# Copyright (c) 2014-2020 Maltrail developers (https://github.com/stamparm/maltrail/)
# See the file 'LICENSE' for copying permission

# Reference: https://www.virustotal.com/#/ip-address/77.87.77.250

/izuku.sh
/izuku.arc
/izuku.arm
/izuku.arm4
/izuku.armv4l
/izuku.arm5
/izuku.arm5n
/izuku.arm6
/izuku.arm7
/izuku.i586
/izuku.i686
/izuku.dbg
/izuku.mips
/izuku.mips64
/izuku.m68k
/izuku.mpsl
/izuku.ppc
/izuku.spc
/izuku.sparc
/izuku.sh4
/izuku.x86
/izuku.x32
/izuku.x64
/izuku.x86_64

# Reference: https://blog.paranoidpenguin.net/2018/08/hakaied-with-love-from-telecom-egypt/

/hakai.arc
/hakai.arm
/hakai.arm4
/hakai.armv4l
/hakai.arm5
/hakai.arm5n
/hakai.arm6
/hakai.arm7
/hakai.dbg
/hakai.i586
/hakai.i686
/hakai.mips
/hakai.mips64
/hakai.mpsl
/hakai.m68k
/hakai.ppc
/hakai.spc
/hakai.sparc
/hakai.sh4
/hakai.x86_64

# Reference: https://researchcenter.paloaltonetworks.com/2018/07/unit42-finds-new-mirai-gafgyt-iotlinux-botnet-campaigns/

/okane.arc
/okane.arm
/okane.arm4
/okane.armv4l
/okane.arm5
/okane.arm5n
/okane.arm6
/okane.arm7
/okane.i486
/okane.i586
/okane.i686
/okane.dbg
/okane.m68k
/okane.mips
/okane.mips64
/okane.mpsl
/okane.ppc
/okane.ppc440fp
/okane.sh4
/okane.spc
/okane.sparc
/okane.x86
/okane.x32
/okane.x64
/okane.x86_64

# Reference: https://www.bleepingcomputer.com/news/security/mirai-iot-malware-uses-aboriginal-linux-to-target-multiple-platforms/

/sora.arc
/sora.arm
/sora.arm4
/sora.armv4l
/sora.arm5
/sora.arm5n
/sora.arm6
/sora.arm7
/sora.dbg
/sora.mips
/sora.mips64
/sora.mpsl
/sora.m68k
/sora.ppc
/sora.sh4
/sora.spc
/sora.sparc
/sora.x86
/sora.x32
/sora.x64
/sora.x86_64

# Reference: https://www.hindawi.com/journals/scn/2018/7178164/lst16/

/mirai.arc
/mirai.arm
/mirai.arm4
/mirai.arm4l
/mirai.arm4t
/mirai.arm4tl
/mirai.arm4tll
/mirai.armv4l
/mirai.arm5
/mirai.arm5l
/mirai.arm5n
/mirai.arm6
/mirai.arm64
/mirai.arm6l
/mirai.arm7
/mirai.arm7l
/mirai.arm8
/mirai.armv4
/mirai.armv4l
/mirai.armv5l
/mirai.armv6
/mirai.armv61
/mirai.armv6l
/mirai.armv7l
/mirai.dbg
/mirai.exploit
/mirai.i4
/mirai.i486
/mirai.i586
/mirai.i6
/mirai.i686
/mirai.kill
/mirai.m68
/mirai.m68k
/mirai.mips
/mirai.mips64
/mirai.mipsl
/mirai.mipsel
/mirai.mpsl
/mirai.pcc
/mirai.powerpc
/mirai.powerpc-440fp
/mirai.powerppc
/mirai.ppc
/mirai.ppc2
/mirai.ppc440
/mirai.ppc440fp
/mirai.root
/mirai.root32
/mirai.sh
/mirai.sh4
/mirai.sparc
/mirai.spc
/mirai.ssh4
/mirai.x32
/mirai.x64
/mirai.x86
/mirai.x86_32
/mirai.x86_64

# Reference: https://www.virustotal.com/en/ip-address/209.141.55.13/information/
# Reference: https://twitter.com/i/moments/1046121581393543168

/Extendo.arc
/Extendo.arm
/Extendo.arm4
/Extendo.armv4l
/Extendo.arm5
/Extendo.arm5n
/Extendo.arm6
/Extendo.arm7
/Extendo.dbg
/Extendo.m68k
/Extendo.mips
/Extendo.mips64
/Extendo.mipsl
/Extendo.m68k
/Extendo.ppc
/Extendo.sh4
/Extendo.spc
/Extendo.sparc
/Extendo.x86
/Extendo.x32
/Extendo.x64
/Extendo.x86_64
/8UsA.sh
/zaky.sh

# Reference: https://twitter.com/bad_packets/status/1036415216718733312

/seraph.arc
/seraph.arm
/seraph.arm4
/seraph.armv4l
/seraph.arm5
/seraph.arm5n
/seraph.arm6
/seraph.arm7
/seraph.dbg
/seraph.i586
/seraph.i686
/seraph.m68k
/seraph.mips
/seraph.mips64
/seraph.mpsl
/seraph.ppc
/seraph.sh
/seraph.sh4
/seraph.spc
/seraph.sparc
/seraph.x32
/seraph.x86
/seraph.x64
/seraph.x86_64

# Reference: https://twitter.com/bad_packets/status/1038620066873409536
# Reference: https://twitter.com/SugitaMuchi/status/1083983657684021248

/apep.arc
/apep.arm
/apep.arm4
/apep.armv4l
/apep.arm5
/apep.arm5n
/apep.arm6
/apep.arm7
/apep.dbg
/apep.i586
/apep.i686
/apep.m68k
/apep.mips
/apep.mips64
/apep.mpsl
/apep.ppc
/apep.sh
/apep.sh4
/apep.spc
/apep.sparc
/apep.x86
/apep.x32
/apep.x64
/apep.x86_64
/arc.b
/arm.b
/arm4.b
/armv4l.b
/arm5.b
/arm5n.b
/arm6.b
/arm7.b
/dbg.b
/i586.b
/i686.b
/m68k.b
/mips.b
/mips64.b
/mpsl.b
/ppc.b
/sh4.b
/spc.b
/sparc.b
/x32.b
/x64.b
/x86_64.b

# Reference: https://researchcenter.paloaltonetworks.com/2018/09/unit42-multi-exploit-iotlinux-botnets-mirai-gafgyt-target-apache-struts-sonicwall/

l.ocalhost.host
/sonicwall

# Reference: https://twitter.com/bad_packets/status/1043273974560448514

/ultron.armv4l
/ultron.armv5l
/ultron.armv6l
/ultron.i586
/ultron.i686
/ultron.m68k
/ultron.mips
/ultron.mipsel
/ultron.mipseln
/ultron.powerpc
/ultron.powerpc440fp
/ultron.sh4
/ultron.sparc
/ultron.x86_64
/ultronfinal.armv4l
/ultronfinal.armv5l
/ultronfinal.armv6l
/ultronfinal.i586
/ultronfinal.i686
/ultronfinal.m68k
/ultronfinal.mips
/ultronfinal.mipsel
/ultronfinal.mipseln
/ultronfinal.powerpc
/ultronfinal.powerpc440fp
/ultronfinal.sh4
/ultronfinal.sparc
/ultronfinal.x86_64
/ultron-syn.sh

# Reference: https://twitter.com/bad_packets/status/1043404764027838464
# Reference: https://twitter.com/_odisseus/status/1151420268893618176

/hoho.arm
/hoho.arm5
/hoho.arm5.1
/hoho.arm6
/hoho.arm7
/hoho.m68k
/hoho.mips
/hoho.mpsl
/hoho.ppc
/hoho.sh4
/hoho.spc
/hoho.x86

# Reference: https://twitter.com/bad_packets/status/1032494091290832896

/.shinka.mips
/.shinka.mpsl

# Reference: https://twitter.com/bad_packets/status/1029608234569453569

/init0
/sals

# Reference: https://twitter.com/Ajouini99/status/1046898647764545536

/Boatnet.arm4
/Boatnet.arm5
/Boatnet.arm6
/Boatnet.arm7
/Boatnet.m68k
/Boatnet.mips
/Boatnet.mpsl
/Boatnet.ppc
/Boatnet.sh4
/Boatnet.spc
/Boatnet.x86
/Boatnet.x86_64

# Generic trail from MT heuristic detection

/juno
/sefa.arm
/sefa.arm5
/sefa.arm6
/sefa.arm7
/sefa.i586
/sefa.i686
/sefa.m68k
/sefa.mips
/sefa.mpsl
/sefa.ppc
/sefa.ppc440
/sefa.sh4
/sefa.spc
/sefa.x86

# Reference: https://twitter.com/bad_packets/status/1051616610035806209

/oxy.arm
/oxy.arm5
/oxy.arm6
/oxy.arm7
/oxy.i586
/oxy.i686
/oxy.m68k
/oxy.mips
/oxy.mpsl
/oxy.ppc
/oxy.ppc440
/oxy.sh4
/oxy.spc
/oxy.x86

# Reference: https://twitter.com/ulexec/status/1051959861964169217
# Reference: https://twitter.com/0xrb/status/1160055482846867456

34.67.138.200:1791
/dark.arc
/dark.arm
/dark.arm4
/dark.arm4l
/dark.arm4t
/dark.arm4tl
/dark.arm4tll
/dark.armv4l
/dark.arm5
/dark.arm5n
/dark.arm6
/dark.arm64
/dark.arm7
/dark.dbg
/dark.i4
/dark.i486
/dark.i586
/dark.i686
/dark.kill
/dark.m68k
/dark.mips
/dark.mips64
/dark.mpsl
/dark.mipsel
/dark.ppc
/dark.ppc2
/dark.ppc440
/dark.powerppc
/dark.root
/dark.root32
/dark.sh4
/dark.ssh4
/dark.spc
/dark.sparc
/dark.srv
/dark.x32
/dark.x64
/dark.x86
/dark.x86_32
/dark.x86_64

# Reference: https://twitter.com/VessOnSecurity/status/1053591992888950784

/arm.yakuza
/arm5.yakuza
/arm6.yakuza
/arm7.yakuza
/dbg.yakuza
/i586.yakuza
/i686.yakuza
/m68k.yakuza
/mips.yakuza
/mpsl.yakuza
/ppc.yakuza
/ppc440.yakuza
/sh4.yakuza
/spc.yakuza
/srv.yakuza
/x86.yakuza

# Reference: https://twitter.com/VessOnSecurity/status/1051226957118103560

/gemini.arm
/gemini.arm5
/gemini.arm6
/gemini.arm7
/gemini.dbg
/gemini.i586
/gemini.i686
/gemini.m68k
/gemini.mips
/gemini.mpsl
/gemini.ppc
/gemini.ppc440
/gemini.sh4
/gemini.spc
/gemini.srv
/gemini.x86

# Reference: https://twitter.com/VessOnSecurity/status/1036375414141345793

/arc.Akiru
/arm.Akiru
/arm4.Akiru
/armv4l.Akiru
/arm5.Akiru
/arm6.Akiru
/arm7.Akiru
/dbg.Akiru
/i586.Akiru
/i686.Akiru
/m68k.Akiru
/mips.Akiru
/mips64.Akiru
/mpsl.Akiru
/ppc.Akiru
/ppc440.Akiru
/sh4.Akiru
/spc.Akiru
/sparc.Akiru
/srv.Akiru
/x86.Akiru
/x64.Akiru
/x32.Akiru
/x86_64.Akiru

# Reference: https://twitter.com/VessOnSecurity/status/1031653320467927046

/BleedStreet.arc
/BleedStreet.arm
/BleedStreet.arm4
/BleedStreet.armv4l
/BleedStreet.arm5
/BleedStreet.arm6
/BleedStreet.arm7
/BleedStreet.dbg
/BleedStreet.i586
/BleedStreet.i686
/BleedStreet.m68k
/BleedStreet.mips
/BleedStreet.mips64
/BleedStreet.mpsl
/BleedStreet.ppc
/BleedStreet.ppc440
/BleedStreet.sh4
/BleedStreet.spc
/BleedStreet.sparc
/BleedStreet.srv
/BleedStreet.x86
/BleedStreet.x64
/BleedStreet.x32
/BleedStreet.x86_64

# Reference: https://twitter.com/xxdesmus/status/1053440011289280512

/jiren.arc
/jiren.arm
/jiren.armv4l
/jiren.arm4
/jiren.arm5
/jiren.arm5n
/jiren.arm6
/jiren.arm7
/jiren.dbg
/jiren.i586
/jiren.i686
/jiren.m68k
/jiren.mips
/jiren.mips64
/jiren.mpsl
/jiren.ppc
/jiren.sh
/jiren.sh4
/jiren.spc
/jiren.sparc
/jiren.x86
/jiren.x64
/jiren.x86_64
/jiren.x32

# Reference: https://otx.alienvault.com/pulse/5a7878488a342f781764803b

cloudflarecock.club
fghdfth.club
fuckthefeds.tk
hightechcrime.club
imadaddy.us
malwaremustive.club
mirai.ao
neuvostoliitto.tk
traplife.ru

# Reference: http://vxcube.com/recent-threats-ioc/5a505721a39bb533af5137ed/detail

0x01.nexusiotsolutions.net
0x01.preload.su
0x90.bid
1eryxnva.glibc.org
aced.ga
air.sinushost.biz
akuma.pw
alhctuyy.tk
asapvpns.club
aspectleaks.xyz
back.uu8889.com
bakiiszwart.tk
base.monello.tk
bbase.monello.tk
bcnc.changeme.com
bc.nexusiotsolutions.net
bfrxznyisbestie.ml
bfyfa.fun
bhromofreah.top
bigboats.club
bigboatz.us
bkush.ml
blacklister.nl
bloodwars.ws
blueandsausesfries.us
bnexusiotsolutions.net
boatnet.xyz
boat.racoon.ml
booters.ml
botnet.remaiten.org
botnetsale.tk
bounty.bigbotpein.ru
bwww.scotsa.pw
ccc.snicker.ir
central.glibc.org
cked.4horsemen.pw
cktzoh.xyz
cmdmirai.tk
cnc111.ml
cnc.bigbandsinmyvault.tk
cnc.bigbotpein.ru
cncbot.cnbot.space
cncbot.ddns.net
cnc.changeme.com
cnc.linux.lol
cnc.mirai.com
cnc.nutsz.club
cnc.skidsec.org
cnc.smokemethallday.tk
cnc.spamtech.win
cnc.teammalefic.pw
cnc.tonguepunchfartbox.life
cnc.urgay.cf
cnc.vdskge7as.xyz
cnc.voxlobid.tk
c.nexusiotsolutions.net
cn.uvgczsuidrtg.com
conwangg.de
cool.kingdomplugin.nl
coolxr.info
cottoncandyloverscute.website
crazyclothes.store
dankstresser.tk
dannyexe.xyz
ddosattacks.tk
deathlives.ddns.net
d.hi8520.com
dportsmirai.tk
dssgasrea.club
eccc.bulletpool.ru
ertwer.vdskge7as.xyz
featured.cf
fedtraps.cf
ffvfvcnc.changeme.com
frost.botnet.hackedfiles.pw
frxznyisbestie.ml
ftp.xenonbooter.xyz
fyfa.fun
gangsters.cf
gndfgdd.club
gnikllort.com
gotnulled.ga
greekhelios21.tk
happyf33t.nl
hello.bigpuller.cf
hoaxnet.ddns.net
hromofreah.top
ikbensupercool.nl
iktufopjou.nl
infecteverywhere.online
int.aerx.io
internetgangster.tk
internetpolice.ga
internetpolice.ml
internetpolice.tk
iotmirai.tk
isalinux.intercomonline.com
kagbe.nl
kormirai.ddns.net
kringelstan.net
kush.ml
leakedfiles.org
legendarysprx.pw
linuxsecuritys.com
lol665.tk
lol.godlynet.cf
mail.harikatha.com
majikku.us
miraibotnet.ml
miraibotnet.online
miraihoneypot.tk
mirainet.ml
mirainet.tk
mm.haxornah.top
moanmybins.ml
modems.pw
myacerusername.hopto.org
mymiraiserver.hopto.org
mypawnshop.men
nageboorte.ga
naotogoyamamcc.asuscomm.com
net.nageboorte.nl
neuvostoliitto.ml
neuvostoliitto.tk
nexusaquariums.ir
nnn.shenron.pw
nullserversmirai.tk
offlineservers.tk
online.upmirai.club
onyxreppingoat.cf
panel.miraibotnet.eu
powa.daddyhackingteam.com
power4you.ddns.net
predoxing.tk
purgeblood.duckdns.org
putintrump.cf
putintrump.tk
pvpcloud.us
pyfulthag0d.pw
q5f2k0evy7go2rax9m4g.ru
reppin.tk
rofl.leakvortex.pro
rootyi.site
runscape.cf
rw595phpt4kk538s.botanik.gq
s0.3eu.ru
santasbigcandycane.cx
sbnmcd.org
sepinsftw.tk
serveranywhere.cf
serveranywhere.ga
serversrus.club
sevenp.top
smithre.top
ssh.gammaboat.us
swatnetiphone.tk
swatnetsucks.tk
swinginwithme.ru
swizzthegod.us
thebigbadbotnet.tk
thonder.club
totalbooter.us
truepower.club
ttymirai.tk
unix.tk
upfiles.online
uryjsdrfg.club
vap3.ddns.net
wheresmirai.tk
winter.winterboot.net
ghoststresser.pw
newel.se
scotsa.pw
trapboat.club
yzykar.ddns.net
zammanaakis.link
zetastress.net

# Reference: https://twitter.com/bad_packets/status/1053873672824356866

/Botnet.arm4
/Botnet.arm5
/Botnet.arm6
/Botnet.arm7
/Botnet.dbg
/Botnet.m68k
/Botnet.mips
/Botnet.mpsl
/Botnet.ppc
/Botnet.sh4
/Botnet.sparc
/Botnet.x86
/Botnet.x86_32
/Botnet.x86_64
/hakai.arm4
/hakai.arm5
/hakai.arm6
/hakai.arm7
/hakai.dbg
/hakai.m68k
/hakai.mips
/hakai.mpsl
/hakai.ppc
/hakai.sh4
/hakai.sparc
/hakai.x86
/hakai.x86_32
/hakai.x86_64
/sensi1.sh

# From MT heur detection

/neko.sh

# Reference: https://twitter.com/SugitaMuchi/status/1062330928205156352

/kowai.arm
/kowai.arm5
/kowai.arm6
/kowai.arm7
/kowai.m68k
/kowai.mips
/kowai.mpsl
/kowai.ppc
/kowai.sh4
/kowai.spc
/kowai.x86

# Reference: https://twitter.com/ankit_anubhav/status/1069907888368484353
# Reference: https://twitter.com/0xrb/status/1098513464480264192

/arm.light
/arm5.light
/arm6.light
/arm7.light
/m68k.light
/mips.light
/mpsl.light
/ppc.light
/sh4.light
/spc.light
/x86.light

# Reference: https://twitter.com/SugitaMuchi/status/1063754561339322368

/shinto
/shinto.arm
/shinto.arm4
/shinto.armv4l
/shinto.arm5
/shinto.arm5n
/shinto.arm6
/shinto.arm7
/shinto.dbg
/shinto.i586
/shinto.i686
/shinto.m68k
/shinto.mips
/shinto.mpsl
/shinto.ppc
/shinto.sh4
/shinto.spc
/shinto.sparc
/shinto.x32
/shinto.x86
/shinto.x64
/shinto.x86_64

# Reference: https://telekomsecurity.github.io/2018/07/adb-botnet.html

rippr.cc
/adbs
/i586.bot.le
/i686.bot.le
/arm.bot.le
/arm7.bot.le
/mips.bot.be
/mipsel.bot.le
/x86_64.bot.le

# Reference: https://twitter.com/bad_packets/status/1106343623996538880
# Reference: https://twitter.com/IAM__Network/status/1097163771116744704

/josho.arc
/josho.arm
/josho.arm4
/josho.arm4l
/josho.arm4t
/josho.arm4tl
/josho.arm4tll
/josho.armv4l
/josho.arm5
/josho.arm5n
/josho.arm6
/josho.arm64
/josho.arm7
/josho.arm8
/josho.dbg
/josho.exploit
/josho.i4
/josho.i486
/josho.i586
/josho.i686
/josho.kill
/josho.m68k
/josho.mips
/josho.mips64
/josho.mpsl
/josho.mipsel
/josho.ppc
/josho.ppc2
/josho.ppc440
/josho.powerppc
/josho.root
/josho.root32
/josho.sh4
/josho.ssh4
/josho.spc
/josho.sparc
/josho.x32
/josho.x64
/josho.x86
/josho.x86_32
/josho.x86_64

# Reference: https://twitter.com/bad_packets/status/1105882282626150401

/frosty.arc
/frosty.arm
/frosty.arm4
/frosty.armv4l
/frosty.arm5
/frosty.arm5n
/frosty.arm6
/frosty.arm7
/frosty.dbg
/frosty.i586
/frosty.i686
/frosty.m68k
/frosty.mips
/frosty.mips64
/frosty.mpsl
/frosty.ppc
/frosty.sh4
/frosty.spc
/frosty.sparc
/frosty.x32
/frosty.x86
/frosty.x64
/frosty.x86_64

# Reference: https://twitter.com/bad_packets/status/1105281977173729280

/time.arc
/time.arm
/time.arm4
/time.armv4l
/time.arm5
/time.arm5n
/time.arm6
/time.arm7
/time.dbg
/time.i586
/time.i686
/time.m68k
/time.mips
/time.mips64
/time.mpsl
/time.ppc
/time.sh4
/time.spc
/time.sparc
/time.x32
/time.x86
/time.x64
/time.x86_64

# Reference: https://twitter.com/bad_packets/status/1104487572015788032

/a.sh
/ai.arc
/ai.arm
/ai.arm4
/ai.armv4l
/ai.arm5
/ai.arm5n
/ai.arm6
/ai.arm7
/ai.dbg
/ai.i586
/ai.i686
/ai.m68k
/ai.mips
/ai.mips64
/ai.mpsl
/ai.ppc
/ai.sh4
/ai.spc
/ai.sparc
/ai.x32
/ai.x86
/ai.x64
/ai.x86_64
/dsl2750b
/jno.arc
/jno.arm
/jno.arm4
/jno.armv4l
/jno.arm5
/jno.arm5n
/jno.arm6
/jno.arm7
/jno.dbg
/jno.i586
/jno.i686
/jno.m68k
/jno.mips
/jno.mips64
/jno.mpsl
/jno.ppc
/jno.sh4
/jno.spc
/jno.sparc
/jno.x32
/jno.x86
/jno.x64
/jno.x86_64
/rbot.arc
/rbot.arm
/rbot.arm4
/rbot.armv4l
/rbot.arm5
/rbot.arm5n
/rbot.arm6
/rbot.arm7
/rbot.dbg
/rbot.i586
/rbot.i686
/rbot.m68k
/rbot.mips
/rbot.mips64
/rbot.mpsl
/rbot.ppc
/rbot.sh4
/rbot.spc
/rbot.sparc
/rbot.x32
/rbot.x86
/rbot.x64
/rbot.x86_64
/snwrite

# Reference: https://twitter.com/360Netlab/status/1102425923381587968

/estella.arc
/estella.arm
/estella.arm4
/estella.armv4l
/estella.arm5
/estella.arm5n
/estella.arm6
/estella.arm7
/estella.dbg
/estella.i586
/estella.i686
/estella.m68k
/estella.mips
/estella.mips64
/estella.mpsl
/estella.ppc
/estella.sh4
/estella.spc
/estella.sparc
/estella.x32
/estella.x86
/estella.x64
/estella.x86_64
/ricco.arc
/ricco.arm
/ricco.arm4
/ricco.armv4l
/ricco.arm5
/ricco.arm5n
/ricco.arm6
/ricco.arm7
/ricco.dbg
/ricco.i586
/ricco.i686
/ricco.m68k
/ricco.mips
/ricco.mips64
/ricco.mpsl
/ricco.ppc
/ricco.sh4
/ricco.spc
/ricco.sparc
/ricco.x32
/ricco.x86
/ricco.x64
/ricco.x86_64

# Reference: https://twitter.com/bad_packets/status/1104255547702800384

/xxx.arc
/xxx.arm
/xxx.arm4
/xxx.armv4l
/xxx.arm5
/xxx.arm5n
/xxx.arm6
/xxx.arm7
/xxx.dbg
/xxx.i586
/xxx.i686
/xxx.m68k
/xxx.mips
/xxx.mips64
/xxx.mpsl
/xxx.ppc
/xxx.sh4
/xxx.spc
/xxx.sparc
/xxx.x86
/xxx.x32
/xxx.x64
/xxx.x86_64

# Reference: https://twitter.com/bad_packets/status/1107179579393740801

/set.arc
/set.arm
/set.arm4
/set.armv4l
/set.arm5
/set.arm5n
/set.arm6
/set.arm7
/set.dbg
/set.i586
/set.i686
/set.m68k
/set.mips
/set.mips64
/set.mpsl
/set.ppc
/set.sh4
/set.spc
/set.sparc
/set.x32
/set.x86
/set.x64
/set.x86_64
/Solstice.arc
/Solstice.arm
/Solstice.arm4
/Solstice.armv4l
/Solstice.arm5
/Solstice.arm5n
/Solstice.arm6
/Solstice.arm7
/Solstice.dbg
/Solstice.i586
/Solstice.i686
/Solstice.m68k
/Solstice.mips
/Solstice.mips64
/Solstice.mpsl
/Solstice.ppc
/Solstice.sh4
/Solstice.spc
/Solstice.sparc
/Solstice.x32
/Solstice.x86
/Solstice.x64
/Solstice.x86_64

# Reference: https://twitter.com/bad_packets/status/1103024034495619072
# Reference: https://twitter.com/0xrb/status/1102806642071003141

/cayo1
/cayo10
/cayo11
/cayo12
/cayo13
/cayo2
/cayo3
/cayo4
/cayo5
/cayo6
/cayo7
/cayo8
/cayo9

# Reference: https://twitter.com/bad_packets/status/1107030028162719744

/Demon.arc
/Demon.arm
/Demon.arm4
/Demon.armv4l
/Demon.arm5
/Demon.arm5n
/Demon.arm6
/Demon.arm7
/Demon.dbg
/Demon.i586
/Demon.i686
/Demon.m68k
/Demon.mips
/Demon.mips64
/Demon.mpsl
/Demon.ppc
/Demon.sh4
/Demon.spc
/Demon.sparc
/Demon.x32
/Demon.x86
/Demon.x64
/Demon.x86_64

# Reference: https://twitter.com/bad_packets/status/1103032616964415488

/Meraki.arc
/Meraki.arm
/Meraki.arm4
/Meraki.armv4l
/Meraki.arm5
/Meraki.arm5n
/Meraki.arm6
/Meraki.arm7
/Meraki.dbg
/Meraki.i586
/Meraki.i686
/Meraki.m68k
/Meraki.mips
/Meraki.mips64
/Meraki.mpsl
/Meraki.ppc
/Meraki.sh4
/Meraki.spc
/Meraki.sparc
/Meraki.x32
/Meraki.x86
/Meraki.x64
/Meraki.x86_64

# Reference: https://twitter.com/0xrb/status/1098513464480264192

/0kami.arc
/0kami.arm
/0kami.arm4
/0kami.armv4l
/0kami.arm5
/0kami.arm5n
/0kami.arm6
/0kami.arm7
/0kami.dbg
/0kami.i586
/0kami.i686
/0kami.m68k
/0kami.mips
/0kami.mips64
/0kami.mpsl
/0kami.ppc
/0kami.sh4
/0kami.sparc
/0kami.x32
/0kami.x86
/0kami.x64
/0kami.x86_64
/Okami.arc
/Okami.arm
/Okami.arm4
/Okami.arm5
/Okami.arm5n
/Okami.arm6
/Okami.arm7
/Okami.dbg
/Okami.i586
/Okami.i686
/Okami.m68k
/Okami.mips
/Okami.mips64
/Okami.mpsl
/Okami.ppc
/Okami.sh4
/Okami.spc
/Okami.sparc
/Okami.x86
/Okami.x32
/Okami.x64
/Okami.x86_64

# Reference: https://twitter.com/bad_packets/status/1091781818854957056

/Tsunami.arc
/Tsunami.arm
/Tsunami.arm4
/Tsunami.armv4l
/Tsunami.arm5
/Tsunami.arm5n
/Tsunami.arm6
/Tsunami.arm7
/Tsunami.dbg
/Tsunami.i586
/Tsunami.i686
/Tsunami.m68k
/Tsunami.mips
/Tsunami.mips64
/Tsunami.mpsl
/Tsunami.ppc
/Tsunami.sh4
/Tsunami.sparc
/Tsunami.spc
/Tsunami.x86
/Tsunami.x32
/Tsunami.x64
/Tsunami.x86_64
/Yowai.arc
/Yowai.arm
/Yowai.arm4
/Yowai.armv4l
/Yowai.arm5
/Yowai.arm5n
/Yowai.arm6
/Yowai.arm7
/Yowai.dbg
/Yowai.i586
/Yowai.i686
/Yowai.m68k
/Yowai.mips
/Yowai.mips64
/Yowai.mpsl
/Yowai.ppc
/Yowai.sh4
/Yowai.sparc
/Yowai.spc
/Yowai.x32
/Yowai.x86
/Yowai.x64
/Yowai.x86_64

# Reference: https://twitter.com/bad_packets/status/1090099611887235073

ngv2.duckdns.org

# Reference: https://twitter.com/bad_packets/status/1085423672515616769

/kalon.arc
/kalon.arm
/kalon.arm4
/kalon.armv4l
/kalon.arm5
/kalon.arm6
/kalon.arm7
/kalon.dbg
/kalon.i586
/kalon.i686
/kalon.m68k
/kalon.mips
/kalon.mips64
/kalon.mpsl
/kalon.ppc
/kalon.sh4
/kalon.sparc
/kalon.spc
/kalon.x86
/kalon.x32
/kalon.x64
/kalon.x86_64

# Reference: https://twitter.com/bad_packets/status/1079244007824183296
# Reference: https://twitter.com/gorimpthon/status/1074581436416581632
# Reference: https://twitter.com/0xrb/status/1103216803969359873

/rift.arc
/rift.arm
/rift.arm4
/rift.armv4l
/rift.arm5
/rift.arm5n
/rift.arm6
/rift.arm7
/rift.dbg
/rift.i486
/rift.i586
/rift.i686
/rift.m68k
/rift.mips
/rift.mips64
/rift.mpsl
/rift.ppc
/rift.ppc-440fp
/rift.sh4
/rift.sparc
/rift.spc
/rift.x86
/rift.x32
/rift.x64
/rift.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1107503086052888576

/despise.arc
/despise.arm
/despise.arm4
/despise.armv4l
/despise.arm5
/despise.arm5n
/despise.arm6
/despise.arm7
/despise.dbg
/despise.i586
/despise.i686
/despise.m68k
/despise.mips
/despise.mips64
/despise.mpsl
/despise.ppc
/despise.sh4
/despise.sparc
/despise.spc
/despise.x86
/despise.x32
/despise.x64
/despise.x86_64

# Reference: https://otx.alienvault.com/pulse/5c8fa03c1bff9c0896577b9b
# Reference: https://unit42.paloaltonetworks.com/new-mirai-variant-targets-enterprise-wireless-presentation-display-systems/
# Reference: https://www.virustotal.com/gui/domain/epicrustserver.cf/relations

128.244.98.74:2332
128.244.98.74:3933
133.51.27.211:2332
133.51.27.211:3933
133.51.27.211:8080
133.51.27.211:8081
133.51.27.211:8083
133.51.27.211:8181
139.203.22.68:2332
139.203.22.68:3933
147.133.138.130:2332
147.133.138.130:3933
147.133.138.130:8080
147.133.138.130:8081
147.133.138.130:8083
147.133.138.130:8181
149.58.122.219:2332
149.58.122.219:3933
149.58.122.219:8080
149.58.122.219:8081
149.58.122.219:8083
149.58.122.219:8181
155.169.205.198:2332
155.169.205.198:3933
155.169.205.198:8080
155.169.205.198:8081
155.169.205.198:8083
155.169.205.198:8181
155.223.168.208:2332
155.223.168.208:3933
194.25.244.166:2332
194.25.244.166:3933
210.234.205.181:2332
210.234.205.181:3933
211.242.104.162:2332
211.242.104.162:3933
213.135.165.173:2332
213.135.165.173:3933
213.245.229.13:2332
213.245.229.13:3933
222.227.222.211:2332
222.227.222.211:3933
50.63.202.11:2332
50.63.202.11:3933
50.63.202.11:8080
50.63.202.11:8081
50.63.202.11:8083
50.63.202.11:8181
65.107.9.195:2332
65.107.9.195:3933
67.19.37.226:2332
67.19.37.226:3933
70.192.147.153:2332
70.192.147.153:3933
71.5.86.197:2332
71.5.86.197:3933
79.51.97.203:2332
79.51.97.203:3933
85.135.168.75:2332
85.135.168.75:3933
85.135.168.75:8080
85.135.168.75:8081
85.135.168.75:8083
85.135.168.75:8181
epicrustserver.cf
/clean.arc
/clean.arm
/clean.arm4
/clean.armv4l
/clean.arm5
/clean.arm5n
/clean.arm6
/clean.arm7
/clean.dbg
/clean.i586
/clean.i686
/clean.m68k
/clean.x86
/clean.x86_64
/clean.x32
/clean.x64
/clean.mips
/clean.mpsl
/clean.ppc
/clean.sh4
/clean.spc
/clean.sparc
/eeppinen.arc
/eeppinen.arm
/eeppinen.arm4
/eeppinen.armv4l
/eeppinen.arm5
/eeppinen.arm5n
/eeppinen.arm6
/eeppinen.arm7
/eeppinen.dbg
/eeppinen.i586
/eeppinen.i686
/eeppinen.m68k
/eeppinen.ppc
/eeppinen.sh4
/eeppinen.sparc
/eeppinen.spc
/eeppinen.x86
/eeppinen.x86_64
/eeppinen.x32
/eeppinen.x64
/wgetbin.sh

# Reference: https://twitter.com/bad_packets/status/1108198117944418304

/shiina.sh
/shiina1.sh
/shiina.arc
/shiina.arm
/shiina.arm4
/shiina.armv4l
/shiina.arm5
/shiina.arm5n
/shiina.arm6
/shiina.arm7
/shiina.dbg
/shiina.i586
/shiina.i686
/shiina.m68k
/shiina.mips
/shiina.mips64
/shiina.mpsl
/shiina.ppc
/shiina.sh4
/shiina.spc
/shiina.sparc
/shiina.x32
/shiina.x64
/shiina.x86
/shiina.x86_64

# Reference: https://twitter.com/x42x5a/status/1108443839013052416

/le.arc.bot
/le.arm.bot
/le.arm4.bot
/le.arm5.bot
/le.arm6.bot
/le.arm7.bot
/le.m68k.bot
/le.mips.bot
/le.mpsl.bot
/le.ppc.bot
/le.sh4.bot
/le.spc.bot
/le.x86.bot
/le.x64.bot

# Reference: https://twitter.com/bad_packets/status/1107183598484897792

vampwrotesatori.cf

# Reference: https://twitter.com/bad_packets/status/1108853601168850944

/ARES1.sh
/tmp.arc
/tmp.arm
/tmp.arm4
/tmp.armv4l
/tmp.arm5
/tmp.arm5n
/tmp.arm6
/tmp.arm7
/tmp.dbg
/tmp.i586
/tmp.i686
/tmp.m68k
/tmp.mips
/tmp.mips64
/tmp.mpsl
/tmp.ppc
/tmp.sh4
/tmp.spc
/tmp.sparc
/tmp.x32
/tmp.x64
/tmp.x86
/tmp.x86_64

# Reference: https://twitter.com/bad_packets/status/1109720375951151104

/sbot.arc
/sbot.arm
/sbot.arm4
/sbot.armv4l
/sbot.arm5
/sbot.arm5n
/sbot.arm6
/sbot.arm7
/sbot.dbg
/sbot.i586
/sbot.i686
/sbot.m68k
/sbot.mips
/sbot.mips64
/sbot.mpsl
/sbot.ppc
/sbot.sh4
/sbot.spc
/sbot.sparc
/sbot.x32
/sbot.x64
/sbot.x86
/sbot.x86_64

# Reference: https://twitter.com/malwaremustd1e/status/1074213727791017985

senpai.site
/miori.arc
/miori.arm
/miori.arm4
/miori.armv4l
/miori.arm5
/miori.arm5n
/miori.arm6
/miori.arm7
/miori.dbg
/miori.i586
/miori.i686
/miori.m68k
/miori.mips
/miori.mips64
/miori.mpsl
/miori.ppc
/miori.sh4
/miori.spc
/miori.sparc
/miori.x32
/miori.x64
/miori.x86
/miori.x86_64

# Reference: https://twitter.com/0xrb/status/1107900627693125632

/8UsA1.sh
/bot.arc
/bot.arm
/bot.arm4
/bot.armv4l
/bot.arm5
/bot.arm5n
/bot.arm6
/bot.arm7
/bot.dbg
/bot.i586
/bot.i686
/bot.m68k
/bot.mips
/bot.mips64
/bot.mpsl
/bot.ppc
/bot.sh4
/bot.spc
/bot.sparc
/bot.x32
/bot.x64
/bot.x86
/bot.x86_64

# Reference: https://twitter.com/0xrb/status/1106913710323331074

/messiahbins.sh

# Reference: https://twitter.com/0xrb/status/1108630159635156992

/Nazi.arc
/Nazi.arm
/Nazi.arm4
/Nazi.armv4l
/Nazi.arm5
/Nazi.arm5n
/Nazi.arm6
/Nazi.arm7
/Nazi.dbg
/Nazi.i586
/Nazi.i686
/Nazi.m68k
/Nazi.mips
/Nazi.mips64
/Nazi.mpsl
/Nazi.ppc
/Nazi.sh4
/Nazi.spc
/Nazi.sparc
/Nazi.x32
/Nazi.x64
/Nazi.x86
/Nazi.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1107773193731756032
# Reference: https://twitter.com/bad_packets/status/1134692367133335553

62.210.207.229:89
/owari.arc
/owari.arm
/owari.arm4
/owari.armv4l
/owari.arm5
/owari.arm5n
/owari.arm6
/owari.arm7
/owari.dbg
/owari.i586
/owari.i686
/owari.m68k
/owari.mips
/owari.mips64
/owari.mpsl
/owari.ppc
/owari.root
/owari.root32
/owari.sh4
/owari.spc
/owari.sparc
/owari.x32
/owari.x64
/owari.x86
/owari.x86_64
/netis

# Reference: https://twitter.com/0xrb/status/1107897430048034816

/air.arc
/air.arm
/air.arm4
/air.armv4l
/air.arm5
/air.arm5n
/air.arm6
/air.arm7
/air.dbg
/air.i586
/air.i686
/air.m68k
/air.mips
/air.mips64
/air.mpsl
/air.ppc
/air.sh4
/air.spc
/air.sparc
/air.x32
/air.x64
/air.x86
/air.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1107772353289682944

/September.arc
/September.arm
/September.arm4
/September.armv4l
/September.arm5
/September.arm5n
/September.arm6
/September.arm7
/September.dbg
/September.i586
/September.i686
/September.m68k
/September.mips
/September.mips64
/September.mpsl
/September.ppc
/September.sh4
/September.spc
/September.sparc
/September.x32
/September.x64
/September.x86
/September.x86_64

# Reference: https://twitter.com/0xrb/status/1107592182100189184

/Pemex1.sh
/loligang.arc
/loligang.arm
/loligang.arm4
/loligang.armv4l
/loligang.arm5
/loligang.arm5n
/loligang.arm6
/loligang.arm7
/loligang.dbg
/loligang.i586
/loligang.i686
/loligang.m68k
/loligang.mips
/loligang.mips64
/loligang.mpsl
/loligang.ppc
/loligang.sh4
/loligang.spc
/loligang.sparc
/loligang.x32
/loligang.x64
/loligang.x86
/loligang.x86_64

# Reference: https://twitter.com/0xrb/status/1106796078450593798

/hdawd.arc
/hdawd.arm
/hdawd.arm4
/hdawd.armv4l
/hdawd.arm5
/hdawd.arm5n
/hdawd.arm6
/hdawd.arm7
/hdawd.dbg
/hdawd.i586
/hdawd.i686
/hdawd.m68k
/hdawd.mips
/hdawd.mips64
/hdawd.mpsl
/hdawd.ppc
/hdawd.sh4
/hdawd.spc
/hdawd.sparc
/hdawd.x32
/hdawd.x64
/hdawd.x86
/hdawd.x86_64

# Reference: https://twitter.com/ulexec/status/1065155269028708352

/adb.arc
/adb.arm
/adb.arm4
/adb.armv4l
/adb.arm5
/adb.arm5n
/adb.arm6
/adb.arm7
/adb.dbg
/adb.i586
/adb.i686
/adb.m68k
/adb.mips
/adb.mips64
/adb.mpsl
/adb.ppc
/adb.sh4
/adb.spc
/adb.sparc
/adb.x32
/adb.x64
/adb.x86
/adb.x86_64

# Reference: https://twitter.com/ulexec/status/1063798453799653376

/dank.arc
/dank.arm
/dank.arm4
/dank.armv4l
/dank.arm5
/dank.arm5n
/dank.arm6
/dank.arm7
/dank.dbg
/dank.i586
/dank.i686
/dank.m68k
/dank.mips
/dank.mips64
/dank.mpsl
/dank.ppc
/dank.sh4
/dank.spc
/dank.sparc
/dank.x32
/dank.x64
/dank.x86
/dank.x86_64

# Reference: https://twitter.com/executemalware/status/1006957509528162304
# Reference: https://twitter.com/0xrb/status/1093420116639768576

/gay.arc
/gay.arm
/gay.arm4
/gay.arm4tl
/gay.armv4l
/gay.arm5
/gay.arm5n
/gay.arm6
/gay.arm7
/gay.dbg
/gay.i586
/gay.i686
/gay.m68k
/gay.mips
/gay.mips64
/gay.mpsl
/gay.ppc
/gay.sh4
/gay.spc
/gay.sparc
/gay.x32
/gay.x64
/gay.x86
/gay.x86_64

# Reference: https://twitter.com/bad_packets/status/1110025683093196801

/k1ra1.arc
/k1ra1.arm
/k1ra1.arm4
/k1ra1.armv4l
/k1ra1.arm5
/k1ra1.arm5n
/k1ra1.arm6
/k1ra1.arm7
/k1ra1.dbg
/k1ra1.i586
/k1ra1.i686
/k1ra1.m68k
/k1ra1.mips
/k1ra1.mips64
/k1ra1.mpsl
/k1ra1.ppc
/k1ra1.sh4
/k1ra1.spc
/k1ra1.sparc
/k1ra1.x32
/k1ra1.x64
/k1ra1.x86
/k1ra1.x86_64
/kirai.arc
/kirai.arm
/kirai.arm4
/kirai.armv4l
/kirai.arm5
/kirai.arm5n
/kirai.arm6
/kirai.arm7
/kirai.dbg
/kirai.i586
/kirai.i686
/kirai.m68k
/kirai.mips
/kirai.mips64
/kirai.mpsl
/kirai.ppc
/kirai.sh4
/kirai.spc
/kirai.sparc
/kirai.x32
/kirai.x64
/kirai.x86
/kirai.x86_64

# Reference: https://twitter.com/bad_packets/status/1111524886919307264

/unstable.arc
/unstable.arm
/unstable.arm4
/unstable.armv4l
/unstable.arm5
/unstable.arm5n
/unstable.arm6
/unstable.arm7
/unstable.dbg
/unstable.i586
/unstable.i686
/unstable.m68k
/unstable.mips
/unstable.mips64
/unstable.mpsl
/unstable.ppc
/unstable.sh4
/unstable.spc
/unstable.sparc
/unstable.x32
/unstable.x64
/unstable.x86
/unstable.x86_64

# Reference: https://twitter.com/bad_packets/status/1111777543869194240

/Trickle.arc
/Trickle.arm
/Trickle.arm4
/Trickle.armv4l
/Trickle.arm5
/Trickle.arm5n
/Trickle.arm6
/Trickle.arm7
/Trickle.dbg
/Trickle.i586
/Trickle.i686
/Trickle.m68k
/Trickle.mips
/Trickle.mips64
/Trickle.mpsl
/Trickle.ppc
/Trickle.sh4
/Trickle.spc
/Trickle.sparc
/Trickle.x32
/Trickle.x64
/Trickle.x86
/Trickle.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1089187830369181696

/honchoz.arc
/honchoz.arm
/honchoz.arm4
/honchoz.armv4l
/honchoz.arm5
/honchoz.arm5n
/honchoz.arm6
/honchoz.arm7
/honchoz.dbg
/honchoz.i586
/honchoz.i686
/honchoz.m68k
/honchoz.mips
/honchoz.mips64
/honchoz.mpsl
/honchoz.ppc
/honchoz.sh4
/honchoz.spc
/honchoz.sparc
/honchoz.x32
/honchoz.x64
/honchoz.x86
/honchoz.x86_64
/headhoncho.arc
/headhoncho.arm
/headhoncho.arm4
/headhoncho.armv4l
/headhoncho.arm5
/headhoncho.arm5n
/headhoncho.arm6
/headhoncho.arm7
/headhoncho.dbg
/headhoncho.i586
/headhoncho.i686
/headhoncho.m68k
/headhoncho.mips
/headhoncho.mips64
/headhoncho.mpsl
/headhoncho.ppc
/headhoncho.sh4
/headhoncho.spc
/headhoncho.sparc
/headhoncho.x32
/headhoncho.x64
/headhoncho.x86
/headhoncho.x86_64
/dwabniduawdbwad/

# Reference: https://twitter.com/SugitaMuchi/status/1087128158149591040

/beefy
/qlu.arc
/qlu.arm
/qlu.arm4
/qlu.armv4l
/qlu.arm5
/qlu.arm5n
/qlu.arm6
/qlu.arm7
/qlu.dbg
/qlu.i586
/qlu.i686
/qlu.m68k
/qlu.mips
/qlu.mips64
/qlu.mpsl
/qlu.ppc
/qlu.sh4
/qlu.spc
/qlu.sparc
/qlu.x32
/qlu.x64
/qlu.x86
/qlu.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1087113481671692288

/Oasis.arc
/Oasis.arm
/Oasis.arm4
/Oasis.armv4l
/Oasis.arm5
/Oasis.arm5n
/Oasis.arm6
/Oasis.arm7
/Oasis.dbg
/Oasis.i586
/Oasis.i686
/Oasis.m68k
/Oasis.mips
/Oasis.mips64
/Oasis.mpsl
/Oasis.ppc
/Oasis.sh4
/Oasis.spc
/Oasis.sparc
/Oasis.x32
/Oasis.x64
/Oasis.x86
/Oasis.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1087112232398290945

/hades.arc
/hades.arm
/hades.arm4
/hades.armv4l
/hades.arm5
/hades.arm5n
/hades.arm6
/hades.arm7
/hades.dbg
/hades.i586
/hades.i686
/hades.m68k
/hades.mips
/hades.mips64
/hades.mpsl
/hades.ppc
/hades.sh4
/hades.spc
/hades.sparc
/hades.x32
/hades.x64
/hades.x86
/hades.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1084938640482914304
/a.arc
/a.arm
/a.arm4
/a.armv4l
/a.arm5
/a.arm5n
/a.arm6
/a.arm7
/a.dbg
/a.i586
/a.i686
/a.m68k
/a.mips
/a.mips64
/a.mpsl
/a.ppc
/a.sh4
/a.spc
/a.sparc
/a.x32
/a.x64
/a.x86
/a.x86_64
/furasshu.arc
/furasshu.arm
/furasshu.arm4
/furasshu.armv4l
/furasshu.arm5
/furasshu.arm5n
/furasshu.arm6
/furasshu.arm7
/furasshu.dbg
/furasshu.i586
/furasshu.i686
/furasshu.kill
/furasshu.m68k
/furasshu.mips
/furasshu.mips64
/furasshu.mpsl
/furasshu.ppc
/furasshu.sh4
/furasshu.spc
/furasshu.sparc
/furasshu.x32
/furasshu.x64
/furasshu.x86
/furasshu.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1084936992268283904

/Mushi.arc
/Mushi.arm
/Mushi.arm4
/Mushi.armv4l
/Mushi.arm5
/Mushi.arm5n
/Mushi.arm6
/Mushi.arm7
/Mushi.dbg
/Mushi.i586
/Mushi.i686
/Mushi.m68k
/Mushi.mips
/Mushi.mips64
/Mushi.mpsl
/Mushi.ppc
/Mushi.sh4
/Mushi.spc
/Mushi.sparc
/Mushi.x32
/Mushi.x64
/Mushi.x86
/Mushi.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083983657684021248

/Damien.arc
/Damien.arm
/Damien.arm4
/Damien.armv4l
/Damien.arm5
/Damien.arm5n
/Damien.arm6
/Damien.arm7
/Damien.dbg
/Damien.i586
/Damien.i686
/Damien.m68k
/Damien.mips
/Damien.mips64
/Damien.mpsl
/Damien.ppc
/Damien.sh4
/Damien.spc
/Damien.sparc
/Damien.x32
/Damien.x64
/Damien.x86
/Damien.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1076706974027341824

/arc.fgt
/arm.fgt
/arm4.fgt
/armv4l.fgt
/arm5.fgt
/arm5n.fgt
/arm6.fgt
/arm7.fgt
/dbg.fgt
/i586.fgt
/i686.fgt
/m68k.fgt
/mips.fgt
/mips64.fgt
/mpsl.fgt
/ppc.fgt
/sh4.fgt
/spc.fgt
/sparc.fgt
/x32.fgt
/x64.fgt
/x86.fgt
/x86_64.fgt
/fucking.arc
/fucking.arm
/fucking.arm4
/fucking.armv4l
/fucking.arm5
/fucking.arm5n
/fucking.arm6
/fucking.arm7
/fucking.dbg
/fucking.i586
/fucking.i686
/fucking.m68k
/fucking.mips
/fucking.mips64
/fucking.mpsl
/fucking.ppc
/fucking.sh4
/fucking.spc
/fucking.sparc
/fucking.x32
/fucking.x64
/fucking.x86
/fucking.x86_64
/x86hua

# Reference: https://twitter.com/SugitaMuchi/status/1076275952923987968

/Shine.arc
/Shine.arm
/Shine.arm4
/Shine.armv4l
/Shine.arm5
/Shine.arm5n
/Shine.arm6
/Shine.arm7
/Shine.dbg
/Shine.i586
/Shine.i686
/Shine.m68k
/Shine.mips
/Shine.mips64
/Shine.mpsl
/Shine.ppc
/Shine.sh4
/Shine.spc
/Shine.sparc
/Shine.x32
/Shine.x64
/Shine.x86
/Shine.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1076060597362380800

/kyton.arc
/kyton.arm
/kyton.arm4
/kyton.armv4l
/kyton.arm5
/kyton.arm5n
/kyton.arm6
/kyton.arm7
/kyton.dbg
/kyton.i586
/kyton.i686
/kyton.m68k
/kyton.mips
/kyton.mips64
/kyton.mpsl
/kyton.ppc
/kyton.sh4
/kyton.spc
/kyton.sparc
/kyton.x32
/kyton.x64
/kyton.x86
/kyton.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1072979237445849090

/TrioSec.arc
/TrioSec.arm
/TrioSec.arm4
/TrioSec.armv4l
/TrioSec.arm5
/TrioSec.arm5n
/TrioSec.arm6
/TrioSec.arm7
/TrioSec.dbg
/TrioSec.i586
/TrioSec.i686
/TrioSec.m68k
/TrioSec.mips
/TrioSec.mips64
/TrioSec.mpsl
/TrioSec.ppc
/TrioSec.sh4
/TrioSec.spc
/TrioSec.sparc
/TrioSec.x32
/TrioSec.x64
/TrioSec.x86
/TrioSec.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1072663518900563969

/cloudi.arc
/cloudi.arm
/cloudi.arm4
/cloudi.armv4l
/cloudi.arm5
/cloudi.arm5n
/cloudi.arm6
/cloudi.arm7
/cloudi.dbg
/cloudi.i586
/cloudi.i686
/cloudi.m68k
/cloudi.mips
/cloudi.mips64
/cloudi.mpsl
/cloudi.ppc
/cloudi.sh4
/cloudi.spc
/cloudi.sparc
/cloudi.x32
/cloudi.x64
/cloudi.x86
/cloudi.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1071904311871889413

/snowy.arc
/snowy.arm
/snowy.arm4
/snowy.armv4l
/snowy.arm5
/snowy.arm5n
/snowy.arm6
/snowy.arm7
/snowy.dbg
/snowy.i586
/snowy.i686
/snowy.m68k
/snowy.mips
/snowy.mips64
/snowy.mpsl
/snowy.ppc
/snowy.sh4
/snowy.spc
/snowy.sparc
/snowy.x32
/snowy.x64
/snowy.x86
/snowy.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1071635025018286080

/polo.arc
/polo.arm
/polo.arm4
/polo.armv4l
/polo.arm5
/polo.arm5n
/polo.arm6
/polo.arm7
/polo.dbg
/polo.i586
/polo.i686
/polo.m68k
/polo.mips
/polo.mips64
/polo.mpsl
/polo.ppc
/polo.sh4
/polo.spc
/polo.sparc
/polo.x32
/polo.x64
/polo.x86
/polo.x86_64
/arc.f
/arm.f
/arm4.f
/armv4l.f
/arm5.f
/arm5n.f
/arm6.f
/arm7.f
/dbg.f
/i586.f
/i686.f
/m68k.f
/mips.f
/mips64.f
/mpsl.f
/ppc.f
/sh4.f
/spc.f
/sparc.f
/x32.f
/x64.f
/x86_64.f

# Reference: https://twitter.com/SugitaMuchi/status/1066849595425079296

/hentai.arc
/hentai.arm
/hentai.arm4
/hentai.armv4l
/hentai.arm5
/hentai.arm5n
/hentai.arm6
/hentai.arm7
/hentai.dbg
/hentai.i586
/hentai.i686
/hentai.m68k
/hentai.mips
/hentai.mips64
/hentai.mpsl
/hentai.ppc
/hentai.sh4
/hentai.spc
/hentai.sparc
/hentai.x32
/hentai.x64
/hentai.x86
/hentai.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1067550048538386432

/PhantomATM.arc
/PhantomATM.arm
/PhantomATM.arm4
/PhantomATM.armv4l
/PhantomATM.arm5
/PhantomATM.arm5n
/PhantomATM.arm6
/PhantomATM.arm7
/PhantomATM.dbg
/PhantomATM.i586
/PhantomATM.i686
/PhantomATM.m68k
/PhantomATM.mips
/PhantomATM.mips64
/PhantomATM.mpsl
/PhantomATM.ppc
/PhantomATM.sh4
/PhantomATM.spc
/PhantomATM.sparc
/PhantomATM.x32
/PhantomATM.x64
/PhantomATM.x86
/PhantomATM.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1067926544021020673

/paimon.arc
/paimon.arm
/paimon.arm4
/paimon.armv4l
/paimon.arm5
/paimon.arm5n
/paimon.arm6
/paimon.arm7
/paimon.dbg
/paimon.i586
/paimon.i686
/paimon.m68k
/paimon.mips
/paimon.mips64
/paimon.mpsl
/paimon.ppc
/paimon.sh4
/paimon.spc
/paimon.sparc
/paimon.x32
/paimon.x64
/paimon.x86
/paimon.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1068489061357117440

/n.arc
/n.arm
/n.arm4
/n.armv4l
/n.arm5
/n.arm5n
/n.arm6
/n.arm7
/n.dbg
/n.i586
/n.i686
/n.m68k
/n.mips
/n.mips64
/n.mpsl
/n.ppc
/n.sh4
/n.spc
/n.sparc
/n.x32
/n.x64
/n.x86
/n.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1068648068294168576
# Reference: https://twitter.com/0xrb/status/1098108996089565184

/shaolin.arc
/shaolin.arm
/shaolin.arm4
/shaolin.armv4l
/shaolin.arm5
/shaolin.arm5n
/shaolin.arm6
/shaolin.arm7
/shaolin.dbg
/shaolin.i586
/shaolin.i686
/shaolin.kill
/shaolin.m68k
/shaolin.mips
/shaolin.mips64
/shaolin.mpsl
/shaolin.ppc
/shaolin.sh4
/shaolin.spc
/shaolin.sparc
/shaolin.x32
/shaolin.x64
/shaolin.x86
/shaolin.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1068649952572669952

/kakeii.arc
/kakeii.arm
/kakeii.arm4
/kakeii.armv4l
/kakeii.arm5
/kakeii.arm5n
/kakeii.arm6
/kakeii.arm7
/kakeii.dbg
/kakeii.i586
/kakeii.i686
/kakeii.m68k
/kakeii.mips
/kakeii.mips64
/kakeii.mpsl
/kakeii.ppc
/kakeii.sh4
/kakeii.spc
/kakeii.sparc
/kakeii.x32
/kakeii.x64
/kakeii.x86
/kakeii.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1069066626195120128

/DEMONS.arc
/DEMONS.arm
/DEMONS.arm4
/DEMONS.armv4l
/DEMONS.arm5
/DEMONS.arm5n
/DEMONS.arm6
/DEMONS.arm7
/DEMONS.dbg
/DEMONS.i586
/DEMONS.i686
/DEMONS.m68k
/DEMONS.mips
/DEMONS.mips64
/DEMONS.mpsl
/DEMONS.ppc
/DEMONS.sh4
/DEMONS.spc
/DEMONS.sparc
/DEMONS.x32
/DEMONS.x64
/DEMONS.x86
/DEMONS.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1069792879818620928

/masuta.arc
/masuta.arm
/masuta.arm4
/masuta.armv4l
/masuta.arm5
/masuta.arm5n
/masuta.arm6
/masuta.arm7
/masuta.dbg
/masuta.i586
/masuta.i686
/masuta.m68k
/masuta.mips
/masuta.mips64
/masuta.mpsl
/masuta.ppc
/masuta.sh4
/masuta.spc
/masuta.sparc
/masuta.x32
/masuta.x64
/masuta.x86
/masuta.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1069794101405507585

/exploit.arc
/exploit.arm
/exploit.arm4
/exploit.armv4l
/exploit.arm5
/exploit.arm5n
/exploit.arm6
/exploit.arm7
/exploit.dbg
/exploit.i586
/exploit.i686
/exploit.m68k
/exploit.mips
/exploit.mips64
/exploit.mpsl
/exploit.ppc
/exploit.sh4
/exploit.spc
/exploit.sparc
/exploit.x32
/exploit.x64
/exploit.x86
/exploit.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1070292886661488641
# Reference: https://twitter.com/bad_packets/status/1164293462943862785

/arc.Tsunami
/arm.Tsunami
/arm4.Tsunami
/arm4l.Tsunami
/arm4t.Tsunami
/arm4tl.Tsunami
/arm4tll.Tsunami
/armv4l.Tsunami
/arm5.Tsunami
/arm5n.Tsunami
/arm6.Tsunami
/arm64.Tsunami
/arm7.Tsunami
/dbg.Tsunami
/i4.Tsunami
/i486.Tsunami
/i586.Tsunami
/i686.Tsunami
/kill.Tsunami
/m68k.Tsunami
/mips.Tsunami
/mips64.Tsunami
/mpsl.Tsunami
/mipsel.Tsunami
/ppc.Tsunami
/ppc2.Tsunami
/ppc440.Tsunami
/powerppc.Tsunami
/root.Tsunami
/root32.Tsunami
/sh4.Tsunami
/ssh4.Tsunami
/spc.Tsunami
/sparc.Tsunami
/x32.Tsunami
/x64.Tsunami
/x86.Tsunami
/x86_32.Tsunami
/x86_64.Tsunami

# Reference: https://twitter.com/SugitaMuchi/status/1070817589226434560

/kato.arc
/kato.arm
/kato.arm4
/kato.armv4l
/kato.arm5
/kato.arm5n
/kato.arm6
/kato.arm7
/kato.dbg
/kato.i586
/kato.i686
/kato.m68k
/kato.mips
/kato.mips64
/kato.mpsl
/kato.ppc
/kato.sh4
/kato.spc
/kato.sparc
/kato.x32
/kato.x64
/kato.x86
/kato.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1071375809842036737

/Horizon.arc
/Horizon.arm
/Horizon.arm4
/Horizon.armv4l
/Horizon.arm5
/Horizon.arm5n
/Horizon.arm6
/Horizon.arm7
/Horizon.dbg
/Horizon.i586
/Horizon.i686
/Horizon.m68k
/Horizon.mips
/Horizon.mips64
/Horizon.mpsl
/Horizon.ppc
/Horizon.sh4
/Horizon.spc
/Horizon.sparc
/Horizon.x32
/Horizon.x64
/Horizon.x86
/Horizon.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077015447281647617

/Cobra.arc
/Cobra.arm
/Cobra.arm4
/Cobra.armv4l
/Cobra.arm5
/Cobra.arm5n
/Cobra.arm6
/Cobra.arm7
/Cobra.dbg
/Cobra.i586
/Cobra.i686
/Cobra.m68k
/Cobra.mips
/Cobra.mips64
/Cobra.mpsl
/Cobra.ppc
/Cobra.sh4
/Cobra.spc
/Cobra.sparc
/Cobra.x32
/Cobra.x64
/Cobra.x86
/Cobra.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077098773703061504

/Azuja.arc
/Azuja.arm
/Azuja.arm4
/Azuja.armv4l
/Azuja.arm5
/Azuja.arm5n
/Azuja.arm6
/Azuja.arm7
/Azuja.dbg
/Azuja.i586
/Azuja.i686
/Azuja.m68k
/Azuja.mips
/Azuja.mips64
/Azuja.mpsl
/Azuja.ppc
/Azuja.sh4
/Azuja.spc
/Azuja.sparc
/Azuja.x32
/Azuja.x64
/Azuja.x86
/Azuja.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077692159535411203

/Lanisha.arc
/Lanisha.arm
/Lanisha.arm4
/Lanisha.armv4l
/Lanisha.arm5
/Lanisha.arm5n
/Lanisha.arm6
/Lanisha.arm7
/Lanisha.dbg
/Lanisha.i586
/Lanisha.i686
/Lanisha.m68k
/Lanisha.mips
/Lanisha.mips64
/Lanisha.mpsl
/Lanisha.ppc
/Lanisha.sh4
/Lanisha.spc
/Lanisha.sparc
/Lanisha.x32
/Lanisha.x64
/Lanisha.x86
/Lanisha.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1077695005873954816

/Karu.arc
/Karu.arm
/Karu.arm4
/Karu.armv4l
/Karu.arm5
/Karu.arm5n
/Karu.arm6
/Karu.arm7
/Karu.dbg
/Karu.i586
/Karu.i686
/Karu.m68k
/Karu.mips
/Karu.mips64
/Karu.mpsl
/Karu.ppc
/Karu.sh4
/Karu.spc
/Karu.sparc
/Karu.x32
/Karu.x64
/Karu.x86
/Karu.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1078213601217863681

/kazen.arc
/kazen.arm
/kazen.arm4
/kazen.armv4l
/kazen.arm5
/kazen.arm5n
/kazen.arm6
/kazen.arm7
/kazen.dbg
/kazen.i586
/kazen.i686
/kazen.m68k
/kazen.mips
/kazen.mips64
/kazen.mpsl
/kazen.ppc
/kazen.sh4
/kazen.spc
/kazen.sparc
/kazen.x32
/kazen.x64
/kazen.x86
/kazen.x86_64
/s-kazen.arc
/s-kazen.arm
/s-kazen.arm4
/s-kazen.armv4l
/s-kazen.arm5
/s-kazen.arm5n
/s-kazen.arm6
/s-kazen.arm7
/s-kazen.dbg
/s-kazen.i586
/s-kazen.i686
/s-kazen.m68k
/s-kazen.mips
/s-kazen.mips64
/s-kazen.mpsl
/s-kazen.ppc
/s-kazen.sh4
/s-kazen.spc
/s-kazen.sparc
/s-kazen.x32
/s-kazen.x64
/s-kazen.x86
/s-kazen.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1081559402082009092

/301.arc
/301.arm
/301.arm4
/301.armv4l
/301.arm5
/301.arm5n
/301.arm6
/301.arm7
/301.dbg
/301.i586
/301.i686
/301.m68k
/301.mips
/301.mips64
/301.mpsl
/301.ppc
/301.sh4
/301.spc
/301.sparc
/301.x32
/301.x64
/301.x86
/301.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1081779020037902337

/Solar.arc
/Solar.arm
/Solar.arm4
/Solar.armv4l
/Solar.arm5
/Solar.arm5n
/Solar.arm6
/Solar.arm7
/Solar.dbg
/Solar.i586
/Solar.i686
/Solar.m68k
/Solar.mips
/Solar.mips64
/Solar.mpsl
/Solar.ppc
/Solar.sh4
/Solar.spc
/Solar.sparc
/Solar.x32
/Solar.x64
/Solar.x86
/Solar.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1081788732154437632

/penthouse.arc
/penthouse.arm
/penthouse.arm4
/penthouse.armv4l
/penthouse.arm5
/penthouse.arm5n
/penthouse.arm6
/penthouse.arm7
/penthouse.dbg
/penthouse.i586
/penthouse.i686
/penthouse.m68k
/penthouse.mips
/penthouse.mips64
/penthouse.mpsl
/penthouse.ppc
/penthouse.sh4
/penthouse.spc
/penthouse.sparc
/penthouse.x32
/penthouse.x64
/penthouse.x86
/penthouse.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1082403079230709761

/ptype.arc
/ptype.arm
/ptype.arm4
/ptype.armv4l
/ptype.arm5
/ptype.arm5n
/ptype.arm6
/ptype.arm7
/ptype.dbg
/ptype.i586
/ptype.i686
/ptype.m68k
/ptype.mips
/ptype.mips64
/ptype.mpsl
/ptype.ppc
/ptype.sh4
/ptype.spc
/ptype.sparc
/ptype.x32
/ptype.x64
/ptype.x86
/ptype.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083487810298929153

/yakuza.arc
/yakuza.arm
/yakuza.arm4
/yakuza.armv4l
/yakuza.arm5
/yakuza.arm5n
/yakuza.arm6
/yakuza.arm7
/yakuza.dbg
/yakuza.i586
/yakuza.i686
/yakuza.m68k
/yakuza.mips
/yakuza.mips64
/yakuza.mpsl
/yakuza.ppc
/yakuza.sh4
/yakuza.spc
/yakuza.sparc
/yakuza.x32
/yakuza.x64
/yakuza.x86
/yakuza.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083489293186752512
# Reference: https://twitter.com/VessOnSecurity/status/1138765917528166401

/Freya.arc
/Freya.arm
/Freya.arm4
/Freya.armv4l
/Freya.arm5
/Freya.arm5n
/Freya.arm6
/Freya.arm7
/Freya.dbg
/Freya.i586
/Freya.i686
/Freya.m68k
/Freya.mips
/Freya.mips64
/Freya.mpsl
/Freya.ppc
/Freya.sh4
/Freya.spc
/Freya.sparc
/Freya.x32
/Freya.x64
/Freya.x86
/Freya.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1083490463749832706

/aisha.arc
/aisha.arm
/aisha.arm4
/aisha.armv4l
/aisha.arm5
/aisha.arm5n
/aisha.arm6
/aisha.arm7
/aisha.dbg
/aisha.i586
/aisha.i686
/aisha.m68k
/aisha.mips
/aisha.mips64
/aisha.mpsl
/aisha.ppc
/aisha.sh4
/aisha.spc
/aisha.sparc
/aisha.x32
/aisha.x64
/aisha.x86
/aisha.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1090839291998003202

/kowei.arc
/kowei.arm
/kowei.arm4
/kowei.armv4l
/kowei.arm5
/kowei.arm5n
/kowei.arm6
/kowei.arm7
/kowei.dbg
/kowei.i586
/kowei.i686
/kowei.m68k
/kowei.mips
/kowei.mips64
/kowei.mpsl
/kowei.ppc
/kowei.sh4
/kowei.spc
/kowei.sparc
/kowei.x32
/kowei.x64
/kowei.x86
/kowei.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1091096902764916736

/Cakle.arc
/Cakle.arm
/Cakle.arm4
/Cakle.armv4l
/Cakle.arm5
/Cakle.arm5n
/Cakle.arm6
/Cakle.arm7
/Cakle.dbg
/Cakle.i586
/Cakle.i686
/Cakle.m68k
/Cakle.mips
/Cakle.mips64
/Cakle.mpsl
/Cakle.ppc
/Cakle.sh4
/Cakle.spc
/Cakle.sparc
/Cakle.x32
/Cakle.x64
/Cakle.x86
/Cakle.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1091518821578432512

/blackc.arc
/blackc.arm
/blackc.arm4
/blackc.armv4l
/blackc.arm5
/blackc.arm5n
/blackc.arm6
/blackc.arm7
/blackc.dbg
/blackc.i586
/blackc.i686
/blackc.m68k
/blackc.mips
/blackc.mips64
/blackc.mpsl
/blackc.ppc
/blackc.sh4
/blackc.spc
/blackc.sparc
/blackc.x32
/blackc.x64
/blackc.x86

# Reference: https://twitter.com/SugitaMuchi/status/1091978407691223040

/Shatter.arc
/Shatter.arm
/Shatter.arm4
/Shatter.armv4l
/Shatter.arm5
/Shatter.arm5n
/Shatter.arm6
/Shatter.arm7
/Shatter.dbg
/Shatter.i586
/Shatter.i686
/Shatter.m68k
/Shatter.mips
/Shatter.mips64
/Shatter.mpsl
/Shatter.ppc
/Shatter.sh4
/Shatter.spc
/Shatter.sparc
/Shatter.x32
/Shatter.x64
/Shatter.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104522236646481920

/Slamed.arc
/Slamed.arm
/Slamed.arm4
/Slamed.armv4l
/Slamed.arm5
/Slamed.arm5n
/Slamed.arm6
/Slamed.arm7
/Slamed.dbg
/Slamed.i586
/Slamed.i686
/Slamed.m68k
/Slamed.mips
/Slamed.mips64
/Slamed.mpsl
/Slamed.ppc
/Slamed.sh4
/Slamed.spc
/Slamed.sparc
/Slamed.x32
/Slamed.x64
/Slamed.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104524755263139840

/orenji.arc
/orenji.arm
/orenji.arm4
/orenji.arm4l
/orenji.arm4t
/orenji.armv4l
/orenji.arm5
/orenji.arm5n
/orenji.arm6
/orenji.arm7
/orenji.dbg
/orenji.i486
/orenji.i586
/orenji.i686
/orenji.m68k
/orenji.mips
/orenji.mips64
/orenji.mpsl
/orenji.mipsel
/orenji.ppc
/orenji.ppc440
/orenji.root
/orenji.sh
/orenji.sh4
/orenji.spc
/orenji.sparc
/orenji.x32
/orenji.x64
/orenji.x86
/orenji.x86_32
/orenji.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1104552453100331013

/Ares.arc
/Ares.arm
/Ares.arm4
/Ares.armv4l
/Ares.arm5
/Ares.arm5n
/Ares.arm6
/Ares.arm7
/Ares.dbg
/Ares.i586
/Ares.i686
/Ares.m68k
/Ares.mips
/Ares.mips64
/Ares.mpsl
/Ares.ppc
/Ares.sh4
/Ares.spc
/Ares.sparc
/Ares.x32
/Ares.x64
/Ares.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104633777702092800

/onryo.arc
/onryo.arm
/onryo.arm4
/onryo.armv4l
/onryo.arm5
/onryo.arm5n
/onryo.arm6
/onryo.arm7
/onryo.dbg
/onryo.i586
/onryo.i686
/onryo.m68k
/onryo.mips
/onryo.mips64
/onryo.mpsl
/onryo.ppc
/onryo.sh4
/onryo.spc
/onryo.sparc
/onryo.x32
/onryo.x64
/onryo.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104871959072976897

/Eros.arc
/Eros.arm
/Eros.arm4
/Eros.armv4l
/Eros.arm5
/Eros.arm5n
/Eros.arm6
/Eros.arm7
/Eros.dbg
/Eros.i586
/Eros.i686
/Eros.m68k
/Eros.mips
/Eros.mips64
/Eros.mpsl
/Eros.ppc
/Eros.sh4
/Eros.spc
/Eros.sparc
/Eros.x32
/Eros.x64
/Eros.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104914512900050944

/DENIAL.arc
/DENIAL.arm
/DENIAL.arm4
/DENIAL.armv4l
/DENIAL.arm5
/DENIAL.arm5n
/DENIAL.arm6
/DENIAL.arm7
/DENIAL.dbg
/DENIAL.i586
/DENIAL.i686
/DENIAL.m68k
/DENIAL.mips
/DENIAL.mips64
/DENIAL.mpsl
/DENIAL.ppc
/DENIAL.sh4
/DENIAL.spc
/DENIAL.sparc
/DENIAL.x32
/DENIAL.x64
/DENIAL.x86

# Reference: https://twitter.com/SugitaMuchi/status/1104915308765097985

/arc.bot
/arm.bot
/arm4.bot
/armv4l.bot
/arm5.bot
/arm5n.bot
/arm6.bot
/arm7.bot
/dbg.bot
/i586.bot
/i686.bot
/m68k.bot
/mips.bot
/mips64.bot
/mpsl.bot
/ppc.bot
/sh4.bot
/spc.bot
/sparc.bot
/x32.bot
/x64.bot
/x86_64.bot

# Reference: https://twitter.com/SugitaMuchi/status/1106194795876147200

/Khaos.arc
/Khaos.arm
/Khaos.arm4
/Khaos.armv4l
/Khaos.arm5
/Khaos.arm5n
/Khaos.arm6
/Khaos.arm7
/Khaos.dbg
/Khaos.i586
/Khaos.i686
/Khaos.m68k
/Khaos.mips
/Khaos.mips64
/Khaos.mpsl
/Khaos.ppc
/Khaos.sh4
/Khaos.spc
/Khaos.sparc
/Khaos.x32
/Khaos.x64
/Khaos.x86

# Reference: https://twitter.com/1IoTa3/status/1089402171689484289

/jirenv2.sh

# Reference: https://twitter.com/SugitaMuchi/status/1107774813534183424

/haarch64
/haarch64be
/harcle-750d
/harcle-hs38
/hm68k-68xxx
/hmicroblazebe
/hmicroblazeel
/hnios2
/hopenrisc
/hsh-sh4
/hx86-64-core-i7
/hx86-core2
/hx86-i686
/hxtensa
/rootOwO

# Reference: https://twitter.com/SugitaMuchi/status/1106322774560145408

/tron.arc
/tron.arm
/tron.arm4
/tron.armv4l
/tron.arm5
/tron.arm5n
/tron.arm6
/tron.arm7
/tron.dbg
/tron.i486
/tron.i586
/tron.i686
/tron.m68k
/tron.mips
/tron.mips64
/tron.mpsl
/tron.ppc
/tron.sh4
/tron.spc
/tron.sparc
/tron.x32
/tron.x64
/tron.x86

# Reference: https://twitter.com/0xrb/status/1098654743491239944

/loliv4.arc
/loliv4.arm
/loliv4.arm4
/loliv4.armv4l
/loliv4.arm5
/loliv4.arm5n
/loliv4.arm6
/loliv4.arm7
/loliv4.dbg
/loliv4.i486
/loliv4.i586
/loliv4.i686
/loliv4.m68k
/loliv4.mips
/loliv4.mips64
/loliv4.mpsl
/loliv4.ppc
/loliv4.sh4
/loliv4.spc
/loliv4.sparc
/loliv4.x32
/loliv4.x64
/loliv4.x86

# Reference: https://twitter.com/gorimpthon/status/1077435493061541889

/egg.arc
/egg.arm
/egg.arm4
/egg.armv4l
/egg.arm5
/egg.arm5n
/egg.arm6
/egg.arm7
/egg.dbg
/egg.i486
/egg.i586
/egg.i686
/egg.m68k
/egg.mips
/egg.mips64
/egg.mpsl
/egg.ppc
/egg.sh4
/egg.spc
/egg.sparc
/egg.x32
/egg.x64
/egg.x86

# Reference: https://twitter.com/SugitaMuchi/status/1075161057121918977

/WatchDog.arc
/WatchDog.arm
/WatchDog.arm4
/WatchDog.arm4l
/WatchDog.arm4t
/WatchDog.armv4l
/WatchDog.arm5
/WatchDog.arm5n
/WatchDog.arm6
/WatchDog.arm7
/WatchDog.dbg
/WatchDog.i486
/WatchDog.i586
/WatchDog.i686
/WatchDog.m68k
/WatchDog.mips
/WatchDog.mips64
/WatchDog.mpsl
/WatchDog.ppc
/WatchDog.sh4
/WatchDog.spc
/WatchDog.sparc
/WatchDog.x32
/WatchDog.x64
/WatchDog.x86

# Reference: https://twitter.com/gorimpthon/status/1074581436416581632

/airlink.sh

# Reference: https://twitter.com/w0lfvan/status/1074795109915484160

/telnet.arc
/telnet.arm
/telnet.arm4
/telnet.arm4l
/telnet.arm4t
/telnet.armv4l
/telnet.arm5
/telnet.arm5n
/telnet.arm6
/telnet.arm7
/telnet.dbg
/telnet.i486
/telnet.i586
/telnet.i686
/telnet.m68k
/telnet.mips
/telnet.mips64
/telnet.mpsl
/telnet.ppc
/telnet.sh4
/telnet.spc
/telnet.sparc
/telnet.x32
/telnet.x64
/telnet.x86

# Reference: https://twitter.com/w0lfvan/status/1072635199157100550

/tsuki.arc
/tsuki.arm
/tsuki.arm4
/tsuki.arm4l
/tsuki.arm4t
/tsuki.armv4l
/tsuki.arm5
/tsuki.arm5n
/tsuki.arm6
/tsuki.arm7
/tsuki.dbg
/tsuki.i486
/tsuki.i586
/tsuki.i686
/tsuki.m68k
/tsuki.mips
/tsuki.mips64
/tsuki.mpsl
/tsuki.ppc
/tsuki.sh4
/tsuki.spc
/tsuki.sparc
/tsuki.x32
/tsuki.x64
/tsuki.x86

# Reference: https://twitter.com/SugitaMuchi/status/1069718639429902336

/crushi.arc
/crushi.arm
/crushi.arm4
/crushi.arm4l
/crushi.arm4t
/crushi.armv4l
/crushi.arm5
/crushi.arm5n
/crushi.arm6
/crushi.arm7
/crushi.dbg
/crushi.i486
/crushi.i586
/crushi.i686
/crushi.m68k
/crushi.mips
/crushi.mips64
/crushi.mpsl
/crushi.ppc
/crushi.sh4
/crushi.spc
/crushi.sparc
/crushi.x32
/crushi.x64
/crushi.x86

# Reference: https://twitter.com/SugitaMuchi/status/1069717302063452160

/Trinity.arc
/Trinity.arm
/Trinity.arm4
/Trinity.arm4l
/Trinity.arm4t
/Trinity.armv4l
/Trinity.arm5
/Trinity.arm5n
/Trinity.arm6
/Trinity.arm7
/Trinity.dbg
/Trinity.i486
/Trinity.i586
/Trinity.i686
/Trinity.m68k
/Trinity.mips
/Trinity.mips64
/Trinity.mpsl
/Trinity.ppc
/Trinity.ppc440
/Trinity.sh4
/Trinity.spc
/Trinity.sparc
/Trinity.x32
/Trinity.x64
/Trinity.x86

# Reference: https://twitter.com/w0lfvan/status/1069208800815665152

/sector.arc
/sector.arm
/sector.arm4
/sector.arm4l
/sector.arm4t
/sector.armv4l
/sector.arm5
/sector.arm5n
/sector.arm6
/sector.arm7
/sector.dbg
/sector.i486
/sector.i586
/sector.i686
/sector.m68k
/sector.mips
/sector.mips64
/sector.mpsl
/sector.ppc
/sector.ppc440
/sector.sh4
/sector.spc
/sector.sparc
/sector.x32
/sector.x64
/sector.x86

# Reference: https://twitter.com/SugitaMuchi/status/1066835439326089216

/Nikkah.arc
/Nikkah.arm
/Nikkah.arm4
/Nikkah.arm4l
/Nikkah.arm4t
/Nikkah.armv4l
/Nikkah.arm5
/Nikkah.arm5n
/Nikkah.arm6
/Nikkah.arm7
/Nikkah.dbg
/Nikkah.i486
/Nikkah.i586
/Nikkah.i686
/Nikkah.m68k
/Nikkah.mips
/Nikkah.mips64
/Nikkah.mpsl
/Nikkah.ppc
/Nikkah.ppc440
/Nikkah.sh4
/Nikkah.spc
/Nikkah.sparc
/Nikkah.x32
/Nikkah.x64
/Nikkah.x86

# Reference: https://twitter.com/ankit_anubhav/status/1065156254526595072
# Reference: https://blog.netlab.360.com/warning-satori-a-new-mirai-variant-is-spreading-in-worm-style-on-port-37215-and-52869-en/
# Reference: https://www.hybrid-analysis.com/sample/f9a4c6857bb3a4feebb232c54e6ecffd3742ce598b48e975d675b38232b8e30e?environmentId=300

95.211.123.69:7645
network.bigbotpein.com
control.almashosting.ru
/okiru.arc
/okiru.arm
/okiru.arm4
/okiru.arm4l
/okiru.arm4t
/okiru.arm4tl
/okiru.armv4l
/okiru.arm5
/okiru.arm5n
/okiru.armv5l
/okiru.arm6
/okiru.armv6l
/okiru.arm7
/okiru.armv7l
/okiru.dbg
/okiru.i486
/okiru.i586
/okiru.i686
/okiru.m68k
/okiru.mips
/okiru.mips64
/okiru.mipsel
/okiru.mpsl
/okiru.ppc
/okiru.ppc440
/okiru.powerppc
/okiru.root
/okiru.sh
/okiru.sh4
/okiru.spc
/okiru.sparc
/okiru.superh
/okiru.x32
/okiru.x64
/okiru.x86
/okiru.x86_32
/okiru.x86_64
/cryptonite.arc
/cryptonite.arm
/cryptonite.arm4
/cryptonite.arm4l
/cryptonite.arm4t
/cryptonite.arm4tl
/cryptonite.armv4l
/cryptonite.arm5
/cryptonite.arm5n
/cryptonite.armv5l
/cryptonite.arm6
/cryptonite.armv6l
/cryptonite.arm7
/cryptonite.armv7l
/cryptonite.dbg
/cryptonite.i486
/cryptonite.i586
/cryptonite.i686
/cryptonite.m68k
/cryptonite.mips
/cryptonite.mips64
/cryptonite.mipsel
/cryptonite.mpsl
/cryptonite.ppc
/cryptonite.ppc440
/cryptonite.powerppc
/cryptonite.root
/cryptonite.sh
/cryptonite.sh4
/cryptonite.spc
/cryptonite.sparc
/cryptonite.x32
/cryptonite.x64
/cryptonite.x86
/cryptonite.x86_32
/cryptonite.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1064724293206999040

/Nikka.arc
/Nikka.arm
/Nikka.arm4
/Nikka.arm4l
/Nikka.arm4t
/Nikka.armv4l
/Nikka.arm5
/Nikka.arm5n
/Nikka.arm6
/Nikka.arm7
/Nikka.dbg
/Nikka.i486
/Nikka.i586
/Nikka.i686
/Nikka.m68k
/Nikka.mips
/Nikka.mips64
/Nikka.mpsl
/Nikka.ppc
/Nikka.ppc440
/Nikka.sh4
/Nikka.spc
/Nikka.sparc
/Nikka.x32
/Nikka.x64
/Nikka.x86

# Reference: https://twitter.com/SugitaMuchi/status/1064295597388136449

/larry.arc
/larry.arm
/larry.arm4
/larry.arm4l
/larry.arm4t
/larry.armv4l
/larry.arm5
/larry.arm5n
/larry.arm6
/larry.arm7
/larry.dbg
/larry.i486
/larry.i586
/larry.i686
/larry.m68k
/larry.mips
/larry.mips64
/larry.mpsl
/larry.ppc
/larry.ppc440
/larry.root
/larry.sh4
/larry.spc
/larry.sparc
/larry.x32
/larry.x64
/larry.x86
/lry.arc
/lry.arm
/lry.arm4
/lry.arm4l
/lry.arm4t
/lry.armv4l
/lry.arm5
/lry.arm5n
/lry.arm6
/lry.arm7
/lry.dbg
/lry.i486
/lry.i586
/lry.i686
/lry.m68k
/lry.mips
/lry.mips64
/lry.mpsl
/lry.ppc
/lry.ppc440
/lry.root
/lry.sh4
/lry.spc
/lry.sparc
/lry.x32
/lry.x64
/lry.x86
/lry.x86_32
/lry.x86_64
/x86huawei

# Reference: https://twitter.com/SugitaMuchi/status/1063962452323328000

/kwari.arc
/kwari.arm
/kwari.arm4
/kwari.arm4l
/kwari.arm4t
/kwari.armv4l
/kwari.arm5
/kwari.arm5n
/kwari.arm6
/kwari.arm7
/kwari.dbg
/kwari.i486
/kwari.i586
/kwari.i686
/kwari.m68k
/kwari.mips
/kwari.mips64
/kwari.mpsl
/kwari.ppc
/kwari.ppc440
/kwari.root
/kwari.sh4
/kwari.spc
/kwari.sparc
/kwari.x32
/kwari.x64
/kwari.x86
/kwari.x86_32
/kwari.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1063282314799542272

/hax.arc
/hax.arm
/hax.arm4
/hax.arm4l
/hax.arm4t
/hax.armv4l
/hax.arm5
/hax.arm5n
/hax.arm6
/hax.arm7
/hax.dbg
/hax.i486
/hax.i586
/hax.i686
/hax.m68k
/hax.mips
/hax.mips64
/hax.mpsl
/hax.ppc
/hax.ppc440
/hax.root
/hax.sh4
/hax.spc
/hax.sparc
/hax.x32
/hax.x64
/hax.x86
/hax.x86_32
/hax.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1063085934109851648

/VPNFilter.arc
/VPNFilter.arm
/VPNFilter.arm4
/VPNFilter.arm4l
/VPNFilter.arm4t
/VPNFilter.armv4l
/VPNFilter.arm5
/VPNFilter.arm5n
/VPNFilter.arm6
/VPNFilter.arm7
/VPNFilter.dbg
/VPNFilter.i486
/VPNFilter.i586
/VPNFilter.i686
/VPNFilter.m68k
/VPNFilter.mips
/VPNFilter.mips64
/VPNFilter.mpsl
/VPNFilter.ppc
/VPNFilter.ppc440
/VPNFilter.root
/VPNFilter.sh4
/VPNFilter.spc
/VPNFilter.sparc
/VPNFilter.x32
/VPNFilter.x64
/VPNFilter.x86
/VPNFilter.x86_32
/VPNFilter.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1062528904563281920

/ombra.arc
/ombra.arm
/ombra.arm4
/ombra.arm4l
/ombra.arm4t
/ombra.armv4l
/ombra.arm5
/ombra.arm5n
/ombra.arm6
/ombra.arm7
/ombra.dbg
/ombra.i486
/ombra.i586
/ombra.i686
/ombra.m68k
/ombra.mips
/ombra.mips64
/ombra.mpsl
/ombra.ppc
/ombra.ppc440
/ombra.root
/ombra.sh4
/ombra.spc
/ombra.sparc
/ombra.x32
/ombra.x64
/ombra.x86
/ombra.x86_32
/ombra.x86_64

# Reference: https://twitter.com/SugitaMuchi/status/1062523363195637760

/tnx12.arc
/tnx12.arm
/tnx12.arm4
/tnx12.arm4l
/tnx12.arm4t
/tnx12.armv4l
/tnx12.arm5
/tnx12.arm5n
/tnx12.arm6
/tnx12.arm7
/tnx12.dbg
/tnx12.i486
/tnx12.i586
/tnx12.i686
/tnx12.m68k
/tnx12.mips
/tnx12.mips64
/tnx12.mpsl
/tnx12.ppc
/tnx12.ppc440
/tnx12.root
/tnx12.sh4
/tnx12.spc
/tnx12.sparc
/tnx12.x32
/tnx12.x64
/tnx12.x86
/tnx12.x86_32
/tnx12.x86_64
/tnx12015.sh

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-iot-malware-updated-with-mining-and-backdoor-commands-targets-wemo-devices/
# Reference: https://blogs.akamai.com/sitr/2019/06/latest-echobot-26-infection-vectors.html

/ECHOBOT.arc
/ECHOBOT.arm
/ECHOBOT.arm4
/ECHOBOT.arm4l
/ECHOBOT.arm4t
/ECHOBOT.armv4l
/ECHOBOT.arm5
/ECHOBOT.arm5n
/ECHOBOT.arm6
/ECHOBOT.arm7
/ECHOBOT.dbg
/ECHOBOT.i486
/ECHOBOT.i586
/ECHOBOT.i686
/ECHOBOT.m68k
/ECHOBOT.mips
/ECHOBOT.mips64
/ECHOBOT.mpsl
/ECHOBOT.mipsel
/ECHOBOT.ppc
/ECHOBOT.ppc440
/ECHOBOT.root
/ECHOBOT.sh
/ECHOBOT.sh4
/ECHOBOT.spc
/ECHOBOT.sparc
/ECHOBOT.x32
/ECHOBOT.x64
/ECHOBOT.x86
/ECHOBOT.x86_32
/ECHOBOT.x86_64
/ECHOBOT1.sh
/UqHDZbqr9S.sh

# Reference: https://twitter.com/_odisseus/status/1114055047221006336

/Suicide_Binaries.sh
/Suicide_ntpd
/Suicide_sshd
/Suicide_openssh
/Suicide_bash
/Suicide_tftp
/Suicide_wget
/Suicide_cron
/Suicide_ftp
/Suicide_pftp
/Suicide_sh

# Reference: https://perchsecurity.com/perch-news/threat-report-sunday-february-3rd-2019/ (Mirai-based Cayosin variation)

hostnamepxssy.club
/cock.arc
/cock.arm
/cock.arm4
/cock.arm4l
/cock.arm4t
/cock.armv4l
/cock.arm5
/cock.arm5n
/cock.arm6
/cock.arm7
/cock.dbg
/cock.i486
/cock.i586
/cock.i686
/cock.m68k
/cock.mips
/cock.mips64
/cock.mpsl
/cock.ppc
/cock.ppc440
/cock.root
/cock.sh
/cock.sh4
/cock.spc
/cock.sparc
/cock.x32
/cock.x64
/cock.x86
/cock.x86_32
/cock.x86_64

# Reference: https://imgur.com/a/4YxuSfV (Mirai-based Cayosin variation)

hakaiboatnet.pw

# Reference: https://twitter.com/bad_packets/status/1115117347537215488

/shenzi.arc
/shenzi.arm
/shenzi.arm4
/shenzi.arm4l
/shenzi.arm4t
/shenzi.armv4l
/shenzi.arm5
/shenzi.arm5n
/shenzi.arm6
/shenzi.arm7
/shenzi.dbg
/shenzi.i486
/shenzi.i586
/shenzi.i686
/shenzi.m68k
/shenzi.mips
/shenzi.mips64
/shenzi.mpsl
/shenzi.ppc
/shenzi.ppc440
/shenzi.root
/shenzi.sh
/shenzi.sh4
/shenzi.spc
/shenzi.sparc
/shenzi.x32
/shenzi.x64
/shenzi.x86
/shenzi.x86_32
/shenzi.x86_64

# Reference: https://unit42.paloaltonetworks.com/mirai-compiled-for-new-processor-surfaces/
# Reference: https://twitter.com/bad_packets/status/1128029491010269184

/haarch64
/haarch64be
/harm
/harm4
/harm5
/harm6
/harm7
/hm68k
/hm68k-68xxx
/hmicroblazebe
/hmicroblazeel
/hmips
/hmips64
/hmipsl
/hmpsl
/hnios2
/hopenrisc
# /hppc
/hsh-sh4
/hsh4
/hspc
/hx86
/hx64
/hx86-64-core-i7
/hx86-core2
/hx86-i486
/hx86-i586
/hx86-i686
/hxtensa

# Reference: https://twitter.com/bad_packets/status/1115508643246399488
# Reference: https://twitter.com/0xrb/status/1114065129392431104

/ronin.dlink
/ronin.arc
/ronin.arm
/ronin.arm4
/ronin.arm4l
/ronin.arm4t
/ronin.armv4l
/ronin.arm5
/ronin.arm5n
/ronin.arm6
/ronin.arm7
/ronin.dbg
/ronin.i486
/ronin.i586
/ronin.i686
/ronin.m68k
/ronin.mips
/ronin.mips64
/ronin.mpsl
/ronin.mipsel
/ronin.ppc
/ronin.ppc440
/ronin.root
/ronin.sh
/ronin.sh4
/ronin.spc
/ronin.sparc
/ronin.x32
/ronin.x64
/ronin.x86
/ronin.x86_32
/ronin.x86_64

# Reference: https://twitter.com/bad_packets/status/1114705254195519489

/akira.arc
/akira.arm
/akira.arm4
/akira.arm4l
/akira.arm4t
/akira.armv4l
/akira.arm5
/akira.arm5n
/akira.arm6
/akira.arm7
/akira.dbg
/akira.i486
/akira.i586
/akira.i686
/akira.m68k
/akira.mips
/akira.mips64
/akira.mpsl
/akira.ppc
/akira.ppc440
/akira.root
/akira.sh
/akira.sh4
/akira.spc
/akira.sparc
/akira.x32
/akira.x64
/akira.x86
/akira.x86_32
/akira.x86_64

# Reference: https://twitter.com/Artilllerie/status/1115556048243437568
# Reference: https://www.bitdefender.com/files/News/CaseStudies/study/319/Bitdefender-PR-Whitepaper-DarkNexus-creat4349-en-EN-interactive.pdf

cnc.subby.xyz
scan.subby.xyz
51.68.214.116:3301

# Reference: https://twitter.com/zom3y3/status/1115481065701830657

149.255.36.139:1747
/bl.arc
/bl.arm
/bl.arm4
/bl.arm4l
/bl.arm4t
/bl.armv4l
/bl.arm5
/bl.arm5n
/bl.arm6
/bl.arm7
/bl.dbg
/bl.i486
/bl.i586
/bl.i686
/bl.m68k
/bl.mips
/bl.mips64
/bl.mpsl
/bl.ppc
/bl.ppc440
/bl.root
/bl.sh
/bl.sh4
/bl.spc
/bl.sparc
/bl.x32
/bl.x64
/bl.x86
/bl.x86_32
/bl.x86_64

# Reference: https://twitter.com/0xrb/status/1116988853812903936

/synbin.sh
/synbotpp.arc
/synbotpp.arm
/synbotpp.arm4
/synbotpp.arm4l
/synbotpp.arm4t
/synbotpp.armv4l
/synbotpp.arm5
/synbotpp.arm5n
/synbotpp.arm6
/synbotpp.arm7
/synbotpp.dbg
/synbotpp.i486
/synbotpp.i586
/synbotpp.i6
/synbotpp.i686
/synbotpp.m68k
/synbotpp.mips
/synbotpp.mips64
/synbotpp.mpsl
/synbotpp.mipsel
/synbotpp.ppc
/synbotpp.ppc440
/synbotpp.root
/synbotpp.sh
/synbotpp.sh4
/synbotpp.spc
/synbotpp.sparc
/synbotpp.x32
/synbotpp.x64
/synbotpp.x86
/synbotpp.x86_32
/synbotpp.x86_64

# Reference: https://twitter.com/0xrb/status/1116896431468699648

/Vanish.arc
/Vanish.arm
/Vanish.arm4
/Vanish.arm4l
/Vanish.arm4t
/Vanish.armv4l
/Vanish.arm5
/Vanish.arm5n
/Vanish.arm6
/Vanish.arm7
/Vanish.dbg
/Vanish.i486
/Vanish.i586
/Vanish.i686
/Vanish.m68k
/Vanish.mips
/Vanish.mips64
/Vanish.mpsl
/Vanish.mipsel
/Vanish.ppc
/Vanish.ppc440
/Vanish.root
/Vanish.sh
/Vanish.sh4
/Vanish.spc
/Vanish.sparc
/Vanish.x32
/Vanish.x64
/Vanish.x86
/Vanish.x86_32
/Vanish.x86_64

# Reference: https://twitter.com/0xrb/status/1115913590450589696

104.168.140.207:9375
/g0dm0d333.arc
/g0dm0d333.arm
/g0dm0d333.arm4
/g0dm0d333.arm4l
/g0dm0d333.arm4t
/g0dm0d333.armv4l
/g0dm0d333.arm5
/g0dm0d333.arm5n
/g0dm0d333.arm6
/g0dm0d333.arm7
/g0dm0d333.dbg
/g0dm0d333.i486
/g0dm0d333.i586
/g0dm0d333.i686
/g0dm0d333.m68k
/g0dm0d333.mips
/g0dm0d333.mips64
/g0dm0d333.mpsl
/g0dm0d333.mipsel
/g0dm0d333.ppc
/g0dm0d333.ppc440
/g0dm0d333.root
/g0dm0d333.sh
/g0dm0d333.sh4
/g0dm0d333.spc
/g0dm0d333.sparc
/g0dm0d333.x32
/g0dm0d333.x64
/g0dm0d333.x86
/g0dm0d333.x86_32
/g0dm0d333.x86_64

# Reference: https://twitter.com/executemalware/status/1009842279924813826

/mirai-ssh.arc
/mirai-ssh.arm
/mirai-ssh.arm4
/mirai-ssh.arm4l
/mirai-ssh.arm4t
/mirai-ssh.armv4l
/mirai-ssh.arm5
/mirai-ssh.arm5n
/mirai-ssh.arm6
/mirai-ssh.arm7
/mirai-ssh.dbg
/mirai-ssh.i486
/mirai-ssh.i586
/mirai-ssh.i686
/mirai-ssh.m68k
/mirai-ssh.mips
/mirai-ssh.mips64
/mirai-ssh.mpsl
/mirai-ssh.mipsel
/mirai-ssh.ppc
/mirai-ssh.ppc440
/mirai-ssh.root
/mirai-ssh.sh
/mirai-ssh.sh4
/mirai-ssh.spc
/mirai-ssh.sparc
/mirai-ssh.x32
/mirai-ssh.x64
/mirai-ssh.x86
/mirai-ssh.x86_32
/mirai-ssh.x86_64

# Reference: https://twitter.com/GranetMan/status/831622173068509185

/dlr.arc
/dlr.arm
/dlr.arm4
/dlr.arm4l
/dlr.arm4t
/dlr.armv4l
/dlr.arm5
/dlr.arm5n
/dlr.arm6
/dlr.arm7
/dlr.dbg
/dlr.i486
/dlr.i586
/dlr.i686
/dlr.m68k
/dlr.mips
/dlr.mips64
/dlr.mpsl
/dlr.mipsel
/dlr.ppc
/dlr.ppc440
/dlr.root
/dlr.sh
/dlr.sh4
/dlr.spc
/dlr.sparc
/dlr.x32
/dlr.x64
/dlr.x86
/dlr.x86_32
/dlr.x86_64

# Reference: https://twitter.com/bad_packets/status/1117596904768987136

love.thotiana.live
/kek.arc
/kek.arm
/kek.arm4
/kek.arm4l
/kek.arm4t
/kek.armv4l
/kek.arm5
/kek.arm5n
/kek.arm6
/kek.arm7
/kek.dbg
/kek.i486
/kek.i586
/kek.i686
/kek.m68k
/kek.mips
/kek.mips64
/kek.mpsl
/kek.mipsel
/kek.ppc
/kek.ppc440
/kek.root
/kek.sh
/kek.sh4
/kek.spc
/kek.sparc
/kek.x32
/kek.x64
/kek.x86
/kek.x86_32
/kek.x86_64

# Reference: https://twitter.com/0xrb/status/1118418257671680001

/ZuoIdj.arc
/ZuoIdj.arm
/ZuoIdj.arm4
/ZuoIdj.arm4l
/ZuoIdj.arm4t
/ZuoIdj.armv4l
/ZuoIdj.arm5
/ZuoIdj.arm5n
/ZuoIdj.arm6
/ZuoIdj.arm7
/ZuoIdj.dbg
/ZuoIdj.i486
/ZuoIdj.i586
/ZuoIdj.i686
/ZuoIdj.m68k
/ZuoIdj.mips
/ZuoIdj.mips64
/ZuoIdj.mpsl
/ZuoIdj.mipsel
/ZuoIdj.ppc
/ZuoIdj.ppc440
/ZuoIdj.root
/ZuoIdj.sh
/ZuoIdj.sh4
/ZuoIdj.spc
/ZuoIdj.sparc
/ZuoIdj.x32
/ZuoIdj.x64
/ZuoIdj.x86
/ZuoIdj.x86_32
/ZuoIdj.x86_64

# Reference: https://twitter.com/0xrb/status/1118400700545929216

/liunx.arc
/liunx.arm
/liunx.arm4
/liunx.arm4l
/liunx.arm4t
/liunx.armv4l
/liunx.arm5
/liunx.arm5n
/liunx.arm6
/liunx.arm7
/liunx.dbg
/liunx.i486
/liunx.i586
/liunx.i686
/liunx.m68k
/liunx.mips
/liunx.mips64
/liunx.mpsl
/liunx.mipsel
/liunx.ppc
/liunx.ppc440
/liunx.root
/liunx.sh
/liunx.sh4
/liunx.spc
/liunx.sparc
/liunx.x32
/liunx.x64
/liunx.x86
/liunx.x86_32
/liunx.x86_64

# Reference: https://twitter.com/0xrb/status/1115923901710602240

/gadfe.arc
/gadfe.arm
/gadfe.arm4
/gadfe.arm4l
/gadfe.arm4t
/gadfe.armv4l
/gadfe.arm5
/gadfe.arm5n
/gadfe.arm6
/gadfe.arm7
/gadfe.dbg
/gadfe.i486
/gadfe.i586
/gadfe.i686
/gadfe.m68k
/gadfe.mips
/gadfe.mips64
/gadfe.mpsl
/gadfe.mipsel
/gadfe.ppc
/gadfe.ppc440
/gadfe.root
/gadfe.sh
/gadfe.sh4
/gadfe.spc
/gadfe.sparc
/gadfe.x32
/gadfe.x64
/gadfe.x86
/gadfe.x86_32
/gadfe.x86_64
/gafdse.arc
/gafdse.arm
/gafdse.arm4
/gafdse.arm4l
/gafdse.arm4t
/gafdse.armv4l
/gafdse.arm5
/gafdse.arm5n
/gafdse.arm6
/gafdse.arm7
/gafdse.dbg
/gafdse.i486
/gafdse.i586
/gafdse.i686
/gafdse.m68k
/gafdse.mips
/gafdse.mips64
/gafdse.mpsl
/gafdse.mipsel
/gafdse.ppc
/gafdse.ppc440
/gafdse.root
/gafdse.sh
/gafdse.sh4
/gafdse.spc
/gafdse.sparc
/gafdse.x32
/gafdse.x64
/gafdse.x86
/gafdse.x86_32
/gafdse.x86_64
/gaefds.arc
/gaefds.arm
/gaefds.arm4
/gaefds.arm4l
/gaefds.arm4t
/gaefds.armv4l
/gaefds.arm5
/gaefds.arm5n
/gaefds.arm6
/gaefds.arm7
/gaefds.dbg
/gaefds.i486
/gaefds.i586
/gaefds.i686
/gaefds.m68k
/gaefds.mips
/gaefds.mips64
/gaefds.mpsl
/gaefds.mipsel
/gaefds.ppc
/gaefds.ppc440
/gaefds.root
/gaefds.sh
/gaefds.sh4
/gaefds.spc
/gaefds.sparc
/gaefds.x32
/gaefds.x64
/gaefds.x86
/gaefds.x86_32
/gaefds.x86_64
/sdfza.arc
/sdfza.arm
/sdfza.arm4
/sdfza.arm4l
/sdfza.arm4t
/sdfza.armv4l
/sdfza.arm5
/sdfza.arm5n
/sdfza.arm6
/sdfza.arm7
/sdfza.dbg
/sdfza.i486
/sdfza.i586
/sdfza.i686
/sdfza.m68k
/sdfza.mips
/sdfza.mips64
/sdfza.mpsl
/sdfza.mipsel
/sdfza.ppc
/sdfza.ppc440
/sdfza.root
/sdfza.sh
/sdfza.sh4
/sdfza.spc
/sdfza.sparc
/sdfza.x32
/sdfza.x64
/sdfza.x86
/sdfza.x86_32
/sdfza.x86_64
/yafsda.arc
/yafsda.arm
/yafsda.arm4
/yafsda.arm4l
/yafsda.arm4t
/yafsda.armv4l
/yafsda.arm5
/yafsda.arm5n
/yafsda.arm6
/yafsda.arm7
/yafsda.dbg
/yafsda.i486
/yafsda.i586
/yafsda.i686
/yafsda.m68k
/yafsda.mips
/yafsda.mips64
/yafsda.mpsl
/yafsda.mipsel
/yafsda.ppc
/yafsda.ppc440
/yafsda.root
/yafsda.sh
/yafsda.sh4
/yafsda.spc
/yafsda.sparc
/yafsda.x32
/yafsda.x64
/yafsda.x86
/yafsda.x86_32
/yafsda.x86_64
/yaksddfs.arc
/yaksddfs.arm
/yaksddfs.arm4
/yaksddfs.arm4l
/yaksddfs.arm4t
/yaksddfs.armv4l
/yaksddfs.arm5
/yaksddfs.arm5n
/yaksddfs.arm6
/yaksddfs.arm7
/yaksddfs.dbg
/yaksddfs.i486
/yaksddfs.i586
/yaksddfs.i686
/yaksddfs.m68k
/yaksddfs.mips
/yaksddfs.mips64
/yaksddfs.mpsl
/yaksddfs.mipsel
/yaksddfs.ppc
/yaksddfs.ppc440
/yaksddfs.root
/yaksddfs.sh
/yaksddfs.sh4
/yaksddfs.spc
/yaksddfs.sparc
/yaksddfs.x32
/yaksddfs.x64
/yaksddfs.x86
/yaksddfs.x86_32
/yaksddfs.x86_64
/yasddfa.arc
/yasddfa.arm
/yasddfa.arm4
/yasddfa.arm4l
/yasddfa.arm4t
/yasddfa.armv4l
/yasddfa.arm5
/yasddfa.arm5n
/yasddfa.arm6
/yasddfa.arm7
/yasddfa.dbg
/yasddfa.i486
/yasddfa.i586
/yasddfa.i686
/yasddfa.m68k
/yasddfa.mips
/yasddfa.mips64
/yasddfa.mpsl
/yasddfa.mipsel
/yasddfa.ppc
/yasddfa.ppc440
/yasddfa.root
/yasddfa.sh
/yasddfa.sh4
/yasddfa.spc
/yasddfa.sparc
/yasddfa.x32
/yasddfa.x64
/yasddfa.x86
/yasddfa.x86_32
/yasddfa.x86_64
/ysdfd.arc
/ysdfd.arm
/ysdfd.arm4
/ysdfd.arm4l
/ysdfd.arm4t
/ysdfd.armv4l
/ysdfd.arm5
/ysdfd.arm5n
/ysdfd.arm6
/ysdfd.arm7
/ysdfd.dbg
/ysdfd.i486
/ysdfd.i586
/ysdfd.i686
/ysdfd.m68k
/ysdfd.mips
/ysdfd.mips64
/ysdfd.mpsl
/ysdfd.mipsel
/ysdfd.ppc
/ysdfd.ppc440
/ysdfd.root
/ysdfd.sh
/ysdfd.sh4
/ysdfd.spc
/ysdfd.sparc
/ysdfd.x32
/ysdfd.x64
/ysdfd.x86
/ysdfd.x86_32
/ysdfd.x86_64
/yafdza.arc
/yafdza.arm
/yafdza.arm4
/yafdza.arm4l
/yafdza.arm4t
/yafdza.armv4l
/yafdza.arm5
/yafdza.arm5n
/yafdza.arm6
/yafdza.arm7
/yafdza.dbg
/yafdza.i486
/yafdza.i586
/yafdza.i686
/yafdza.m68k
/yafdza.mips
/yafdza.mips64
/yafdza.mpsl
/yafdza.mipsel
/yafdza.ppc
/yafdza.ppc440
/yafdza.root
/yafdza.sh
/yafdza.sh4
/yafdza.spc
/yafdza.sparc
/yafdza.x32
/yafdza.x64
/yafdza.x86
/yafdza.x86_32
/yafdza.x86_64

# Reference: https://twitter.com/0xrb/status/1114055819400699904

/pussy.sh
/legion.arc
/legion.arm
/legion.arm4
/legion.arm4l
/legion.arm4t
/legion.armv4l
/legion.arm5
/legion.arm5n
/legion.arm6
/legion.arm7
/legion.dbg
/legion.i486
/legion.i586
/legion.i686
/legion.m68k
/legion.mips
/legion.mips64
/legion.mpsl
/legion.mipsel
/legion.ppc
/legion.ppc440
/legion.root
/legion.sh
/legion.sh4
/legion.spc
/legion.sparc
/legion.x32
/legion.x64
/legion.x86
/legion.x86_32
/legion.x86_64

# Reference: https://twitter.com/0xrb/status/1114051759536627713

/Kiexi.arc
/Kiexi.arm
/Kiexi.arm4
/Kiexi.arm4l
/Kiexi.arm4t
/Kiexi.armv4l
/Kiexi.arm5
/Kiexi.arm5n
/Kiexi.arm6
/Kiexi.arm7
/Kiexi.dbg
/Kiexi.i486
/Kiexi.i586
/Kiexi.i686
/Kiexi.m68k
/Kiexi.mips
/Kiexi.mips64
/Kiexi.mpsl
/Kiexi.mipsel
/Kiexi.ppc
/Kiexi.ppc440
/Kiexi.root
/Kiexi.sh
/Kiexi.sh4
/Kiexi.spc
/Kiexi.sparc
/Kiexi.x32
/Kiexi.x64
/Kiexi.x86
/Kiexi.x86_32
/Kiexi.x86_64

# Reference: https://twitter.com/0xrb/status/1113496589354639361

/Matrix.arc
/Matrix.arm
/Matrix.arm4
/Matrix.arm4l
/Matrix.arm4t
/Matrix.armv4l
/Matrix.arm5
/Matrix.arm5n
/Matrix.arm6
/Matrix.arm7
/Matrix.dbg
/Matrix.i486
/Matrix.i586
/Matrix.i686
/Matrix.m68k
/Matrix.mips
/Matrix.mips64
/Matrix.mpsl
/Matrix.mipsel
/Matrix.ppc
/Matrix.ppc440
/Matrix.root
/Matrix.sh
/Matrix.sh4
/Matrix.spc
/Matrix.sparc
/Matrix.x32
/Matrix.x64
/Matrix.x86
/Matrix.x86_32
/Matrix.x86_64

# Reference: https://twitter.com/0xrb/status/1113132492008099845

/arc.orenji
/arm.orenji
/arm4.orenji
/armv4l.orenji
/arm5.orenji
/arm5n.orenji
/arm6.orenji
/arm7.orenji
/dbg.orenji
/i586.orenji
/i686.orenji
/m68k.orenji
/mips.orenji
/mips64.orenji
/mpsl.orenji
/ppc.orenji
/sh4.orenji
/spc.orenji
/sparc.orenji
/x32.orenji
/x64.orenji
/x86_64.orenji

# Reference: https://twitter.com/0xrb/status/1108635699325136896

/momentum.arc
/momentum.arm
/momentum.arm4
/momentum.arm4l
/momentum.arm4t
/momentum.armv4l
/momentum.arm5
/momentum.arm5n
/momentum.armv5l
/momentum.arm6
/momentum.armv6l
/momentum.arm7
/momentum.dbg
/momentum.i486
/momentum.i586
/momentum.i686
/momentum.m68k
/momentum.mips
/momentum.mips64
/momentum.mpsl
/momentum.mipsel
/momentum.ppc
/momentum.powerpc
/momentum.ppc440
/momentum.root
/momentum.sh
/momentum.sh4
/momentum.spc
/momentum.sparc
/momentum.x32
/momentum.x64
/momentum.x86
/momentum.x86_32
/momentum.x86_64

# Reference: https://twitter.com/0xrb/status/1108293858113277952

/FARE.arc
/FARE.arm
/FARE.arm4
/FARE.arm4l
/FARE.arm4t
/FARE.armv4l
/FARE.arm5
/FARE.arm5n
/FARE.arm6
/FARE.arm7
/FARE.dbg
/FARE.i486
/FARE.i586
/FARE.i686
/FARE.m68k
/FARE.mips
/FARE.mips64
/FARE.mpsl
/FARE.mipsel
/FARE.ppc
/FARE.ppc440
/FARE.root
/FARE.sh
/FARE.sh4
/FARE.spc
/FARE.sparc
/FARE.x32
/FARE.x64
/FARE.x86
/FARE.x86_32
/FARE.x86_64

# Reference: https://twitter.com/0xrb/status/1108048782468501504

/kito.arc
/kito.arm
/kito.arm4
/kito.arm4l
/kito.arm4t
/kito.armv4l
/kito.arm5
/kito.arm5n
/kito.arm6
/kito.arm7
/kito.dbg
/kito.i486
/kito.i586
/kito.i686
/kito.m68k
/kito.mips
/kito.mips64
/kito.mpsl
/kito.mipsel
/kito.ppc
/kito.ppc440
/kito.root
/kito.sh
/kito.sh4
/kito.spc
/kito.sparc
/kito.x32
/kito.x64
/kito.x86
/kito.x86_32
/kito.x86_64

# Reference: https://twitter.com/0xrb/status/1108045008320581632

/sunless.arc
/sunless.arm
/sunless.arm4
/sunless.arm4l
/sunless.arm4t
/sunless.armv4l
/sunless.arm5
/sunless.arm5n
/sunless.arm6
/sunless.arm7
/sunless.dbg
/sunless.i486
/sunless.i586
/sunless.i686
/sunless.m68k
/sunless.mips
/sunless.mips64
/sunless.mpsl
/sunless.mipsel
/sunless.ppc
/sunless.ppc440
/sunless.root
/sunless.sh
/sunless.sh4
/sunless.spc
/sunless.sparc
/sunless.x32
/sunless.x64
/sunless.x86
/sunless.x86_32
/sunless.x86_64

# Reference: https://twitter.com/ankit_anubhav/status/1107934291558916099

/fish.arc
/fish.arm
/fish.arm4
/fish.arm4l
/fish.arm4t
/fish.armv4l
/fish.arm5
/fish.arm5n
/fish.arm6
/fish.arm7
/fish.dbg
/fish.i486
/fish.i586
/fish.i686
/fish.m68k
/fish.mips
/fish.mips64
/fish.mpsl
/fish.mipsel
/fish.ppc
/fish.ppc440
/fish.root
/fish.sh
/fish.sh4
/fish.spc
/fish.sparc
/fish.x32
/fish.x64
/fish.x86
/fish.x86_32
/fish.x86_64

# Reference: https://twitter.com/0xrb/status/1107842666673381378

/WW3V1SRC.arc
/WW3V1SRC.arm
/WW3V1SRC.arm4
/WW3V1SRC.arm4l
/WW3V1SRC.arm4t
/WW3V1SRC.armv4l
/WW3V1SRC.arm5
/WW3V1SRC.arm5n
/WW3V1SRC.arm6
/WW3V1SRC.arm7
/WW3V1SRC.dbg
/WW3V1SRC.i486
/WW3V1SRC.i586
/WW3V1SRC.i686
/WW3V1SRC.m68k
/WW3V1SRC.mips
/WW3V1SRC.mips64
/WW3V1SRC.mpsl
/WW3V1SRC.mipsel
/WW3V1SRC.ppc
/WW3V1SRC.ppc440
/WW3V1SRC.root
/WW3V1SRC.sh
/WW3V1SRC.sh4
/WW3V1SRC.spc
/WW3V1SRC.sparc
/WW3V1SRC.x32
/WW3V1SRC.x64
/WW3V1SRC.x86
/WW3V1SRC.x86_32
/WW3V1SRC.x86_64

# Reference: https://twitter.com/0xrb/status/1107838407353528320

/njs.arc
/njs.arm
/njs.arm4
/njs.arm4l
/njs.arm4t
/njs.armv4l
/njs.arm5
/njs.arm5n
/njs.arm6
/njs.arm7
/njs.dbg
/njs.i486
/njs.i586
/njs.i686
/njs.m68k
/njs.mips
/njs.mips64
/njs.mpsl
/njs.mipsel
/njs.ppc
/njs.ppc440
/njs.root
/njs.sh
/njs.sh4
/njs.spc
/njs.sparc
/njs.x32
/njs.x64
/njs.x86
/njs.x86_32
/njs.x86_64

# Reference: https://twitter.com/0xrb/status/1107836003056869376

/thisissh

# Reference: https://twitter.com/0xrb/status/1106473339055497217

/qarc
/qarm
/qarm4
/qarm4l
/qarm4t
/qarmv4l
/qarm5
/qarm5n
/qarm6
/qarm7
/qdbg
/qi486
/qi586
/qi686
/qm68k
/qmips
/qmips64
/qmpsl
/qmipsel
/qppc
/qppc440
/qroot
/qsh
/qsh4
/qspc
/qsparc
/qx32
/qx64
/qx86
/qx86_32
/qx86_64
/hua

# Reference: https://twitter.com/0xrb/status/1105656726026637312

/rebirth.arc
/rebirth.arm
/rebirth.arm4
/rebirth.arm4l
/rebirth.arm4t
/rebirth.armv4l
/rebirth.arm5
/rebirth.arm5n
/rebirth.arm6
/rebirth.arm7
/rebirth.dbg
/rebirth.i486
/rebirth.i586
/rebirth.i686
/rebirth.m68k
/rebirth.mips
/rebirth.mips64
/rebirth.mpsl
/rebirth.mipsel
/rebirth.ppc
/rebirth.ppc440
/rebirth.root
/rebirth.sh
/rebirth.sh4
/rebirth.spc
/rebirth.sparc
/rebirth.x32
/rebirth.x64
/rebirth.x86
/rebirth.x86_32
/rebirth.x86_64

# Reference: https://twitter.com/0xrb/status/1105421139621208064

/tuna.arc
/tuna.arm
/tuna.arm4
/tuna.arm4l
/tuna.arm4t
/tuna.armv4l
/tuna.arm5
/tuna.arm5n
/tuna.arm6
/tuna.arm7
/tuna.dbg
/tuna.i486
/tuna.i586
/tuna.i686
/tuna.m68k
/tuna.mips
/tuna.mips64
/tuna.mpsl
/tuna.mipsel
/tuna.ppc
/tuna.ppc440
/tuna.root
/tuna.sh
/tuna.sh4
/tuna.spc
/tuna.sparc
/tuna.x32
/tuna.x64
/tuna.x86
/tuna.x86_32
/tuna.x86_64

# Reference: https://twitter.com/0xrb/status/1105414365971247104

/daku.arc
/daku.arm
/daku.arm4
/daku.arm4l
/daku.arm4t
/daku.armv4l
/daku.arm5
/daku.arm5n
/daku.arm6
/daku.arm7
/daku.rm7
/daku.dbg
/daku.i486
/daku.i586
/daku.i686
/daku.m68k
/daku.mips
/daku.mips64
/daku.mpsl
/daku.mipsel
/daku.ppc
/daku.ppc440
/daku.root
/daku.sh
/daku.sh4
/daku.spc
/daku.sparc
/daku.x32
/daku.x64
/daku.x86
/daku.x86_32
/daku.x86_64

# Reference: https://twitter.com/0xrb/status/1105094830034690050

/guguru.arc
/guguru.arm
/guguru.arm4
/guguru.arm4l
/guguru.arm4t
/guguru.armv4l
/guguru.arm5
/guguru.arm5n
/guguru.arm6
/guguru.arm7
/guguru.dbg
/guguru.i486
/guguru.i586
/guguru.i686
/guguru.m68k
/guguru.mips
/guguru.mips64
/guguru.mpsl
/guguru.mipsel
/guguru.ppc
/guguru.ppc440
/guguru.root
/guguru.sh
/guguru.sh4
/guguru.spc
/guguru.sparc
/guguru.x32
/guguru.x64
/guguru.x86
/guguru.x86_32
/guguru.x86_64

# Reference: https://twitter.com/0xrb/status/1102830637365387264

/lessie.arc
/lessie.arm
/lessie.arm4
/lessie.arm4l
/lessie.arm4t
/lessie.armv4l
/lessie.arm5
/lessie.arm5n
/lessie.arm6
/lessie.arm7
/lessie.dbg
/lessie.i486
/lessie.i586
/lessie.i686
/lessie.m68k
/lessie.mips
/lessie.mips64
/lessie.mpsl
/lessie.mipsel
/lessie.ppc
/lessie.ppc440
/lessie.root
/lessie.sh
/lessie.sh4
/lessie.spc
/lessie.sparc
/lessie.x32
/lessie.x64
/lessie.x86
/lessie.x86_32
/lessie.x86_64

# Reference: https://twitter.com/0xrb/status/1102457417856630785

/big.arc
/big.arm
/big.arm4
/big.arm4l
/big.arm4t
/big.arm4tl
/big.armv4l
/big.arm5
/big.arm5n
/big.arm6
/big.arm7
/big.dbg
/big.i486
/big.i586
/big.i686
/big.m68
/big.m68k
/big.mips
/big.mips64
/big.mpsl
/big.mipsel
/big.ppc
/big.ppc440
/big.root
/big.sh
/big.sh4
/big.spc
/big.sparc
/big.x32
/big.x64
/big.x86
/big.x86_32
/big.x86_64

# Reference: https://twitter.com/0xrb/status/1102401391887290369

/senpai.arc
/senpai.arm
/senpai.arm4
/senpai.arm4l
/senpai.arm4t
/senpai.armv4l
/senpai.arm5
/senpai.arm5n
/senpai.arm6
/senpai.arm7
/senpai.dbg
/senpai.i486
/senpai.i586
/senpai.i686
/senpai.m68k
/senpai.mips
/senpai.mips64
/senpai.mpsl
/senpai.mipsel
/senpai.ppc
/senpai.ppc440
/senpai.root
/senpai.sh
/senpai.sh4
/senpai.spc
/senpai.sparc
/senpai.x32
/senpai.x64
/senpai.x86
/senpai.x86_32
/senpai.x86_64

# Reference: https://twitter.com/0xrb/status/1100657286354153472

/xd.arc
/xd.arm
/xd.arm4
/xd.arm4l
/xd.arm4t
/xd.armv4l
/xd.arm5
/xd.arm5n
/xd.arm6
/xd.arm7
/xd.dbg
/xd.i486
/xd.i586
/xd.i686
/xd.m68k
/xd.mips
/xd.mips64
/xd.mpsl
/xd.mipsel
/xd.ppc
/xd.ppc440
/xd.root
/xd.sh
/xd.sh4
/xd.spc
/xd.sparc
/xd.x32
/xd.x64
/xd.x86
/xd.x86_32
/xd.x86_64

# Reference: https://twitter.com/0xrb/status/1100325987294695427

/comethazine.arc
/comethazine.arm
/comethazine.arm4
/comethazine.arm4l
/comethazine.arm4t
/comethazine.armv4l
/comethazine.arm5
/comethazine.arm5n
/comethazine.arm6
/comethazine.arm7
/comethazine.dbg
/comethazine.i486
/comethazine.i586
/comethazine.i686
/comethazine.m68k
/comethazine.mips
/comethazine.mips64
/comethazine.mpsl
/comethazine.mipsel
/comethazine.ppc
/comethazine.ppc440
/comethazine.root
/comethazine.sh
/comethazine.sh4
/comethazine.spc
/comethazine.sparc
/comethazine.x32
/comethazine.x64
/comethazine.x86
/comethazine.x86_32
/comethazine.x86_64

# Reference: https://twitter.com/0xrb/status/1100323162665799680

/shinobi.arc
/shinobi.arm
/shinobi.arm4
/shinobi.arm4l
/shinobi.arm4t
/shinobi.armv4l
/shinobi.arm5
/shinobi.arm5n
/shinobi.arm6
/shinobi.arm7
/shinobi.dbg
/shinobi.i486
/shinobi.i586
/shinobi.i686
/shinobi.m68k
/shinobi.mips
/shinobi.mips64
/shinobi.mpsl
/shinobi.mipsel
/shinobi.ppc
/shinobi.ppc440
/shinobi.root
/shinobi.sh
/shinobi.sh4
/shinobi.spc
/shinobi.sparc
/shinobi.x32
/shinobi.x64
/shinobi.x86
/shinobi.x86_32
/shinobi.x86_64

# Reference: https://twitter.com/0xrb/status/1098644363545059329

/mana.arc
/mana.arm
/mana.arm4
/mana.arm4l
/mana.arm4t
/mana.armv4l
/mana.arm5
/mana.arm5n
/mana.arm6
/mana.arm7
/mana.dbg
/mana.i486
/mana.i586
/mana.i686
/mana.m68k
/mana.mips
/mana.mips64
/mana.mpsl
/mana.mipsel
/mana.ppc
/mana.ppc440
/mana.root
/mana.sh
/mana.sh4
/mana.spc
/mana.sparc
/mana.x32
/mana.x64
/mana.x86
/mana.x86_32
/mana.x86_64

# Reference: https://twitter.com/0xrb/status/1098279273222365184

/xova.arc
/xova.arm
/xova.arm4
/xova.arm4l
/xova.arm4t
/xova.armv4l
/xova.arm5
/xova.arm5n
/xova.arm6
/xova.arm7
/xova.dbg
/xova.i486
/xova.i586
/xova.i686
/xova.m68k
/xova.mips
/xova.mips64
/xova.mpsl
/xova.mipsel
/xova.ppc
/xova.ppc440
/xova.root
/xova.sh
/xova.sh4
/xova.spc
/xova.sparc
/xova.x32
/xova.x64
/xova.x86
/xova.x86_32
/xova.x86_64

# Reference: https://twitter.com/0xrb/status/1098102422541500417

/Akiru.arc
/Akiru.arm
/Akiru.arm4
/Akiru.arm4l
/Akiru.arm4t
/Akiru.armv4l
/Akiru.arm5
/Akiru.arm5n
/Akiru.arm6
/Akiru.arm7
/Akiru.dbg
/Akiru.i486
/Akiru.i586
/Akiru.i686
/Akiru.m68k
/Akiru.mips
/Akiru.mips64
/Akiru.mpsl
/Akiru.mipsel
/Akiru.ppc
/Akiru.ppc440
/Akiru.root
/Akiru.sh
/Akiru.sh4
/Akiru.spc
/Akiru.sparc
/Akiru.x32
/Akiru.x64
/Akiru.x86
/Akiru.x86_32
/Akiru.x86_64

# Reference: https://twitter.com/0xrb/status/1097865113716117508

/storm.arc
/storm.arm
/storm.arm4
/storm.arm4l
/storm.arm4t
/storm.armv4l
/storm.arm5
/storm.arm5n
/storm.arm6
/storm.arm7
/storm.dbg
/storm.i486
/storm.i586
/storm.i686
/storm.m68k
/storm.mips
/storm.mips64
/storm.mpsl
/storm.mipsel
/storm.ppc
/storm.ppc440
/storm.root
/storm.sh
/storm.sh4
/storm.spc
/storm.sparc
/storm.x32
/storm.x64
/storm.x86
/storm.x86_32
/storm.x86_64

# Reference: https://twitter.com/0xrb/status/1097799680514236416

/HeFoundMyBinsKYS.arc
/HeFoundMyBinsKYS.arm
/HeFoundMyBinsKYS.arm4
/HeFoundMyBinsKYS.arm4l
/HeFoundMyBinsKYS.arm4t
/HeFoundMyBinsKYS.armv4l
/HeFoundMyBinsKYS.arm5
/HeFoundMyBinsKYS.arm5n
/HeFoundMyBinsKYS.arm6
/HeFoundMyBinsKYS.arm7
/HeFoundMyBinsKYS.dbg
/HeFoundMyBinsKYS.i486
/HeFoundMyBinsKYS.i586
/HeFoundMyBinsKYS.i686
/HeFoundMyBinsKYS.m68k
/HeFoundMyBinsKYS.mips
/HeFoundMyBinsKYS.mips64
/HeFoundMyBinsKYS.mpsl
/HeFoundMyBinsKYS.mipsel
/HeFoundMyBinsKYS.ppc
/HeFoundMyBinsKYS.ppc440
/HeFoundMyBinsKYS.root
/HeFoundMyBinsKYS.sh
/HeFoundMyBinsKYS.sh4
/HeFoundMyBinsKYS.spc
/HeFoundMyBinsKYS.sparc
/HeFoundMyBinsKYS.x32
/HeFoundMyBinsKYS.x64
/HeFoundMyBinsKYS.x86
/HeFoundMyBinsKYS.x86_32
/HeFoundMyBinsKYS.x86_64

# Reference: https://twitter.com/0xrb/status/1097392217243582464

/xbox.arc
/xbox.arm
/xbox.arm4
/xbox.arm4l
/xbox.arm4t
/xbox.armv4l
/xbox.arm5
/xbox.arm5n
/xbox.arm6
/xbox.arm7
/xbox.dbg
/xbox.i486
/xbox.i586
/xbox.i686
/xbox.m68k
/xbox.mips
/xbox.mips64
/xbox.mpsl
/xbox.mipsel
/xbox.ppc
/xbox.ppc440
/xbox.root
/xbox.sh
/xbox.sh4
/xbox.spc
/xbox.sparc
/xbox.x32
/xbox.x64
/xbox.x86
/xbox.x86_32
/xbox.x86_64

# Reference: https://twitter.com/0xrb/status/1096453342849654786

/Corona.arc
/Corona.arm
/Corona.arm4
/Corona.arm4l
/Corona.arm4t
/Corona.armv4l
/Corona.arm5
/Corona.arm5n
/Corona.arm6
/Corona.arm7
/Corona.dbg
/Corona.i486
/Corona.i586
/Corona.i686
/Corona.m68k
/Corona.mips
/Corona.mips64
/Corona.mpsl
/Corona.mipsel
/Corona.ppc
/Corona.ppc440
/Corona.root
/Corona.sh
/Corona.sh4
/Corona.spc
/Corona.sparc
/Corona.x32
/Corona.x64
/Corona.x86
/Corona.x86_32
/Corona.x86_64

# Reference: https://twitter.com/0xrb/status/1096446545094995974

/Amakano.arc
/Amakano.arm
/Amakano.arm4
/Amakano.arm4l
/Amakano.arm4t
/Amakano.armv4l
/Amakano.arm5
/Amakano.arm5n
/Amakano.arm6
/Amakano.arm7
/Amakano.dbg
/Amakano.i486
/Amakano.i586
/Amakano.i686
/Amakano.m68k
/Amakano.mips
/Amakano.mips64
/Amakano.mpsl
/Amakano.mipsel
/Amakano.ppc
/Amakano.ppc440
/Amakano.root
/Amakano.sh
/Amakano.sh4
/Amakano.spc
/Amakano.sparc
/Amakano.x32
/Amakano.x64
/Amakano.x86
/Amakano.x86_32
/Amakano.x86_64

# Reference: https://twitter.com/0xrb/status/1095983535855300608

/kdawa.arc
/kdawa.arm
/kdawa.arm4
/kdawa.arm4l
/kdawa.arm4t
/kdawa.armv4l
/kdawa.arm5
/kdawa.arm5n
/kdawa.arm6
/kdawa.arm7
/kdawa.dbg
/kdawa.i486
/kdawa.i586
/kdawa.i686
/kdawa.m68k
/kdawa.mips
/kdawa.mips64
/kdawa.mpsl
/kdawa.mipsel
/kdawa.ppc
/kdawa.ppc440
/kdawa.root
/kdawa.sh
/kdawa.sh4
/kdawa.spc
/kdawa.sparc
/kdawa.x32
/kdawa.x64
/kdawa.x86
/kdawa.x86_32
/kdawa.x86_64

# Reference: https://twitter.com/0xrb/status/1095933631099396096

/Unbound.arc
/Unbound.arm
/Unbound.arm4
/Unbound.arm4l
/Unbound.arm4t
/Unbound.armv4l
/Unbound.arm5
/Unbound.arm5n
/Unbound.arm6
/Unbound.arm7
/Unbound.dbg
/Unbound.i486
/Unbound.i586
/Unbound.i686
/Unbound.m68k
/Unbound.mips
/Unbound.mips64
/Unbound.mpsl
/Unbound.mipsel
/Unbound.ppc
/Unbound.ppc440
/Unbound.root
/Unbound.sh
/Unbound.sh4
/Unbound.spc
/Unbound.sparc
/Unbound.x32
/Unbound.x64
/Unbound.x86
/Unbound.x86_32
/Unbound.x86_64

# Reference: https://twitter.com/0xrb/status/1095739193907646464

/KowaiB3.arc
/KowaiB3.arm
/KowaiB3.arm4
/KowaiB3.arm4l
/KowaiB3.arm4t
/KowaiB3.armv4l
/KowaiB3.arm5
/KowaiB3.arm5n
/KowaiB3.arm6
/KowaiB3.arm7
/KowaiB3.dbg
/KowaiB3.i486
/KowaiB3.i586
/KowaiB3.i686
/KowaiB3.m68k
/KowaiB3.mips
/KowaiB3.mips64
/KowaiB3.mpsl
/KowaiB3.mipsel
/KowaiB3.ppc
/KowaiB3.ppc440
/KowaiB3.root
/KowaiB3.sh
/KowaiB3.sh4
/KowaiB3.spc
/KowaiB3.sparc
/KowaiB3.x32
/KowaiB3.x64
/KowaiB3.x86
/KowaiB3.x86_32
/KowaiB3.x86_64

# Reference: https://twitter.com/0xrb/status/1095342906724933636

/Omni.arc
/Omni.arm
/Omni.arm4
/Omni.arm4l
/Omni.arm4t
/Omni.armv4l
/Omni.arm5
/Omni.arm5n
/Omni.arm6
/Omni.arm7
/Omni.dbg
/Omni.i486
/Omni.i586
/Omni.i686
/Omni.m68k
/Omni.mips
/Omni.mips64
/Omni.mpsl
/Omni.mipsel
/Omni.ppc
/Omni.ppc440
/Omni.root
/Omni.sh
/Omni.sh4
/Omni.spc
/Omni.sparc
/Omni.x32
/Omni.x64
/Omni.x86
/Omni.x86_32
/Omni.x86_64

# Reference: https://twitter.com/0xrb/status/1094879391966932992
# Reference: https://twitter.com/bad_packets/status/1188553450876850176

34.94.100.213:1338
34.94.100.213:31337
jarry.online
/arc.idopoc
/arm.idopoc
/arm4.idopoc
/armv4l.idopoc
/arm5.idopoc
/arm5n.idopoc
/arm6.idopoc
/arm7.idopoc
/arm8.idopoc
/dbg.idopoc
/i586.idopoc
/i686.idopoc
/m68k.idopoc
/mips.idopoc
/mips64.idopoc
/mpsl.idopoc
/ppc.idopoc
/sh4.idopoc
/spc.idopoc
/sparc.idopoc
/x32.idopoc
/x86.idopoc
/x64.idopoc
/x86_32.idopoc
/x86_64.idopoc

# Reference: https://twitter.com/0xrb/status/1094591450522808326

/blecc.arc
/blecc.arm
/blecc.arm4
/blecc.arm4l
/blecc.arm4t
/blecc.arm4tl
/blecc.armv4l
/blecc.arm5
/blecc.arm5n
/blecc.arm6
/blecc.arm7
/blecc.dbg
/blecc.i486
/blecc.i586
/blecc.i686
/blecc.m68k
/blecc.mips
/blecc.mips64
/blecc.mpsl
/blecc.ppc
/blecc.ppc440
/blecc.powerppc
/blecc.root
/blecc.sh
/blecc.sh4
/blecc.spc
/blecc.sparc
/blecc.x32
/blecc.x64
/blecc.x86
/blecc.x86_32
/blecc.x86_64

# Reference: https://twitter.com/0xrb/status/1093736400275496960

/saskia.arc
/saskia.arm
/saskia.arm4
/saskia.arm4l
/saskia.arm4t
/saskia.arm4tl
/saskia.armv4l
/saskia.arm5
/saskia.arm5n
/saskia.arm6
/saskia.arm7
/saskia.dbg
/saskia.i486
/saskia.i586
/saskia.i686
/saskia.m68k
/saskia.mips
/saskia.mips64
/saskia.mpsl
/saskia.ppc
/saskia.ppc440
/saskia.powerppc
/saskia.root
/saskia.sh
/saskia.sh4
/saskia.spc
/saskia.sparc
/saskia.x32
/saskia.x64
/saskia.x86
/saskia.x86_32
/saskia.x86_64

# Reference: https://twitter.com/0xrb/status/1093399430189858816

/ssh2.arc
/ssh2.arm
/ssh2.arm4
/ssh2.arm4l
/ssh2.arm4t
/ssh2.arm4tl
/ssh2.armv4l
/ssh2.arm5
/ssh2.arm5n
/ssh2.arm6
/ssh2.arm7
/ssh2.dbg
/ssh2.i486
/ssh2.i586
/ssh2.i686
/ssh2.m68k
/ssh2.mips
/ssh2.mips64
/ssh2.mpsl
/ssh2.ppc
/ssh2.ppc440
/ssh2.powerppc
/ssh2.root
/ssh2.sh
/ssh2.sh4
/ssh2.spc
/ssh2.sparc
/ssh2.x32
/ssh2.x64
/ssh2.x86
/ssh2.x86_32
/ssh2.x86_64

# Reference: https://twitter.com/0xrb/status/1092324076599705600

/avengers.arc
/avengers.arm
/avengers.arm4
/avengers.arm4l
/avengers.arm4t
/avengers.arm4tl
/avengers.armv4l
/avengers.arm5
/avengers.arm5n
/avengers.arm6
/avengers.arm7
/avengers.dbg
/avengers.i486
/avengers.i586
/avengers.i686
/avengers.m68k
/avengers.mips
/avengers.mips64
/avengers.mpsl
/avengers.ppc
/avengers.ppc440
/avengers.powerppc
/avengers.root
/avengers.sh
/avengers.sh4
/avengers.spc
/avengers.sparc
/avengers.x32
/avengers.x64
/avengers.x86
/avengers.x86_32
/avengers.x86_64
/os.arc
/os.arm
/os.arm4
/os.arm4l
/os.arm4t
/os.arm4tl
/os.armv4l
/os.arm5
/os.arm5n
/os.arm6
/os.arm7
/os.dbg
/os.i486
/os.i586
/os.i686
/os.m68k
/os.mips
/os.mips64
/os.mpsl
/os.ppc
/os.ppc440
/os.powerppc
/os.root
/os.sh
/os.sh4
/os.spc
/os.sparc
/os.x32
/os.x64
/os.x86
/os.x86_32
/os.x86_64

# Reference: https://twitter.com/0xrb/status/1089780667259379713

/nisha.arc
/nisha.arm
/nisha.arm4
/nisha.arm4l
/nisha.arm4t
/nisha.arm4tl
/nisha.armv4l
/nisha.arm5
/nisha.arm5n
/nisha.arm6
/nisha.arm7
/nisha.dbg
/nisha.i486
/nisha.i586
/nisha.i686
/nisha.m68k
/nisha.mips
/nisha.mips64
/nisha.mpsl
/nisha.ppc
/nisha.ppc440
/nisha.powerppc
/nisha.root
/nisha.sh
/nisha.sh4
/nisha.spc
/nisha.sparc
/nisha.x32
/nisha.x64
/nisha.x86
/nisha.x86_32
/nisha.x86_64

# Reference: https://twitter.com/0xrb/status/1089578349284990978

/Skyfall.arc
/Skyfall.arm
/Skyfall.arm4
/Skyfall.arm4l
/Skyfall.arm4t
/Skyfall.arm4tl
/Skyfall.armv4l
/Skyfall.arm5
/Skyfall.arm5n
/Skyfall.arm6
/Skyfall.arm7
/Skyfall.dbg
/Skyfall.i486
/Skyfall.i586
/Skyfall.i686
/Skyfall.m68k
/Skyfall.mips
/Skyfall.mips64
/Skyfall.mpsl
/Skyfall.ppc
/Skyfall.ppc440
/Skyfall.powerppc
/Skyfall.root
/Skyfall.sh
/Skyfall.sh4
/Skyfall.spc
/Skyfall.sparc
/Skyfall.x32
/Skyfall.x64
/Skyfall.x86
/Skyfall.x86_32
/Skyfall.x86_64

# Reference: https://twitter.com/0xrb/status/1089525340949696512

/final.arc
/final.arm
/final.arm4
/final.arm4l
/final.arm4t
/final.arm4tl
/final.armv4l
/final.arm5
/final.arm5n
/final.arm6
/final.arm7
/final.dbg
/final.i486
/final.i586
/final.i686
/final.m68k
/final.mips
/final.mips64
/final.mpsl
/final.ppc
/final.ppc440
/final.powerppc
/final.root
/final.sh
/final.sh4
/final.spc
/final.sparc
/final.x32
/final.x64
/final.x86
/final.x86_32
/final.x86_64

# Reference: https://twitter.com/0xrb/status/1088325073994272768

/maticsdickishuge.arc
/maticsdickishuge.arm
/maticsdickishuge.arm4
/maticsdickishuge.arm4l
/maticsdickishuge.arm4t
/maticsdickishuge.arm4tl
/maticsdickishuge.armv4l
/maticsdickishuge.arm5
/maticsdickishuge.arm5n
/maticsdickishuge.arm6
/maticsdickishuge.arm7
/maticsdickishuge.dbg
/maticsdickishuge.i486
/maticsdickishuge.i586
/maticsdickishuge.i686
/maticsdickishuge.m68k
/maticsdickishuge.mips
/maticsdickishuge.mips64
/maticsdickishuge.mpsl
/maticsdickishuge.ppc
/maticsdickishuge.ppc440
/maticsdickishuge.powerppc
/maticsdickishuge.root
/maticsdickishuge.sh
/maticsdickishuge.sh4
/maticsdickishuge.spc
/maticsdickishuge.sparc
/maticsdickishuge.x32
/maticsdickishuge.x64
/maticsdickishuge.x86
/maticsdickishuge.x86_32
/maticsdickishuge.x86_64

# Reference: https://twitter.com/0xrb/status/1118934478418788353

/arc.daddyscum
/arm.daddyscum
/arm4.daddyscum
/armv4l.daddyscum
/arm5.daddyscum
/arm5n.daddyscum
/arm6.daddyscum
/arm7.daddyscum
/dbg.daddyscum
/i486.daddyscum
/i586.daddyscum
/i686.daddyscum
/m68k.daddyscum
/mips.daddyscum
/mips64.daddyscum
/mpsl.daddyscum
/ppc.daddyscum
/sh4.daddyscum
/spc.daddyscum
/sparc.daddyscum
/x32.daddyscum
/x64.daddyscum
/x86_64.daddyscum

# Reference: https://twitter.com/0xrb/status/1119280360783790082

157.230.43.191:45
/slav.arc
/slav.arm
/slav.arm4
/slav.arm4l
/slav.arm4t
/slav.arm4tl
/slav.armv4l
/slav.arm5
/slav.arm5n
/slav.arm6
/slav.arm7
/slav.dbg
/slav.i486
/slav.i586
/slav.i686
/slav.m68k
/slav.mips
/slav.mips64
/slav.mpsl
/slav.ppc
/slav.ppc440
/slav.powerppc
/slav.root
/slav.sh
/slav.sh4
/slav.spc
/slav.sparc
/slav.x32
/slav.x64
/slav.x86
/slav.x86_32
/slav.x86_64

# Reference: https://twitter.com/0xrb/status/1119288042156711938

77.73.70.235:6859

# Reference: https://twitter.com/0xrb/status/1117364213259931648

176.223.135.216:6859

# Reference: https://twitter.com/0xrb/status/1119428954350391296

51.68.214.116:8372

# Reference: https://twitter.com/0xrb/status/1119278432729407488

199.48.164.49:15412
/dayz.arc
/dayz.arm
/dayz.arm4
/dayz.arm4l
/dayz.arm4t
/dayz.arm4tl
/dayz.armv4l
/dayz.arm5
/dayz.arm5n
/dayz.arm6
/dayz.arm7
/dayz.dbg
/dayz.i486
/dayz.i586
/dayz.i686
/dayz.m68k
/dayz.mips
/dayz.mips64
/dayz.mpsl
/dayz.ppc
/dayz.ppc440
/dayz.powerppc
/dayz.root
/dayz.sh
/dayz.sh4
/dayz.spc
/dayz.sparc
/dayz.x32
/dayz.x64
/dayz.x86
/dayz.x86_32
/dayz.x86_64

# Reference: https://twitter.com/bad_packets/status/1120437110174097408

/ak.arc
/ak.arm
/ak.arm4
/ak.arm4l
/ak.arm4t
/ak.arm4tl
/ak.armv4l
/ak.arm5
/ak.arm5n
/ak.arm6
/ak.arm7
/ak.dbg
/ak.i486
/ak.i586
/ak.i686
/ak.m68k
/ak.mips
/ak.mips64
/ak.mpsl
/ak.ppc
/ak.ppc440
/ak.powerppc
/ak.root
/ak.sh
/ak.sh4
/ak.spc
/ak.sparc
/ak.x32
/ak.x64
/ak.x86
/ak.x86_32
/ak.x86_64
/BigAlma.arc
/BigAlma.arm
/BigAlma.arm4
/BigAlma.arm4l
/BigAlma.arm4t
/BigAlma.arm4tl
/BigAlma.armv4l
/BigAlma.arm5
/BigAlma.arm5n
/BigAlma.arm6
/BigAlma.arm7
/BigAlma.dbg
/BigAlma.i486
/BigAlma.i586
/BigAlma.i686
/BigAlma.m68k
/BigAlma.mips
/BigAlma.mips64
/BigAlma.mpsl
/BigAlma.ppc
/BigAlma.ppc440
/BigAlma.powerppc
/BigAlma.root
/BigAlma.sh
/BigAlma.sh4
/BigAlma.spc
/BigAlma.sparc
/BigAlma.x32
/BigAlma.x64
/BigAlma.x86
/BigAlma.x86_32
/BigAlma.x86_64

# Reference: https://twitter.com/smii_mondher/status/1120819533013573632
# Reference: https://twitter.com/0xrb/status/1121079666545188865

104.248.139.242:1024
/UnHAnaAW.arc
/UnHAnaAW.arm
/UnHAnaAW.arm4
/UnHAnaAW.arm4l
/UnHAnaAW.arm4t
/UnHAnaAW.arm4tl
/UnHAnaAW.armv4l
/UnHAnaAW.arm5
/UnHAnaAW.arm5n
/UnHAnaAW.arm6
/UnHAnaAW.arm7
/UnHAnaAW.dbg
/UnHAnaAW.i486
/UnHAnaAW.i586
/UnHAnaAW.i686
/UnHAnaAW.m68k
/UnHAnaAW.mips
/UnHAnaAW.mips64
/UnHAnaAW.mpsl
/UnHAnaAW.ppc
/UnHAnaAW.ppc440
/UnHAnaAW.powerppc
/UnHAnaAW.root
/UnHAnaAW.sh
/UnHAnaAW.sh4
/UnHAnaAW.spc
/UnHAnaAW.sparc
/UnHAnaAW.x32
/UnHAnaAW.x64
/UnHAnaAW.x86
/UnHAnaAW.x86_32
/UnHAnaAW.x86_64

# Reference: https://twitter.com/smii_mondher/status/1102272670626922496

/turbo.arc
/turbo.arm
/turbo.arm4
/turbo.arm4l
/turbo.arm4t
/turbo.arm4tl
/turbo.armv4l
/turbo.arm5
/turbo.arm5n
/turbo.arm6
/turbo.arm7
/turbo.dbg
/turbo.i486
/turbo.i586
/turbo.i686
/turbo.m68k
/turbo.mips
/turbo.mips64
/turbo.mpsl
/turbo.ppc
/turbo.ppc440
/turbo.powerppc
/turbo.root
/turbo.sh
/turbo.sh4
/turbo.spc
/turbo.sparc
/turbo.x32
/turbo.x64
/turbo.x86
/turbo.x86_32
/turbo.x86_64

# Reference: https://twitter.com/smii_mondher/status/1096711602236284928

/woah.arc
/woah.arm
/woah.arm4
/woah.arm4l
/woah.arm4t
/woah.arm4tl
/woah.armv4l
/woah.arm5
/woah.arm5n
/woah.arm6
/woah.arm7
/woah.dbg
/woah.i486
/woah.i586
/woah.i686
/woah.m68k
/woah.mips
/woah.mips64
/woah.mpsl
/woah.ppc
/woah.ppc440
/woah.powerppc
/woah.root
/woah.sh
/woah.sh4
/woah.spc
/woah.sparc
/woah.x32
/woah.x64
/woah.x86
/woah.x86_32
/woah.x86_64

# Reference: https://twitter.com/smii_mondher/status/1095759431336374272

/kadjw.arc
/kadjw.arm
/kadjw.arm4
/kadjw.arm4l
/kadjw.arm4t
/kadjw.arm4tl
/kadjw.armv4l
/kadjw.arm5
/kadjw.arm5n
/kadjw.arm6
/kadjw.arm7
/kadjw.dbg
/kadjw.i486
/kadjw.i586
/kadjw.i686
/kadjw.m68k
/kadjw.mips
/kadjw.mips64
/kadjw.mpsl
/kadjw.ppc
/kadjw.ppc440
/kadjw.powerppc
/kadjw.root
/kadjw.sh
/kadjw.sh4
/kadjw.spc
/kadjw.sparc
/kadjw.x32
/kadjw.x64
/kadjw.x86
/kadjw.x86_32
/kadjw.x86_64

# Reference: https://twitter.com/smii_mondher/status/1092404485434036225

/hitoarc
/hitoarm
/hitoarm4
/hitoarm4l
/hitoarm4t
/hitoarm4tl
/hitoarmv4l
/hitoarm5
/hitoarm5n
/hitoarm6
/hitoarm7
/hitodbg
/hitoi486
/hitoi586
/hitoi686
/hitom68k
/hitomips
/hitomips64
/hitompsl
/hitoppc
/hitoppc440
/hitopowerppc
/hitoroot
/hitosh
/hitosh4
/hitospc
/hitosparc
/hitox32
/hitox64
/hitox86
/hitox86_32
/hitox86_64

# Reference: https://twitter.com/smii_mondher/status/1061935757168967681

/khvirc.arc
/khvirc.arm
/khvirc.arm4
/khvirc.arm4l
/khvirc.arm4t
/khvirc.arm4tl
/khvirc.armv4l
/khvirc.arm5
/khvirc.arm5n
/khvirc.arm6
/khvirc.arm7
/khvirc.dbg
/khvirc.i486
/khvirc.i586
/khvirc.i686
/khvirc.m68k
/khvirc.mips
/khvirc.mips64
/khvirc.mpsl
/khvirc.ppc
/khvirc.ppc440
/khvirc.powerppc
/khvirc.root
/khvirc.sh
/khvirc.sh4
/khvirc.spc
/khvirc.sparc
/khvirc.x32
/khvirc.x64
/khvirc.x86
/khvirc.x86_32
/khvirc.x86_64

# Reference: https://twitter.com/smii_mondher/status/1061348717087911936
# Reference: https://twitter.com/0xrb/status/1122180975633420288

37.49.225.78:1994
/jiren.sh
/kittyhaxz.sh
/arc.Eros
/arm.Eros
/arm4.Eros
/arm4t.Eros
/arm4l.Eros
/arm4tl.Eros
/armv4l.Eros
/arm5.Eros
/arm5n.Eros
/arm6.Eros
/arm7.Eros
/dbg.Eros
/i586.Eros
/i686.Eros
/m68k.Eros
/mips.Eros
/mips64.Eros
/mpsl.Eros
/ppc.Eros
/sh4.Eros
/spc.Eros
/sparc.Eros
/x32.Eros
/x64.Eros
/x86.Eros
/x86_64.Eros
/arc.bushido
/arm.bushido
/arm4.bushido
/arm4l.bushido
/arm4t.bushido
/arm4tl.bushido
/armv4l.bushido
/arm5.bushido
/arm5n.bushido
/arm6.bushido
/arm7.bushido
/dbg.bushido
/i586.bushido
/i686.bushido
/m68k.bushido
/mips.bushido
/mips64.bushido
/mpsl.bushido
/ppc.bushido
/sh4.bushido
/spc.bushido
/sparc.bushido
/x32.bushido
/x64.bushido
/x86.bushido
/x86_64.bushido
/qtx.arc
/qtx.arm
/qtx.arm4
/qtx.arm4l
/qtx.arm4t
/qtx.arm4tl
/qtx.armv4l
/qtx.arm5
/qtx.arm5n
/qtx.arm6
/qtx.arm7
/qtx.dbg
/qtx.i486
/qtx.i586
/qtx.i686
/qtx.m68k
/qtx.mips
/qtx.mips64
/qtx.mpsl
/qtx.ppc
/qtx.ppc440
/qtx.powerppc
/qtx.root
/qtx.sh
/qtx.sh4
/qtx.spc
/qtx.sparc
/qtx.x32
/qtx.x64
/qtx.x86
/qtx.x86_32
/qtx.x86_64
/KHz.arc
/KHz.arm
/KHz.arm4
/KHz.arm4l
/KHz.arm4t
/KHz.arm4tl
/KHz.armv4l
/KHz.arm5
/KHz.arm5n
/KHz.arm6
/KHz.arm7
/KHz.dbg
/KHz.i486
/KHz.i586
/KHz.i686
/KHz.m68k
/KHz.mips
/KHz.mips64
/KHz.mpsl
/KHz.ppc
/KHz.ppc440
/KHz.powerppc
/KHz.root
/KHz.sh
/KHz.sh4
/KHz.spc
/KHz.sparc
/KHz.x32
/KHz.x64
/KHz.x86
/KHz.x86_32
/KHz.x86_64
/otaku.arc
/otaku.arm
/otaku.arm4
/otaku.arm4l
/otaku.arm4t
/otaku.arm4tl
/otaku.armv4l
/otaku.arm5
/otaku.arm5n
/otaku.arm6
/otaku.arm7
/otaku.dbg
/otaku.i486
/otaku.i586
/otaku.i686
/otaku.m68k
/otaku.mips
/otaku.mips64
/otaku.mpsl
/otaku.ppc
/otaku.ppc440
/otaku.powerppc
/otaku.root
/otaku.sh
/otaku.sh4
/otaku.spc
/otaku.sparc
/otaku.x32
/otaku.x64
/otaku.x86
/otaku.x86_32
/otaku.x86_64
/.b.arc
/.b.arm
/.b.arm4
/.b.arm4l
/.b.arm4t
/.b.arm4tl
/.b.armv4l
/.b.arm5
/.b.arm5n
/.b.arm6
/.b.arm7
/.b.dbg
/.b.i486
/.b.i586
/.b.i686
/.b.m68k
/.b.mips
/.b.mips64
/.b.mpsl
/.b.ppc
/.b.ppc440
/.b.powerppc
/.b.root
/.b.sh
/.b.sh4
/.b.spc
/.b.sparc
/.b.x32
/.b.x64
/.b.x86
/.b.x86_32
/.b.x86_64
/8arc8
/8arm8
/8arm48
/8arm4l8
/8arm4t8
/8arm4tl8
/8armv4l8
/8arm58
/8arm5n8
/8arm68
/8arm78
/8dbg8
/8i4868
/8i5868
/8i6868
/8m68k8
/8mips8
/8mips648
/8mpsl8
/8ppc8
/8ppc4408
/8powerppc8
/8root8
/8sh8
/8sh48
/8spc8
/8sparc8
/8x328
/8x648
/8x868
/8x86_328
/8x86_648

# Reference: https://twitter.com/smii_mondher/status/1037269776635256832

/Cult.arc
/Cult.arm
/Cult.arm4
/Cult.arm4l
/Cult.arm4t
/Cult.arm4tl
/Cult.armv4l
/Cult.arm5
/Cult.arm5n
/Cult.arm6
/Cult.arm7
/Cult.dbg
/Cult.i486
/Cult.i586
/Cult.i686
/Cult.m68k
/Cult.mips
/Cult.mips64
/Cult.mpsl
/Cult.ppc
/Cult.ppc440
/Cult.powerppc
/Cult.root
/Cult.sh
/Cult.sh4
/Cult.spc
/Cult.sparc
/Cult.x32
/Cult.x64
/Cult.x86
/Cult.x86_32
/Cult.x86_64
/dcloud.arc
/dcloud.arm
/dcloud.arm4
/dcloud.arm4l
/dcloud.arm4t
/dcloud.arm4tl
/dcloud.armv4l
/dcloud.arm5
/dcloud.arm5n
/dcloud.arm6
/dcloud.arm7
/dcloud.dbg
/dcloud.i486
/dcloud.i586
/dcloud.i686
/dcloud.m68k
/dcloud.mips
/dcloud.mips64
/dcloud.mpsl
/dcloud.ppc
/dcloud.ppc440
/dcloud.powerppc
/dcloud.root
/dcloud.sh
/dcloud.sh4
/dcloud.spc
/dcloud.sparc
/dcloud.x32
/dcloud.x64
/dcloud.x86
/dcloud.x86_32
/dcloud.x86_64
/kaizen.arc
/kaizen.arm
/kaizen.arm4
/kaizen.arm4l
/kaizen.arm4t
/kaizen.arm4tl
/kaizen.armv4l
/kaizen.arm5
/kaizen.arm5n
/kaizen.arm6
/kaizen.arm7
/kaizen.dbg
/kaizen.i486
/kaizen.i586
/kaizen.i686
/kaizen.m68k
/kaizen.mips
/kaizen.mips64
/kaizen.mpsl
/kaizen.ppc
/kaizen.ppc440
/kaizen.powerppc
/kaizen.root
/kaizen.sh
/kaizen.sh4
/kaizen.spc
/kaizen.sparc
/kaizen.x32
/kaizen.x64
/kaizen.x86
/kaizen.x86_32
/kaizen.x86_64
/Katrina.arc
/Katrina.arm
/Katrina.arm4
/Katrina.arm4l
/Katrina.arm4t
/Katrina.arm4tl
/Katrina.armv4l
/Katrina.arm5
/Katrina.arm5n
/Katrina.arm6
/Katrina.arm7
/Katrina.dbg
/Katrina.i486
/Katrina.i586
/Katrina.i686
/Katrina.m68k
/Katrina.mips
/Katrina.mips64
/Katrina.mpsl
/Katrina.ppc
/Katrina.ppc440
/Katrina.powerppc
/Katrina.root
/Katrina.sh
/Katrina.sh4
/Katrina.spc
/Katrina.sparc
/Katrina.x32
/Katrina.x64
/Katrina.x86
/Katrina.x86_32
/Katrina.x86_64
/ket.arc
/ket.arm
/ket.arm4
/ket.arm4l
/ket.arm4t
/ket.arm4tl
/ket.armv4l
/ket.arm5
/ket.arm5n
/ket.arm6
/ket.arm7
/ket.dbg
/ket.i486
/ket.i586
/ket.i686
/ket.m68k
/ket.mips
/ket.mips64
/ket.mpsl
/ket.ppc
/ket.ppc440
/ket.powerppc
/ket.root
/ket.sh
/ket.sh4
/ket.spc
/ket.sparc
/ket.x32
/ket.x64
/ket.x86
/ket.x86_32
/ket.x86_64
/Saikin.arc
/Saikin.arm
/Saikin.arm4
/Saikin.arm4l
/Saikin.arm4t
/Saikin.arm4tl
/Saikin.armv4l
/Saikin.arm5
/Saikin.arm5n
/Saikin.arm6
/Saikin.arm7
/Saikin.dbg
/Saikin.i486
/Saikin.i586
/Saikin.i686
/Saikin.m68k
/Saikin.mips
/Saikin.mips64
/Saikin.mpsl
/Saikin.ppc
/Saikin.ppc440
/Saikin.powerppc
/Saikin.root
/Saikin.sh
/Saikin.sh4
/Saikin.spc
/Saikin.sparc
/Saikin.x32
/Saikin.x64
/Saikin.x86
/Saikin.x86_32
/Saikin.x86_64
/shinoa.arc
/shinoa.arm
/shinoa.arm4
/shinoa.arm4l
/shinoa.arm4t
/shinoa.arm4tl
/shinoa.armv4l
/shinoa.arm5
/shinoa.arm5n
/shinoa.arm6
/shinoa.arm7
/shinoa.dbg
/shinoa.i486
/shinoa.i586
/shinoa.i686
/shinoa.m68k
/shinoa.mips
/shinoa.mips64
/shinoa.mpsl
/shinoa.ppc
/shinoa.ppc440
/shinoa.powerppc
/shinoa.root
/shinoa.sh
/shinoa.sh4
/shinoa.spc
/shinoa.sparc
/shinoa.x32
/shinoa.x64
/shinoa.x86
/shinoa.x86_32
/shinoa.x86_64
/void.arc
/void.arm
/void.arm4
/void.arm4l
/void.arm4t
/void.arm4tl
/void.armv4l
/void.arm5
/void.arm5n
/void.arm6
/void.arm7
/void.dbg
/void.i486
/void.i586
/void.i686
/void.m68k
/void.mips
/void.mips64
/void.mpsl
/void.ppc
/void.ppc440
/void.powerppc
/void.root
/void.sh
/void.sh4
/void.spc
/void.sparc
/void.x32
/void.x64
/void.x86
/void.x86_32
/void.x86_64
/bigsus.arc
/bigsus.arm
/bigsus.arm4
/bigsus.arm4l
/bigsus.arm4t
/bigsus.arm4tl
/bigsus.armv4l
/bigsus.arm5
/bigsus.arm5n
/bigsus.arm6
/bigsus.arm7
/bigsus.dbg
/bigsus.i486
/bigsus.i586
/bigsus.i686
/bigsus.m68k
/bigsus.mips
/bigsus.mips64
/bigsus.mpsl
/bigsus.ppc
/bigsus.ppc440
/bigsus.powerppc
/bigsus.root
/bigsus.sh
/bigsus.sh4
/bigsus.spc
/bigsus.sparc
/bigsus.x32
/bigsus.x64
/bigsus.x86
/bigsus.x86_32
/bigsus.x86_64
/wicked.arc
/wicked.arm
/wicked.arm4
/wicked.arm4l
/wicked.arm4t
/wicked.arm4tl
/wicked.armv4l
/wicked.arm5
/wicked.arm5n
/wicked.arm6
/wicked.arm7
/wicked.dbg
/wicked.i486
/wicked.i586
/wicked.i686
/wicked.m68k
/wicked.mips
/wicked.mips64
/wicked.mpsl
/wicked.ppc
/wicked.ppc440
/wicked.powerppc
/wicked.root
/wicked.sh
/wicked.sh4
/wicked.spc
/wicked.sparc
/wicked.x32
/wicked.x64
/wicked.x86
/wicked.x86_32
/wicked.x86_64

# Reference: https://twitter.com/ankit_anubhav/status/1036554280851763200

/kenjiro.arc
/kenjiro.arm
/kenjiro.arm4
/kenjiro.arm4l
/kenjiro.arm4t
/kenjiro.arm4tl
/kenjiro.armv4l
/kenjiro.arm5
/kenjiro.arm5n
/kenjiro.arm6
/kenjiro.arm7
/kenjiro.dbg
/kenjiro.i486
/kenjiro.i586
/kenjiro.i686
/kenjiro.m68k
/kenjiro.mips
/kenjiro.mips64
/kenjiro.mpsl
/kenjiro.ppc
/kenjiro.ppc440
/kenjiro.powerppc
/kenjiro.root
/kenjiro.sh
/kenjiro.sh4
/kenjiro.spc
/kenjiro.sparc
/kenjiro.x32
/kenjiro.x64
/kenjiro.x86
/kenjiro.x86_32
/kenjiro.x86_64

# Reference: https://twitter.com/smii_mondher/status/969139428508790784

/besuto.arc
/besuto.arm
/besuto.arm4
/besuto.arm4l
/besuto.arm4t
/besuto.arm4tl
/besuto.armv4l
/besuto.arm5
/besuto.arm5n
/besuto.arm6
/besuto.arm7
/besuto.dbg
/besuto.i486
/besuto.i586
/besuto.i686
/besuto.m68k
/besuto.mips
/besuto.mips64
/besuto.mpsl
/besuto.ppc
/besuto.ppc440
/besuto.powerppc
/besuto.root
/besuto.sh
/besuto.sh4
/besuto.spc
/besuto.sparc
/besuto.x32
/besuto.x64
/besuto.x86
/besuto.x86_32
/besuto.x86_64

# Reference: https://twitter.com/360Netlab/status/963625133436006400

/arc.shell
/arm.shell
/arm4.shell
/arm4l.shell
/arm4t.shell
/arm4tl.shell
/armv4l.shell
/arm5.shell
/arm5n.shell
/arm6.shell
/arm7.shell
/dbg.shell
/i586.shell
/i686.shell
/m68k.shell
/mips.shell
/mips64.shell
/mpsl.shell
/ppc.shell
/sh4.shell
/spc.shell
/sparc.shell
/x32.shell
/x64.shell
/x86.shell
/x86_64.shell

# Reference: https://twitter.com/smii_mondher/status/962028744486502401

/arc.satori
/arm.satori
/arm4.satori
/arm4l.satori
/arm4t.satori
/arm4tl.satori
/armv4l.satori
/arm5.satori
/arm5n.satori
/arm6.satori
/arm7.satori
/dbg.satori
/i586.satori
/i686.satori
/m68k.satori
/mips.satori
/mips64.satori
/mpsl.satori
/ppc.satori
/sh4.satori
/spc.satori
/sparc.satori
/x32.satori
/x64.satori
/x86.satori
/x86_64.satori

# Reference: https://twitter.com/smii_mondher/status/958632104765554688

/jennifer.arc
/jennifer.arm
/jennifer.arm4
/jennifer.arm4l
/jennifer.arm4t
/jennifer.arm4tl
/jennifer.armv4l
/jennifer.arm5
/jennifer.arm5n
/jennifer.arm6
/jennifer.arm7
/jennifer.dbg
/jennifer.i486
/jennifer.i586
/jennifer.i686
/jennifer.m68k
/jennifer.mips
/jennifer.mips64
/jennifer.mpsl
/jennifer.ppc
/jennifer.ppc440
/jennifer.powerppc
/jennifer.root
/jennifer.sh
/jennifer.sh4
/jennifer.spc
/jennifer.sparc
/jennifer.x32
/jennifer.x64
/jennifer.x86
/jennifer.x86_32
/jennifer.x86_64

# Reference: https://twitter.com/0xrb/status/1121673907256213505
# Reference: https://twitter.com/0xrb/status/1121678039010570242

80.211.75.183:9375
/Zehir.sh
/Zehir1.sh
/z3hir.arc
/z3hir.arm
/z3hir.arm4
/z3hir.arm4l
/z3hir.arm4t
/z3hir.arm4tl
/z3hir.armv4l
/z3hir.arm5
/z3hir.arm5n
/z3hir.arm6
/z3hir.arm7
/z3hir.dbg
/z3hir.i486
/z3hir.i586
/z3hir.i686
/z3hir.m68k
/z3hir.mips
/z3hir.mips64
/z3hir.mpsl
/z3hir.ppc
/z3hir.ppc440
/z3hir.powerppc
/z3hir.root
/z3hir.sh
/z3hir.sh4
/z3hir.spc
/z3hir.sparc
/z3hir.x32
/z3hir.x64
/z3hir.x86
/z3hir.x86_32
/z3hir.x86_64

# Reference: https://twitter.com/bad_packets/status/1121669080522477570

/ntpdd.arc
/ntpdd.arm
/ntpdd.arm4
/ntpdd.arm4l
/ntpdd.arm4t
/ntpdd.arm4tl
/ntpdd.armv4l
/ntpdd.arm5
/ntpdd.arm5n
/ntpdd.arm6
/ntpdd.arm7
/ntpdd.dbg
/ntpdd.i486
/ntpdd.i586
/ntpdd.i686
/ntpdd.m68k
/ntpdd.mips
/ntpdd.mips64
/ntpdd.mpsl
/ntpdd.ppc
/ntpdd.ppc440
/ntpdd.powerppc
/ntpdd.root
/ntpdd.sh
/ntpdd.sh4
/ntpdd.spc
/ntpdd.sparc
/ntpdd.x32
/ntpdd.x64
/ntpdd.x86
/ntpdd.x86_32
/ntpdd.x86_64

# Reference: https://twitter.com/0xrb/status/1121697929947832320

/lessie1.sh
/goahead.arc
/goahead.arm
/goahead.arm4
/goahead.arm4l
/goahead.arm4t
/goahead.arm4tl
/goahead.armv4l
/goahead.arm5
/goahead.arm5n
/goahead.arm6
/goahead.arm7
/goahead.dbg
/goahead.i486
/goahead.i586
/goahead.i686
/goahead.m68k
/goahead.mips
/goahead.mips64
/goahead.mpsl
/goahead.ppc
/goahead.ppc440
/goahead.powerppc
/goahead.root
/goahead.sh
/goahead.sh4
/goahead.spc
/goahead.sparc
/goahead.x32
/goahead.x64
/goahead.x86
/goahead.x86_32
/goahead.x86_64
/hootoo.arc
/hootoo.arm
/hootoo.arm4
/hootoo.arm4l
/hootoo.arm4t
/hootoo.arm4tl
/hootoo.armv4l
/hootoo.arm5
/hootoo.arm5n
/hootoo.arm6
/hootoo.arm7
/hootoo.dbg
/hootoo.i486
/hootoo.i586
/hootoo.i686
/hootoo.m68k
/hootoo.mips
/hootoo.mips64
/hootoo.mpsl
/hootoo.ppc
/hootoo.ppc440
/hootoo.powerppc
/hootoo.root
/hootoo.sh
/hootoo.sh4
/hootoo.spc
/hootoo.sparc
/hootoo.x32
/hootoo.x64
/hootoo.x86
/hootoo.x86_32
/hootoo.x86_64
/rtek.arc
/rtek.arm
/rtek.arm4
/rtek.arm4l
/rtek.arm4t
/rtek.arm4tl
/rtek.armv4l
/rtek.arm5
/rtek.arm5n
/rtek.arm6
/rtek.arm7
/rtek.dbg
/rtek.i486
/rtek.i586
/rtek.i686
/rtek.m68k
/rtek.mips
/rtek.mips64
/rtek.mpsl
/rtek.ppc
/rtek.ppc440
/rtek.powerppc
/rtek.root
/rtek.sh
/rtek.sh4
/rtek.spc
/rtek.sparc
/rtek.x32
/rtek.x64
/rtek.x86
/rtek.x86_32
/rtek.x86_64
/spp.arc
/spp.arm
/spp.arm4
/spp.arm4l
/spp.arm4t
/spp.arm4tl
/spp.armv4l
/spp.arm5
/spp.arm5n
/spp.arm6
/spp.arm7
/spp.dbg
/spp.i486
/spp.i586
/spp.i686
/spp.m68k
/spp.mips
/spp.mips64
/spp.mpsl
/spp.ppc
/spp.ppc440
/spp.powerppc
/spp.root
/spp.sh
/spp.sh4
/spp.spc
/spp.sparc
/spp.x32
/spp.x64
/spp.x86
/spp.x86_32
/spp.x86_64
/uchttpd.arc
/uchttpd.arm
/uchttpd.arm4
/uchttpd.arm4l
/uchttpd.arm4t
/uchttpd.arm4tl
/uchttpd.armv4l
/uchttpd.arm5
/uchttpd.arm5n
/uchttpd.arm6
/uchttpd.arm7
/uchttpd.dbg
/uchttpd.i486
/uchttpd.i586
/uchttpd.i686
/uchttpd.m68k
/uchttpd.mips
/uchttpd.mips64
/uchttpd.mpsl
/uchttpd.ppc
/uchttpd.ppc440
/uchttpd.powerppc
/uchttpd.root
/uchttpd.sh
/uchttpd.sh4
/uchttpd.spc
/uchttpd.sparc
/uchttpd.x32
/uchttpd.x64
/uchttpd.x86
/uchttpd.x86_32
/uchttpd.x86_64

# Reference: https://twitter.com/0xrb/status/1121820943972593665
# Reference: https://twitter.com/0xrb/status/1121831829298769920

/Yowai1.sh
/maouji1.sh
/maouji.arc
/maouji.arm
/maouji.arm4
/maouji.arm4l
/maouji.arm4t
/maouji.arm4tl
/maouji.armv4l
/maouji.arm5
/maouji.arm5n
/maouji.arm6
/maouji.arm7
/maouji.dbg
/maouji.i486
/maouji.i586
/maouji.i686
/maouji.m68k
/maouji.mips
/maouji.mips64
/maouji.mpsl
/maouji.ppc
/maouji.ppc440
/maouji.powerppc
/maouji.root
/maouji.sh
/maouji.sh4
/maouji.spc
/maouji.sparc
/maouji.x32
/maouji.x64
/maouji.x86
/maouji.x86_32
/maouji.x86_64

# Reference: https://twitter.com/0xrb/status/1121815166348218368

185.244.25.173:6996
/Fibre.arc
/Fibre.arm
/Fibre.arm4
/Fibre.arm4l
/Fibre.arm4t
/Fibre.arm4tl
/Fibre.armv4l
/Fibre.arm5
/Fibre.arm5n
/Fibre.arm6
/Fibre.arm7
/Fibre.dbg
/Fibre.i486
/Fibre.i586
/Fibre.i686
/Fibre.m68k
/Fibre.mips
/Fibre.mips64
/Fibre.mpsl
/Fibre.ppc
/Fibre.ppc440
/Fibre.powerppc
/Fibre.root
/Fibre.sh
/Fibre.sh4
/Fibre.spc
/Fibre.sparc
/Fibre.x32
/Fibre.x64
/Fibre.x86
/Fibre.x86_32
/Fibre.x86_64

# Reference: https://twitter.com/bad_packets/status/1122017887076507653
# Reference: https://twitter.com/0xrb/status/1122040829109886976
# Reference: https://twitter.com/bad_packets/status/1122046441256415232

/mpps
5.180.40.102:89
180.40.102.89:89
1vex.cn

# Reference: https://twitter.com/0xrb/status/1122057859259195393

/c4tch_m3_if_y0u_c4n.arc
/c4tch_m3_if_y0u_c4n.arm
/c4tch_m3_if_y0u_c4n.arm4
/c4tch_m3_if_y0u_c4n.arm4l
/c4tch_m3_if_y0u_c4n.arm4t
/c4tch_m3_if_y0u_c4n.arm4tl
/c4tch_m3_if_y0u_c4n.armv4l
/c4tch_m3_if_y0u_c4n.arm5
/c4tch_m3_if_y0u_c4n.arm5n
/c4tch_m3_if_y0u_c4n.arm6
/c4tch_m3_if_y0u_c4n.arm7
/c4tch_m3_if_y0u_c4n.dbg
/c4tch_m3_if_y0u_c4n.i486
/c4tch_m3_if_y0u_c4n.i586
/c4tch_m3_if_y0u_c4n.i686
/c4tch_m3_if_y0u_c4n.m68k
/c4tch_m3_if_y0u_c4n.mips
/c4tch_m3_if_y0u_c4n.mips64
/c4tch_m3_if_y0u_c4n.mpsl
/c4tch_m3_if_y0u_c4n.ppc
/c4tch_m3_if_y0u_c4n.ppc440
/c4tch_m3_if_y0u_c4n.powerppc
/c4tch_m3_if_y0u_c4n.root
/c4tch_m3_if_y0u_c4n.sh
/c4tch_m3_if_y0u_c4n.sh4
/c4tch_m3_if_y0u_c4n.spc
/c4tch_m3_if_y0u_c4n.sparc
/c4tch_m3_if_y0u_c4n.x32
/c4tch_m3_if_y0u_c4n.x64
/c4tch_m3_if_y0u_c4n.x86
/c4tch_m3_if_y0u_c4n.x86_32
/c4tch_m3_if_y0u_c4n.x86_64

# Reference: https://twitter.com/0xrb/status/1122087783739166720

/uint35.sh
/ako.arc
/ako.arm
/ako.arm4
/ako.arm4l
/ako.arm4t
/ako.arm4tl
/ako.armv4l
/ako.arm5
/ako.arm5n
/ako.arm6
/ako.arm7
/ako.dbg
/ako.i486
/ako.i586
/ako.i686
/ako.m68k
/ako.mips
/ako.mips64
/ako.mpsl
/ako.ppc
/ako.ppc440
/ako.powerppc
/ako.root
/ako.sh
/ako.sh4
/ako.spc
/ako.sparc
/ako.x32
/ako.x64
/ako.x86
/ako.x86_32
/ako.x86_64

# Reference: https://twitter.com/smii_mondher/status/1122583415667273728

/hx86_64

# Reference: https://twitter.com/0xrb/status/1122755177033768961

/sasuke.arc
/sasuke.arm
/sasuke.arm4
/sasuke.arm4l
/sasuke.arm4t
/sasuke.arm4tl
/sasuke.armv4l
/sasuke.arm5
/sasuke.arm5n
/sasuke.arm6
/sasuke.arm7
/sasuke.dbg
/sasuke.i486
/sasuke.i586
/sasuke.i686
/sasuke.m68k
/sasuke.mips
/sasuke.mips64
/sasuke.mpsl
/sasuke.ppc
/sasuke.ppc440
/sasuke.powerppc
/sasuke.root
/sasuke.sh
/sasuke.sh4
/sasuke.spc
/sasuke.sparc
/sasuke.x32
/sasuke.x64
/sasuke.x86
/sasuke.x86_32
/sasuke.x86_64
163.172.154.119:3771

# Reference: https://twitter.com/0xrb/status/1122728648996298752

/arc.akira
/arm.akira
/arm4.akira
/arm4l.akira
/arm4t.akira
/arm4tl.akira
/armv4l.akira
/arm5.akira
/arm5n.akira
/arm6.akira
/arm7.akira
/dbg.akira
/i486.akira
/i586.akira
/i686.akira
/m68k.akira
/mips.akira
/mips64.akira
/mpsl.akira
/ppc.akira
/ppc440.akira
/powerppc.akira
/root.akira
/sh.akira
/sh4.akira
/spc.akira
/sparc.akira
/x32.akira
/x64.akira
/x86.akira
/x86_32.akira
/x86_64.akira
/arc.akira.ak
/arm.akira.ak
/arm4.akira.ak
/arm4l.akira.ak
/arm4t.akira.ak
/arm4tl.akira.ak
/armv4l.akira.ak
/arm5.akira.ak
/arm5n.akira.ak
/arm6.akira.ak
/arm7.akira.ak
/dbg.akira.ak
/i486.akira.ak
/i586.akira.ak
/i686.akira.ak
/m68k.akira.ak
/mips.akira.ak
/mips64.akira.ak
/mpsl.akira.ak
/ppc.akira.ak
/ppc440.akira.ak
/powerppc.akira.ak
/root.akira.ak
/sh.akira.ak
/sh4.akira.ak
/spc.akira.ak
/sparc.akira.ak
/x32.akira.ak
/x64.akira.ak
/x86.akira.ak
/x86_32.akira.ak
/x86_64.akira.ak
185.244.25.199:1791

# Reference: https://twitter.com/0xrb/status/1123162337974734848

185.172.110.226:65535

# Reference: https://twitter.com/0xrb/status/1123149312689491973

23.19.58.91:6075

# Reference: https://twitter.com/UrBogan/status/1124765311729750016

/jaknet.arc
/jaknet.arm
/jaknet.arm4
/jaknet.arm4l
/jaknet.arm4t
/jaknet.arm4tl
/jaknet.armv4l
/jaknet.arm5
/jaknet.arm5n
/jaknet.arm6
/jaknet.arm7
/jaknet.dbg
/jaknet.i486
/jaknet.i586
/jaknet.i686
/jaknet.m68k
/jaknet.mips
/jaknet.mips64
/jaknet.mpsl
/jaknet.ppc
/jaknet.ppc440
/jaknet.powerppc
/jaknet.root
/jaknet.sh
/jaknet.sh4
/jaknet.spc
/jaknet.sparc
/jaknet.x32
/jaknet.x64
/jaknet.x86
/jaknet.x86_32
/jaknet.x86_64

# Reference: https://twitter.com/UrBogan/status/1061633676688019456

/loli.arc
/loli.arm
/loli.arm4
/loli.arm4l
/loli.arm4t
/loli.arm4tl
/loli.armv4l
/loli.arm5
/loli.arm5n
/loli.arm6
/loli.arm7
/loli.dbg
/loli.i486
/loli.i586
/loli.i686
/loli.m68k
/loli.mips
/loli.mips64
/loli.mpsl
/loli.ppc
/loli.ppc440
/loli.powerppc
/loli.root
/loli.sh
/loli.sh4
/loli.spc
/loli.sparc
/loli.x32
/loli.x64
/loli.x86
/loli.x86_32
/loli.x86_64
/loli.huawei
/loli.zte

# Reference: https://twitter.com/rommeljoven17/status/1125966892697415680

/gobot.arc
/gobot.arm
/gobot.arm4
/gobot.arm4l
/gobot.arm4t
/gobot.arm4tl
/gobot.armv4l
/gobot.arm5
/gobot.arm5n
/gobot.arm6
/gobot.arm64
/gobot.arm7
/gobot.dbg
/gobot.i486
/gobot.i586
/gobot.i686
/gobot.m68k
/gobot.mips
/gobot.mips64
/gobot.mipsl
/gobot.mpsl
/gobot.ppc
/gobot.ppc440
/gobot.powerppc
/gobot.root
/gobot.sh
/gobot.sh4
/gobot.spc
/gobot.sparc
/gobot.x32
/gobot.x64
/gobot.x86
/gobot.x86_32
/gobot.x86_64
/gobot.bsd
/gobot.exe
/gobot.mac

# Reference: https://twitter.com/rommeljoven17/status/1036430038894166016

/Gai.arc
/Gai.arm
/Gai.arm4
/Gai.arm4l
/Gai.arm4t
/Gai.arm4tl
/Gai.armv4l
/Gai.arm5
/Gai.arm5n
/Gai.arm6
/Gai.arm64
/Gai.arm7
/Gai.dbg
/Gai.i486
/Gai.i586
/Gai.i686
/Gai.m68k
/Gai.mips
/Gai.mips64
/Gai.mpsl
/Gai.ppc
/Gai.ppc440
/Gai.powerppc
/Gai.root
/Gai.sh
/Gai.sh4
/Gai.spc
/Gai.sparc
/Gai.x32
/Gai.x64
/Gai.x86
/Gai.x86_32
/Gai.x86_64

# Reference: https://twitter.com/_odisseus/status/1128971465074855936

/un1on.sh
/yuh.arc
/yuh.arm
/yuh.arm4
/yuh.arm4l
/yuh.arm4t
/yuh.arm4tl
/yuh.arm4tll
/yuh.armv4l
/yuh.arm5
/yuh.arm5n
/yuh.arm6
/yuh.arm64
/yuh.arm7
/yuh.dbg
/yuh.i4
/yuh.i486
/yuh.i586
/yuh.i686
/yuh.m68k
/yuh.mips
/yuh.mips64
/yuh.mpsl
/yuh.mipsel
/yuh.ppc
/yuh.ppc2
/yuh.ppc440
/yuh.powerppc
/yuh.root
/yuh.sh
/yuh.sh4
/yuh.ssh4
/yuh.spc
/yuh.sparc
/yuh.x32
/yuh.x64
/yuh.x86
/yuh.x86_32
/yuh.x86_64

# Reference: https://twitter.com/bad_packets/status/1130361720239665152

/arc.akirag
/arm.akirag
/arm4.akirag
/arm4l.akirag
/arm4t.akirag
/arm4tl.akirag
/armv4l.akirag
/arm5.akirag
/arm5n.akirag
/arm6.akirag
/arm7.akirag
/dbg.akirag
/i486.akirag
/i586.akirag
/i686.akirag
/m68k.akirag
/mips.akirag
/mips64.akirag
/mpsl.akirag
/ppc.akirag
/sh4.akirag
/spc.akirag
/sparc.akirag
/x32.akirag
/x64.akirag
/x86.akirag
/x86_64.akirag

# Reference: https://www.stratosphereips.org/blog/2019/5/17/iot-malware-analysis-series-a-mirai-variant-in-ctu-iot-malware-capture-49-1

 134.209.72.171:4554

# Reference: https://twitter.com/bad_packets/status/1130574485008949249

/sorai.arc
/sorai.arm
/sorai.arm4
/sorai.arm4l
/sorai.arm4t
/sorai.arm4tl
/sorai.arm4tll
/sorai.armv4l
/sorai.arm5
/sorai.arm5n
/sorai.arm6
/sorai.arm64
/sorai.arm7
/sorai.dbg
/sorai.i4
/sorai.i486
/sorai.i586
/sorai.i686
/sorai.m68k
/sorai.mips
/sorai.mips64
/sorai.mpsl
/sorai.mipsel
/sorai.ppc
/sorai.ppc2
/sorai.ppc440
/sorai.powerppc
/sorai.root
/sorai.sh
/sorai.sh4
/sorai.ssh4
/sorai.spc
/sorai.sparc
/sorai.x32
/sorai.x64
/sorai.x86
/sorai.x86_32
/sorai.x86_64

# Reference: https://otx.alienvault.com/pulse/5ce6ae4b1c699501802c814c

32.235.102.123:1337
ililililililililil.hopto.org

# Reference: https://twitter.com/VessOnSecurity/status/1130611319961509889

/oka.arc
/oka.arm
/oka.arm4
/oka.arm4l
/oka.arm4t
/oka.arm4tl
/oka.arm4tll
/oka.armv4l
/oka.arm5
/oka.arm5n
/oka.arm6
/oka.arm64
/oka.arm7
/oka.dbg
/oka.i4
/oka.i486
/oka.i586
/oka.i686
/oka.m68k
/oka.mips
/oka.mips64
/oka.mpsl
/oka.mipsel
/oka.ppc
/oka.ppc2
/oka.ppc440
/oka.powerppc
/oka.root
/oka.sh
/oka.sh4
/oka.ssh4
/oka.spc
/oka.sparc
/oka.x32
/oka.x64
/oka.x86
/oka.x86_32
/oka.x86_64
/LordAlma.arc
/LordAlma.arm
/LordAlma.arm4
/LordAlma.arm4l
/LordAlma.arm4t
/LordAlma.arm4tl
/LordAlma.arm4tll
/LordAlma.armv4l
/LordAlma.arm5
/LordAlma.arm5n
/LordAlma.arm6
/LordAlma.arm64
/LordAlma.arm7
/LordAlma.dbg
/LordAlma.i4
/LordAlma.i486
/LordAlma.i586
/LordAlma.i686
/LordAlma.m68k
/LordAlma.mips
/LordAlma.mips64
/LordAlma.mpsl
/LordAlma.mipsel
/LordAlma.ppc
/LordAlma.ppc2
/LordAlma.ppc440
/LordAlma.powerppc
/LordAlma.root
/LordAlma.sh
/LordAlma.sh4
/LordAlma.ssh4
/LordAlma.spc
/LordAlma.sparc
/LordAlma.x32
/LordAlma.x64
/LordAlma.x86
/LordAlma.x86_32
/LordAlma.x86_64

# Reference: https://twitter.com/bad_packets/status/1132010592061890560

/Dito.arc
/Dito.arm
/Dito.arm4
/Dito.arm4l
/Dito.arm4t
/Dito.arm4tl
/Dito.arm4tll
/Dito.armv4l
/Dito.arm5
/Dito.arm5n
/Dito.arm6
/Dito.arm64
/Dito.arm7
/Dito.dbg
/Dito.i4
/Dito.i486
/Dito.i586
/Dito.i686
/Dito.m68k
/Dito.mips
/Dito.mips64
/Dito.mpsl
/Dito.mipsel
/Dito.ppc
/Dito.ppc2
/Dito.ppc440
/Dito.powerppc
/Dito.root
/Dito.sh
/Dito.sh4
/Dito.ssh4
/Dito.spc
/Dito.sparc
/Dito.x32
/Dito.x64
/Dito.x86
/Dito.x86_32
/Dito.x86_64

# Reference: https://twitter.com/_odisseus/status/1132952263826259968

/garc
/garm
/garm4
/garm4l
/garm4t
/garm4tl
/garm4tll
/garmv4l
/garm5
/garm5n
/garm6
/garm64
/garm7
/gi486
/gi586
/gi686
/gm68k
/gmips
/gmips64
/gmipsel
/gmpsl
/gppc
/gppc2
/gpowerppc
/gspc
/gxtensa
/gsh-sh4
/gsh4
/gx86
/gx86-64-core-i7
/gx86-core2
/gx86-i686
/ugei1
/ugei2
/ugei3
/ugei4
/ugei5
/ugei6

# Reference: https://twitter.com/ankit_anubhav/status/1132974251194011648

/Faker.arc
/Faker.arm
/Faker.arm4
/Faker.arm4l
/Faker.arm4t
/Faker.arm4tl
/Faker.arm4tll
/Faker.armv4l
/Faker.arm5
/Faker.arm5n
/Faker.arm6
/Faker.arm64
/Faker.arm7
/Faker.dbg
/Faker.i4
/Faker.i486
/Faker.i586
/Faker.i686
/Faker.m68k
/Faker.mips
/Faker.mips64
/Faker.mpsl
/Faker.mipsel
/Faker.ppc
/Faker.ppc2
/Faker.ppc440
/Faker.powerppc
/Faker.root
/Faker.sh
/Faker.sh4
/Faker.ssh4
/Faker.spc
/Faker.sparc
/Faker.x32
/Faker.x64
/Faker.x86
/Faker.x86_32
/Faker.x86_64

# Reference: https://twitter.com/0xrb/status/1133055807572959232

122.10.82.239:5022

# Reference: https://twitter.com/VessOnSecurity/status/1133323732108402691

/daddyscum.arc
/daddyscum.arm
/daddyscum.arm4
/daddyscum.arm4l
/daddyscum.arm4t
/daddyscum.arm4tl
/daddyscum.arm4tll
/daddyscum.armv4l
/daddyscum.arm5
/daddyscum.arm5n
/daddyscum.arm6
/daddyscum.arm64
/daddyscum.arm7
/daddyscum.dbg
/daddyscum.i4
/daddyscum.i486
/daddyscum.i586
/daddyscum.i686
/daddyscum.m68k
/daddyscum.mips
/daddyscum.mips64
/daddyscum.mpsl
/daddyscum.mipsel
/daddyscum.ppc
/daddyscum.ppc2
/daddyscum.ppc440
/daddyscum.powerppc
/daddyscum.root
/daddyscum.sh
/daddyscum.sh4
/daddyscum.ssh4
/daddyscum.spc
/daddyscum.sparc
/daddyscum.x32
/daddyscum.x64
/daddyscum.x86
/daddyscum.x86_32
/daddyscum.x86_64
/GenAI.arc
/GenAI.arm
/GenAI.arm4
/GenAI.arm4l
/GenAI.arm4t
/GenAI.arm4tl
/GenAI.arm4tll
/GenAI.armv4l
/GenAI.arm5
/GenAI.arm5n
/GenAI.arm6
/GenAI.arm64
/GenAI.arm7
/GenAI.dbg
/GenAI.i4
/GenAI.i486
/GenAI.i586
/GenAI.i686
/GenAI.m68k
/GenAI.mips
/GenAI.mips64
/GenAI.mpsl
/GenAI.mipsel
/GenAI.ppc
/GenAI.ppc2
/GenAI.ppc440
/GenAI.powerppc
/GenAI.root
/GenAI.sh
/GenAI.sh4
/GenAI.ssh4
/GenAI.spc
/GenAI.sparc
/GenAI.x32
/GenAI.x64
/GenAI.x86
/GenAI.x86_32
/GenAI.x86_64
/Orage.arc
/Orage.arm
/Orage.arm4
/Orage.arm4l
/Orage.arm4t
/Orage.arm4tl
/Orage.arm4tll
/Orage.armv4l
/Orage.arm5
/Orage.arm5n
/Orage.arm6
/Orage.arm64
/Orage.arm7
/Orage.dbg
/Orage.i4
/Orage.i486
/Orage.i586
/Orage.i686
/Orage.m68k
/Orage.mips
/Orage.mips64
/Orage.mpsl
/Orage.mipsel
/Orage.ppc
/Orage.ppc2
/Orage.ppc440
/Orage.powerppc
/Orage.root
/Orage.sh
/Orage.sh4
/Orage.ssh4
/Orage.spc
/Orage.sparc
/Orage.x32
/Orage.x64
/Orage.x86
/Orage.x86_32
/Orage.x86_64
/Trouble.arc
/Trouble.arm
/Trouble.arm4
/Trouble.arm4l
/Trouble.arm4t
/Trouble.arm4tl
/Trouble.arm4tll
/Trouble.armv4l
/Trouble.arm5
/Trouble.arm5n
/Trouble.arm6
/Trouble.arm64
/Trouble.arm7
/Trouble.dbg
/Trouble.i4
/Trouble.i486
/Trouble.i586
/Trouble.i686
/Trouble.m68k
/Trouble.mips
/Trouble.mips64
/Trouble.mpsl
/Trouble.mipsel
/Trouble.ppc
/Trouble.ppc2
/Trouble.ppc440
/Trouble.powerppc
/Trouble.root
/Trouble.sh
/Trouble.sh4
/Trouble.ssh4
/Trouble.spc
/Trouble.sparc
/Trouble.x32
/Trouble.x64
/Trouble.x86
/Trouble.x86_32
/Trouble.x86_64

# Reference: https://blog.netlab.360.com/new-mirai-variant-with-dga/

tr069.online
tr069.support
tr069.tech
zugzwang.me

# Reference: https://twitter.com/bad_packets/status/1134904673289162752

/_-255.Net.arc
/_-255.Net.arm
/_-255.Net.arm4
/_-255.Net.arm4l
/_-255.Net.arm4t
/_-255.Net.arm4tl
/_-255.Net.arm4tll
/_-255.Net.armv4l
/_-255.Net.arm5
/_-255.Net.arm5n
/_-255.Net.arm6
/_-255.Net.arm64
/_-255.Net.arm7
/_-255.Net.dbg
/_-255.Net.i4
/_-255.Net.i486
/_-255.Net.i586
/_-255.Net.i686
/_-255.Net.m68k
/_-255.Net.mips
/_-255.Net.mips64
/_-255.Net.mpsl
/_-255.Net.mipsel
/_-255.Net.ppc
/_-255.Net.ppc2
/_-255.Net.ppc440
/_-255.Net.powerppc
/_-255.Net.root
/_-255.Net.root32
/_-255.Net.sh
/_-255.Net.sh4
/_-255.Net.ssh4
/_-255.Net.spc
/_-255.Net.sparc
/_-255.Net.x32
/_-255.Net.x64
/_-255.Net.x86
/_-255.Net.x86_32
/_-255.Net.x86_64

# Reference: https://twitter.com/bad_packets/status/1135250671798611975

/bigPussi.arc
/bigPussi.arm
/bigPussi.arm4
/bigPussi.arm4l
/bigPussi.arm4t
/bigPussi.arm4tl
/bigPussi.arm4tll
/bigPussi.armv4l
/bigPussi.arm5
/bigPussi.arm5n
/bigPussi.arm6
/bigPussi.arm64
/bigPussi.arm7
/bigPussi.dbg
/bigPussi.i4
/bigPussi.i486
/bigPussi.i586
/bigPussi.i686
/bigPussi.m68k
/bigPussi.mips
/bigPussi.mips64
/bigPussi.mpsl
/bigPussi.mipsel
/bigPussi.ppc
/bigPussi.ppc2
/bigPussi.ppc440
/bigPussi.powerppc
/bigPussi.root
/bigPussi.root32
/bigPussi.sh
/bigPussi.sh4
/bigPussi.ssh4
/bigPussi.spc
/bigPussi.sparc
/bigPussi.x32
/bigPussi.x64
/bigPussi.x86
/bigPussi.x86_32
/bigPussi.x86_64
/spc.spc

# Reference: https://twitter.com/liuya0904/status/1135390856150544384

185.244.25.166:5484

# Reference: https://twitter.com/0xrb/status/1135869164239769601

cnc.yiffgallery.xyz
185.244.25.173:6996

# Reference: https://unit42.paloaltonetworks.com/new-mirai-variant-adds-8-new-exploits-targets-additional-iot-devices/
# Reference: https://otx.alienvault.com/pulse/5cfa66ced7bc379b04017f36

akuma.pw
akumaiotsolutions.pw

# Reference: https://twitter.com/bad_packets/status/1138177432870014976

/orphic.arc
/orphic.arm
/orphic.arm4
/orphic.arm4l
/orphic.arm4t
/orphic.arm4tl
/orphic.arm4tll
/orphic.armv4l
/orphic.arm5
/orphic.arm5n
/orphic.arm6
/orphic.arm64
/orphic.arm7
/orphic.dbg
/orphic.i4
/orphic.i486
/orphic.i586
/orphic.i686
/orphic.kill
/orphic.m68k
/orphic.mips
/orphic.mips64
/orphic.mpsl
/orphic.mipsel
/orphic.ppc
/orphic.ppc2
/orphic.ppc440
/orphic.powerppc
/orphic.root
/orphic.root32
/orphic.sh
/orphic.sh4
/orphic.ssh4
/orphic.spc
/orphic.sparc
/orphic.x32
/orphic.x64
/orphic.x86
/orphic.x86_32
/orphic.x86_64

# Reference: https://twitter.com/MasafumiNegishi/status/1138345529190969344

185.244.25.148:2

# Reference: https://twitter.com/0xrb/status/1139413477297029120

185.244.25.164:3456
/myth.arc
/myth.arm
/myth.arm4
/myth.arm4l
/myth.arm4t
/myth.arm4tl
/myth.arm4tll
/myth.armv4l
/myth.arm5
/myth.arm5n
/myth.arm6
/myth.arm64
/myth.arm7
/myth.dbg
/myth.i4
/myth.i486
/myth.i586
/myth.i686
/myth.kill
/myth.m68k
/myth.mips
/myth.mips64
/myth.mpsl
/myth.mipsel
/myth.ppc
/myth.ppc2
/myth.ppc440
/myth.powerppc
/myth.root
/myth.root32
/myth.sh
/myth.sh4
/myth.ssh4
/myth.spc
/myth.sparc
/myth.x32
/myth.x64
/myth.x86
/myth.x86_32
/myth.x86_64
/myth1.sh
/doxarc
/doxarm
/doxarm4
/doxarm4l
/doxarm4t
/doxarm4tl
/doxarm4tll
/doxarmv4l
/doxarm5
/doxarm5n
/doxarm6
/doxarm64
/doxarm7
/doxdbg
/doxi4
/doxi486
/doxi586
/doxi686
/doxkill
/doxm68k
/doxmips
/doxmips64
/doxmpsl
/doxmipsel
/doxppc
/doxppc2
/doxppc440
/doxpowerppc
/doxroot
/doxroot32
/doxsh
/doxsh4
/doxssh4
/doxspc
/doxsparc
/doxx32
/doxx64
/doxx86
/doxx86_32
/doxx86_64

# Reference: https://twitter.com/VessOnSecurity/status/1139243241210093571

/okazzx.arc
/okazzx.arm
/okazzx.arm4
/okazzx.arm4l
/okazzx.arm4t
/okazzx.arm4tl
/okazzx.arm4tll
/okazzx.armv4l
/okazzx.arm5
/okazzx.arm5n
/okazzx.arm6
/okazzx.arm64
/okazzx.arm7
/okazzx.dbg
/okazzx.i4
/okazzx.i486
/okazzx.i586
/okazzx.i686
/okazzx.kill
/okazzx.m68k
/okazzx.mips
/okazzx.mips64
/okazzx.mpsl
/okazzx.mipsel
/okazzx.ppc
/okazzx.ppc2
/okazzx.ppc440
/okazzx.powerppc
/okazzx.root
/okazzx.root32
/okazzx.sh
/okazzx.sh4
/okazzx.ssh4
/okazzx.spc
/okazzx.sparc
/okazzx.x32
/okazzx.x64
/okazzx.x86
/okazzx.x86_32
/okazzx.x86_64
/obaris.arc
/obaris.arm
/obaris.arm4
/obaris.arm4l
/obaris.arm4t
/obaris.arm4tl
/obaris.arm4tll
/obaris.armv4l
/obaris.arm5
/obaris.arm5n
/obaris.arm6
/obaris.arm64
/obaris.arm7
/obaris.dbg
/obaris.i4
/obaris.i486
/obaris.i586
/obaris.i686
/obaris.kill
/obaris.m68k
/obaris.mips
/obaris.mips64
/obaris.mpsl
/obaris.mipsel
/obaris.ppc
/obaris.ppc2
/obaris.ppc440
/obaris.powerppc
/obaris.root
/obaris.root32
/obaris.sh
/obaris.sh4
/obaris.ssh4
/obaris.spc
/obaris.sparc
/obaris.x32
/obaris.x64
/obaris.x86
/obaris.x86_32
/obaris.x86_64

# Reference: https://twitter.com/bad_packets/status/1141078356273688576

68.183.151.62:8372

# Reference: https://twitter.com/bad_packets/status/1140899261766352897

185.244.25.157:5034

# Reference: https://twitter.com/bad_packets/status/1140728797823557632

188.165.179.9:358
188.165.179.9:666

# Reference: https://twitter.com/ankit_anubhav/status/1140621062197014529 (# Andypandy)
# Reference: https://twitter.com/bad_packets/status/1139265052341522432
# Reference: https://twitter.com/DomainTools/status/1139274018693869568

http://104.244.76.15
cnc.ddoshard.com
miningv2.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/193.70.26.48/relations

cncv2.duckdns.org

# Reference: https://www.virustotal.com/gui/ip-address/209.141.55.73/relations

pstkgpo.us

# Reference: https://twitter.com/ankit_anubhav/status/1140623068844322816
# Reference: https://twitter.com/nicter_jp/status/1141179278723186688

94.156.77.36:45815
masterbogachev.com

# Reference: https://twitter.com/MasafumiNegishi/status/1138345529190969344

185.244.25.148:2

# Reference: https://twitter.com/bad_packets/status/1141284920238563328

/arc.xeno.ak
/arm.xeno.ak
/arm4.xeno.ak
/arm4l.xeno.ak
/arm4t.xeno.ak
/arm4tl.xeno.ak
/armv4l.xeno.ak
/arm5.xeno.ak
/arm5n.xeno.ak
/arm6.xeno.ak
/arm64.xeno.ak
/arm7.xeno.ak
/dbg.xeno.ak
/i486.xeno.ak
/i586.xeno.ak
/i686.xeno.ak
/m68k.xeno.ak
/mips.xeno.ak
/mips64.xeno.ak
/mpsl.xeno.ak
/mipsel.xeno.ak
/ppc.xeno.ak
/ppc440.xeno.ak
/powerppc.xeno.ak
/sh4.xeno.ak
/spc.xeno.ak
/sparc.xeno.ak
/x32.xeno.ak
/x64.xeno.ak
/x86.xeno.ak
/x86_32.xeno.ak
/x86_64.xeno.ak

# Reference: https://twitter.com/bad_packets/status/1141584871812292608

91.134.120.5:1024

# Reference: https://twitter.com/bad_packets/status/1141849087588753408

/SinixV4.arc
/SinixV4.arm
/SinixV4.arm4
/SinixV4.arm4l
/SinixV4.arm4t
/SinixV4.arm4tl
/SinixV4.arm4tll
/SinixV4.armv4l
/SinixV4.arm5
/SinixV4.arm5n
/SinixV4.arm6
/SinixV4.arm64
/SinixV4.arm7
/SinixV4.dbg
/SinixV4.i4
/SinixV4.i486
/SinixV4.i586
/SinixV4.i686
/SinixV4.kill
/SinixV4.m68k
/SinixV4.mips
/SinixV4.mips64
/SinixV4.mpsl
/SinixV4.mipsel
/SinixV4.ppc
/SinixV4.ppc2
/SinixV4.ppc440
/SinixV4.powerppc
/SinixV4.root
/SinixV4.root32
/SinixV4.sh
/SinixV4.sh4
/SinixV4.ssh4
/SinixV4.spc
/SinixV4.sparc
/SinixV4.x32
/SinixV4.x64
/SinixV4.x86
/SinixV4.x86_32
/SinixV4.x86_64

# Reference: https://twitter.com/bad_packets/status/1142545722367066112

79.137.123.208:555

# Reference: https://twitter.com/bad_packets/status/1142693343496794113

ardp.hldns.ru

# Reference: https://twitter.com/bad_packets/status/1140726096440287233

68.183.55.5:9375

# Reference: https://twitter.com/bad_packets/status/1142600441919750144

104.248.93.159:8372

# Reference: https://twitter.com/MasafumiNegishi/status/1143712813400989697

185.244.25.241:38344

# Reference: https://twitter.com/VessOnSecurity/status/1143903930474213377

198.98.51.104:2737
198.98.51.104:6743
198.98.51.104:8764
198.98.51.104:9182

# Reference: https://www.bleepingcomputer.com/news/security/botnet-uses-ssh-and-adb-to-create-android-cryptomining-army/

198.98.51.104:282

# Reference: https://twitter.com/bad_packets/status/1144154367500550145
# Reference: https://twitter.com/bad_packets/status/1146592416016695296

103.83.157.41:5301
103.83.157.46:5301

# Reference: https://twitter.com/bad_packets/status/1145995657200558080

198.98.59.176:3301

# Reference: https://twitter.com/bad_packets/status/1145985623607533569

198.98.59.176:52869

# Reference: https://twitter.com/bad_packets/status/1146216554943528961

185.172.110.226:1791

# Reference: https://twitter.com/bad_packets/status/1146920735891283968

/skatamayna.arc
/skatamayna.arm
/skatamayna.arm4
/skatamayna.arm4l
/skatamayna.arm4t
/skatamayna.arm4tl
/skatamayna.arm4tll
/skatamayna.armv4l
/skatamayna.arm5
/skatamayna.arm5n
/skatamayna.arm6
/skatamayna.arm64
/skatamayna.arm7
/skatamayna.dbg
/skatamayna.i4
/skatamayna.i486
/skatamayna.i586
/skatamayna.i686
/skatamayna.kill
/skatamayna.m68k
/skatamayna.mips
/skatamayna.mips64
/skatamayna.mpsl
/skatamayna.mipsel
/skatamayna.ppc
/skatamayna.ppc2
/skatamayna.ppc440
/skatamayna.powerppc
/skatamayna.root
/skatamayna.root32
/skatamayna.sh
/skatamayna.sh4
/skatamayna.ssh4
/skatamayna.spc
/skatamayna.sparc
/skatamayna.x32
/skatamayna.x64
/skatamayna.x86
/skatamayna.x86_32
/skatamayna.x86_64

# Reference: https://twitter.com/bad_packets/status/1146887589128892416

159.89.143.217:2269

# Reference: https://twitter.com/bad_packets/status/1147627138817748993

185.172.110.224:65533

# Reference: https://twitter.com/bad_packets/status/1147981572361994240

91.92.109.123:33677

# Reference: https://twitter.com/bad_packets/status/1147984025660751872

185.244.25.157:5034

# Reference: https://twitter.com/bad_packets/status/1148770798565380096

185.172.110.224:65532

# Reference: https://twitter.com/bad_packets/status/1148855521891405824

176.31.78.54:45587
/5743.arc
/5743.arm
/5743.arm4
/5743.arm4l
/5743.arm4t
/5743.arm4tl
/5743.arm4tll
/5743.armv4l
/5743.arm5
/5743.arm5n
/5743.arm6
/5743.arm64
/5743.arm7
/5743.dbg
/5743.i4
/5743.i486
/5743.i586
/5743.i686
/5743.kill
/5743.m68k
/5743.mips
/5743.mips64
/5743.mpsl
/5743.mipsel
/5743.ppc
/5743.ppc2
/5743.ppc440
/5743.powerppc
/5743.root
/5743.root32
/5743.sh4
/5743.ssh4
/5743.spc
/5743.sparc
/5743.x32
/5743.x64
/5743.x86
/5743.x86_32
/5743.x86_64

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/new-miori-variant-uses-unique-protocol-to-communicate-with-cc/
# Reference: https://otx.alienvault.com/pulse/5d2633a3f254f2f806764db4

185.244.39.74:10019
185.244.39.74:25346

# Reference: https://twitter.com/bad_packets/status/1149046904224804864

/lovely

# Reference: https://twitter.com/bad_packets/status/1149474648939061248

x.autistichorse.club
/hhh.arc
/hhh.arm
/hhh.arm4
/hhh.arm4l
/hhh.arm4t
/hhh.arm4tl
/hhh.arm4tll
/hhh.armv4l
/hhh.arm5
/hhh.arm5n
/hhh.arm6
/hhh.arm64
/hhh.arm7
/hhh.dbg
/hhh.i4
/hhh.i486
/hhh.i586
/hhh.i686
/hhh.kill
/hhh.m68k
/hhh.mips
/hhh.mips64
/hhh.mpsl
/hhh.mipsel
/hhh.ppc
/hhh.ppc2
/hhh.ppc440
/hhh.powerppc
/hhh.root
/hhh.root32
/hhh.sh4
/hhh.ssh4
/hhh.spc
/hhh.sparc
/hhh.x32
/hhh.x64
/hhh.x86
/hhh.x86_32
/hhh.x86_64

# Reference: https://twitter.com/bad_packets/status/1149409640813228032

209.141.56.142:37215

# Reference: https://twitter.com/bad_packets/status/1149050383165034496

89.190.159.178:85

# Reference: https://twitter.com/MasafumiNegishi/status/1149556214017118209

198.98.60.48:34567

# Reference: https://twitter.com/0xrb/status/1149941169914142720

/dsec.arc
/dsec.arm
/dsec.arm4
/dsec.arm4l
/dsec.arm4t
/dsec.arm4tl
/dsec.arm4tll
/dsec.armv4l
/dsec.arm5
/dsec.arm5n
/dsec.arm6
/dsec.arm64
/dsec.arm7
/dsec.dbg
/dsec.i4
/dsec.i486
/dsec.i586
/dsec.i686
/dsec.kill
/dsec.m68k
/dsec.mips
/dsec.mips64
/dsec.mpsl
/dsec.mipsel
/dsec.ppc
/dsec.ppc2
/dsec.ppc440
/dsec.powerppc
/dsec.root
/dsec.root32
/dsec.sh4
/dsec.ssh4
/dsec.spc
/dsec.sparc
/dsec.x32
/dsec.x64
/dsec.x86
/dsec.x86_32
/dsec.x86_64

# Reference: https://twitter.com/bad_packets/status/1149797441396285441

194.99.22.138:5301

# Reference: https://twitter.com/bad_packets/status/1150504925937356800

169.239.128.18:5301

# Reference: https://twitter.com/huiwangeth/status/1150733027162517504

n1gger.com

# Reference: https://twitter.com/0xrb/status/1150761561654382592

220.79.34.109:2018

# Reference: https://twitter.com/bad_packets/status/1151004639610855425

192.236.162.197:4426

# Reference: https://twitter.com/bad_packets/status/1150999027237867521

/Votan.arc
/Votan.arm
/Votan.arm4
/Votan.arm4l
/Votan.arm4t
/Votan.arm4tl
/Votan.arm4tll
/Votan.armv4l
/Votan.arm5
/Votan.arm5n
/Votan.arm6
/Votan.arm64
/Votan.arm7
/Votan.dbg
/Votan.i4
/Votan.i486
/Votan.i586
/Votan.i686
/Votan.kill
/Votan.m68k
/Votan.mips
/Votan.mips64
/Votan.mpsl
/Votan.mipsel
/Votan.ppc
/Votan.ppc2
/Votan.ppc440
/Votan.powerppc
/Votan.root
/Votan.root32
/Votan.sh4
/Votan.ssh4
/Votan.spc
/Votan.sparc
/Votan.x32
/Votan.x64
/Votan.x86
/Votan.x86_32
/Votan.x86_64
178.62.78.110:25565

# Reference: https://twitter.com/bad_packets/status/1151694013554028550

89.248.174.198:9999

# Reference: https://twitter.com/bad_packets/status/1152164106285092865

/ok.arc
/ok.arm
/ok.arm4
/ok.arm4l
/ok.arm4t
/ok.arm4tl
/ok.arm4tll
/ok.armv4l
/ok.arm5
/ok.arm5n
/ok.arm6
/ok.arm64
/ok.arm7
/ok.dbg
/ok.i4
/ok.i486
/ok.i586
/ok.i686
/ok.kill
/ok.m68k
/ok.mips
/ok.mips64
/ok.mpsl
/ok.mipsel
/ok.ppc
/ok.ppc2
/ok.ppc440
/ok.powerppc
/ok.root
/ok.root32
/ok.sh4
/ok.ssh4
/ok.spc
/ok.sparc
/ok.x32
/ok.x64
/ok.x86
/ok.x86_32
/ok.x86_64

# Reference: https://twitter.com/bad_packets/status/1152319067350421504

51.91.202.137:5301

# Reference: https://twitter.com/VessOnSecurity/status/1152538162704670721

/r4z0r.arc
/r4z0r.arm
/r4z0r.arm4
/r4z0r.arm4l
/r4z0r.arm4t
/r4z0r.arm4tl
/r4z0r.arm4tll
/r4z0r.armv4l
/r4z0r.arm5
/r4z0r.arm5n
/r4z0r.arm6
/r4z0r.arm64
/r4z0r.arm7
/r4z0r.dbg
/r4z0r.i4
/r4z0r.i486
/r4z0r.i586
/r4z0r.i686
/r4z0r.kill
/r4z0r.m68k
/r4z0r.mips
/r4z0r.mips64
/r4z0r.mpsl
/r4z0r.mipsel
/r4z0r.ppc
/r4z0r.ppc2
/r4z0r.ppc440
/r4z0r.powerppc
/r4z0r.root
/r4z0r.root32
/r4z0r.sh4
/r4z0r.ssh4
/r4z0r.spc
/r4z0r.sparc
/r4z0r.x32
/r4z0r.x64
/r4z0r.x86
/r4z0r.x86_32
/r4z0r.x86_64

# Reference: https://twitter.com/bad_packets/status/1152839425245642752

/ab.arc
/ab.arm
/ab.arm4
/ab.arm4l
/ab.arm4t
/ab.arm4tl
/ab.arm4tll
/ab.armv4l
/ab.arm5
/ab.arm5n
/ab.arm6
/ab.arm64
/ab.arm7
/ab.dbg
/ab.i4
/ab.i486
/ab.i586
/ab.i686
/ab.kill
/ab.m68k
/ab.mips
/ab.mips64
/ab.mpsl
/ab.mipsel
/ab.ppc
/ab.ppc2
/ab.ppc440
/ab.powerppc
/ab.root
/ab.root32
/ab.sh4
/ab.ssh4
/ab.spc
/ab.sparc
/ab.x32
/ab.x64
/ab.x86
/ab.x86_32
/ab.x86_64

# Reference: https://twitter.com/bad_packets/status/1153089384884736000

/u.arc
/u.arm
/u.arm4
/u.arm4l
/u.arm4t
/u.arm4tl
/u.arm4tll
/u.armv4l
/u.arm5
/u.arm5n
/u.arm6
/u.arm64
/u.arm7
/u.dbg
/u.i4
/u.i486
/u.i586
/u.i686
/u.kill
/u.m68k
/u.mips
/u.mips64
/u.mpsl
/u.mipsel
/u.ppc
/u.ppc2
/u.ppc440
/u.powerppc
/u.root
/u.root32
/u.sh4
/u.ssh4
/u.spc
/u.sparc
/u.x32
/u.x64
/u.x86
/u.x86_32
/u.x86_64
ch.silynigr.xyz
80.211.9.40:495

# Reference: https://twitter.com/bad_packets/status/1152689410229620736

/dude.arc
/dude.arm
/dude.arm4
/dude.arm4l
/dude.arm4t
/dude.arm4tl
/dude.arm4tll
/dude.armv4l
/dude.arm5
/dude.arm5n
/dude.arm6
/dude.arm64
/dude.arm7
/dude.dbg
/dude.i4
/dude.i486
/dude.i586
/dude.i686
/dude.kill
/dude.m68k
/dude.mips
/dude.mips64
/dude.mpsl
/dude.mipsel
/dude.ppc
/dude.ppc2
/dude.ppc440
/dude.powerppc
/dude.root
/dude.root32
/dude.sh4
/dude.ssh4
/dude.spc
/dude.sparc
/dude.x32
/dude.x64
/dude.x86
/dude.x86_32
/dude.x86_64
195.231.6.216:48

# Reference: https://twitter.com/bad_packets/status/1153833810032599043

87.120.37.148:38
/autism.arc
/autism.arm
/autism.arm4
/autism.arm4l
/autism.arm4t
/autism.arm4tl
/autism.arm4tll
/autism.armv4l
/autism.arm5
/autism.arm5n
/autism.arm6
/autism.arm64
/autism.arm7
/autism.dbg
/autism.i4
/autism.i486
/autism.i586
/autism.i686
/autism.kill
/autism.m68k
/autism.mips
/autism.mips64
/autism.mpsl
/autism.mipsel
/autism.ppc
/autism.ppc2
/autism.ppc440
/autism.powerppc
/autism.root
/autism.root32
/autism.sh4
/autism.ssh4
/autism.spc
/autism.sparc
/autism.x32
/autism.x64
/autism.x86
/autism.x86_32
/autism.x86_64
/hisil.arc
/hisil.arm
/hisil.arm4
/hisil.arm4l
/hisil.arm4t
/hisil.arm4tl
/hisil.arm4tll
/hisil.armv4l
/hisil.arm5
/hisil.arm5n
/hisil.arm6
/hisil.arm64
/hisil.arm7
/hisil.dbg
/hisil.i4
/hisil.i486
/hisil.i586
/hisil.i686
/hisil.kill
/hisil.m68k
/hisil.mips
/hisil.mips64
/hisil.mpsl
/hisil.mipsel
/hisil.ppc
/hisil.ppc2
/hisil.ppc440
/hisil.powerppc
/hisil.root
/hisil.root32
/hisil.sh4
/hisil.ssh4
/hisil.spc
/hisil.sparc
/hisil.x32
/hisil.x64
/hisil.x86
/hisil.x86_32
/hisil.x86_64

# Reference: https://twitter.com/bad_packets/status/1151699683187683328

/ab.arc
/ab.arm
/ab.arm4
/ab.arm4l
/ab.arm4t
/ab.arm4tl
/ab.arm4tll
/ab.armv4l
/ab.arm5
/ab.arm5n
/ab.arm6
/ab.arm64
/ab.arm7
/ab.dbg
/ab.i4
/ab.i486
/ab.i586
/ab.i686
/ab.kill
/ab.m68k
/ab.mips
/ab.mips64
/ab.mpsl
/ab.mipsel
/ab.ppc
/ab.ppc2
/ab.ppc440
/ab.powerppc
/ab.root
/ab.root32
/ab.sh4
/ab.ssh4
/ab.spc
/ab.sparc
/ab.x32
/ab.x64
/ab.x86
/ab.x86_32
/ab.x86_64

# Reference: https://twitter.com/bad_packets/status/1153956016695812098

104.168.215.139:5301

# Reference: https://twitter.com/bad_packets/status/1154971543857799168

142.11.238.236:34

# Reference: https://twitter.com/bad_packets/status/1154853477664751617

185.246.152.89:37212

# Reference: https://twitter.com/bad_packets/status/1153936032947040256
# Reference: https://twitter.com/bad_packets/status/1154999493781123072

185.172.110.224:70
185.172.110.224:77

# Reference: https://twitter.com/bad_packets/status/1155025248493817856

165.22.209.154:26663

# Reference: https://twitter.com/bad_packets/status/1156495926178922496

103.1.186.118:44
103.1.186.118:6949

# Reference: https://twitter.com/0xrb/status/1156804860345384960

/amen.arc
/amen.arm
/amen.arm4
/amen.arm4l
/amen.arm4t
/amen.arm4tl
/amen.arm4tll
/amen.armv4l
/amen.arm5
/amen.arm5n
/amen.arm6
/amen.arm64
/amen.arm7
/amen.dbg
/amen.i4
/amen.i486
/amen.i586
/amen.i686
/amen.kill
/amen.m68k
/amen.mips
/amen.mips64
/amen.mpsl
/amen.mipsel
/amen.ppc
/amen.ppc2
/amen.ppc440
/amen.powerppc
/amen.root
/amen.root32
/amen.sh4
/amen.ssh4
/amen.spc
/amen.sparc
/amen.x32
/amen.x64
/amen.x86
/amen.x86_32
/amen.x86_64

# Reference: https://blog.trendmicro.com/trendlabs-security-intelligence/keeping-a-hidden-identity-mirai-ccs-in-tor-network/
# Reference: https://otx.alienvault.com/pulse/5d42ef25d68039678206ae45

/t.arc
/t.arm
/t.arm4
/t.arm4l
/t.arm4t
/t.arm4tl
/t.arm4tll
/t.armv4l
/t.arm5
/t.arm5n
/t.arm6
/t.arm64
/t.arm7
/t.dbg
/t.i4
/t.i486
/t.i586
/t.i686
/t.kill
/t.m68k
/t.mips
/t.mips64
/t.mpsl
/t.mipsel
/t.ppc
/t.ppc2
/t.ppc440
/t.powerppc
/t.root
/t.root32
/t.sh4
/t.ssh4
/t.spc
/t.sparc
/t.x32
/t.x64
/t.x86
/t.x86_32
/t.x86_64
nd3rwzslqhxibkl7.onion

# Reference: https://twitter.com/bad_packets/status/1157139943841386503

185.244.150.111:38344

# Reference: https://twitter.com/huiwangeth/status/1157206905015525377

tyx35qmt7pni4pdg.onion

# Reference: https://twitter.com/bad_packets/status/1156294314122551297

159.89.41.188:5301

# Reference: https://twitter.com/bad_packets/status/1157867496961011712

185.172.110.224:79
185.172.110.224:993

# Reference: https://twitter.com/0xrb/status/1157825274790076416

45.129.3.130:1994

# Reference: https://twitter.com/0xrb/status/1157875749577056256

40.89.161.108:1791

# Reference: https://twitter.com/bad_packets/status/1157734891510833152

185.244.25.181:9375

# Reference: https://twitter.com/0xrb/status/1157544700053581824

5.104.110.2:88
67.216.204.113:8000

# Reference: https://twitter.com/bad_packets/status/1157125722223202305

147.135.116.64:45
/Hilix.arc
/Hilix.arm
/Hilix.arm4
/Hilix.arm4l
/Hilix.arm4t
/Hilix.arm4tl
/Hilix.arm4tll
/Hilix.armv4l
/Hilix.arm5
/Hilix.arm5n
/Hilix.arm6
/Hilix.arm64
/Hilix.arm7
/Hilix.dbg
/Hilix.i4
/Hilix.i486
/Hilix.i586
/Hilix.i686
/Hilix.kill
/Hilix.m68k
/Hilix.mips
/Hilix.mips64
/Hilix.mpsl
/Hilix.mipsel
/Hilix.ppc
/Hilix.ppc2
/Hilix.ppc440
/Hilix.powerppc
/Hilix.root
/Hilix.root32
/Hilix.sh4
/Hilix.ssh4
/Hilix.spc
/Hilix.sparc
/Hilix.x32
/Hilix.x64
/Hilix.x86
/Hilix.x86_32
/Hilix.x86_64

# Reference: https://twitter.com/MasafumiNegishi/status/1158588492248567808

ujnffkp4b2s33fyh.onion

# Reference: https://twitter.com/bad_packets/status/1158639154835513345

158.255.5.216:8915

# Reference: https://twitter.com/MasafumiNegishi/status/1159289331279773696

dbkjbueuvmf5hh7z.onion

# Reference: https://twitter.com/bad_packets/status/1159566694160801792

185.244.25.185:1312
185.244.25.185:3912
185.244.25.185:43195

# Reference: https://twitter.com/bad_packets/status/1159604474668732416

185.172.110.224:11751

# Reference: https://twitter.com/bad_packets/status/1159579228108492800

91.92.66.192:63236

# Reference: https://twitter.com/0xrb/status/1160083082000515072

142.11.240.29:9506
/ankit.arc
/ankit.arm
/ankit.arm4
/ankit.arm4l
/ankit.arm4t
/ankit.arm4tl
/ankit.arm4tll
/ankit.armv4l
/ankit.arm5
/ankit.arm5n
/ankit.arm6
/ankit.arm64
/ankit.arm7
/ankit.dbg
/ankit.i4
/ankit.i486
/ankit.i586
/ankit.i686
/ankit.kill
/ankit.m68k
/ankit.mips
/ankit.mips64
/ankit.mpsl
/ankit.mipsel
/ankit.ppc
/ankit.ppc2
/ankit.ppc440
/ankit.powerppc
/ankit.root
/ankit.root32
/ankit.sh4
/ankit.ssh4
/ankit.spc
/ankit.sparc
/ankit.x32
/ankit.x64
/ankit.x86
/ankit.x86_32
/ankit.x86_64
/slump.arc
/slump.arm
/slump.arm4
/slump.arm4l
/slump.arm4t
/slump.arm4tl
/slump.arm4tll
/slump.armv4l
/slump.arm5
/slump.arm5n
/slump.arm6
/slump.arm64
/slump.arm7
/slump.dbg
/slump.i4
/slump.i486
/slump.i586
/slump.i686
/slump.kill
/slump.m68k
/slump.mips
/slump.mips64
/slump.mpsl
/slump.mipsel
/slump.ppc
/slump.ppc2
/slump.ppc440
/slump.powerppc
/slump.root
/slump.root32
/slump.sh4
/slump.ssh4
/slump.spc
/slump.sparc
/slump.x32
/slump.x64
/slump.x86
/slump.x86_32
/slump.x86_64

# Reference: https://twitter.com/bad_packets/status/1160129296301559808

40.89.175.73:1280
40.89.175.73:44460
/distortion.arc
/distortion.arm
/distortion.arm4
/distortion.arm4l
/distortion.arm4t
/distortion.arm4tl
/distortion.arm4tll
/distortion.armv4l
/distortion.arm5
/distortion.arm5n
/distortion.arm6
/distortion.arm64
/distortion.arm7
/distortion.dbg
/distortion.i4
/distortion.i486
/distortion.i586
/distortion.i686
/distortion.kill
/distortion.m68k
/distortion.mips
/distortion.mips64
/distortion.mpsl
/distortion.mipsel
/distortion.ppc
/distortion.ppc2
/distortion.ppc440
/distortion.powerppc
/distortion.root
/distortion.root32
/distortion.sh4
/distortion.ssh4
/distortion.spc
/distortion.sparc
/distortion.x32
/distortion.x64
/distortion.x86
/distortion.x86_32
/distortion.x86_64

# Reference: https://twitter.com/c2nner/status/1160144595013033985

51.81.20.98:1791
54.36.138.190:9375

# Reference: https://twitter.com/bad_packets/status/1160269665626554368

167.71.128.164:1337
167.71.128.164:3663
tronified.pw

# Reference: https://twitter.com/bad_packets/status/1160419048200392704

23.254.204.46:5301
23.254.204.46:9545

# Reference: https://twitter.com/0xrb/status/1160513921809129472

40.89.175.73:1280

# Reference: https://documents.trendmicro.com/assets/pdf/APPENDIX_Back-to-Back%20Campaigns.pdf
# Reference: https://otx.alienvault.com/pulse/5d52a56c0ef61fbaa08d0745

/arc.neko
/arm.neko
/arm4.neko
/arm4l.neko
/arm4t.neko
/arm4tl.neko
/arm4tll.neko
/armv4l.neko
/arm5.neko
/arm5n.neko
/arm6.neko
/arm64.neko
/arm7.neko
/dbg.neko
/i4.neko
/i486.neko
/i586.neko
/i686.neko
/kill.neko
/m68k.neko
/mips.neko
/mips64.neko
/mpsl.neko
/mipsel.neko
/ppc.neko
/ppc2.neko
/ppc440.neko
/powerppc.neko
/root.neko
/root32.neko
/sh4.neko
/ssh4.neko
/spc.neko
/sparc.neko
/x32.neko
/x64.neko
/x86.neko
/x86_32.neko
/x86_64.neko
/neko.arc
/neko.arm
/neko.arm4
/neko.arm4l
/neko.arm4t
/neko.arm4tl
/neko.arm4tll
/neko.armv4l
/neko.arm5
/neko.arm5n
/neko.arm6
/neko.arm64
/neko.arm7
/neko.dbg
/neko.i4
/neko.i486
/neko.i586
/neko.i686
/neko.kill
/neko.m68k
/neko.mips
/neko.mips64
/neko.mpsl
/neko.mipsel
/neko.ppc
/neko.ppc2
/neko.ppc440
/neko.powerppc
/neko.root
/neko.root32
/neko.sh4
/neko.ssh4
/neko.spc
/neko.sparc
/neko.x32
/neko.x64
/neko.x86
/neko.x86_32
/neko.x86_64

# Reference: https://twitter.com/bad_packets/status/1161164632104456193

31.13.195.49:79
31.13.195.49:6968

# Reference: https://twitter.com/bad_packets/status/1161459553528975360

142.44.251.105:11751
142.44.251.105:65535

# Reference: https://twitter.com/MasafumiNegishi/status/1161526802638090245

31.13.195.56:23013

# Reference: https://twitter.com/0xrb/status/1161590785596243969

shiina.mashiro.ml
18.222.226.29:42022

# Reference: https://twitter.com/0xrb/status/1161583769360293888

40.114.13.117:1791

# Reference: https://twitter.com/0xrb/status/1157975083014483969

35.193.34.171:1791
/eternal.arc
/eternal.arm
/eternal.arm4
/eternal.arm4l
/eternal.arm4t
/eternal.arm4tl
/eternal.arm4tll
/eternal.armv4l
/eternal.arm5
/eternal.arm5n
/eternal.arm6
/eternal.arm64
/eternal.arm7
/eternal.dbg
/eternal.exploit
/eternal.i4
/eternal.i486
/eternal.i586
/eternal.i686
/eternal.kill
/eternal.m68k
/eternal.mips
/eternal.mips64
/eternal.mpsl
/eternal.mipsel
/eternal.ppc
/eternal.ppc2
/eternal.ppc440
/eternal.powerppc
/eternal.root
/eternal.root32
/eternal.sh4
/eternal.ssh4
/eternal.spc
/eternal.sparc
/eternal.x32
/eternal.x64
/eternal.x86
/eternal.x86_32
/eternal.x86_64

# Reference: https://twitter.com/bad_packets/status/1161722520233340928
# Reference: https://twitter.com/0xrb/status/1162955576927670272

179.43.149.189:2470
server1.zenithnetworxs.com
/aarch64be.cloudbot
/arcle-750d.cloudbot
/arcle-hs38.cloudbot
/arc.cloudbot
/arm.cloudbot
/arm4.cloudbot
/arm4l.cloudbot
/arm4t.cloudbot
/arm4tl.cloudbot
/arm4tll.cloudbot
/armv4l.cloudbot
/arm5.cloudbot
/arm5n.cloudbot
/arm6.cloudbot
/arm64.cloudbot
/arm7.cloudbot
/dbg.cloudbot
/exploit.cloudbot
/fritzbox.cloudbot
/haarch64.cloudbot
/hnios2.cloudbot
/hopenrisc.cloudbot
/hriscv64.cloudbot
/i4.cloudbot
/i486.cloudbot
/i586.cloudbot
/i686.cloudbot
/kill.cloudbot
/linksys.cloudbot
/m68k.cloudbot
/m68k-68xxx.cloudbot
/microblazebe.cloudbot
/microblazeel.cloudbot
/mips.cloudbot
/mips2.cloudbot
/mips64.cloudbot
/mpsl.cloudbot
/mipsel.cloudbot
/ppc.cloudbot
/ppc2.cloudbot
/ppc440.cloudbot
/powerppc.cloudbot
/root.cloudbot
/root32.cloudbot
/sh-sh4.cloudbot
/sh4.cloudbot
/ssh4.cloudbot
/spc.cloudbot
/sparc.cloudbot
/x32.cloudbot
/x64.cloudbot
/x86.cloudbot
/x86_32.cloudbot
/x86_64.cloudbot
/xtensa.cloudbot
/cloudbot.aarch64be
/cloudbot.arc
/cloudbot.arcle-750d
/cloudbot.arcle-hs38
/cloudbot.arm
/cloudbot.arm4
/cloudbot.arm4l
/cloudbot.arm4t
/cloudbot.arm4tl
/cloudbot.arm4tll
/cloudbot.armv4l
/cloudbot.arm5
/cloudbot.arm5n
/cloudbot.arm6
/cloudbot.arm64
/cloudbot.arm7
/cloudbot.dbg
/cloudbot.exploit
/cloudbot.fritzbox
/cloudbot.haarch64
/cloudbot.hnios2
/cloudbot.hopenrisc
/cloudbot.hriscv64
/cloudbot.i4
/cloudbot.i486
/cloudbot.i586
/cloudbot.i686
/cloudbot.kill
/cloudbot.linksys
/cloudbot.m68k
/cloudbot.m68k-68xxx
/cloudbot.microblazebe
/cloudbot.microblazeel
/cloudbot.mips
/cloudbot.mips2
/cloudbot.mips64
/cloudbot.mpsl
/cloudbot.mipsel
/cloudbot.ppc
/cloudbot.ppc2
/cloudbot.ppc440
/cloudbot.powerppc
/cloudbot.root
/cloudbot.root32
/cloudbot.sh-sh4
/cloudbot.sh4
/cloudbot.ssh4
/cloudbot.spc
/cloudbot.sparc
/cloudbot.x32
/cloudbot.x64
/cloudbot.x86
/cloudbot.x86_32
/cloudbot.x86_64
/cloudbot.xtensa

# Reference: https://twitter.com/bad_packets/status/1161780674644156416

213.139.205.242:35668
213.139.205.242:455

# Reference: https://twitter.com/0xrb/status/1162053859180609536

40.89.172.209:1280
/dstrtn.arc
/dstrtn.arm
/dstrtn.arm4
/dstrtn.arm4l
/dstrtn.arm4t
/dstrtn.arm4tl
/dstrtn.arm4tll
/dstrtn.armv4l
/dstrtn.arm5
/dstrtn.arm5n
/dstrtn.arm6
/dstrtn.arm64
/dstrtn.arm7
/dstrtn.dbg
/dstrtn.exploit
/dstrtn.i4
/dstrtn.i486
/dstrtn.i586
/dstrtn.i686
/dstrtn.kill
/dstrtn.m68k
/dstrtn.mips
/dstrtn.mips64
/dstrtn.mpsl
/dstrtn.mipsel
/dstrtn.ppc
/dstrtn.ppc2
/dstrtn.ppc440
/dstrtn.powerppc
/dstrtn.root
/dstrtn.root32
/dstrtn.sh4
/dstrtn.ssh4
/dstrtn.spc
/dstrtn.sparc
/dstrtn.x32
/dstrtn.x64
/dstrtn.x86
/dstrtn.x86_32
/dstrtn.x86_64

# Reference: https://twitter.com/bad_packets/status/1162230113829654528

45.95.147.26:6968
45.95.147.26:79
switchnets.net

# Reference: https://twitter.com/0xrb/status/1162423882730446848

3.15.158.164:42022
shiina.mashiro.cf

# Reference: https://twitter.com/bad_packets/status/1162612382968844289

51.91.202.137:12345
51.91.202.137:8811

# Reference: https://twitter.com/bad_packets/status/1162885040839114752

198.98.62.146:23
198.98.62.146:91

# Reference: https://twitter.com/bad_packets/status/1162167149764329472

164.68.116.122:1337
164.68.116.122:65535

# Reference: https://twitter.com/0xrb/status/1163726289921953793

134.209.117.22:360
/Messiah.arc
/Messiah.arm
/Messiah.arm4
/Messiah.arm4l
/Messiah.arm4t
/Messiah.arm4tl
/Messiah.arm4tll
/Messiah.armv4l
/Messiah.arm5
/Messiah.arm5n
/Messiah.arm6
/Messiah.arm64
/Messiah.arm7
/Messiah.dbg
/Messiah.exploit
/Messiah.i4
/Messiah.i486
/Messiah.i586
/Messiah.i686
/Messiah.kill
/Messiah.m68k
/Messiah.mips
/Messiah.mips64
/Messiah.mpsl
/Messiah.mipsel
/Messiah.ppc
/Messiah.ppc2
/Messiah.ppc440
/Messiah.powerppc
/Messiah.root
/Messiah.root32
/Messiah.sh4
/Messiah.ssh4
/Messiah.spc
/Messiah.sparc
/Messiah.x32
/Messiah.x64
/Messiah.x86
/Messiah.x86_32
/Messiah.x86_64

# Reference: https://twitter.com/bad_packets/status/1164030835533549570

199.195.253.85:2323
199.195.253.85:10444
199.195.253.85:64334

# Reference: https://twitter.com/bad_packets/status/1164776376676675585

185.244.39.124:5555
185.244.39.124:10019

# Reference: https://twitter.com/nmatte90/status/1159740413445648384

/d.arc
/d.arm
/d.arm4
/d.arm4l
/d.arm4t
/d.arm4tl
/d.arm4tll
/d.armv4l
/d.arm5
/d.arm5n
/d.arm6
/d.arm64
/d.arm7
/d.dbg
/d.exploit
/d.i4
/d.i486
/d.i586
/d.i686
/d.kill
/d.m68k
/d.mips
/d.mips64
/d.mpsl
/d.mipsel
/d.ppc
/d.ppc2
/d.ppc440
/d.powerppc
/d.root
/d.root32
/d.sh4
/d.ssh4
/d.spc
/d.sparc
/d.x32
/d.x64
/d.x86
/d.x86_32
/d.x86_64

# Reference: https://twitter.com/nmatte90/status/1146721042645377024

/tronxwouvi.arc
/tronxwouvi.arm
/tronxwouvi.arm4
/tronxwouvi.arm4l
/tronxwouvi.arm4t
/tronxwouvi.arm4tl
/tronxwouvi.arm4tll
/tronxwouvi.armv4l
/tronxwouvi.arm5
/tronxwouvi.arm5n
/tronxwouvi.arm6
/tronxwouvi.arm64
/tronxwouvi.arm7
/tronxwouvi.dbg
/tronxwouvi.exploit
/tronxwouvi.i4
/tronxwouvi.i486
/tronxwouvi.i586
/tronxwouvi.i686
/tronxwouvi.kill
/tronxwouvi.m68k
/tronxwouvi.mips
/tronxwouvi.mips64
/tronxwouvi.mpsl
/tronxwouvi.mipsel
/tronxwouvi.ppc
/tronxwouvi.ppc2
/tronxwouvi.ppc440
/tronxwouvi.powerppc
/tronxwouvi.root
/tronxwouvi.root32
/tronxwouvi.sh4
/tronxwouvi.ssh4
/tronxwouvi.spc
/tronxwouvi.sparc
/tronxwouvi.x32
/tronxwouvi.x64
/tronxwouvi.x86
/tronxwouvi.x86_32
/tronxwouvi.x86_64

# Reference: https://twitter.com/nmatte90/status/1084475351089270784
# Reference: https://www.virustotal.com/gui/file/58bb77c25378cd7c57fad9f1ce98f38a8629d48018a597e78d46d38b862833a0/detection

solarpanels.com

# Reference: https://twitter.com/MasafumiNegishi/status/1165116187480481792

raiseyourdongers.pw

# Reference: https://twitter.com/bad_packets/status/1164791286265602050

185.244.25.73:81
185.244.25.73:6996
/a-r.m-4.SNOOPY
/a-r.m-5.SNOOPY
/a-r.m-6.SNOOPY
/a-r.m-7.SNOOPY
/i-4.8-6.SNOOPY
/i-5.8-6.SNOOPY
/i-6.8-6.SNOOPY
/m-6.8-k.SNOOPY
/m-i.p-s.SNOOPY
/m-p.s-l.SNOOPY
/p-p.c-.SNOOPY
/s-h.4-.SNOOPY
/x-3.2-.SNOOPY
/x-6.4-.SNOOPY
/x-8.6-.SNOOPY

# Reference: https://twitter.com/bad_packets/status/1165120433462493186

147.135.124.113:396
147.135.124.113:455
147.135.124.113:3465

# Reference: https://twitter.com/MasafumiNegishi/status/1165551089820684288

51.81.20.95:41301

# Reference: https://twitter.com/bad_packets/status/1166580475093245952

199.19.225.2:1024
199.19.225.2:1982

# Reference: https://twitter.com/bad_packets/status/1167336978041303040

80.82.65.213:123
80.82.65.213:9060
80.82.65.213:37420
cc.stresser.cc

# Reference: https://twitter.com/bad_packets/status/1168735334969958400

206.72.206.82:36496
206.72.206.82:8372

# Reference: https://twitter.com/0xrb/status/1168803616309702657

35.188.134.193:1791
/calamityarc
/calamityarm
/calamityarm4
/calamityarm4l
/calamityarm4t
/calamityarm4tl
/calamityarm4tll
/calamityarmv4l
/calamityarm5
/calamityarm5n
/calamityarm6
/calamityarm64
/calamityarm7
/calamitydbg
/calamityexploit
/calamityi4
/calamityi486
/calamityi586
/calamityi686
/calamitykill
/calamitym68k
/calamitymips
/calamitymips64
/calamitympsl
/calamitymipsel
/calamityppc
/calamityppc2
/calamityppc440
/calamitypowerppc
/calamityroot
/calamityroot32
/calamitysh
/calamitysh4
/calamityssh4
/calamityspc
/calamitysparc
/calamityx32
/calamityx64
/calamityx86
/calamityx86_32
/calamityx86_64
/calamity.arc
/calamity.arm
/calamity.arm4
/calamity.arm4l
/calamity.arm4t
/calamity.arm4tl
/calamity.arm4tll
/calamity.armv4l
/calamity.arm5
/calamity.arm5n
/calamity.arm6
/calamity.arm64
/calamity.arm7
/calamity.dbg
/calamity.exploit
/calamity.i4
/calamity.i486
/calamity.i586
/calamity.i686
/calamity.kill
/calamity.m68k
/calamity.mips
/calamity.mips64
/calamity.mpsl
/calamity.mipsel
/calamity.ppc
/calamity.ppc2
/calamity.ppc440
/calamity.powerppc
/calamity.root
/calamity.root32
/calamity.sh
/calamity.sh4
/calamity.ssh4
/calamity.spc
/calamity.sparc
/calamity.x32
/calamity.x64
/calamity.x86
/calamity.x86_32
/calamity.x86_64

# Reference: https://twitter.com/bad_packets/status/1169143015132356610

31.13.195.116:34567
31.13.195.116:64756
anunna.club

# Reference: https://twitter.com/bad_packets/status/1169511241305378817

31.13.195.65:79
switchnets.net

# Reference: https://twitter.com/bad_packets/status/1169840035048255491

50.115.162.6:23
50.115.162.6:4352

# Reference: https://twitter.com/_odisseus/status/1170967330203062272

142.11.194.239:666
142.11.253.29:45
185.164.72.149:9375
185.214.10.172:45
185.244.25.72:1791
185.7.78.31:1024
192.119.111.12:45
205.185.118.152:81
51.79.84.171:81
89.35.39.74:1092

# Reference: https://twitter.com/bad_packets/status/1172386690779865090

104.168.199.188:42069
104.168.199.188:46216

# Reference: https://twitter.com/0xrb/status/1173842132236300289

34.90.45.71:2700

# Reference: https:/twitter.com/bad_packets/status/1174566758545362944
# Reference: https://www.virustotal.com/gui/file/c75e48f5e9ae2d5514941558a57d7f440c6e825ecd0c40e9fba7cd007950046f/detection

188.209.52.11:43210

# Reference: https://twitter.com/bad_packets/status/1175485090970791939

142.11.210.231:1791
142.11.210.231:21769

# Reference: https://twitter.com/0xrb/status/1175783280789995535

botnetisharam.com

# Reference: https://twitter.com/bad_packets/status/1177330150356045826

185.244.25.122:55667
185.244.25.122:62333
/203Xmi39S.arc
/203Xmi39S.arm
/203Xmi39S.arm4
/203Xmi39S.arm4l
/203Xmi39S.arm4t
/203Xmi39S.arm4tl
/203Xmi39S.arm4tll
/203Xmi39S.armv4l
/203Xmi39S.arm5
/203Xmi39S.arm5n
/203Xmi39S.arm6
/203Xmi39S.arm64
/203Xmi39S.arm7
/203Xmi39S.dbg
/203Xmi39S.exploit
/203Xmi39S.i4
/203Xmi39S.i486
/203Xmi39S.i586
/203Xmi39S.i686
/203Xmi39S.kill
/203Xmi39S.m68k
/203Xmi39S.mips
/203Xmi39S.mips64
/203Xmi39S.mpsl
/203Xmi39S.mipsel
/203Xmi39S.ppc
/203Xmi39S.ppc2
/203Xmi39S.ppc440
/203Xmi39S.powerppc
/203Xmi39S.root
/203Xmi39S.root32
/203Xmi39S.sh4
/203Xmi39S.ssh4
/203Xmi39S.spc
/203Xmi39S.sparc
/203Xmi39S.x32
/203Xmi39S.x64
/203Xmi39S.x86
/203Xmi39S.x86_32
/203Xmi39S.x86_64

# Reference: https://twitter.com/VessOnSecurity/status/1177562345494732800

/xs.arc
/xs.arm
/xs.arm4
/xs.arm4l
/xs.arm4t
/xs.arm4tl
/xs.arm4tll
/xs.armv4l
/xs.arm5
/xs.arm5n
/xs.arm6
/xs.arm64
/xs.arm7
/xs.dbg
/xs.exploit
/xs.i4
/xs.i486
/xs.i586
/xs.i686
/xs.kill
/xs.m68k
/xs.mips
/xs.mips64
/xs.mpsl
/xs.mipsel
/xs.ppc
/xs.ppc2
/xs.ppc440
/xs.powerppc
/xs.root
/xs.root32
/xs.sh4
/xs.ssh4
/xs.spc
/xs.sparc
/xs.x32
/xs.x64
/xs.x86
/xs.x86_32
/xs.x86_64
/xenith.arc
/xenith.arm
/xenith.arm4
/xenith.arm4l
/xenith.arm4t
/xenith.arm4tl
/xenith.arm4tll
/xenith.armv4l
/xenith.arm5
/xenith.arm5n
/xenith.arm6
/xenith.arm64
/xenith.arm7
/xenith.dbg
/xenith.exploit
/xenith.i4
/xenith.i486
/xenith.i586
/xenith.i686
/xenith.kill
/xenith.m68k
/xenith.mips
/xenith.mips64
/xenith.mpsl
/xenith.mipsel
/xenith.ppc
/xenith.ppc2
/xenith.ppc440
/xenith.powerppc
/xenith.root
/xenith.root32
/xenith.sh4
/xenith.ssh4
/xenith.spc
/xenith.sparc
/xenith.x32
/xenith.x64
/xenith.x86
/xenith.x86_32
/xenith.x86_64
/Yosemite.arc
/Yosemite.arm
/Yosemite.arm4
/Yosemite.arm4l
/Yosemite.arm4t
/Yosemite.arm4tl
/Yosemite.arm4tll
/Yosemite.armv4l
/Yosemite.arm5
/Yosemite.arm5n
/Yosemite.arm6
/Yosemite.arm64
/Yosemite.arm7
/Yosemite.dbg
/Yosemite.exploit
/Yosemite.i4
/Yosemite.i486
/Yosemite.i586
/Yosemite.i686
/Yosemite.kill
/Yosemite.m68k
/Yosemite.mips
/Yosemite.mips64
/Yosemite.mpsl
/Yosemite.mipsel
/Yosemite.ppc
/Yosemite.ppc2
/Yosemite.ppc440
/Yosemite.powerppc
/Yosemite.root
/Yosemite.root32
/Yosemite.sh4
/Yosemite.ssh4
/Yosemite.spc
/Yosemite.sparc
/Yosemite.x32
/Yosemite.x64
/Yosemite.x86
/Yosemite.x86_32
/Yosemite.x86_64
/kungfu.arc
/kungfu.arm
/kungfu.arm4
/kungfu.arm4l
/kungfu.arm4t
/kungfu.arm4tl
/kungfu.arm4tll
/kungfu.armv4l
/kungfu.arm5
/kungfu.arm5n
/kungfu.arm6
/kungfu.arm64
/kungfu.arm7
/kungfu.dbg
/kungfu.exploit
/kungfu.i4
/kungfu.i486
/kungfu.i586
/kungfu.i686
/kungfu.kill
/kungfu.m68k
/kungfu.mips
/kungfu.mips64
/kungfu.mpsl
/kungfu.mipsel
/kungfu.ppc
/kungfu.ppc2
/kungfu.ppc440
/kungfu.powerppc
/kungfu.root
/kungfu.root32
/kungfu.sh4
/kungfu.ssh4
/kungfu.spc
/kungfu.sparc
/kungfu.x32
/kungfu.x64
/kungfu.x86
/kungfu.x86_32
/kungfu.x86_64
/4_20_gang.arc
/4_20_gang.arm
/4_20_gang.arm4
/4_20_gang.arm4l
/4_20_gang.arm4t
/4_20_gang.arm4tl
/4_20_gang.arm4tll
/4_20_gang.armv4l
/4_20_gang.arm5
/4_20_gang.arm5n
/4_20_gang.arm6
/4_20_gang.arm64
/4_20_gang.arm7
/4_20_gang.dbg
/4_20_gang.exploit
/4_20_gang.i4
/4_20_gang.i486
/4_20_gang.i586
/4_20_gang.i686
/4_20_gang.kill
/4_20_gang.m68k
/4_20_gang.mips
/4_20_gang.mips64
/4_20_gang.mpsl
/4_20_gang.mipsel
/4_20_gang.ppc
/4_20_gang.ppc2
/4_20_gang.ppc440
/4_20_gang.powerppc
/4_20_gang.root
/4_20_gang.root32
/4_20_gang.sh4
/4_20_gang.ssh4
/4_20_gang.spc
/4_20_gang.sparc
/4_20_gang.x32
/4_20_gang.x64
/4_20_gang.x86
/4_20_gang.x86_32
/4_20_gang.x86_64
/Fourloko.arc
/Fourloko.arm
/Fourloko.arm4
/Fourloko.arm4l
/Fourloko.arm4t
/Fourloko.arm4tl
/Fourloko.arm4tll
/Fourloko.armv4l
/Fourloko.arm5
/Fourloko.arm5n
/Fourloko.arm6
/Fourloko.arm64
/Fourloko.arm7
/Fourloko.dbg
/Fourloko.exploit
/Fourloko.i4
/Fourloko.i486
/Fourloko.i586
/Fourloko.i686
/Fourloko.kill
/Fourloko.m68k
/Fourloko.mips
/Fourloko.mips64
/Fourloko.mpsl
/Fourloko.mipsel
/Fourloko.ppc
/Fourloko.ppc2
/Fourloko.ppc440
/Fourloko.powerppc
/Fourloko.root
/Fourloko.root32
/Fourloko.sh4
/Fourloko.ssh4
/Fourloko.spc
/Fourloko.sparc
/Fourloko.x32
/Fourloko.x64
/Fourloko.x86
/Fourloko.x86_32
/Fourloko.x86_64

# Reference: https://blog.netlab.360.com/the-botnet-cluster-on-185-244-25-0-24-en/

sisuugde7gzpef2d.onion
/kuojin.arc
/kuojin.arm
/kuojin.arm4
/kuojin.arm4l
/kuojin.arm4t
/kuojin.arm4tl
/kuojin.arm4tll
/kuojin.armv4l
/kuojin.arm5
/kuojin.arm5n
/kuojin.arm6
/kuojin.arm64
/kuojin.arm7
/kuojin.dbg
/kuojin.exploit
/kuojin.i4
/kuojin.i486
/kuojin.i586
/kuojin.i686
/kuojin.kill
/kuojin.m68k
/kuojin.mips
/kuojin.mips64
/kuojin.mpsl
/kuojin.mipsel
/kuojin.ppc
/kuojin.ppc2
/kuojin.ppc440
/kuojin.powerppc
/kuojin.root
/kuojin.root32
/kuojin.sh4
/kuojin.ssh4
/kuojin.spc
/kuojin.sparc
/kuojin.x32
/kuojin.x64
/kuojin.x86
/kuojin.x86_32
/kuojin.x86_64
/arc.handymanny
/arm.handymanny
/arm4.handymanny
/arm4l.handymanny
/arm4t.handymanny
/arm4tl.handymanny
/arm4tll.handymanny
/armv4l.handymanny
/arm5.handymanny
/arm5n.handymanny
/arm6.handymanny
/arm64.handymanny
/arm7.handymanny
/dbg.handymanny
/exploit.handymanny
/i4.handymanny
/i486.handymanny
/i586.handymanny
/i686.handymanny
/kill.handymanny
/m68k.handymanny
/mips.handymanny
/mips64.handymanny
/mpsl.handymanny
/mipsel.handymanny
/ppc.handymanny
/ppc440.handymanny
/powerppc.handymanny
/root.handymanny
/root32.handymanny
/sh4.handymanny
/spc.handymanny
/sparc.handymanny
/x32.handymanny
/x64.handymanny
/x86.handymanny
/x86_32.handymanny
/x86_64.handymanny

# Reference: https://twitter.com/bad_packets/status/1177855406149816320
# Reference: https://twitter.com/bad_packets/status/1179484377018961922

64.44.40.242:1024
64.44.40.242:1982
64.44.40.242:34712
64.44.40.242:45

# Reference: https://twitter.com/bad_packets/status/1159344580510146561

185.35.138.156:655

# Reference: https://twitter.com/malwaremustd1e/status/1179366248221741056

233.250.62.178:5888

# Reference: https://securelist.com/new-wave-of-mirai-attacking-home-routers/76791/
# Reference: https://twitter.com/MalwareConfig/status/1180888733542993925
# Reference: https://malwareconfig.com/config/238a67e6f9b129680b618a3c579a8c6c

mziep.pw
securityupdates.us
srrys.pw
timeserver.host
tr069.pw
p.ocalhost.host
ocalhost.host

# Reference: https://twitter.com/mjbv/status/1180493072083369984

/taramisu4.arc
/taramisu4.arm
/taramisu4.arm4
/taramisu4.arm4l
/taramisu4.arm4t
/taramisu4.arm4tl
/taramisu4.arm4tll
/taramisu4.armv4l
/taramisu4.arm5
/taramisu4.arm5n
/taramisu4.arm6
/taramisu4.arm64
/taramisu4.arm7
/taramisu4.dbg
/taramisu4.exploit
/taramisu4.i4
/taramisu4.i486
/taramisu4.i586
/taramisu4.i686
/taramisu4.kill
/taramisu4.m68k
/taramisu4.mips
/taramisu4.mips64
/taramisu4.mpsl
/taramisu4.mipsel
/taramisu4.ppc
/taramisu4.ppc2
/taramisu4.ppc440
/taramisu4.powerppc
/taramisu4.root
/taramisu4.root32
/taramisu4.sh4
/taramisu4.ssh4
/taramisu4.spc
/taramisu4.sparc
/taramisu4.x32
/taramisu4.x64
/taramisu4.x86
/taramisu4.x86_32
/taramisu4.x86_64

# Reference: https://twitter.com/mjbv/status/1180187125226098688

/UwUAkashicO.arc
/UwUAkashicO.arm
/UwUAkashicO.arm4
/UwUAkashicO.arm4l
/UwUAkashicO.arm4t
/UwUAkashicO.arm4tl
/UwUAkashicO.arm4tll
/UwUAkashicO.armv4l
/UwUAkashicO.arm5
/UwUAkashicO.arm5n
/UwUAkashicO.arm6
/UwUAkashicO.arm64
/UwUAkashicO.arm7
/UwUAkashicO.dbg
/UwUAkashicO.exploit
/UwUAkashicO.i4
/UwUAkashicO.i486
/UwUAkashicO.i586
/UwUAkashicO.i686
/UwUAkashicO.kill
/UwUAkashicO.m68k
/UwUAkashicO.mips
/UwUAkashicO.mips64
/UwUAkashicO.mpsl
/UwUAkashicO.mipsel
/UwUAkashicO.ppc
/UwUAkashicO.ppc2
/UwUAkashicO.ppc440
/UwUAkashicO.powerppc
/UwUAkashicO.root
/UwUAkashicO.root32
/UwUAkashicO.sh4
/UwUAkashicO.ssh4
/UwUAkashicO.spc
/UwUAkashicO.sparc
/UwUAkashicO.x32
/UwUAkashicO.x64
/UwUAkashicO.x86
/UwUAkashicO.x86_32
/UwUAkashicO.x86_64

# Reference: https://twitter.com/mjbv/status/1179717303061110785

/wolf.arc
/wolf.arm
/wolf.arm4
/wolf.arm4l
/wolf.arm4t
/wolf.arm4tl
/wolf.arm4tll
/wolf.armv4l
/wolf.arm5
/wolf.arm5n
/wolf.arm6
/wolf.arm64
/wolf.arm7
/wolf.dbg
/wolf.exploit
/wolf.i4
/wolf.i486
/wolf.i586
/wolf.i686
/wolf.kill
/wolf.m68k
/wolf.mips
/wolf.mips64
/wolf.mpsl
/wolf.mipsel
/wolf.ppc
/wolf.ppc2
/wolf.ppc440
/wolf.powerppc
/wolf.root
/wolf.root32
/wolf.sh4
/wolf.ssh4
/wolf.spc
/wolf.sparc
/wolf.x32
/wolf.x64
/wolf.x86
/wolf.x86_32
/wolf.x86_64

# Reference: https://twitter.com/mjbv/status/1180608179710939136

/layer.arc
/layer.arm
/layer.arm4
/layer.arm4l
/layer.arm4t
/layer.arm4tl
/layer.arm4tll
/layer.armv4l
/layer.arm5
/layer.arm5n
/layer.arm6
/layer.arm64
/layer.arm7
/layer.dbg
/layer.exploit
/layer.i4
/layer.i486
/layer.i586
/layer.i686
/layer.kill
/layer.m68k
/layer.mips
/layer.mips64
/layer.mpsl
/layer.mipsel
/layer.ppc
/layer.ppc2
/layer.ppc440
/layer.powerppc
/layer.root
/layer.root32
/layer.sh4
/layer.ssh4
/layer.spc
/layer.sparc
/layer.x32
/layer.x64
/layer.x86
/layer.x86_32
/layer.x86_64

# Reference: https://twitter.com/0xrb/status/1181806574165098496

51.91.123.232:49627
/animehq.arc
/animehq.arm
/animehq.arm4
/animehq.arm4l
/animehq.arm4t
/animehq.arm4tl
/animehq.arm4tll
/animehq.armv4l
/animehq.arm5
/animehq.arm5n
/animehq.arm6
/animehq.arm64
/animehq.arm7
/animehq.dbg
/animehq.exploit
/animehq.i4
/animehq.i486
/animehq.i586
/animehq.i686
/animehq.kill
/animehq.m68k
/animehq.mips
/animehq.mips64
/animehq.mpsl
/animehq.mipsel
/animehq.ppc
/animehq.ppc2
/animehq.ppc440
/animehq.powerppc
/animehq.root
/animehq.root32
/animehq.sh4
/animehq.ssh4
/animehq.spc
/animehq.sparc
/animehq.x32
/animehq.x64
/animehq.x86
/animehq.x86_32
/animehq.x86_64

# Reference: https://twitter.com/0xrb/status/1181803862404894720

51.91.111.198:8760

# Reference: https://twitter.com/mjbv/status/1181924723514589194

/pandora.arc
/pandora.arm
/pandora.arm4
/pandora.arm4l
/pandora.arm4t
/pandora.arm4tl
/pandora.arm4tll
/pandora.armv4l
/pandora.arm5
/pandora.arm5n
/pandora.arm6
/pandora.arm64
/pandora.arm7
/pandora.dbg
/pandora.exploit
/pandora.i4
/pandora.i486
/pandora.i586
/pandora.i686
/pandora.kill
/pandora.m68k
/pandora.mips
/pandora.mips64
/pandora.mpsl
/pandora.mipsel
/pandora.ppc
/pandora.ppc2
/pandora.ppc440
/pandora.powerppc
/pandora.root
/pandora.root32
/pandora.sh4
/pandora.ssh4
/pandora.spc
/pandora.sparc
/pandora.x32
/pandora.x64
/pandora.x86
/pandora.x86_32
/pandora.x86_64

# Reference: https://twitter.com/_odisseus/status/1182198538010337280

/fortnite.arc
/fortnite.arm
/fortnite.arm4
/fortnite.arm4l
/fortnite.arm4t
/fortnite.arm4tl
/fortnite.arm4tll
/fortnite.armv4l
/fortnite.arm5
/fortnite.arm5n
/fortnite.arm6
/fortnite.arm64
/fortnite.arm7
/fortnite.dbg
/fortnite.exploit
/fortnite.i4
/fortnite.i486
/fortnite.i586
/fortnite.i686
/fortnite.kill
/fortnite.m68k
/fortnite.mips
/fortnite.mips64
/fortnite.mpsl
/fortnite.mipsel
/fortnite.ppc
/fortnite.ppc2
/fortnite.ppc440
/fortnite.powerppc
/fortnite.root
/fortnite.root32
/fortnite.sh4
/fortnite.ssh4
/fortnite.spc
/fortnite.sparc
/fortnite.x32
/fortnite.x64
/fortnite.x86
/fortnite.x86_32
/fortnite.x86_64
/ouija_a.rc
/ouija_a.rm
/ouija_a.rm4
/ouija_a.rm4l
/ouija_a.rm4t
/ouija_a.rm4tl
/ouijaa.rm4tll
/ouija_a.rmv4l
/ouija_a.rm5
/ouija_a.rm5n
/ouija_a.rm6
/ouija_a.rm64
/ouija_a.rm7
/ouija_d.bg
/ouija_e.xploit
/ouija_i.486
/ouija_i.586
/ouija_i.686
/ouija_m.68k
/ouija_m.ips
/ouija_m.ips64
/ouija_m.psl
/ouija_m.ipsel
/ouija_p.pc
/ouija_p.pc2
/ouija_p.pc440
/ouija_p.owerppc
/ouija_r.oot
/ouija_r.oot32
/ouija_s.h4
/ouija_s.sh4
/ouija_s.pc
/ouija_s.parc
/ouija_x.32
/ouija_x.64
/ouija_x.86
/ouija_x.86_32
/ouija_x.86_64

# Reference: https://twitter.com/zom3y3/status/1182869169164783616

93.174.93.178:31337

# Reference: https://twitter.com/0xrb/status/1184042533468262400

/cloud.arc
/cloud.arm
/cloud.arm4
/cloud.arm4l
/cloud.arm4t
/cloud.arm4tl
/cloud.arm4tll
/cloud.armv4l
/cloud.arm5
/cloud.arm5n
/cloud.arm6
/cloud.arm64
/cloud.arm7
/cloud.dbg
/cloud.exploit
/cloud.i4
/cloud.i486
/cloud.i586
/cloud.i686
/cloud.kill
/cloud.m68k
/cloud.mips
/cloud.mips64
/cloud.mpsl
/cloud.mipsel
/cloud.ppc
/cloud.ppc2
/cloud.ppc440
/cloud.powerppc
/cloud.root
/cloud.root32
/cloud.sh4
/cloud.ssh4
/cloud.spc
/cloud.sparc
/cloud.x32
/cloud.x64
/cloud.x86
/cloud.x86_32
/cloud.x86_64
/federal.arc
/federal.arm
/federal.arm4
/federal.arm4l
/federal.arm4t
/federal.arm4tl
/federal.arm4tll
/federal.armv4l
/federal.arm5
/federal.arm5n
/federal.arm6
/federal.arm64
/federal.arm7
/federal.dbg
/federal.exploit
/federal.i4
/federal.i486
/federal.i586
/federal.i686
/federal.kill
/federal.m68k
/federal.mips
/federal.mips64
/federal.mpsl
/federal.mipsel
/federal.ppc
/federal.ppc2
/federal.ppc440
/federal.powerppc
/federal.root
/federal.root32
/federal.sh4
/federal.ssh4
/federal.spc
/federal.sparc
/federal.x32
/federal.x64
/federal.x86
/federal.x86_32
/federal.x86_64
/onbdkyurs.arc
/onbdkyurs.arm
/onbdkyurs.arm4
/onbdkyurs.arm4l
/onbdkyurs.arm4t
/onbdkyurs.arm4tl
/onbdkyurs.arm4tll
/onbdkyurs.armv4l
/onbdkyurs.arm5
/onbdkyurs.arm5n
/onbdkyurs.arm6
/onbdkyurs.arm64
/onbdkyurs.arm7
/onbdkyurs.dbg
/onbdkyurs.exploit
/onbdkyurs.i4
/onbdkyurs.i486
/onbdkyurs.i586
/onbdkyurs.i686
/onbdkyurs.kill
/onbdkyurs.m68k
/onbdkyurs.mips
/onbdkyurs.mips64
/onbdkyurs.mpsl
/onbdkyurs.mipsel
/onbdkyurs.ppc
/onbdkyurs.ppc2
/onbdkyurs.ppc440
/onbdkyurs.powerppc
/onbdkyurs.root
/onbdkyurs.root32
/onbdkyurs.sh4
/onbdkyurs.ssh4
/onbdkyurs.spc
/onbdkyurs.sparc
/onbdkyurs.x32
/onbdkyurs.x64
/onbdkyurs.x86
/onbdkyurs.x86_32
/onbdkyurs.x86_64
/typpaostur.arc
/typpaostur.arm
/typpaostur.arm4
/typpaostur.arm4l
/typpaostur.arm4t
/typpaostur.arm4tl
/typpaostur.arm4tll
/typpaostur.armv4l
/typpaostur.arm5
/typpaostur.arm5n
/typpaostur.arm6
/typpaostur.arm64
/typpaostur.arm7
/typpaostur.dbg
/typpaostur.exploit
/typpaostur.i4
/typpaostur.i486
/typpaostur.i586
/typpaostur.i686
/typpaostur.kill
/typpaostur.m68k
/typpaostur.mips
/typpaostur.mips64
/typpaostur.mpsl
/typpaostur.mipsel
/typpaostur.ppc
/typpaostur.ppc2
/typpaostur.ppc440
/typpaostur.powerppc
/typpaostur.root
/typpaostur.root32
/typpaostur.sh4
/typpaostur.ssh4
/typpaostur.spc
/typpaostur.sparc
/typpaostur.x32
/typpaostur.x64
/typpaostur.x86
/typpaostur.x86_32
/typpaostur.x86_64

# Reference: https://twitter.com/0xrb/status/1184356822154502144

185.158.248.87:1791

# Reference: https://twitter.com/0xrb/status/1184506773358538753

/blxntz.arc
/blxntz.arm
/blxntz.arm4
/blxntz.arm4l
/blxntz.arm4t
/blxntz.arm4tl
/blxntz.arm4tll
/blxntz.armv4l
/blxntz.arm5
/blxntz.arm5n
/blxntz.arm6
/blxntz.arm64
/blxntz.arm7
/blxntz.dbg
/blxntz.exploit
/blxntz.i4
/blxntz.i486
/blxntz.i586
/blxntz.i686
/blxntz.kill
/blxntz.m68k
/blxntz.mips
/blxntz.mips64
/blxntz.mpsl
/blxntz.mipsel
/blxntz.ppc
/blxntz.ppc2
/blxntz.ppc440
/blxntz.powerppc
/blxntz.root
/blxntz.root32
/blxntz.sh4
/blxntz.ssh4
/blxntz.spc
/blxntz.sparc
/blxntz.x32
/blxntz.x64
/blxntz.x86
/blxntz.x86_32
/blxntz.x86_64
/test.arc
/test.arm
/test.arm4
/test.arm4l
/test.arm4t
/test.arm4tl
/test.arm4tll
/test.armv4l
/test.arm5
/test.arm5n
/test.arm6
/test.arm64
/test.arm7
/test.dbg
/test.exploit
/test.i4
/test.i486
/test.i586
/test.i686
/test.kill
/test.m68k
/test.mips
/test.mips64
/test.mpsl
/test.mipsel
/test.ppc
/test.ppc2
/test.ppc440
/test.powerppc
/test.root
/test.root32
/test.sh4
/test.ssh4
/test.spc
/test.sparc
/test.x32
/test.x64
/test.x86
/test.x86_32
/test.x86_64
/updating.arc
/updating.arm
/updating.arm4
/updating.arm4l
/updating.arm4t
/updating.arm4tl
/updating.arm4tll
/updating.armv4l
/updating.arm5
/updating.arm5n
/updating.arm6
/updating.arm64
/updating.arm7
/updating.dbg
/updating.exploit
/updating.i4
/updating.i486
/updating.i586
/updating.i686
/updating.kill
/updating.m68k
/updating.mips
/updating.mips64
/updating.mpsl
/updating.mipsel
/updating.ppc
/updating.ppc2
/updating.ppc440
/updating.powerppc
/updating.root
/updating.root32
/updating.sh4
/updating.ssh4
/updating.spc
/updating.sparc
/updating.x32
/updating.x64
/updating.x86
/updating.x86_32
/updating.x86_64

# Reference: https://twitter.com/0xrb/status/1184534416397389825

/selfrep.arc
/selfrep.arm
/selfrep.arm4
/selfrep.arm4l
/selfrep.arm4t
/selfrep.arm4tl
/selfrep.arm4tll
/selfrep.armv4l
/selfrep.arm5
/selfrep.arm5n
/selfrep.arm6
/selfrep.arm64
/selfrep.arm7
/selfrep.dbg
/selfrep.exploit
/selfrep.i4
/selfrep.i486
/selfrep.i586
/selfrep.i686
/selfrep.kill
/selfrep.m68k
/selfrep.mips
/selfrep.mips64
/selfrep.mpsl
/selfrep.mipsel
/selfrep.ppc
/selfrep.ppc2
/selfrep.ppc440
/selfrep.powerppc
/selfrep.root
/selfrep.root32
/selfrep.sh4
/selfrep.ssh4
/selfrep.spc
/selfrep.sparc
/selfrep.x32
/selfrep.x64
/selfrep.x86
/selfrep.x86_32
/selfrep.x86_64

# Reference: https://twitter.com/bad_packets/status/1186533002483884033

145.239.212.59:8080
145.239.212.59:43210
/linux.arc
/linux.arm
/linux.arm4
/linux.arm4l
/linux.arm4t
/linux.arm4tl
/linux.arm4tll
/linux.armv4l
/linux.arm5
/linux.arm5n
/linux.arm6
/linux.arm64
/linux.arm7
/linux.arm8
/linux.dbg
/linux.exploit
/linux.i4
/linux.i486
/linux.i586
/linux.i686
/linux.kill
/linux.m68k
/linux.mips
/linux.mips64
/linux.mpsl
/linux.mipsel
/linux.ppc
/linux.ppc2
/linux.ppc440
/linux.powerppc
/linux.root
/linux.root32
/linux.sh4
/linux.ssh4
/linux.spc
/linux.sparc
/linux.x32
/linux.x64
/linux.x86
/linux.x86_32
/linux.x86_64

# Reference: https://twitter.com/bad_packets/status/1186874026796281856

193.19.119.165:4201

# Reference: https://twitter.com/bad_packets/status/1187172876903862273

5.252.193.53:4201

# Reference: https://twitter.com/mjbv/status/1187371930040635393

/layerrrrrrrr.arc
/layerrrrrrrr.arm
/layerrrrrrrr.arm4
/layerrrrrrrr.arm4l
/layerrrrrrrr.arm4t
/layerrrrrrrr.arm4tl
/layerrrrrrrr.arm4tll
/layerrrrrrrr.armv4l
/layerrrrrrrr.arm5
/layerrrrrrrr.arm5n
/layerrrrrrrr.arm6
/layerrrrrrrr.arm64
/layerrrrrrrr.arm7
/layerrrrrrrr.arm8
/layerrrrrrrr.dbg
/layerrrrrrrr.exploit
/layerrrrrrrr.i4
/layerrrrrrrr.i486
/layerrrrrrrr.i586
/layerrrrrrrr.i686
/layerrrrrrrr.kill
/layerrrrrrrr.m68k
/layerrrrrrrr.mips
/layerrrrrrrr.mips64
/layerrrrrrrr.mpsl
/layerrrrrrrr.mipsel
/layerrrrrrrr.ppc
/layerrrrrrrr.ppc2
/layerrrrrrrr.ppc440
/layerrrrrrrr.powerppc
/layerrrrrrrr.root
/layerrrrrrrr.root32
/layerrrrrrrr.sh4
/layerrrrrrrr.ssh4
/layerrrrrrrr.spc
/layerrrrrrrr.sparc
/layerrrrrrrr.x32
/layerrrrrrrr.x64
/layerrrrrrrr.x86
/layerrrrrrrr.x86_32
/layerrrrrrrr.x86_64

# Reference: https://twitter.com/bad_packets/status/1188285300407029761

142.11.227.208:81
142.11.227.208:21769
/PacketsxTsunami.arc
/PacketsxTsunami.arm
/PacketsxTsunami.arm4
/PacketsxTsunami.arm4l
/PacketsxTsunami.arm4t
/PacketsxTsunami.arm4tl
/PacketsxTsunami.arm4tll
/PacketsxTsunami.armv4l
/PacketsxTsunami.arm5
/PacketsxTsunami.arm5n
/PacketsxTsunami.arm6
/PacketsxTsunami.arm64
/PacketsxTsunami.arm7
/PacketsxTsunami.arm8
/PacketsxTsunami.dbg
/PacketsxTsunami.exploit
/PacketsxTsunami.i4
/PacketsxTsunami.i486
/PacketsxTsunami.i586
/PacketsxTsunami.i686
/PacketsxTsunami.kill
/PacketsxTsunami.m68k
/PacketsxTsunami.mips
/PacketsxTsunami.mips64
/PacketsxTsunami.mpsl
/PacketsxTsunami.mipsel
/PacketsxTsunami.ppc
/PacketsxTsunami.ppc2
/PacketsxTsunami.ppc440
/PacketsxTsunami.powerppc
/PacketsxTsunami.root
/PacketsxTsunami.root32
/PacketsxTsunami.sh4
/PacketsxTsunami.ssh4
/PacketsxTsunami.spc
/PacketsxTsunami.sparc
/PacketsxTsunami.x32
/PacketsxTsunami.x64
/PacketsxTsunami.x86
/PacketsxTsunami.x86_32
/PacketsxTsunami.x86_64

# Reference: https://twitter.com/bad_packets/status/1188545158330994688

190.2.156.118:19992
190.2.156.118:26663

# Reference: https://twitter.com/bad_packets/status/1189597327297695744
# Reference: https://twitter.com/0xrb/status/1191047992192557056

35.236.44.15:1338
35.236.44.15:31337
35.236.111.58:1338
35.236.111.58:31337

# Reference: https://twitter.com/bad_packets/status/1189303080153690113
# Reference: https://twitter.com/huiwangeth/status/1194831544101113857

5.206.227.65:61002
5.206.227.65:6592
5.206.227.65:6593

# Reference: https://unit42.paloaltonetworks.com/home-small-office-wireless-routers-exploited-to-attack-gaming-servers/
# Reference: https://otx.alienvault.com/pulse/5dbaf1d8346dc64b7498801a

185.172.110.224:80
185.172.110.224:993

# Reference: https://twitter.com/0xrb/status/1189922842185351170

134.209.87.59:9812
/hyena.arc
/hyena.arm
/hyena.arm4
/hyena.arm4l
/hyena.arm4t
/hyena.arm4tl
/hyena.arm4tll
/hyena.armv4l
/hyena.arm5
/hyena.arm5n
/hyena.arm6
/hyena.arm64
/hyena.arm7
/hyena.arm8
/hyena.dbg
/hyena.exploit
/hyena.i4
/hyena.i486
/hyena.i586
/hyena.i686
/hyena.kill
/hyena.m68k
/hyena.mips
/hyena.mips64
/hyena.mpsl
/hyena.mipsel
/hyena.ppc
/hyena.ppc2
/hyena.ppc440
/hyena.powerppc
/hyena.root
/hyena.root32
/hyena.sh4
/hyena.ssh4
/hyena.spc
/hyena.sparc
/hyena.x32
/hyena.x64
/hyena.x86
/hyena.x86_32
/hyena.x86_64

# Reference: https://twitter.com/bad_packets/status/1190142325529436160

89.35.39.74:1092
89.35.39.74:1920

# Reference: https://twitter.com/bad_packets/status/1190368205245538305

2.56.8.157:748
2.56.8.157:1742

# Reference: https://twitter.com/bad_packets/status/1190447880487596032

192.99.154.217:1026
192.99.154.217:1366

# Reference: https://blog.radware.com/security/2018/02/jenx-los-calvos-de-san-calvicie/

80.82.70.202:127
skids.sancalvicie.com

# Reference: https://twitter.com/bad_packets/status/1190795126269825024

/fbot.aarch64
/fbot.arc
/fbot.arm
/fbot.arm4
/fbot.arm4l
/fbot.arm4t
/fbot.arm4tl
/fbot.arm4tll
/fbot.armv4l
/fbot.arm5
/fbot.arm5n
/fbot.arm6
/fbot.arm64
/fbot.arm7
/fbot.arm8
/fbot.dbg
/fbot.exploit
/fbot.i4
/fbot.i486
/fbot.i586
/fbot.i686
/fbot.kill
/fbot.m68k
/fbot.mips
/fbot.mips64
/fbot.mpsl
/fbot.mipsel
/fbot.ppc
/fbot.ppc2
/fbot.ppc440
/fbot.powerppc
/fbot.root
/fbot.root32
/fbot.sh4
/fbot.ssh4
/fbot.spc
/fbot.sparc
/fbot.x32
/fbot.x64
/fbot.x86
/fbot.x86_32
/fbot.x86_64

# Reference: https://blog.netlab.360.com/the-new-developments-of-the-fbot-en/

ukrainianhorseriding.com

# Reference: https://blog.netlab.360.com/threat-alert-a-new-worm-fbot-cleaning-adbminer-is-using-a-blockchain-based-dns-en/

musl.lib
ukrainianhorseriding.com
/adbs
/adbs2

# Reference: https://twitter.com/zom3y3/status/1105754947746856960

/adb_scan

# Reference: https://twitter.com/zom3y3/status/1103920635447635969

alice.ukrainianhorseriding.com
185.248.101.60:6592

# Reference: https://twitter.com/360Netlab/status/1097458737189552128

xabolfpzbz.ukrainianhorseriding.com
185.61.138.13:6592

# Reference: https://twitter.com/_odisseus/status/1194570666873364480
# Reference: https://pastebin.com/xEvgupqi

/Ayedz.aarch64
/Ayedz.arc
/Ayedz.arm
/Ayedz.arm4
/Ayedz.arm4l
/Ayedz.arm4t
/Ayedz.arm4tl
/Ayedz.arm4tll
/Ayedz.armv4l
/Ayedz.arm5
/Ayedz.arm5n
/Ayedz.arm6
/Ayedz.arm64
/Ayedz.arm7
/Ayedz.arm8
/Ayedz.dbg
/Ayedz.exploit
/Ayedz.i4
/Ayedz.i486
/Ayedz.i586
/Ayedz.i686
/Ayedz.kill
/Ayedz.m68k
/Ayedz.mips
/Ayedz.mips64
/Ayedz.mpsl
/Ayedz.mipsel
/Ayedz.ppc
/Ayedz.ppc2
/Ayedz.ppc440
/Ayedz.powerppc
/Ayedz.root
/Ayedz.root32
/Ayedz.sh4
/Ayedz.ssh4
/Ayedz.spc
/Ayedz.sparc
/Ayedz.x32
/Ayedz.x64
/Ayedz.x86
/Ayedz.x86_32
/Ayedz.x86_64
/ESEW4BXS.aarch64
/ESEW4BXS.arc
/ESEW4BXS.arm
/ESEW4BXS.arm4
/ESEW4BXS.arm4l
/ESEW4BXS.arm4t
/ESEW4BXS.arm4tl
/ESEW4BXS.arm4tll
/ESEW4BXS.armv4l
/ESEW4BXS.arm5
/ESEW4BXS.arm5n
/ESEW4BXS.arm6
/ESEW4BXS.arm64
/ESEW4BXS.arm7
/ESEW4BXS.arm8
/ESEW4BXS.dbg
/ESEW4BXS.exploit
/ESEW4BXS.i4
/ESEW4BXS.i486
/ESEW4BXS.i586
/ESEW4BXS.i686
/ESEW4BXS.kill
/ESEW4BXS.m68k
/ESEW4BXS.mips
/ESEW4BXS.mips64
/ESEW4BXS.mpsl
/ESEW4BXS.mipsel
/ESEW4BXS.ppc
/ESEW4BXS.ppc2
/ESEW4BXS.ppc440
/ESEW4BXS.powerppc
/ESEW4BXS.root
/ESEW4BXS.root32
/ESEW4BXS.sh4
/ESEW4BXS.ssh4
/ESEW4BXS.spc
/ESEW4BXS.sparc
/ESEW4BXS.x32
/ESEW4BXS.x64
/ESEW4BXS.x86
/ESEW4BXS.x86_32
/ESEW4BXS.x86_64
/FederalVPN.aarch64
/FederalVPN.arc
/FederalVPN.arm
/FederalVPN.arm4
/FederalVPN.arm4l
/FederalVPN.arm4t
/FederalVPN.arm4tl
/FederalVPN.arm4tll
/FederalVPN.armv4l
/FederalVPN.arm5
/FederalVPN.arm5n
/FederalVPN.arm6
/FederalVPN.arm64
/FederalVPN.arm7
/FederalVPN.arm8
/FederalVPN.dbg
/FederalVPN.exploit
/FederalVPN.i4
/FederalVPN.i486
/FederalVPN.i586
/FederalVPN.i686
/FederalVPN.kill
/FederalVPN.m68k
/FederalVPN.mips
/FederalVPN.mips64
/FederalVPN.mpsl
/FederalVPN.mipsel
/FederalVPN.ppc
/FederalVPN.ppc2
/FederalVPN.ppc440
/FederalVPN.powerppc
/FederalVPN.root
/FederalVPN.root32
/FederalVPN.sh4
/FederalVPN.ssh4
/FederalVPN.spc
/FederalVPN.sparc
/FederalVPN.x32
/FederalVPN.x64
/FederalVPN.x86
/FederalVPN.x86_32
/FederalVPN.x86_64
/shibui.aarch64
/shibui.arc
/shibui.arm
/shibui.arm4
/shibui.arm4l
/shibui.arm4t
/shibui.arm4tl
/shibui.arm4tll
/shibui.armv4l
/shibui.arm5
/shibui.arm5n
/shibui.arm6
/shibui.arm64
/shibui.arm7
/shibui.arm8
/shibui.dbg
/shibui.exploit
/shibui.i4
/shibui.i486
/shibui.i586
/shibui.i686
/shibui.kill
/shibui.m68k
/shibui.mips
/shibui.mips64
/shibui.mpsl
/shibui.mipsel
/shibui.ppc
/shibui.ppc2
/shibui.ppc440
/shibui.powerppc
/shibui.root
/shibui.root32
/shibui.sh4
/shibui.ssh4
/shibui.spc
/shibui.sparc
/shibui.x32
/shibui.x64
/shibui.x86
/shibui.x86_32
/shibui.x86_64
/system_file.aarch64
/system_file.arc
/system_file.arm
/system_file.arm4
/system_file.arm4l
/system_file.arm4t
/system_file.arm4tl
/system_file.arm4tll
/system_file.armv4l
/system_file.arm5
/system_file.arm5n
/system_file.arm6
/system_file.arm64
/system_file.arm7
/system_file.arm8
/system_file.dbg
/system_file.exploit
/system_file.i4
/system_file.i486
/system_file.i586
/system_file.i686
/system_file.kill
/system_file.m68k
/system_file.mips
/system_file.mips64
/system_file.mpsl
/system_file.mipsel
/system_file.ppc
/system_file.ppc2
/system_file.ppc440
/system_file.powerppc
/system_file.root
/system_file.root32
/system_file.sh4
/system_file.ssh4
/system_file.spc
/system_file.sparc
/system_file.x32
/system_file.x64
/system_file.x86
/system_file.x86_32
/system_file.x86_64
/vcimanagement.aarch64
/vcimanagement.arc
/vcimanagement.arm
/vcimanagement.arm4
/vcimanagement.arm4l
/vcimanagement.arm4t
/vcimanagement.arm4tl
/vcimanagement.arm4tll
/vcimanagement.armv4l
/vcimanagement.arm5
/vcimanagement.arm5n
/vcimanagement.arm6
/vcimanagement.arm64
/vcimanagement.arm7
/vcimanagement.arm8
/vcimanagement.dbg
/vcimanagement.exploit
/vcimanagement.i4
/vcimanagement.i486
/vcimanagement.i586
/vcimanagement.i686
/vcimanagement.kill
/vcimanagement.m68k
/vcimanagement.mips
/vcimanagement.mips64
/vcimanagement.mpsl
/vcimanagement.mipsel
/vcimanagement.ppc
/vcimanagement.ppc2
/vcimanagement.ppc440
/vcimanagement.powerppc
/vcimanagement.root
/vcimanagement.root32
/vcimanagement.sh4
/vcimanagement.ssh4
/vcimanagement.spc
/vcimanagement.sparc
/vcimanagement.x32
/vcimanagement.x64
/vcimanagement.x86
/vcimanagement.x86_32
/vcimanagement.x86_64

# Reference: https://twitter.com/360Netlab/status/961206650144247809

c.rippr.me

# Reference: https://twitter.com/mjbv/status/1186781178604466177
# Reference: https://twitter.com/bad_packets/status/1196184723187367937

208.73.204.202:17012
208.73.204.202:9670
/packets.arc
/packets.arm
/packets.arm4
/packets.arm4l
/packets.arm4t
/packets.arm4tl
/packets.arm4tll
/packets.armv4l
/packets.arm5
/packets.arm5n
/packets.arm6
/packets.arm64
/packets.arm7
/packets.arm8
/packets.dbg
/packets.exploit
/packets.i4
/packets.i486
/packets.i586
/packets.i686
/packets.kill
/packets.m68k
/packets.mips
/packets.mips64
/packets.mpsl
/packets.mipsel
/packets.ppc
/packets.ppc2
/packets.ppc440
/packets.powerppc
/packets.root
/packets.root32
/packets.sh4
/packets.ssh4
/packets.spc
/packets.sparc
/packets.x32
/packets.x64
/packets.x86
/packets.x86_32
/packets.x86_64

# Reference: https://twitter.com/bad_packets/status/1197364637307564033

194.15.36.41:20
194.15.36.41:88

# Reference: https://twitter.com/bad_packets/status/1198667902150250496

185.112.249.39:1024
185.112.249.39:1982

# Reference: https://pastebin.com/rnHdzfHy

/81c4603681c46036.arc
/81c4603681c46036.arm
/81c4603681c46036.arm4
/81c4603681c46036.arm4l
/81c4603681c46036.arm4t
/81c4603681c46036.arm4tl
/81c4603681c46036.arm4tll
/81c4603681c46036.armv4
/81c4603681c46036.armv4l
/81c4603681c46036.arm5
/81c4603681c46036.arm5n
/81c4603681c46036.arm6
/81c4603681c46036.arm64
/81c4603681c46036.arm7
/81c4603681c46036.arm8
/81c4603681c46036.dbg
/81c4603681c46036.exploit
/81c4603681c46036.i4
/81c4603681c46036.i486
/81c4603681c46036.i586
/81c4603681c46036.i686
/81c4603681c46036.kill
/81c4603681c46036.m68k
/81c4603681c46036.mips
/81c4603681c46036.mips64
/81c4603681c46036.mpsl
/81c4603681c46036.mipsel
/81c4603681c46036.pcc
/81c4603681c46036.ppc
/81c4603681c46036.ppc2
/81c4603681c46036.ppc440
/81c4603681c46036.ppc440fp
/81c4603681c46036.powerpc
/81c4603681c46036.powerppc
/81c4603681c46036.root
/81c4603681c46036.root32
/81c4603681c46036.sh4
/81c4603681c46036.ssh4
/81c4603681c46036.spc
/81c4603681c46036.sparc
/81c4603681c46036.x32
/81c4603681c46036.x64
/81c4603681c46036.x86
/81c4603681c46036.x86_32
/81c4603681c46036.x86_64
/akumanyu.arc
/akumanyu.arm
/akumanyu.arm4
/akumanyu.arm4l
/akumanyu.arm4t
/akumanyu.arm4tl
/akumanyu.arm4tll
/akumanyu.armv4
/akumanyu.armv4l
/akumanyu.arm5
/akumanyu.arm5n
/akumanyu.arm6
/akumanyu.arm64
/akumanyu.arm7
/akumanyu.arm8
/akumanyu.dbg
/akumanyu.exploit
/akumanyu.i4
/akumanyu.i486
/akumanyu.i586
/akumanyu.i686
/akumanyu.kill
/akumanyu.m68k
/akumanyu.mips
/akumanyu.mips64
/akumanyu.mpsl
/akumanyu.mipsel
/akumanyu.pcc
/akumanyu.ppc
/akumanyu.ppc2
/akumanyu.ppc440
/akumanyu.ppc440fp
/akumanyu.powerpc
/akumanyu.powerppc
/akumanyu.root
/akumanyu.root32
/akumanyu.sh4
/akumanyu.ssh4
/akumanyu.spc
/akumanyu.sparc
/akumanyu.x32
/akumanyu.x64
/akumanyu.x86
/akumanyu.x86_32
/akumanyu.x86_64
/amnyu.arc
/amnyu.arm
/amnyu.arm4
/amnyu.arm4l
/amnyu.arm4t
/amnyu.arm4tl
/amnyu.arm4tll
/amnyu.armv4
/amnyu.armv4l
/amnyu.arm5
/amnyu.arm5n
/amnyu.arm6
/amnyu.arm64
/amnyu.arm7
/amnyu.arm8
/amnyu.dbg
/amnyu.exploit
/amnyu.i4
/amnyu.i486
/amnyu.i586
/amnyu.i686
/amnyu.kill
/amnyu.m68k
/amnyu.mips
/amnyu.mips64
/amnyu.mpsl
/amnyu.mipsel
/amnyu.pcc
/amnyu.ppc
/amnyu.ppc2
/amnyu.ppc440
/amnyu.ppc440fp
/amnyu.powerpc
/amnyu.powerppc
/amnyu.root
/amnyu.root32
/amnyu.sh4
/amnyu.ssh4
/amnyu.spc
/amnyu.sparc
/amnyu.x32
/amnyu.x64
/amnyu.x86
/amnyu.x86_32
/amnyu.x86_64
/asdfg.arc
/asdfg.arm
/asdfg.arm4
/asdfg.arm4l
/asdfg.arm4t
/asdfg.arm4tl
/asdfg.arm4tll
/asdfg.armv4
/asdfg.armv4l
/asdfg.arm5
/asdfg.arm5n
/asdfg.arm6
/asdfg.arm64
/asdfg.arm7
/asdfg.arm8
/asdfg.dbg
/asdfg.exploit
/asdfg.i4
/asdfg.i486
/asdfg.i586
/asdfg.i686
/asdfg.kill
/asdfg.m68k
/asdfg.mips
/asdfg.mips64
/asdfg.mpsl
/asdfg.mipsel
/asdfg.pcc
/asdfg.ppc
/asdfg.ppc2
/asdfg.ppc440
/asdfg.ppc440fp
/asdfg.powerpc
/asdfg.powerppc
/asdfg.root
/asdfg.root32
/asdfg.sh4
/asdfg.ssh4
/asdfg.spc
/asdfg.sparc
/asdfg.x32
/asdfg.x64
/asdfg.x86
/asdfg.x86_32
/asdfg.x86_64
/asuna.arc
/asuna.arm
/asuna.arm4
/asuna.arm4l
/asuna.arm4t
/asuna.arm4tl
/asuna.arm4tll
/asuna.armv4
/asuna.armv4l
/asuna.arm5
/asuna.arm5n
/asuna.arm6
/asuna.arm64
/asuna.arm7
/asuna.arm8
/asuna.dbg
/asuna.exploit
/asuna.i4
/asuna.i486
/asuna.i586
/asuna.i686
/asuna.kill
/asuna.m68k
/asuna.mips
/asuna.mips64
/asuna.mpsl
/asuna.mipsel
/asuna.pcc
/asuna.ppc
/asuna.ppc2
/asuna.ppc440
/asuna.ppc440fp
/asuna.powerpc
/asuna.powerppc
/asuna.root
/asuna.root32
/asuna.sh4
/asuna.ssh4
/asuna.spc
/asuna.sparc
/asuna.x32
/asuna.x64
/asuna.x86
/asuna.x86_32
/asuna.x86_64
/boot.arc
/boot.arm
/boot.arm4
/boot.arm4l
/boot.arm4t
/boot.arm4tl
/boot.arm4tll
/boot.armv4
/boot.armv4l
/boot.arm5
/boot.arm5n
/boot.arm6
/boot.arm64
/boot.arm7
/boot.arm8
/boot.dbg
/boot.exploit
/boot.i4
/boot.i486
/boot.i586
/boot.i686
/boot.kill
/boot.m68k
/boot.mips
/boot.mips64
/boot.mpsl
/boot.mipsel
/boot.pcc
/boot.ppc
/boot.ppc2
/boot.ppc440
/boot.ppc440fp
/boot.powerpc
/boot.powerppc
/boot.root
/boot.root32
/boot.sh4
/boot.ssh4
/boot.spc
/boot.sparc
/boot.x32
/boot.x64
/boot.x86
/boot.x86_32
/boot.x86_64
/camili.arc
/camili.arm
/camili.arm4
/camili.arm4l
/camili.arm4t
/camili.arm4tl
/camili.arm4tll
/camili.armv4
/camili.armv4l
/camili.arm5
/camili.arm5n
/camili.arm6
/camili.arm64
/camili.arm7
/camili.arm8
/camili.dbg
/camili.exploit
/camili.i4
/camili.i486
/camili.i586
/camili.i686
/camili.kill
/camili.m68k
/camili.mips
/camili.mips64
/camili.mpsl
/camili.mipsel
/camili.pcc
/camili.ppc
/camili.ppc2
/camili.ppc440
/camili.ppc440fp
/camili.powerpc
/camili.powerppc
/camili.root
/camili.root32
/camili.sh4
/camili.ssh4
/camili.spc
/camili.sparc
/camili.x32
/camili.x64
/camili.x86
/camili.x86_32
/camili.x86_64
/friend.arc
/friend.arm
/friend.arm4
/friend.arm4l
/friend.arm4t
/friend.arm4tl
/friend.arm4tll
/friend.armv4
/friend.armv4l
/friend.arm5
/friend.arm5n
/friend.arm6
/friend.arm64
/friend.arm7
/friend.arm8
/friend.dbg
/friend.exploit
/friend.i4
/friend.i486
/friend.i586
/friend.i686
/friend.kill
/friend.m68k
/friend.mips
/friend.mips64
/friend.mpsl
/friend.mipsel
/friend.pcc
/friend.ppc
/friend.ppc2
/friend.ppc440
/friend.ppc440fp
/friend.powerpc
/friend.powerppc
/friend.root
/friend.root32
/friend.sh4
/friend.ssh4
/friend.spc
/friend.sparc
/friend.x32
/friend.x64
/friend.x86
/friend.x86_32
/friend.x86_64
/fyfa.arc
/fyfa.arm
/fyfa.arm4
/fyfa.arm4l
/fyfa.arm4t
/fyfa.arm4tl
/fyfa.arm4tll
/fyfa.armv4
/fyfa.armv4l
/fyfa.arm5
/fyfa.arm5n
/fyfa.arm6
/fyfa.arm64
/fyfa.arm7
/fyfa.arm8
/fyfa.dbg
/fyfa.exploit
/fyfa.i4
/fyfa.i486
/fyfa.i586
/fyfa.i686
/fyfa.kill
/fyfa.m68k
/fyfa.mips
/fyfa.mips64
/fyfa.mpsl
/fyfa.mipsel
/fyfa.pcc
/fyfa.ppc
/fyfa.ppc2
/fyfa.ppc440
/fyfa.ppc440fp
/fyfa.powerpc
/fyfa.powerppc
/fyfa.root
/fyfa.root32
/fyfa.sh4
/fyfa.ssh4
/fyfa.spc
/fyfa.sparc
/fyfa.x32
/fyfa.x64
/fyfa.x86
/fyfa.x86_32
/fyfa.x86_64
/gnome.arc
/gnome.arm
/gnome.arm4
/gnome.arm4l
/gnome.arm4t
/gnome.arm4tl
/gnome.arm4tll
/gnome.armv4
/gnome.armv4l
/gnome.arm5
/gnome.arm5n
/gnome.arm6
/gnome.arm64
/gnome.arm7
/gnome.arm8
/gnome.dbg
/gnome.exploit
/gnome.i4
/gnome.i486
/gnome.i586
/gnome.i686
/gnome.kill
/gnome.m68k
/gnome.mips
/gnome.mips64
/gnome.mpsl
/gnome.mipsel
/gnome.pcc
/gnome.ppc
/gnome.ppc2
/gnome.ppc440
/gnome.ppc440fp
/gnome.powerpc
/gnome.powerppc
/gnome.root
/gnome.root32
/gnome.sh4
/gnome.ssh4
/gnome.spc
/gnome.sparc
/gnome.x32
/gnome.x64
/gnome.x86
/gnome.x86_32
/gnome.x86_64
/lavertele.arc
/lavertele.arm
/lavertele.arm4
/lavertele.arm4l
/lavertele.arm4t
/lavertele.arm4tl
/lavertele.arm4tll
/lavertele.armv4
/lavertele.armv4l
/lavertele.arm5
/lavertele.arm5n
/lavertele.arm6
/lavertele.arm64
/lavertele.arm7
/lavertele.arm8
/lavertele.dbg
/lavertele.exploit
/lavertele.i4
/lavertele.i486
/lavertele.i586
/lavertele.i686
/lavertele.kill
/lavertele.m68k
/lavertele.mips
/lavertele.mips64
/lavertele.mpsl
/lavertele.mipsel
/lavertele.pcc
/lavertele.ppc
/lavertele.ppc2
/lavertele.ppc440
/lavertele.ppc440fp
/lavertele.powerpc
/lavertele.powerppc
/lavertele.root
/lavertele.root32
/lavertele.sh4
/lavertele.ssh4
/lavertele.spc
/lavertele.sparc
/lavertele.x32
/lavertele.x64
/lavertele.x86
/lavertele.x86_32
/lavertele.x86_64
/lavertelent.arc
/lavertelent.arm
/lavertelent.arm4
/lavertelent.arm4l
/lavertelent.arm4t
/lavertelent.arm4tl
/lavertelent.arm4tll
/lavertelent.armv4
/lavertelent.armv4l
/lavertelent.arm5
/lavertelent.arm5n
/lavertelent.arm6
/lavertelent.arm64
/lavertelent.arm7
/lavertelent.arm8
/lavertelent.dbg
/lavertelent.exploit
/lavertelent.i4
/lavertelent.i486
/lavertelent.i586
/lavertelent.i686
/lavertelent.kill
/lavertelent.m68k
/lavertelent.mips
/lavertelent.mips64
/lavertelent.mpsl
/lavertelent.mipsel
/lavertelent.pcc
/lavertelent.ppc
/lavertelent.ppc2
/lavertelent.ppc440
/lavertelent.ppc440fp
/lavertelent.powerpc
/lavertelent.powerppc
/lavertelent.root
/lavertelent.root32
/lavertelent.sh4
/lavertelent.ssh4
/lavertelent.spc
/lavertelent.sparc
/lavertelent.x32
/lavertelent.x64
/lavertelent.x86
/lavertelent.x86_32
/lavertelent.x86_64
/miraint.arc
/miraint.arm
/miraint.arm4
/miraint.arm4l
/miraint.arm4t
/miraint.arm4tl
/miraint.arm4tll
/miraint.armv4
/miraint.armv4l
/miraint.arm5
/miraint.arm5n
/miraint.arm6
/miraint.arm64
/miraint.arm7
/miraint.arm8
/miraint.dbg
/miraint.exploit
/miraint.i4
/miraint.i486
/miraint.i586
/miraint.i686
/miraint.kill
/miraint.m68k
/miraint.mips
/miraint.mips64
/miraint.mpsl
/miraint.mipsel
/miraint.pcc
/miraint.ppc
/miraint.ppc2
/miraint.ppc440
/miraint.ppc440fp
/miraint.powerpc
/miraint.powerppc
/miraint.root
/miraint.root32
/miraint.sh4
/miraint.ssh4
/miraint.spc
/miraint.sparc
/miraint.x32
/miraint.x64
/miraint.x86
/miraint.x86_32
/miraint.x86_64
/mm.arc
/mm.arm
/mm.arm4
/mm.arm4l
/mm.arm4t
/mm.arm4tl
/mm.arm4tll
/mm.armv4
/mm.armv4l
/mm.arm5
/mm.arm5n
/mm.arm6
/mm.arm64
/mm.arm7
/mm.arm8
/mm.dbg
/mm.exploit
/mm.i4
/mm.i486
/mm.i586
/mm.i686
/mm.kill
/mm.m68k
/mm.mips
/mm.mips64
/mm.mpsl
/mm.mipsel
/mm.pcc
/mm.ppc
/mm.ppc2
/mm.ppc440
/mm.ppc440fp
/mm.powerpc
/mm.powerppc
/mm.root
/mm.root32
/mm.sh4
/mm.ssh4
/mm.spc
/mm.sparc
/mm.x32
/mm.x64
/mm.x86
/mm.x86_32
/mm.x86_64
/orion.arc
/orion.arm
/orion.arm4
/orion.arm4l
/orion.arm4t
/orion.arm4tl
/orion.arm4tll
/orion.armv4
/orion.armv4l
/orion.arm5
/orion.arm5n
/orion.arm6
/orion.arm64
/orion.arm7
/orion.arm8
/orion.dbg
/orion.exploit
/orion.i4
/orion.i486
/orion.i586
/orion.i686
/orion.kill
/orion.m68k
/orion.mips
/orion.mips64
/orion.mpsl
/orion.mipsel
/orion.pcc
/orion.ppc
/orion.ppc2
/orion.ppc440
/orion.ppc440fp
/orion.powerpc
/orion.powerppc
/orion.root
/orion.root32
/orion.sh4
/orion.ssh4
/orion.spc
/orion.sparc
/orion.x32
/orion.x64
/orion.x86
/orion.x86_32
/orion.x86_64
/pein.arc
/pein.arm
/pein.arm4
/pein.arm4l
/pein.arm4t
/pein.arm4tl
/pein.arm4tll
/pein.armv4
/pein.armv4l
/pein.arm5
/pein.arm5n
/pein.arm6
/pein.arm64
/pein.arm7
/pein.arm8
/pein.dbg
/pein.exploit
/pein.i4
/pein.i486
/pein.i586
/pein.i686
/pein.kill
/pein.m68k
/pein.mips
/pein.mips64
/pein.mpsl
/pein.mipsel
/pein.pcc
/pein.ppc
/pein.ppc2
/pein.ppc440
/pein.ppc440fp
/pein.powerpc
/pein.powerppc
/pein.root
/pein.root32
/pein.sh4
/pein.ssh4
/pein.spc
/pein.sparc
/pein.x32
/pein.x64
/pein.x86
/pein.x86_32
/pein.x86_64
/putinhelper.arc
/putinhelper.arm
/putinhelper.arm4
/putinhelper.arm4l
/putinhelper.arm4t
/putinhelper.arm4tl
/putinhelper.arm4tll
/putinhelper.armv4
/putinhelper.armv4l
/putinhelper.arm5
/putinhelper.arm5n
/putinhelper.arm6
/putinhelper.arm64
/putinhelper.arm7
/putinhelper.arm8
/putinhelper.dbg
/putinhelper.exploit
/putinhelper.i4
/putinhelper.i486
/putinhelper.i586
/putinhelper.i686
/putinhelper.kill
/putinhelper.m68k
/putinhelper.mips
/putinhelper.mips64
/putinhelper.mpsl
/putinhelper.mipsel
/putinhelper.pcc
/putinhelper.ppc
/putinhelper.ppc2
/putinhelper.ppc440
/putinhelper.ppc440fp
/putinhelper.powerpc
/putinhelper.powerppc
/putinhelper.root
/putinhelper.root32
/putinhelper.sh4
/putinhelper.ssh4
/putinhelper.spc
/putinhelper.sparc
/putinhelper.x32
/putinhelper.x64
/putinhelper.x86
/putinhelper.x86_32
/putinhelper.x86_64
/rash.arc
/rash.arm
/rash.arm4
/rash.arm4l
/rash.arm4t
/rash.arm4tl
/rash.arm4tll
/rash.armv4
/rash.armv4l
/rash.arm5
/rash.arm5n
/rash.arm6
/rash.arm64
/rash.arm7
/rash.arm8
/rash.dbg
/rash.exploit
/rash.i4
/rash.i486
/rash.i586
/rash.i686
/rash.kill
/rash.m68k
/rash.mips
/rash.mips64
/rash.mpsl
/rash.mipsel
/rash.pcc
/rash.ppc
/rash.ppc2
/rash.ppc440
/rash.ppc440fp
/rash.powerpc
/rash.powerppc
/rash.root
/rash.root32
/rash.sh4
/rash.ssh4
/rash.spc
/rash.sparc
/rash.x32
/rash.x64
/rash.x86
/rash.x86_32
/rash.x86_64
/rekai.arc
/rekai.arm
/rekai.arm4
/rekai.arm4l
/rekai.arm4t
/rekai.arm4tl
/rekai.arm4tll
/rekai.armv4
/rekai.armv4l
/rekai.arm5
/rekai.arm5n
/rekai.arm6
/rekai.arm64
/rekai.arm7
/rekai.arm8
/rekai.dbg
/rekai.exploit
/rekai.i4
/rekai.i486
/rekai.i586
/rekai.i686
/rekai.kill
/rekai.m68k
/rekai.mips
/rekai.mips64
/rekai.mpsl
/rekai.mipsel
/rekai.pcc
/rekai.ppc
/rekai.ppc2
/rekai.ppc440
/rekai.ppc440fp
/rekai.powerpc
/rekai.powerppc
/rekai.root
/rekai.root32
/rekai.sh4
/rekai.ssh4
/rekai.spc
/rekai.sparc
/rekai.x32
/rekai.x64
/rekai.x86
/rekai.x86_32
/rekai.x86_64
/satori.arc
/satori.arm
/satori.arm4
/satori.arm4l
/satori.arm4t
/satori.arm4tl
/satori.arm4tll
/satori.armv4
/satori.armv4l
/satori.arm5
/satori.arm5n
/satori.arm6
/satori.arm64
/satori.arm7
/satori.arm8
/satori.dbg
/satori.exploit
/satori.i4
/satori.i486
/satori.i586
/satori.i686
/satori.kill
/satori.m68k
/satori.mips
/satori.mips64
/satori.mpsl
/satori.mipsel
/satori.pcc
/satori.ppc
/satori.ppc2
/satori.ppc440
/satori.ppc440fp
/satori.powerpc
/satori.powerppc
/satori.root
/satori.root32
/satori.sh4
/satori.ssh4
/satori.spc
/satori.sparc
/satori.x32
/satori.x64
/satori.x86
/satori.x86_32
/satori.x86_64
/scythe.arc
/scythe.arm
/scythe.arm4
/scythe.arm4l
/scythe.arm4t
/scythe.arm4tl
/scythe.arm4tll
/scythe.armv4
/scythe.armv4l
/scythe.arm5
/scythe.arm5n
/scythe.arm6
/scythe.arm64
/scythe.arm7
/scythe.arm8
/scythe.dbg
/scythe.exploit
/scythe.i4
/scythe.i486
/scythe.i586
/scythe.i686
/scythe.kill
/scythe.m68k
/scythe.mips
/scythe.mips64
/scythe.mpsl
/scythe.mipsel
/scythe.pcc
/scythe.ppc
/scythe.ppc2
/scythe.ppc440
/scythe.ppc440fp
/scythe.powerpc
/scythe.powerppc
/scythe.root
/scythe.root32
/scythe.sh4
/scythe.ssh4
/scythe.spc
/scythe.sparc
/scythe.x32
/scythe.x64
/scythe.x86
/scythe.x86_32
/scythe.x86_64
/sugit.arc
/sugit.arm
/sugit.arm4
/sugit.arm4l
/sugit.arm4t
/sugit.arm4tl
/sugit.arm4tll
/sugit.armv4
/sugit.armv4l
/sugit.arm5
/sugit.arm5n
/sugit.arm6
/sugit.arm64
/sugit.arm7
/sugit.arm8
/sugit.dbg
/sugit.exploit
/sugit.i4
/sugit.i486
/sugit.i586
/sugit.i686
/sugit.kill
/sugit.m68k
/sugit.mips
/sugit.mips64
/sugit.mpsl
/sugit.mipsel
/sugit.pcc
/sugit.ppc
/sugit.ppc2
/sugit.ppc440
/sugit.ppc440fp
/sugit.powerpc
/sugit.powerppc
/sugit.root
/sugit.root32
/sugit.sh4
/sugit.ssh4
/sugit.spc
/sugit.sparc
/sugit.x32
/sugit.x64
/sugit.x86
/sugit.x86_32
/sugit.x86_64
/synbot.arc
/synbot.arm
/synbot.arm4
/synbot.arm4l
/synbot.arm4t
/synbot.arm4tl
/synbot.arm4tll
/synbot.armv4
/synbot.armv4l
/synbot.arm5
/synbot.arm5n
/synbot.arm6
/synbot.arm64
/synbot.arm7
/synbot.arm8
/synbot.dbg
/synbot.exploit
/synbot.i4
/synbot.i486
/synbot.i586
/synbot.i686
/synbot.kill
/synbot.m68k
/synbot.mips
/synbot.mips64
/synbot.mpsl
/synbot.mipsel
/synbot.pcc
/synbot.ppc
/synbot.ppc2
/synbot.ppc440
/synbot.ppc440fp
/synbot.powerpc
/synbot.powerppc
/synbot.root
/synbot.root32
/synbot.sh4
/synbot.ssh4
/synbot.spc
/synbot.sparc
/synbot.x32
/synbot.x64
/synbot.x86
/synbot.x86_32
/synbot.x86_64
/Tenshi.arc
/Tenshi.arm
/Tenshi.arm4
/Tenshi.arm4l
/Tenshi.arm4t
/Tenshi.arm4tl
/Tenshi.arm4tll
/Tenshi.armv4
/Tenshi.armv4l
/Tenshi.arm5
/Tenshi.arm5n
/Tenshi.arm6
/Tenshi.arm64
/Tenshi.arm7
/Tenshi.arm8
/Tenshi.dbg
/Tenshi.exploit
/Tenshi.i4
/Tenshi.i486
/Tenshi.i586
/Tenshi.i686
/Tenshi.kill
/Tenshi.m68k
/Tenshi.mips
/Tenshi.mips64
/Tenshi.mpsl
/Tenshi.mipsel
/Tenshi.pcc
/Tenshi.ppc
/Tenshi.ppc2
/Tenshi.ppc440
/Tenshi.ppc440fp
/Tenshi.powerpc
/Tenshi.powerppc
/Tenshi.root
/Tenshi.root32
/Tenshi.sh4
/Tenshi.ssh4
/Tenshi.spc
/Tenshi.sparc
/Tenshi.x32
/Tenshi.x64
/Tenshi.x86
/Tenshi.x86_32
/Tenshi.x86_64
/tveth.arc
/tveth.arm
/tveth.arm4
/tveth.arm4l
/tveth.arm4t
/tveth.arm4tl
/tveth.arm4tll
/tveth.armv4
/tveth.armv4l
/tveth.arm5
/tveth.arm5n
/tveth.arm6
/tveth.arm64
/tveth.arm7
/tveth.arm8
/tveth.dbg
/tveth.exploit
/tveth.i4
/tveth.i486
/tveth.i586
/tveth.i686
/tveth.kill
/tveth.m68k
/tveth.mips
/tveth.mips64
/tveth.mpsl
/tveth.mipsel
/tveth.pcc
/tveth.ppc
/tveth.ppc2
/tveth.ppc440
/tveth.ppc440fp
/tveth.powerpc
/tveth.powerppc
/tveth.root
/tveth.root32
/tveth.sh4
/tveth.ssh4
/tveth.spc
/tveth.sparc
/tveth.x32
/tveth.x64
/tveth.x86
/tveth.x86_32
/tveth.x86_64
/usb.arc
/usb.arm
/usb.arm4
/usb.arm4l
/usb.arm4t
/usb.arm4tl
/usb.arm4tll
/usb.armv4
/usb.armv4l
/usb.arm5
/usb.arm5n
/usb.arm6
/usb.arm64
/usb.arm7
/usb.arm8
/usb.dbg
/usb.exploit
/usb.i4
/usb.i486
/usb.i586
/usb.i686
/usb.kill
/usb.m68k
/usb.mips
/usb.mips64
/usb.mpsl
/usb.mipsel
/usb.pcc
/usb.ppc
/usb.ppc2
/usb.ppc440
/usb.ppc440fp
/usb.powerpc
/usb.powerppc
/usb.root
/usb.root32
/usb.sh4
/usb.ssh4
/usb.spc
/usb.sparc
/usb.x32
/usb.x64
/usb.x86
/usb.x86_32
/usb.x86_64
/usb_bus.arc
/usb_bus.arm
/usb_bus.arm4
/usb_bus.arm4l
/usb_bus.arm4t
/usb_bus.arm4tl
/usb_bus.arm4tll
/usb_bus.armv4
/usb_bus.armv4l
/usb_bus.arm5
/usb_bus.arm5n
/usb_bus.arm6
/usb_bus.arm64
/usb_bus.arm7
/usb_bus.arm8
/usb_bus.dbg
/usb_bus.exploit
/usb_bus.i4
/usb_bus.i486
/usb_bus.i586
/usb_bus.i686
/usb_bus.kill
/usb_bus.m68k
/usb_bus.mips
/usb_bus.mips64
/usb_bus.mpsl
/usb_bus.mipsel
/usb_bus.pcc
/usb_bus.ppc
/usb_bus.ppc2
/usb_bus.ppc440
/usb_bus.ppc440fp
/usb_bus.powerpc
/usb_bus.powerppc
/usb_bus.root
/usb_bus.root32
/usb_bus.sh4
/usb_bus.ssh4
/usb_bus.spc
/usb_bus.sparc
/usb_bus.x32
/usb_bus.x64
/usb_bus.x86
/usb_bus.x86_32
/usb_bus.x86_64
/wget_line.arc
/wget_line.arm
/wget_line.arm4
/wget_line.arm4l
/wget_line.arm4t
/wget_line.arm4tl
/wget_line.arm4tll
/wget_line.armv4
/wget_line.armv4l
/wget_line.arm5
/wget_line.arm5n
/wget_line.arm6
/wget_line.arm64
/wget_line.arm7
/wget_line.arm8
/wget_line.dbg
/wget_line.exploit
/wget_line.i4
/wget_line.i486
/wget_line.i586
/wget_line.i686
/wget_line.kill
/wget_line.m68k
/wget_line.mips
/wget_line.mips64
/wget_line.mpsl
/wget_line.mipsel
/wget_line.pcc
/wget_line.ppc
/wget_line.ppc2
/wget_line.ppc440
/wget_line.ppc440fp
/wget_line.powerpc
/wget_line.powerppc
/wget_line.root
/wget_line.root32
/wget_line.sh4
/wget_line.ssh4
/wget_line.spc
/wget_line.sparc
/wget_line.x32
/wget_line.x64
/wget_line.x86
/wget_line.x86_32
/wget_line.x86_64

# Reference: https://twitter.com/bad_packets/status/1200122847982546944

/H34RT.arc
/H34RT.arm
/H34RT.arm4
/H34RT.arm4l
/H34RT.arm4t
/H34RT.arm4tl
/H34RT.arm4tll
/H34RT.armv4
/H34RT.armv4l
/H34RT.arm5
/H34RT.arm5n
/H34RT.arm6
/H34RT.arm64
/H34RT.arm7
/H34RT.arm8
/H34RT.dbg
/H34RT.exploit
/H34RT.i4
/H34RT.i486
/H34RT.i586
/H34RT.i686
/H34RT.kill
/H34RT.m68k
/H34RT.mips
/H34RT.mips64
/H34RT.mpsl
/H34RT.mipsel
/H34RT.pcc
/H34RT.ppc
/H34RT.ppc2
/H34RT.ppc440
/H34RT.ppc440fp
/H34RT.powerpc
/H34RT.powerppc
/H34RT.root
/H34RT.root32
/H34RT.sh4
/H34RT.ssh4
/H34RT.spc
/H34RT.sparc
/H34RT.x32
/H34RT.x64
/H34RT.x86
/H34RT.x86_32
/H34RT.x86_64

# Reference: https://twitter.com/bad_packets/status/1200671462396325888

23.254.224.153:34712
23.254.224.153:45
/Oblivion.arc
/Oblivion.arm
/Oblivion.arm4
/Oblivion.arm4l
/Oblivion.arm4t
/Oblivion.arm4tl
/Oblivion.arm4tll
/Oblivion.armv4
/Oblivion.armv4l
/Oblivion.arm5
/Oblivion.arm5n
/Oblivion.arm6
/Oblivion.arm64
/Oblivion.arm7
/Oblivion.arm8
/Oblivion.dbg
/Oblivion.exploit
/Oblivion.i4
/Oblivion.i486
/Oblivion.i586
/Oblivion.i686
/Oblivion.kill
/Oblivion.m68k
/Oblivion.mips
/Oblivion.mips64
/Oblivion.mpsl
/Oblivion.mipsel
/Oblivion.pcc
/Oblivion.ppc
/Oblivion.ppc2
/Oblivion.ppc440
/Oblivion.ppc440fp
/Oblivion.powerpc
/Oblivion.powerppc
/Oblivion.root
/Oblivion.root32
/Oblivion.sh4
/Oblivion.ssh4
/Oblivion.spc
/Oblivion.sparc
/Oblivion.x32
/Oblivion.x64
/Oblivion.x86
/Oblivion.x86_32
/Oblivion.x86_64

# Reference: https://twitter.com/0xrb/status/1202467361074241536

/fx19.arc
/fx19.arm
/fx19.arm4
/fx19.arm4l
/fx19.arm4t
/fx19.arm4tl
/fx19.arm4tll
/fx19.armv4
/fx19.armv4l
/fx19.arm5
/fx19.arm5n
/fx19.arm6
/fx19.arm64
/fx19.arm7
/fx19.arm8
/fx19.dbg
/fx19.exploit
/fx19.i4
/fx19.i486
/fx19.i586
/fx19.i686
/fx19.kill
/fx19.m68k
/fx19.mips
/fx19.mips64
/fx19.mpsl
/fx19.mipsel
/fx19.pcc
/fx19.ppc
/fx19.ppc2
/fx19.ppc440
/fx19.ppc440fp
/fx19.powerpc
/fx19.powerppc
/fx19.root
/fx19.root32
/fx19.sh4
/fx19.ssh4
/fx19.spc
/fx19.sparc
/fx19.x32
/fx19.x64
/fx19.x86
/fx19.x86_32
/fx19.x86_64
/henkieT.arc
/henkieT.arm
/henkieT.arm4
/henkieT.arm4l
/henkieT.arm4t
/henkieT.arm4tl
/henkieT.arm4tll
/henkieT.armv4
/henkieT.armv4l
/henkieT.arm5
/henkieT.arm5n
/henkieT.arm6
/henkieT.arm64
/henkieT.arm7
/henkieT.arm8
/henkieT.dbg
/henkieT.exploit
/henkieT.i4
/henkieT.i486
/henkieT.i586
/henkieT.i686
/henkieT.kill
/henkieT.m68k
/henkieT.mips
/henkieT.mips64
/henkieT.mpsl
/henkieT.mipsel
/henkieT.pcc
/henkieT.ppc
/henkieT.ppc2
/henkieT.ppc440
/henkieT.ppc440fp
/henkieT.powerpc
/henkieT.powerppc
/henkieT.root
/henkieT.root32
/henkieT.sh4
/henkieT.ssh4
/henkieT.spc
/henkieT.sparc
/henkieT.x32
/henkieT.x64
/henkieT.x86
/henkieT.x86_32
/henkieT.x86_64

# Reference: https://twitter.com/bad_packets/status/1204565215267831808

46.166.151.200:1212
46.166.151.200:122

# Reference: https://twitter.com/DGAFeedAlerts/status/1207121631681957895

bpmsfckfkrpr.support

# Reference: https://twitter.com/bad_packets/status/1209574268746399744

180.128.246.131:1676
180.128.246.131:420

# Reference: https://twitter.com/bad_packets/status/1210050652283359232

165.22.193.111:39284
165.22.193.111:9375

# Reference: https://twitter.com/bad_packets/status/1210292227810852864

198.211.59.149:2001
/badpacketsareniggers.arc
/badpacketsareniggers.arm
/badpacketsareniggers.arm4
/badpacketsareniggers.arm4l
/badpacketsareniggers.arm4t
/badpacketsareniggers.arm4tl
/badpacketsareniggers.arm4tll
/badpacketsareniggers.armv4
/badpacketsareniggers.armv4l
/badpacketsareniggers.arm5
/badpacketsareniggers.arm5n
/badpacketsareniggers.arm6
/badpacketsareniggers.arm64
/badpacketsareniggers.arm7
/badpacketsareniggers.arm8
/badpacketsareniggers.dbg
/badpacketsareniggers.exploit
/badpacketsareniggers.i4
/badpacketsareniggers.i486
/badpacketsareniggers.i586
/badpacketsareniggers.i686
/badpacketsareniggers.kill
/badpacketsareniggers.m68k
/badpacketsareniggers.mips
/badpacketsareniggers.mips64
/badpacketsareniggers.mpsl
/badpacketsareniggers.mipsel
/badpacketsareniggers.pcc
/badpacketsareniggers.ppc
/badpacketsareniggers.ppc2
/badpacketsareniggers.ppc440
/badpacketsareniggers.ppc440fp
/badpacketsareniggers.powerpc
/badpacketsareniggers.powerppc
/badpacketsareniggers.root
/badpacketsareniggers.root32
/badpacketsareniggers.sh4
/badpacketsareniggers.ssh4
/badpacketsareniggers.spc
/badpacketsareniggers.sparc
/badpacketsareniggers.x32
/badpacketsareniggers.x64
/badpacketsareniggers.x86
/badpacketsareniggers.x86_32
/badpacketsareniggers.x86_64
/mybotnettrash.arc
/mybotnettrash.arm
/mybotnettrash.arm4
/mybotnettrash.arm4l
/mybotnettrash.arm4t
/mybotnettrash.arm4tl
/mybotnettrash.arm4tll
/mybotnettrash.armv4
/mybotnettrash.armv4l
/mybotnettrash.arm5
/mybotnettrash.arm5n
/mybotnettrash.arm6
/mybotnettrash.arm64
/mybotnettrash.arm7
/mybotnettrash.arm8
/mybotnettrash.dbg
/mybotnettrash.exploit
/mybotnettrash.i4
/mybotnettrash.i486
/mybotnettrash.i586
/mybotnettrash.i686
/mybotnettrash.kill
/mybotnettrash.m68k
/mybotnettrash.mips
/mybotnettrash.mips64
/mybotnettrash.mpsl
/mybotnettrash.mipsel
/mybotnettrash.pcc
/mybotnettrash.ppc
/mybotnettrash.ppc2
/mybotnettrash.ppc440
/mybotnettrash.ppc440fp
/mybotnettrash.powerpc
/mybotnettrash.powerppc
/mybotnettrash.root
/mybotnettrash.root32
/mybotnettrash.sh4
/mybotnettrash.ssh4
/mybotnettrash.spc
/mybotnettrash.sparc
/mybotnettrash.x32
/mybotnettrash.x64
/mybotnettrash.x86
/mybotnettrash.x86_32
/mybotnettrash.x86_64

# Reference: https://twitter.com/bad_packets/status/1210439634758426624

185.172.110.204:7498

# Reference: https://twitter.com/DGAFeedAlerts/status/1210730720257179649

aojpocslpwsu.support

# Reference: https://twitter.com/bad_packets/status/1211001473548484608

185.242.104.13:64064
185.242.104.13:666
/yama.arc
/yama.arm
/yama.arm4
/yama.arm4l
/yama.arm4t
/yama.arm4tl
/yama.arm4tll
/yama.armv4
/yama.armv4l
/yama.arm5
/yama.arm5n
/yama.arm6
/yama.arm64
/yama.arm7
/yama.arm8
/yama.dbg
/yama.exploit
/yama.i4
/yama.i486
/yama.i586
/yama.i686
/yama.kill
/yama.m68k
/yama.mips
/yama.mips64
/yama.mpsl
/yama.mipsel
/yama.pcc
/yama.ppc
/yama.ppc2
/yama.ppc440
/yama.ppc440fp
/yama.powerpc
/yama.powerppc
/yama.root
/yama.root32
/yama.sh4
/yama.ssh4
/yama.spc
/yama.sparc
/yama.x32
/yama.x64
/yama.x86
/yama.x86_32
/yama.x86_64

# Reference: https://twitter.com/bad_packets/status/1211127588648697857

176.123.4.234:56473
udptcp.packetsv4.tk

# Reference: https://twitter.com/VessOnSecurity/status/1211223343543848960

hoho4christmastrees.duckdns.org
/arc.cbot
/arm.cbot
/arm4.cbot
/arm4l.cbot
/arm4t.cbot
/arm4tl.cbot
/arm4tll.cbot
/armv4.cbot
/armv4l.cbot
/arm5.cbot
/arm5n.cbot
/arm6.cbot
/arm64.cbot
/arm7.cbot
/arm8.cbot
/dbg.cbot
/exploit.cbot
/i4.cbot
/i486.cbot
/i586.cbot
/i686.cbot
/kill.cbot
/m68k.cbot
/mips.cbot
/mips64.cbot
/mpsl.cbot
/mipsel.cbot
/pcc.cbot
/ppc.cbot
/ppc2.cbot
/ppc440.cbot
/ppc440fp.cbot
/powerpc.cbot
/powerppc.cbot
/root.cbot
/root32.cbot
/sh4.cbot
/ssh4.cbot
/spc.cbot
/sparc.cbot
/x32.cbot
/x64.cbot
/x86.cbot
/x86_32.cbot
/x86_64.cbot
/cbot.arc
/cbot.arm
/cbot.arm4
/cbot.arm4l
/cbot.arm4t
/cbot.arm4tl
/cbot.arm4tll
/cbot.armv4
/cbot.armv4l
/cbot.arm5
/cbot.arm5n
/cbot.arm6
/cbot.arm64
/cbot.arm7
/cbot.arm8
/cbot.dbg
/cbot.exploit
/cbot.i4
/cbot.i486
/cbot.i586
/cbot.i686
/cbot.kill
/cbot.m68k
/cbot.mips
/cbot.mips64
/cbot.mpsl
/cbot.mipsel
/cbot.pcc
/cbot.ppc
/cbot.ppc2
/cbot.ppc440
/cbot.ppc440fp
/cbot.powerpc
/cbot.powerppc
/cbot.root
/cbot.root32
/cbot.sh4
/cbot.ssh4
/cbot.spc
/cbot.sparc
/cbot.x32
/cbot.x64
/cbot.x86
/cbot.x86_32
/cbot.x86_64

# Reference: https://twitter.com/huiwangeth/status/1211520165541826560

185.61.137.172:51235

# Reference: https://twitter.com/DGAFeedAlerts/status/1213266745370271745

fxdgbaifiqhs.support

# Reference: https://twitter.com/bad_packets/status/1214701789649354752

45.148.10.160:34712
45.148.10.160:45

# Reference: https://labs.bitdefender.com/2020/01/hold-my-beer-mirai-spinoff-named-liquorbot-incorporates-cryptomining/
# Reference: https://otx.alienvault.com/pulse/5e1603c3f3a01bdd02a678ed

ardp.hldns.ru
bpsuck.hldns.ru
systemservice.hldns.ru
wpceservice.hldns.ru
/wloli.arc
/wloli.arm
/wloli.arm4
/wloli.arm4l
/wloli.arm4t
/wloli.arm4tl
/wloli.arm4tll
/wloli.armv4
/wloli.armv4l
/wloli.arm5
/wloli.arm5n
/wloli.arm6
/wloli.arm64
/wloli.arm7
/wloli.arm8
/wloli.dbg
/wloli.exploit
/wloli.i4
/wloli.i486
/wloli.i586
/wloli.i686
/wloli.kill
/wloli.m68k
/wloli.mips
/wloli.mips64
/wloli.mpsl
/wloli.mipsel
/wloli.pcc
/wloli.ppc
/wloli.ppc2
/wloli.ppc440
/wloli.ppc440fp
/wloli.powerpc
/wloli.powerppc
/wloli.root
/wloli.root32
/wloli.sh4
/wloli.ssh4
/wloli.spc
/wloli.sparc
/wloli.x32
/wloli.x64
/wloli.x86
/wloli.x86_32
/wloli.x86_64

# Reference: https://twitter.com/VessOnSecurity/status/1216725079784087557

retardbot.duckdns.org
/arc.retardbot
/arm.retardbot
/arm4.retardbot
/arm4l.retardbot
/arm4t.retardbot
/arm4tl.retardbot
/arm4tll.retardbot
/armv4l.retardbot
/arm5.retardbot
/arm5n.retardbot
/arm6.retardbot
/arm64.retardbot
/arm7.retardbot
/arm8.retardbot
/dbg.retardbot
/i4.retardbot
/i486.retardbot
/i586.retardbot
/i686.retardbot
/exploit.retardbot
/kill.retardbot
/m68k.retardbot
/mips.retardbot
/mips64.retardbot
/mpsl.retardbot
/mipsel.retardbot
/pcc.retardbot
/ppc.retardbot
/ppc2.retardbot
/ppc440.retardbot
/ppc440fp.retardbot
/powerppc.retardbot
/root.retardbot
/root32.retardbot
/sh4.retardbot
/ssh4.retardbot
/spc.retardbot
/sparc.retardbot
/x32.retardbot
/x64.retardbot
/x86.retardbot
/x86_32.retardbot
/x86_64.retardbot
/retardbot.arc
/retardbot.arm
/retardbot.arm4
/retardbot.arm4l
/retardbot.arm4t
/retardbot.arm4tl
/retardbot.arm4tll
/retardbot.armv4l
/retardbot.arm5
/retardbot.arm5n
/retardbot.arm6
/retardbot.arm64
/retardbot.arm7
/retardbot.arm8
/retardbot.dbg
/retardbot.i4
/retardbot.i486
/retardbot.i586
/retardbot.i686
/retardbot.exploit
/retardbot.kill
/retardbot.m68k
/retardbot.mips
/retardbot.mips64
/retardbot.mpsl
/retardbot.mipsel
/retardbot.pcc
/retardbot.ppc
/retardbot.ppc2
/retardbot.ppc440
/retardbot.ppc440fp
/retardbot.powerppc
/retardbot.root
/retardbot.root32
/retardbot.sh4
/retardbot.ssh4
/retardbot.spc
/retardbot.sparc
/retardbot.x32
/retardbot.x64
/retardbot.x86
/retardbot.x86_32
/retardbot.x86_64

# Reference: https://twitter.com/bad_packets/status/1218735720497500160

198.23.238.235:666
/kttp.arc
/kttp.arm
/kttp.arm4
/kttp.arm4l
/kttp.arm4t
/kttp.arm4tl
/kttp.arm4tll
/kttp.armv4l
/kttp.arm5
/kttp.arm5n
/kttp.arm6
/kttp.arm64
/kttp.arm7
/kttp.arm8
/kttp.dbg
/kttp.i4
/kttp.i486
/kttp.i586
/kttp.i686
/kttp.exploit
/kttp.kill
/kttp.m68k
/kttp.mips
/kttp.mips64
/kttp.mpsl
/kttp.mipsel
/kttp.pcc
/kttp.ppc
/kttp.ppc2
/kttp.ppc440
/kttp.ppc440fp
/kttp.powerppc
/kttp.root
/kttp.root32
/kttp.sh4
/kttp.ssh4
/kttp.spc
/kttp.sparc
/kttp.x32
/kttp.x64
/kttp.x86
/kttp.x86_32
/kttp.x86_64

# Reference: https://twitter.com/bad_packets/status/1219160404431011842

91.208.184.118:65535
/enigmatic.arc
/enigmatic.arm
/enigmatic.arm4
/enigmatic.arm4l
/enigmatic.arm4t
/enigmatic.arm4tl
/enigmatic.arm4tll
/enigmatic.armv4l
/enigmatic.arm5
/enigmatic.arm5n
/enigmatic.arm6
/enigmatic.arm64
/enigmatic.arm7
/enigmatic.arm8
/enigmatic.dbg
/enigmatic.i4
/enigmatic.i486
/enigmatic.i586
/enigmatic.i686
/enigmatic.exploit
/enigmatic.kill
/enigmatic.m68k
/enigmatic.mips
/enigmatic.mips64
/enigmatic.mpsl
/enigmatic.mipsel
/enigmatic.pcc
/enigmatic.ppc
/enigmatic.ppc2
/enigmatic.ppc440
/enigmatic.ppc440fp
/enigmatic.powerppc
/enigmatic.root
/enigmatic.root32
/enigmatic.sh4
/enigmatic.ssh4
/enigmatic.spc
/enigmatic.sparc
/enigmatic.x32
/enigmatic.x64
/enigmatic.x86
/enigmatic.x86_32
/enigmatic.x86_64

# Reference: https://twitter.com/0xrb/status/1219948735892881410

147.135.99.103:9375
/3ngine.arc
/3ngine.arm
/3ngine.arm4
/3ngine.arm4l
/3ngine.arm4t
/3ngine.arm4tl
/3ngine.arm4tll
/3ngine.armv4l
/3ngine.arm5
/3ngine.arm5n
/3ngine.arm6
/3ngine.arm64
/3ngine.arm7
/3ngine.arm8
/3ngine.dbg
/3ngine.i4
/3ngine.i486
/3ngine.i586
/3ngine.i686
/3ngine.exploit
/3ngine.kill
/3ngine.m68k
/3ngine.mips
/3ngine.mips64
/3ngine.mpsl
/3ngine.mipsel
/3ngine.pcc
/3ngine.ppc
/3ngine.ppc2
/3ngine.ppc440
/3ngine.ppc440fp
/3ngine.powerppc
/3ngine.root
/3ngine.root32
/3ngine.sh4
/3ngine.ssh4
/3ngine.spc
/3ngine.sparc
/3ngine.x32
/3ngine.x64
/3ngine.x86
/3ngine.x86_32
/3ngine.x86_64

# Reference: https://twitter.com/0xrb/status/1219942866031525888

205.185.122.174:1024
/ChainAnti.arc
/ChainAnti.arm
/ChainAnti.arm4
/ChainAnti.arm4l
/ChainAnti.arm4t
/ChainAnti.arm4tl
/ChainAnti.arm4tll
/ChainAnti.armv4l
/ChainAnti.arm5
/ChainAnti.arm5n
/ChainAnti.arm6
/ChainAnti.arm64
/ChainAnti.arm7
/ChainAnti.arm8
/ChainAnti.dbg
/ChainAnti.i4
/ChainAnti.i486
/ChainAnti.i586
/ChainAnti.i686
/ChainAnti.exploit
/ChainAnti.kill
/ChainAnti.m68k
/ChainAnti.mips
/ChainAnti.mips64
/ChainAnti.mpsl
/ChainAnti.mipsel
/ChainAnti.pcc
/ChainAnti.ppc
/ChainAnti.ppc2
/ChainAnti.ppc440
/ChainAnti.ppc440fp
/ChainAnti.powerppc
/ChainAnti.root
/ChainAnti.root32
/ChainAnti.sh4
/ChainAnti.ssh4
/ChainAnti.spc
/ChainAnti.sparc
/ChainAnti.x32
/ChainAnti.x64
/ChainAnti.x86
/ChainAnti.x86_32
/ChainAnti.x86_64

# Reference: https://twitter.com/bad_packets/status/1220231950889189376

89.34.27.57:34529
89.34.27.57:8348
/arc.okuma
/arm.okuma
/arm4.okuma
/arm4l.okuma
/arm4t.okuma
/arm4tl.okuma
/arm4tll.okuma
/armv4.okuma
/armv4l.okuma
/arm5.okuma
/arm5n.okuma
/arm6.okuma
/arm64.okuma
/arm7.okuma
/arm8.okuma
/dbg.okuma
/exploit.okuma
/i4.okuma
/i486.okuma
/i586.okuma
/i686.okuma
/kill.okuma
/m68k.okuma
/mips.okuma
/mips64.okuma
/mpsl.okuma
/mipsel.okuma
/pcc.okuma
/ppc.okuma
/ppc2.okuma
/ppc440.okuma
/ppc440fp.okuma
/powerpc.okuma
/powerppc.okuma
/root.okuma
/root32.okuma
/sh4.okuma
/ssh4.okuma
/spc.okuma
/sparc.okuma
/x32.okuma
/x64.okuma
/x86.okuma
/x86_32.okuma
/x86_64.okuma
/okuma.arc
/okuma.arm
/okuma.arm4
/okuma.arm4l
/okuma.arm4t
/okuma.arm4tl
/okuma.arm4tll
/okuma.armv4
/okuma.armv4l
/okuma.arm5
/okuma.arm5n
/okuma.arm6
/okuma.arm64
/okuma.arm7
/okuma.arm8
/okuma.dbg
/okuma.exploit
/okuma.i4
/okuma.i486
/okuma.i586
/okuma.i686
/okuma.kill
/okuma.m68k
/okuma.mips
/okuma.mips64
/okuma.mpsl
/okuma.mipsel
/okuma.pcc
/okuma.ppc
/okuma.ppc2
/okuma.ppc440
/okuma.ppc440fp
/okuma.powerpc
/okuma.powerppc
/okuma.root
/okuma.root32
/okuma.sh4
/okuma.ssh4
/okuma.spc
/okuma.sparc
/okuma.x32
/okuma.x64
/okuma.x86
/okuma.x86_32
/okuma.x86_64

# Reference: https://twitter.com/0xrb/status/1219946554951254016

217.182.38.147:1791

# Reference: https://twitter.com/0xrb/status/1220270618827841536

45.148.10.181:50884
zxcxffyttygbbgfgf12121bot.duckdns.org
/arc.qw69
/arm.qw69
/arm4.qw69
/arm4l.qw69
/arm4t.qw69
/arm4tl.qw69
/arm4tll.qw69
/armv4.qw69
/armv4l.qw69
/arm5.qw69
/arm5n.qw69
/arm6.qw69
/arm64.qw69
/arm7.qw69
/arm8.qw69
/dbg.qw69
/exploit.qw69
/i4.qw69
/i486.qw69
/i586.qw69
/i686.qw69
/kill.qw69
/m68k.qw69
/mips.qw69
/mips64.qw69
/mpsl.qw69
/mipsel.qw69
/pcc.qw69
/ppc.qw69
/ppc2.qw69
/ppc440.qw69
/ppc440fp.qw69
/powerpc.qw69
/powerppc.qw69
/root.qw69
/root32.qw69
/sh4.qw69
/ssh4.qw69
/spc.qw69
/sparc.qw69
/x32.qw69
/x64.qw69
/x86.qw69
/x86_32.qw69
/x86_64.qw69
/qw69.arc
/qw69.arm
/qw69.arm4
/qw69.arm4l
/qw69.arm4t
/qw69.arm4tl
/qw69.arm4tll
/qw69.armv4
/qw69.armv4l
/qw69.arm5
/qw69.arm5n
/qw69.arm6
/qw69.arm64
/qw69.arm7
/qw69.arm8
/qw69.dbg
/qw69.exploit
/qw69.i4
/qw69.i486
/qw69.i586
/qw69.i686
/qw69.kill
/qw69.m68k
/qw69.mips
/qw69.mips64
/qw69.mpsl
/qw69.mipsel
/qw69.pcc
/qw69.ppc
/qw69.ppc2
/qw69.ppc440
/qw69.ppc440fp
/qw69.powerpc
/qw69.powerppc
/qw69.root
/qw69.root32
/qw69.sh4
/qw69.ssh4
/qw69.spc
/qw69.sparc
/qw69.x32
/qw69.x64
/qw69.x86
/qw69.x86_32
/qw69.x86_64

# Reference: https://twitter.com/0xrb/status/1220627438524174337

188.166.36.43:50717
/arc.s0s13
/arm.s0s13
/arm4.s0s13
/arm4l.s0s13
/arm4t.s0s13
/arm4tl.s0s13
/arm4tll.s0s13
/armv4.s0s13
/armv4l.s0s13
/arm5.s0s13
/arm5n.s0s13
/arm6.s0s13
/arm64.s0s13
/arm7.s0s13
/arm8.s0s13
/dbg.s0s13
/exploit.s0s13
/i4.s0s13
/i486.s0s13
/i586.s0s13
/i686.s0s13
/kill.s0s13
/m68k.s0s13
/mips.s0s13
/mips64.s0s13
/mpsl.s0s13
/mipsel.s0s13
/pcc.s0s13
/ppc.s0s13
/ppc2.s0s13
/ppc440.s0s13
/ppc440fp.s0s13
/powerpc.s0s13
/powerppc.s0s13
/root.s0s13
/root32.s0s13
/sh4.s0s13
/ssh4.s0s13
/spc.s0s13
/sparc.s0s13
/x32.s0s13
/x64.s0s13
/x86.s0s13
/x86_32.s0s13
/x86_64.s0s13
/s0s13.arc
/s0s13.arm
/s0s13.arm4
/s0s13.arm4l
/s0s13.arm4t
/s0s13.arm4tl
/s0s13.arm4tll
/s0s13.armv4
/s0s13.armv4l
/s0s13.arm5
/s0s13.arm5n
/s0s13.arm6
/s0s13.arm64
/s0s13.arm7
/s0s13.arm8
/s0s13.dbg
/s0s13.exploit
/s0s13.i4
/s0s13.i486
/s0s13.i586
/s0s13.i686
/s0s13.kill
/s0s13.m68k
/s0s13.mips
/s0s13.mips64
/s0s13.mpsl
/s0s13.mipsel
/s0s13.pcc
/s0s13.ppc
/s0s13.ppc2
/s0s13.ppc440
/s0s13.ppc440fp
/s0s13.powerpc
/s0s13.powerppc
/s0s13.root
/s0s13.root32
/s0s13.sh4
/s0s13.ssh4
/s0s13.spc
/s0s13.sparc
/s0s13.x32
/s0s13.x64
/s0s13.x86
/s0s13.x86_32
/s0s13.x86_64

# Reference: https://www.virustotal.com/gui/ip-address/37.49.231.104/relations

cnc.astrovpn.xyz
scan.astrovpn.xyz
/arc.lmfao293reuj239jrf234rft34jt
/arm.lmfao293reuj239jrf234rft34jt
/arm4.lmfao293reuj239jrf234rft34jt
/arm4l.lmfao293reuj239jrf234rft34jt
/arm4t.lmfao293reuj239jrf234rft34jt
/arm4tl.lmfao293reuj239jrf234rft34jt
/arm4tll.lmfao293reuj239jrf234rft34jt
/armv4.lmfao293reuj239jrf234rft34jt
/armv4l.lmfao293reuj239jrf234rft34jt
/arm5.lmfao293reuj239jrf234rft34jt
/arm5n.lmfao293reuj239jrf234rft34jt
/arm6.lmfao293reuj239jrf234rft34jt
/arm64.lmfao293reuj239jrf234rft34jt
/arm7.lmfao293reuj239jrf234rft34jt
/arm8.lmfao293reuj239jrf234rft34jt
/dbg.lmfao293reuj239jrf234rft34jt
/exploit.lmfao293reuj239jrf234rft34jt
/i4.lmfao293reuj239jrf234rft34jt
/i486.lmfao293reuj239jrf234rft34jt
/i586.lmfao293reuj239jrf234rft34jt
/i686.lmfao293reuj239jrf234rft34jt
/kill.lmfao293reuj239jrf234rft34jt
/m68k.lmfao293reuj239jrf234rft34jt
/mips.lmfao293reuj239jrf234rft34jt
/mips64.lmfao293reuj239jrf234rft34jt
/mpsl.lmfao293reuj239jrf234rft34jt
/mipsel.lmfao293reuj239jrf234rft34jt
/pcc.lmfao293reuj239jrf234rft34jt
/ppc.lmfao293reuj239jrf234rft34jt
/ppc2.lmfao293reuj239jrf234rft34jt
/ppc440.lmfao293reuj239jrf234rft34jt
/ppc440fp.lmfao293reuj239jrf234rft34jt
/powerpc.lmfao293reuj239jrf234rft34jt
/powerppc.lmfao293reuj239jrf234rft34jt
/root.lmfao293reuj239jrf234rft34jt
/root32.lmfao293reuj239jrf234rft34jt
/sh4.lmfao293reuj239jrf234rft34jt
/ssh4.lmfao293reuj239jrf234rft34jt
/spc.lmfao293reuj239jrf234rft34jt
/sparc.lmfao293reuj239jrf234rft34jt
/x32.lmfao293reuj239jrf234rft34jt
/x64.lmfao293reuj239jrf234rft34jt
/x86.lmfao293reuj239jrf234rft34jt
/x86_32.lmfao293reuj239jrf234rft34jt
/x86_64.lmfao293reuj239jrf234rft34jt
/lmfao293reuj239jrf234rft34jt.arc
/lmfao293reuj239jrf234rft34jt.arm
/lmfao293reuj239jrf234rft34jt.arm4
/lmfao293reuj239jrf234rft34jt.arm4l
/lmfao293reuj239jrf234rft34jt.arm4t
/lmfao293reuj239jrf234rft34jt.arm4tl
/lmfao293reuj239jrf234rft34jt.arm4tll
/lmfao293reuj239jrf234rft34jt.armv4
/lmfao293reuj239jrf234rft34jt.armv4l
/lmfao293reuj239jrf234rft34jt.arm5
/lmfao293reuj239jrf234rft34jt.arm5n
/lmfao293reuj239jrf234rft34jt.arm6
/lmfao293reuj239jrf234rft34jt.arm64
/lmfao293reuj239jrf234rft34jt.arm7
/lmfao293reuj239jrf234rft34jt.arm8
/lmfao293reuj239jrf234rft34jt.dbg
/lmfao293reuj239jrf234rft34jt.exploit
/lmfao293reuj239jrf234rft34jt.i4
/lmfao293reuj239jrf234rft34jt.i486
/lmfao293reuj239jrf234rft34jt.i586
/lmfao293reuj239jrf234rft34jt.i686
/lmfao293reuj239jrf234rft34jt.kill
/lmfao293reuj239jrf234rft34jt.m68k
/lmfao293reuj239jrf234rft34jt.mips
/lmfao293reuj239jrf234rft34jt.mips64
/lmfao293reuj239jrf234rft34jt.mpsl
/lmfao293reuj239jrf234rft34jt.mipsel
/lmfao293reuj239jrf234rft34jt.pcc
/lmfao293reuj239jrf234rft34jt.ppc
/lmfao293reuj239jrf234rft34jt.ppc2
/lmfao293reuj239jrf234rft34jt.ppc440
/lmfao293reuj239jrf234rft34jt.ppc440fp
/lmfao293reuj239jrf234rft34jt.powerpc
/lmfao293reuj239jrf234rft34jt.powerppc
/lmfao293reuj239jrf234rft34jt.root
/lmfao293reuj239jrf234rft34jt.root32
/lmfao293reuj239jrf234rft34jt.sh4
/lmfao293reuj239jrf234rft34jt.ssh4
/lmfao293reuj239jrf234rft34jt.spc
/lmfao293reuj239jrf234rft34jt.sparc
/lmfao293reuj239jrf234rft34jt.x32
/lmfao293reuj239jrf234rft34jt.x64
/lmfao293reuj239jrf234rft34jt.x86
/lmfao293reuj239jrf234rft34jt.x86_32
/lmfao293reuj239jrf234rft34jt.x86_64

# Reference: https://www.virustotal.com/gui/domain/fksdjfaksj321cnc.mybiadboats.xyz/relations
# Reference: https://www.virustotal.com/gui/ip-address/45.148.10.92/relations

mybiadboats.xyz
fksdjfaksj321bots.mybiadboats.xyz
fksdjfaksj321cnc.mybiadboats.xyz
/arc.5531sx3
/arm.5531sx3
/arm4.5531sx3
/arm4l.5531sx3
/arm4t.5531sx3
/arm4tl.5531sx3
/arm4tll.5531sx3
/armv4.5531sx3
/armv4l.5531sx3
/arm5.5531sx3
/arm5n.5531sx3
/arm6.5531sx3
/arm64.5531sx3
/arm7.5531sx3
/arm8.5531sx3
/dbg.5531sx3
/exploit.5531sx3
/i4.5531sx3
/i486.5531sx3
/i586.5531sx3
/i686.5531sx3
/kill.5531sx3
/m68k.5531sx3
/mips.5531sx3
/mips64.5531sx3
/mpsl.5531sx3
/mipsel.5531sx3
/pcc.5531sx3
/ppc.5531sx3
/ppc2.5531sx3
/ppc440.5531sx3
/ppc440fp.5531sx3
/powerpc.5531sx3
/powerppc.5531sx3
/root.5531sx3
/root32.5531sx3
/sh4.5531sx3
/ssh4.5531sx3
/spc.5531sx3
/sparc.5531sx3
/x32.5531sx3
/x64.5531sx3
/x86.5531sx3
/x86_32.5531sx3
/x86_64.5531sx3
/5531sx3.arc
/5531sx3.arm
/5531sx3.arm4
/5531sx3.arm4l
/5531sx3.arm4t
/5531sx3.arm4tl
/5531sx3.arm4tll
/5531sx3.armv4
/5531sx3.armv4l
/5531sx3.arm5
/5531sx3.arm5n
/5531sx3.arm6
/5531sx3.arm64
/5531sx3.arm7
/5531sx3.arm8
/5531sx3.dbg
/5531sx3.exploit
/5531sx3.i4
/5531sx3.i486
/5531sx3.i586
/5531sx3.i686
/5531sx3.kill
/5531sx3.m68k
/5531sx3.mips
/5531sx3.mips64
/5531sx3.mpsl
/5531sx3.mipsel
/5531sx3.pcc
/5531sx3.ppc
/5531sx3.ppc2
/5531sx3.ppc440
/5531sx3.ppc440fp
/5531sx3.powerpc
/5531sx3.powerppc
/5531sx3.root
/5531sx3.root32
/5531sx3.sh4
/5531sx3.ssh4
/5531sx3.spc
/5531sx3.sparc
/5531sx3.x32
/5531sx3.x64
/5531sx3.x86
/5531sx3.x86_32
/5531sx3.x86_64

# Reference: https://twitter.com/bad_packets/status/1224062212236382208

207.154.212.220:5301
207.154.212.220:9545
/Stanleyy.arc
/Stanleyy.arm
/Stanleyy.arm4
/Stanleyy.arm4l
/Stanleyy.arm4t
/Stanleyy.arm4tl
/Stanleyy.arm4tll
/Stanleyy.armv4
/Stanleyy.armv4l
/Stanleyy.arm5
/Stanleyy.arm5l
/Stanleyy.arm5n
/Stanleyy.armv5
/Stanleyy.armv5l
/Stanleyy.arm6
/Stanleyy.arm6l
/Stanleyy.arm64
/Stanleyy.armv6
/Stanleyy.armv6l
/Stanleyy.armv61
/Stanleyy.arm7
/Stanleyy.arm7l
/Stanleyy.armv7
/Stanleyy.armv7l
/Stanleyy.arm8
/Stanleyy.armv8
/Stanleyy.dbg
/Stanleyy.exploit
/Stanleyy.i4
/Stanleyy.i6
/Stanleyy.i486
/Stanleyy.i586
/Stanleyy.i686
/Stanleyy.kill
/Stanleyy.m68
/Stanleyy.m68k
/Stanleyy.mips
/Stanleyy.mips64
/Stanleyy.mpsl
/Stanleyy.mipsel
/Stanleyy.pcc
/Stanleyy.ppc
/Stanleyy.ppc2
/Stanleyy.ppc440
/Stanleyy.ppc440fp
/Stanleyy.powerpc
/Stanleyy.powerppc
/Stanleyy.powerpc-440fp
/Stanleyy.root
/Stanleyy.root32
/Stanleyy.sh
/Stanleyy.sh4
/Stanleyy.ssh4
/Stanleyy.spc
/Stanleyy.sparc
/Stanleyy.x32
/Stanleyy.x64
/Stanleyy.x86
/Stanleyy.x86_32
/Stanleyy.x86_64

# Reference: https://twitter.com/bad_packets/status/1221641018262470657

206.81.1.189:39284
206.81.1.189:9375
/b3astmode.arc
/b3astmode.arm
/b3astmode.arm4
/b3astmode.arm4l
/b3astmode.arm4t
/b3astmode.arm4tl
/b3astmode.arm4tll
/b3astmode.armv4
/b3astmode.armv4l
/b3astmode.arm5
/b3astmode.arm5l
/b3astmode.arm5n
/b3astmode.armv5
/b3astmode.armv5l
/b3astmode.arm6
/b3astmode.arm6l
/b3astmode.arm64
/b3astmode.armv6
/b3astmode.armv6l
/b3astmode.armv61
/b3astmode.arm7
/b3astmode.arm7l
/b3astmode.armv7
/b3astmode.armv7l
/b3astmode.arm8
/b3astmode.armv8
/b3astmode.dbg
/b3astmode.exploit
/b3astmode.i4
/b3astmode.i6
/b3astmode.i486
/b3astmode.i586
/b3astmode.i686
/b3astmode.kill
/b3astmode.m68
/b3astmode.m68k
/b3astmode.mips
/b3astmode.mips64
/b3astmode.mpsl
/b3astmode.mipsel
/b3astmode.pcc
/b3astmode.ppc
/b3astmode.ppc2
/b3astmode.ppc440
/b3astmode.ppc440fp
/b3astmode.powerpc
/b3astmode.powerppc
/b3astmode.powerpc-440fp
/b3astmode.root
/b3astmode.root32
/b3astmode.sh
/b3astmode.sh4
/b3astmode.ssh4
/b3astmode.spc
/b3astmode.sparc
/b3astmode.x32
/b3astmode.x64
/b3astmode.x86
/b3astmode.x86_32
/b3astmode.x86_64

# Reference: https://twitter.com/0xrb/status/1224245436015230976
# Reference: https://twitter.com/0xrb/status/1224243105970323457
# Reference: https://twitter.com/0xrb/status/1224246687129993221

159.89.143.222:9375
204.48.21.31:9375
217.182.38.147:1111
/a-r.m-4.GHOUL
/a-r.m-5.GHOUL
/a-r.m-6.GHOUL
/a-r.m-7.GHOUL
/i-4.8-6.GHOUL
/i-5.8-6.GHOUL
/i-6.8-6.GHOUL
/m-6.8-k.GHOUL
/m-i.p-s.GHOUL
/m-p.s-l.GHOUL
/p-p.c-.GHOUL
/s-h.4-.GHOUL
/x-3.2-.GHOUL
/x-6.4-.GHOUL
/x-8.6-.GHOUL

# Reference: https://twitter.com/0xrb/status/1224250204875939840/photo/1

/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4t
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4tl
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm4tll
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv4l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm5
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm5l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm5n
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv5
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv5l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm6
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm6l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm64
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv6
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv6l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv61
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm7
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm7l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv7
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv7l
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.arm8
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.armv8
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.dbg
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.exploit
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i6
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i486
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i586
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.i686
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.kill
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.m68
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.m68k
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mips
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mips64
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mpsl
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.mipsel
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.pcc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc2
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc440
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ppc440fp
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.powerpc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.powerppc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.powerpc-440fp
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.root
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.root32
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.sh
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.sh4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.ssh4
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.spc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.sparc
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x32
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x64
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x86
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x86_32
/djmfjlkdsnfjksefjkdafjdfjksdafjdsafjdfbjkdsbfdsflkaddjkafbadlfdbakfdabnakjfnjkdafkdajfldafjk.x86_64
/Gh0ul.arc
/Gh0ul.arm
/Gh0ul.arm4
/Gh0ul.arm4l
/Gh0ul.arm4t
/Gh0ul.arm4tl
/Gh0ul.arm4tll
/Gh0ul.armv4
/Gh0ul.armv4l
/Gh0ul.arm5
/Gh0ul.arm5l
/Gh0ul.arm5n
/Gh0ul.armv5
/Gh0ul.armv5l
/Gh0ul.arm6
/Gh0ul.arm6l
/Gh0ul.arm64
/Gh0ul.armv6
/Gh0ul.armv6l
/Gh0ul.armv61
/Gh0ul.arm7
/Gh0ul.arm7l
/Gh0ul.armv7
/Gh0ul.armv7l
/Gh0ul.arm8
/Gh0ul.armv8
/Gh0ul.dbg
/Gh0ul.exploit
/Gh0ul.i4
/Gh0ul.i6
/Gh0ul.i486
/Gh0ul.i586
/Gh0ul.i686
/Gh0ul.kill
/Gh0ul.m68
/Gh0ul.m68k
/Gh0ul.mips
/Gh0ul.mips64
/Gh0ul.mpsl
/Gh0ul.mipsel
/Gh0ul.pcc
/Gh0ul.ppc
/Gh0ul.ppc2
/Gh0ul.ppc440
/Gh0ul.ppc440fp
/Gh0ul.powerpc
/Gh0ul.powerppc
/Gh0ul.powerpc-440fp
/Gh0ul.root
/Gh0ul.root32
/Gh0ul.sh
/Gh0ul.sh4
/Gh0ul.ssh4
/Gh0ul.spc
/Gh0ul.sparc
/Gh0ul.x32
/Gh0ul.x64
/Gh0ul.x86
/Gh0ul.x86_32
/Gh0ul.x86_64
/helios.arc
/helios.arm
/helios.arm4
/helios.arm4l
/helios.arm4t
/helios.arm4tl
/helios.arm4tll
/helios.armv4
/helios.armv4l
/helios.arm5
/helios.arm5l
/helios.arm5n
/helios.armv5
/helios.armv5l
/helios.arm6
/helios.arm6l
/helios.arm64
/helios.armv6
/helios.armv6l
/helios.armv61
/helios.arm7
/helios.arm7l
/helios.armv7
/helios.armv7l
/helios.arm8
/helios.armv8
/helios.dbg
/helios.exploit
/helios.i4
/helios.i6
/helios.i486
/helios.i586
/helios.i686
/helios.kill
/helios.m68
/helios.m68k
/helios.mips
/helios.mips64
/helios.mpsl
/helios.mipsel
/helios.pcc
/helios.ppc
/helios.ppc2
/helios.ppc440
/helios.ppc440fp
/helios.powerpc
/helios.powerppc
/helios.powerpc-440fp
/helios.root
/helios.root32
/helios.sh
/helios.sh4
/helios.ssh4
/helios.spc
/helios.sparc
/helios.x32
/helios.x64
/helios.x86
/helios.x86_32
/helios.x86_64
/kiga.arc
/kiga.arm
/kiga.arm4
/kiga.arm4l
/kiga.arm4t
/kiga.arm4tl
/kiga.arm4tll
/kiga.armv4
/kiga.armv4l
/kiga.arm5
/kiga.arm5l
/kiga.arm5n
/kiga.armv5
/kiga.armv5l
/kiga.arm6
/kiga.arm6l
/kiga.arm64
/kiga.armv6
/kiga.armv6l
/kiga.armv61
/kiga.arm7
/kiga.arm7l
/kiga.armv7
/kiga.armv7l
/kiga.arm8
/kiga.armv8
/kiga.dbg
/kiga.exploit
/kiga.i4
/kiga.i6
/kiga.i486
/kiga.i586
/kiga.i686
/kiga.kill
/kiga.m68
/kiga.m68k
/kiga.mips
/kiga.mips64
/kiga.mpsl
/kiga.mipsel
/kiga.pcc
/kiga.ppc
/kiga.ppc2
/kiga.ppc440
/kiga.ppc440fp
/kiga.powerpc
/kiga.powerppc
/kiga.powerpc-440fp
/kiga.root
/kiga.root32
/kiga.sh
/kiga.sh4
/kiga.ssh4
/kiga.spc
/kiga.sparc
/kiga.x32
/kiga.x64
/kiga.x86
/kiga.x86_32
/kiga.x86_64
/z2s234.arc
/z2s234.arm
/z2s234.arm4
/z2s234.arm4l
/z2s234.arm4t
/z2s234.arm4tl
/z2s234.arm4tll
/z2s234.armv4
/z2s234.armv4l
/z2s234.arm5
/z2s234.arm5l
/z2s234.arm5n
/z2s234.armv5
/z2s234.armv5l
/z2s234.arm6
/z2s234.arm6l
/z2s234.arm64
/z2s234.armv6
/z2s234.armv6l
/z2s234.armv61
/z2s234.arm7
/z2s234.arm7l
/z2s234.armv7
/z2s234.armv7l
/z2s234.arm8
/z2s234.armv8
/z2s234.dbg
/z2s234.exploit
/z2s234.i4
/z2s234.i6
/z2s234.i486
/z2s234.i586
/z2s234.i686
/z2s234.kill
/z2s234.m68
/z2s234.m68k
/z2s234.mips
/z2s234.mips64
/z2s234.mpsl
/z2s234.mipsel
/z2s234.pcc
/z2s234.ppc
/z2s234.ppc2
/z2s234.ppc440
/z2s234.ppc440fp
/z2s234.powerpc
/z2s234.powerppc
/z2s234.powerpc-440fp
/z2s234.root
/z2s234.root32
/z2s234.sh
/z2s234.sh4
/z2s234.ssh4
/z2s234.spc
/z2s234.sparc
/z2s234.x32
/z2s234.x64
/z2s234.x86
/z2s234.x86_32
/z2s234.x86_64

# Reference: https://twitter.com/DGAFeedAlerts/status/1224516139742646272

sdoplblbefwm.support

# Reference: https://www.virustotal.com/gui/domain/scan.casualaffinity.net/relations

# scan.casualaffinity.net

# Reference: https://www.virustotal.com/gui/domain/niggacumyafacenet.xyz/relations

# jhasdjahsdjasfkdaskdfasbot.niggacumyafacenet.xyz
# jhasdjahsdjasfkdaskdfascnc.niggacumyafacenet.xyz

/z0r0.arc
/z0r0.arm
/z0r0.arm4
/z0r0.arm4l
/z0r0.arm4t
/z0r0.arm4tl
/z0r0.arm4tll
/z0r0.armv4
/z0r0.armv4l
/z0r0.arm5
/z0r0.arm5l
/z0r0.arm5n
/z0r0.armv5
/z0r0.armv5l
/z0r0.arm6
/z0r0.arm6l
/z0r0.arm64
/z0r0.armv6
/z0r0.armv6l
/z0r0.armv61
/z0r0.arm7
/z0r0.arm7l
/z0r0.armv7
/z0r0.armv7l
/z0r0.arm8
/z0r0.armv8
/z0r0.dbg
/z0r0.exploit
/z0r0.i4
/z0r0.i6
/z0r0.i486
/z0r0.i586
/z0r0.i686
/z0r0.kill
/z0r0.m68
/z0r0.m68k
/z0r0.mips
/z0r0.mips64
/z0r0.mpsl
/z0r0.mipsel
/z0r0.pcc
/z0r0.ppc
/z0r0.ppc2
/z0r0.ppc440
/z0r0.ppc440fp
/z0r0.powerpc
/z0r0.powerppc
/z0r0.powerpc-440fp
/z0r0.root
/z0r0.root32
/z0r0.sh
/z0r0.sh4
/z0r0.ssh4
/z0r0.spc
/z0r0.sparc
/z0r0.x32
/z0r0.x64
/z0r0.x86
/z0r0.x86_32
/z0r0.x86_64

# Reference: https://twitter.com/bad_packets/status/1226403767198707712

/puzzle.arc
/puzzle.arm
/puzzle.arm4
/puzzle.arm4l
/puzzle.arm4t
/puzzle.arm4tl
/puzzle.arm4tll
/puzzle.armv4
/puzzle.armv4l
/puzzle.arm5
/puzzle.arm5l
/puzzle.arm5n
/puzzle.armv5
/puzzle.armv5l
/puzzle.arm6
/puzzle.arm6l
/puzzle.arm64
/puzzle.armv6
/puzzle.armv6l
/puzzle.armv61
/puzzle.arm7
/puzzle.arm7l
/puzzle.armv7
/puzzle.armv7l
/puzzle.arm8
/puzzle.armv8
/puzzle.dbg
/puzzle.exploit
/puzzle.i4
/puzzle.i6
/puzzle.i486
/puzzle.i586
/puzzle.i686
/puzzle.kill
/puzzle.m68
/puzzle.m68k
/puzzle.mips
/puzzle.mips64
/puzzle.mpsl
/puzzle.mipsel
/puzzle.pcc
/puzzle.ppc
/puzzle.ppc2
/puzzle.ppc440
/puzzle.ppc440fp
/puzzle.powerpc
/puzzle.powerppc
/puzzle.powerpc-440fp
/puzzle.root
/puzzle.root32
/puzzle.sh
/puzzle.sh4
/puzzle.ssh4
/puzzle.spc
/puzzle.sparc
/puzzle.x32
/puzzle.x64
/puzzle.x86
/puzzle.x86_32
/puzzle.x86_64

# Reference: https://twitter.com/bad_packets/status/1227309221244493825

178.128.183.31:24136
178.128.183.31:38565

# Reference: https://twitter.com/bad_packets/status/1227352199128211457

190.115.18.86:6323
190.115.18.86:8744

# Reference: https://twitter.com/bad_packets/status/1228733630194696197

51.79.70.163:3455
51.79.70.163:64537
breadsecurity.xyz
/Bread.arc
/Bread.arm
/Bread.arm4
/Bread.arm4l
/Bread.arm4t
/Bread.arm4tl
/Bread.arm4tll
/Bread.armv4
/Bread.armv4l
/Bread.arm5
/Bread.arm5l
/Bread.arm5n
/Bread.armv5
/Bread.armv5l
/Bread.arm6
/Bread.arm6l
/Bread.arm64
/Bread.armv6
/Bread.armv6l
/Bread.armv61
/Bread.arm7
/Bread.arm7l
/Bread.armv7
/Bread.armv7l
/Bread.arm8
/Bread.armv8
/Bread.dbg
/Bread.exploit
/Bread.i4
/Bread.i6
/Bread.i486
/Bread.i586
/Bread.i686
/Bread.kill
/Bread.m68
/Bread.m68k
/Bread.mips
/Bread.mips64
/Bread.mpsl
/Bread.mipsel
/Bread.pcc
/Bread.ppc
/Bread.ppc2
/Bread.ppc440
/Bread.ppc440fp
/Bread.powerpc
/Bread.powerppc
/Bread.powerpc-440fp
/Bread.root
/Bread.root32
/Bread.sh
/Bread.sh4
/Bread.ssh4
/Bread.spc
/Bread.sparc
/Bread.x32
/Bread.x64
/Bread.x86
/Bread.x86_32
/Bread.x86_64

# Reference: https://twitter.com/bad_packets/status/1229607800273113088

/kinam.arc
/kinam.arm
/kinam.arm4
/kinam.arm4l
/kinam.arm4t
/kinam.arm4tl
/kinam.arm4tll
/kinam.armv4
/kinam.armv4l
/kinam.arm5
/kinam.arm5l
/kinam.arm5n
/kinam.armv5
/kinam.armv5l
/kinam.arm6
/kinam.arm6l
/kinam.arm64
/kinam.armv6
/kinam.armv6l
/kinam.armv61
/kinam.arm7
/kinam.arm7l
/kinam.armv7
/kinam.armv7l
/kinam.arm8
/kinam.armv8
/kinam.dbg
/kinam.exploit
/kinam.i4
/kinam.i6
/kinam.i486
/kinam.i586
/kinam.i686
/kinam.kill
/kinam.m68
/kinam.m68k
/kinam.mips
/kinam.mips64
/kinam.mpsl
/kinam.mipsel
/kinam.pcc
/kinam.ppc
/kinam.ppc2
/kinam.ppc440
/kinam.ppc440fp
/kinam.powerpc
/kinam.powerppc
/kinam.powerpc-440fp
/kinam.root
/kinam.root32
/kinam.sh
/kinam.sh4
/kinam.ssh4
/kinam.spc
/kinam.sparc
/kinam.x32
/kinam.x64
/kinam.x86
/kinam.x86_32
/kinam.x86_64

# Reference: https://twitter.com/DGAFeedAlerts/status/1231386452732399616

xxxcujgnxiap.online

# Referenc: https://twitter.com/DGAFeedAlerts/status/1231748397599744001

vudcifwrwoox.support

# Reference: https://twitter.com/malwaremustd1e/status/1231676771415674881
# Reference: https://www.virustotal.com/gui/ip-address/194.180.224.13/relations
# Reference: https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day-en/

194.180.224.1:80
l2d6beb7.justinstalledpanel.com
nlocalhost.wordtheminer.com
wor.wordtheminer.com

# Reference: https://twitter.com/bad_packets/status/1231796550441033728

167.172.251.116:9506
167.172.251.116:9621

# Reference: https://twitter.com/bad_packets/status/1231753032708186112

104.155.220.235:18819
104.155.220.235:40666

# Reference: https://twitter.com/bad_packets/status/1232209066836889600

/l1ch4.arc
/l1ch4.arm
/l1ch4.arm4
/l1ch4.arm4l
/l1ch4.arm4t
/l1ch4.arm4tl
/l1ch4.arm4tll
/l1ch4.armv4
/l1ch4.armv4l
/l1ch4.arm5
/l1ch4.arm5l
/l1ch4.arm5n
/l1ch4.armv5
/l1ch4.armv5l
/l1ch4.arm6
/l1ch4.arm6l
/l1ch4.arm64
/l1ch4.armv6
/l1ch4.armv6l
/l1ch4.armv61
/l1ch4.arm7
/l1ch4.arm7l
/l1ch4.armv7
/l1ch4.armv7l
/l1ch4.arm8
/l1ch4.armv8
/l1ch4.dbg
/l1ch4.exploit
/l1ch4.i4
/l1ch4.i6
/l1ch4.i486
/l1ch4.i586
/l1ch4.i686
/l1ch4.kill
/l1ch4.m68
/l1ch4.m68k
/l1ch4.mips
/l1ch4.mips64
/l1ch4.mpsl
/l1ch4.mipsel
/l1ch4.pcc
/l1ch4.ppc
/l1ch4.ppc2
/l1ch4.ppc440
/l1ch4.ppc440fp
/l1ch4.powerpc
/l1ch4.powerppc
/l1ch4.powerpc-440fp
/l1ch4.root
/l1ch4.root32
/l1ch4.sh
/l1ch4.sh4
/l1ch4.ssh4
/l1ch4.spc
/l1ch4.sparc
/l1ch4.x32
/l1ch4.x64
/l1ch4.x86
/l1ch4.x86_32
/l1ch4.x86_64

# Reference: https://twitter.com/0xrb/status/1232959818177998848

/d4mnasdasd4mn.arc
/d4mnasdasd4mn.arm
/d4mnasdasd4mn.arm4
/d4mnasdasd4mn.arm4l
/d4mnasdasd4mn.arm4t
/d4mnasdasd4mn.arm4tl
/d4mnasdasd4mn.arm4tll
/d4mnasdasd4mn.armv4
/d4mnasdasd4mn.armv4l
/d4mnasdasd4mn.arm5
/d4mnasdasd4mn.arm5l
/d4mnasdasd4mn.arm5n
/d4mnasdasd4mn.armv5
/d4mnasdasd4mn.armv5l
/d4mnasdasd4mn.arm6
/d4mnasdasd4mn.arm6l
/d4mnasdasd4mn.arm64
/d4mnasdasd4mn.armv6
/d4mnasdasd4mn.armv6l
/d4mnasdasd4mn.armv61
/d4mnasdasd4mn.arm7
/d4mnasdasd4mn.arm7l
/d4mnasdasd4mn.armv7
/d4mnasdasd4mn.armv7l
/d4mnasdasd4mn.arm8
/d4mnasdasd4mn.armv8
/d4mnasdasd4mn.dbg
/d4mnasdasd4mn.exploit
/d4mnasdasd4mn.i4
/d4mnasdasd4mn.i6
/d4mnasdasd4mn.i486
/d4mnasdasd4mn.i586
/d4mnasdasd4mn.i686
/d4mnasdasd4mn.kill
/d4mnasdasd4mn.m68
/d4mnasdasd4mn.m68k
/d4mnasdasd4mn.mips
/d4mnasdasd4mn.mips64
/d4mnasdasd4mn.mpsl
/d4mnasdasd4mn.mipsel
/d4mnasdasd4mn.pcc
/d4mnasdasd4mn.ppc
/d4mnasdasd4mn.ppc2
/d4mnasdasd4mn.ppc440
/d4mnasdasd4mn.ppc440fp
/d4mnasdasd4mn.powerpc
/d4mnasdasd4mn.powerppc
/d4mnasdasd4mn.powerpc-440fp
/d4mnasdasd4mn.root
/d4mnasdasd4mn.root32
/d4mnasdasd4mn.sh
/d4mnasdasd4mn.sh4
/d4mnasdasd4mn.ssh4
/d4mnasdasd4mn.spc
/d4mnasdasd4mn.sparc
/d4mnasdasd4mn.x32
/d4mnasdasd4mn.x64
/d4mnasdasd4mn.x86
/d4mnasdasd4mn.x86_32
/d4mnasdasd4mn.x86_64
/gh0st0a1s0as2d12.arc
/gh0st0a1s0as2d12.arm
/gh0st0a1s0as2d12.arm4
/gh0st0a1s0as2d12.arm4l
/gh0st0a1s0as2d12.arm4t
/gh0st0a1s0as2d12.arm4tl
/gh0st0a1s0as2d12.arm4tll
/gh0st0a1s0as2d12.armv4
/gh0st0a1s0as2d12.armv4l
/gh0st0a1s0as2d12.arm5
/gh0st0a1s0as2d12.arm5l
/gh0st0a1s0as2d12.arm5n
/gh0st0a1s0as2d12.armv5
/gh0st0a1s0as2d12.armv5l
/gh0st0a1s0as2d12.arm6
/gh0st0a1s0as2d12.arm6l
/gh0st0a1s0as2d12.arm64
/gh0st0a1s0as2d12.armv6
/gh0st0a1s0as2d12.armv6l
/gh0st0a1s0as2d12.armv61
/gh0st0a1s0as2d12.arm7
/gh0st0a1s0as2d12.arm7l
/gh0st0a1s0as2d12.armv7
/gh0st0a1s0as2d12.armv7l
/gh0st0a1s0as2d12.arm8
/gh0st0a1s0as2d12.armv8
/gh0st0a1s0as2d12.dbg
/gh0st0a1s0as2d12.exploit
/gh0st0a1s0as2d12.i4
/gh0st0a1s0as2d12.i6
/gh0st0a1s0as2d12.i486
/gh0st0a1s0as2d12.i586
/gh0st0a1s0as2d12.i686
/gh0st0a1s0as2d12.kill
/gh0st0a1s0as2d12.m68
/gh0st0a1s0as2d12.m68k
/gh0st0a1s0as2d12.mips
/gh0st0a1s0as2d12.mips64
/gh0st0a1s0as2d12.mpsl
/gh0st0a1s0as2d12.mipsel
/gh0st0a1s0as2d12.pcc
/gh0st0a1s0as2d12.ppc
/gh0st0a1s0as2d12.ppc2
/gh0st0a1s0as2d12.ppc440
/gh0st0a1s0as2d12.ppc440fp
/gh0st0a1s0as2d12.powerpc
/gh0st0a1s0as2d12.powerppc
/gh0st0a1s0as2d12.powerpc-440fp
/gh0st0a1s0as2d12.root
/gh0st0a1s0as2d12.root32
/gh0st0a1s0as2d12.sh
/gh0st0a1s0as2d12.sh4
/gh0st0a1s0as2d12.ssh4
/gh0st0a1s0as2d12.spc
/gh0st0a1s0as2d12.sparc
/gh0st0a1s0as2d12.x32
/gh0st0a1s0as2d12.x64
/gh0st0a1s0as2d12.x86
/gh0st0a1s0as2d12.x86_32
/gh0st0a1s0as2d12.x86_64
/jeksseeessss.arc
/jeksseeessss.arm
/jeksseeessss.arm4
/jeksseeessss.arm4l
/jeksseeessss.arm4t
/jeksseeessss.arm4tl
/jeksseeessss.arm4tll
/jeksseeessss.armv4
/jeksseeessss.armv4l
/jeksseeessss.arm5
/jeksseeessss.arm5l
/jeksseeessss.arm5n
/jeksseeessss.armv5
/jeksseeessss.armv5l
/jeksseeessss.arm6
/jeksseeessss.arm6l
/jeksseeessss.arm64
/jeksseeessss.armv6
/jeksseeessss.armv6l
/jeksseeessss.armv61
/jeksseeessss.arm7
/jeksseeessss.arm7l
/jeksseeessss.armv7
/jeksseeessss.armv7l
/jeksseeessss.arm8
/jeksseeessss.armv8
/jeksseeessss.dbg
/jeksseeessss.exploit
/jeksseeessss.i4
/jeksseeessss.i6
/jeksseeessss.i486
/jeksseeessss.i586
/jeksseeessss.i686
/jeksseeessss.kill
/jeksseeessss.m68
/jeksseeessss.m68k
/jeksseeessss.mips
/jeksseeessss.mips64
/jeksseeessss.mpsl
/jeksseeessss.mipsel
/jeksseeessss.pcc
/jeksseeessss.ppc
/jeksseeessss.ppc2
/jeksseeessss.ppc440
/jeksseeessss.ppc440fp
/jeksseeessss.powerpc
/jeksseeessss.powerppc
/jeksseeessss.powerpc-440fp
/jeksseeessss.root
/jeksseeessss.root32
/jeksseeessss.sh
/jeksseeessss.sh4
/jeksseeessss.ssh4
/jeksseeessss.spc
/jeksseeessss.sparc
/jeksseeessss.x32
/jeksseeessss.x64
/jeksseeessss.x86
/jeksseeessss.x86_32
/jeksseeessss.x86_64
/nomn0m.arc
/nomn0m.arm
/nomn0m.arm4
/nomn0m.arm4l
/nomn0m.arm4t
/nomn0m.arm4tl
/nomn0m.arm4tll
/nomn0m.armv4
/nomn0m.armv4l
/nomn0m.arm5
/nomn0m.arm5l
/nomn0m.arm5n
/nomn0m.armv5
/nomn0m.armv5l
/nomn0m.arm6
/nomn0m.arm6l
/nomn0m.arm64
/nomn0m.armv6
/nomn0m.armv6l
/nomn0m.armv61
/nomn0m.arm7
/nomn0m.arm7l
/nomn0m.armv7
/nomn0m.armv7l
/nomn0m.arm8
/nomn0m.armv8
/nomn0m.dbg
/nomn0m.exploit
/nomn0m.i4
/nomn0m.i6
/nomn0m.i486
/nomn0m.i586
/nomn0m.i686
/nomn0m.kill
/nomn0m.m68
/nomn0m.m68k
/nomn0m.mips
/nomn0m.mips64
/nomn0m.mpsl
/nomn0m.mipsel
/nomn0m.pcc
/nomn0m.ppc
/nomn0m.ppc2
/nomn0m.ppc440
/nomn0m.ppc440fp
/nomn0m.powerpc
/nomn0m.powerppc
/nomn0m.powerpc-440fp
/nomn0m.root
/nomn0m.root32
/nomn0m.sh
/nomn0m.sh4
/nomn0m.ssh4
/nomn0m.spc
/nomn0m.sparc
/nomn0m.x32
/nomn0m.x64
/nomn0m.x86
/nomn0m.x86_32
/nomn0m.x86_64
/RHOMBUS.arc
/RHOMBUS.arm
/RHOMBUS.arm4
/RHOMBUS.arm4l
/RHOMBUS.arm4t
/RHOMBUS.arm4tl
/RHOMBUS.arm4tll
/RHOMBUS.armv4
/RHOMBUS.armv4l
/RHOMBUS.arm5
/RHOMBUS.arm5l
/RHOMBUS.arm5n
/RHOMBUS.armv5
/RHOMBUS.armv5l
/RHOMBUS.arm6
/RHOMBUS.arm6l
/RHOMBUS.arm64
/RHOMBUS.armv6
/RHOMBUS.armv6l
/RHOMBUS.armv61
/RHOMBUS.arm7
/RHOMBUS.arm7l
/RHOMBUS.armv7
/RHOMBUS.armv7l
/RHOMBUS.arm8
/RHOMBUS.armv8
/RHOMBUS.dbg
/RHOMBUS.exploit
/RHOMBUS.i4
/RHOMBUS.i6
/RHOMBUS.i486
/RHOMBUS.i586
/RHOMBUS.i686
/RHOMBUS.kill
/RHOMBUS.m68
/RHOMBUS.m68k
/RHOMBUS.mips
/RHOMBUS.mips64
/RHOMBUS.mpsl
/RHOMBUS.mipsel
/RHOMBUS.pcc
/RHOMBUS.ppc
/RHOMBUS.ppc2
/RHOMBUS.ppc440
/RHOMBUS.ppc440fp
/RHOMBUS.powerpc
/RHOMBUS.powerppc
/RHOMBUS.powerpc-440fp
/RHOMBUS.root
/RHOMBUS.root32
/RHOMBUS.sh
/RHOMBUS.sh4
/RHOMBUS.ssh4
/RHOMBUS.spc
/RHOMBUS.sparc
/RHOMBUS.x32
/RHOMBUS.x64
/RHOMBUS.x86
/RHOMBUS.x86_32
/RHOMBUS.x86_64

# Reference: https://www.virustotal.com/gui/file/b982276458a85cd3dd7c8aa6cb4bbb2d4885b385053f92395a99abbfb0e43784/detection
# Reference: https://twitter.com/malwaremustd1e/status/1233134899130822656
# Reference: https://www.virustotal.com/gui/domain/cf0.pw/relations
# Reference: https://www.stratosphereips.org/blog/2020/4/29/rhombus-a-new-iot-malware

209.126.69.167:2020
209.126.69.167:4634
cf0.pw

# Reference: https://twitter.com/bad_packets/status/1233226684196773888

45.148.10.194:24136
45.148.10.194:38565

# Reference: https://twitter.com/JayTHL/status/1234492869160980485

/scanner.arc
/scanner.arm
/scanner.arm4
/scanner.arm4l
/scanner.arm4t
/scanner.arm4tl
/scanner.arm4tll
/scanner.armv4
/scanner.armv4l
/scanner.arm5
/scanner.arm5l
/scanner.arm5n
/scanner.armv5
/scanner.armv5l
/scanner.arm6
/scanner.arm6l
/scanner.arm64
/scanner.armv6
/scanner.armv6l
/scanner.armv61
/scanner.arm7
/scanner.arm7l
/scanner.armv7
/scanner.armv7l
/scanner.arm8
/scanner.armv8
/scanner.dbg
/scanner.exploit
/scanner.i4
/scanner.i6
/scanner.i486
/scanner.i586
/scanner.i686
/scanner.kill
/scanner.m68
/scanner.m68k
/scanner.mips
/scanner.mips64
/scanner.mpsl
/scanner.mipsel
/scanner.pcc
/scanner.ppc
/scanner.ppc2
/scanner.ppc440
/scanner.ppc440fp
/scanner.powerpc
/scanner.powerppc
/scanner.powerpc-440fp
/scanner.root
/scanner.root32
/scanner.sh
/scanner.sh4
/scanner.ssh4
/scanner.spc
/scanner.sparc
/scanner.x32
/scanner.x64
/scanner.x86
/scanner.x86_32
/scanner.x86_64

# Reference: https://twitter.com/JayTHL/status/1234493569186050051

/19.arc
/19.arm
/19.arm4
/19.arm4l
/19.arm4t
/19.arm4tl
/19.arm4tll
/19.armv4
/19.armv4l
/19.arm5
/19.arm5l
/19.arm5n
/19.armv5
/19.armv5l
/19.arm6
/19.arm6l
/19.arm64
/19.armv6
/19.armv6l
/19.armv61
/19.arm7
/19.arm7l
/19.armv7
/19.armv7l
/19.arm8
/19.armv8
/19.dbg
/19.exploit
/19.i4
/19.i6
/19.i486
/19.i586
/19.i686
/19.kill
/19.m68
/19.m68k
/19.mips
/19.mips64
/19.mpsl
/19.mipsel
/19.pcc
/19.ppc
/19.ppc2
/19.ppc440
/19.ppc440fp
/19.powerpc
/19.powerppc
/19.powerpc-440fp
/19.root
/19.root32
/19.sh
/19.sh4
/19.ssh4
/19.spc
/19.sparc
/19.x32
/19.x64
/19.x86
/19.x86_32
/19.x86_64

# Reference: https://twitter.com/bad_packets/status/1235113588840230912

5.39.217.219:7
5.39.217.219:936

# Reference: https://twitter.com/bad_packets/status/1235414095286824961

/1vs2dv.arc
/1vs2dv.arm
/1vs2dv.arm4
/1vs2dv.arm4l
/1vs2dv.arm4t
/1vs2dv.arm4tl
/1vs2dv.arm4tll
/1vs2dv.armv4
/1vs2dv.armv4l
/1vs2dv.arm5
/1vs2dv.arm5l
/1vs2dv.arm5n
/1vs2dv.armv5
/1vs2dv.armv5l
/1vs2dv.arm6
/1vs2dv.arm6l
/1vs2dv.arm64
/1vs2dv.armv6
/1vs2dv.armv6l
/1vs2dv.armv61
/1vs2dv.arm7
/1vs2dv.arm7l
/1vs2dv.armv7
/1vs2dv.armv7l
/1vs2dv.arm8
/1vs2dv.armv8
/1vs2dv.dbg
/1vs2dv.exploit
/1vs2dv.i4
/1vs2dv.i6
/1vs2dv.i486
/1vs2dv.i586
/1vs2dv.i686
/1vs2dv.kill
/1vs2dv.m68
/1vs2dv.m68k
/1vs2dv.mips
/1vs2dv.mips64
/1vs2dv.mpsl
/1vs2dv.mipsel
/1vs2dv.pcc
/1vs2dv.ppc
/1vs2dv.ppc2
/1vs2dv.ppc440
/1vs2dv.ppc440fp
/1vs2dv.powerpc
/1vs2dv.powerppc
/1vs2dv.powerpc-440fp
/1vs2dv.root
/1vs2dv.root32
/1vs2dv.sh
/1vs2dv.sh4
/1vs2dv.ssh4
/1vs2dv.spc
/1vs2dv.sparc
/1vs2dv.x32
/1vs2dv.x64
/1vs2dv.x86
/1vs2dv.x86_32
/1vs2dv.x86_64

# Reference: https://twitter.com/0xrb/status/1236919702833618946/photo/1

/arc_Sly
/arm_Sly
/arm4_Sly
/arm4l_Sly
/arm4t_Sly
/arm4tl_Sly
/arm4tll_Sly
/armv4_Sly
/armv4l_Sly
/arm5_Sly
/arm5l_Sly
/arm5n_Sly
/armv5l_Sly
/arm6_Sly
/arm6l_Sly
/armv6_Sly
/armv6l_Sly
/armv61_Sly
/arm64_Sly
/arm7_Sly
/arm7l_Sly
/armv7l_Sly
/arm8_Sly
/dbg_Sly
/exploit_Sly
/i4_Sly
/i6_Sly
/i486_Sly
/i586_Sly
/i686_Sly
/kill_Sly
/m68_Sly
/m68k_Sly
/mips_Sly
/mips64_Sly
/mpsl_Sly
/mipsel_Sly
/pcc_Sly
/ppc_Sly
/ppc2_Sly
/ppc440_Sly
/ppc440fp_Sly
/powerpc_Sly
/powerppc_Sly
/powerpc-440fp_Sly
/root_Sly
/root32_Sly
/sh_Sly
/sh4_Sly
/ssh4_Sly
/spc_Sly
/sparc_Sly
/x32_Sly
/x64_Sly
/x86_Sly
/x86_32_Sly
/x86_64_Sly
/Sly_arc
/Sly_arm
/Sly_arm4
/Sly_arm4l
/Sly_arm4t
/Sly_arm4tl
/Sly_arm4tll
/Sly_armv4
/Sly_armv4l
/Sly_arm5
/Sly_arm5l
/Sly_arm5n
/Sly_armv5l
/Sly_arm6
/Sly_arm6l
/Sly_arm64
/Sly_armv6
/Sly_armv6l
/Sly_armv61
/Sly_arm7
/Sly_arm7l
/Sly_armv7l
/Sly_arm8
/Sly_dbg
/Sly_exploit
/Sly_i4
/Sly_i6
/Sly_i486
/Sly_i586
/Sly_i686
/Sly_kill
/Sly_m68
/Sly_m68k
/Sly_mips
/Sly_mips64
/Sly_mpsl
/Sly_mipsel
/Sly_pcc
/Sly_ppc
/Sly_ppc2
/Sly_ppc440
/Sly_ppc440fp
/Sly_powerpc
/Sly_powerppc
/Sly_powerpc-440fp
/Sly_root
/Sly_root32
/Sly_sh
/Sly_sh4
/Sly_ssh4
/Sly_spc
/Sly_sparc
/Sly_x32
/Sly_x64
/Sly_x86
/Sly_x86_32
/Sly_x86_64
/arc.GHOUL
/arm.GHOUL
/arm4.GHOUL
/arm4l.GHOUL
/arm4t.GHOUL
/arm4tl.GHOUL
/arm4tll.GHOUL
/armv4.GHOUL
/armv4l.GHOUL
/arm5.GHOUL
/arm5l.GHOUL
/arm5n.GHOUL
/armv5l.GHOUL
/arm6.GHOUL
/arm6l.GHOUL
/armv6.GHOUL
/armv6l.GHOUL
/armv61.GHOUL
/arm64.GHOUL
/arm7.GHOUL
/arm7l.GHOUL
/armv7l.GHOUL
/arm8.GHOUL
/dbg.GHOUL
/exploit.GHOUL
/i4.GHOUL
/i6.GHOUL
/i486.GHOUL
/i586.GHOUL
/i686.GHOUL
/kill.GHOUL
/m68.GHOUL
/m68k.GHOUL
/mips.GHOUL
/mips64.GHOUL
/mpsl.GHOUL
/mipsel.GHOUL
/pcc.GHOUL
/ppc.GHOUL
/ppc2.GHOUL
/ppc440.GHOUL
/ppc440fp.GHOUL
/powerpc.GHOUL
/powerppc.GHOUL
/powerpc-440fp.GHOUL
/root.GHOUL
/root32.GHOUL
/sh.GHOUL
/sh4.GHOUL
/ssh4.GHOUL
/spc.GHOUL
/sparc.GHOUL
/x32.GHOUL
/x64.GHOUL
/x86.GHOUL
/x86_32.GHOUL
/x86_64.GHOUL
/GHOUL.arc
/GHOUL.arm
/GHOUL.arm4
/GHOUL.arm4l
/GHOUL.arm4t
/GHOUL.arm4tl
/GHOUL.arm4tll
/GHOUL.armv4
/GHOUL.armv4l
/GHOUL.arm5
/GHOUL.arm5l
/GHOUL.arm5n
/GHOUL.armv5l
/GHOUL.arm6
/GHOUL.arm6l
/GHOUL.arm64
/GHOUL.armv6
/GHOUL.armv6l
/GHOUL.armv61
/GHOUL.arm7
/GHOUL.arm7l
/GHOUL.armv7l
/GHOUL.arm8
/GHOUL.dbg
/GHOUL.exploit
/GHOUL.i4
/GHOUL.i6
/GHOUL.i486
/GHOUL.i586
/GHOUL.i686
/GHOUL.kill
/GHOUL.m68
/GHOUL.m68k
/GHOUL.mips
/GHOUL.mips64
/GHOUL.mpsl
/GHOUL.mipsel
/GHOUL.pcc
/GHOUL.ppc
/GHOUL.ppc2
/GHOUL.ppc440
/GHOUL.ppc440fp
/GHOUL.powerpc
/GHOUL.powerppc
/GHOUL.powerpc-440fp
/GHOUL.root
/GHOUL.root32
/GHOUL.sh
/GHOUL.sh4
/GHOUL.ssh4
/GHOUL.spc
/GHOUL.sparc
/GHOUL.x32
/GHOUL.x64
/GHOUL.x86
/GHOUL.x86_32
/GHOUL.x86_64
/arc.scheckiey
/arm.scheckiey
/arm4.scheckiey
/arm4l.scheckiey
/arm4t.scheckiey
/arm4tl.scheckiey
/arm4tll.scheckiey
/armv4.scheckiey
/armv4l.scheckiey
/arm5.scheckiey
/arm5l.scheckiey
/arm5n.scheckiey
/armv5l.scheckiey
/arm6.scheckiey
/arm6l.scheckiey
/armv6.scheckiey
/armv6l.scheckiey
/armv61.scheckiey
/arm64.scheckiey
/arm7.scheckiey
/arm7l.scheckiey
/armv7l.scheckiey
/arm8.scheckiey
/dbg.scheckiey
/exploit.scheckiey
/i4.scheckiey
/i6.scheckiey
/i486.scheckiey
/i586.scheckiey
/i686.scheckiey
/kill.scheckiey
/m68.scheckiey
/m68k.scheckiey
/mips.scheckiey
/mips64.scheckiey
/mpsl.scheckiey
/mipsel.scheckiey
/pcc.scheckiey
/ppc.scheckiey
/ppc2.scheckiey
/ppc440.scheckiey
/ppc440fp.scheckiey
/powerpc.scheckiey
/powerppc.scheckiey
/powerpc-440fp.scheckiey
/root.scheckiey
/root32.scheckiey
/sh.scheckiey
/sh4.scheckiey
/ssh4.scheckiey
/spc.scheckiey
/sparc.scheckiey
/x32.scheckiey
/x64.scheckiey
/x86.scheckiey
/x86_32.scheckiey
/x86_64.scheckiey
/scheckiey.arc
/scheckiey.arm
/scheckiey.arm4
/scheckiey.arm4l
/scheckiey.arm4t
/scheckiey.arm4tl
/scheckiey.arm4tll
/scheckiey.armv4
/scheckiey.armv4l
/scheckiey.arm5
/scheckiey.arm5l
/scheckiey.arm5n
/scheckiey.armv5l
/scheckiey.arm6
/scheckiey.arm6l
/scheckiey.arm64
/scheckiey.armv6
/scheckiey.armv6l
/scheckiey.armv61
/scheckiey.arm7
/scheckiey.arm7l
/scheckiey.armv7l
/scheckiey.arm8
/scheckiey.dbg
/scheckiey.exploit
/scheckiey.i4
/scheckiey.i6
/scheckiey.i486
/scheckiey.i586
/scheckiey.i686
/scheckiey.kill
/scheckiey.m68
/scheckiey.m68k
/scheckiey.mips
/scheckiey.mips64
/scheckiey.mpsl
/scheckiey.mipsel
/scheckiey.pcc
/scheckiey.ppc
/scheckiey.ppc2
/scheckiey.ppc440
/scheckiey.ppc440fp
/scheckiey.powerpc
/scheckiey.powerppc
/scheckiey.powerpc-440fp
/scheckiey.root
/scheckiey.root32
/scheckiey.sh
/scheckiey.sh4
/scheckiey.ssh4
/scheckiey.spc
/scheckiey.sparc
/scheckiey.x32
/scheckiey.x64
/scheckiey.x86
/scheckiey.x86_32
/scheckiey.x86_64
/arc.0s1s12
/arm.0s1s12
/arm4.0s1s12
/arm4l.0s1s12
/arm4t.0s1s12
/arm4tl.0s1s12
/arm4tll.0s1s12
/armv4.0s1s12
/armv4l.0s1s12
/arm5.0s1s12
/arm5l.0s1s12
/arm5n.0s1s12
/armv5l.0s1s12
/arm6.0s1s12
/arm6l.0s1s12
/armv6.0s1s12
/armv6l.0s1s12
/armv61.0s1s12
/arm64.0s1s12
/arm7.0s1s12
/arm7l.0s1s12
/armv7l.0s1s12
/arm8.0s1s12
/dbg.0s1s12
/exploit.0s1s12
/i4.0s1s12
/i6.0s1s12
/i486.0s1s12
/i586.0s1s12
/i686.0s1s12
/kill.0s1s12
/m68.0s1s12
/m68k.0s1s12
/mips.0s1s12
/mips64.0s1s12
/mpsl.0s1s12
/mipsel.0s1s12
/pcc.0s1s12
/ppc.0s1s12
/ppc2.0s1s12
/ppc440.0s1s12
/ppc440fp.0s1s12
/powerpc.0s1s12
/powerppc.0s1s12
/powerpc-440fp.0s1s12
/root.0s1s12
/root32.0s1s12
/sh.0s1s12
/sh4.0s1s12
/ssh4.0s1s12
/spc.0s1s12
/sparc.0s1s12
/x32.0s1s12
/x64.0s1s12
/x86.0s1s12
/x86_32.0s1s12
/x86_64.0s1s12
/0s1s12.arc
/0s1s12.arm
/0s1s12.arm4
/0s1s12.arm4l
/0s1s12.arm4t
/0s1s12.arm4tl
/0s1s12.arm4tll
/0s1s12.armv4
/0s1s12.armv4l
/0s1s12.arm5
/0s1s12.arm5l
/0s1s12.arm5n
/0s1s12.armv5l
/0s1s12.arm6
/0s1s12.arm6l
/0s1s12.arm64
/0s1s12.armv6
/0s1s12.armv6l
/0s1s12.armv61
/0s1s12.arm7
/0s1s12.arm7l
/0s1s12.armv7l
/0s1s12.arm8
/0s1s12.dbg
/0s1s12.exploit
/0s1s12.i4
/0s1s12.i6
/0s1s12.i486
/0s1s12.i586
/0s1s12.i686
/0s1s12.kill
/0s1s12.m68
/0s1s12.m68k
/0s1s12.mips
/0s1s12.mips64
/0s1s12.mpsl
/0s1s12.mipsel
/0s1s12.pcc
/0s1s12.ppc
/0s1s12.ppc2
/0s1s12.ppc440
/0s1s12.ppc440fp
/0s1s12.powerpc
/0s1s12.powerppc
/0s1s12.powerpc-440fp
/0s1s12.root
/0s1s12.root32
/0s1s12.sh
/0s1s12.sh4
/0s1s12.ssh4
/0s1s12.spc
/0s1s12.sparc
/0s1s12.x32
/0s1s12.x64
/0s1s12.x86
/0s1s12.x86_32
/0s1s12.x86_64
/arc.YGlux
/arm.YGlux
/arm4.YGlux
/arm4l.YGlux
/arm4t.YGlux
/arm4tl.YGlux
/arm4tll.YGlux
/armv4.YGlux
/armv4l.YGlux
/arm5.YGlux
/arm5l.YGlux
/arm5n.YGlux
/armv5l.YGlux
/arm6.YGlux
/arm6l.YGlux
/armv6.YGlux
/armv6l.YGlux
/armv61.YGlux
/arm64.YGlux
/arm7.YGlux
/arm7l.YGlux
/armv7l.YGlux
/arm8.YGlux
/dbg.YGlux
/exploit.YGlux
/i4.YGlux
/i6.YGlux
/i486.YGlux
/i586.YGlux
/i686.YGlux
/kill.YGlux
/m68.YGlux
/m68k.YGlux
/mips.YGlux
/mips64.YGlux
/mpsl.YGlux
/mipsel.YGlux
/pcc.YGlux
/ppc.YGlux
/ppc2.YGlux
/ppc440.YGlux
/ppc440fp.YGlux
/powerpc.YGlux
/powerppc.YGlux
/powerpc-440fp.YGlux
/root.YGlux
/root32.YGlux
/sh.YGlux
/sh4.YGlux
/ssh4.YGlux
/spc.YGlux
/sparc.YGlux
/x32.YGlux
/x64.YGlux
/x86.YGlux
/x86_32.YGlux
/x86_64.YGlux
/YGlux.arc
/YGlux.arm
/YGlux.arm4
/YGlux.arm4l
/YGlux.arm4t
/YGlux.arm4tl
/YGlux.arm4tll
/YGlux.armv4
/YGlux.armv4l
/YGlux.arm5
/YGlux.arm5l
/YGlux.arm5n
/YGlux.armv5l
/YGlux.arm6
/YGlux.arm6l
/YGlux.arm64
/YGlux.armv6
/YGlux.armv6l
/YGlux.armv61
/YGlux.arm7
/YGlux.arm7l
/YGlux.armv7l
/YGlux.arm8
/YGlux.dbg
/YGlux.exploit
/YGlux.i4
/YGlux.i6
/YGlux.i486
/YGlux.i586
/YGlux.i686
/YGlux.kill
/YGlux.m68
/YGlux.m68k
/YGlux.mips
/YGlux.mips64
/YGlux.mpsl
/YGlux.mipsel
/YGlux.pcc
/YGlux.ppc
/YGlux.ppc2
/YGlux.ppc440
/YGlux.ppc440fp
/YGlux.powerpc
/YGlux.powerppc
/YGlux.powerpc-440fp
/YGlux.root
/YGlux.root32
/YGlux.sh
/YGlux.sh4
/YGlux.ssh4
/YGlux.spc
/YGlux.sparc
/YGlux.x32
/YGlux.x64
/YGlux.x86
/YGlux.x86_32
/YGlux.x86_64
/arc.gang123isgodloluaintgettingthesebinslikedammwtf
/arm.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4t.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4tl.gang123isgodloluaintgettingthesebinslikedammwtf
/arm4tll.gang123isgodloluaintgettingthesebinslikedammwtf
/armv4.gang123isgodloluaintgettingthesebinslikedammwtf
/armv4l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm5.gang123isgodloluaintgettingthesebinslikedammwtf
/arm5l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm5n.gang123isgodloluaintgettingthesebinslikedammwtf
/armv5l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm6.gang123isgodloluaintgettingthesebinslikedammwtf
/arm6l.gang123isgodloluaintgettingthesebinslikedammwtf
/armv6.gang123isgodloluaintgettingthesebinslikedammwtf
/armv6l.gang123isgodloluaintgettingthesebinslikedammwtf
/armv61.gang123isgodloluaintgettingthesebinslikedammwtf
/arm64.gang123isgodloluaintgettingthesebinslikedammwtf
/arm7.gang123isgodloluaintgettingthesebinslikedammwtf
/arm7l.gang123isgodloluaintgettingthesebinslikedammwtf
/armv7l.gang123isgodloluaintgettingthesebinslikedammwtf
/arm8.gang123isgodloluaintgettingthesebinslikedammwtf
/dbg.gang123isgodloluaintgettingthesebinslikedammwtf
/exploit.gang123isgodloluaintgettingthesebinslikedammwtf
/i4.gang123isgodloluaintgettingthesebinslikedammwtf
/i6.gang123isgodloluaintgettingthesebinslikedammwtf
/i486.gang123isgodloluaintgettingthesebinslikedammwtf
/i586.gang123isgodloluaintgettingthesebinslikedammwtf
/i686.gang123isgodloluaintgettingthesebinslikedammwtf
/kill.gang123isgodloluaintgettingthesebinslikedammwtf
/m68.gang123isgodloluaintgettingthesebinslikedammwtf
/m68k.gang123isgodloluaintgettingthesebinslikedammwtf
/mips.gang123isgodloluaintgettingthesebinslikedammwtf
/mips64.gang123isgodloluaintgettingthesebinslikedammwtf
/mpsl.gang123isgodloluaintgettingthesebinslikedammwtf
/mipsel.gang123isgodloluaintgettingthesebinslikedammwtf
/pcc.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc2.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc440.gang123isgodloluaintgettingthesebinslikedammwtf
/ppc440fp.gang123isgodloluaintgettingthesebinslikedammwtf
/powerpc.gang123isgodloluaintgettingthesebinslikedammwtf
/powerppc.gang123isgodloluaintgettingthesebinslikedammwtf
/powerpc-440fp.gang123isgodloluaintgettingthesebinslikedammwtf
/root.gang123isgodloluaintgettingthesebinslikedammwtf
/root32.gang123isgodloluaintgettingthesebinslikedammwtf
/sh.gang123isgodloluaintgettingthesebinslikedammwtf
/sh4.gang123isgodloluaintgettingthesebinslikedammwtf
/ssh4.gang123isgodloluaintgettingthesebinslikedammwtf
/spc.gang123isgodloluaintgettingthesebinslikedammwtf
/sparc.gang123isgodloluaintgettingthesebinslikedammwtf
/x32.gang123isgodloluaintgettingthesebinslikedammwtf
/x64.gang123isgodloluaintgettingthesebinslikedammwtf
/x86.gang123isgodloluaintgettingthesebinslikedammwtf
/x86_32.gang123isgodloluaintgettingthesebinslikedammwtf
/x86_64.gang123isgodloluaintgettingthesebinslikedammwtf
/gang123isgodloluaintgettingthesebinslikedammwtf.arc
/gang123isgodloluaintgettingthesebinslikedammwtf.arm
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4t
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4tl
/gang123isgodloluaintgettingthesebinslikedammwtf.arm4tll
/gang123isgodloluaintgettingthesebinslikedammwtf.armv4
/gang123isgodloluaintgettingthesebinslikedammwtf.armv4l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm5
/gang123isgodloluaintgettingthesebinslikedammwtf.arm5l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm5n
/gang123isgodloluaintgettingthesebinslikedammwtf.armv5l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm6
/gang123isgodloluaintgettingthesebinslikedammwtf.arm6l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm64
/gang123isgodloluaintgettingthesebinslikedammwtf.armv6
/gang123isgodloluaintgettingthesebinslikedammwtf.armv6l
/gang123isgodloluaintgettingthesebinslikedammwtf.armv61
/gang123isgodloluaintgettingthesebinslikedammwtf.arm7
/gang123isgodloluaintgettingthesebinslikedammwtf.arm7l
/gang123isgodloluaintgettingthesebinslikedammwtf.armv7l
/gang123isgodloluaintgettingthesebinslikedammwtf.arm8
/gang123isgodloluaintgettingthesebinslikedammwtf.dbg
/gang123isgodloluaintgettingthesebinslikedammwtf.exploit
/gang123isgodloluaintgettingthesebinslikedammwtf.i4
/gang123isgodloluaintgettingthesebinslikedammwtf.i6
/gang123isgodloluaintgettingthesebinslikedammwtf.i486
/gang123isgodloluaintgettingthesebinslikedammwtf.i586
/gang123isgodloluaintgettingthesebinslikedammwtf.i686
/gang123isgodloluaintgettingthesebinslikedammwtf.kill
/gang123isgodloluaintgettingthesebinslikedammwtf.m68
/gang123isgodloluaintgettingthesebinslikedammwtf.m68k
/gang123isgodloluaintgettingthesebinslikedammwtf.mips
/gang123isgodloluaintgettingthesebinslikedammwtf.mips64
/gang123isgodloluaintgettingthesebinslikedammwtf.mpsl
/gang123isgodloluaintgettingthesebinslikedammwtf.mipsel
/gang123isgodloluaintgettingthesebinslikedammwtf.pcc
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc2
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc440
/gang123isgodloluaintgettingthesebinslikedammwtf.ppc440fp
/gang123isgodloluaintgettingthesebinslikedammwtf.powerpc
/gang123isgodloluaintgettingthesebinslikedammwtf.powerppc
/gang123isgodloluaintgettingthesebinslikedammwtf.powerpc-440fp
/gang123isgodloluaintgettingthesebinslikedammwtf.root
/gang123isgodloluaintgettingthesebinslikedammwtf.root32
/gang123isgodloluaintgettingthesebinslikedammwtf.sh
/gang123isgodloluaintgettingthesebinslikedammwtf.sh4
/gang123isgodloluaintgettingthesebinslikedammwtf.ssh4
/gang123isgodloluaintgettingthesebinslikedammwtf.spc
/gang123isgodloluaintgettingthesebinslikedammwtf.sparc
/gang123isgodloluaintgettingthesebinslikedammwtf.x32
/gang123isgodloluaintgettingthesebinslikedammwtf.x64
/gang123isgodloluaintgettingthesebinslikedammwtf.x86
/gang123isgodloluaintgettingthesebinslikedammwtf.x86_32
/gang123isgodloluaintgettingthesebinslikedammwtf.x86_64
/arc.h04sm4d
/arm.h04sm4d
/arm4.h04sm4d
/arm4l.h04sm4d
/arm4t.h04sm4d
/arm4tl.h04sm4d
/arm4tll.h04sm4d
/armv4.h04sm4d
/armv4l.h04sm4d
/arm5.h04sm4d
/arm5l.h04sm4d
/arm5n.h04sm4d
/armv5l.h04sm4d
/arm6.h04sm4d
/arm6l.h04sm4d
/armv6.h04sm4d
/armv6l.h04sm4d
/armv61.h04sm4d
/arm64.h04sm4d
/arm7.h04sm4d
/arm7l.h04sm4d
/armv7l.h04sm4d
/arm8.h04sm4d
/dbg.h04sm4d
/exploit.h04sm4d
/i4.h04sm4d
/i6.h04sm4d
/i486.h04sm4d
/i586.h04sm4d
/i686.h04sm4d
/kill.h04sm4d
/m68.h04sm4d
/m68k.h04sm4d
/mips.h04sm4d
/mips64.h04sm4d
/mpsl.h04sm4d
/mipsel.h04sm4d
/pcc.h04sm4d
/ppc.h04sm4d
/ppc2.h04sm4d
/ppc440.h04sm4d
/ppc440fp.h04sm4d
/powerpc.h04sm4d
/powerppc.h04sm4d
/powerpc-440fp.h04sm4d
/root.h04sm4d
/root32.h04sm4d
/sh.h04sm4d
/sh4.h04sm4d
/ssh4.h04sm4d
/spc.h04sm4d
/sparc.h04sm4d
/x32.h04sm4d
/x64.h04sm4d
/x86.h04sm4d
/x86_32.h04sm4d
/x86_64.h04sm4d
/h04sm4d.arc
/h04sm4d.arm
/h04sm4d.arm4
/h04sm4d.arm4l
/h04sm4d.arm4t
/h04sm4d.arm4tl
/h04sm4d.arm4tll
/h04sm4d.armv4
/h04sm4d.armv4l
/h04sm4d.arm5
/h04sm4d.arm5l
/h04sm4d.arm5n
/h04sm4d.armv5l
/h04sm4d.arm6
/h04sm4d.arm6l
/h04sm4d.arm64
/h04sm4d.armv6
/h04sm4d.armv6l
/h04sm4d.armv61
/h04sm4d.arm7
/h04sm4d.arm7l
/h04sm4d.armv7l
/h04sm4d.arm8
/h04sm4d.dbg
/h04sm4d.exploit
/h04sm4d.i4
/h04sm4d.i6
/h04sm4d.i486
/h04sm4d.i586
/h04sm4d.i686
/h04sm4d.kill
/h04sm4d.m68
/h04sm4d.m68k
/h04sm4d.mips
/h04sm4d.mips64
/h04sm4d.mpsl
/h04sm4d.mipsel
/h04sm4d.pcc
/h04sm4d.ppc
/h04sm4d.ppc2
/h04sm4d.ppc440
/h04sm4d.ppc440fp
/h04sm4d.powerpc
/h04sm4d.powerppc
/h04sm4d.powerpc-440fp
/h04sm4d.root
/h04sm4d.root32
/h04sm4d.sh
/h04sm4d.sh4
/h04sm4d.ssh4
/h04sm4d.spc
/h04sm4d.sparc
/h04sm4d.x32
/h04sm4d.x64
/h04sm4d.x86
/h04sm4d.x86_32
/h04sm4d.x86_64

# Reference: https://twitter.com/bad_packets/status/1237992087871574016

/arc.Kira
/arm.Kira
/arm4.Kira
/arm4l.Kira
/arm4t.Kira
/arm4tl.Kira
/arm4tll.Kira
/armv4.Kira
/armv4l.Kira
/arm5.Kira
/arm5l.Kira
/arm5n.Kira
/armv5l.Kira
/arm6.Kira
/arm6l.Kira
/armv6.Kira
/armv6l.Kira
/armv61.Kira
/arm64.Kira
/arm7.Kira
/arm7l.Kira
/armv7l.Kira
/arm8.Kira
/dbg.Kira
/exploit.Kira
/i4.Kira
/i6.Kira
/i486.Kira
/i586.Kira
/i686.Kira
/kill.Kira
/m68.Kira
/m68k.Kira
/mips.Kira
/mips64.Kira
/mpsl.Kira
/mipsel.Kira
/pcc.Kira
/ppc.Kira
/ppc2.Kira
/ppc440.Kira
/ppc440fp.Kira
/powerpc.Kira
/powerppc.Kira
/powerpc-440fp.Kira
/root.Kira
/root32.Kira
/sh.Kira
/sh4.Kira
/ssh4.Kira
/spc.Kira
/sparc.Kira
/x32.Kira
/x64.Kira
/x86.Kira
/x86_32.Kira
/x86_64.Kira
/Kira.arc
/Kira.arm
/Kira.arm4
/Kira.arm4l
/Kira.arm4t
/Kira.arm4tl
/Kira.arm4tll
/Kira.armv4
/Kira.armv4l
/Kira.arm5
/Kira.arm5l
/Kira.arm5n
/Kira.armv5l
/Kira.arm6
/Kira.arm6l
/Kira.arm64
/Kira.armv6
/Kira.armv6l
/Kira.armv61
/Kira.arm7
/Kira.arm7l
/Kira.armv7l
/Kira.arm8
/Kira.dbg
/Kira.exploit
/Kira.i4
/Kira.i6
/Kira.i486
/Kira.i586
/Kira.i686
/Kira.kill
/Kira.m68
/Kira.m68k
/Kira.mips
/Kira.mips64
/Kira.mpsl
/Kira.mipsel
/Kira.pcc
/Kira.ppc
/Kira.ppc2
/Kira.ppc440
/Kira.ppc440fp
/Kira.powerpc
/Kira.powerppc
/Kira.powerpc-440fp
/Kira.root
/Kira.root32
/Kira.sh
/Kira.sh4
/Kira.ssh4
/Kira.spc
/Kira.sparc
/Kira.x32
/Kira.x64
/Kira.x86
/Kira.x86_32
/Kira.x86_64

# Reference: https://twitter.com/0xrb/status/1237983250129154048

/arc.forehead
/arm.forehead
/arm4.forehead
/arm4l.forehead
/arm4t.forehead
/arm4tl.forehead
/arm4tll.forehead
/armv4.forehead
/armv4l.forehead
/arm5.forehead
/arm5l.forehead
/arm5n.forehead
/armv5l.forehead
/arm6.forehead
/arm6l.forehead
/armv6.forehead
/armv6l.forehead
/armv61.forehead
/arm64.forehead
/arm7.forehead
/arm7l.forehead
/armv7l.forehead
/arm8.forehead
/dbg.forehead
/exploit.forehead
/i4.forehead
/i6.forehead
/i486.forehead
/i586.forehead
/i686.forehead
/kill.forehead
/m68.forehead
/m68k.forehead
/mips.forehead
/mips64.forehead
/mpsl.forehead
/mipsel.forehead
/pcc.forehead
/ppc.forehead
/ppc2.forehead
/ppc440.forehead
/ppc440fp.forehead
/powerpc.forehead
/powerppc.forehead
/powerpc-440fp.forehead
/root.forehead
/root32.forehead
/sh.forehead
/sh4.forehead
/ssh4.forehead
/spc.forehead
/sparc.forehead
/x32.forehead
/x64.forehead
/x86.forehead
/x86_32.forehead
/x86_64.forehead
/forehead.arc
/forehead.arm
/forehead.arm4
/forehead.arm4l
/forehead.arm4t
/forehead.arm4tl
/forehead.arm4tll
/forehead.armv4
/forehead.armv4l
/forehead.arm5
/forehead.arm5l
/forehead.arm5n
/forehead.armv5l
/forehead.arm6
/forehead.arm6l
/forehead.arm64
/forehead.armv6
/forehead.armv6l
/forehead.armv61
/forehead.arm7
/forehead.arm7l
/forehead.armv7l
/forehead.arm8
/forehead.dbg
/forehead.exploit
/forehead.i4
/forehead.i6
/forehead.i486
/forehead.i586
/forehead.i686
/forehead.kill
/forehead.m68
/forehead.m68k
/forehead.mips
/forehead.mips64
/forehead.mpsl
/forehead.mipsel
/forehead.pcc
/forehead.ppc
/forehead.ppc2
/forehead.ppc440
/forehead.ppc440fp
/forehead.powerpc
/forehead.powerppc
/forehead.powerpc-440fp
/forehead.root
/forehead.root32
/forehead.sh
/forehead.sh4
/forehead.ssh4
/forehead.spc
/forehead.sparc
/forehead.x32
/forehead.x64
/forehead.x86
/forehead.x86_32
/forehead.x86_64

# Reference: https://unit42.paloaltonetworks.com/new-mirai-variant-mukashi/
# Reference: https://www.virustotal.com/gui/ip-address/45.84.196.75/relations

45.84.196.75:34834
45.84.196.75:4864
/arc.corona
/arm.corona
/arm4.corona
/arm4l.corona
/arm4t.corona
/arm4tl.corona
/arm4tll.corona
/arm5.corona
/arm5l.corona
/arm5n.corona
/arm6.corona
/arm64.corona
/arm6l.corona
/arm7.corona
/arm7l.corona
/arm8.corona
/armv4.corona
/armv4l.corona
/armv5l.corona
/armv6.corona
/armv61.corona
/armv6l.corona
/armv7l.corona
/dbg.corona
/exploit.corona
/i4.corona
/i486.corona
/i586.corona
/i6.corona
/i686.corona
/kill.corona
/m68.corona
/m68k.corona
/mips.corona
/mips64.corona
/mipsel.corona
/mpsl.corona
/pcc.corona
/powerpc-440fp.corona
/powerpc.corona
/powerppc.corona
/ppc.corona
/ppc2.corona
/ppc440.corona
/ppc440fp.corona
/root.corona
/root32.corona
/sh.corona
/sh4.corona
/sparc.corona
/spc.corona
/ssh4.corona
/x32.corona
/x64.corona
/x86.corona
/x86_32.corona
/x86_64.corona
/arc.kawaii
/arm.kawaii
/arm4.kawaii
/arm4l.kawaii
/arm4t.kawaii
/arm4tl.kawaii
/arm4tll.kawaii
/arm5.kawaii
/arm5l.kawaii
/arm5n.kawaii
/arm6.kawaii
/arm64.kawaii
/arm6l.kawaii
/arm7.kawaii
/arm7l.kawaii
/arm8.kawaii
/armv4.kawaii
/armv4l.kawaii
/armv5l.kawaii
/armv6.kawaii
/armv61.kawaii
/armv6l.kawaii
/armv7l.kawaii
/dbg.kawaii
/exploit.kawaii
/i4.kawaii
/i486.kawaii
/i586.kawaii
/i6.kawaii
/i686.kawaii
/kill.kawaii
/m68.kawaii
/m68k.kawaii
/mips.kawaii
/mips64.kawaii
/mipsel.kawaii
/mpsl.kawaii
/pcc.kawaii
/powerpc.kawaii
/powerpc-440fp.kawaii
/powerppc.kawaii
/ppc.kawaii
/ppc2.kawaii
/ppc440.kawaii
/ppc440fp.kawaii
/root.kawaii
/root32.kawaii
/sh.kawaii
/sh4.kawaii
/sparc.kawaii
/spc.kawaii
/ssh4.kawaii
/x32.kawaii
/x64.kawaii
/x86.kawaii
/x86_32.kawaii
/x86_64.kawaii
/kawaii.arc
/kawaii.arm
/kawaii.arm4
/kawaii.arm4l
/kawaii.arm4t
/kawaii.arm4tl
/kawaii.arm4tll
/kawaii.armv4
/kawaii.armv4l
/kawaii.arm5
/kawaii.arm5l
/kawaii.arm5n
/kawaii.armv5l
/kawaii.arm6
/kawaii.arm6l
/kawaii.arm64
/kawaii.armv6
/kawaii.armv6l
/kawaii.armv61
/kawaii.arm7
/kawaii.arm7l
/kawaii.armv7l
/kawaii.arm8
/kawaii.dbg
/kawaii.exploit
/kawaii.i4
/kawaii.i6
/kawaii.i486
/kawaii.i586
/kawaii.i686
/kawaii.kill
/kawaii.m68
/kawaii.m68k
/kawaii.mips
/kawaii.mips64
/kawaii.mpsl
/kawaii.mipsel
/kawaii.pcc
/kawaii.ppc
/kawaii.ppc2
/kawaii.ppc440
/kawaii.ppc440fp
/kawaii.powerpc
/kawaii.powerppc
/kawaii.powerpc-440fp
/kawaii.root
/kawaii.root32
/kawaii.sh
/kawaii.sh4
/kawaii.ssh4
/kawaii.spc
/kawaii.sparc
/kawaii.x32
/kawaii.x64
/kawaii.x86
/kawaii.x86_32
/kawaii.x86_64

# Reference: https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day-en/

45.10.90.89:61002

# Reference: https://twitter.com/bad_packets/status/1242518187788226560

lol.tf
/eRrlQF1.botnet
/arc.botnet
/arm.botnet
/arm4.botnet
/arm4l.botnet
/arm4t.botnet
/arm4tl.botnet
/arm4tll.botnet
/arm5.botnet
/arm5l.botnet
/arm5n.botnet
/arm6.botnet
/arm64.botnet
/arm6l.botnet
/arm7.botnet
/arm7l.botnet
/arm8.botnet
/armv4.botnet
/armv4l.botnet
/armv5l.botnet
/armv6.botnet
/armv61.botnet
/armv6l.botnet
/armv7l.botnet
/dbg.botnet
/exploit.botnet
/i4.botnet
/i486.botnet
/i586.botnet
/i6.botnet
/i686.botnet
/kill.botnet
/m68.botnet
/m68k.botnet
/mips.botnet
/mips64.botnet
/mipsel.botnet
/mpsl.botnet
/pcc.botnet
/powerpc-440fp.botnet
/powerpc.botnet
/powerppc.botnet
/ppc.botnet
/ppc2.botnet
/ppc440.botnet
/ppc440fp.botnet
/root.botnet
/root32.botnet
/sh.botnet
/sh4.botnet
/sparc.botnet
/spc.botnet
/ssh4.botnet
/x32.botnet
/x64.botnet
/x86.botnet
/x86_32.botnet
/x86_64.botnet

# Reference: https://twitter.com/0xrb/status/1242719928848797698

/1vs2dv.arc
/1vs2dv.arm
/1vs2dv.arm4
/1vs2dv.arm4l
/1vs2dv.arm4t
/1vs2dv.arm4tl
/1vs2dv.arm4tll
/1vs2dv.arm5
/1vs2dv.arm5l
/1vs2dv.arm5n
/1vs2dv.arm6
/1vs2dv.arm64
/1vs2dv.arm6l
/1vs2dv.arm7
/1vs2dv.arm7l
/1vs2dv.arm8
/1vs2dv.armv4
/1vs2dv.armv4l
/1vs2dv.armv5l
/1vs2dv.armv6
/1vs2dv.armv61
/1vs2dv.armv6l
/1vs2dv.armv7l
/1vs2dv.dbg
/1vs2dv.exploit
/1vs2dv.i4
/1vs2dv.i486
/1vs2dv.i586
/1vs2dv.i6
/1vs2dv.i686
/1vs2dv.kill
/1vs2dv.m68
/1vs2dv.m68k
/1vs2dv.mips
/1vs2dv.mips64
/1vs2dv.mipsel
/1vs2dv.mpsl
/1vs2dv.pcc
/1vs2dv.powerpc
/1vs2dv.powerpc-440fp
/1vs2dv.powerppc
/1vs2dv.ppc
/1vs2dv.ppc2
/1vs2dv.ppc440
/1vs2dv.ppc440fp
/1vs2dv.root
/1vs2dv.root32
/1vs2dv.sh
/1vs2dv.sh4
/1vs2dv.sparc
/1vs2dv.spc
/1vs2dv.ssh4
/1vs2dv.x32
/1vs2dv.x64
/1vs2dv.x86
/1vs2dv.x86_32
/1vs2dv.x86_64
/bomba.arc
/bomba.arm
/bomba.arm4
/bomba.arm4l
/bomba.arm4t
/bomba.arm4tl
/bomba.arm4tll
/bomba.arm5
/bomba.arm5l
/bomba.arm5n
/bomba.arm6
/bomba.arm64
/bomba.arm6l
/bomba.arm7
/bomba.arm7l
/bomba.arm8
/bomba.armv4
/bomba.armv4l
/bomba.armv5l
/bomba.armv6
/bomba.armv61
/bomba.armv6l
/bomba.armv7l
/bomba.dbg
/bomba.exploit
/bomba.i4
/bomba.i486
/bomba.i586
/bomba.i6
/bomba.i686
/bomba.kill
/bomba.m68
/bomba.m68k
/bomba.mips
/bomba.mips64
/bomba.mipsel
/bomba.mpsl
/bomba.pcc
/bomba.powerpc
/bomba.powerpc-440fp
/bomba.powerppc
/bomba.ppc
/bomba.ppc2
/bomba.ppc440
/bomba.ppc440fp
/bomba.root
/bomba.root32
/bomba.sh
/bomba.sh4
/bomba.sparc
/bomba.spc
/bomba.ssh4
/bomba.x32
/bomba.x64
/bomba.x86
/bomba.x86_32
/bomba.x86_64
/covid.arc
/covid.arm
/covid.arm4
/covid.arm4l
/covid.arm4t
/covid.arm4tl
/covid.arm4tll
/covid.arm5
/covid.arm5l
/covid.arm5n
/covid.arm6
/covid.arm64
/covid.arm6l
/covid.arm7
/covid.arm7l
/covid.arm8
/covid.armv4
/covid.armv4l
/covid.armv5l
/covid.armv6
/covid.armv61
/covid.armv6l
/covid.armv7l
/covid.dbg
/covid.exploit
/covid.i4
/covid.i486
/covid.i586
/covid.i6
/covid.i686
/covid.kill
/covid.m68
/covid.m68k
/covid.mips
/covid.mips64
/covid.mipsel
/covid.mpsl
/covid.pcc
/covid.powerpc
/covid.powerpc-440fp
/covid.powerppc
/covid.ppc
/covid.ppc2
/covid.ppc440
/covid.ppc440fp
/covid.root
/covid.root32
/covid.sh
/covid.sh4
/covid.sparc
/covid.spc
/covid.ssh4
/covid.x32
/covid.x64
/covid.x86
/covid.x86_32
/covid.x86_64
/jKira.arc
/jKira.arm
/jKira.arm4
/jKira.arm4l
/jKira.arm4t
/jKira.arm4tl
/jKira.arm4tll
/jKira.arm5
/jKira.arm5l
/jKira.arm5n
/jKira.arm6
/jKira.arm64
/jKira.arm6l
/jKira.arm7
/jKira.arm7l
/jKira.arm8
/jKira.armv4
/jKira.armv4l
/jKira.armv5l
/jKira.armv6
/jKira.armv61
/jKira.armv6l
/jKira.armv7l
/jKira.dbg
/jKira.exploit
/jKira.i4
/jKira.i486
/jKira.i586
/jKira.i6
/jKira.i686
/jKira.kill
/jKira.m68
/jKira.m68k
/jKira.mips
/jKira.mips64
/jKira.mipsel
/jKira.mpsl
/jKira.pcc
/jKira.powerpc
/jKira.powerpc-440fp
/jKira.powerppc
/jKira.ppc
/jKira.ppc2
/jKira.ppc440
/jKira.ppc440fp
/jKira.root
/jKira.root32
/jKira.sh
/jKira.sh4
/jKira.sparc
/jKira.spc
/jKira.ssh4
/jKira.x32
/jKira.x64
/jKira.x86
/jKira.x86_32
/jKira.x86_64
/suckukinjereeeettttttt.arc
/suckukinjereeeettttttt.arm
/suckukinjereeeettttttt.arm4
/suckukinjereeeettttttt.arm4l
/suckukinjereeeettttttt.arm4t
/suckukinjereeeettttttt.arm4tl
/suckukinjereeeettttttt.arm4tll
/suckukinjereeeettttttt.arm5
/suckukinjereeeettttttt.arm5l
/suckukinjereeeettttttt.arm5n
/suckukinjereeeettttttt.arm6
/suckukinjereeeettttttt.arm64
/suckukinjereeeettttttt.arm6l
/suckukinjereeeettttttt.arm7
/suckukinjereeeettttttt.arm7l
/suckukinjereeeettttttt.arm8
/suckukinjereeeettttttt.armv4
/suckukinjereeeettttttt.armv4l
/suckukinjereeeettttttt.armv5l
/suckukinjereeeettttttt.armv6
/suckukinjereeeettttttt.armv61
/suckukinjereeeettttttt.armv6l
/suckukinjereeeettttttt.armv7l
/suckukinjereeeettttttt.dbg
/suckukinjereeeettttttt.exploit
/suckukinjereeeettttttt.i4
/suckukinjereeeettttttt.i486
/suckukinjereeeettttttt.i586
/suckukinjereeeettttttt.i6
/suckukinjereeeettttttt.i686
/suckukinjereeeettttttt.kill
/suckukinjereeeettttttt.m68
/suckukinjereeeettttttt.m68k
/suckukinjereeeettttttt.mips
/suckukinjereeeettttttt.mips64
/suckukinjereeeettttttt.mipsel
/suckukinjereeeettttttt.mpsl
/suckukinjereeeettttttt.pcc
/suckukinjereeeettttttt.powerpc
/suckukinjereeeettttttt.powerpc-440fp
/suckukinjereeeettttttt.powerppc
/suckukinjereeeettttttt.ppc
/suckukinjereeeettttttt.ppc2
/suckukinjereeeettttttt.ppc440
/suckukinjereeeettttttt.ppc440fp
/suckukinjereeeettttttt.root
/suckukinjereeeettttttt.root32
/suckukinjereeeettttttt.sh
/suckukinjereeeettttttt.sh4
/suckukinjereeeettttttt.sparc
/suckukinjereeeettttttt.spc
/suckukinjereeeettttttt.ssh4
/suckukinjereeeettttttt.x32
/suckukinjereeeettttttt.x64
/suckukinjereeeettttttt.x86
/suckukinjereeeettttttt.x86_32
/suckukinjereeeettttttt.x86_64
/tbox.arc
/tbox.arm
/tbox.arm4
/tbox.arm4l
/tbox.arm4t
/tbox.arm4tl
/tbox.arm4tll
/tbox.arm5
/tbox.arm5l
/tbox.arm5n
/tbox.arm6
/tbox.arm64
/tbox.arm6l
/tbox.arm7
/tbox.arm7l
/tbox.arm8
/tbox.armv4
/tbox.armv4l
/tbox.armv5l
/tbox.armv6
/tbox.armv61
/tbox.armv6l
/tbox.armv7l
/tbox.dbg
/tbox.exploit
/tbox.i4
/tbox.i486
/tbox.i586
/tbox.i6
/tbox.i686
/tbox.kill
/tbox.m68
/tbox.m68k
/tbox.mips
/tbox.mips64
/tbox.mipsel
/tbox.mpsl
/tbox.pcc
/tbox.powerpc
/tbox.powerpc-440fp
/tbox.powerppc
/tbox.ppc
/tbox.ppc2
/tbox.ppc440
/tbox.ppc440fp
/tbox.root
/tbox.root32
/tbox.sh
/tbox.sh4
/tbox.sparc
/tbox.spc
/tbox.ssh4
/tbox.x32
/tbox.x64
/tbox.x86
/tbox.x86_32
/tbox.x86_64

# Reference: https://twitter.com/JayTHL/status/1242890029564858375

/nemesis.arc
/nemesis.arm
/nemesis.arm4
/nemesis.arm4l
/nemesis.arm4t
/nemesis.arm4tl
/nemesis.arm4tll
/nemesis.arm5
/nemesis.arm5l
/nemesis.arm5n
/nemesis.arm6
/nemesis.arm64
/nemesis.arm6l
/nemesis.arm7
/nemesis.arm7l
/nemesis.arm8
/nemesis.armv4
/nemesis.armv4l
/nemesis.armv5l
/nemesis.armv6
/nemesis.armv61
/nemesis.armv6l
/nemesis.armv7l
/nemesis.dbg
/nemesis.exploit
/nemesis.i4
/nemesis.i486
/nemesis.i586
/nemesis.i6
/nemesis.i686
/nemesis.kill
/nemesis.m68
/nemesis.m68k
/nemesis.mips
/nemesis.mips64
/nemesis.mipsel
/nemesis.mpsl
/nemesis.pcc
/nemesis.powerpc
/nemesis.powerpc-440fp
/nemesis.powerppc
/nemesis.ppc
/nemesis.ppc2
/nemesis.ppc440
/nemesis.ppc440fp
/nemesis.root
/nemesis.root32
/nemesis.sh
/nemesis.sh4
/nemesis.sparc
/nemesis.spc
/nemesis.ssh4
/nemesis.x32
/nemesis.x64
/nemesis.x86
/nemesis.x86_32
/nemesis.x86_64

# Reference: https://twitter.com/JayTHL/status/1243295553359884288

/a-r.m-4.GOOGLE
/a-r.m-5.GOOGLE
/a-r.m-6.GOOGLE
/a-r.m-7.GOOGLE
/i-4.8-6.GOOGLE
/i-5.8-6.GOOGLE
/i-6.8-6.GOOGLE
/m-6.8-k.GOOGLE
/m-i.p-s.GOOGLE
/m-p.s-l.GOOGLE
/p-p.c-.GOOGLE
/s-h.4-.GOOGLE
/x-3.2-.GOOGLE
/x-6.4-.GOOGLE
/x-8.6-.GOOGLE

# Reference: https://twitter.com/JayTHL/status/1243187653878657024
# Reference: https://pastebin.com/raw/jstA73mH

/SBIDIOT/
/EkSgbins.sh

# Reference: https://twitter.com/0xrb/status/1243439096086663168

cnc.uzavs.online
/arc.AthenaM
/arm.AthenaM
/arm4.AthenaM
/arm4l.AthenaM
/arm4t.AthenaM
/arm4tl.AthenaM
/arm4tll.AthenaM
/arm5.AthenaM
/arm5l.AthenaM
/arm5n.AthenaM
/arm6.AthenaM
/arm64.AthenaM
/arm6l.AthenaM
/arm7.AthenaM
/arm7l.AthenaM
/arm8.AthenaM
/armv4.AthenaM
/armv4l.AthenaM
/armv5l.AthenaM
/armv6.AthenaM
/armv61.AthenaM
/armv6l.AthenaM
/armv7l.AthenaM
/dbg.AthenaM
/exploit.AthenaM
/i4.AthenaM
/i486.AthenaM
/i586.AthenaM
/i6.AthenaM
/i686.AthenaM
/kill.AthenaM
/m68.AthenaM
/m68k.AthenaM
/mips.AthenaM
/mips64.AthenaM
/mipsel.AthenaM
/mpsl.AthenaM
/pcc.AthenaM
/powerpc-440fp.AthenaM
/powerpc.AthenaM
/powerppc.AthenaM
/ppc.AthenaM
/ppc2.AthenaM
/ppc440.AthenaM
/ppc440fp.AthenaM
/root.AthenaM
/root32.AthenaM
/sh.AthenaM
/sh4.AthenaM
/sparc.AthenaM
/spc.AthenaM
/ssh4.AthenaM
/x32.AthenaM
/x64.AthenaM
/x86.AthenaM
/x86_32.AthenaM
/x86_64.AthenaM
/AthenaM.arc
/AthenaM.arm
/AthenaM.arm4
/AthenaM.arm4l
/AthenaM.arm4t
/AthenaM.arm4tl
/AthenaM.arm4tll
/AthenaM.arm5
/AthenaM.arm5l
/AthenaM.arm5n
/AthenaM.arm6
/AthenaM.arm64
/AthenaM.arm6l
/AthenaM.arm7
/AthenaM.arm7l
/AthenaM.arm8
/AthenaM.armv4
/AthenaM.armv4l
/AthenaM.armv5l
/AthenaM.armv6
/AthenaM.armv61
/AthenaM.armv6l
/AthenaM.armv7l
/AthenaM.dbg
/AthenaM.exploit
/AthenaM.i4
/AthenaM.i486
/AthenaM.i586
/AthenaM.i6
/AthenaM.i686
/AthenaM.kill
/AthenaM.m68
/AthenaM.m68k
/AthenaM.mips
/AthenaM.mips64
/AthenaM.mipsel
/AthenaM.mpsl
/AthenaM.pcc
/AthenaM.powerpc
/AthenaM.powerpc-440fp
/AthenaM.powerppc
/AthenaM.ppc
/AthenaM.ppc2
/AthenaM.ppc440
/AthenaM.ppc440fp
/AthenaM.root
/AthenaM.root32
/AthenaM.sh
/AthenaM.sh4
/AthenaM.sparc
/AthenaM.spc
/AthenaM.ssh4
/AthenaM.x32
/AthenaM.x64
/AthenaM.x86
/AthenaM.x86_32
/AthenaM.x86_64
/arc.BackTrack
/arm.BackTrack
/arm4.BackTrack
/arm4l.BackTrack
/arm4t.BackTrack
/arm4tl.BackTrack
/arm4tll.BackTrack
/arm5.BackTrack
/arm5l.BackTrack
/arm5n.BackTrack
/arm6.BackTrack
/arm64.BackTrack
/arm6l.BackTrack
/arm7.BackTrack
/arm7l.BackTrack
/arm8.BackTrack
/armv4.BackTrack
/armv4l.BackTrack
/armv5l.BackTrack
/armv6.BackTrack
/armv61.BackTrack
/armv6l.BackTrack
/armv7l.BackTrack
/dbg.BackTrack
/exploit.BackTrack
/i4.BackTrack
/i486.BackTrack
/i586.BackTrack
/i6.BackTrack
/i686.BackTrack
/kill.BackTrack
/m68.BackTrack
/m68k.BackTrack
/mips.BackTrack
/mips64.BackTrack
/mipsel.BackTrack
/mpsl.BackTrack
/pcc.BackTrack
/powerpc-440fp.BackTrack
/powerpc.BackTrack
/powerppc.BackTrack
/ppc.BackTrack
/ppc2.BackTrack
/ppc440.BackTrack
/ppc440fp.BackTrack
/root.BackTrack
/root32.BackTrack
/sh.BackTrack
/sh4.BackTrack
/sparc.BackTrack
/spc.BackTrack
/ssh4.BackTrack
/x32.BackTrack
/x64.BackTrack
/x86.BackTrack
/x86_32.BackTrack
/x86_64.BackTrack
/BackTrack.arc
/BackTrack.arm
/BackTrack.arm4
/BackTrack.arm4l
/BackTrack.arm4t
/BackTrack.arm4tl
/BackTrack.arm4tll
/BackTrack.arm5
/BackTrack.arm5l
/BackTrack.arm5n
/BackTrack.arm6
/BackTrack.arm64
/BackTrack.arm6l
/BackTrack.arm7
/BackTrack.arm7l
/BackTrack.arm8
/BackTrack.armv4
/BackTrack.armv4l
/BackTrack.armv5l
/BackTrack.armv6
/BackTrack.armv61
/BackTrack.armv6l
/BackTrack.armv7l
/BackTrack.dbg
/BackTrack.exploit
/BackTrack.i4
/BackTrack.i486
/BackTrack.i586
/BackTrack.i6
/BackTrack.i686
/BackTrack.kill
/BackTrack.m68
/BackTrack.m68k
/BackTrack.mips
/BackTrack.mips64
/BackTrack.mipsel
/BackTrack.mpsl
/BackTrack.pcc
/BackTrack.powerpc
/BackTrack.powerpc-440fp
/BackTrack.powerppc
/BackTrack.ppc
/BackTrack.ppc2
/BackTrack.ppc440
/BackTrack.ppc440fp
/BackTrack.root
/BackTrack.root32
/BackTrack.sh
/BackTrack.sh4
/BackTrack.sparc
/BackTrack.spc
/BackTrack.ssh4
/BackTrack.x32
/BackTrack.x64
/BackTrack.x86
/BackTrack.x86_32
/BackTrack.x86_64
/arc.kbot
/arm.kbot
/arm4.kbot
/arm4l.kbot
/arm4t.kbot
/arm4tl.kbot
/arm4tll.kbot
/arm5.kbot
/arm5l.kbot
/arm5n.kbot
/arm6.kbot
/arm64.kbot
/arm6l.kbot
/arm7.kbot
/arm7l.kbot
/arm8.kbot
/armv4.kbot
/armv4l.kbot
/armv5l.kbot
/armv6.kbot
/armv61.kbot
/armv6l.kbot
/armv7l.kbot
/dbg.kbot
/exploit.kbot
/i4.kbot
/i486.kbot
/i586.kbot
/i6.kbot
/i686.kbot
/kill.kbot
/m68.kbot
/m68k.kbot
/mips.kbot
/mips64.kbot
/mipsel.kbot
/mpsl.kbot
/pcc.kbot
/powerpc-440fp.kbot
/powerpc.kbot
/powerppc.kbot
/ppc.kbot
/ppc2.kbot
/ppc440.kbot
/ppc440fp.kbot
/root.kbot
/root32.kbot
/sh.kbot
/sh4.kbot
/sparc.kbot
/spc.kbot
/ssh4.kbot
/x32.kbot
/x64.kbot
/x86.kbot
/x86_32.kbot
/x86_64.kbot
/kbot.arc
/kbot.arm
/kbot.arm4
/kbot.arm4l
/kbot.arm4t
/kbot.arm4tl
/kbot.arm4tll
/kbot.arm5
/kbot.arm5l
/kbot.arm5n
/kbot.arm6
/kbot.arm64
/kbot.arm6l
/kbot.arm7
/kbot.arm7l
/kbot.arm8
/kbot.armv4
/kbot.armv4l
/kbot.armv5l
/kbot.armv6
/kbot.armv61
/kbot.armv6l
/kbot.armv7l
/kbot.dbg
/kbot.exploit
/kbot.i4
/kbot.i486
/kbot.i586
/kbot.i6
/kbot.i686
/kbot.kill
/kbot.m68
/kbot.m68k
/kbot.mips
/kbot.mips64
/kbot.mipsel
/kbot.mpsl
/kbot.pcc
/kbot.powerpc
/kbot.powerpc-440fp
/kbot.powerppc
/kbot.ppc
/kbot.ppc2
/kbot.ppc440
/kbot.ppc440fp
/kbot.root
/kbot.root32
/kbot.sh
/kbot.sh4
/kbot.sparc
/kbot.spc
/kbot.ssh4
/kbot.x32
/kbot.x64
/kbot.x86
/kbot.x86_32
/kbot.x86_64
/arc.MiraiVariant
/arm.MiraiVariant
/arm4.MiraiVariant
/arm4l.MiraiVariant
/arm4t.MiraiVariant
/arm4tl.MiraiVariant
/arm4tll.MiraiVariant
/arm5.MiraiVariant
/arm5l.MiraiVariant
/arm5n.MiraiVariant
/arm6.MiraiVariant
/arm64.MiraiVariant
/arm6l.MiraiVariant
/arm7.MiraiVariant
/arm7l.MiraiVariant
/arm8.MiraiVariant
/armv4.MiraiVariant
/armv4l.MiraiVariant
/armv5l.MiraiVariant
/armv6.MiraiVariant
/armv61.MiraiVariant
/armv6l.MiraiVariant
/armv7l.MiraiVariant
/dbg.MiraiVariant
/exploit.MiraiVariant
/i4.MiraiVariant
/i486.MiraiVariant
/i586.MiraiVariant
/i6.MiraiVariant
/i686.MiraiVariant
/kill.MiraiVariant
/m68.MiraiVariant
/m68k.MiraiVariant
/mips.MiraiVariant
/mips64.MiraiVariant
/mipsel.MiraiVariant
/mpsl.MiraiVariant
/pcc.MiraiVariant
/powerpc-440fp.MiraiVariant
/powerpc.MiraiVariant
/powerppc.MiraiVariant
/ppc.MiraiVariant
/ppc2.MiraiVariant
/ppc440.MiraiVariant
/ppc440fp.MiraiVariant
/root.MiraiVariant
/root32.MiraiVariant
/sh.MiraiVariant
/sh4.MiraiVariant
/sparc.MiraiVariant
/spc.MiraiVariant
/ssh4.MiraiVariant
/x32.MiraiVariant
/x64.MiraiVariant
/x86.MiraiVariant
/x86_32.MiraiVariant
/x86_64.MiraiVariant
/MiraiVariant.arc
/MiraiVariant.arm
/MiraiVariant.arm4
/MiraiVariant.arm4l
/MiraiVariant.arm4t
/MiraiVariant.arm4tl
/MiraiVariant.arm4tll
/MiraiVariant.arm5
/MiraiVariant.arm5l
/MiraiVariant.arm5n
/MiraiVariant.arm6
/MiraiVariant.arm64
/MiraiVariant.arm6l
/MiraiVariant.arm7
/MiraiVariant.arm7l
/MiraiVariant.arm8
/MiraiVariant.armv4
/MiraiVariant.armv4l
/MiraiVariant.armv5l
/MiraiVariant.armv6
/MiraiVariant.armv61
/MiraiVariant.armv6l
/MiraiVariant.armv7l
/MiraiVariant.dbg
/MiraiVariant.exploit
/MiraiVariant.i4
/MiraiVariant.i486
/MiraiVariant.i586
/MiraiVariant.i6
/MiraiVariant.i686
/MiraiVariant.kill
/MiraiVariant.m68
/MiraiVariant.m68k
/MiraiVariant.mips
/MiraiVariant.mips64
/MiraiVariant.mipsel
/MiraiVariant.mpsl
/MiraiVariant.pcc
/MiraiVariant.powerpc
/MiraiVariant.powerpc-440fp
/MiraiVariant.powerppc
/MiraiVariant.ppc
/MiraiVariant.ppc2
/MiraiVariant.ppc440
/MiraiVariant.ppc440fp
/MiraiVariant.root
/MiraiVariant.root32
/MiraiVariant.sh
/MiraiVariant.sh4
/MiraiVariant.sparc
/MiraiVariant.spc
/MiraiVariant.ssh4
/MiraiVariant.x32
/MiraiVariant.x64
/MiraiVariant.x86
/MiraiVariant.x86_32
/MiraiVariant.x86_64
/arc.rapethemipcams
/arm.rapethemipcams
/arm4.rapethemipcams
/arm4l.rapethemipcams
/arm4t.rapethemipcams
/arm4tl.rapethemipcams
/arm4tll.rapethemipcams
/arm5.rapethemipcams
/arm5l.rapethemipcams
/arm5n.rapethemipcams
/arm6.rapethemipcams
/arm64.rapethemipcams
/arm6l.rapethemipcams
/arm7.rapethemipcams
/arm7l.rapethemipcams
/arm8.rapethemipcams
/armv4.rapethemipcams
/armv4l.rapethemipcams
/armv5l.rapethemipcams
/armv6.rapethemipcams
/armv61.rapethemipcams
/armv6l.rapethemipcams
/armv7l.rapethemipcams
/dbg.rapethemipcams
/exploit.rapethemipcams
/i4.rapethemipcams
/i486.rapethemipcams
/i586.rapethemipcams
/i6.rapethemipcams
/i686.rapethemipcams
/kill.rapethemipcams
/m68.rapethemipcams
/m68k.rapethemipcams
/mips.rapethemipcams
/mips64.rapethemipcams
/mipsel.rapethemipcams
/mpsl.rapethemipcams
/pcc.rapethemipcams
/powerpc-440fp.rapethemipcams
/powerpc.rapethemipcams
/powerppc.rapethemipcams
/ppc.rapethemipcams
/ppc2.rapethemipcams
/ppc440.rapethemipcams
/ppc440fp.rapethemipcams
/root.rapethemipcams
/root32.rapethemipcams
/sh.rapethemipcams
/sh4.rapethemipcams
/sparc.rapethemipcams
/spc.rapethemipcams
/ssh4.rapethemipcams
/x32.rapethemipcams
/x64.rapethemipcams
/x86.rapethemipcams
/x86_32.rapethemipcams
/x86_64.rapethemipcams
/rapethemipcams.arc
/rapethemipcams.arm
/rapethemipcams.arm4
/rapethemipcams.arm4l
/rapethemipcams.arm4t
/rapethemipcams.arm4tl
/rapethemipcams.arm4tll
/rapethemipcams.arm5
/rapethemipcams.arm5l
/rapethemipcams.arm5n
/rapethemipcams.arm6
/rapethemipcams.arm64
/rapethemipcams.arm6l
/rapethemipcams.arm7
/rapethemipcams.arm7l
/rapethemipcams.arm8
/rapethemipcams.armv4
/rapethemipcams.armv4l
/rapethemipcams.armv5l
/rapethemipcams.armv6
/rapethemipcams.armv61
/rapethemipcams.armv6l
/rapethemipcams.armv7l
/rapethemipcams.dbg
/rapethemipcams.exploit
/rapethemipcams.i4
/rapethemipcams.i486
/rapethemipcams.i586
/rapethemipcams.i6
/rapethemipcams.i686
/rapethemipcams.kill
/rapethemipcams.m68
/rapethemipcams.m68k
/rapethemipcams.mips
/rapethemipcams.mips64
/rapethemipcams.mipsel
/rapethemipcams.mpsl
/rapethemipcams.pcc
/rapethemipcams.powerpc
/rapethemipcams.powerpc-440fp
/rapethemipcams.powerppc
/rapethemipcams.ppc
/rapethemipcams.ppc2
/rapethemipcams.ppc440
/rapethemipcams.ppc440fp
/rapethemipcams.root
/rapethemipcams.root32
/rapethemipcams.sh
/rapethemipcams.sh4
/rapethemipcams.sparc
/rapethemipcams.spc
/rapethemipcams.ssh4
/rapethemipcams.x32
/rapethemipcams.x64
/rapethemipcams.x86
/rapethemipcams.x86_32
/rapethemipcams.x86_64
/arc.typpaostur
/arm.typpaostur
/arm4.typpaostur
/arm4l.typpaostur
/arm4t.typpaostur
/arm4tl.typpaostur
/arm4tll.typpaostur
/arm5.typpaostur
/arm5l.typpaostur
/arm5n.typpaostur
/arm6.typpaostur
/arm64.typpaostur
/arm6l.typpaostur
/arm7.typpaostur
/arm7l.typpaostur
/arm8.typpaostur
/armv4.typpaostur
/armv4l.typpaostur
/armv5l.typpaostur
/armv6.typpaostur
/armv61.typpaostur
/armv6l.typpaostur
/armv7l.typpaostur
/dbg.typpaostur
/exploit.typpaostur
/i4.typpaostur
/i486.typpaostur
/i586.typpaostur
/i6.typpaostur
/i686.typpaostur
/kill.typpaostur
/m68.typpaostur
/m68k.typpaostur
/mips.typpaostur
/mips64.typpaostur
/mipsel.typpaostur
/mpsl.typpaostur
/pcc.typpaostur
/powerpc-440fp.typpaostur
/powerpc.typpaostur
/powerppc.typpaostur
/ppc.typpaostur
/ppc2.typpaostur
/ppc440.typpaostur
/ppc440fp.typpaostur
/root.typpaostur
/root32.typpaostur
/sh.typpaostur
/sh4.typpaostur
/sparc.typpaostur
/spc.typpaostur
/ssh4.typpaostur
/x32.typpaostur
/x64.typpaostur
/x86.typpaostur
/x86_32.typpaostur
/x86_64.typpaostur
/typpaostur.arc
/typpaostur.arm
/typpaostur.arm4
/typpaostur.arm4l
/typpaostur.arm4t
/typpaostur.arm4tl
/typpaostur.arm4tll
/typpaostur.arm5
/typpaostur.arm5l
/typpaostur.arm5n
/typpaostur.arm6
/typpaostur.arm64
/typpaostur.arm6l
/typpaostur.arm7
/typpaostur.arm7l
/typpaostur.arm8
/typpaostur.armv4
/typpaostur.armv4l
/typpaostur.armv5l
/typpaostur.armv6
/typpaostur.armv61
/typpaostur.armv6l
/typpaostur.armv7l
/typpaostur.dbg
/typpaostur.exploit
/typpaostur.i4
/typpaostur.i486
/typpaostur.i586
/typpaostur.i6
/typpaostur.i686
/typpaostur.kill
/typpaostur.m68
/typpaostur.m68k
/typpaostur.mips
/typpaostur.mips64
/typpaostur.mipsel
/typpaostur.mpsl
/typpaostur.pcc
/typpaostur.powerpc
/typpaostur.powerpc-440fp
/typpaostur.powerppc
/typpaostur.ppc
/typpaostur.ppc2
/typpaostur.ppc440
/typpaostur.ppc440fp
/typpaostur.root
/typpaostur.root32
/typpaostur.sh
/typpaostur.sh4
/typpaostur.sparc
/typpaostur.spc
/typpaostur.ssh4
/typpaostur.x32
/typpaostur.x64
/typpaostur.x86
/typpaostur.x86_32
/typpaostur.x86_64

# Reference: https://www.virustotal.com/gui/ip-address/216.198.66.107/relations

216.198.66.107:2213
/arc.switchbladesq
/arm.switchbladesq
/arm4.switchbladesq
/arm4l.switchbladesq
/arm4t.switchbladesq
/arm4tl.switchbladesq
/arm4tll.switchbladesq
/arm5.switchbladesq
/arm5l.switchbladesq
/arm5n.switchbladesq
/arm6.switchbladesq
/arm64.switchbladesq
/arm6l.switchbladesq
/arm7.switchbladesq
/arm7l.switchbladesq
/arm8.switchbladesq
/armv4.switchbladesq
/armv4l.switchbladesq
/armv5l.switchbladesq
/armv6.switchbladesq
/armv61.switchbladesq
/armv6l.switchbladesq
/armv7l.switchbladesq
/dbg.switchbladesq
/exploit.switchbladesq
/i4.switchbladesq
/i486.switchbladesq
/i586.switchbladesq
/i6.switchbladesq
/i686.switchbladesq
/kill.switchbladesq
/m68.switchbladesq
/m68k.switchbladesq
/mips.switchbladesq
/mips64.switchbladesq
/mipsel.switchbladesq
/mpsl.switchbladesq
/pcc.switchbladesq
/powerpc-440fp.switchbladesq
/powerpc.switchbladesq
/powerppc.switchbladesq
/ppc.switchbladesq
/ppc2.switchbladesq
/ppc440.switchbladesq
/ppc440fp.switchbladesq
/root.switchbladesq
/root32.switchbladesq
/sh.switchbladesq
/sh4.switchbladesq
/sparc.switchbladesq
/spc.switchbladesq
/ssh4.switchbladesq
/x32.switchbladesq
/x64.switchbladesq
/x86.switchbladesq
/x86_32.switchbladesq
/x86_64.switchbladesq
/switchbladesq.arc
/switchbladesq.arm
/switchbladesq.arm4
/switchbladesq.arm4l
/switchbladesq.arm4t
/switchbladesq.arm4tl
/switchbladesq.arm4tll
/switchbladesq.arm5
/switchbladesq.arm5l
/switchbladesq.arm5n
/switchbladesq.arm6
/switchbladesq.arm64
/switchbladesq.arm6l
/switchbladesq.arm7
/switchbladesq.arm7l
/switchbladesq.arm8
/switchbladesq.armv4
/switchbladesq.armv4l
/switchbladesq.armv5l
/switchbladesq.armv6
/switchbladesq.armv61
/switchbladesq.armv6l
/switchbladesq.armv7l
/switchbladesq.dbg
/switchbladesq.exploit
/switchbladesq.i4
/switchbladesq.i486
/switchbladesq.i586
/switchbladesq.i6
/switchbladesq.i686
/switchbladesq.kill
/switchbladesq.m68
/switchbladesq.m68k
/switchbladesq.mips
/switchbladesq.mips64
/switchbladesq.mipsel
/switchbladesq.mpsl
/switchbladesq.pcc
/switchbladesq.powerpc
/switchbladesq.powerpc-440fp
/switchbladesq.powerppc
/switchbladesq.ppc
/switchbladesq.ppc2
/switchbladesq.ppc440
/switchbladesq.ppc440fp
/switchbladesq.root
/switchbladesq.root32
/switchbladesq.sh
/switchbladesq.sh4
/switchbladesq.sparc
/switchbladesq.spc
/switchbladesq.ssh4
/switchbladesq.x32
/switchbladesq.x64
/switchbladesq.x86
/switchbladesq.x86_32
/switchbladesq.x86_64

# Reference: https://www.virustotal.com/gui/domain/a.deadnig.ga/relations

a.deadnig.ga
/arc.booty
/arm.booty
/arm4.booty
/arm4l.booty
/arm4t.booty
/arm4tl.booty
/arm4tll.booty
/arm5.booty
/arm5l.booty
/arm5n.booty
/arm6.booty
/arm64.booty
/arm6l.booty
/arm7.booty
/arm7l.booty
/arm8.booty
/armv4.booty
/armv4l.booty
/armv5l.booty
/armv6.booty
/armv61.booty
/armv6l.booty
/armv7l.booty
/dbg.booty
/exploit.booty
/i4.booty
/i486.booty
/i586.booty
/i6.booty
/i686.booty
/kill.booty
/m68.booty
/m68k.booty
/mips.booty
/mips64.booty
/mipsel.booty
/mpsl.booty
/pcc.booty
/powerpc-440fp.booty
/powerpc.booty
/powerppc.booty
/ppc.booty
/ppc2.booty
/ppc440.booty
/ppc440fp.booty
/root.booty
/root32.booty
/sh.booty
/sh4.booty
/sparc.booty
/spc.booty
/ssh4.booty
/x32.booty
/x64.booty
/x86.booty
/x86_32.booty
/x86_64.booty
/booty.arc
/booty.arm
/booty.arm4
/booty.arm4l
/booty.arm4t
/booty.arm4tl
/booty.arm4tll
/booty.arm5
/booty.arm5l
/booty.arm5n
/booty.arm6
/booty.arm64
/booty.arm6l
/booty.arm7
/booty.arm7l
/booty.arm8
/booty.armv4
/booty.armv4l
/booty.armv5l
/booty.armv6
/booty.armv61
/booty.armv6l
/booty.armv7l
/booty.dbg
/booty.exploit
/booty.i4
/booty.i486
/booty.i586
/booty.i6
/booty.i686
/booty.kill
/booty.m68
/booty.m68k
/booty.mips
/booty.mips64
/booty.mipsel
/booty.mpsl
/booty.pcc
/booty.powerpc
/booty.powerpc-440fp
/booty.powerppc
/booty.ppc
/booty.ppc2
/booty.ppc440
/booty.ppc440fp
/booty.root
/booty.root32
/booty.sh
/booty.sh4
/booty.sparc
/booty.spc
/booty.ssh4
/booty.x32
/booty.x64
/booty.x86
/booty.x86_32
/booty.x86_64
/arc.rispek
/arm.rispek
/arm4.rispek
/arm4l.rispek
/arm4t.rispek
/arm4tl.rispek
/arm4tll.rispek
/arm5.rispek
/arm5l.rispek
/arm5n.rispek
/arm6.rispek
/arm64.rispek
/arm6l.rispek
/arm7.rispek
/arm7l.rispek
/arm8.rispek
/armv4.rispek
/armv4l.rispek
/armv5l.rispek
/armv6.rispek
/armv61.rispek
/armv6l.rispek
/armv7l.rispek
/dbg.rispek
/exploit.rispek
/i4.rispek
/i486.rispek
/i586.rispek
/i6.rispek
/i686.rispek
/kill.rispek
/m68.rispek
/m68k.rispek
/mips.rispek
/mips64.rispek
/mipsel.rispek
/mpsl.rispek
/pcc.rispek
/powerpc-440fp.rispek
/powerpc.rispek
/powerppc.rispek
/ppc.rispek
/ppc2.rispek
/ppc440.rispek
/ppc440fp.rispek
/root.rispek
/root32.rispek
/sh.rispek
/sh4.rispek
/sparc.rispek
/spc.rispek
/ssh4.rispek
/x32.rispek
/x64.rispek
/x86.rispek
/x86_32.rispek
/x86_64.rispek
/rispek.arc
/rispek.arm
/rispek.arm4
/rispek.arm4l
/rispek.arm4t
/rispek.arm4tl
/rispek.arm4tll
/rispek.arm5
/rispek.arm5l
/rispek.arm5n
/rispek.arm6
/rispek.arm64
/rispek.arm6l
/rispek.arm7
/rispek.arm7l
/rispek.arm8
/rispek.armv4
/rispek.armv4l
/rispek.armv5l
/rispek.armv6
/rispek.armv61
/rispek.armv6l
/rispek.armv7l
/rispek.dbg
/rispek.exploit
/rispek.i4
/rispek.i486
/rispek.i586
/rispek.i6
/rispek.i686
/rispek.kill
/rispek.m68
/rispek.m68k
/rispek.mips
/rispek.mips64
/rispek.mipsel
/rispek.mpsl
/rispek.pcc
/rispek.powerpc
/rispek.powerpc-440fp
/rispek.powerppc
/rispek.ppc
/rispek.ppc2
/rispek.ppc440
/rispek.ppc440fp
/rispek.root
/rispek.root32
/rispek.sh
/rispek.sh4
/rispek.sparc
/rispek.spc
/rispek.ssh4
/rispek.x32
/rispek.x64
/rispek.x86
/rispek.x86_32
/rispek.x86_64
/muck.sh

# Reference: https://twitter.com/bad_packets/status/1245063093463347200
# Reference: https://www.virustotal.com/gui/domain/hoaxcalls.pw/relations
# Reference: https://www.virustotal.com/gui/ip-address/178.32.148.5/relations
# Reference: https://unit42.paloaltonetworks.com/new-hoaxcalls-ddos-botnet/

178.32.148.5:1337
18.185.109.135:1337
hoaxcalls.pw
/arc.polaris
/arm.polaris
/arm4.polaris
/arm4l.polaris
/arm4t.polaris
/arm4tl.polaris
/arm4tll.polaris
/arm5.polaris
/arm5l.polaris
/arm5n.polaris
/arm6.polaris
/arm64.polaris
/arm6l.polaris
/arm7.polaris
/arm7l.polaris
/arm8.polaris
/armv4.polaris
/armv4l.polaris
/armv5l.polaris
/armv6.polaris
/armv61.polaris
/armv6l.polaris
/armv7l.polaris
/dbg.polaris
/exploit.polaris
/i4.polaris
/i486.polaris
/i586.polaris
/i6.polaris
/i686.polaris
/kill.polaris
/m68.polaris
/m68k.polaris
/mips.polaris
/mips64.polaris
/mipsel.polaris
/mpsl.polaris
/pcc.polaris
/powerpc-440fp.polaris
/powerpc.polaris
/powerppc.polaris
/ppc.polaris
/ppc2.polaris
/ppc440.polaris
/ppc440fp.polaris
/root.polaris
/root32.polaris
/sh.polaris
/sh4.polaris
/sparc.polaris
/spc.polaris
/ssh4.polaris
/x32.polaris
/x64.polaris
/x86.polaris
/x86_32.polaris
/x86_64.polaris
/polaris.arc
/polaris.arm
/polaris.arm4
/polaris.arm4l
/polaris.arm4t
/polaris.arm4tl
/polaris.arm4tll
/polaris.arm5
/polaris.arm5l
/polaris.arm5n
/polaris.arm6
/polaris.arm64
/polaris.arm6l
/polaris.arm7
/polaris.arm7l
/polaris.arm8
/polaris.armv4
/polaris.armv4l
/polaris.armv5l
/polaris.armv6
/polaris.armv61
/polaris.armv6l
/polaris.armv7l
/polaris.dbg
/polaris.exploit
/polaris.i4
/polaris.i486
/polaris.i586
/polaris.i6
/polaris.i686
/polaris.kill
/polaris.m68
/polaris.m68k
/polaris.mips
/polaris.mips64
/polaris.mipsel
/polaris.mpsl
/polaris.pcc
/polaris.powerpc
/polaris.powerpc-440fp
/polaris.powerppc
/polaris.ppc
/polaris.ppc2
/polaris.ppc440
/polaris.ppc440fp
/polaris.root
/polaris.root32
/polaris.sh
/polaris.sh4
/polaris.sparc
/polaris.spc
/polaris.ssh4
/polaris.x32
/polaris.x64
/polaris.x86
/polaris.x86_32
/polaris.x86_64

# Reference: https://www.virustotal.com/gui/ip-address/164.132.92.168/relations

http://164.132.92.168
164.132.92.168:6479
ip168.ip-164-132-92.eu
/arc.viktor
/arm.viktor
/arm4.viktor
/arm4l.viktor
/arm4t.viktor
/arm4tl.viktor
/arm4tll.viktor
/arm5.viktor
/arm5l.viktor
/arm5n.viktor
/arm6.viktor
/arm64.viktor
/arm6l.viktor
/arm7.viktor
/arm7l.viktor
/arm8.viktor
/armv4.viktor
/armv4l.viktor
/armv5l.viktor
/armv6.viktor
/armv61.viktor
/armv6l.viktor
/armv7l.viktor
/dbg.viktor
/exploit.viktor
/i4.viktor
/i486.viktor
/i586.viktor
/i6.viktor
/i686.viktor
/kill.viktor
/m68.viktor
/m68k.viktor
/mips.viktor
/mips64.viktor
/mipsel.viktor
/mpsl.viktor
/pcc.viktor
/powerpc-440fp.viktor
/powerpc.viktor
/powerppc.viktor
/ppc.viktor
/ppc2.viktor
/ppc440.viktor
/ppc440fp.viktor
/root.viktor
/root32.viktor
/sh.viktor
/sh4.viktor
/sparc.viktor
/spc.viktor
/ssh4.viktor
/x32.viktor
/x64.viktor
/x86.viktor
/x86_32.viktor
/x86_64.viktor
/viktor.arc
/viktor.arm
/viktor.arm4
/viktor.arm4l
/viktor.arm4t
/viktor.arm4tl
/viktor.arm4tll
/viktor.arm5
/viktor.arm5l
/viktor.arm5n
/viktor.arm6
/viktor.arm64
/viktor.arm6l
/viktor.arm7
/viktor.arm7l
/viktor.arm8
/viktor.armv4
/viktor.armv4l
/viktor.armv5l
/viktor.armv6
/viktor.armv61
/viktor.armv6l
/viktor.armv7l
/viktor.dbg
/viktor.exploit
/viktor.i4
/viktor.i486
/viktor.i586
/viktor.i6
/viktor.i686
/viktor.kill
/viktor.m68
/viktor.m68k
/viktor.mips
/viktor.mips64
/viktor.mipsel
/viktor.mpsl
/viktor.pcc
/viktor.powerpc
/viktor.powerpc-440fp
/viktor.powerppc
/viktor.ppc
/viktor.ppc2
/viktor.ppc440
/viktor.ppc440fp
/viktor.root
/viktor.root32
/viktor.sh
/viktor.sh4
/viktor.sparc
/viktor.spc
/viktor.ssh4
/viktor.x32
/viktor.x64
/viktor.x86
/viktor.x86_32
/viktor.x86_64

# Reference: https://twitter.com/makflwana/status/1247443970298281986

/botnet.xtensa
/xtensa.botnet

# Referfence: https://www.bitdefender.com/files/News/CaseStudies/study/319/Bitdefender-PR-Whitepaper-DarkNexus-creat4349-en-EN-interactive.pdf
# Reference: https://otx.alienvault.com/pulse/5e8e02757be85bbebeeaf137

190.115.18.144:13000
thiccnigga.me

# Reference: https://twitter.com/0xrb/status/1251500117892329472

/arc.asdfghjkl
/arm.asdfghjkl
/arm4.asdfghjkl
/arm4l.asdfghjkl
/arm4t.asdfghjkl
/arm4tl.asdfghjkl
/arm4tll.asdfghjkl
/arm5.asdfghjkl
/arm5l.asdfghjkl
/arm5n.asdfghjkl
/arm6.asdfghjkl
/arm64.asdfghjkl
/arm6l.asdfghjkl
/arm7.asdfghjkl
/arm7l.asdfghjkl
/arm8.asdfghjkl
/armv4.asdfghjkl
/armv4l.asdfghjkl
/armv5l.asdfghjkl
/armv6.asdfghjkl
/armv61.asdfghjkl
/armv6l.asdfghjkl
/armv7l.asdfghjkl
/dbg.asdfghjkl
/exploit.asdfghjkl
/i4.asdfghjkl
/i486.asdfghjkl
/i586.asdfghjkl
/i6.asdfghjkl
/i686.asdfghjkl
/kill.asdfghjkl
/m68.asdfghjkl
/m68k.asdfghjkl
/mips.asdfghjkl
/mips64.asdfghjkl
/mipsel.asdfghjkl
/mpsl.asdfghjkl
/pcc.asdfghjkl
/powerpc-440fp.asdfghjkl
/powerpc.asdfghjkl
/powerppc.asdfghjkl
/ppc.asdfghjkl
/ppc2.asdfghjkl
/ppc440.asdfghjkl
/ppc440fp.asdfghjkl
/root.asdfghjkl
/root32.asdfghjkl
/sh.asdfghjkl
/sh4.asdfghjkl
/sparc.asdfghjkl
/spc.asdfghjkl
/ssh4.asdfghjkl
/x32.asdfghjkl
/x64.asdfghjkl
/x86.asdfghjkl
/x86_32.asdfghjkl
/x86_64.asdfghjkl
/asdfghjkl.arc
/asdfghjkl.arm
/asdfghjkl.arm4
/asdfghjkl.arm4l
/asdfghjkl.arm4t
/asdfghjkl.arm4tl
/asdfghjkl.arm4tll
/asdfghjkl.arm5
/asdfghjkl.arm5l
/asdfghjkl.arm5n
/asdfghjkl.arm6
/asdfghjkl.arm64
/asdfghjkl.arm6l
/asdfghjkl.arm7
/asdfghjkl.arm7l
/asdfghjkl.arm8
/asdfghjkl.armv4
/asdfghjkl.armv4l
/asdfghjkl.armv5l
/asdfghjkl.armv6
/asdfghjkl.armv61
/asdfghjkl.armv6l
/asdfghjkl.armv7l
/asdfghjkl.dbg
/asdfghjkl.exploit
/asdfghjkl.i4
/asdfghjkl.i486
/asdfghjkl.i586
/asdfghjkl.i6
/asdfghjkl.i686
/asdfghjkl.kill
/asdfghjkl.m68
/asdfghjkl.m68k
/asdfghjkl.mips
/asdfghjkl.mips64
/asdfghjkl.mipsel
/asdfghjkl.mpsl
/asdfghjkl.pcc
/asdfghjkl.powerpc
/asdfghjkl.powerpc-440fp
/asdfghjkl.powerppc
/asdfghjkl.ppc
/asdfghjkl.ppc2
/asdfghjkl.ppc440
/asdfghjkl.ppc440fp
/asdfghjkl.root
/asdfghjkl.root32
/asdfghjkl.sh
/asdfghjkl.sh4
/asdfghjkl.sparc
/asdfghjkl.spc
/asdfghjkl.ssh4
/asdfghjkl.x32
/asdfghjkl.x64
/asdfghjkl.x86
/asdfghjkl.x86_32
/asdfghjkl.x86_64
/arc.Faithful
/arm.Faithful
/arm4.Faithful
/arm4l.Faithful
/arm4t.Faithful
/arm4tl.Faithful
/arm4tll.Faithful
/arm5.Faithful
/arm5l.Faithful
/arm5n.Faithful
/arm6.Faithful
/arm64.Faithful
/arm6l.Faithful
/arm7.Faithful
/arm7l.Faithful
/arm8.Faithful
/armv4.Faithful
/armv4l.Faithful
/armv5l.Faithful
/armv6.Faithful
/armv61.Faithful
/armv6l.Faithful
/armv7l.Faithful
/dbg.Faithful
/exploit.Faithful
/i4.Faithful
/i486.Faithful
/i586.Faithful
/i6.Faithful
/i686.Faithful
/kill.Faithful
/m68.Faithful
/m68k.Faithful
/mips.Faithful
/mips64.Faithful
/mipsel.Faithful
/mpsl.Faithful
/pcc.Faithful
/powerpc-440fp.Faithful
/powerpc.Faithful
/powerppc.Faithful
/ppc.Faithful
/ppc2.Faithful
/ppc440.Faithful
/ppc440fp.Faithful
/root.Faithful
/root32.Faithful
/sh.Faithful
/sh4.Faithful
/sparc.Faithful
/spc.Faithful
/ssh4.Faithful
/x32.Faithful
/x64.Faithful
/x86.Faithful
/x86_32.Faithful
/x86_64.Faithful
/Faithful.arc
/Faithful.arm
/Faithful.arm4
/Faithful.arm4l
/Faithful.arm4t
/Faithful.arm4tl
/Faithful.arm4tll
/Faithful.arm5
/Faithful.arm5l
/Faithful.arm5n
/Faithful.arm6
/Faithful.arm64
/Faithful.arm6l
/Faithful.arm7
/Faithful.arm7l
/Faithful.arm8
/Faithful.armv4
/Faithful.armv4l
/Faithful.armv5l
/Faithful.armv6
/Faithful.armv61
/Faithful.armv6l
/Faithful.armv7l
/Faithful.dbg
/Faithful.exploit
/Faithful.i4
/Faithful.i486
/Faithful.i586
/Faithful.i6
/Faithful.i686
/Faithful.kill
/Faithful.m68
/Faithful.m68k
/Faithful.mips
/Faithful.mips64
/Faithful.mipsel
/Faithful.mpsl
/Faithful.pcc
/Faithful.powerpc
/Faithful.powerpc-440fp
/Faithful.powerppc
/Faithful.ppc
/Faithful.ppc2
/Faithful.ppc440
/Faithful.ppc440fp
/Faithful.root
/Faithful.root32
/Faithful.sh
/Faithful.sh4
/Faithful.sparc
/Faithful.spc
/Faithful.ssh4
/Faithful.x32
/Faithful.x64
/Faithful.x86
/Faithful.x86_32
/Faithful.x86_64
/arc.gucci
/arm.gucci
/arm4.gucci
/arm4l.gucci
/arm4t.gucci
/arm4tl.gucci
/arm4tll.gucci
/arm5.gucci
/arm5l.gucci
/arm5n.gucci
/arm6.gucci
/arm64.gucci
/arm6l.gucci
/arm7.gucci
/arm7l.gucci
/arm8.gucci
/armv4.gucci
/armv4l.gucci
/armv5l.gucci
/armv6.gucci
/armv61.gucci
/armv6l.gucci
/armv7l.gucci
/dbg.gucci
/exploit.gucci
/i4.gucci
/i486.gucci
/i586.gucci
/i6.gucci
/i686.gucci
/kill.gucci
/m68.gucci
/m68k.gucci
/mips.gucci
/mips64.gucci
/mipsel.gucci
/mpsl.gucci
/pcc.gucci
/powerpc-440fp.gucci
/powerpc.gucci
/powerppc.gucci
/ppc.gucci
/ppc2.gucci
/ppc440.gucci
/ppc440fp.gucci
/root.gucci
/root32.gucci
/sh.gucci
/sh4.gucci
/sparc.gucci
/spc.gucci
/ssh4.gucci
/x32.gucci
/x64.gucci
/x86.gucci
/x86_32.gucci
/x86_64.gucci
/gucci.arc
/gucci.arm
/gucci.arm4
/gucci.arm4l
/gucci.arm4t
/gucci.arm4tl
/gucci.arm4tll
/gucci.arm5
/gucci.arm5l
/gucci.arm5n
/gucci.arm6
/gucci.arm64
/gucci.arm6l
/gucci.arm7
/gucci.arm7l
/gucci.arm8
/gucci.armv4
/gucci.armv4l
/gucci.armv5l
/gucci.armv6
/gucci.armv61
/gucci.armv6l
/gucci.armv7l
/gucci.dbg
/gucci.exploit
/gucci.i4
/gucci.i486
/gucci.i586
/gucci.i6
/gucci.i686
/gucci.kill
/gucci.m68
/gucci.m68k
/gucci.mips
/gucci.mips64
/gucci.mipsel
/gucci.mpsl
/gucci.pcc
/gucci.powerpc
/gucci.powerpc-440fp
/gucci.powerppc
/gucci.ppc
/gucci.ppc2
/gucci.ppc440
/gucci.ppc440fp
/gucci.root
/gucci.root32
/gucci.sh
/gucci.sh4
/gucci.sparc
/gucci.spc
/gucci.ssh4
/gucci.x32
/gucci.x64
/gucci.x86
/gucci.x86_32
/gucci.x86_64
/arc.whoareyou
/arm.whoareyou
/arm4.whoareyou
/arm4l.whoareyou
/arm4t.whoareyou
/arm4tl.whoareyou
/arm4tll.whoareyou
/arm5.whoareyou
/arm5l.whoareyou
/arm5n.whoareyou
/arm6.whoareyou
/arm64.whoareyou
/arm6l.whoareyou
/arm7.whoareyou
/arm7l.whoareyou
/arm8.whoareyou
/armv4.whoareyou
/armv4l.whoareyou
/armv5l.whoareyou
/armv6.whoareyou
/armv61.whoareyou
/armv6l.whoareyou
/armv7l.whoareyou
/dbg.whoareyou
/exploit.whoareyou
/i4.whoareyou
/i486.whoareyou
/i586.whoareyou
/i6.whoareyou
/i686.whoareyou
/kill.whoareyou
/m68.whoareyou
/m68k.whoareyou
/mips.whoareyou
/mips64.whoareyou
/mipsel.whoareyou
/mpsl.whoareyou
/pcc.whoareyou
/powerpc-440fp.whoareyou
/powerpc.whoareyou
/powerppc.whoareyou
/ppc.whoareyou
/ppc2.whoareyou
/ppc440.whoareyou
/ppc440fp.whoareyou
/root.whoareyou
/root32.whoareyou
/sh.whoareyou
/sh4.whoareyou
/sparc.whoareyou
/spc.whoareyou
/ssh4.whoareyou
/x32.whoareyou
/x64.whoareyou
/x86.whoareyou
/x86_32.whoareyou
/x86_64.whoareyou
/whoareyou.arc
/whoareyou.arm
/whoareyou.arm4
/whoareyou.arm4l
/whoareyou.arm4t
/whoareyou.arm4tl
/whoareyou.arm4tll
/whoareyou.arm5
/whoareyou.arm5l
/whoareyou.arm5n
/whoareyou.arm6
/whoareyou.arm64
/whoareyou.arm6l
/whoareyou.arm7
/whoareyou.arm7l
/whoareyou.arm8
/whoareyou.armv4
/whoareyou.armv4l
/whoareyou.armv5l
/whoareyou.armv6
/whoareyou.armv61
/whoareyou.armv6l
/whoareyou.armv7l
/whoareyou.dbg
/whoareyou.exploit
/whoareyou.i4
/whoareyou.i486
/whoareyou.i586
/whoareyou.i6
/whoareyou.i686
/whoareyou.kill
/whoareyou.m68
/whoareyou.m68k
/whoareyou.mips
/whoareyou.mips64
/whoareyou.mipsel
/whoareyou.mpsl
/whoareyou.pcc
/whoareyou.powerpc
/whoareyou.powerpc-440fp
/whoareyou.powerppc
/whoareyou.ppc
/whoareyou.ppc2
/whoareyou.ppc440
/whoareyou.ppc440fp
/whoareyou.root
/whoareyou.root32
/whoareyou.sh
/whoareyou.sh4
/whoareyou.sparc
/whoareyou.spc
/whoareyou.ssh4
/whoareyou.x32
/whoareyou.x64
/whoareyou.x86
/whoareyou.x86_32
/whoareyou.x86_64
/arc.malware
/arm.malware
/arm4.malware
/arm4l.malware
/arm4t.malware
/arm4tl.malware
/arm4tll.malware
/arm5.malware
/arm5l.malware
/arm5n.malware
/arm6.malware
/arm64.malware
/arm6l.malware
/arm7.malware
/arm7l.malware
/arm8.malware
/armv4.malware
/armv4l.malware
/armv5l.malware
/armv6.malware
/armv61.malware
/armv6l.malware
/armv7l.malware
/dbg.malware
/exploit.malware
/i4.malware
/i486.malware
/i586.malware
/i6.malware
/i686.malware
/kill.malware
/m68.malware
/m68k.malware
/mips.malware
/mips64.malware
/mipsel.malware
/mpsl.malware
/pcc.malware
/powerpc-440fp.malware
/powerpc.malware
/powerppc.malware
/ppc.malware
/ppc2.malware
/ppc440.malware
/ppc440fp.malware
/root.malware
/root32.malware
/sh.malware
/sh4.malware
/sparc.malware
/spc.malware
/ssh4.malware
/x32.malware
/x64.malware
/x86.malware
/x86_32.malware
/x86_64.malware
/malware.arc
/malware.arm
/malware.arm4
/malware.arm4l
/malware.arm4t
/malware.arm4tl
/malware.arm4tll
/malware.arm5
/malware.arm5l
/malware.arm5n
/malware.arm6
/malware.arm64
/malware.arm6l
/malware.arm7
/malware.arm7l
/malware.arm8
/malware.armv4
/malware.armv4l
/malware.armv5l
/malware.armv6
/malware.armv61
/malware.armv6l
/malware.armv7l
/malware.dbg
/malware.exploit
/malware.i4
/malware.i486
/malware.i586
/malware.i6
/malware.i686
/malware.kill
/malware.m68
/malware.m68k
/malware.mips
/malware.mips64
/malware.mipsel
/malware.mpsl
/malware.pcc
/malware.powerpc
/malware.powerpc-440fp
/malware.powerppc
/malware.ppc
/malware.ppc2
/malware.ppc440
/malware.ppc440fp
/malware.root
/malware.root32
/malware.sh
/malware.sh4
/malware.sparc
/malware.spc
/malware.ssh4
/malware.x32
/malware.x64
/malware.x86
/malware.x86_32
/malware.x86_64
/AB4g5/
/ABCDEFGHIJKLMNOPQRSTUVWXYZ/
/awiotiwhiogoihahogahoi/
/beastmode/
/dirdir000/
/Faith_Bins/
/kc-botnet/
/lmaoWTF/

# Reference: https://twitter.com/bad_packets/status/1251993553238032384

/arc.more
/arm.more
/arm4.more
/arm4l.more
/arm4t.more
/arm4tl.more
/arm4tll.more
/arm5.more
/arm5l.more
/arm5n.more
/arm6.more
/arm64.more
/arm6l.more
/arm7.more
/arm7l.more
/arm8.more
/armv4.more
/armv4l.more
/armv5l.more
/armv6.more
/armv61.more
/armv6l.more
/armv7l.more
/dbg.more
/exploit.more
/i4.more
/i486.more
/i586.more
/i6.more
/i686.more
/kill.more
/m68.more
/m68k.more
/mips.more
/mips64.more
/mipsel.more
/mpsl.more
/pcc.more
/powerpc-440fp.more
/powerpc.more
/powerppc.more
/ppc.more
/ppc2.more
/ppc440.more
/ppc440fp.more
/root.more
/root32.more
/sh.more
/sh4.more
/sparc.more
/spc.more
/ssh4.more
/x32.more
/x64.more
/x86.more
/x86_32.more
/x86_64.more
/more.arc
/more.arm
/more.arm4
/more.arm4l
/more.arm4t
/more.arm4tl
/more.arm4tll
/more.arm5
/more.arm5l
/more.arm5n
/more.arm6
/more.arm64
/more.arm6l
/more.arm7
/more.arm7l
/more.arm8
/more.armv4
/more.armv4l
/more.armv5l
/more.armv6
/more.armv61
/more.armv6l
/more.armv7l
/more.dbg
/more.exploit
/more.i4
/more.i486
/more.i586
/more.i6
/more.i686
/more.kill
/more.m68
/more.m68k
/more.mips
/more.mips64
/more.mipsel
/more.mpsl
/more.pcc
/more.powerpc
/more.powerpc-440fp
/more.powerppc
/more.ppc
/more.ppc2
/more.ppc440
/more.ppc440fp
/more.root
/more.root32
/more.sh
/more.sh4
/more.sparc
/more.spc
/more.ssh4
/more.x32
/more.x64
/more.x86
/more.x86_32
/more.x86_64

# Reference: https://twitter.com/JayTHL/status/1252236963857354760

/Pandoras_Box/
/zehir/
/botz
/arc.anarchy
/arm.anarchy
/arm4.anarchy
/arm4l.anarchy
/arm4t.anarchy
/arm4tl.anarchy
/arm4tll.anarchy
/arm5.anarchy
/arm5l.anarchy
/arm5n.anarchy
/arm6.anarchy
/arm64.anarchy
/arm6l.anarchy
/arm7.anarchy
/arm7l.anarchy
/arm8.anarchy
/armv4.anarchy
/armv4l.anarchy
/armv5l.anarchy
/armv6.anarchy
/armv61.anarchy
/armv6l.anarchy
/armv7l.anarchy
/dbg.anarchy
/exploit.anarchy
/i4.anarchy
/i486.anarchy
/i586.anarchy
/i6.anarchy
/i686.anarchy
/kill.anarchy
/m68.anarchy
/m68k.anarchy
/mips.anarchy
/mips64.anarchy
/mipsel.anarchy
/mpsl.anarchy
/pcc.anarchy
/powerpc-440fp.anarchy
/powerpc.anarchy
/powerppc.anarchy
/ppc.anarchy
/ppc2.anarchy
/ppc440.anarchy
/ppc440fp.anarchy
/root.anarchy
/root32.anarchy
/sh.anarchy
/sh4.anarchy
/sparc.anarchy
/spc.anarchy
/ssh4.anarchy
/x32.anarchy
/x64.anarchy
/x86.anarchy
/x86_32.anarchy
/x86_64.anarchy
/anarchy.arc
/anarchy.arm
/anarchy.arm4
/anarchy.arm4l
/anarchy.arm4t
/anarchy.arm4tl
/anarchy.arm4tll
/anarchy.arm5
/anarchy.arm5l
/anarchy.arm5n
/anarchy.arm6
/anarchy.arm64
/anarchy.arm6l
/anarchy.arm7
/anarchy.arm7l
/anarchy.arm8
/anarchy.armv4
/anarchy.armv4l
/anarchy.armv5l
/anarchy.armv6
/anarchy.armv61
/anarchy.armv6l
/anarchy.armv7l
/anarchy.dbg
/anarchy.exploit
/anarchy.i4
/anarchy.i486
/anarchy.i586
/anarchy.i6
/anarchy.i686
/anarchy.kill
/anarchy.m68
/anarchy.m68k
/anarchy.mips
/anarchy.mips64
/anarchy.mipsel
/anarchy.mpsl
/anarchy.pcc
/anarchy.powerpc
/anarchy.powerpc-440fp
/anarchy.powerppc
/anarchy.ppc
/anarchy.ppc2
/anarchy.ppc440
/anarchy.ppc440fp
/anarchy.root
/anarchy.root32
/anarchy.sh
/anarchy.sh4
/anarchy.sparc
/anarchy.spc
/anarchy.ssh4
/anarchy.x32
/anarchy.x64
/anarchy.x86
/anarchy.x86_32
/anarchy.x86_64
/arc.leon
/arm.leon
/arm4.leon
/arm4l.leon
/arm4t.leon
/arm4tl.leon
/arm4tll.leon
/arm5.leon
/arm5l.leon
/arm5n.leon
/arm6.leon
/arm64.leon
/arm6l.leon
/arm7.leon
/arm7l.leon
/arm8.leon
/armv4.leon
/armv4l.leon
/armv5l.leon
/armv6.leon
/armv61.leon
/armv6l.leon
/armv7l.leon
/dbg.leon
/exploit.leon
/i4.leon
/i486.leon
/i586.leon
/i6.leon
/i686.leon
/kill.leon
/m68.leon
/m68k.leon
/mips.leon
/mips64.leon
/mipsel.leon
/mpsl.leon
/pcc.leon
/powerpc-440fp.leon
/powerpc.leon
/powerppc.leon
/ppc.leon
/ppc2.leon
/ppc440.leon
/ppc440fp.leon
/root.leon
/root32.leon
/sh.leon
/sh4.leon
/sparc.leon
/spc.leon
/ssh4.leon
/x32.leon
/x64.leon
/x86.leon
/x86_32.leon
/x86_64.leon
/leon.arc
/leon.arm
/leon.arm4
/leon.arm4l
/leon.arm4t
/leon.arm4tl
/leon.arm4tll
/leon.arm5
/leon.arm5l
/leon.arm5n
/leon.arm6
/leon.arm64
/leon.arm6l
/leon.arm7
/leon.arm7l
/leon.arm8
/leon.armv4
/leon.armv4l
/leon.armv5l
/leon.armv6
/leon.armv61
/leon.armv6l
/leon.armv7l
/leon.dbg
/leon.exploit
/leon.i4
/leon.i486
/leon.i586
/leon.i6
/leon.i686
/leon.kill
/leon.m68
/leon.m68k
/leon.mips
/leon.mips64
/leon.mipsel
/leon.mpsl
/leon.pcc
/leon.powerpc
/leon.powerpc-440fp
/leon.powerppc
/leon.ppc
/leon.ppc2
/leon.ppc440
/leon.ppc440fp
/leon.root
/leon.root32
/leon.sh
/leon.sh4
/leon.sparc
/leon.spc
/leon.ssh4
/leon.x32
/leon.x64
/leon.x86
/leon.x86_32
/leon.x86_64
/arc.systemUpdate
/arm.systemUpdate
/arm4.systemUpdate
/arm4l.systemUpdate
/arm4t.systemUpdate
/arm4tl.systemUpdate
/arm4tll.systemUpdate
/arm5.systemUpdate
/arm5l.systemUpdate
/arm5n.systemUpdate
/arm6.systemUpdate
/arm64.systemUpdate
/arm6l.systemUpdate
/arm7.systemUpdate
/arm7l.systemUpdate
/arm8.systemUpdate
/armv4.systemUpdate
/armv4l.systemUpdate
/armv5l.systemUpdate
/armv6.systemUpdate
/armv61.systemUpdate
/armv6l.systemUpdate
/armv7l.systemUpdate
/dbg.systemUpdate
/exploit.systemUpdate
/i4.systemUpdate
/i486.systemUpdate
/i586.systemUpdate
/i6.systemUpdate
/i686.systemUpdate
/kill.systemUpdate
/m68.systemUpdate
/m68k.systemUpdate
/mips.systemUpdate
/mips64.systemUpdate
/mipsel.systemUpdate
/mpsl.systemUpdate
/pcc.systemUpdate
/powerpc-440fp.systemUpdate
/powerpc.systemUpdate
/powerppc.systemUpdate
/ppc.systemUpdate
/ppc2.systemUpdate
/ppc440.systemUpdate
/ppc440fp.systemUpdate
/root.systemUpdate
/root32.systemUpdate
/sh.systemUpdate
/sh4.systemUpdate
/sparc.systemUpdate
/spc.systemUpdate
/ssh4.systemUpdate
/x32.systemUpdate
/x64.systemUpdate
/x86.systemUpdate
/x86_32.systemUpdate
/x86_64.systemUpdate
/systemUpdate.arc
/systemUpdate.arm
/systemUpdate.arm4
/systemUpdate.arm4l
/systemUpdate.arm4t
/systemUpdate.arm4tl
/systemUpdate.arm4tll
/systemUpdate.arm5
/systemUpdate.arm5l
/systemUpdate.arm5n
/systemUpdate.arm6
/systemUpdate.arm64
/systemUpdate.arm6l
/systemUpdate.arm7
/systemUpdate.arm7l
/systemUpdate.arm8
/systemUpdate.armv4
/systemUpdate.armv4l
/systemUpdate.armv5l
/systemUpdate.armv6
/systemUpdate.armv61
/systemUpdate.armv6l
/systemUpdate.armv7l
/systemUpdate.dbg
/systemUpdate.exploit
/systemUpdate.i4
/systemUpdate.i486
/systemUpdate.i586
/systemUpdate.i6
/systemUpdate.i686
/systemUpdate.kill
/systemUpdate.m68
/systemUpdate.m68k
/systemUpdate.mips
/systemUpdate.mips64
/systemUpdate.mipsel
/systemUpdate.mpsl
/systemUpdate.pcc
/systemUpdate.powerpc
/systemUpdate.powerpc-440fp
/systemUpdate.powerppc
/systemUpdate.ppc
/systemUpdate.ppc2
/systemUpdate.ppc440
/systemUpdate.ppc440fp
/systemUpdate.root
/systemUpdate.root32
/systemUpdate.sh
/systemUpdate.sh4
/systemUpdate.sparc
/systemUpdate.spc
/systemUpdate.ssh4
/systemUpdate.x32
/systemUpdate.x64
/systemUpdate.x86
/systemUpdate.x86_32
/systemUpdate.x86_64

# Reference: https://twitter.com/0xrb/status/1252309205425385474

/arc.Slsmodsd
/arm.Slsmodsd
/arm4.Slsmodsd
/arm4l.Slsmodsd
/arm4t.Slsmodsd
/arm4tl.Slsmodsd
/arm4tll.Slsmodsd
/arm5.Slsmodsd
/arm5l.Slsmodsd
/arm5n.Slsmodsd
/arm6.Slsmodsd
/arm64.Slsmodsd
/arm6l.Slsmodsd
/arm7.Slsmodsd
/arm7l.Slsmodsd
/arm8.Slsmodsd
/armv4.Slsmodsd
/armv4l.Slsmodsd
/armv5l.Slsmodsd
/armv6.Slsmodsd
/armv61.Slsmodsd
/armv6l.Slsmodsd
/armv7l.Slsmodsd
/dbg.Slsmodsd
/exploit.Slsmodsd
/i4.Slsmodsd
/i486.Slsmodsd
/i586.Slsmodsd
/i6.Slsmodsd
/i686.Slsmodsd
/kill.Slsmodsd
/m68.Slsmodsd
/m68k.Slsmodsd
/mips.Slsmodsd
/mips64.Slsmodsd
/mipsel.Slsmodsd
/mpsl.Slsmodsd
/pcc.Slsmodsd
/powerpc-440fp.Slsmodsd
/powerpc.Slsmodsd
/powerppc.Slsmodsd
/ppc.Slsmodsd
/ppc2.Slsmodsd
/ppc440.Slsmodsd
/ppc440fp.Slsmodsd
/root.Slsmodsd
/root32.Slsmodsd
/sh.Slsmodsd
/sh4.Slsmodsd
/sparc.Slsmodsd
/spc.Slsmodsd
/ssh4.Slsmodsd
/x32.Slsmodsd
/x64.Slsmodsd
/x86.Slsmodsd
/x86_32.Slsmodsd
/x86_64.Slsmodsd
/Slsmodsd.arc
/Slsmodsd.arm
/Slsmodsd.arm4
/Slsmodsd.arm4l
/Slsmodsd.arm4t
/Slsmodsd.arm4tl
/Slsmodsd.arm4tll
/Slsmodsd.arm5
/Slsmodsd.arm5l
/Slsmodsd.arm5n
/Slsmodsd.arm6
/Slsmodsd.arm64
/Slsmodsd.arm6l
/Slsmodsd.arm7
/Slsmodsd.arm7l
/Slsmodsd.arm8
/Slsmodsd.armv4
/Slsmodsd.armv4l
/Slsmodsd.armv5l
/Slsmodsd.armv6
/Slsmodsd.armv61
/Slsmodsd.armv6l
/Slsmodsd.armv7l
/Slsmodsd.dbg
/Slsmodsd.exploit
/Slsmodsd.i4
/Slsmodsd.i486
/Slsmodsd.i586
/Slsmodsd.i6
/Slsmodsd.i686
/Slsmodsd.kill
/Slsmodsd.m68
/Slsmodsd.m68k
/Slsmodsd.mips
/Slsmodsd.mips64
/Slsmodsd.mipsel
/Slsmodsd.mpsl
/Slsmodsd.pcc
/Slsmodsd.powerpc
/Slsmodsd.powerpc-440fp
/Slsmodsd.powerppc
/Slsmodsd.ppc
/Slsmodsd.ppc2
/Slsmodsd.ppc440
/Slsmodsd.ppc440fp
/Slsmodsd.root
/Slsmodsd.root32
/Slsmodsd.sh
/Slsmodsd.sh4
/Slsmodsd.sparc
/Slsmodsd.spc
/Slsmodsd.ssh4
/Slsmodsd.x32
/Slsmodsd.x64
/Slsmodsd.x86
/Slsmodsd.x86_32
/Slsmodsd.x86_64

# Reference: https://blog.netlab.360.com/the-leethozer-botnet-en/

37.49.226.171:31337
vbrxmrhrjnnouvjf.onion
w6gr2jqz3eag4ksi.onion

# Reference: https://www.virustotal.com/gui/file/ab0c24ce177af3f88944cad61048f6e441910dfab6d40fee8eabb4dc55de0661/detection

25.10.6.20:5555
25.10.6.20:54618
proxy.2u0apcm6ylhdy7s.com

# Reference: https://www.virustotal.com/gui/file/c9821c9f4277a4e35e20d794a7342d68033c1935bc0b6671f9a637a05604012e/detection

73.135.244.56:5555

# Reference: https://www.virustotal.com/gui/file/6d21a2269fdde733b4051e423af38b4d79cbe98aff518a2c0da2f17e7a315259/detection

100.206.219.177:5555
122.68.148.220:54618
122.68.148.220:5555

# Reference: https://www.virustotal.com/gui/file/cbbef96f21fc3673ec09415284720532e92f938f06211237ac727b15942c0125/detection

102.123.21.72:54618
102.123.21.72:5555
119.66.216.173:5555

# Reference: https://twitter.com/0xrb/status/1254829660573057026

192.236.161.6:1312

# Reference: https://twitter.com/bad_packets/status/1255216622605946883
# Reference: https://twitter.com/bad_packets/status/1261458827049762818

45.14.151.249:1920
45.14.151.249:3099
45.14.151.249:9090

# Reference: https://twitter.com/bad_packets/status/1227484002921041922

37.49.226.137:9375
37.49.226.137:39284

# Reference: https://twitter.com/bad_packets/status/1215763198688681984

68.183.219.115:28194
68.183.219.115:52921
/arc.IpvLye
/arm.IpvLye
/arm4.IpvLye
/arm4l.IpvLye
/arm4t.IpvLye
/arm4tl.IpvLye
/arm4tll.IpvLye
/arm5.IpvLye
/arm5l.IpvLye
/arm5n.IpvLye
/arm6.IpvLye
/arm64.IpvLye
/arm6l.IpvLye
/arm7.IpvLye
/arm7l.IpvLye
/arm8.IpvLye
/armv4.IpvLye
/armv4l.IpvLye
/armv5l.IpvLye
/armv6.IpvLye
/armv61.IpvLye
/armv6l.IpvLye
/armv7l.IpvLye
/dbg.IpvLye
/exploit.IpvLye
/i4.IpvLye
/i486.IpvLye
/i586.IpvLye
/i6.IpvLye
/i686.IpvLye
/kill.IpvLye
/m68.IpvLye
/m68k.IpvLye
/mips.IpvLye
/mips64.IpvLye
/mipsel.IpvLye
/mpsl.IpvLye
/pcc.IpvLye
/powerpc-440fp.IpvLye
/powerpc.IpvLye
/powerppc.IpvLye
/ppc.IpvLye
/ppc2.IpvLye
/ppc440.IpvLye
/ppc440fp.IpvLye
/root.IpvLye
/root32.IpvLye
/sh.IpvLye
/sh4.IpvLye
/sparc.IpvLye
/spc.IpvLye
/ssh4.IpvLye
/x32.IpvLye
/x64.IpvLye
/x86.IpvLye
/x86_32.IpvLye
/x86_64.IpvLye
/IpvLye.arc
/IpvLye.arm
/IpvLye.arm4
/IpvLye.arm4l
/IpvLye.arm4t
/IpvLye.arm4tl
/IpvLye.arm4tll
/IpvLye.arm5
/IpvLye.arm5l
/IpvLye.arm5n
/IpvLye.arm6
/IpvLye.arm64
/IpvLye.arm6l
/IpvLye.arm7
/IpvLye.arm7l
/IpvLye.arm8
/IpvLye.armv4
/IpvLye.armv4l
/IpvLye.armv5l
/IpvLye.armv6
/IpvLye.armv61
/IpvLye.armv6l
/IpvLye.armv7l
/IpvLye.dbg
/IpvLye.exploit
/IpvLye.i4
/IpvLye.i486
/IpvLye.i586
/IpvLye.i6
/IpvLye.i686
/IpvLye.kill
/IpvLye.m68
/IpvLye.m68k
/IpvLye.mips
/IpvLye.mips64
/IpvLye.mipsel
/IpvLye.mpsl
/IpvLye.pcc
/IpvLye.powerpc
/IpvLye.powerpc-440fp
/IpvLye.powerppc
/IpvLye.ppc
/IpvLye.ppc2
/IpvLye.ppc440
/IpvLye.ppc440fp
/IpvLye.root
/IpvLye.root32
/IpvLye.sh
/IpvLye.sh4
/IpvLye.sparc
/IpvLye.spc
/IpvLye.ssh4
/IpvLye.x32
/IpvLye.x64
/IpvLye.x86
/IpvLye.x86_32
/IpvLye.x86_64
/QpasYU/

# Reference: https://twitter.com/bad_packets/status/1210334931924086784

104.168.149.5:2001

# Reference: https://twitter.com/bad_packets/status/1180361965564121088

85.204.116.49:131
85.204.116.49:3143
prismware.ml

# Reference: https://twitter.com/bad_packets/status/1176352901746180101

45.95.168.161:26662
45.95.168.161:46664
45.95.168.161:56378

# Reference: https://www.virustotal.com/gui/ip-address/188.209.52.11/relations

namecheap-webmail.com
tgqbfcmfphxyq.xyz

# Reference: https://twitter.com/bad_packets/status/1166229707446050817

142.11.217.116:5301

# Reference: https://twitter.com/bad_packets/status/1155600305540587521

51.91.202.137:9999

# Reference: https://twitter.com/bad_packets/status/1154260530061725696

185.172.110.203:1024

# Reference: https://twitter.com/bad_packets/status/1154125599755005952

67.205.169.73:1791

# Reference: https://twitter.com/bad_packets/status/1153120432117055489

185.244.25.134:1791

# Reference: https://twitter.com/bad_packets/status/1152032061407940608

46.246.38.178:1791

# Reference: https://twitter.com/bad_packets/status/1151381642008649728

192.236.162.197:1791

# Reference: https://twitter.com/bad_packets/status/1147447606156517377

188.166.87.227:5301

# Reference: https://twitter.com/bad_packets/status/1146926925929074689

128.199.235.119:81

# Reference: https://twitter.com/0xrb/status/1257277263025893377

192.236.146.53:1691
211.137.225.76:53007
/arc.typpaostur
/arm.typpaostur
/arm4.typpaostur
/arm4l.typpaostur
/arm4t.typpaostur
/arm4tl.typpaostur
/arm4tll.typpaostur
/armv4.typpaostur
/armv4l.typpaostur
/arm5.typpaostur
/arm5l.typpaostur
/arm5n.typpaostur
/armv5l.typpaostur
/arm6.typpaostur
/arm6l.typpaostur
/armv6.typpaostur
/armv6l.typpaostur
/armv61.typpaostur
/arm64.typpaostur
/arm7.typpaostur
/arm7l.typpaostur
/armv7l.typpaostur
/arm8.typpaostur
/dbg.typpaostur
/exploit.typpaostur
/i4.typpaostur
/i6.typpaostur
/i486.typpaostur
/i586.typpaostur
/i686.typpaostur
/kill.typpaostur
/m68.typpaostur
/m68k.typpaostur
/mips.typpaostur
/mips64.typpaostur
/mpsl.typpaostur
/mipsel.typpaostur
/pcc.typpaostur
/ppc.typpaostur
/ppc2.typpaostur
/ppc440.typpaostur
/ppc440fp.typpaostur
/powerpc.typpaostur
/powerppc.typpaostur
/powerpc-440fp.typpaostur
/root.typpaostur
/root32.typpaostur
/sh.typpaostur
/sh4.typpaostur
/ssh4.typpaostur
/spc.typpaostur
/sparc.typpaostur
/x32.typpaostur
/x64.typpaostur
/x86.typpaostur
/x86_32.typpaostur
/x86_64.typpaostur
/typpaostur.arc
/typpaostur.arm
/typpaostur.arm4
/typpaostur.arm4l
/typpaostur.arm4t
/typpaostur.arm4tl
/typpaostur.arm4tll
/typpaostur.armv4
/typpaostur.armv4l
/typpaostur.arm5
/typpaostur.arm5l
/typpaostur.arm5n
/typpaostur.armv5l
/typpaostur.arm6
/typpaostur.arm6l
/typpaostur.arm64
/typpaostur.armv6
/typpaostur.armv6l
/typpaostur.armv61
/typpaostur.arm7
/typpaostur.arm7l
/typpaostur.armv7l
/typpaostur.arm8
/typpaostur.dbg
/typpaostur.exploit
/typpaostur.i4
/typpaostur.i6
/typpaostur.i486
/typpaostur.i586
/typpaostur.i686
/typpaostur.kill
/typpaostur.m68
/typpaostur.m68k
/typpaostur.mips
/typpaostur.mips64
/typpaostur.mpsl
/typpaostur.mipsel
/typpaostur.pcc
/typpaostur.ppc
/typpaostur.ppc2
/typpaostur.ppc440
/typpaostur.ppc440fp
/typpaostur.powerpc
/typpaostur.powerppc
/typpaostur.powerpc-440fp
/typpaostur.root
/typpaostur.root32
/typpaostur.sh
/typpaostur.sh4
/typpaostur.ssh4
/typpaostur.spc
/typpaostur.sparc
/typpaostur.x32
/typpaostur.x64
/typpaostur.x86
/typpaostur.x86_32
/typpaostur.x86_64
/as12a0s/
/itooamgay/
/swrgiuhguhwrguiwetu/

# Reference: https://twitter.com/DGAFeedAlerts/status/1257372531046191104

euviovpeqqsu.support

# Reference: https://twitter.com/DGAFeedAlerts/status/1257538858469769219

efuwlkmirpie.online

# Reference: https://twitter.com/mjbv/status/1261228371817771008
# Reference: https://www.virustotal.com/gui/domain/saoascnc.duckdns.org/relations

192.236.176.143:37215
192.236.176.143:58666
saoascnc.duckdns.org

# Reference: https://www.virustotal.com/gui/file/b9b8a824168f96e9fbfb2d92d41d2704b0f413e5a0df637b026ec171e31694a8/detection

193.237.151.237:37215
193.237.151.237:58666

# Reference: https://www.virustotal.com/gui/file/9b62e40d0770e573eb1771d52a64ed471a9c7677f4cb4011ca6091f30f4fb038/detection

50.134.108.219:37215
50.134.108.219:58666

# Reference: https://www.virustotal.com/gui/file/7bdfe25eb983ea5d13d871c690369579b94d8615ed580ba55f0c9d07b1419916/detection 

217.32.184.17:37215
217.32.184.17:58666

# Reference: https://www.virustotal.com/gui/file/6b92ce27889a1c8caf02d61a5da9257159697cfb344f901392ef914d5d1e3228/detection

197.20.252.14:37215
197.20.252.14:58666

# Reference: https://www.virustotal.com/gui/file/e79fc3d76876524e94de9cf8090907abbb9e395aa401a9a1ed93d63200a774fd/detection

197.211.215.168:37215
197.211.215.168:58666

# Reference: https://www.virustotal.com/gui/file/d22c8793c00d104d397432a39168189a8bdedda97b6ad90f69f66dd90cc02b6f/detection

2.128.139.158:37215
2.128.139.158:58666

# Reference: https://www.virustotal.com/gui/file/bf9d9015640514ed85af83520ffa2c905626c5c15af7a7944a595916fd6d8f83/detection

124.142.175.62:37215
124.142.175.62:58666

# Reference: https://www.virustotal.com/gui/file/8c8c54043812936a13f0da1bed7fca295b98a8a88f525c98fed2c0d473064b25/detection

17.134.222.250:37215
17.134.222.250:58666

# Reference: https://www.virustotal.com/gui/file/3bc59c90a798255164669130b81019ca2726a244c30b103459709918a2dc732e/detection

142.123.244.201:37215
142.123.244.201:58666

# Reference: https://www.virustotal.com/gui/file/2c52ad0196da9dc8d484d81203bce5a85bda26868a8c810cf0e09a31cd1202b7/detection

88.181.145.203:37215
88.181.145.203:58666

# Reference: https://www.virustotal.com/gui/file/89fbdce685a0a6d63babb59339dbff0be68830e5b5b77a6221d6f4fd9a12a8dc/detection

197.220.4.203:37215
197.220.4.203:58666

# Reference: https://www.virustotal.com/gui/file/0d2d5f494b8a0f4f52923a962d23d90f19fbe82ec3020ff088862a79f54e3ef4/detection

75.216.182.106:37215
75.216.182.106:58666

# Reference: https://www.virustotal.com/gui/file/40154d33b36d2ee884f989cf70dcdbcdafd06a023bb013851eb36e9a543bae2d/detection

197.187.43.242:37215
197.187.43.242:58666

# Reference: https://www.virustotal.com/gui/file/e4abca3958055aa76f3337bdb56b6f7ac50cb24ca5f290068092f275a4da7487/detection

161.116.77.158:37215
161.116.77.158:58666

# Reference: https://www.virustotal.com/gui/file/7882e58a07cd61e9686cd69552a5021dfe7ccd3c4e5c162bc817da99cd715487/detection

136.162.221.196:37215
136.162.221.196:58666

# Reference: https://www.virustotal.com/gui/file/a61ef7d749e3d91b91d32fd4ba73dc675cccc3bacd1c153d1a1432ee78a580aa/detection

197.200.75.82:37215
197.200.75.82:58666

# Reference: https://www.virustotal.com/gui/file/e533fddd1278c8cfadaa39fe98e7ac6ff00d9ecdc979ecee27bc4c9feb95f5bd/detection

20.214.186.199:37215
20.214.186.199:58666

# Reference: https://www.virustotal.com/gui/file/fcf0871f70c5652ff6914fff74cbc8d851151230dfdfd03055010b46b5e630e5/detection

197.17.185.59:37215
197.17.185.59:58666

# Reference: https://www.virustotal.com/gui/file/7708a88aab442710759513b2e3297a93447aea770e3a6a8757517e81ba5af5d1/detection

125.42.85.48:37215
125.42.85.48:58666

# Reference: https://www.virustotal.com/gui/file/5a2563debdaeb62a18aadbc1d78f9dccc8111716d76bd8b9f95444702c75424b/detection

197.45.1.102:37215
197.45.1.102:58666

# Reference: https://www.virustotal.com/gui/file/21ab3b17239c6b152eee79ab8be1fadc140dee85887102d67b6ebb9c2109c9c1/detection

197.125.173.78:37215
197.125.173.78:58666

# Reference: https://www.virustotal.com/gui/file/ebf7bd700fb100a14a5893363ce703ad745a546c872eaf986c016eea843d1ee2/detection

209.168.243.134:37215
209.168.243.134:58666

# Reference: https://www.virustotal.com/gui/file/fce06b359367298a7e708ddd39a8ad210901438898aa06c877e23613aee00ac2/detection

201.112.67.184:37215
201.112.67.184:58666

# Reference: https://www.virustotal.com/gui/file/f76d76dc1857dbae93a59c30c3132b92f0acced1ecc8bf497463d095f1b55fc1/detection

197.142.15.17:37215
197.142.15.17:58666

# Reference: https://www.virustotal.com/gui/file/9466a43a53257f7df2e1b918353d54db9e1c1e6a2a38ba8016436529bd7744dc/detection

197.209.36.175:37215
197.209.36.175:58666

# Reference: https://www.virustotal.com/gui/file/3d5b2e46a11898537ac51c8c03aec50350119ebcfebf1e92868b007c2c8c3636/detection

59.169.193.112:37215
59.169.193.112:58666

# Reference: https://www.virustotal.com/gui/file/90caa6e2dd1307672bc462d9183d30fee42b566e870fd8928679c872d9c4414e/detection

117.113.251.250:37215
117.113.251.250:58666

# Reference: https://twitter.com/mjbv/status/1261382403341250560
# Reference: https://www.virustotal.com/gui/ip-address/185.158.249.80/relations

185.158.249.80:61214
/arc.reap
/arm.reap
/arm4.reap
/arm4l.reap
/arm4t.reap
/arm4tl.reap
/arm4tll.reap
/arm5.reap
/arm5l.reap
/arm5n.reap
/arm6.reap
/arm64.reap
/arm6l.reap
/arm7.reap
/arm7l.reap
/arm8.reap
/armv4.reap
/armv4l.reap
/armv5l.reap
/armv6.reap
/armv61.reap
/armv6l.reap
/armv7l.reap
/dbg.reap
/exploit.reap
/i4.reap
/i486.reap
/i586.reap
/i6.reap
/i686.reap
/kill.reap
/m68.reap
/m68k.reap
/mips.reap
/mips64.reap
/mipsel.reap
/mpsl.reap
/pcc.reap
/powerpc-440fp.reap
/powerpc.reap
/powerppc.reap
/ppc.reap
/ppc2.reap
/ppc440.reap
/ppc440fp.reap
/root.reap
/root32.reap
/sh.reap
/sh4.reap
/sparc.reap
/spc.reap
/ssh4.reap
/x32.reap
/x64.reap
/x86.reap
/x86_32.reap
/x86_64.reap
/reap.arc
/reap.arm
/reap.arm4
/reap.arm4l
/reap.arm4t
/reap.arm4tl
/reap.arm4tll
/reap.arm5
/reap.arm5l
/reap.arm5n
/reap.arm6
/reap.arm64
/reap.arm6l
/reap.arm7
/reap.arm7l
/reap.arm8
/reap.armv4
/reap.armv4l
/reap.armv5l
/reap.armv6
/reap.armv61
/reap.armv6l
/reap.armv7l
/reap.dbg
/reap.exploit
/reap.i4
/reap.i486
/reap.i586
/reap.i6
/reap.i686
/reap.kill
/reap.m68
/reap.m68k
/reap.mips
/reap.mips64
/reap.mipsel
/reap.mpsl
/reap.pcc
/reap.powerpc
/reap.powerpc-440fp
/reap.powerppc
/reap.ppc
/reap.ppc2
/reap.ppc440
/reap.ppc440fp
/reap.root
/reap.root32
/reap.sh
/reap.sh4
/reap.sparc
/reap.spc
/reap.ssh4
/reap.x32
/reap.x64
/reap.x86
/reap.x86_32
/reap.x86_64

# Reference: https://twitter.com/mjbv/status/1261732399748198401

45.95.168.175:58666

# Reference: https://twitter.com/mjbv/status/1262411907430076416

64.227.57.139:1791

# Reference: https://twitter.com/mjbv/status/1262419353586348033

194.147.34.79:9993

# Reference: https://twitter.com/DGAFeedAlerts/status/1262447515921723395

wowldwtcpowb.tech

# Reference: https://twitter.com/0xrb/status/1262738213472317442

/arc.infn
/arm.infn
/arm4.infn
/arm4l.infn
/arm4t.infn
/arm4tl.infn
/arm4tll.infn
/arm5.infn
/arm5l.infn
/arm5n.infn
/arm6.infn
/arm64.infn
/arm6l.infn
/arm7.infn
/arm7l.infn
/arm8.infn
/armv4.infn
/armv4l.infn
/armv5l.infn
/armv6.infn
/armv61.infn
/armv6l.infn
/armv7l.infn
/dbg.infn
/exploit.infn
/i4.infn
/i486.infn
/i586.infn
/i6.infn
/i686.infn
/kill.infn
/m68.infn
/m68k.infn
/mips.infn
/mips64.infn
/mipsel.infn
/mpsl.infn
/pcc.infn
/powerpc-440fp.infn
/powerpc.infn
/powerppc.infn
/ppc.infn
/ppc2.infn
/ppc440.infn
/ppc440fp.infn
/root.infn
/root32.infn
/sh.infn
/sh4.infn
/sparc.infn
/spc.infn
/ssh4.infn
/x32.infn
/x64.infn
/x86.infn
/x86_32.infn
/x86_64.infn
/infn.arc
/infn.arm
/infn.arm4
/infn.arm4l
/infn.arm4t
/infn.arm4tl
/infn.arm4tll
/infn.arm5
/infn.arm5l
/infn.arm5n
/infn.arm6
/infn.arm64
/infn.arm6l
/infn.arm7
/infn.arm7l
/infn.arm8
/infn.armv4
/infn.armv4l
/infn.armv5l
/infn.armv6
/infn.armv61
/infn.armv6l
/infn.armv7l
/infn.dbg
/infn.exploit
/infn.i4
/infn.i486
/infn.i586
/infn.i6
/infn.i686
/infn.kill
/infn.m68
/infn.m68k
/infn.mips
/infn.mips64
/infn.mipsel
/infn.mpsl
/infn.pcc
/infn.powerpc
/infn.powerpc-440fp
/infn.powerppc
/infn.ppc
/infn.ppc2
/infn.ppc440
/infn.ppc440fp
/infn.root
/infn.root32
/infn.sh
/infn.sh4
/infn.sparc
/infn.spc
/infn.ssh4
/infn.x32
/infn.x64
/infn.x86
/infn.x86_32
/infn.x86_64
/5311qjmikurawepedalnqmashrabotatuk61119123c/
/GbotTelnet/
/HORNY1/

# Reference: https://twitter.com/mjbv/status/1263144457265872897

45.14.224.204:34241

# Reference: https://pastebin.com/hLYWkUcD

15.164.214.61:8888
/arc.110v3107n37
/arm.110v3107n37
/arm4.110v3107n37
/arm4l.110v3107n37
/arm4t.110v3107n37
/arm4tl.110v3107n37
/arm4tll.110v3107n37
/arm5.110v3107n37
/arm5l.110v3107n37
/arm5n.110v3107n37
/arm6.110v3107n37
/arm64.110v3107n37
/arm6l.110v3107n37
/arm7.110v3107n37
/arm7l.110v3107n37
/arm8.110v3107n37
/armv4.110v3107n37
/armv4l.110v3107n37
/armv5l.110v3107n37
/armv6.110v3107n37
/armv61.110v3107n37
/armv6l.110v3107n37
/armv7l.110v3107n37
/dbg.110v3107n37
/exploit.110v3107n37
/i4.110v3107n37
/i486.110v3107n37
/i586.110v3107n37
/i6.110v3107n37
/i686.110v3107n37
/kill.110v3107n37
/m68.110v3107n37
/m68k.110v3107n37
/mips.110v3107n37
/mips64.110v3107n37
/mipsel.110v3107n37
/mpsl.110v3107n37
/pcc.110v3107n37
/powerpc-440fp.110v3107n37
/powerpc.110v3107n37
/powerppc.110v3107n37
/ppc.110v3107n37
/ppc2.110v3107n37
/ppc440.110v3107n37
/ppc440fp.110v3107n37
/root.110v3107n37
/root32.110v3107n37
/sh.110v3107n37
/sh4.110v3107n37
/sparc.110v3107n37
/spc.110v3107n37
/ssh4.110v3107n37
/x32.110v3107n37
/x64.110v3107n37
/x86.110v3107n37
/x86_32.110v3107n37
/x86_64.110v3107n37
/110v3107n37.arc
/110v3107n37.arm
/110v3107n37.arm4
/110v3107n37.arm4l
/110v3107n37.arm4t
/110v3107n37.arm4tl
/110v3107n37.arm4tll
/110v3107n37.arm5
/110v3107n37.arm5l
/110v3107n37.arm5n
/110v3107n37.arm6
/110v3107n37.arm64
/110v3107n37.arm6l
/110v3107n37.arm7
/110v3107n37.arm7l
/110v3107n37.arm8
/110v3107n37.armv4
/110v3107n37.armv4l
/110v3107n37.armv5l
/110v3107n37.armv6
/110v3107n37.armv61
/110v3107n37.armv6l
/110v3107n37.armv7l
/110v3107n37.dbg
/110v3107n37.exploit
/110v3107n37.i4
/110v3107n37.i486
/110v3107n37.i586
/110v3107n37.i6
/110v3107n37.i686
/110v3107n37.kill
/110v3107n37.m68
/110v3107n37.m68k
/110v3107n37.mips
/110v3107n37.mips64
/110v3107n37.mipsel
/110v3107n37.mpsl
/110v3107n37.pcc
/110v3107n37.powerpc
/110v3107n37.powerpc-440fp
/110v3107n37.powerppc
/110v3107n37.ppc
/110v3107n37.ppc2
/110v3107n37.ppc440
/110v3107n37.ppc440fp
/110v3107n37.root
/110v3107n37.root32
/110v3107n37.sh
/110v3107n37.sh4
/110v3107n37.sparc
/110v3107n37.spc
/110v3107n37.ssh4
/110v3107n37.x32
/110v3107n37.x64
/110v3107n37.x86
/110v3107n37.x86_32
/110v3107n37.x86_64
/arc.limit
/arm.limit
/arm4.limit
/arm4l.limit
/arm4t.limit
/arm4tl.limit
/arm4tll.limit
/arm5.limit
/arm5l.limit
/arm5n.limit
/arm6.limit
/arm64.limit
/arm6l.limit
/arm7.limit
/arm7l.limit
/arm8.limit
/armv4.limit
/armv4l.limit
/armv5l.limit
/armv6.limit
/armv61.limit
/armv6l.limit
/armv7l.limit
/dbg.limit
/exploit.limit
/i4.limit
/i486.limit
/i586.limit
/i6.limit
/i686.limit
/kill.limit
/m68.limit
/m68k.limit
/mips.limit
/mips64.limit
/mipsel.limit
/mpsl.limit
/pcc.limit
/powerpc-440fp.limit
/powerpc.limit
/powerppc.limit
/ppc.limit
/ppc2.limit
/ppc440.limit
/ppc440fp.limit
/root.limit
/root32.limit
/sh.limit
/sh4.limit
/sparc.limit
/spc.limit
/ssh4.limit
/x32.limit
/x64.limit
/x86.limit
/x86_32.limit
/x86_64.limit
/limit.arc
/limit.arm
/limit.arm4
/limit.arm4l
/limit.arm4t
/limit.arm4tl
/limit.arm4tll
/limit.arm5
/limit.arm5l
/limit.arm5n
/limit.arm6
/limit.arm64
/limit.arm6l
/limit.arm7
/limit.arm7l
/limit.arm8
/limit.armv4
/limit.armv4l
/limit.armv5l
/limit.armv6
/limit.armv61
/limit.armv6l
/limit.armv7l
/limit.dbg
/limit.exploit
/limit.i4
/limit.i486
/limit.i586
/limit.i6
/limit.i686
/limit.kill
/limit.m68
/limit.m68k
/limit.mips
/limit.mips64
/limit.mipsel
/limit.mpsl
/limit.pcc
/limit.powerpc
/limit.powerpc-440fp
/limit.powerppc
/limit.ppc
/limit.ppc2
/limit.ppc440
/limit.ppc440fp
/limit.root
/limit.root32
/limit.sh
/limit.sh4
/limit.sparc
/limit.spc
/limit.ssh4
/limit.x32
/limit.x64
/limit.x86
/limit.x86_32
/limit.x86_64
/iotbins/

# Reference: https://pastebin.com/raw/pcwTAeFY

/arc.Tnxl
/arm.Tnxl
/arm4.Tnxl
/arm4l.Tnxl
/arm4t.Tnxl
/arm4tl.Tnxl
/arm4tll.Tnxl
/arm5.Tnxl
/arm5l.Tnxl
/arm5n.Tnxl
/arm6.Tnxl
/arm64.Tnxl
/arm6l.Tnxl
/arm7.Tnxl
/arm7l.Tnxl
/arm8.Tnxl
/armv4.Tnxl
/armv4l.Tnxl
/armv5l.Tnxl
/armv6.Tnxl
/armv61.Tnxl
/armv6l.Tnxl
/armv7l.Tnxl
/dbg.Tnxl
/exploit.Tnxl
/i4.Tnxl
/i486.Tnxl
/i586.Tnxl
/i6.Tnxl
/i686.Tnxl
/kill.Tnxl
/m68.Tnxl
/m68k.Tnxl
/mips.Tnxl
/mips64.Tnxl
/mipsel.Tnxl
/mpsl.Tnxl
/pcc.Tnxl
/powerpc-440fp.Tnxl
/powerpc.Tnxl
/powerppc.Tnxl
/ppc.Tnxl
/ppc2.Tnxl
/ppc440.Tnxl
/ppc440fp.Tnxl
/root.Tnxl
/root32.Tnxl
/sh.Tnxl
/sh4.Tnxl
/sparc.Tnxl
/spc.Tnxl
/ssh4.Tnxl
/x32.Tnxl
/x64.Tnxl
/x86.Tnxl
/x86_32.Tnxl
/x86_64.Tnxl
/Tnxl.arc
/Tnxl.arm
/Tnxl.arm4
/Tnxl.arm4l
/Tnxl.arm4t
/Tnxl.arm4tl
/Tnxl.arm4tll
/Tnxl.arm5
/Tnxl.arm5l
/Tnxl.arm5n
/Tnxl.arm6
/Tnxl.arm64
/Tnxl.arm6l
/Tnxl.arm7
/Tnxl.arm7l
/Tnxl.arm8
/Tnxl.armv4
/Tnxl.armv4l
/Tnxl.armv5l
/Tnxl.armv6
/Tnxl.armv61
/Tnxl.armv6l
/Tnxl.armv7l
/Tnxl.dbg
/Tnxl.exploit
/Tnxl.i4
/Tnxl.i486
/Tnxl.i586
/Tnxl.i6
/Tnxl.i686
/Tnxl.kill
/Tnxl.m68
/Tnxl.m68k
/Tnxl.mips
/Tnxl.mips64
/Tnxl.mipsel
/Tnxl.mpsl
/Tnxl.pcc
/Tnxl.powerpc
/Tnxl.powerpc-440fp
/Tnxl.powerppc
/Tnxl.ppc
/Tnxl.ppc2
/Tnxl.ppc440
/Tnxl.ppc440fp
/Tnxl.root
/Tnxl.root32
/Tnxl.sh
/Tnxl.sh4
/Tnxl.sparc
/Tnxl.spc
/Tnxl.ssh4
/Tnxl.x32
/Tnxl.x64
/Tnxl.x86
/Tnxl.x86_32
/Tnxl.x86_64
/Tnxl_Bins/

# Reference: https://twitter.com/bad_packets/status/1263934728912146432

138.197.144.166:23
138.197.144.166:666

# Reference: https://twitter.com/0xrb/status/1268100424449396738
# Reference: https://pastebin.com/N9ncvY5L

27.122.56.147:8888
/0x1x1x1x21212121.arc
/0x1x1x1x21212121.arm
/0x1x1x1x21212121.arm4
/0x1x1x1x21212121.arm4l
/0x1x1x1x21212121.arm4t
/0x1x1x1x21212121.arm4tl
/0x1x1x1x21212121.arm4tll
/0x1x1x1x21212121.arm5
/0x1x1x1x21212121.arm5l
/0x1x1x1x21212121.arm5n
/0x1x1x1x21212121.arm6
/0x1x1x1x21212121.arm64
/0x1x1x1x21212121.arm6l
/0x1x1x1x21212121.arm7
/0x1x1x1x21212121.arm7l
/0x1x1x1x21212121.arm8
/0x1x1x1x21212121.armv4
/0x1x1x1x21212121.armv4l
/0x1x1x1x21212121.armv5l
/0x1x1x1x21212121.armv6
/0x1x1x1x21212121.armv61
/0x1x1x1x21212121.armv6l
/0x1x1x1x21212121.armv7l
/0x1x1x1x21212121.dbg
/0x1x1x1x21212121.exploit
/0x1x1x1x21212121.i4
/0x1x1x1x21212121.i486
/0x1x1x1x21212121.i586
/0x1x1x1x21212121.i6
/0x1x1x1x21212121.i686
/0x1x1x1x21212121.kill
/0x1x1x1x21212121.m68
/0x1x1x1x21212121.m68k
/0x1x1x1x21212121.mips
/0x1x1x1x21212121.mips64
/0x1x1x1x21212121.mipsel
/0x1x1x1x21212121.mpsl
/0x1x1x1x21212121.pcc
/0x1x1x1x21212121.powerpc
/0x1x1x1x21212121.powerpc-440fp
/0x1x1x1x21212121.powerppc
/0x1x1x1x21212121.ppc
/0x1x1x1x21212121.ppc2
/0x1x1x1x21212121.ppc440
/0x1x1x1x21212121.ppc440fp
/0x1x1x1x21212121.root
/0x1x1x1x21212121.root32
/0x1x1x1x21212121.sh
/0x1x1x1x21212121.sh4
/0x1x1x1x21212121.sparc
/0x1x1x1x21212121.spc
/0x1x1x1x21212121.ssh4
/0x1x1x1x21212121.x32
/0x1x1x1x21212121.x64
/0x1x1x1x21212121.x86
/0x1x1x1x21212121.x86_32
/0x1x1x1x21212121.x86_64
/g0dlike.arc
/g0dlike.arm
/g0dlike.arm4
/g0dlike.arm4l
/g0dlike.arm4t
/g0dlike.arm4tl
/g0dlike.arm4tll
/g0dlike.arm5
/g0dlike.arm5l
/g0dlike.arm5n
/g0dlike.arm6
/g0dlike.arm64
/g0dlike.arm6l
/g0dlike.arm7
/g0dlike.arm7l
/g0dlike.arm8
/g0dlike.armv4
/g0dlike.armv4l
/g0dlike.armv5l
/g0dlike.armv6
/g0dlike.armv61
/g0dlike.armv6l
/g0dlike.armv7l
/g0dlike.dbg
/g0dlike.exploit
/g0dlike.i4
/g0dlike.i486
/g0dlike.i586
/g0dlike.i6
/g0dlike.i686
/g0dlike.kill
/g0dlike.m68
/g0dlike.m68k
/g0dlike.mips
/g0dlike.mips64
/g0dlike.mipsel
/g0dlike.mpsl
/g0dlike.pcc
/g0dlike.powerpc
/g0dlike.powerpc-440fp
/g0dlike.powerppc
/g0dlike.ppc
/g0dlike.ppc2
/g0dlike.ppc440
/g0dlike.ppc440fp
/g0dlike.root
/g0dlike.root32
/g0dlike.sh
/g0dlike.sh4
/g0dlike.sparc
/g0dlike.spc
/g0dlike.ssh4
/g0dlike.x32
/g0dlike.x64
/g0dlike.x86
/g0dlike.x86_32
/g0dlike.x86_64
/sa0asbins.arc
/sa0asbins.arm
/sa0asbins.arm4
/sa0asbins.arm4l
/sa0asbins.arm4t
/sa0asbins.arm4tl
/sa0asbins.arm4tll
/sa0asbins.arm5
/sa0asbins.arm5l
/sa0asbins.arm5n
/sa0asbins.arm6
/sa0asbins.arm64
/sa0asbins.arm6l
/sa0asbins.arm7
/sa0asbins.arm7l
/sa0asbins.arm8
/sa0asbins.armv4
/sa0asbins.armv4l
/sa0asbins.armv5l
/sa0asbins.armv6
/sa0asbins.armv61
/sa0asbins.armv6l
/sa0asbins.armv7l
/sa0asbins.dbg
/sa0asbins.exploit
/sa0asbins.i4
/sa0asbins.i486
/sa0asbins.i586
/sa0asbins.i6
/sa0asbins.i686
/sa0asbins.kill
/sa0asbins.m68
/sa0asbins.m68k
/sa0asbins.mips
/sa0asbins.mips64
/sa0asbins.mipsel
/sa0asbins.mpsl
/sa0asbins.pcc
/sa0asbins.powerpc
/sa0asbins.powerpc-440fp
/sa0asbins.powerppc
/sa0asbins.ppc
/sa0asbins.ppc2
/sa0asbins.ppc440
/sa0asbins.ppc440fp
/sa0asbins.root
/sa0asbins.root32
/sa0asbins.sh
/sa0asbins.sh4
/sa0asbins.sparc
/sa0asbins.spc
/sa0asbins.ssh4
/sa0asbins.x32
/sa0asbins.x64
/sa0asbins.x86
/sa0asbins.x86_32
/sa0asbins.x86_64
/testingSVR88292.arc
/testingSVR88292.arm
/testingSVR88292.arm4
/testingSVR88292.arm4l
/testingSVR88292.arm4t
/testingSVR88292.arm4tl
/testingSVR88292.arm4tll
/testingSVR88292.arm5
/testingSVR88292.arm5l
/testingSVR88292.arm5n
/testingSVR88292.arm6
/testingSVR88292.arm64
/testingSVR88292.arm6l
/testingSVR88292.arm7
/testingSVR88292.arm7l
/testingSVR88292.arm8
/testingSVR88292.armv4
/testingSVR88292.armv4l
/testingSVR88292.armv5l
/testingSVR88292.armv6
/testingSVR88292.armv61
/testingSVR88292.armv6l
/testingSVR88292.armv7l
/testingSVR88292.dbg
/testingSVR88292.exploit
/testingSVR88292.i4
/testingSVR88292.i486
/testingSVR88292.i586
/testingSVR88292.i6
/testingSVR88292.i686
/testingSVR88292.kill
/testingSVR88292.m68
/testingSVR88292.m68k
/testingSVR88292.mips
/testingSVR88292.mips64
/testingSVR88292.mipsel
/testingSVR88292.mpsl
/testingSVR88292.pcc
/testingSVR88292.powerpc
/testingSVR88292.powerpc-440fp
/testingSVR88292.powerppc
/testingSVR88292.ppc
/testingSVR88292.ppc2
/testingSVR88292.ppc440
/testingSVR88292.ppc440fp
/testingSVR88292.root
/testingSVR88292.root32
/testingSVR88292.sh
/testingSVR88292.sh4
/testingSVR88292.sparc
/testingSVR88292.spc
/testingSVR88292.ssh4
/testingSVR88292.x32
/testingSVR88292.x64
/testingSVR88292.x86
/testingSVR88292.x86_32
/testingSVR88292.x86_64
/000jaknet000/
/n_Bins/

# Reference: https://github.com/unixfreaxjp/malwaremustdie/blob/master/etc/IoTBotnetISPAbuse202005.md

/GGWP.sh
/Irisbins.sh
/Joker.sh
/Pemex.sh
/SnOoPy.sh
/g0away.sh
/kyelbins.sh
/nasubins.sh
/oofbins.sh
/sensi.sh
/shoxbins.sh
/sora.sh
/vsUerS.sh
/yebins.sh
/yoyobins.sh

# Reference: https://twitter.com/tolisec/status/1269948415724736515
# Reference: https://pastebin.com/DpeMCgrL

172.245.8.9:3884
37.49.224.209:5959
45.143.220.246:1027
45.95.168.156:45
45.95.169.1:5959

# Reference: https://twitter.com/bad_packets/status/1270789161012744192

85.204.116.87:131
85.204.116.87:16850

# Reference: https://twitter.com/bad_packets/status/1266125300888297473

94.102.63.52:9102

# Reference: https://twitter.com/bad_packets/status/1271153910841925633

37.49.224.183:50821
37.49.224.183:58666

# Reference: https://twitter.com/VessOnSecurity/status/1271184863283077120

/CentralIntelligenceAgency.arc
/CentralIntelligenceAgency.arm
/CentralIntelligenceAgency.arm4
/CentralIntelligenceAgency.arm4l
/CentralIntelligenceAgency.arm4t
/CentralIntelligenceAgency.arm4tl
/CentralIntelligenceAgency.arm4tll
/CentralIntelligenceAgency.arm5
/CentralIntelligenceAgency.arm5l
/CentralIntelligenceAgency.arm5n
/CentralIntelligenceAgency.arm6
/CentralIntelligenceAgency.arm64
/CentralIntelligenceAgency.arm6l
/CentralIntelligenceAgency.arm7
/CentralIntelligenceAgency.arm7l
/CentralIntelligenceAgency.arm8
/CentralIntelligenceAgency.armv4
/CentralIntelligenceAgency.armv4l
/CentralIntelligenceAgency.armv5l
/CentralIntelligenceAgency.armv6
/CentralIntelligenceAgency.armv61
/CentralIntelligenceAgency.armv6l
/CentralIntelligenceAgency.armv7l
/CentralIntelligenceAgency.dbg
/CentralIntelligenceAgency.exploit
/CentralIntelligenceAgency.i4
/CentralIntelligenceAgency.i486
/CentralIntelligenceAgency.i586
/CentralIntelligenceAgency.i6
/CentralIntelligenceAgency.i686
/CentralIntelligenceAgency.kill
/CentralIntelligenceAgency.m68
/CentralIntelligenceAgency.m68k
/CentralIntelligenceAgency.mips
/CentralIntelligenceAgency.mips64
/CentralIntelligenceAgency.mipsel
/CentralIntelligenceAgency.mpsl
/CentralIntelligenceAgency.pcc
/CentralIntelligenceAgency.powerpc
/CentralIntelligenceAgency.powerpc-440fp
/CentralIntelligenceAgency.powerppc
/CentralIntelligenceAgency.ppc
/CentralIntelligenceAgency.ppc2
/CentralIntelligenceAgency.ppc440
/CentralIntelligenceAgency.ppc440fp
/CentralIntelligenceAgency.root
/CentralIntelligenceAgency.root32
/CentralIntelligenceAgency.sh
/CentralIntelligenceAgency.sh4
/CentralIntelligenceAgency.sparc
/CentralIntelligenceAgency.spc
/CentralIntelligenceAgency.ssh4
/CentralIntelligenceAgency.x32
/CentralIntelligenceAgency.x64
/CentralIntelligenceAgency.x86
/CentralIntelligenceAgency.x86_32
/CentralIntelligenceAgency.x86_64

# Reference: https://twitter.com/hypoweb/status/1272939520443346944
# Reference: https://www.virustotal.com/gui/domain/qweqwe.com/relations

qweqwe.com

# Reference: https://urlhaus.abuse.ch/url/392907/

/Meth.arc
/Meth.arm
/Meth.arm4
/Meth.arm4l
/Meth.arm4t
/Meth.arm4tl
/Meth.arm4tll
/Meth.arm5
/Meth.arm5l
/Meth.arm5n
/Meth.arm6
/Meth.arm64
/Meth.arm6l
/Meth.arm7
/Meth.arm7l
/Meth.arm8
/Meth.armv4
/Meth.armv4l
/Meth.armv5l
/Meth.armv6
/Meth.armv61
/Meth.armv6l
/Meth.armv7l
/Meth.dbg
/Meth.exploit
/Meth.i4
/Meth.i486
/Meth.i586
/Meth.i6
/Meth.i686
/Meth.kill
/Meth.m68
/Meth.m68k
/Meth.mips
/Meth.mips64
/Meth.mipsel
/Meth.mpsl
/Meth.pcc
/Meth.powerpc
/Meth.powerpc-440fp
/Meth.powerppc
/Meth.ppc
/Meth.ppc2
/Meth.ppc440
/Meth.ppc440fp
/Meth.root
/Meth.root32
/Meth.sh
/Meth.sh4
/Meth.sparc
/Meth.spc
/Meth.ssh4
/Meth.x32
/Meth.x64
/Meth.x86
/Meth.x86_32
/Meth.x86_64
/YaO2uFOvUG8LV1y5NY1aCHmr1WdBLjcjiVD6aRRAWDL6oNY29J88y0nrXxaHBmTLEYC9yB56gBn95pco8kCbldVsHmjNQk8JTaC/

# Reference: https://urlhaus.abuse.ch/url/392839/

/M3tH.arc
/M3tH.arm
/M3tH.arm4
/M3tH.arm4l
/M3tH.arm4t
/M3tH.arm4tl
/M3tH.arm4tll
/M3tH.arm5
/M3tH.arm5l
/M3tH.arm5n
/M3tH.arm6
/M3tH.arm64
/M3tH.arm6l
/M3tH.arm7
/M3tH.arm7l
/M3tH.arm8
/M3tH.armv4
/M3tH.armv4l
/M3tH.armv5l
/M3tH.armv6
/M3tH.armv61
/M3tH.armv6l
/M3tH.armv7l
/M3tH.dbg
/M3tH.exploit
/M3tH.i4
/M3tH.i486
/M3tH.i586
/M3tH.i6
/M3tH.i686
/M3tH.kill
/M3tH.m68
/M3tH.m68k
/M3tH.mips
/M3tH.mips64
/M3tH.mipsel
/M3tH.mpsl
/M3tH.pcc
/M3tH.powerpc
/M3tH.powerpc-440fp
/M3tH.powerppc
/M3tH.ppc
/M3tH.ppc2
/M3tH.ppc440
/M3tH.ppc440fp
/M3tH.root
/M3tH.root32
/M3tH.sh
/M3tH.sh4
/M3tH.sparc
/M3tH.spc
/M3tH.ssh4
/M3tH.x32
/M3tH.x64
/M3tH.x86
/M3tH.x86_32
/M3tH.x86_64
/sa0UGVOZIpAoQTtcR1KLEkN2x/

# Reference: https://twitter.com/0xrb/status/1273495537912692738

104.168.143.15:1312

# Reference: https://www.f5.com/labs/articles/threat-intelligence/mirai-is-attacking-again-so-were-outing-its-hilarious-explicit-c-c-hostnames

0x01.nexusiotsolutions.net
0x01.preload.su
0x90.bid
1eryxnva.glibc.org
aced.ga
air.sinushost.biz
akuma.pw
alhctuyy.tk
asapvpns.club
aspectleaks.xyz
back.uu8889.com
bakiiszwart.tk
base.monello.tk
bbase.monello.tk
bc.nexusiotsolutions.net
bcnc.changeme.com
bfrxznyisbestie.ml
bfyfa.fun
bhromofreah.top
bigboats.club
bigboatz.us
bkush.ml
blacklister.nl
bloodwars.ws
blueandsausesfries.us
bnexusiotsolutions.net
boat.racoon.ml
boatnet.xyz
booters.ml
botnet.remaiten.org
botnetsale.tk
bounty.bigbotpein.ru
bscotsa.pw
c.nexusiotsolutions.net
ccc.snicker.ir
central.glibc.org
cmdmirai.tk
cn.uvgczsuidrtg.com
cnbot.space
cnc.bigbandsinmyvault.tk
cnc.bigbotpein.ru
cnc.changeme.com
cnc.linux.lol
cnc.mirai.com
cnc.nutsz.club
cnc.skidsec.org
cnc.smokemethallday.tk
cnc.spamtech.win
cnc.teammalefic.pw
cnc.tonguepunchfartbox.life
cnc.urgay.cf
cnc.vdskge7as.xyz
cnc.voxlobid.tk
cnc111.ml
cncbot.cnbot.space
cncbot.ddns.net
conwangg.de
cool.kingdomplugin.nl
coolxr.info
cottoncandyloverscute.website
crazyclothes.store
d.hi8520.com
dankstresser.tk
dannyexe.xyz
ddosattacks.tk
deathlives.ddns.net
dportsmirai.tk
dssgasrea.club
eccc.bulletpool.ru
ertwer.vdskge7as.xyz
fFvFVcnc.changeme.com
featured.cf
fedtraps.cf
frost.botnet.hackedfiles.pw
frxznyisbestie.ml
ftp.xenonbooter.xyz
fucktzoh.xyz
fyfa.fun
gammaboat.us
gangsters.cf
ghoststresser.pw
gndfgdd.club
gnikllort.com
gotdns.ch
gotnulled.ga
greekhelios21.tk
happyf33t.nl
harikatha.com
hello.bigpuller.cf
hoaxnet.ddns.net
horsecocked.4horsemen.pw
hotelcasa.nl
hromofreah.top
ikbensupercool.nl
iktufopjou.nl
infecteverywhere.online
int.aerx.io
internetgangster.tk
internetpolice.ga
internetpolice.ml
internetpolice.tk
iotmirai.tk
isalinux.intercomonline.com
kagbe.nl
kingdomplugin.nl
kormirai.ddns.net
kringelstan.net
kush.ml
leakedfiles.org
legendarysprx.pw
linux.lol
linuxsecuritys.com
lol.godlynet.cf
lol665.tk
lolzsecsshittymirai.tk
majikku.us
mirai.com
miraibotnet.eu
miraibotnet.ml
miraibotnet.online
miraihoneypot.tk
mirainet.ml
mirainet.tk
mm.haxornah.top
moanmybins.ml
modems.pw
monello.tk
myacerusername.hopto.org
mymiraiserver.hopto.org
mypawnshop.men
nageboorte.ga
naotogoyamamcc.asuscomm.com
net.nageboorte.nl
neuvostoliitto.ml
neuvostoliitto.tk
newel.se
nexusaquariums.ir
nexusiotsolutions.net
nnn.shenron.pw
nullserversmirai.tk
nutsz.club
offlineservers.tk
online.upmirai.club
onyxreppingoat.cf
powa.daddyhackingteam.com
power4you.ddns.net
predoxing.tk
purgeblood.duckdns.org
puti.csgo
putintrump.cf
putintrump.tk
pvpcloud.us
pyfulthag0d.pw
q5f2k0evy7go2rax9m4g.ru
reppin.tk
rofl.leakvortex.pro
rootyi.site
runscape.cf
rw595phpt4kk538s.botanik.gq
s0.3eu.ru
santasbigcandycane.cx
sbnmcd.org
scotsa.pw
sepinsftw.tk
serveranywhere.cf
serveranywhere.ga
serversrus.club
sevenp.top
skidsec.org
smithre.top
smokemethallday.tk
snicker.ir
spamtech.win
ssh.gammaboat.us
swatnetiphone.tk
swatnetsucks.tk
swinginwithme.ru
swizzthegod.us
teammalefic.pw
test.cnc
thebigbadbotnet.tk
thonder.club
tonguepunchfartbox.life
totalbooter.us
trapboat.club
truepower.club
unix.tk
upfiles.online
urgay.cf
uryjsdrfg.club
vap3.ddns.net
vdskge7as.xyz
voxlobid.tk
wheresmirai.tk
winter.winterboot.net
yzykar.ddns.net
zammanaakis.link
zetastress.net

# Reference: https://www.virusbulletin.com/virusbulletin/2018/12/vb2018-paper-tracking-mirai-variants/

aandy.cf
aandy.xyz
askjasghasg.ru
cnc.aandy.xyz
cnc.ttoww.com

# Reference: https://twitter.com/huiwangeth/status/1275650252947800065
# Reference: https://www.virustotal.com/gui/file/f60b29cfb7eab3aeb391f46e94d4d8efadde5498583a2f5c71bd8212d8ae92da/detection

/fetch.arc
/fetch.arm
/fetch.arm4
/fetch.arm4l
/fetch.arm4t
/fetch.arm4tl
/fetch.arm4tll
/fetch.arm5
/fetch.arm5l
/fetch.arm5n
/fetch.arm6
/fetch.arm64
/fetch.arm6l
/fetch.arm7
/fetch.arm7l
/fetch.arm8
/fetch.armv4
/fetch.armv4l
/fetch.armv5l
/fetch.armv6
/fetch.armv61
/fetch.armv6l
/fetch.armv7l
/fetch.dbg
/fetch.exploit
/fetch.i4
/fetch.i486
/fetch.i586
/fetch.i6
/fetch.i686
/fetch.kill
/fetch.m68
/fetch.m68k
/fetch.mips
/fetch.mips64
/fetch.mipsel
/fetch.mpsl
/fetch.pcc
/fetch.powerpc
/fetch.powerpc-440fp
/fetch.powerppc
/fetch.ppc
/fetch.ppc2
/fetch.ppc440
/fetch.ppc440fp
/fetch.root
/fetch.root32
/fetch.sh
/fetch.sh4
/fetch.sparc
/fetch.spc
/fetch.ssh4
/fetch.x32
/fetch.x64
/fetch.x86
/fetch.x86_32
/fetch.x86_64
dotheneedfull.xyz
