/gui/file/b1a2a59c3fd900cbc5a260803a0b493f00062bc1d73fecb93964c4387d0cbecc/detection
# Reference: https://www.virustotal.com/gui/file/353afd0a40cfa08a5c28ad9a42ee6414948cea787ee4d33580cbe576ff007322/detection

108.251.87.78:9530
132.84.208.85:9530
84.240.92.48:9530
park.cyberium.cc

# Reference: https://www.virustotal.com/gui/file/b08064c8ea0eeceddc19b4550cb224cb73da17dda94b4d2fb2fff5e3f21df421/detection

100.137.79.20:2323
123.162.225.235:2323
123.162.225.235:44628
128.243.215.120:2323
34.121.39.185:2323
34.121.39.185:44628

# Reference: https://www.virustotal.com/gui/file/de1b69cfe1a8672a71262a2bbadeb4f9ef612f85d0776f3e598642f5bd17b28b/detection

117.145.78.28:2323
117.145.78.28:44628
157.28.1.158:2323
157.28.1.158:44628
131.104.206.84:2323
147.217.173.209:2323
147.217.173.209:44628

# Reference: https://www.virustotal.com/gui/file/76c9f4f6161cdc58dd312a946e48d19a6ef59b222dc67263b5015a595661b574/detection

181.137.142.28:2323
181.137.142.28:44628
205.10.193.209:2323
14.47.251.224:2323
92.29.239.156:2323
65.202.2.127:2323
65.202.2.127:44628

# Reference: https://www.virustotal.com/gui/file/d82e3d1877e280e28337bfdf989c91f33404a0f1d40009617801f52411776aeb/detection

12.129.251.56:2323
12.129.251.56:44628
126.254.2.205:2323
126.254.2.205:44628
153.168.179.134:2323
153.168.179.134:44628
172.78.241.214:2323
172.78.241.214:44628
209.169.130.124:2323
209.169.130.124:44628

# Reference: https://www.virustotal.com/gui/file/77b6a0477384a0af3a9fa8d5f03c0d06f4ed9a70af37d7f6f8de1747227515bd/detection

20.249.79.20:2323
156.115.192.216:2323
156.115.192.216:44628
180.60.117.11:2323
140.175.241.47:2323
161.145.194.124:2323

# Reference: https://www.virustotal.com/gui/file/d0c280bcac142c49eed685bdddd935abb1430a4621b2ff4a88fbb6ab3110ed19/detection

25.241.178.61:44629

# Reference: https://www.virustotal.com/gui/file/54f3ab6db8a6d2f64d1b84fd577281d3cdfe8f3cfd5bbbf11f7b4a9bd6208b81/detection

156.78.18.114:44629
194.48.177.97:44629

# Reference: https://www.virustotal.com/gui/file/d178b3c9f01829f56ec244849d36c0194786b709513abf8ffc878bdb672052f9/detection

hh.cyberium.cc

# Reference: https://twitter.com/CujoaiLabs/status/1362759627620941827
# Reference: https://www.virustotal.com/gui/file/c623dc1441cb79dd8214ece3c7e4f020f32472cc27a07beca4169c902a58fe9c/detection
# Reference: https://www.virustotal.com/gui/file/4c2b37d64a2fc48ef15ac40a8338c604a2b9365bb6f8fd91182b186ec923b54c/detection
# Reference: https://www.virustotal.com/gui/file/5f553f8730ec98f57961d25478c8fa5b4adefcaa72eb0fb8795b5a717a7fcb9c/detection
# Reference: https://www.virustotal.com/gui/file/a50817c6c9b799d24d16670430364ca017f57ff82b03d82345b2591ea98a0ed5/detection
# Reference: https://www.virustotal.com/gui/file/52196a805880d39c865b41f58b794099d9e9fc226f14d43214829014e4c22473/detection
# Reference: https://www.virustotal.com/gui/file/addc2df224615966a8e238677eb27c71a4aa6220874dc607840af766ede9750c/detection

120.235.85.170:37002
151.158.105.139:37002
152.42.119.110:37002
166.24.150.205:37003
175.95.46.201:37003
214.97.129.41:37002
71.103.185.220:37002
wo.cyberium.cc
/proval.arc
/proval.arm
/proval.arm4
/proval.arm4l
/proval.arm4t
/proval.arm4tl
/proval.arm4tll
/proval.arm5
/proval.arm5l
/proval.arm5n
/proval.arm6
/proval.arm64
/proval.arm6l
/proval.arm7
/proval.arm7l
/proval.arm8
/proval.armv4
/proval.armv4l
/proval.armv5l
/proval.armv6
/proval.armv61
/proval.armv6l
/proval.armv7l
/proval.dbg
/proval.exploit
/proval.i4
/proval.i486
/proval.i586
/proval.i6
/proval.i686
/proval.kill
/proval.m68
/proval.m68k
/proval.mips
/proval.mips64
/proval.mipseb
/proval.mipsel
/proval.mpsl
/proval.pcc
/proval.powerpc
/proval.powerpc-440fp
/proval.powerppc
/proval.ppc
/proval.ppc2
/proval.ppc440
/proval.ppc440fp
/proval.root
/proval.root32
/proval.sh
/proval.sh4
/proval.sparc
/proval.spc
/proval.ssh4
/proval.x32
/proval.x64
/proval.x86
/proval.x86_32
/proval.x86_64
/HOPEIDONTHITURLHAUSE/

# Reference: https://www.virustotal.com/gui/file/e2277ba1412d178e0c5621523b0d1d968ad335c9f6f32bb9061dfdbe474b479e/detection
# Reference: https://www.virustotal.com/gui/file/2f05ba5476cbd131623e12d881dfc4edc76ca65cb61310caa67939328e46189b/detection
# Reference: https://www.virustotal.com/gui/file/93cad96d212c412dd949494a6d5f239a79c735ef9e716d307d07d0f7d193f0b3/detection
# Reference: https://www.virustotal.com/gui/file/2ffb5591dbb3aaed77d71a3d6f2fef29ce7d7242f5df218081b817016bff364e/detection
# Reference: https://www.virustotal.com/gui/file/129884bf28c5d41a35c6fdeb87a32399fa0c098e909510939faf9a7187260513/detection
# Reference: https://www.virustotal.com/gui/file/289a8d286e4ff08f0c583a98d26d1783764d53b45b462252c222b93acda0c233/detection
# Reference: https://www.virustotal.com/gui/file/148bfa40a80fc97a5d78e2aba64980e5ecc215fe6db50b941c9cd1a0573979e8/detection
# Reference: https://www.virustotal.com/gui/file/e8a51ba26c9a6ca6fc942b96aa0ca5e583b987bf316d5f2e4dd649e6d875df39/detection
# Reference: https://www.virustotal.com/gui/file/ba1a8e4c73173210f118a36134058c425b1710af4bbbc517f915144df79e998c/detection

132.1.30.57:2323
132.1.30.57:25009
132.135.253.182:2323
132.135.253.182:25009
143.231.185.45:2323
143.231.185.45:25009
178.198.51.200:2323
178.198.51.200:25009
220.97.236.12:2323
220.97.236.12:25009
37.205.66.2:2323
37.205.66.2:25009
55.160.120.53:2323
55.160.120.53:25009
63.116.139.255:2323
63.116.139.255:25009
74.39.226.252:2323
74.39.226.252:25009
ns.cyberium.cc

# Reference: https://www.virustotal.com/gui/file/3f5f015f919a2341d4da292a7db859e5c607e4f3e4a06db189b6548ef68c27fe/detection

185.244.25.181:81

# Reference: https://www.virustotal.com/gui/file/a3278015e1605ef349623dafb18d7ad3665b270a5b4359c66d9aa71031a0e20c/detection

185.244.25.181:26663

# Reference: https://tolisec.com/active-iot-botnets-25-03-2020/
# Reference: https://www.virustotal.com/gui/file/bd658214918e4228f4ed07875d4830f3/detection
# Reference: https://www.virustotal.com/gui/file/bd658214918e4228f4ed07875d4830f3/detection
# Reference: https://www.virustotal.com/gui/file/8a7dafd2218ccdfa511e94f3e6dc9a59/detection
# Reference: https://www.virustotal.com/gui/file/2398c7305b819ef61411eac52463f862/detection
# Reference: https://www.virustotal.com/gui/file/8b8e4fb04a87013b153f683b1149dd3c/detection
# Reference: https://www.virustotal.com/gui/file/26a9dce3e8d3a6fa963e1cc101b60a36/detection
# Reference: https://www.virustotal.com/gui/file/8ad99e518fbaf1219f06e762db906ec3/detection
# Reference: https://www.virustotal.com/gui/file/9ca091d3104fb56e63493394e50e8e07/detection
# Reference: https://www.virustotal.com/gui/file/1d924d0b3d22fc86f3e6c0918f2f0e7b/detection
# Reference: https://www.virustotal.com/gui/file/bd658214918e4228f4ed07875d4830f3/detection
# Reference: https://www.virustotal.com/gui/file/8a7dafd2218ccdfa511e94f3e6dc9a59/detection
# Reference: https://www.virustotal.com/gui/file/2398c7305b819ef61411eac52463f862/detection
# Reference: https://www.virustotal.com/gui/file/8b8e4fb04a87013b153f683b1149dd3c/detection
# Reference: https://www.virustotal.com/gui/file/26a9dce3e8d3a6fa963e1cc101b60a36/detection
# Reference: https://www.virustotal.com/gui/file/8ad99e518fbaf1219f06e762db906ec3/detection
# Reference: https://www.virustotal.com/gui/file/9ca091d3104fb56e63493394e50e8e07/detection
# Reference: https://www.virustotal.com/gui/file/1d924d0b3d22fc86f3e6c0918f2f0e7b/detection
# Reference: https://www.virustotal.com/gui/file/525bfe4227d4dcb27b5cd274e9bb5494/detection
# Reference: https://www.virustotal.com/gui/file/03f788b565da0f154b5c506fba5b589e/detection
# Reference: https://www.virustotal.com/gui/file/abcada52e64e74c5c869152055579b3a/detection
# Reference: https://www.virustotal.com/gui/file/8f2ded85594258546e6a9f62e7477d99/detection
# Reference: https://www.virustotal.com/gui/file/ea5e33d4d6a81858255ce1def8205674/detection

104.248.86.127:9506
134.122.112.236:45
139.162.189.173:9506
159.89.54.236:9375
172.86.75.173:6909
192.236.155.159:7498
45.55.33.143:45
67.207.93.206:65513
95.217.146.225:9506

# Reference: https://tolisec.com/active-iot-botnets-10-04-2020/
# Reference: https://www.virustotal.com/gui/file/a89335c965355e33e10c8f779a00a7d5/detection
# Reference: https://www.virustotal.com/gui/file/f53749eaeea48dc1720cfca6f5b4e932/detection
# Reference: https://www.virustotal.com/gui/file/06a6abf63963606a28d5fb1e4bedc72d/detection
# Reference: https://www.virustotal.com/gui/file/c6dcbd3557fe11841599427da833d63c/detection

104.238.235.186:5034
142.93.197.100:45
165.227.51.77:666
45.14.224.22:21795

# Reference: https://tolisec.com/active-iot-botnets-12-05-2020/
# Reference: https://www.virustotal.com/gui/file/5a7fd559adc15c89086592427b8b8d2c/detection
# Reference: https://www.virustotal.com/gui/file/9d08d96c6aa72932a0cc2e449c82fae8/detection
# Reference: https://www.virustotal.com/gui/file/b55f2f5c805b04858ae7fad8ac137d42/detection
# Reference: https://www.virustotal.com/gui/file/fdd8089262c3bbc4216085cf5a235c6c/detection
# Reference: https://www.virustotal.com/gui/file/91b8be51f982cad32050265ad9795c8e/detection
# Reference: https://www.virustotal.com/gui/file/fd1c236ef8051b3e11d4f9c45cf2f37e/detection
# Reference: https://www.virustotal.com/gui/file/76bb394c91b530311c830e5559ca0e99/detection
# Reference: https://www.virustotal.com/gui/file/35509e2c5a70cfc114222cb63d5a720a/detection
# Reference: https://www.virustotal.com/gui/file/1ce7ad62f9a5414f9101c8e6d25a6eba/detection
# Reference: https://www.virustotal.com/gui/file/d4feb8904af8f5517f88125dd8797b95/detection
# Reference: https://www.virustotal.com/gui/file/09f530994d19bad5fb57f27b346b241cb3718e906c751d4c802a6402aa75f847/detection

159.89.150.193:666
172.245.52.231:59666
192.236.160.162:58666
45.135.134.190:1791
45.32.179.8:9375
45.95.168.81:45
82.118.242.107:60004
96.30.193.26:8089
cnc.luxstresser.xyz

# Reference: https://tolisec.com/active-iot-botnets-18-05-2020/
# Reference: https://www.virustotal.com/gui/file/31cdb290056ccabca8d82176cbfb7b52/detection
# Reference: https://www.virustotal.com/gui/file/8b9eddbf2b90f15ad2b224b22fd8bc45/detection
# Reference: https://www.virustotal.com/gui/file/593e30dc2349334691e964a3934040ce/detection
# Reference: https://www.virustotal.com/gui/file/28323e9d1fa9dad0b07710aeab3f2be2/detection
# Reference: https://www.virustotal.com/gui/file/cfd9ee5b7dc7a79270565ef6a3351802/detection
# Reference: https://www.virustotal.com/gui/file/6df592143855b39753708ae44ddd8543/detection
# Reference: https://www.virustotal.com/gui/file/d7bf73af57300a78a18d942a6a915506/detection

192.236.146.53:4708
23.254.209.220:17012
37.49.226.221:6969
37.49.226.35:2074
45.95.168.169:65508
64.227.57.139:1791

# Reference: https://tolisec.com/active-iot-botnets-08-06-2020/
# Reference: https://www.virustotal.com/gui/file/4b6bb12f19c0952af041148e1378c0fc/detection
# Reference: https://www.virustotal.com/gui/file/c98713fa1be1f7b1ab2a0b325c9dd92c/detection
# Reference: https://www.virustotal.com/gui/file/8622a79f8fd279945074e3322f4619c4/detection
# Reference: https://www.virustotal.com/gui/file/b72e7857b7fedf7d6c962da17ea012ad/detection
# Reference: https://www.virustotal.com/gui/file/8c35339cd030daa159e7cbffa83ac22e/detection

172.245.8.9:3884
37.49.224.209:5959
45.143.220.246:1027
45.95.168.156:45
45.95.169.1:5959

# Reference: https://twitter.com/peterkruse/status/1328660451111161861

23.94.136.101:1543

# Reference: https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/
# Reference: https://otx.alienvault.com/pulse/5fc9287d6df7201a94b8b861

2.57.122.167:5858

# Reference: https://twitter.com/0xrb/status/1339459142172299264

103.42.214.181:50505
/429329839912839018dhas8hd.arc
/429329839912839018dhas8hd.arcle-hs38
/429329839912839018dhas8hd.arm
/429329839912839018dhas8hd.arm4
/429329839912839018dhas8hd.arm4l
/429329839912839018dhas8hd.arm4t
/429329839912839018dhas8hd.arm4tl
/429329839912839018dhas8hd.arm4tll
/429329839912839018dhas8hd.arm5
/429329839912839018dhas8hd.arm5l
/429329839912839018dhas8hd.arm5n
/429329839912839018dhas8hd.arm6
/429329839912839018dhas8hd.arm64
/429329839912839018dhas8hd.arm6l
/429329839912839018dhas8hd.arm7
/429329839912839018dhas8hd.arm7l
/429329839912839018dhas8hd.arm8
/429329839912839018dhas8hd.armv4
/429329839912839018dhas8hd.armv4l
/429329839912839018dhas8hd.armv5l
/429329839912839018dhas8hd.armv6
/429329839912839018dhas8hd.armv61
/429329839912839018dhas8hd.armv6l
/429329839912839018dhas8hd.armv7l
/429329839912839018dhas8hd.dbg
/429329839912839018dhas8hd.exploit
/429329839912839018dhas8hd.i4
/429329839912839018dhas8hd.i486
/429329839912839018dhas8hd.i586
/429329839912839018dhas8hd.i6
/429329839912839018dhas8hd.i686
/429329839912839018dhas8hd.kill
/429329839912839018dhas8hd.m68
/429329839912839018dhas8hd.m68k
/429329839912839018dhas8hd.mips
/429329839912839018dhas8hd.mips64
/429329839912839018dhas8hd.mipseb
/429329839912839018dhas8hd.mipsel
/429329839912839018dhas8hd.mpsl
/429329839912839018dhas8hd.pcc
/429329839912839018dhas8hd.powerpc
/429329839912839018dhas8hd.powerpc-440fp
/429329839912839018dhas8hd.powerppc
/429329839912839018dhas8hd.ppc
/429329839912839018dhas8hd.ppc2
/429329839912839018dhas8hd.ppc440
/429329839912839018dhas8hd.ppc440fp
/429329839912839018dhas8hd.root
/429329839912839018dhas8hd.root32
/429329839912839018dhas8hd.sh
/429329839912839018dhas8hd.sh4
/429329839912839018dhas8hd.sparc
/429329839912839018dhas8hd.spc
/429329839912839018dhas8hd.ssh4
/429329839912839018dhas8hd.x32
/429329839912839018dhas8hd.x64
/429329839912839018dhas8hd.x86
/429329839912839018dhas8hd.x86_32
/429329839912839018dhas8hd.x86_64
/8z9z5x2aq931vs5431df33245v1651jm1556x.arc
/8z9z5x2aq931vs5431df33245v1651jm1556x.arcle-hs38
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm4
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm4l
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm4t
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm4tl
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm4tll
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm5
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm5l
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm5n
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm6
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm64
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm6l
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm7
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm7l
/8z9z5x2aq931vs5431df33245v1651jm1556x.arm8
/8z9z5x2aq931vs5431df33245v1651jm1556x.armv4
/8z9z5x2aq931vs5431df33245v1651jm1556x.armv4l
/8z9z5x2aq931vs5431df33245v1651jm1556x.armv5l
/8z9z5x2aq931vs5431df33245v1651jm1556x.armv6
/8z9z5x2aq931vs5431df33245v1651jm1556x.armv61
/8z9z5x2aq931vs5431df33245v1651jm1556x.armv6l
/8z9z5x2aq931vs5431df33245v1651jm1556x.armv7l
/8z9z5x2aq931vs5431df33245v1651jm1556x.dbg
/8z9z5x2aq931vs5431df33245v1651jm1556x.exploit
/8z9z5x2aq931vs5431df33245v1651jm1556x.i4
/8z9z5x2aq931vs5431df33245v1651jm1556x.i486
/8z9z5x2aq931vs5431df33245v1651jm1556x.i586
/8z9z5x2aq931vs5431df33245v1651jm1556x.i6
/8z9z5x2aq931vs5431df33245v1651jm1556x.i686
/8z9z5x2aq931vs5431df33245v1651jm1556x.kill
/8z9z5x2aq931vs5431df33245v1651jm1556x.m68
/8z9z5x2aq931vs5431df33245v1651jm1556x.m68k
/8z9z5x2aq931vs5431df33245v1651jm1556x.mips
/8z9z5x2aq931vs5431df33245v1651jm1556x.mips64
/8z9z5x2aq931vs5431df33245v1651jm1556x.mipseb
/8z9z5x2aq931vs5431df33245v1651jm1556x.mipsel
/8z9z5x2aq931vs5431df33245v1651jm1556x.mpsl
/8z9z5x2aq931vs5431df33245v1651jm1556x.pcc
/8z9z5x2aq931vs5431df33245v1651jm1556x.powerpc
/8z9z5x2aq931vs5431df33245v1651jm1556x.powerpc-440fp
/8z9z5x2aq931vs5431df33245v1651jm1556x.powerppc
/8z9z5x2aq931vs5431df33245v1651jm1556x.ppc
/8z9z5x2aq931vs5431df33245v1651jm1556x.ppc2
/8z9z5x2aq931vs5431df33245v1651jm1556x.ppc440
/8z9z5x2aq931vs5431df33245v1651jm1556x.ppc440fp
/8z9z5x2aq931vs5431df33245v1651jm1556x.root
/8z9z5x2aq931vs5431df33245v1651jm1556x.root32
/8z9z5x2aq931vs5431df33245v1651jm1556x.sh
/8z9z5x2aq931vs5431df33245v1651jm1556x.sh4
/8z9z5x2aq931vs5431df33245v1651jm1556x.sparc
/8z9z5x2aq931vs5431df33245v1651jm1556x.spc
/8z9z5x2aq931vs5431df33245v1651jm1556x.ssh4
/8z9z5x2aq931vs5431df33245v1651jm1556x.x32
/8z9z5x2aq931vs5431df33245v1651jm1556x.x64
/8z9z5x2aq931vs5431df33245v1651jm1556x.x86
/8z9z5x2aq931vs5431df33245v1651jm1556x.x86_32
/8z9z5x2aq931vs5431df33245v1651jm1556x.x86_64
/oni1.arc
/oni1.arcle-hs38
/oni1.arm
/oni1.arm4
/oni1.arm4l
/oni1.arm4t
/oni1.arm4tl
/oni1.arm4tll
/oni1.arm5
/oni1.arm5l
/oni1.arm5n
/oni1.arm6
/oni1.arm64
/oni1.arm6l
/oni1.arm7
/oni1.arm7l
/oni1.arm8
/oni1.armv4
/oni1.armv4l
/oni1.armv5l
/oni1.armv6
/oni1.armv61
/oni1.armv6l
/oni1.armv7l
/oni1.dbg
/oni1.exploit
/oni1.i4
/oni1.i486
/oni1.i586
/oni1.i6
/oni1.i686
/oni1.kill
/oni1.m68
/oni1.m68k
/oni1.mips
/oni1.mips64
/oni1.mipseb
/oni1.mipsel
/oni1.mpsl
/oni1.pcc
/oni1.powerpc
/oni1.powerpc-440fp
/oni1.powerppc
/oni1.ppc
/oni1.ppc2
/oni1.ppc440
/oni1.ppc440fp
/oni1.root
/oni1.root32
/oni1.sh
/oni1.sh4
/oni1.sparc
/oni1.spc
/oni1.ssh4
/oni1.x32
/oni1.x64
/oni1.x86
/oni1.x86_32
/oni1.x86_64
/1az01dc/
/429329839912839018dhas8hd/

# Reference: https://twitter.com/SolutionsXnotes/status/1252890403310678018

boatnet.us

# Reference: https://www.virustotal.com/gui/file/a4819baf2a16fdb4245de541bdff9f0d0b496721dd51d13bdd2aa55d4f6fe19b/detection
# Reference: https://www.virustotal.com/gui/file/a22d085d651d9db6cb0c6feff6a7bdbb9e0a788423ab5ec5fc15d1e0822b83d2/detection
# Reference: https://www.virustotal.com/gui/file/a1eba028065bc4ab687b6d478a86a359939593c5d7a882dd70e18e4c3180e5ed/detection

119.224.78.71:9506
12.131.52.123:9506
141.245.129.208:9506
142.105.199.63:9506
194.180.224.112:2323
194.180.224.112:33076
194.180.224.112:33635
194.180.224.112:39017
194.180.224.112:39914
194.180.224.112:40046
194.180.224.112:41021
194.180.224.112:42154
194.180.224.112:43168
194.180.224.112:47729
194.180.224.112:47751
194.180.224.112:47889
194.180.224.112:48557
194.180.224.112:48620
194.180.224.112:49314
194.180.224.112:53898
194.180.224.112:57962
194.180.224.112:59902
194.180.224.112:6281
194.180.224.112:9506
43.62.234.74:9506

# Reference: https://twitter.com/0xrb/status/1345970855692566530

/caligula.arc
/caligula.arcle-hs38
/caligula.arm
/caligula.arm4
/caligula.arm4l
/caligula.arm4t
/caligula.arm4tl
/caligula.arm4tll
/caligula.arm5
/caligula.arm5l
/caligula.arm5n
/caligula.arm6
/caligula.arm64
/caligula.arm6l
/caligula.arm7
/caligula.arm7l
/caligula.arm8
/caligula.armv4
/caligula.armv4l
/caligula.armv5l
/caligula.armv6
/caligula.armv61
/caligula.armv6l
/caligula.armv7l
/caligula.dbg
/caligula.exploit
/caligula.i4
/caligula.i486
/caligula.i586
/caligula.i6
/caligula.i686
/caligula.kill
/caligula.m68
/caligula.m68k
/caligula.mips
/caligula.mips64
/caligula.mipseb
/caligula.mipsel
/caligula.mpsl
/caligula.pcc
/caligula.powerpc
/caligula.powerpc-440fp
/caligula.powerppc
/caligula.ppc
/caligula.ppc2
/caligula.ppc440
/caligula.ppc440fp
/caligula.root
/caligula.root32
/caligula.sh
/caligula.sh4
/caligula.sparc
/caligula.spc
/caligula.ssh4
/caligula.x32
/caligula.x64
/caligula.x86
/caligula.x86_32
/caligula.x86_64

# Reference: https://twitter.com/r3dbU7z/status/1346566617614979073

/drp.arc
/drp.arcle-hs38
/drp.arm
/drp.arm4
/drp.arm4l
/drp.arm4t
/drp.arm4tl
/drp.arm4tll
/drp.arm5
/drp.arm5l
/drp.arm5n
/drp.arm6
/drp.arm64
/drp.arm6l
/drp.arm7
/drp.arm7l
/drp.arm8
/drp.armv4
/drp.armv4l
/drp.armv5l
/drp.armv6
/drp.armv61
/drp.armv6l
/drp.armv7l
/drp.dbg
/drp.exploit
/drp.i4
/drp.i486
/drp.i586
/drp.i6
/drp.i686
/drp.kill
/drp.m68
/drp.m68k
/drp.mips
/drp.mips64
/drp.mipseb
/drp.mipsel
/drp.mpsl
/drp.pcc
/drp.powerpc
/drp.powerpc-440fp
/drp.powerppc
/drp.ppc
/drp.ppc2
/drp.ppc440
/drp.ppc440fp
/drp.root
/drp.root32
/drp.sh
/drp.sh4
/drp.sparc
/drp.spc
/drp.ssh4
/drp.x32
/drp.x64
/drp.x86
/drp.x86_32
/drp.x86_64

# Reference: https://www.virustotal.com/gui/file/cba1ffef3091328c86676e525f6f097f1e8ac6ecfbbd5070639b866af23acf43/detection

163.219.86.46:9506
35.196.86.130:9506
37.46.150.86:9506

# Reference: https://www.virustotal.com/gui/file/83038e3b739022bab80b1b1b5ed4806166ce84099cb5fbb4b490ea269321f16e/detection

37.46.150.86:444

# Reference: https://www.virustotal.com/gui/file/afa11fe5bfd84487b331e60c097f321fd3eaf4274c8dd561189da5f04173b061/detection

185.80.129.5:1791

# Reference: https://www.virustotal.com/gui/file/d52224837a3a1fc33b8d89b22c05bba408243a5a897fa026fbd0f0be4614cbab/detection

192.28.172.40:36518
216.50.114.228:36518
76.81.137.181:36518
smlpp.monster

# Reference: https://www.virustotal.com/gui/file/c8aeb927cd1b897a9c31199f33a6df9f297707bed1aa0e66d167270f1fde6ff5/detection

159.65.8.143:7654
159.65.8.143:7685

# Reference: https://twitter.com/r3dbU7z/status/1351962998961803264

/luftwafee.arc
/luftwafee.arcle-hs38
/luftwafee.arm
/luftwafee.arm4
/luftwafee.arm4l
/luftwafee.arm4t
/luftwafee.arm4tl
/luftwafee.arm4tll
/luftwafee.arm5
/luftwafee.arm5l
/luftwafee.arm5n
/luftwafee.arm6
/luftwafee.arm64
/luftwafee.arm6l
/luftwafee.arm7
/luftwafee.arm7l
/luftwafee.arm8
/luftwafee.armv4
/luftwafee.armv4l
/luftwafee.armv5l
/luftwafee.armv6
/luftwafee.armv61
/luftwafee.armv6l
/luftwafee.armv7l
/luftwafee.dbg
/luftwafee.exploit
/luftwafee.i4
/luftwafee.i486
/luftwafee.i586
/luftwafee.i6
/luftwafee.i686
/luftwafee.kill
/luftwafee.m68
/luftwafee.m68k
/luftwafee.mips
/luftwafee.mips64
/luftwafee.mipseb
/luftwafee.mipsel
/luftwafee.mpsl
/luftwafee.pcc
/luftwafee.powerpc
/luftwafee.powerpc-440fp
/luftwafee.powerppc
/luftwafee.ppc
/luftwafee.ppc2
/luftwafee.ppc440
/luftwafee.ppc440fp
/luftwafee.root
/luftwafee.root32
/luftwafee.sh
/luftwafee.sh4
/luftwafee.sparc
/luftwafee.spc
/luftwafee.ssh4
/luftwafee.x32
/luftwafee.x64
/luftwafee.x86
/luftwafee.x86_32
/luftwafee.x86_64

# Reference: https://twitter.com/0xrb/status/1361560701454585857

/AJhkewbfwefWEFarc
/AJhkewbfwefWEFarcle-hs38
/AJhkewbfwefWEFarm
/AJhkewbfwefWEFarm4
/AJhkewbfwefWEFarm4l
/AJhkewbfwefWEFarm4t
/AJhkewbfwefWEFarm4tl
/AJhkewbfwefWEFarm4tll
/AJhkewbfwefWEFarm5
/AJhkewbfwefWEFarm5l
/AJhkewbfwefWEFarm5n
/AJhkewbfwefWEFarm6
/AJhkewbfwefWEFarm64
/AJhkewbfwefWEFarm6l
/AJhkewbfwefWEFarm7
/AJhkewbfwefWEFarm7l
/AJhkewbfwefWEFarm8
/AJhkewbfwefWEFarmv4
/AJhkewbfwefWEFarmv4l
/AJhkewbfwefWEFarmv5l
/AJhkewbfwefWEFarmv6
/AJhkewbfwefWEFarmv61
/AJhkewbfwefWEFarmv6l
/AJhkewbfwefWEFarmv7l
/AJhkewbfwefWEFdbg
/AJhkewbfwefWEFexploit
/AJhkewbfwefWEFi4
/AJhkewbfwefWEFi486
/AJhkewbfwefWEFi586
/AJhkewbfwefWEFi6
/AJhkewbfwefWEFi686
/AJhkewbfwefWEFkill
/AJhkewbfwefWEFm68
/AJhkewbfwefWEFm68k
/AJhkewbfwefWEFmips
/AJhkewbfwefWEFmips64
/AJhkewbfwefWEFmipseb
/AJhkewbfwefWEFmipsel
/AJhkewbfwefWEFmpsl
/AJhkewbfwefWEFpcc
/AJhkewbfwefWEFpowerpc
/AJhkewbfwefWEFpowerpc-440fp
/AJhkewbfwefWEFpowerppc
/AJhkewbfwefWEFppc
/AJhkewbfwefWEFpp-c
/AJhkewbfwefWEFppc2
/AJhkewbfwefWEFppc440
/AJhkewbfwefWEFppc440fp
/AJhkewbfwefWEFroot
/AJhkewbfwefWEFroot32
/AJhkewbfwefWEFsh
/AJhkewbfwefWEFsh4
/AJhkewbfwefWEFsparc
/AJhkewbfwefWEFspc
/AJhkewbfwefWEFssh4
/AJhkewbfwefWEFx32
/AJhkewbfwefWEFx32_64
/AJhkewbfwefWEFx64
/AJhkewbfwefWEFx86
/AJhkewbfwefWEFx86_32
/AJhkewbfwefWEFx86_64
/hinatasocute.arc
/hinatasocute.arcle-hs38
/hinatasocute.arm
/hinatasocute.arm4
/hinatasocute.arm4l
/hinatasocute.arm4t
/hinatasocute.arm4tl
/hinatasocute.arm4tll
/hinatasocute.arm5
/hinatasocute.arm5l
/hinatasocute.arm5n
/hinatasocute.arm6
/hinatasocute.arm64
/hinatasocute.arm6l
/hinatasocute.arm7
/hinatasocute.arm7l
/hinatasocute.arm8
/hinatasocute.armv4
/hinatasocute.armv4l
/hinatasocute.armv5l
/hinatasocute.armv6
/hinatasocute.armv61
/hinatasocute.armv6l
/hinatasocute.armv7l
/hinatasocute.dbg
/hinatasocute.exploit
/hinatasocute.i4
/hinatasocute.i486
/hinatasocute.i586
/hinatasocute.i6
/hinatasocute.i686
/hinatasocute.kill
/hinatasocute.m68
/hinatasocute.m68k
/hinatasocute.mips
/hinatasocute.mips64
/hinatasocute.mipseb
/hinatasocute.mipsel
/hinatasocute.mpsl
/hinatasocute.pcc
/hinatasocute.powerpc
/hinatasocute.powerpc-440fp
/hinatasocute.powerppc
/hinatasocute.ppc
/hinatasocute.pp-c
/hinatasocute.ppc2
/hinatasocute.ppc440
/hinatasocute.ppc440fp
/hinatasocute.root
/hinatasocute.root32
/hinatasocute.sh
/hinatasocute.sh4
/hinatasocute.sparc
/hinatasocute.spc
/hinatasocute.ssh4
/hinatasocute.x32
/hinatasocute.x32_64
/hinatasocute.x64
/hinatasocute.x86
/hinatasocute.x86_32
/hinatasocute.x86_64
/kurdentz.arc
/kurdentz.arcle-hs38
/kurdentz.arm
/kurdentz.arm4
/kurdentz.arm4l
/kurdentz.arm4t
/kurdentz.arm4tl
/kurdentz.arm4tll
/kurdentz.arm5
/kurdentz.arm5l
/kurdentz.arm5n
/kurdentz.arm6
/kurdentz.arm64
/kurdentz.arm6l
/kurdentz.arm7
/kurdentz.arm7l
/kurdentz.arm8
/kurdentz.armv4
/kurdentz.armv4l
/kurdentz.armv5l
/kurdentz.armv6
/kurdentz.armv61
/kurdentz.armv6l
/kurdentz.armv7l
/kurdentz.dbg
/kurdentz.exploit
/kurdentz.i4
/kurdentz.i486
/kurdentz.i586
/kurdentz.i6
/kurdentz.i686
/kurdentz.kill
/kurdentz.m68
/kurdentz.m68k
/kurdentz.mips
/kurdentz.mips64
/kurdentz.mipseb
/kurdentz.mipsel
/kurdentz.mpsl
/kurdentz.pcc
/kurdentz.powerpc
/kurdentz.powerpc-440fp
/kurdentz.powerppc
/kurdentz.ppc
/kurdentz.pp-c
/kurdentz.ppc2
/kurdentz.ppc440
/kurdentz.ppc440fp
/kurdentz.root
/kurdentz.root32
/kurdentz.sh
/kurdentz.sh4
/kurdentz.sparc
/kurdentz.spc
/kurdentz.ssh4
/kurdentz.x32
/kurdentz.x32_64
/kurdentz.x64
/kurdentz.x86
/kurdentz.x86_32
/kurdentz.x86_64
/pxSd.arc
/pxSd.arcle-hs38
/pxSd.arm
/pxSd.arm4
/pxSd.arm4l
/pxSd.arm4t
/pxSd.arm4tl
/pxSd.arm4tll
/pxSd.arm5
/pxSd.arm5l
/pxSd.arm5n
/pxSd.arm6
/pxSd.arm64
/pxSd.arm6l
/pxSd.arm7
/pxSd.arm7l
/pxSd.arm8
/pxSd.armv4
/pxSd.armv4l
/pxSd.armv5l
/pxSd.armv6
/pxSd.armv61
/pxSd.armv6l
/pxSd.armv7l
/pxSd.dbg
/pxSd.exploit
/pxSd.i4
/pxSd.i486
/pxSd.i586
/pxSd.i6
/pxSd.i686
/pxSd.kill
/pxSd.m68
/pxSd.m68k
/pxSd.mips
/pxSd.mips64
/pxSd.mipseb
/pxSd.mipsel
/pxSd.mpsl
/pxSd.pcc
/pxSd.powerpc
/pxSd.powerpc-440fp
/pxSd.powerppc
/pxSd.ppc
/pxSd.pp-c
/pxSd.ppc2
/pxSd.ppc440
/pxSd.ppc440fp
/pxSd.root
/pxSd.root32
/pxSd.sh
/pxSd.sh4
/pxSd.sparc
/pxSd.spc
/pxSd.ssh4
/pxSd.x32
/pxSd.x32_64
/pxSd.x64
/pxSd.x86
/pxSd.x86_32
/pxSd.x86_64
/suk.out.arc
/suk.out.arcle-hs38
/suk.out.arm
/suk.out.arm4
/suk.out.arm4l
/suk.out.arm4t
/suk.out.arm4tl
/suk.out.arm4tll
/suk.out.arm5
/suk.out.arm5l
/suk.out.arm5n
/suk.out.arm6
/suk.out.arm64
/suk.out.arm6l
/suk.out.arm7
/suk.out.arm7l
/suk.out.arm8
/suk.out.armv4
/suk.out.armv4l
/suk.out.armv5l
/suk.out.armv6
/suk.out.armv61
/suk.out.armv6l
/suk.out.armv7l
/suk.out.dbg
/suk.out.exploit
/suk.out.i4
/suk.out.i486
/suk.out.i586
/suk.out.i6
/suk.out.i686
/suk.out.kill
/suk.out.m68
/suk.out.m68k
/suk.out.mips
/suk.out.mips64
/suk.out.mipseb
/suk.out.mipsel
/suk.out.mpsl
/suk.out.pcc
/suk.out.powerpc
/suk.out.powerpc-440fp
/suk.out.powerppc
/suk.out.ppc
/suk.out.pp-c
/suk.out.ppc2
/suk.out.ppc440
/suk.out.ppc440fp
/suk.out.root
/suk.out.root32
/suk.out.sh
/suk.out.sh4
/suk.out.sparc
/suk.out.spc
/suk.out.ssh4
/suk.out.x32
/suk.out.x32_64
/suk.out.x64
/suk.out.x86
/suk.out.x86_32
/suk.out.x86_64
/UR0ABotnet.arc
/UR0ABotnet.arcle-hs38
/UR0ABotnet.arm
/UR0ABotnet.arm4
/UR0ABotnet.arm4l
/UR0ABotnet.arm4t
/UR0ABotnet.arm4tl
/UR0ABotnet.arm4tll
/UR0ABotnet.arm5
/UR0ABotnet.arm5l
/UR0ABotnet.arm5n
/UR0ABotnet.arm6
/UR0ABotnet.arm64
/UR0ABotnet.arm6l
/UR0ABotnet.arm7
/UR0ABotnet.arm7l
/UR0ABotnet.arm8
/UR0ABotnet.armv4
/UR0ABotnet.armv4l
/UR0ABotnet.armv5l
/UR0ABotnet.armv6
/UR0ABotnet.armv61
/UR0ABotnet.armv6l
/UR0ABotnet.armv7l
/UR0ABotnet.dbg
/UR0ABotnet.exploit
/UR0ABotnet.i4
/UR0ABotnet.i486
/UR0ABotnet.i586
/UR0ABotnet.i6
/UR0ABotnet.i686
/UR0ABotnet.kill
/UR0ABotnet.m68
/UR0ABotnet.m68k
/UR0ABotnet.mips
/UR0ABotnet.mips64
/UR0ABotnet.mipseb
/UR0ABotnet.mipsel
/UR0ABotnet.mpsl
/UR0ABotnet.pcc
/UR0ABotnet.powerpc
/UR0ABotnet.powerpc-440fp
/UR0ABotnet.powerppc
/UR0ABotnet.ppc
/UR0ABotnet.pp-c
/UR0ABotnet.ppc2
/UR0ABotnet.ppc440
/UR0ABotnet.ppc440fp
/UR0ABotnet.root
/UR0ABotnet.root32
/UR0ABotnet.sh
/UR0ABotnet.sh4
/UR0ABotnet.sparc
/UR0ABotnet.spc
/UR0ABotnet.ssh4
/UR0ABotnet.x32
/UR0ABotnet.x32_64
/UR0ABotnet.x64
/UR0ABotnet.x86
/UR0ABotnet.x86_32
/UR0ABotnet.x86_64
/LpKDJb/
/PolezKdhq/

# Reference: https://www.virustotal.com/gui/file/b7d7f88cc72a3cdbef96c3ea503d9bc694ba0280a88347d87a9d5a4e98be0244/detection

189.69.107.176:8281
51.222.110.60:8080
kranskerstuff.kozow.com
/Xlsbs0db3p0ps
/Xlsbs0db3p0sl
/Xlsbs0db3p086
/Xlsbs0db3p0m4
/Xlsbs0db3p0m5
/Xlsbs0db3p0m6
/Xlsbs0db3p0m7
/Xlsbs0db3p0pc
/Xlsbs0db3p08k

# Reference: https://twitter.com/VessOnSecurity/status/1362906047346847744

/juantech.arc
/juantech.arcle-hs38
/juantech.arm
/juantech.arm4
/juantech.arm4l
/juantech.arm4t
/juantech.arm4tl
/juantech.arm4tll
/juantech.arm5
/juantech.arm5l
/juantech.arm5n
/juantech.arm6
/juantech.arm64
/juantech.arm6l
/juantech.arm7
/juantech.arm7l
/juantech.arm8
/juantech.armv4
/juantech.armv4l
/juantech.armv5l
/juantech.armv6
/juantech.armv61
/juantech.armv6l
/juantech.armv7l
/juantech.dbg
/juantech.exploit
/juantech.i4
/juantech.i486
/juantech.i586
/juantech.i6
/juantech.i686
/juantech.kill
/juantech.m68
/juantech.m68k
/juantech.mips
/juantech.mips64
/juantech.mipseb
/juantech.mipsel
/juantech.mpsl
/juantech.pcc
/juantech.powerpc
/juantech.powerpc-440fp
/juantech.powerppc
/juantech.ppc
/juantech.pp-c
/juantech.ppc2
/juantech.ppc440
/juantech.ppc440fp
/juantech.root
/juantech.root32
/juantech.sh
/juantech.sh4
/juantech.sparc
/juantech.spc
/juantech.ssh4
/juantech.x32
/juantech.x32_64
/juantech.x64
/juantech.x86
/juantech.x86_32
/juantech.x86_64
/lolol.arc
/lolol.arcle-hs38
/lolol.arm
/lolol.arm4
/lolol.arm4l
/lolol.arm4t
/lolol.arm4tl
/lolol.arm4tll
/lolol.arm5
/lolol.arm5l
/lolol.arm5n
/lolol.arm6
/lolol.arm64
/lolol.arm6l
/lolol.arm7
/lolol.arm7l
/lolol.arm8
/lolol.armv4
/lolol.armv4l
/lolol.armv5l
/lolol.armv6
/lolol.armv61
/lolol.armv6l
/lolol.armv7l
/lolol.dbg
/lolol.exploit
/lolol.i4
/lolol.i486
/lolol.i586
/lolol.i6
/lolol.i686
/lolol.kill
/lolol.m68
/lolol.m68k
/lolol.mips
/lolol.mips64
/lolol.mipseb
/lolol.mipsel
/lolol.mpsl
/lolol.pcc
/lolol.powerpc
/lolol.powerpc-440fp
/lolol.powerppc
/lolol.ppc
/lolol.pp-c
/lolol.ppc2
/lolol.ppc440
/lolol.ppc440fp
/lolol.root
/lolol.root32
/lolol.sh
/lolol.sh4
/lolol.sparc
/lolol.spc
/lolol.ssh4
/lolol.x32
/lolol.x32_64
/lolol.x64
/lolol.x86
/lolol.x86_32
/lolol.x86_64

# Reference: https://twitter.com/xuy1202/status/1364520461044903937

/PornHub.arc
/PornHub.arcle-hs38
/PornHub.arm
/PornHub.arm4
/PornHub.arm4l
/PornHub.arm4t
/PornHub.arm4tl
/PornHub.arm4tll
/PornHub.arm5
/PornHub.arm5l
/PornHub.arm5n
/PornHub.arm6
/PornHub.arm64
/PornHub.arm6l
/PornHub.arm7
/PornHub.arm7l
/PornHub.arm8
/PornHub.armv4
/PornHub.armv4l
/PornHub.armv5l
/PornHub.armv6
/PornHub.armv61
/PornHub.armv6l
/PornHub.armv7l
/PornHub.dbg
/PornHub.exploit
/PornHub.i4
/PornHub.i486
/PornHub.i586
/PornHub.i6
/PornHub.i686
/PornHub.kill
/PornHub.m68
/PornHub.m68k
/PornHub.mips
/PornHub.mips64
/PornHub.mipseb
/PornHub.mipsel
/PornHub.mpsl
/PornHub.pcc
/PornHub.powerpc
/PornHub.powerpc-440fp
/PornHub.powerppc
/PornHub.ppc
/PornHub.pp-c
/PornHub.ppc2
/PornHub.ppc440
/PornHub.ppc440fp
/PornHub.root
/PornHub.root32
/PornHub.sh
/PornHub.sh4
/PornHub.sparc
/PornHub.spc
/PornHub.ssh4
/PornHub.x32
/PornHub.x32_64
/PornHub.x64
/PornHub.x86
/PornHub.x86_32
/PornHub.x86_64

# Reference: https://blog.netlab.360.com/necro/

aspjobjreorejborer.com
/mirai.arcexport
/mirai.arcle-hs38export
/mirai.armexport
/mirai.arm4export
/mirai.arm4lexport
/mirai.arm4texport
/mirai.arm4tlexport
/mirai.arm4tllexport
/mirai.arm5export
/mirai.arm5lexport
/mirai.arm5nexport
/mirai.arm6export
/mirai.arm64export
/mirai.arm6lexport
/mirai.arm7export
/mirai.arm7lexport
/mirai.arm8export
/mirai.armv4export
/mirai.armv4lexport
/mirai.armv5lexport
/mirai.armv6export
/mirai.armv61export
/mirai.armv6lexport
/mirai.armv7lexport
/mirai.dbgexport
/mirai.exploitexport
/mirai.i4export
/mirai.i486export
/mirai.i586export
/mirai.i6export
/mirai.i686export
/mirai.killexport
/mirai.m68export
/mirai.m68kexport
/mirai.mipsexport
/mirai.mips64export
/mirai.mipsebexport
/mirai.mipselexport
/mirai.mpslexport
/mirai.pccexport
/mirai.powerpcexport
/mirai.powerpc-440fpexport
/mirai.powerppcexport
/mirai.ppcexport
/mirai.pp-cexport
/mirai.ppc2export
/mirai.ppc440export
/mirai.ppc440fpexport
/mirai.rootexport
/mirai.root32export
/mirai.shexport
/mirai.sh4export
/mirai.sparcexport
/mirai.spcexport
/mirai.ssh4export
/mirai.x32export
/mirai.x32_64export
/mirai.x64export
/mirai.x86export
/mirai.x86_32export
/mirai.x86_64export
/necr0.py

# Reference: https://twitter.com/r3dbU7z/status/1364545491984343040
# Reference: https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/
# Reference: https://otx.alienvault.com/pulse/60425b0ab6820770fa97dae3

/IObeENwjarc
/IObeENwjarcle-hs38
/IObeENwjarm
/IObeENwjarm4
/IObeENwjarm4l
/IObeENwjarm4t
/IObeENwjarm4tl
/IObeENwjarm4tll
/IObeENwjarm5
/IObeENwjarm5l
/IObeENwjarm5n
/IObeENwjarm6
/IObeENwjarm64
/IObeENwjarm6l
/IObeENwjarm7
/IObeENwjarm7l
/IObeENwjarm8
/IObeENwjarmv4
/IObeENwjarmv4l
/IObeENwjarmv5l
/IObeENwjarmv6
/IObeENwjarmv61
/IObeENwjarmv6l
/IObeENwjarmv7l
/IObeENwjbsd
/IObeENwjdbg
/IObeENwjexploit
/IObeENwji4
/IObeENwji486
/IObeENwji586
/IObeENwji6
/IObeENwji686
/IObeENwjkill
/IObeENwjm68
/IObeENwjm68k
/IObeENwjmips
/IObeENwjmips64
/IObeENwjmipseb
/IObeENwjmipsel
/IObeENwjmpsl
/IObeENwjpcc
/IObeENwjpowerpc
/IObeENwjpowerpc-440fp
/IObeENwjpowerppc
/IObeENwjpp-c
/IObeENwjppc
/IObeENwjppc2
/IObeENwjppc440
/IObeENwjppc440fp
/IObeENwjroot
/IObeENwjroot32
/IObeENwjsh
/IObeENwjsh4
/IObeENwjsparc
/IObeENwjspc
/IObeENwjssh4
/IObeENwjx32
/IObeENwjx32_64
/IObeENwjx64
/IObeENwjx86
/IObeENwjx86_32
/IObeENwjx86_64
/lPxdChtp3zarc
/lPxdChtp3zarcle-hs38
/lPxdChtp3zarm
/lPxdChtp3zarm4
/lPxdChtp3zarm4l
/lPxdChtp3zarm4t
/lPxdChtp3zarm4tl
/lPxdChtp3zarm4tll
/lPxdChtp3zarm5
/lPxdChtp3zarm5l
/lPxdChtp3zarm5n
/lPxdChtp3zarm6
/lPxdChtp3zarm64
/lPxdChtp3zarm6l
/lPxdChtp3zarm7
/lPxdChtp3zarm7l
/lPxdChtp3zarm8
/lPxdChtp3zarmv4
/lPxdChtp3zarmv4l
/lPxdChtp3zarmv5l
/lPxdChtp3zarmv6
/lPxdChtp3zarmv61
/lPxdChtp3zarmv6l
/lPxdChtp3zarmv7l
/lPxdChtp3zbsd
/lPxdChtp3zdbg
/lPxdChtp3zexploit
/lPxdChtp3zi4
/lPxdChtp3zi486
/lPxdChtp3zi586
/lPxdChtp3zi6
/lPxdChtp3zi686
/lPxdChtp3zkill
/lPxdChtp3zm68
/lPxdChtp3zm68k
/lPxdChtp3zmips
/lPxdChtp3zmips64
/lPxdChtp3zmipseb
/lPxdChtp3zmipsel
/lPxdChtp3zmpsl
/lPxdChtp3zpcc
/lPxdChtp3zpowerpc
/lPxdChtp3zpowerpc-440fp
/lPxdChtp3zpowerppc
/lPxdChtp3zpp-c
/lPxdChtp3zppc
/lPxdChtp3zppc2
/lPxdChtp3zppc-440fp
/lPxdChtp3zppc440
/lPxdChtp3zppc440fp
/lPxdChtp3zroot
/lPxdChtp3zroot32
/lPxdChtp3zsh
/lPxdChtp3zsh4
/lPxdChtp3zsparc
/lPxdChtp3zspc
/lPxdChtp3zssh4
/lPxdChtp3zx32
/lPxdChtp3zx32_64
/lPxdChtp3zx64
/lPxdChtp3zx86
/lPxdChtp3zx86_32
/lPxdChtp3zx86_64
/S1eJ3/

# Reference: https://twitter.com/LGEmpathy/status/1366321018340478976

/x-8.6-.GHOUL
/x-8.6-.ISIS
/x-8.6-.KINO
/x-8.6-.Sakura
/x-8.6-.Servers420
/puto.arc
/puto.arcle-hs38
/puto.arm
/puto.arm4
/puto.arm4l
/puto.arm4t
/puto.arm4tl
/puto.arm4tll
/puto.arm5
/puto.arm5l
/puto.arm5n
/puto.arm6
/puto.arm64
/puto.arm6l
/puto.arm7
/puto.arm7l
/puto.arm8
/puto.armv4
/puto.armv4l
/puto.armv5l
/puto.armv6
/puto.armv61
/puto.armv6l
/puto.armv7l
/puto.dbg
/puto.exploit
/puto.i4
/puto.i486
/puto.i586
/puto.i6
/puto.i686
/puto.kill
/puto.m68
/puto.m68k
/puto.mips
/puto.mips64
/puto.mipseb
/puto.mipsel
/puto.mpsl
/puto.pcc
/puto.powerpc
/puto.powerpc-440fp
/puto.powerppc
/puto.ppc
/puto.pp-c
/puto.ppc2
/puto.ppc440
/puto.ppc440fp
/puto.root
/puto.root32
/puto.sh
/puto.sh4
/puto.sparc
/puto.spc
/puto.ssh4
/puto.x32
/puto.x32_64
/puto.x64
/puto.x86
/puto.x86_32
/puto.x86_64
/world.arc
/world.arcle-hs38
/world.arm
/world.arm4
/world.arm4l
/world.arm4t
/world.arm4tl
/world.arm4tll
/world.arm5
/world.arm5l
/world.arm5n
/world.arm6
/world.arm64
/world.arm6l
/world.arm7
/world.arm7l
/world.arm8
/world.armv4
/world.armv4l
/world.armv5l
/world.armv6
/world.armv61
/world.armv6l
/world.armv7l
/world.dbg
/world.exploit
/world.i4
/world.i486
/world.i586
/world.i6
/world.i686
/world.kill
/world.m68
/world.m68k
/world.mips
/world.mips64
/world.mipseb
/world.mipsel
/world.mpsl
/world.pcc
/world.powerpc
/world.powerpc-440fp
/world.powerppc
/world.ppc
/world.pp-c
/world.ppc2
/world.ppc440
/world.ppc440fp
/world.root
/world.root32
/world.sh
/world.sh4
/world.sparc
/world.spc
/world.ssh4
/world.x32
/world.x32_64
/world.x64
/world.x86
/world.x86_32
/world.x86_64
/aGVsbG8K/

# Reference: https://www.virustotal.com/gui/file/22818ae75823ee5807d5d220500eb9d5829927d57e10ce87312d1c22843fb407/detection

198.23.238.203:5684

# Reference: https://www.virustotal.com/gui/file/710491b557d615a53831a326be1db8afa646c2b426c65f49a5cc982e53c1ad85/detection

83.166.241.216:49343

# Reference: https://blog.netlab.360.com/new_threat_zhtrap_botnet_en/
# Reference: https://otx.alienvault.com/pulse/604bcd7fe31c2632fb89a994

107.189.30.190:1282
107.189.30.190:2231
139.99.134.95:9095
142.93.247.244:9050
144.217.243.21:9095
147.135.208.44:9095
167.114.185.33:9095
198.245.53.58:9095
46.101.61.9:9050
51.178.54.234:9095
51.79.157.89:9095
66.70.188.235:9095
0xdeadbeef.tw
h5vwy6o32sdcsa5xurde35dqw5sf3cdsoeewqqxmhoyzsvar4u6ooead.onion
oemojwe5loscudytzfo273nkdvalf7mumctwcm42zyutoo6tpfjsphyd.onion

# Reference: https://unit42.paloaltonetworks.com/mirai-variant-iot-vulnerabilities/

iotlmao.xyz
/nbrute.arc
/nbrute.arcle-hs38
/nbrute.arm
/nbrute.arm4
/nbrute.arm4l
/nbrute.arm4t
/nbrute.arm4tl
/nbrute.arm4tll
/nbrute.arm5
/nbrute.arm5l
/nbrute.arm5n
/nbrute.arm6
/nbrute.arm64
/nbrute.arm6l
/nbrute.arm7
/nbrute.arm7l
/nbrute.arm8
/nbrute.armv4
/nbrute.armv4l
/nbrute.armv5l
/nbrute.armv6
/nbrute.armv61
/nbrute.armv6l
/nbrute.armv7l
/nbrute.dbg
/nbrute.exploit
/nbrute.i4
/nbrute.i486
/nbrute.i586
/nbrute.i6
/nbrute.i686
/nbrute.kill
/nbrute.m68
/nbrute.m68k
/nbrute.mips
/nbrute.mips64
/nbrute.mipseb
/nbrute.mipsel
/nbrute.mpsl
/nbrute.pcc
/nbrute.powerpc
/nbrute.powerpc-440fp
/nbrute.powerppc
/nbrute.ppc
/nbrute.pp-c
/nbrute.ppc2
/nbrute.ppc440
/nbrute.ppc440fp
/nbrute.root
/nbrute.root32
/nbrute.sh
/nbrute.sh4
/nbrute.sparc
/nbrute.spc
/nbrute.ssh4
/nbrute.x32
/nbrute.x32_64
/nbrute.x64
/nbrute.x86
/nbrute.x86_32
/nbrute.x86_64

# Reference: https://twitter.com/TheDFIRReport/status/1384282544695177221

/a-r.m-4.fuckme
/a-r.m-5.fuckme
/a-r.m-6.fuckme
/a-r.m-7.fuckme
/i-3.8-6.fuckme
/i-4.8-6.fuckme
/i-5.8-6.fuckme
/i-6.8-6.fuckme
/m-6.8-k.fuckme
/m-i.p-s.fuckme
/m-p.s-l.fuckme
/p-p.c-.fuckme
/s-h.4-.fuckme
/x-3.2-.fuckme
/x-8.6-.fuckme
/imightbegay.sh

# Reference: https://twitter.com/0xrb/status/1387016807496577024

/94VG.arc
/94VG.arcle-hs38
/94VG.arm
/94VG.arm4
/94VG.arm4l
/94VG.arm4t
/94VG.arm4tl
/94VG.arm4tll
/94VG.arm5
/94VG.arm5l
/94VG.arm5n
/94VG.arm6
/94VG.arm64
/94VG.arm6l
/94VG.arm7
/94VG.arm7l
/94VG.arm8
/94VG.armv4
/94VG.armv4l
/94VG.armv5l
/94VG.armv6
/94VG.armv61
/94VG.armv6l
/94VG.armv7l
/94VG.dbg
/94VG.exploit
/94VG.i4
/94VG.i486
/94VG.i586
/94VG.i6
/94VG.i686
/94VG.kill
/94VG.m68
/94VG.m68k
/94VG.mips
/94VG.mips64
/94VG.mipseb
/94VG.mipsel
/94VG.mpsl
/94VG.pcc
/94VG.powerpc
/94VG.powerpc-440fp
/94VG.powerppc
/94VG.ppc
/94VG.pp-c
/94VG.ppc2
/94VG.ppc440
/94VG.ppc440fp
/94VG.root
/94VG.root32
/94VG.sh
/94VG.sh4
/94VG.sparc
/94VG.spc
/94VG.ssh4
/94VG.x32
/94VG.x32_64
/94VG.x64
/94VG.x86
/94VG.x86_32
/94VG.x86_64
/Acidbins.arc
/Acidbins.arcle-hs38
/Acidbins.arm
/Acidbins.arm4
/Acidbins.arm4l
/Acidbins.arm4t
/Acidbins.arm4tl
/Acidbins.arm4tll
/Acidbins.arm5
/Acidbins.arm5l
/Acidbins.arm5n
/Acidbins.arm6
/Acidbins.arm64
/Acidbins.arm6l
/Acidbins.arm7
/Acidbins.arm7l
/Acidbins.arm8
/Acidbins.armv4
/Acidbins.armv4l
/Acidbins.armv5l
/Acidbins.armv6
/Acidbins.armv61
/Acidbins.armv6l
/Acidbins.armv7l
/Acidbins.dbg
/Acidbins.exploit
/Acidbins.i4
/Acidbins.i486
/Acidbins.i586
/Acidbins.i6
/Acidbins.i686
/Acidbins.kill
/Acidbins.m68
/Acidbins.m68k
/Acidbins.mips
/Acidbins.mips64
/Acidbins.mipseb
/Acidbins.mipsel
/Acidbins.mpsl
/Acidbins.pcc
/Acidbins.powerpc
/Acidbins.powerpc-440fp
/Acidbins.powerppc
/Acidbins.ppc
/Acidbins.pp-c
/Acidbins.ppc2
/Acidbins.ppc440
/Acidbins.ppc440fp
/Acidbins.root
/Acidbins.root32
/Acidbins.sh
/Acidbins.sh4
/Acidbins.sparc
/Acidbins.spc
/Acidbins.ssh4
/Acidbins.x32
/Acidbins.x32_64
/Acidbins.x64
/Acidbins.x86
/Acidbins.x86_32
/Acidbins.x86_64
/Beastmode.arc
/Beastmode.arcle-hs38
/Beastmode.arm
/Beastmode.arm4
/Beastmode.arm4l
/Beastmode.arm4t
/Beastmode.arm4tl
/Beastmode.arm4tll
/Beastmode.arm5
/Beastmode.arm5l
/Beastmode.arm5n
/Beastmode.arm6
/Beastmode.arm64
/Beastmode.arm6l
/Beastmode.arm7
/Beastmode.arm7l
/Beastmode.arm8
/Beastmode.armv4
/Beastmode.armv4l
/Beastmode.armv5l
/Beastmode.armv6
/Beastmode.armv61
/Beastmode.armv6l
/Beastmode.armv7l
/Beastmode.dbg
/Beastmode.exploit
/Beastmode.i4
/Beastmode.i486
/Beastmode.i586
/Beastmode.i6
/Beastmode.i686
/Beastmode.kill
/Beastmode.m68
/Beastmode.m68k
/Beastmode.mips
/Beastmode.mips64
/Beastmode.mipseb
/Beastmode.mipsel
/Beastmode.mpsl
/Beastmode.pcc
/Beastmode.powerpc
/Beastmode.powerpc-440fp
/Beastmode.powerppc
/Beastmode.ppc
/Beastmode.pp-c
/Beastmode.ppc2
/Beastmode.ppc440
/Beastmode.ppc440fp
/Beastmode.root
/Beastmode.root32
/Beastmode.sh
/Beastmode.sh4
/Beastmode.sparc
/Beastmode.spc
/Beastmode.ssh4
/Beastmode.x32
/Beastmode.x32_64
/Beastmode.x64
/Beastmode.x86
/Beastmode.x86_32
/Beastmode.x86_64
/Beastmode1.arc
/Beastmode1.arcle-hs38
/Beastmode1.arm
/Beastmode1.arm4
/Beastmode1.arm4l
/Beastmode1.arm4t
/Beastmode1.arm4tl
/Beastmode1.arm4tll
/Beastmode1.arm5
/Beastmode1.arm5l
/Beastmode1.arm5n
/Beastmode1.arm6
/Beastmode1.arm64
/Beastmode1.arm6l
/Beastmode1.arm7
/Beastmode1.arm7l
/Beastmode1.arm8
/Beastmode1.armv4
/Beastmode1.armv4l
/Beastmode1.armv5l
/Beastmode1.armv6
/Beastmode1.armv61
/Beastmode1.armv6l
/Beastmode1.armv7l
/Beastmode1.dbg
/Beastmode1.exploit
/Beastmode1.i4
/Beastmode1.i486
/Beastmode1.i586
/Beastmode1.i6
/Beastmode1.i686
/Beastmode1.kill
/Beastmode1.m68
/Beastmode1.m68k
/Beastmode1.mips
/Beastmode1.mips64
/Beastmode1.mipseb
/Beastmode1.mipsel
/Beastmode1.mpsl
/Beastmode1.pcc
/Beastmode1.powerpc
/Beastmode1.powerpc-440fp
/Beastmode1.powerppc
/Beastmode1.ppc
/Beastmode1.pp-c
/Beastmode1.ppc2
/Beastmode1.ppc440
/Beastmode1.ppc440fp
/Beastmode1.root
/Beastmode1.root32
/Beastmode1.sh
/Beastmode1.sh4
/Beastmode1.sparc
/Beastmode1.spc
/Beastmode1.ssh4
/Beastmode1.x32
/Beastmode1.x32_64
/Beastmode1.x64
/Beastmode1.x86
/Beastmode1.x86_32
/Beastmode1.x86_64
/Ciabins.arc
/Ciabins.arcle-hs38
/Ciabins.arm
/Ciabins.arm4
/Ciabins.arm4l
/Ciabins.arm4t
/Ciabins.arm4tl
/Ciabins.arm4tll
/Ciabins.arm5
/Ciabins.arm5l
/Ciabins.arm5n
/Ciabins.arm6
/Ciabins.arm64
/Ciabins.arm6l
/Ciabins.arm7
/Ciabins.arm7l
/Ciabins.arm8
/Ciabins.armv4
/Ciabins.armv4l
/Ciabins.armv5l
/Ciabins.armv6
/Ciabins.armv61
/Ciabins.armv6l
/Ciabins.armv7l
/Ciabins.dbg
/Ciabins.exploit
/Ciabins.i4
/Ciabins.i486
/Ciabins.i586
/Ciabins.i6
/Ciabins.i686
/Ciabins.kill
/Ciabins.m68
/Ciabins.m68k
/Ciabins.mips
/Ciabins.mips64
/Ciabins.mipseb
/Ciabins.mipsel
/Ciabins.mpsl
/Ciabins.pcc
/Ciabins.powerpc
/Ciabins.powerpc-440fp
/Ciabins.powerppc
/Ciabins.ppc
/Ciabins.pp-c
/Ciabins.ppc2
/Ciabins.ppc440
/Ciabins.ppc440fp
/Ciabins.root
/Ciabins.root32
/Ciabins.sh
/Ciabins.sh4
/Ciabins.sparc
/Ciabins.spc
/Ciabins.ssh4
/Ciabins.x32
/Ciabins.x32_64
/Ciabins.x64
/Ciabins.x86
/Ciabins.x86_32
/Ciabins.x86_64
/netlab601.arc
/netlab601.arcle-hs38
/netlab601.arm
/netlab601.arm4
/netlab601.arm4l
/netlab601.arm4t
/netlab601.arm4tl
/netlab601.arm4tll
/netlab601.arm5
/netlab601.arm5l
/netlab601.arm5n
/netlab601.arm6
/netlab601.arm64
/netlab601.arm6l
/netlab601.arm7
/netlab601.arm7l
/netlab601.arm8
/netlab601.armv4
/netlab601.armv4l
/netlab601.armv5l
/netlab601.armv6
/netlab601.armv61
/netlab601.armv6l
/netlab601.armv7l
/netlab601.dbg
/netlab601.exploit
/netlab601.i4
/netlab601.i486
/netlab601.i586
/netlab601.i6
/netlab601.i686
/netlab601.kill
/netlab601.m68
/netlab601.m68k
/netlab601.mips
/netlab601.mips64
/netlab601.mipseb
/netlab601.mipsel
/netlab601.mpsl
/netlab601.pcc
/netlab601.powerpc
/netlab601.powerpc-440fp
/netlab601.powerppc
/netlab601.ppc
/netlab601.pp-c
/netlab601.ppc2
/netlab601.ppc440
/netlab601.ppc440fp
/netlab601.root
/netlab601.root32
/netlab601.sh
/netlab601.sh4
/netlab601.sparc
/netlab601.spc
/netlab601.ssh4
/netlab601.x32
/netlab601.x32_64
/netlab601.x64
/netlab601.x86
/netlab601.x86_32
/netlab601.x86_64
/networkrip.arc
/networkrip.arcle-hs38
/networkrip.arm
/networkrip.arm4
/networkrip.arm4l
/networkrip.arm4t
/networkrip.arm4tl
/networkrip.arm4tll
/networkrip.arm5
/networkrip.arm5l
/networkrip.arm5n
/networkrip.arm6
/networkrip.arm64
/networkrip.arm6l
/networkrip.arm7
/networkrip.arm7l
/networkrip.arm8
/networkrip.armv4
/networkrip.armv4l
/networkrip.armv5l
/networkrip.armv6
/networkrip.armv61
/networkrip.armv6l
/networkrip.armv7l
/networkrip.dbg
/networkrip.exploit
/networkrip.i4
/networkrip.i486
/networkrip.i586
/networkrip.i6
/networkrip.i686
/networkrip.kill
/networkrip.m68
/networkrip.m68k
/networkrip.mips
/networkrip.mips64
/networkrip.mipseb
/networkrip.mipsel
/networkrip.mpsl
/networkrip.pcc
/networkrip.powerpc
/networkrip.powerpc-440fp
/networkrip.powerppc
/networkrip.ppc
/networkrip.pp-c
/networkrip.ppc2
/networkrip.ppc440
/networkrip.ppc440fp
/networkrip.root
/networkrip.root32
/networkrip.sh
/networkrip.sh4
/networkrip.sparc
/networkrip.spc
/networkrip.ssh4
/networkrip.x32
/networkrip.x32_64
/networkrip.x64
/networkrip.x86
/networkrip.x86_32
/networkrip.x86_64
/Sakura.arc
/Sakura.arcle-hs38
/Sakura.arm
/Sakura.arm4
/Sakura.arm4l
/Sakura.arm4t
/Sakura.arm4tl
/Sakura.arm4tll
/Sakura.arm5
/Sakura.arm5l
/Sakura.arm5n
/Sakura.arm6
/Sakura.arm64
/Sakura.arm6l
/Sakura.arm7
/Sakura.arm7l
/Sakura.arm8
/Sakura.armv4
/Sakura.armv4l
/Sakura.armv5l
/Sakura.armv6
/Sakura.armv61
/Sakura.armv6l
/Sakura.armv7l
/Sakura.dbg
/Sakura.exploit
/Sakura.i4
/Sakura.i486
/Sakura.i586
/Sakura.i6
/Sakura.i686
/Sakura.kill
/Sakura.m68
/Sakura.m68k
/Sakura.mips
/Sakura.mips64
/Sakura.mipseb
/Sakura.mipsel
/Sakura.mpsl
/Sakura.pcc
/Sakura.powerpc
/Sakura.powerpc-440fp
/Sakura.powerppc
/Sakura.ppc
/Sakura.pp-c
/Sakura.ppc2
/Sakura.ppc440
/Sakura.ppc440fp
/Sakura.root
/Sakura.root32
/Sakura.sh
/Sakura.sh4
/Sakura.sparc
/Sakura.spc
/Sakura.ssh4
/Sakura.x32
/Sakura.x32_64
/Sakura.x64
/Sakura.x86
/Sakura.x86_32
/Sakura.x86_64
/trynagetmybinsfucker98575.arc
/trynagetmybinsfucker98575.arcle-hs38
/trynagetmybinsfucker98575.arm
/trynagetmybinsfucker98575.arm4
/trynagetmybinsfucker98575.arm4l
/trynagetmybinsfucker98575.arm4t
/trynagetmybinsfucker98575.arm4tl
/trynagetmybinsfucker98575.arm4tll
/trynagetmybinsfucker98575.arm5
/trynagetmybinsfucker98575.arm5l
/trynagetmybinsfucker98575.arm5n
/trynagetmybinsfucker98575.arm6
/trynagetmybinsfucker98575.arm64
/trynagetmybinsfucker98575.arm6l
/trynagetmybinsfucker98575.arm7
/trynagetmybinsfucker98575.arm7l
/trynagetmybinsfucker98575.arm8
/trynagetmybinsfucker98575.armv4
/trynagetmybinsfucker98575.armv4l
/trynagetmybinsfucker98575.armv5l
/trynagetmybinsfucker98575.armv6
/trynagetmybinsfucker98575.armv61
/trynagetmybinsfucker98575.armv6l
/trynagetmybinsfucker98575.armv7l
/trynagetmybinsfucker98575.dbg
/trynagetmybinsfucker98575.exploit
/trynagetmybinsfucker98575.i4
/trynagetmybinsfucker98575.i486
/trynagetmybinsfucker98575.i586
/trynagetmybinsfucker98575.i6
/trynagetmybinsfucker98575.i686
/trynagetmybinsfucker98575.kill
/trynagetmybinsfucker98575.m68
/trynagetmybinsfucker98575.m68k
/trynagetmybinsfucker98575.mips
/trynagetmybinsfucker98575.mips64
/trynagetmybinsfucker98575.mipseb
/trynagetmybinsfucker98575.mipsel
/trynagetmybinsfucker98575.mpsl
/trynagetmybinsfucker98575.pcc
/trynagetmybinsfucker98575.powerpc
/trynagetmybinsfucker98575.powerpc-440fp
/trynagetmybinsfucker98575.powerppc
/trynagetmybinsfucker98575.ppc
/trynagetmybinsfucker98575.pp-c
/trynagetmybinsfucker98575.ppc2
/trynagetmybinsfucker98575.ppc440
/trynagetmybinsfucker98575.ppc440fp
/trynagetmybinsfucker98575.root
/trynagetmybinsfucker98575.root32
/trynagetmybinsfucker98575.sh
/trynagetmybinsfucker98575.sh4
/trynagetmybinsfucker98575.sparc
/trynagetmybinsfucker98575.spc
/trynagetmybinsfucker98575.ssh4
/trynagetmybinsfucker98575.x32
/trynagetmybinsfucker98575.x32_64
/trynagetmybinsfucker98575.x64
/trynagetmybinsfucker98575.x86
/trynagetmybinsfucker98575.x86_32
/trynagetmybinsfucker98575.x86_64
/.x/0sh
/.x/1sh
/.x/2sh
/.x/3sh
/.x/4sh
/.x/5sh
/.x/6sh
/.x/7sh
/.x/8sh
/.x/9sh
/katanaslice/
/kbotv1/

# Reference: https://twitter.com/r3dbU7z/status/1387043676380041227

/@a@r@c
/@a@r@c@l@e@-@h@s@3@8
/@a@r@m
/@a@r@m4
/@a@r@m@4@l
/@a@r@m4@t
/@a@r@m4@t@l
/@a@r@m4t@l@l
/@a@r@m@5
/@a@r@m@5@l
/@a@r@m@5@n
/@a@r@m@6
/@a@r@m@6@4
/@a@r@m@6@l
/@a@r@m@7
/@a@r@m@7@l
/@a@r@m@8
/@a@r@m@v@4
/@a@r@m@v@4@l
/@a@r@m@v@5@l
/@a@r@m@v@6
/@a@r@mv@6@1
/@a@r@m@v@6@l
/@a@r@m@v@7@l
/@d@b@g
/@e@x@p@l@o@i@t
/@i@4
/@i4@8@6
/@i@5@8@6
/@i@6
/@i@6@8@6
/@k@i@l@l
/@m@6@8
/@m@6@8@k
/@m@i@p@s
/@m@i@p@s@6@4
/@m@i@p@s@e@b
/@m@i@p@s@e@l
/@m@p@s@l
/@p@c@c
/@p@o@w@e@r@p@c
/@p@o@w@e@r@p@c@-@4@4@0@f@p
/@p@o@w@e@r@p@p@c
/@p@p@c
/@p@p@-@c
/@p@p@c@2
/@p@p@c@4@4@0
/@p@p@c@4@4@0@f@p
/@r@o@o@t
/@r@o@o@t@3@2
/@s@h
/@s@h@4
/@s@p@a@r@c
/@s@p@c
/@s@s@h@4
/@x@3@2
/@x@3@2@_@6@4
/@x@6@4
/@x@8@6
/@x@8@6@_@3@2
/@x@8@6@_@6@4

# Reference: https://twitter.com/liuya0904/status/1387405981533892608

/sys.arc
/sys.arcle-hs38
/sys.arm
/sys.arm4
/sys.arm4l
/sys.arm4t
/sys.arm4tl
/sys.arm4tll
/sys.arm5
/sys.arm5l
/sys.arm5n
/sys.arm6
/sys.arm64
/sys.arm6l
/sys.arm7
/sys.arm7l
/sys.arm8
/sys.armv4
/sys.armv4l
/sys.armv5l
/sys.armv6
/sys.armv61
/sys.armv6l
/sys.armv7l
/sys.dbg
/sys.exploit
/sys.i4
/sys.i486
/sys.i586
/sys.i6
/sys.i686
/sys.kill
/sys.m68
/sys.m68k
/sys.mips
/sys.mips64
/sys.mipseb
/sys.mipsel
/sys.mpsl
/sys.pcc
/sys.powerpc
/sys.powerpc-440fp
/sys.powerppc
/sys.ppc
/sys.pp-c
/sys.ppc2
/sys.ppc440
/sys.ppc440fp
/sys.root
/sys.root32
/sys.sh
/sys.sh4
/sys.sparc
/sys.spc
/sys.ssh4
/sys.x32
/sys.x32_64
/sys.x64
/sys.x86
/sys.x86_32
/sys.x86_64

# Reference: https://twitter.com/michalmalik/status/1387899434885910531
# Reference: https://www.virustotal.com/gui/file/9877bc77f19656aaf04ec98f5e88fc88b9986facfaca02c91033fe575b28a1de/detection

75.119.157.188:77

# Reference: https://twitter.com/r3dbU7z/status/1387371207096422403

/sexbot.arc
/sexbot.arcle-hs38
/sexbot.arm
/sexbot.arm4
/sexbot.arm4l
/sexbot.arm4t
/sexbot.arm4tl
/sexbot.arm4tll
/sexbot.arm5
/sexbot.arm5l
/sexbot.arm5n
/sexbot.arm6
/sexbot.arm64
/sexbot.arm6l
/sexbot.arm7
/sexbot.arm7l
/sexbot.arm8
/sexbot.armv4
/sexbot.armv4l
/sexbot.armv5l
/sexbot.armv6
/sexbot.armv61
/sexbot.armv6l
/sexbot.armv7l
/sexbot.dbg
/sexbot.exploit
/sexbot.i4
/sexbot.i486
/sexbot.i586
/sexbot.i6
/sexbot.i686
/sexbot.kill
/sexbot.m68
/sexbot.m68k
/sexbot.mips
/sexbot.mips64
/sexbot.mipseb
/sexbot.mipsel
/sexbot.mpsl
/sexbot.pcc
/sexbot.powerpc
/sexbot.powerpc-440fp
/sexbot.powerppc
/sexbot.ppc
/sexbot.pp-c
/sexbot.ppc2
/sexbot.ppc440
/sexbot.ppc440fp
/sexbot.root
/sexbot.root32
/sexbot.sh
/sexbot.sh4
/sexbot.sparc
/sexbot.spc
/sexbot.ssh4
/sexbot.x32
/sexbot.x32_64
/sexbot.x64
/sexbot.x86
/sexbot.x86_32
/sexbot.x86_64

# Reference: https://twitter.com/r3dbU7z/status/1389755683009175553

12dx.duckdns.org
13scan.duckdns.org
/KKveTTgaAAsecNNaaaa.arc
/KKveTTgaAAsecNNaaaa.arcle-hs38
/KKveTTgaAAsecNNaaaa.arm
/KKveTTgaAAsecNNaaaa.arm4
/KKveTTgaAAsecNNaaaa.arm4l
/KKveTTgaAAsecNNaaaa.arm4t
/KKveTTgaAAsecNNaaaa.arm4tl
/KKveTTgaAAsecNNaaaa.arm4tll
/KKveTTgaAAsecNNaaaa.arm5
/KKveTTgaAAsecNNaaaa.arm5l
/KKveTTgaAAsecNNaaaa.arm5n
/KKveTTgaAAsecNNaaaa.arm6
/KKveTTgaAAsecNNaaaa.arm64
/KKveTTgaAAsecNNaaaa.arm6l
/KKveTTgaAAsecNNaaaa.arm7
/KKveTTgaAAsecNNaaaa.arm7l
/KKveTTgaAAsecNNaaaa.arm8
/KKveTTgaAAsecNNaaaa.armv4
/KKveTTgaAAsecNNaaaa.armv4l
/KKveTTgaAAsecNNaaaa.armv5l
/KKveTTgaAAsecNNaaaa.armv6
/KKveTTgaAAsecNNaaaa.armv61
/KKveTTgaAAsecNNaaaa.armv6l
/KKveTTgaAAsecNNaaaa.armv7l
/KKveTTgaAAsecNNaaaa.dbg
/KKveTTgaAAsecNNaaaa.exploit
/KKveTTgaAAsecNNaaaa.i4
/KKveTTgaAAsecNNaaaa.i486
/KKveTTgaAAsecNNaaaa.i586
/KKveTTgaAAsecNNaaaa.i6
/KKveTTgaAAsecNNaaaa.i686
/KKveTTgaAAsecNNaaaa.kill
/KKveTTgaAAsecNNaaaa.m68
/KKveTTgaAAsecNNaaaa.m68k
/KKveTTgaAAsecNNaaaa.mips
/KKveTTgaAAsecNNaaaa.mips64
/KKveTTgaAAsecNNaaaa.mipseb
/KKveTTgaAAsecNNaaaa.mipsel
/KKveTTgaAAsecNNaaaa.mpsl
/KKveTTgaAAsecNNaaaa.pcc
/KKveTTgaAAsecNNaaaa.powerpc
/KKveTTgaAAsecNNaaaa.powerpc-440fp
/KKveTTgaAAsecNNaaaa.powerppc
/KKveTTgaAAsecNNaaaa.ppc
/KKveTTgaAAsecNNaaaa.pp-c
/KKveTTgaAAsecNNaaaa.ppc2
/KKveTTgaAAsecNNaaaa.ppc440
/KKveTTgaAAsecNNaaaa.ppc440fp
/KKveTTgaAAsecNNaaaa.root
/KKveTTgaAAsecNNaaaa.root32
/KKveTTgaAAsecNNaaaa.sh
/KKveTTgaAAsecNNaaaa.sh4
/KKveTTgaAAsecNNaaaa.sparc
/KKveTTgaAAsecNNaaaa.spc
/KKveTTgaAAsecNNaaaa.ssh4
/KKveTTgaAAsecNNaaaa.x32
/KKveTTgaAAsecNNaaaa.x32_64
/KKveTTgaAAsecNNaaaa.x64
/KKveTTgaAAsecNNaaaa.x86
/KKveTTgaAAsecNNaaaa.x86_32
/KKveTTgaAAsecNNaaaa.x86_64

# Reference: https://www.virustotal.com/gui/file/2cfb12cdd15814967c2899d02c20b77735e64883750f909b2d578d0634976c7c/detection

175.153.16.107:23
175.153.16.107:2323
175.153.16.107:52869
175.153.16.107:5418
175.153.16.107:8080

# Reference: https://www.virustotal.com/gui/file/6ec7ea0e067e09b612ff560ecda8471ca925102d2870ba062e1122bd4672852d/detection

170.31.203.74:23
170.31.203.74:2323
170.31.203.74:52869
170.31.203.74:5418
170.31.203.74:8080

# Reference: https://www.virustotal.com/gui/file/2e384f5d79017dd5b600b2a27e25bb85e56376afc6a7d18a58b3a62fa680ce02/detection

126.95.249.26:23
126.95.249.26:2323
126.95.249.26:36063

# Reference: https://www.virustotal.com/gui/file/1b6c42879b45cbe4417d7922a1247699279e8a1817c86696b109cfa4c48dea85/detection

206.78.239.143:23
206.78.239.143:2323
206.78.239.143:36063

# Reference: https://www.virustotal.com/gui/file/26037e06149bf2d241ab03cc4166a7e688e5f6c5e798d50c533e5b24b0bda3cd/detection

14.141.236.143:23
14.141.236.143:2323
14.141.236.143:36063

# Reference: https://www.virustotal.com/gui/file/9391531825fbdf39b8682870d1afc91ec8d03edb634df92b426cfdd296c126b3/detection

116.15.150.89:37215
116.15.150.89:36063

# Reference: https://www.virustotal.com/gui/file/d3cda4e42767e727ce240938f886e796951fe9bcc73a7a59f69cd3394e78a018/detection

124.55.206.62:23
124.55.206.62:37215
217.32.184.99:23
217.32.184.99:37215

# Reference: https://www.virustotal.com/gui/file/e6702389165aa1e4859fc380eef3a699c8c31e57ddd1c6f014d299dc0859c855/detection

117.154.167.218:23
117.154.167.218:2323
117.154.167.218:36063

# Reference: https://www.virustotal.com/gui/file/fe91343a13ef9bcad6e1e3a3ff4dbd11bc33676b6ba8511dd026b57c2ff10199/detection
# Reference: https://www.virustotal.com/gui/file/7c2101c124d0d6c1b555ac2da1082f40df13d4466b654cb540c24622c3cb1cba/detection
# Reference: https://www.virustotal.com/gui/file/59d322c8e85b815019d8ebc79f4b30c937dc5f67ec4939d9e8e901152ce7cbaf/detection
# Reference: https://www.virustotal.com/gui/file/6f496bfaa128c17ee69052a411670b54984e887325ec507d09bc5c141f0c2f87/detection
# Reference: https://www.virustotal.com/gui/file/78b6d223f22ed8bf2b628b308eed80a641d415c8a73fdb31994607f3e5e1b570/detection
# Reference: https://www.virustotal.com/gui/file/8e890d30b75a78750788b8d98054f0cf19ac3d2296307c2e7392c1b89c782bc8/detection

169.100.80.59:36063
169.174.78.238:36063
178.21.194.250:36063
178.98.207.229:36063
178.49.244.166:36063
218.236.135.145:36063
happyschool76.duckdns.org

# Reference: https://twitter.com/K_N1kolenko/status/1390550102843043840

/Redacted.arc
/Redacted.arcle-hs38
/Redacted.arm
/Redacted.arm4
/Redacted.arm4l
/Redacted.arm4t
/Redacted.arm4tl
/Redacted.arm4tll
/Redacted.arm5
/Redacted.arm5l
/Redacted.arm5n
/Redacted.arm6
/Redacted.arm64
/Redacted.arm6l
/Redacted.arm7
/Redacted.arm7l
/Redacted.arm8
/Redacted.armv4
/Redacted.armv4l
/Redacted.armv5l
/Redacted.armv6
/Redacted.armv61
/Redacted.armv6l
/Redacted.armv7l
/Redacted.dbg
/Redacted.exploit
/Redacted.i4
/Redacted.i486
/Redacted.i586
/Redacted.i6
/Redacted.i686
/Redacted.kill
/Redacted.m68
/Redacted.m68k
/Redacted.mips
/Redacted.mips64
/Redacted.mipseb
/Redacted.mipsel
/Redacted.mpsl
/Redacted.pcc
/Redacted.powerpc
/Redacted.powerpc-440fp
/Redacted.powerppc
/Redacted.ppc
/Redacted.pp-c
/Redacted.ppc2
/Redacted.ppc440
/Redacted.ppc440fp
/Redacted.root
/Redacted.root32
/Redacted.sh
/Redacted.sh4
/Redacted.sparc
/Redacted.spc
/Redacted.ssh4
/Redacted.x32
/Redacted.x32_64
/Redacted.x64
/Redacted.x86
/Redacted.x86_32
/Redacted.x86_64
/KEKGetMyBinsDumbCunt/

# Reference: https://www.virustotal.com/gui/file/5b932cfa1f205e7f5d1b5325d26be90c6b60f89e3782249b58e9a51e06374300/detection

192.227.185.106:2890

# Reference: https://www.virustotal.com/gui/file/41b3c5d5c1a73f1ec391adc39cce002c971c5faf44fb35e8d486c8430a51e435/detection

192.227.185.106:4290

# Reference: https://www.virustotal.com/gui/file/8887da7a6cf261fbf71d7c74f1894bc15d6b6e2bd3089a0504d2018daa8ee026/detection

192.227.185.106:9787

# Reference: https://www.virustotal.com/gui/file/ee8d2c23b0b37f5dd2dc96103d8c22c333bf448398acade445c8fe10bb3759cd/detection

192.227.185.106:9785

# Reference: https://www.virustotal.com/gui/file/f2009e171c02afe469dd211d3a64fb1c87bf81b45f13d55d5a0818bcdc0646dc/detection

192.227.185.106:7828

# Reference: https://www.virustotal.com/gui/file/40785560195b5a41c8cd4270e082f4ef50d724d6cd125d6bf93c23d45fd6d412/detection

192.227.185.106:9128

# Reference: https://www.virustotal.com/gui/file/8aa7866ca987eeea2571f5f03bec3798498d688f80a9bf49a5cd6c8c8d9dcf24/detection

192.227.185.106:7829

# Reference: https://www.virustotal.com/gui/file/46b10b7df86d853dee030605d8d7a1e6add4c738aad98dafb0508df5baa8987f/detection

192.227.185.106:9128

# Reference: https://www.virustotal.com/gui/file/6f54e2af1a1eda0e613497c5f26166e8fd741e5e4ffac9a7094652f397124d38/detection

192.227.185.106:9129

# Reference: https://www.virustotal.com/gui/file/462e2f61e7f0bebab04f3afe7b759d4644d4113e811e62c93a059f00554820f2/detection

192.227.185.106:7124

# Reference: https://twitter.com/r3dbU7z/status/1399932207238725632
# Reference: https://twitter.com/0xrb/status/1399957284919250944
# Reference: https://urlhaus.abuse.ch/host/205.185.126.254/
# Reference: https://www.virustotal.com/gui/file/9987128044dfac2085917e5de008c73e6bfd255003ddb624a56b936ba735ef4e/detection
# Reference: https://www.virustotal.com/gui/file/ed4e8715e4e14b99f49818ba36df286d94f591be14e34fbdce3284d77e349175/detection

http://205.185.126.254
205.185.126.254:1227
205.185.126.254:23
205.185.126.254:2323
205.185.126.254:443
205.185.126.254:5634
/crsfi.arc
/crsfi.arcle-hs38
/crsfi.arm
/crsfi.arm4
/crsfi.arm4l
/crsfi.arm4t
/crsfi.arm4tl
/crsfi.arm4tll
/crsfi.arm5
/crsfi.arm5l
/crsfi.arm5n
/crsfi.arm6
/crsfi.arm64
/crsfi.arm6l
/crsfi.arm7
/crsfi.arm7l
/crsfi.arm8
/crsfi.armv4
/crsfi.armv4l
/crsfi.armv5l
/crsfi.armv6
/crsfi.armv61
/crsfi.armv6l
/crsfi.armv7l
/crsfi.dbg
/crsfi.exploit
/crsfi.i4
/crsfi.i486
/crsfi.i586
/crsfi.i6
/crsfi.i686
/crsfi.kill
/crsfi.m68
/crsfi.m68k
/crsfi.mips
/crsfi.mips_64
/crsfi.mips64
/crsfi.mipseb
/crsfi.mipsel
/crsfi.mpsl
/crsfi.pcc
/crsfi.powerpc
/crsfi.powerpc-440fp
/crsfi.powerppc
/crsfi.ppc
/crsfi.pp-c
/crsfi.ppc2
/crsfi.ppc440
/crsfi.ppc440fp
/crsfi.root
/crsfi.root32
/crsfi.sh
/crsfi.sh4
/crsfi.sparc
/crsfi.spc
/crsfi.ssh4
/crsfi.x32
/crsfi.x32_64
/crsfi.x64
/crsfi.x86
/crsfi.x86_32
/crsfi.x86_64
/eckdee.arc
/eckdee.arcle-hs38
/eckdee.arm
/eckdee.arm4
/eckdee.arm4l
/eckdee.arm4t
/eckdee.arm4tl
/eckdee.arm4tll
/eckdee.arm5
/eckdee.arm5l
/eckdee.arm5n
/eckdee.arm6
/eckdee.arm64
/eckdee.arm6l
/eckdee.arm7
/eckdee.arm7l
/eckdee.arm8
/eckdee.armv4
/eckdee.armv4l
/eckdee.armv5l
/eckdee.armv6
/eckdee.armv61
/eckdee.armv6l
/eckdee.armv7l
/eckdee.dbg
/eckdee.exploit
/eckdee.i4
/eckdee.i486
/eckdee.i586
/eckdee.i6
/eckdee.i686
/eckdee.kill
/eckdee.m68
/eckdee.m68k
/eckdee.mips
/eckdee.mips_64
/eckdee.mips64
/eckdee.mipseb
/eckdee.mipsel
/eckdee.mpsl
/eckdee.pcc
/eckdee.powerpc
/eckdee.powerpc-440fp
/eckdee.powerppc
/eckdee.ppc
/eckdee.pp-c
/eckdee.ppc2
/eckdee.ppc440
/eckdee.ppc440fp
/eckdee.root
/eckdee.root32
/eckdee.sh
/eckdee.sh4
/eckdee.sparc
/eckdee.spc
/eckdee.ssh4
/eckdee.x32
/eckdee.x32_64
/eckdee.x64
/eckdee.x86
/eckdee.x86_32
/eckdee.x86_64
/exxsdee.arc
/exxsdee.arcle-hs38
/exxsdee.arm
/exxsdee.arm4
/exxsdee.arm4l
/exxsdee.arm4t
/exxsdee.arm4tl
/exxsdee.arm4tll
/exxsdee.arm5
/exxsdee.arm5l
/exxsdee.arm5n
/exxsdee.arm6
/exxsdee.arm64
/exxsdee.arm6l
/exxsdee.arm7
/exxsdee.arm7l
/exxsdee.arm8
/exxsdee.armv4
/exxsdee.armv4l
/exxsdee.armv5l
/exxsdee.armv6
/exxsdee.armv61
/exxsdee.armv6l
/exxsdee.armv7l
/exxsdee.dbg
/exxsdee.exploit
/exxsdee.i4
/exxsdee.i486
/exxsdee.i586
/exxsdee.i6
/exxsdee.i686
/exxsdee.kill
/exxsdee.m68
/exxsdee.m68k
/exxsdee.mips
/exxsdee.mips_64
/exxsdee.mips64
/exxsdee.mipseb
/exxsdee.mipsel
/exxsdee.mpsl
/exxsdee.pcc
/exxsdee.powerpc
/exxsdee.powerpc-440fp
/exxsdee.powerppc
/exxsdee.ppc
/exxsdee.pp-c
/exxsdee.ppc2
/exxsdee.ppc440
/exxsdee.ppc440fp
/exxsdee.root
/exxsdee.root32
/exxsdee.sh
/exxsdee.sh4
/exxsdee.sparc
/exxsdee.spc
/exxsdee.ssh4
/exxsdee.x32
/exxsdee.x32_64
/exxsdee.x64
/exxsdee.x86
/exxsdee.x86_32
/exxsdee.x86_64
/nbot.arc
/nbot.arcle-hs38
/nbot.arm
/nbot.arm4
/nbot.arm4l
/nbot.arm4t
/nbot.arm4tl
/nbot.arm4tll
/nbot.arm5
/nbot.arm5l
/nbot.arm5n
/nbot.arm6
/nbot.arm64
/nbot.arm6l
/nbot.arm7
/nbot.arm7l
/nbot.arm8
/nbot.armv4
/nbot.armv4l
/nbot.armv5l
/nbot.armv6
/nbot.armv61
/nbot.armv6l
/nbot.armv7l
/nbot.dbg
/nbot.exploit
/nbot.i4
/nbot.i486
/nbot.i586
/nbot.i6
/nbot.i686
/nbot.kill
/nbot.m68
/nbot.m68k
/nbot.mips
/nbot.mips_64
/nbot.mips64
/nbot.mipseb
/nbot.mipsel
/nbot.mpsl
/nbot.pcc
/nbot.powerpc
/nbot.powerpc-440fp
/nbot.powerppc
/nbot.ppc
/nbot.pp-c
/nbot.ppc2
/nbot.ppc440
/nbot.ppc440fp
/nbot.root
/nbot.root32
/nbot.sh
/nbot.sh4
/nbot.sparc
/nbot.spc
/nbot.ssh4
/nbot.x32
/nbot.x32_64
/nbot.x64
/nbot.x86
/nbot.x86_32
/nbot.x86_64

# Reference: https://www.virustotal.com/gui/file/24f0da8845b9eef85899bd62a9c519e71a0f08a5e71cc6ec5739e7b10fc7a86c/detection

modem.pw

# Reference: https://twitter.com/LGEmpathy/status/1404321271106600961

/a-r.m-4.Fourloko
/a-r.m-5.Fourloko
/a-r.m-6.Fourloko
/a-r.m-7.Fourloko
/i-4.8-6.Fourloko
/i-5.8-6.Fourloko
/i-6.8-6.Fourloko
/m-6.8-k.Fourloko
/m-i.p-s.Fourloko
/m-p.s-l.Fourloko
/p-p.c-.Fourloko
/s-h.4-.Fourloko
/x-3.2-.Fourloko
/x-6.4-.Fourloko
/x-8.6-.Fourloko
/Ace.arc
/Ace.arcle-hs38
/Ace.arm
/Ace.arm4
/Ace.arm4l
/Ace.arm4t
/Ace.arm4tl
/Ace.arm4tll
/Ace.arm5
/Ace.arm5l
/Ace.arm5n
/Ace.arm6
/Ace.arm64
/Ace.arm6l
/Ace.arm7
/Ace.arm7l
/Ace.arm8
/Ace.armv4
/Ace.armv4l
/Ace.armv5l
/Ace.armv6
/Ace.armv61
/Ace.armv6l
/Ace.armv7l
/Ace.dbg
/Ace.exploit
/Ace.i4
/Ace.i486
/Ace.i586
/Ace.i6
/Ace.i686
/Ace.kill
/Ace.m68
/Ace.m68k
/Ace.mips
/Ace.mips64
/Ace.mipseb
/Ace.mipsel
/Ace.mpsl
/Ace.pcc
/Ace.powerpc
/Ace.powerpc-440fp
/Ace.powerppc
/Ace.ppc
/Ace.pp-c
/Ace.ppc2
/Ace.ppc440
/Ace.ppc440fp
/Ace.root
/Ace.root32
/Ace.sh
/Ace.sh4
/Ace.sparc
/Ace.spc
/Ace.ssh4
/Ace.x32
/Ace.x32_64
/Ace.x64
/Ace.x86
/Ace.x86_32
/Ace.x86_64
/b4ngl4d3shS3N941.arc
/b4ngl4d3shS3N941.arcle-hs38
/b4ngl4d3shS3N941.arm
/b4ngl4d3shS3N941.arm4
/b4ngl4d3shS3N941.arm4l
/b4ngl4d3shS3N941.arm4t
/b4ngl4d3shS3N941.arm4tl
/b4ngl4d3shS3N941.arm4tll
/b4ngl4d3shS3N941.arm5
/b4ngl4d3shS3N941.arm5l
/b4ngl4d3shS3N941.arm5n
/b4ngl4d3shS3N941.arm6
/b4ngl4d3shS3N941.arm64
/b4ngl4d3shS3N941.arm6l
/b4ngl4d3shS3N941.arm7
/b4ngl4d3shS3N941.arm7l
/b4ngl4d3shS3N941.arm8
/b4ngl4d3shS3N941.armv4
/b4ngl4d3shS3N941.armv4l
/b4ngl4d3shS3N941.armv5l
/b4ngl4d3shS3N941.armv6
/b4ngl4d3shS3N941.armv61
/b4ngl4d3shS3N941.armv6l
/b4ngl4d3shS3N941.armv7l
/b4ngl4d3shS3N941.dbg
/b4ngl4d3shS3N941.exploit
/b4ngl4d3shS3N941.i4
/b4ngl4d3shS3N941.i486
/b4ngl4d3shS3N941.i586
/b4ngl4d3shS3N941.i6
/b4ngl4d3shS3N941.i686
/b4ngl4d3shS3N941.kill
/b4ngl4d3shS3N941.m68
/b4ngl4d3shS3N941.m68k
/b4ngl4d3shS3N941.mips
/b4ngl4d3shS3N941.mips64
/b4ngl4d3shS3N941.mipseb
/b4ngl4d3shS3N941.mipsel
/b4ngl4d3shS3N941.mpsl
/b4ngl4d3shS3N941.pcc
/b4ngl4d3shS3N941.powerpc
/b4ngl4d3shS3N941.powerpc-440fp
/b4ngl4d3shS3N941.powerppc
/b4ngl4d3shS3N941.ppc
/b4ngl4d3shS3N941.pp-c
/b4ngl4d3shS3N941.ppc2
/b4ngl4d3shS3N941.ppc440
/b4ngl4d3shS3N941.ppc440fp
/b4ngl4d3shS3N941.root
/b4ngl4d3shS3N941.root32
/b4ngl4d3shS3N941.sh
/b4ngl4d3shS3N941.sh4
/b4ngl4d3shS3N941.sparc
/b4ngl4d3shS3N941.spc
/b4ngl4d3shS3N941.ssh4
/b4ngl4d3shS3N941.x32
/b4ngl4d3shS3N941.x32_64
/b4ngl4d3shS3N941.x64
/b4ngl4d3shS3N941.x86
/b4ngl4d3shS3N941.x86_32
/b4ngl4d3shS3N941.x86_64
/boss.arc
/boss.arcle-hs38
/boss.arm
/boss.arm4
/boss.arm4l
/boss.arm4t
/boss.arm4tl
/boss.arm4tll
/boss.arm5
/boss.arm5l
/boss.arm5n
/boss.arm6
/boss.arm64
/boss.arm6l
/boss.arm7
/boss.arm7l
/boss.arm8
/boss.armv4
/boss.armv4l
/boss.armv5l
/boss.armv6
/boss.armv61
/boss.armv6l
/boss.armv7l
/boss.dbg
/boss.exploit
/boss.i4
/boss.i486
/boss.i586
/boss.i6
/boss.i686
/boss.kill
/boss.m68
/boss.m68k
/boss.mips
/boss.mips64
/boss.mipseb
/boss.mipsel
/boss.mpsl
/boss.pcc
/boss.powerpc
/boss.powerpc-440fp
/boss.powerppc
/boss.ppc
/boss.pp-c
/boss.ppc2
/boss.ppc440
/boss.ppc440fp
/boss.root
/boss.root32
/boss.sh
/boss.sh4
/boss.sparc
/boss.spc
/boss.ssh4
/boss.x32
/boss.x32_64
/boss.x64
/boss.x86
/boss.x86_32
/boss.x86_64
/buiodawbuiopdw.arc
/buiodawbuiopdw.arcle-hs38
/buiodawbuiopdw.arm
/buiodawbuiopdw.arm4
/buiodawbuiopdw.arm4l
/buiodawbuiopdw.arm4t
/buiodawbuiopdw.arm4tl
/buiodawbuiopdw.arm4tll
/buiodawbuiopdw.arm5
/buiodawbuiopdw.arm5l
/buiodawbuiopdw.arm5n
/buiodawbuiopdw.arm6
/buiodawbuiopdw.arm64
/buiodawbuiopdw.arm6l
/buiodawbuiopdw.arm7
/buiodawbuiopdw.arm7l
/buiodawbuiopdw.arm8
/buiodawbuiopdw.armv4
/buiodawbuiopdw.armv4l
/buiodawbuiopdw.armv5l
/buiodawbuiopdw.armv6
/buiodawbuiopdw.armv61
/buiodawbuiopdw.armv6l
/buiodawbuiopdw.armv7l
/buiodawbuiopdw.dbg
/buiodawbuiopdw.exploit
/buiodawbuiopdw.i4
/buiodawbuiopdw.i486
/buiodawbuiopdw.i586
/buiodawbuiopdw.i6
/buiodawbuiopdw.i686
/buiodawbuiopdw.kill
/buiodawbuiopdw.m68
/buiodawbuiopdw.m68k
/buiodawbuiopdw.mips
/buiodawbuiopdw.mips64
/buiodawbuiopdw.mipseb
/buiodawbuiopdw.mipsel
/buiodawbuiopdw.mpsl
/buiodawbuiopdw.pcc
/buiodawbuiopdw.powerpc
/buiodawbuiopdw.powerpc-440fp
/buiodawbuiopdw.powerppc
/buiodawbuiopdw.ppc
/buiodawbuiopdw.pp-c
/buiodawbuiopdw.ppc2
/buiodawbuiopdw.ppc440
/buiodawbuiopdw.ppc440fp
/buiodawbuiopdw.root
/buiodawbuiopdw.root32
/buiodawbuiopdw.sh
/buiodawbuiopdw.sh4
/buiodawbuiopdw.sparc
/buiodawbuiopdw.spc
/buiodawbuiopdw.ssh4
/buiodawbuiopdw.x32
/buiodawbuiopdw.x32_64
/buiodawbuiopdw.x64
/buiodawbuiopdw.x86
/buiodawbuiopdw.x86_32
/buiodawbuiopdw.x86_64
/controller.arc
/controller.arcle-hs38
/controller.arm
/controller.arm4
/controller.arm4l
/controller.arm4t
/controller.arm4tl
/controller.arm4tll
/controller.arm5
/controller.arm5l
/controller.arm5n
/controller.arm6
/controller.arm64
/controller.arm6l
/controller.arm7
/controller.arm7l
/controller.arm8
/controller.armv4
/controller.armv4l
/controller.armv5l
/controller.armv6
/controller.armv61
/controller.armv6l
/controller.armv7l
/controller.dbg
/controller.exploit
/controller.i4
/controller.i486
/controller.i586
/controller.i6
/controller.i686
/controller.kill
/controller.m68
/controller.m68k
/controller.mips
/controller.mips64
/controller.mipseb
/controller.mipsel
/controller.mpsl
/controller.pcc
/controller.powerpc
/controller.powerpc-440fp
/controller.powerppc
/controller.ppc
/controller.pp-c
/controller.ppc2
/controller.ppc440
/controller.ppc440fp
/controller.root
/controller.root32
/controller.sh
/controller.sh4
/controller.sparc
/controller.spc
/controller.ssh4
/controller.x32
/controller.x32_64
/controller.x64
/controller.x86
/controller.x86_32
/controller.x86_64
/cutie.arc
/cutie.arcle-hs38
/cutie.arm
/cutie.arm4
/cutie.arm4l
/cutie.arm4t
/cutie.arm4tl
/cutie.arm4tll
/cutie.arm5
/cutie.arm5l
/cutie.arm5n
/cutie.arm6
/cutie.arm64
/cutie.arm6l
/cutie.arm7
/cutie.arm7l
/cutie.arm8
/cutie.armv4
/cutie.armv4l
/cutie.armv5l
/cutie.armv6
/cutie.armv61
/cutie.armv6l
/cutie.armv7l
/cutie.dbg
/cutie.exploit
/cutie.i4
/cutie.i486
/cutie.i586
/cutie.i6
/cutie.i686
/cutie.kill
/cutie.m68
/cutie.m68k
/cutie.mips
/cutie.mips64
/cutie.mipseb
/cutie.mipsel
/cutie.mpsl
/cutie.pcc
/cutie.powerpc
/cutie.powerpc-440fp
/cutie.powerppc
/cutie.ppc
/cutie.pp-c
/cutie.ppc2
/cutie.ppc440
/cutie.ppc440fp
/cutie.root
/cutie.root32
/cutie.sh
/cutie.sh4
/cutie.sparc
/cutie.spc
/cutie.ssh4
/cutie.x32
/cutie.x32_64
/cutie.x64
/cutie.x86
/cutie.x86_32
/cutie.x86_64
/f.arc
/f.arcle-hs38
/f.arm
/f.arm4
/f.arm4l
/f.arm4t
/f.arm4tl
/f.arm4tll
/f.arm5
/f.arm5l
/f.arm5n
/f.arm6
/f.arm64
/f.arm6l
/f.arm7
/f.arm7l
/f.arm8
/f.armv4
/f.armv4l
/f.armv5l
/f.armv6
/f.armv61
/f.armv6l
/f.armv7l
/f.dbg
/f.exploit
/f.i4
/f.i486
/f.i586
/f.i6
/f.i686
/f.kill
/f.m68
/f.m68k
/f.mips
/f.mips64
/f.mipseb
/f.mipsel
/f.mpsl
/f.pcc
/f.powerpc
/f.powerpc-440fp
/f.powerppc
/f.ppc
/f.pp-c
/f.ppc2
/f.ppc440
/f.ppc440fp
/f.root
/f.root32
/f.sh
/f.sh4
/f.sparc
/f.spc
/f.ssh4
/f.x32
/f.x32_64
/f.x64
/f.x86
/f.x86_32
/f.x86_64
/ns.arc
/ns.arcle-hs38
/ns.arm
/ns.arm4
/ns.arm4l
/ns.arm4t
/ns.arm4tl
/ns.arm4tll
/ns.arm5
/ns.arm5l
/ns.arm5n
/ns.arm6
/ns.arm64
/ns.arm6l
/ns.arm7
/ns.arm7l
/ns.arm8
/ns.armv4
/ns.armv4l
/ns.armv5l
/ns.armv6
/ns.armv61
/ns.armv6l
/ns.armv7l
/ns.dbg
/ns.exploit
/ns.i4
/ns.i486
/ns.i586
/ns.i6
/ns.i686
/ns.kill
/ns.m68
/ns.m68k
/ns.mips
/ns.mips64
/ns.mipseb
/ns.mipsel
/ns.mpsl
/ns.pcc
/ns.powerpc
/ns.powerpc-440fp
/ns.powerppc
/ns.ppc
/ns.pp-c
/ns.ppc2
/ns.ppc440
/ns.ppc440fp
/ns.root
/ns.root32
/ns.sh
/ns.sh4
/ns.sparc
/ns.spc
/ns.ssh4
/ns.x32
/ns.x32_64
/ns.x64
/ns.x86
/ns.x86_32
/ns.x86_64
/PriorityNigger.arc
/PriorityNigger.arcle-hs38
/PriorityNigger.arm
/PriorityNigger.arm4
/PriorityNigger.arm4l
/PriorityNigger.arm4t
/PriorityNigger.arm4tl
/PriorityNigger.arm4tll
/PriorityNigger.arm5
/PriorityNigger.arm5l
/PriorityNigger.arm5n
/PriorityNigger.arm6
/PriorityNigger.arm64
/PriorityNigger.arm6l
/PriorityNigger.arm7
/PriorityNigger.arm7l
/PriorityNigger.arm8
/PriorityNigger.armv4
/PriorityNigger.armv4l
/PriorityNigger.armv5l
/PriorityNigger.armv6
/PriorityNigger.armv61
/PriorityNigger.armv6l
/PriorityNigger.armv7l
/PriorityNigger.dbg
/PriorityNigger.exploit
/PriorityNigger.i4
/PriorityNigger.i486
/PriorityNigger.i586
/PriorityNigger.i6
/PriorityNigger.i686
/PriorityNigger.kill
/PriorityNigger.m68
/PriorityNigger.m68k
/PriorityNigger.mips
/PriorityNigger.mips64
/PriorityNigger.mipseb
/PriorityNigger.mipsel
/PriorityNigger.mpsl
/PriorityNigger.pcc
/PriorityNigger.powerpc
/PriorityNigger.powerpc-440fp
/PriorityNigger.powerppc
/PriorityNigger.ppc
/PriorityNigger.pp-c
/PriorityNigger.ppc2
/PriorityNigger.ppc440
/PriorityNigger.ppc440fp
/PriorityNigger.root
/PriorityNigger.root32
/PriorityNigger.sh
/PriorityNigger.sh4
/PriorityNigger.sparc
/PriorityNigger.spc
/PriorityNigger.ssh4
/PriorityNigger.x32
/PriorityNigger.x32_64
/PriorityNigger.x64
/PriorityNigger.x86
/PriorityNigger.x86_32
/PriorityNigger.x86_64
/.apache2update/
/.billgates/
/.ultraesgrima/
/ayosuckyomum/
/pedalcheta/

# Reference: https://twitter.com/r3dbU7z/status/1408542260233441284
# Reference: https://www.virustotal.com/gui/file/8a44ae92e6edd27493253129c7e456d2307c077e8e2e4e482fd1e4cd0c87648c/detection
# Reference: https://www.virustotal.com/gui/file/5cee0abbfccdacd9bc5d68b5a340c071e2bf9f9121ef1fc80908b45e65cb205b/detection
# Reference: https://www.virustotal.com/gui/file/c7e08dfdf986c34db373bafdee6479c83100f7395e3dbc1b72c8cdba189e9beb/detection

170.187.225.184:1234
194.233.162.215:1234
45.79.161.124:1234
medusabotnet.com

# Reference: https://twitter.com/elfdigest/status/1410205893497589767
# Reference: https://elfdigest.com/brief/e4281244d0903aee0324ffd0c5ec02fae0dd2cfaaa669781ee684ac688cbd060

205.185.126.254:5714

# Reference: https://twitter.com/elfdigest/status/1410205561568870401
# Reference: https://elfdigest.com/brief/85d7aa235c4d50c29969f5a01712ab0d10cc0a18bb67d76495b7295713c5fec1

107.172.205.126:37009

# Reference: https://twitter.com/elfdigest/status/1407367322105417743
# Reference: https://elfdigest.com/brief/c388b465ab8633223dc634f90ea52c042efec072d29123f02852e591ac43ef05

96.8.121.112:81

# Reference: https://elfdigest.com/brief/d3de77487e13ee5e46b58832c1991d45f54fbe91e9ce048ff736eef0dc560b74
# Reference: https://twitter.com/elfdigest/status/1407368300980473865

117.201.204.72:49050
212.129.33.59:6881
59.93.26.81:51048

# Reference: https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability/
# Reference: https://otx.alienvault.com/pulse/60dd73dbb971862c99d0ac16

6amdku2uhly2esj7.onion
atxajrovi4lvd2zj.onion
bc6z3gtu6b3r5tce.onion
cgsmxjjnuickasbu.onion
gsmxjjnuickasbuatxajrovi4lvd2zjuejivzrb3vobuoezbc6z3gtu6b3r5tce.onion
m2336dttvcygloiv.onion
rkz2f5u57cvs3kdt.onion
uejivzrb3vobuoez.onion

# Reference: https://elfdigest.com/brief/df13c541419d99c04006064ebccbe07d153999e48765257dbbc8107b65a48e39

152.89.239.160:39497

# Reference: https://elfdigest.com/brief/ffc38298a16bc5e56e1114d6038d9e57e1ddfbaeb6a35f482fca3577f55776ac

156.96.156.220:45

# Reference: https://elfdigest.com/brief/05893abdcbf54b7375bb5f60b623ca1fe7ec1a061b80187e741cf64a900583e5

136.144.41.164:1

# Reference: https://elfdigest.com/brief/9108777b9b73f9382602ea8ab92b9c7d04aefad401d6430279ec66afe965832e

136.144.41.168:59666
scamanje.stresserit.pro

# Reference: https://www.virustotal.com/gui/file/a08aa3ee1777ce98aab091ed3274635b358de8ad4814a6d4334e42c168177847/detection
# Reference: https://www.virustotal.com/gui/file/b8585ba6ac1262db1a3e985217370b85e0b49860dc175d8622c0f5115f50039f/detection
# Reference: https://www.virustotal.com/gui/file/25a061ab35590014402f0ce14a9355e849923d407d1f5f7622bd88075e51d3a1/detection

167.107.182.16:37215
197.98.111.25:37215
65.21.107.147:37215
botnet.stresserit.pro
